refactor: share common files between images; trim fedora-remote for a VM

- Move Kanidm/flatpak/finalize.d/sshd files to images/shared/{files,repos} and have build.sh overlay them for every image. - fedora-remote: aggressive hardware trim (no firmware, no kernel-modules-extra, no non-QEMU guest agents), keep + enable qemu-guest-agent (Proxmox). - Fixes the missing package-list (release step) for fedora-remote.
2026-09-27 22:44:10 +02:00
parent 6d70a1bfb9
commit 5bea16bc01
29 changed files with 44 additions and 209 deletions
@@ -0,0 +1,20 @@
+auth        required                                     pam_env.so
+auth        required                                     pam_faildelay.so delay=2000000
+auth        sufficient                                   pam_fprintd.so
+auth        sufficient                                   pam_kanidm.so ignore_unknown_user
+auth        sufficient                                   pam_unix.so nullok
+auth        required                                     pam_deny.so
+
+account     sufficient                                   pam_kanidm.so ignore_unknown_user
+account     required                                     pam_unix.so
+
+password    requisite                                    pam_pwquality.so
+password    sufficient                                   pam_unix.so yescrypt shadow nullok use_authtok
+password    required                                     pam_deny.so
+
+session     optional                                     pam_keyinit.so revoke
+session     required                                     pam_limits.so
+-session    optional                                     pam_systemd.so
+session     [success=1 default=ignore]                   pam_succeed_if.so service in crond quiet use_uid
+session     optional                                     pam_kanidm.so
+session     required                                     pam_unix.so