demo

bundles/users/items.py

@@ -0,0 +1,19 @@
+users = {
+    'root': {
+        'password': repo.vault.password_for(f'{node.name} root password'),
+    },
+}
+
+for user, config in node.metadata['users'].items():
+    directories[f'/home/{user}'] = {
+        'owner': user,
+        'mode': '0700',
+    }
+
+    users[user] = {
+        'password': config['password'],
+        'groups': {
+            'sudo',
+        },
+        'shell': '/bin/bash',
+    }

bundles/users/metadata.py

@@ -0,0 +1,12 @@
+@metadata_reactor
+def generate_password_for_every_user(metadata):
+    users = {}
+
+    for user in metadata.get('users', {}).keys():
+        users[user] = {
+            'password': repo.vault.human_password_for(f'{node.name} user {user}'),
+        }
+
+    return {
+        'users': users,
+    }