diff --git a/build_files/build.sh b/build_files/build.sh
index c4777f5..809463d 100755
--- a/build_files/build.sh
+++ b/build_files/build.sh
@@ -5,6 +5,10 @@ set -ouex pipefail
 # Copy the contents of system_files/ of the git repo to /
 cp -avf "/ctx/system_files"/. /
 
+# Fix permissions on SSH authorized keys files
+chmod 755 /etc/ssh/authorized_keys
+chmod 644 /etc/ssh/authorized_keys/root
+
 ### Install packages
 
 dnf5 install -y alacritty fish greetd helix niri
@@ -22,6 +26,10 @@ dnf5 install -y alacritty fish greetd helix niri
 # systemctl disable ModemManager.service avahi-daemon.service avahi-daemon.socket
 systemctl disable avahi-daemon.service avahi-daemon.socket
 
+### Enable SSH
+
+systemctl enable sshd.service
+
 ### Configure greeter
 
 # enable if switching to fedora-silverblue base image
diff --git a/system_files/etc/ssh/authorized_keys/root b/system_files/etc/ssh/authorized_keys/root
new file mode 100644
index 0000000..6fbe984
--- /dev/null
+++ b/system_files/etc/ssh/authorized_keys/root
@@ -0,0 +1 @@
+ssh-rsa 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
diff --git a/system_files/etc/ssh/sshd_config.d/10-arcade.conf b/system_files/etc/ssh/sshd_config.d/10-arcade.conf
new file mode 100644
index 0000000..e6c460d
--- /dev/null
+++ b/system_files/etc/ssh/sshd_config.d/10-arcade.conf
@@ -0,0 +1,8 @@
+AllowUsers root
+PermitRootLogin prohibit-password
+PasswordAuthentication no
+ChallengeResponseAuthentication no
+PubkeyAuthentication yes
+UsePAM no
+
+AuthorizedKeysFile /etc/ssh/authorized_keys/%u