subiquity does not warn me about weak passwords

Does our d-i path really do this? I thought it didn't but can't really
remember.

Is there code I can steal for this?

On 9 October 2017 at 08:25, Steve Langasek <email address hidden>
wrote:

> Public bug reported:
>
> All other install paths will warn you if you select a weak password for
> the first user at install time (e.g., 'ubuntu'). Subiquity does not.
> We should be consistent here.
>
> ** Affects: subiquity
> Importance: Undecided
> Status: New
>
> --
> You received this bug notification because you are subscribed to
> subiquity.
> https://bugs.launchpad.net/bugs/1722113
>
> Title:
> subiquity does not warn me about weak passwords
>
> To manage notifications about this bug go to:
> https://bugs.launchpad.net/subiquity/+bug/1722113/+subscriptions
>

The only check d-i seems to perform is objecting to a password of less than 8 characters, it's totally happy with a password of '12345678'. Suspect ubiquity is a better inspiration. Would also like to talk to someone about how to design this.

FWIW, the code ubiquity uses is here: https://bazaar.launchpad.net/~ubuntu-installer/ubiquity/trunk/view/head:/ubiquity/validation.py#L87

Given the amount of people who commented on this, we should probably do something about it!