fixed initial problems

Containerfile

@@ -114,6 +114,7 @@ RUN chmod 0644 /etc/containers/policy.json /etc/pki/containers/cosign.pub && \
 # 2. Kopiere die Systemd-Overrides als Vendor-Drop-ins (kein /etc/-Override im Image)
 COPY configs/bootc-timer-override.conf /usr/lib/systemd/system/bootc-fetch-apply-updates.timer.d/override.conf
 COPY configs/bootc-override.conf /usr/lib/systemd/system/bootc-fetch-apply-updates.service.d/override.conf
+COPY configs/remount-fs-ostree-skip.conf /usr/lib/systemd/system/systemd-remount-fs.service.d/skip-on-ostree.conf
 
 # 3. Kopiere die Session-Helfer und Desktop-Defaults
 COPY --chmod=755 scripts/notify-bootc-user.sh /usr/bin/
@@ -140,6 +141,8 @@ COPY configs/tmpfiles/noctalia-greeter-seed.conf /usr/lib/tmpfiles.d/noctalia-gr
 # Fehlt Wrapper, D-Bus, polkit oder Session -> Build-Abbruch statt
 # defektem Login-Screen.
 RUN set -u; \
+    id greeter >/dev/null || { echo "FEHLER: Service-User greeter fehlt (21-greetd.sh pruefen)"; exit 1; }; \
+    grep -q 'pam_gnome_keyring\.so' /etc/pam.d/greetd || { echo "FEHLER: Keyring-PAM in /etc/pam.d/greetd fehlt"; exit 1; }; \
     wrapper="$(command -v noctalia-greeter-session || true)"; \
     echo "Gefundener Wrapper: ${wrapper}"; \
     test -n "${wrapper}" || { echo "FEHLER: noctalia-greeter-session nicht installiert (Terra-Repo/includepkgs pruefen)"; exit 1; }; \