diff --git a/tools/qemu-debian-img/.gitignore b/tools/qemu-debian-img/.gitignore
index a9d6f6b..dbe46c4 100644
--- a/tools/qemu-debian-img/.gitignore
+++ b/tools/qemu-debian-img/.gitignore
@@ -2,3 +2,4 @@
 !.gitignore
 !Dockerfile.template
 !generate-images.sh
+!setup.sh
diff --git a/tools/qemu-debian-img/setup.sh b/tools/qemu-debian-img/setup.sh
new file mode 100755
index 0000000..69cd43c
--- /dev/null
+++ b/tools/qemu-debian-img/setup.sh
@@ -0,0 +1,17 @@
+#!/bin/sh -eux
+
+TMPDIR=$1
+
+chroot $TMPDIR /bin/sh -c 'useradd -m user'
+
+sed -i 's/root:\*:/root::/' $TMPDIR/etc/shadow
+sed -i 's/user:!!:/user::/' $TMPDIR/etc/shadow
+echo auth sufficient pam_permit.so > $TMPDIR/etc/pam.d/sshd
+sed -i '/PermitEmptyPasswords/d' $TMPDIR/etc/ssh/sshd_config
+echo PermitEmptyPasswords yes >> $TMPDIR/etc/ssh/sshd_config
+sed -i '/PermitRootLogin/d' $TMPDIR/etc/ssh/sshd_config
+echo PermitRootLogin yes >> $TMPDIR/etc/ssh/sshd_config
+
+echo '#!/bin/sh' > $TMPDIR/etc/rc.local
+echo 'dhclient' >> $TMPDIR/etc/rc.local
+chmod +x $TMPDIR/etc/rc.local