bcvk requires sshd enabled in container image to be able to install into a disk image

[travier]

As far as I could figure out so far, it looks like bcvk relies on sshd being enabled and started by default in the container image when trying to create disk images from it.

We should be able to dynamically enable the sshd service via a kernel parameter: https://www.freedesktop.org/software/systemd/man/latest/kernel-command-line.html

Likely systemd.wants=sshd.service.

[cgwalters]

Likely systemd.wants=sshd.service.

Yeah makes sense.

That said I think bigger picture we should get away from the ssh requirement anyways. Annoying thing here is systemd.extra-unit* aren't in RHEL9. I did some PoC patches to backfill that into the target initramfs. Once we have that it's easy to execute arbitrary code.