#!/usr/bin/env bash
set -e
export DEBIAN_FRONTEND=noninteractive
export APT_LISTCHANGES_FRONTEND=none

apt install sudo -y

read -p 'New Username: ' NEWUSER
adduser --ingroup sudo $NEWUSER

pveum group add admin -comment "System Administrators"
pveum acl modify / -group admin -role Administrator
pveum user add $NEWUSER@pam
pveum user modify $NEWUSER@pam -group admin

passwd -l root

echo "The root account is now locked, user $NEWUSER may become root with sudo"