templier-ansible/roles/root/tasks/main.yml

---
- name: Deploys root password hash
  replace:
    path: /etc/shadow
    regexp: '^root:[^:]*:'
    replace: 'root:{{ root.passwd_hash }}:'