diff --git a/pretemplate/25-bdd-init b/pretemplate/25-bdd-init
new file mode 100644
index 0000000..3af3f19
--- /dev/null
+++ b/pretemplate/25-bdd-init
@@ -0,0 +1,35 @@
+#!/bin/bash
+
+#
+# Initialize root password
+# and secure MariaDB installation
+#
+
+function genPasswordToFile()
+{
+	local file=${1}
+	pwgen -1 10 > ${file}
+	chmod 600 ${file}
+}
+
+WRITERFILE="/root/.bddadm"
+SECURE_CMD="mysql_secure_installation"
+
+
+[[ -e ${WRITERFILE} ]] && exit 0
+
+genPasswordToFile ${WRITERFILE}
+
+pass=$(< ${WRITERFILE})
+
+# Run secure installation script
+${SECURE_CMD} <<__EOF__
+
+y
+${pass}
+${pass}
+y
+y
+y
+y
+__EOF__