fedora-remote: add openssl for grd-firstboot TLS, enable sshd

grd-firstboot aborts before enabling RDP because it shells out to openssl to generate the TLS certificate, and the minimal image did not include the openssl CLI. Add it. Also enable sshd so the headless host is reachable without RDP.
2026-09-30 17:26:58 +02:00
parent 357bf16479
commit 2e5a4fd707
2 changed files with 6 additions and 0 deletions
@@ -23,6 +23,9 @@ packages:
  # Proxmox guest integration.
  - qemu-guest-agent

+  # grd-firstboot generates the RDP TLS certificate with the openssl CLI.
+  - openssl
+
  # Kanidm Unix authentication (kanidm-unixd-clients pulls kanidm-clients).
  - kanidm-unixd-clients

@@ -3,3 +3,6 @@ enable gdm.service
 enable gnome-remote-desktop.service
 enable grd-firstboot.service
 enable qemu-guest-agent.service
+
+# Headless host: SSH (Kanidm key auth via 10-kanidm.conf) is the other way in.
+enable sshd.service