base image customization and ICICLE generation: round 1

Still details to fix, such as getting the correct IP address to use for ssh access from an outside client.