Skip to content

Setup SSH in image #4

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Draft
mpfaff wants to merge 9 commits into
base: main
Choose a base branch
from
Draft

Setup SSH in image #4

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
9 commits
Select commit Hold shift + click to select a range
3c3d28a
Create authorized_keys file
mpfaff Oct 8, 2026
e3018a0
Fix permissions on /root/.ssh in build.sh
mpfaff Oct 8, 2026
e10a258
Enable sshd
mpfaff Oct 8, 2026
d5d8c1d
debugging
mpfaff Oct 8, 2026
3900658
Configure sshd
mpfaff Oct 8, 2026
e98a49a
Configure sshd to look under /etc for authorized keys
mpfaff Oct 8, 2026
41c9556
Rename system_files/root/.ssh/authorized_keys to system_files/etc/ssh…
mpfaff Oct 8, 2026
82a8bb3
Fix permissions on SSH authorized keys files in build.sh
mpfaff Oct 8, 2026
1a4051a
done debugging
mpfaff Oct 8, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 8 additions & 0 deletions build_files/build.sh
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5,6 +5,10 @@ set -ouex pipefail
# Copy the contents of system_files/ of the git repo to /
cp -avf "/ctx/system_files"/. /

# Fix permissions on SSH authorized keys files
chmod 755 /etc/ssh/authorized_keys
chmod 644 /etc/ssh/authorized_keys/root

### Install packages

dnf5 install -y alacritty fish greetd helix niri
Expand All @@ -22,6 +26,10 @@ dnf5 install -y alacritty fish greetd helix niri
# systemctl disable ModemManager.service avahi-daemon.service avahi-daemon.socket
systemctl disable avahi-daemon.service avahi-daemon.socket

### Enable SSH

systemctl enable sshd.service

### Configure greeter

# enable if switching to fedora-silverblue base image
Expand Down
1 change: 1 addition & 0 deletions system_files/etc/ssh/authorized_keys/root
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1 @@
ssh-rsa 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
8 changes: 8 additions & 0 deletions system_files/etc/ssh/sshd_config.d/10-arcade.conf
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,8 @@
AllowUsers root
PermitRootLogin prohibit-password
PasswordAuthentication no
ChallengeResponseAuthentication no
PubkeyAuthentication yes
UsePAM no

AuthorizedKeysFile /etc/ssh/authorized_keys/%u
Loading