Quote variables in ' not ".
Set root password during initialiser (hash on cmdline only).