diff --git a/scripts/genrootfs.sh b/scripts/genrootfs.sh
index 77fb701c4ce..cdaeed485b7 100755
--- a/scripts/genrootfs.sh
+++ b/scripts/genrootfs.sh
@@ -40,7 +40,7 @@ ${APK:-apk} fetch --keys-dir "$keys_dir" --no-cache \
 	--repositories-file "$repositories_file" --root "$tmp" \
 	--stdout --quiet alpine-release | tar -zx -C "$tmp" etc/ usr/
 
-# make sure root login is disabled
+# disable password login but allow login with ssh keys for root
 sed -i -e 's/^root::/root:*:/' "$tmp"/etc/shadow
 
 branch=edge