setup_ssh() {
	# some lines differ here because illumos' defaults don't match debian's
	ssh-keygen -A
	sed -i 's/#PasswordAuthentication no/PasswordAuthentication yes/g' /etc/ssh/sshd_config
	sed -i 's/#PermitEmptyPasswords no/PermitEmptyPasswords yes/g' /etc/ssh/sshd_config
	sed -i 's/PermitRootLogin without-password/PermitRootLogin yes/g' /etc/ssh/sshd_config
	svcadm restart svc:/network/ssh:default
}
