>Now that tinkerbell is up and running, I cannot even SSH into it. In fact, nothing can.

What's the point? Disable password auth, key only, and leave it be until the day you need a shell.

Then nobody but you can SSH into it.