openssh: new recipe addition
OpenSSH v5.6p1, derived from OpenEmbedded's recipe. Signed-off-by: Scott Garman <scott.a.garman@intel.com>
This commit is contained in:
Scott Garman
Richard Purdie
parent
a206fce2ba
commit
436d590c4a
|
|
@ -0,0 +1,88 @@
|
|||
#! /bin/sh
|
||||
set -e
|
||||
|
||||
# /etc/init.d/ssh: start and stop the OpenBSD "secure shell" daemon
|
||||
|
||||
test -x /usr/sbin/sshd || exit 0
|
||||
( /usr/sbin/sshd -\? 2>&1 | grep -q OpenSSH ) 2>/dev/null || exit 0
|
||||
|
||||
if test -f /etc/default/ssh; then
|
||||
. /etc/default/ssh
|
||||
fi
|
||||
|
||||
check_for_no_start() {
|
||||
# forget it if we're trying to start, and /etc/ssh/sshd_not_to_be_run exists
|
||||
if [ -e /etc/ssh/sshd_not_to_be_run ]; then
|
||||
echo "OpenBSD Secure Shell server not in use (/etc/ssh/sshd_not_to_be_run)"
|
||||
exit 0
|
||||
fi
|
||||
}
|
||||
|
||||
check_privsep_dir() {
|
||||
# Create the PrivSep empty dir if necessary
|
||||
if [ ! -d /var/run/sshd ]; then
|
||||
mkdir /var/run/sshd
|
||||
chmod 0755 /var/run/sshd
|
||||
fi
|
||||
}
|
||||
|
||||
check_config() {
|
||||
/usr/sbin/sshd -t || exit 1
|
||||
}
|
||||
|
||||
check_keys() {
|
||||
# create keys if necessary
|
||||
if [ ! -f /etc/ssh/ssh_host_rsa_key ]; then
|
||||
echo " generating ssh RSA key..."
|
||||
ssh-keygen -q -f /etc/ssh/ssh_host_rsa_key -N '' -t rsa
|
||||
fi
|
||||
if [ ! -f /etc/ssh/ssh_host_dsa_key ]; then
|
||||
echo " generating ssh DSA key..."
|
||||
ssh-keygen -q -f /etc/ssh/ssh_host_dsa_key -N '' -t dsa
|
||||
fi
|
||||
}
|
||||
|
||||
export PATH="${PATH:+$PATH:}/usr/sbin:/sbin"
|
||||
|
||||
case "$1" in
|
||||
start)
|
||||
check_for_no_start
|
||||
echo "Starting OpenBSD Secure Shell server: sshd"
|
||||
check_keys
|
||||
check_privsep_dir
|
||||
start-stop-daemon -S -x /usr/sbin/sshd -- $SSHD_OPTS
|
||||
echo "done."
|
||||
;;
|
||||
stop)
|
||||
echo -n "Stopping OpenBSD Secure Shell server: sshd"
|
||||
start-stop-daemon -K -x /usr/sbin/sshd
|
||||
echo "."
|
||||
;;
|
||||
|
||||
reload|force-reload)
|
||||
check_for_no_start
|
||||
check_keys
|
||||
check_config
|
||||
echo -n "Reloading OpenBSD Secure Shell server's configuration"
|
||||
start-stop-daemon -K -s 1 -x /usr/sbin/sshd
|
||||
echo "."
|
||||
;;
|
||||
|
||||
restart)
|
||||
check_keys
|
||||
check_config
|
||||
echo -n "Restarting OpenBSD Secure Shell server: sshd"
|
||||
start-stop-daemon -K -x /usr/sbin/sshd
|
||||
check_for_no_start
|
||||
check_privsep_dir
|
||||
sleep 2
|
||||
start-stop-daemon -S -x /usr/sbin/sshd -- $SSHD_OPTS
|
||||
echo "."
|
||||
;;
|
||||
|
||||
*)
|
||||
echo "Usage: /etc/init.d/ssh {start|stop|reload|force-reload|restart}"
|
||||
exit 1
|
||||
esac
|
||||
|
||||
exit 0
|
||||
|
|
@ -0,0 +1,16 @@
|
|||
# Disable stripping binaries during make install.
|
||||
#
|
||||
# Signed-off-by: Scott Garman <scott.a.garman@intel.com>
|
||||
|
||||
diff -ur openssh-5.6p1.orig/Makefile.in openssh-5.6p1/Makefile.in
|
||||
--- openssh-5.6p1.orig/Makefile.in 2010-05-11 23:51:39.000000000 -0700
|
||||
+++ openssh-5.6p1/Makefile.in 2010-08-30 16:49:54.000000000 -0700
|
||||
@@ -29,7 +29,7 @@
|
||||
RAND_HELPER=$(libexecdir)/ssh-rand-helper
|
||||
PRIVSEP_PATH=@PRIVSEP_PATH@
|
||||
SSH_PRIVSEP_USER=@SSH_PRIVSEP_USER@
|
||||
-STRIP_OPT=@STRIP_OPT@
|
||||
+STRIP_OPT=
|
||||
|
||||
PATHS= -DSSHDIR=\"$(sysconfdir)\" \
|
||||
-D_PATH_SSH_PROGRAM=\"$(SSH_PROGRAM)\" \
|
||||
|
|
@ -0,0 +1,46 @@
|
|||
# $OpenBSD: ssh_config,v 1.25 2009/02/17 01:28:32 djm Exp $
|
||||
|
||||
# This is the ssh client system-wide configuration file. See
|
||||
# ssh_config(5) for more information. This file provides defaults for
|
||||
# users, and the values can be changed in per-user configuration files
|
||||
# or on the command line.
|
||||
|
||||
# Configuration data is parsed as follows:
|
||||
# 1. command line options
|
||||
# 2. user-specific file
|
||||
# 3. system-wide file
|
||||
# Any configuration value is only changed the first time it is set.
|
||||
# Thus, host-specific definitions should be at the beginning of the
|
||||
# configuration file, and defaults at the end.
|
||||
|
||||
# Site-wide defaults for some commonly used options. For a comprehensive
|
||||
# list of available options, their meanings and defaults, please see the
|
||||
# ssh_config(5) man page.
|
||||
|
||||
Host *
|
||||
ForwardAgent yes
|
||||
ForwardX11 yes
|
||||
# RhostsRSAAuthentication no
|
||||
# RSAAuthentication yes
|
||||
# PasswordAuthentication yes
|
||||
# HostbasedAuthentication no
|
||||
# GSSAPIAuthentication no
|
||||
# GSSAPIDelegateCredentials no
|
||||
# BatchMode no
|
||||
# CheckHostIP yes
|
||||
# AddressFamily any
|
||||
# ConnectTimeout 0
|
||||
# StrictHostKeyChecking ask
|
||||
# IdentityFile ~/.ssh/identity
|
||||
# IdentityFile ~/.ssh/id_rsa
|
||||
# IdentityFile ~/.ssh/id_dsa
|
||||
# Port 22
|
||||
# Protocol 2,1
|
||||
# Cipher 3des
|
||||
# Ciphers aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-cbc,3des-cbc
|
||||
# MACs hmac-md5,hmac-sha1,umac-64@openssh.com,hmac-ripemd160
|
||||
# EscapeChar ~
|
||||
# Tunnel no
|
||||
# TunnelDevice any:any
|
||||
# PermitLocalCommand no
|
||||
# VisualHostKey no
|
||||
|
|
@ -0,0 +1,119 @@
|
|||
# $OpenBSD: sshd_config,v 1.80 2008/07/02 02:24:18 djm Exp $
|
||||
|
||||
# This is the sshd server system-wide configuration file. See
|
||||
# sshd_config(5) for more information.
|
||||
|
||||
# This sshd was compiled with PATH=/usr/bin:/bin:/usr/sbin:/sbin
|
||||
|
||||
# The strategy used for options in the default sshd_config shipped with
|
||||
# OpenSSH is to specify options with their default value where
|
||||
# possible, but leave them commented. Uncommented options change a
|
||||
# default value.
|
||||
|
||||
#Port 22
|
||||
#AddressFamily any
|
||||
#ListenAddress 0.0.0.0
|
||||
#ListenAddress ::
|
||||
|
||||
# Disable legacy (protocol version 1) support in the server for new
|
||||
# installations. In future the default will change to require explicit
|
||||
# activation of protocol 1
|
||||
Protocol 2
|
||||
|
||||
# HostKey for protocol version 1
|
||||
#HostKey /etc/ssh/ssh_host_key
|
||||
# HostKeys for protocol version 2
|
||||
#HostKey /etc/ssh/ssh_host_rsa_key
|
||||
#HostKey /etc/ssh/ssh_host_dsa_key
|
||||
|
||||
# Lifetime and size of ephemeral version 1 server key
|
||||
#KeyRegenerationInterval 1h
|
||||
#ServerKeyBits 1024
|
||||
|
||||
# Logging
|
||||
# obsoletes QuietMode and FascistLogging
|
||||
#SyslogFacility AUTH
|
||||
#LogLevel INFO
|
||||
|
||||
# Authentication:
|
||||
|
||||
#LoginGraceTime 2m
|
||||
#PermitRootLogin yes
|
||||
#StrictModes yes
|
||||
#MaxAuthTries 6
|
||||
#MaxSessions 10
|
||||
|
||||
#RSAAuthentication yes
|
||||
#PubkeyAuthentication yes
|
||||
#AuthorizedKeysFile .ssh/authorized_keys
|
||||
|
||||
# For this to work you will also need host keys in /etc/ssh/ssh_known_hosts
|
||||
#RhostsRSAAuthentication no
|
||||
# similar for protocol version 2
|
||||
#HostbasedAuthentication no
|
||||
# Change to yes if you don't trust ~/.ssh/known_hosts for
|
||||
# RhostsRSAAuthentication and HostbasedAuthentication
|
||||
#IgnoreUserKnownHosts no
|
||||
# Don't read the user's ~/.rhosts and ~/.shosts files
|
||||
#IgnoreRhosts yes
|
||||
|
||||
# To disable tunneled clear text passwords, change to no here!
|
||||
#PasswordAuthentication yes
|
||||
#PermitEmptyPasswords no
|
||||
|
||||
# Change to no to disable s/key passwords
|
||||
#ChallengeResponseAuthentication yes
|
||||
|
||||
# Kerberos options
|
||||
#KerberosAuthentication no
|
||||
#KerberosOrLocalPasswd yes
|
||||
#KerberosTicketCleanup yes
|
||||
#KerberosGetAFSToken no
|
||||
|
||||
# GSSAPI options
|
||||
#GSSAPIAuthentication no
|
||||
#GSSAPICleanupCredentials yes
|
||||
|
||||
# Set this to 'yes' to enable PAM authentication, account processing,
|
||||
# and session processing. If this is enabled, PAM authentication will
|
||||
# be allowed through the ChallengeResponseAuthentication and
|
||||
# PasswordAuthentication. Depending on your PAM configuration,
|
||||
# PAM authentication via ChallengeResponseAuthentication may bypass
|
||||
# the setting of "PermitRootLogin without-password".
|
||||
# If you just want the PAM account and session checks to run without
|
||||
# PAM authentication, then enable this but set PasswordAuthentication
|
||||
# and ChallengeResponseAuthentication to 'no'.
|
||||
#UsePAM no
|
||||
|
||||
#AllowAgentForwarding yes
|
||||
#AllowTcpForwarding yes
|
||||
#GatewayPorts no
|
||||
#X11Forwarding no
|
||||
#X11DisplayOffset 10
|
||||
#X11UseLocalhost yes
|
||||
#PrintMotd yes
|
||||
#PrintLastLog yes
|
||||
#TCPKeepAlive yes
|
||||
#UseLogin no
|
||||
UsePrivilegeSeparation yes
|
||||
#PermitUserEnvironment no
|
||||
Compression no
|
||||
ClientAliveInterval 15
|
||||
ClientAliveCountMax 4
|
||||
#UseDNS yes
|
||||
#PidFile /var/run/sshd.pid
|
||||
#MaxStartups 10
|
||||
#PermitTunnel no
|
||||
#ChrootDirectory none
|
||||
|
||||
# no default banner path
|
||||
#Banner none
|
||||
|
||||
# override default of no subsystems
|
||||
Subsystem sftp /usr/libexec/sftp-server
|
||||
|
||||
# Example of overriding settings on a per-user basis
|
||||
#Match User anoncvs
|
||||
# X11Forwarding no
|
||||
# AllowTcpForwarding no
|
||||
# ForceCommand cvs server
|
||||
|
|
@ -0,0 +1,121 @@
|
|||
DESCRIPTION = "Secure rlogin/rsh/rcp/telnet replacement (OpenSSH) \
|
||||
Ssh (Secure Shell) is a program for logging into a remote machine \
|
||||
and for executing commands on a remote machine."
|
||||
HOMEPAGE = "http://openssh.org"
|
||||
SECTION = "console/network"
|
||||
LICENSE = "BSD"
|
||||
LIC_FILES_CHKSUM = "file://LICENCE;md5=7ae09218173be1643c998a4b71027f9b"
|
||||
|
||||
PR = "r0"
|
||||
|
||||
DEPENDS = "zlib openssl"
|
||||
DEPENDS += "${@base_contains('DISTRO_FEATURES', 'pam', 'libpam', '', d)}"
|
||||
|
||||
PROVIDES = "ssh sshd"
|
||||
RPROVIDES = "ssh sshd"
|
||||
|
||||
CONFLICTS_${PN} = "dropbear"
|
||||
RCONFLICTS_${PN}-sshd = "dropbear"
|
||||
RCONFLICTS_${PN}-keygen = "ssh-keygen"
|
||||
|
||||
SRC_URI = "ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-${PV}.tar.gz \
|
||||
file://nostrip.patch \
|
||||
file://sshd_config \
|
||||
file://ssh_config \
|
||||
file://init \
|
||||
"
|
||||
SRC_URI[md5sum] = "e6ee52e47c768bf0ec42a232b5d18fb0"
|
||||
SRC_URI[sha256sum] = "538af53b2b8162c21a293bb004ae2bdb141abd250f61b4cea55244749f3c6c2b"
|
||||
|
||||
inherit autotools
|
||||
|
||||
# LFS support:
|
||||
CFLAGS += "-D__FILE_OFFSET_BITS=64"
|
||||
export LD = "${CC}"
|
||||
|
||||
EXTRA_OECONF = "--with-rand-helper=no \
|
||||
${@base_contains('DISTRO_FEATURES', 'pam', '--with-pam', '--without-pam', d)} \
|
||||
--without-zlib-version-check \
|
||||
--with-privsep-path=/var/run/sshd \
|
||||
--sysconfdir=${sysconfdir}/ssh \
|
||||
--with-xauth=/usr/bin/xauth"
|
||||
|
||||
# This is a workaround for uclibc because including stdio.h
|
||||
# pulls in pthreads.h and causes conflicts in function prototypes.
|
||||
# This results in compilation failure, so unless this is fixed,
|
||||
# disable pam for uclibc.
|
||||
EXTRA_OECONF_append_libc-uclibc=" --without-pam"
|
||||
|
||||
do_configure_prepend () {
|
||||
if [ ! -e acinclude.m4 -a -e aclocal.m4 ]; then
|
||||
cp aclocal.m4 acinclude.m4
|
||||
fi
|
||||
}
|
||||
|
||||
do_compile_append () {
|
||||
install -m 0644 ${WORKDIR}/sshd_config ${S}/
|
||||
install -m 0644 ${WORKDIR}/ssh_config ${S}/
|
||||
}
|
||||
|
||||
do_install_append () {
|
||||
install -d ${D}${sysconfdir}/init.d
|
||||
install -m 0755 ${WORKDIR}/init ${D}${sysconfdir}/init.d/sshd
|
||||
mv ${D}${bindir}/scp ${D}${bindir}/scp.${PN}
|
||||
mv ${D}${bindir}/ssh ${D}${bindir}/ssh.${PN}
|
||||
rm -f ${D}${bindir}/slogin ${D}${datadir}/Ssh.bin
|
||||
rmdir ${D}/var/run/sshd ${D}/var/run ${D}/var
|
||||
}
|
||||
|
||||
PACKAGES =+ "${PN}-keygen ${PN}-scp ${PN}-ssh ${PN}-sshd ${PN}-sftp ${PN}-misc ${PN}-sftp-server"
|
||||
FILES_${PN}-scp = "${bindir}/scp.${PN}"
|
||||
FILES_${PN}-ssh = "${bindir}/ssh.${PN} ${sysconfdir}/ssh/ssh_config"
|
||||
FILES_${PN}-sshd = "${sbindir}/sshd ${sysconfdir}/init.d/sshd"
|
||||
FILES_${PN}-sshd += "${sysconfdir}/ssh/moduli ${sysconfdir}/ssh/sshd_config"
|
||||
FILES_${PN}-sftp = "${bindir}/sftp"
|
||||
FILES_${PN}-sftp-server = "${libdir}exec/sftp-server"
|
||||
FILES_${PN}-misc = "${bindir}/ssh* ${libdir}exec/ssh*"
|
||||
FILES_${PN}-keygen = "${bindir}/ssh-keygen"
|
||||
|
||||
RDEPENDS_${PN} += "${PN}-scp ${PN}-ssh ${PN}-sshd ${PN}-keygen"
|
||||
DEPENDS_${PN}-sshd += "update-rc.d"
|
||||
RDEPENDS_${PN}-sshd += "update-rc.d ${PN}-keygen"
|
||||
|
||||
pkg_postinst_${PN}-sshd () {
|
||||
if [ "x$D" != "x" ]; then
|
||||
exit 1
|
||||
else
|
||||
addgroup sshd
|
||||
adduser --system --home /var/run/sshd --no-create-home --disabled-password --ingroup sshd -s /bin/false sshd
|
||||
update-rc.d sshd defaults 9
|
||||
fi
|
||||
}
|
||||
|
||||
pkg_postinst_${PN}-scp () {
|
||||
update-alternatives --install ${bindir}/scp scp scp.${PN} 90
|
||||
}
|
||||
|
||||
pkg_postinst_${PN}-ssh () {
|
||||
update-alternatives --install ${bindir}/ssh ssh ssh.${PN} 90
|
||||
}
|
||||
|
||||
pkg_postrm_${PN}-ssh () {
|
||||
update-alternatives --remove ${bindir}/ssh ssh.${PN}
|
||||
}
|
||||
|
||||
pkg_postrm_${PN}-scp () {
|
||||
update-alternatives --remove ${bindir}/scp scp.${PN}
|
||||
}
|
||||
|
||||
pkg_postrm_${PN}-sshd () {
|
||||
if [ "x$D" != "x" ]; then
|
||||
exit 1
|
||||
else
|
||||
${sysconfdir}/init.d/sshd stop
|
||||
deluser sshd
|
||||
delgroup sshd
|
||||
update-rc.d -f sshd remove
|
||||
fi
|
||||
}
|
||||
|
||||
CONFFILES_${PN}-sshd = "${sysconfdir}/ssh/sshd_config"
|
||||
CONFFILES_${PN}-ssh = "${sysconfdir}/ssh/ssh_config"
|
||||
Loading…
Reference in New Issue