debian+phosh running on PinePhone

[janw]

1) apt-get install openssh-server
- to be able to connect to pinphone e.g from PC, transfer files etc.
- can this be installed and enabled by default?

Isn't that a security risk? People may not be aware that a ssh-server is installed and that in combination with a default user/password.

Don't get me wrong, I've installed openssh-server myself, but I've altered /etc/ssh/sshd_config so I can only log in with key-based authentication.  

TIP, you can install https://gitlab.com/a-wai/debos-pinephone on your PC and add the extra packages you want to image.yaml and create an image yourself. That's what I do, works great.