diff --git a/iso/airootfs/etc/default/useradd b/iso/airootfs/etc/default/useradd
new file mode 100644
index 0000000..f16b7d8
--- /dev/null
+++ b/iso/airootfs/etc/default/useradd
@@ -0,0 +1,7 @@
+SHELL=/usr/bin/zsh
+GROUP=users
+HOME=/home
+INACTIVE=-1
+EXPIRE=
+SKEL=/etc/skel
+CREATE_MAIL_SPOOL=no
diff --git a/iso/airootfs/usr/local/bin/bos-live-setup b/iso/airootfs/usr/local/bin/bos-live-setup
index 0fbe5bd..32a83f6 100644
--- a/iso/airootfs/usr/local/bin/bos-live-setup
+++ b/iso/airootfs/usr/local/bin/bos-live-setup
@@ -11,7 +11,7 @@ set -e
 # (breadd + breadbar + breadbox + keybinds) — proper live-media functionality,
 # not an installer kiosk.
 if ! id liveuser &>/dev/null; then
-    useradd -m -s /bin/bash liveuser
+    useradd -m -s /usr/bin/zsh liveuser
     for g in wheel video input audio storage power; do
         getent group "$g" >/dev/null 2>&1 && gpasswd -a liveuser "$g" >/dev/null || true
     done