In app/models/host/managed.rb:

validates :root_pass, :length => {:minimum => 8, :message => _('should be 8 characters or more')}

The length verification doesn't actually work. In host_common.rb, root_pass assignment is overridden so by the time it validates root_pass, it's already a hash (and over 8 chars).