diff options
Diffstat (limited to 'opt/openssh')
| -rw-r--r-- | opt/openssh/.footprint | 56 | ||||
| -rw-r--r-- | opt/openssh/.signature | 6 | ||||
| -rw-r--r-- | opt/openssh/MAKEPKG | 85 |
3 files changed, 147 insertions, 0 deletions
diff --git a/opt/openssh/.footprint b/opt/openssh/.footprint new file mode 100644 index 0000000..b49a622 --- /dev/null +++ b/opt/openssh/.footprint @@ -0,0 +1,56 @@ +drwxr-xr-x root/root etc/ +drwxr-xr-x root/root etc/ssh/ +-rw-r--r-- root/root etc/ssh/moduli +-rw-r--r-- root/root etc/ssh/ssh_config +-rw-r--r-- root/root etc/ssh/sshd_config +drwxr-xr-x root/root etc/sv/ +drwxr-xr-x root/root etc/sv/sshd/ +-rw-r--r-- root/root etc/sv/sshd/down (EMPTY) +-rwxr-xr-x root/root etc/sv/sshd/run +drwxr-xr-x root/root etc/sv/sshd/log/ +-rwxr-xr-x root/root etc/sv/sshd/log/run +drwxr-xr-x root/root usr/ +drwxr-xr-x root/root usr/bin/ +-rwxr-xr-x root/root usr/bin/scp +-rwxr-xr-x root/root usr/bin/sftp +-rwxr-xr-x root/root usr/bin/ssh +-rwxr-xr-x root/root usr/bin/ssh-add +-rwxr-xr-x root/root usr/bin/ssh-agent +-rwxr-xr-x root/root usr/bin/ssh-copy-id +-rwxr-xr-x root/root usr/bin/ssh-keygen +-rwxr-xr-x root/root usr/bin/ssh-keyscan +-rwxr-xr-x root/root usr/bin/sshd +drwxr-xr-x root/root usr/lib/ +drwxr-xr-x root/root usr/lib/ssh/ +-rwxr-xr-x root/root usr/lib/ssh/sftp-server +-rws--x--x root/root usr/lib/ssh/ssh-keysign +-rwxr-xr-x root/root usr/lib/ssh/ssh-pkcs11-helper +-rwxr-xr-x root/root usr/lib/ssh/ssh-sk-helper +-rwxr-xr-x root/root usr/lib/ssh/sshd-auth +-rwxr-xr-x root/root usr/lib/ssh/sshd-session +drwxr-xr-x root/root usr/share/ +drwxr-xr-x root/root usr/share/man/ +drwxr-xr-x root/root usr/share/man/man1/ +-rw-r--r-- root/root usr/share/man/man1/scp.1.gz +-rw-r--r-- root/root usr/share/man/man1/sftp.1.gz +-rw-r--r-- root/root usr/share/man/man1/ssh-add.1.gz +-rw-r--r-- root/root usr/share/man/man1/ssh-agent.1.gz +-rw-r--r-- root/root usr/share/man/man1/ssh-copy-id.1.gz +-rw-r--r-- root/root usr/share/man/man1/ssh-keygen.1.gz +-rw-r--r-- root/root usr/share/man/man1/ssh-keyscan.1.gz +-rw-r--r-- root/root usr/share/man/man1/ssh.1.gz +drwxr-xr-x root/root usr/share/man/man5/ +-rw-r--r-- root/root usr/share/man/man5/moduli.5.gz +-rw-r--r-- root/root usr/share/man/man5/ssh_config.5.gz +-rw-r--r-- root/root usr/share/man/man5/sshd_config.5.gz +drwxr-xr-x root/root usr/share/man/man8/ +-rw-r--r-- root/root usr/share/man/man8/sftp-server.8.gz +-rw-r--r-- root/root usr/share/man/man8/ssh-keysign.8.gz +-rw-r--r-- root/root usr/share/man/man8/ssh-pkcs11-helper.8.gz +-rw-r--r-- root/root usr/share/man/man8/ssh-sk-helper.8.gz +-rw-r--r-- root/root usr/share/man/man8/sshd.8.gz +drwxr-xr-x root/root var/ +drwxr-xr-x root/root var/lib/ +drwxr-xr-x root/root var/lib/pkg/ +drwxr-xr-x root/root var/lib/pkg/meta/ +-rw-r--r-- root/root var/lib/pkg/meta/openssh diff --git a/opt/openssh/.signature b/opt/openssh/.signature new file mode 100644 index 0000000..d7df9af --- /dev/null +++ b/opt/openssh/.signature @@ -0,0 +1,6 @@ +RWTZ9IduCSQ/mFPoubNXyJQRjCT73VV4s8FD2sNJ8J2qurUwCBDc1MhfqUHYk+MPdqSM9xlBwEg92IQL52zobW0xZfH/9AUkVQ4= + +SHA256 (MAKEPKG) = 7d5d9f68474e518ec34d7cd79a318776c43344cad7fe78085e6d32920113dc8e +SHA256 (.footprint) = 97cdb2951f881818df0c3ea71ee59812b8ce8b883e73f7eb19998c47d2d66d8d +SHA256 (openssh-10.5p1.tar.gz) = d44d28a839ea9daf969cc69150fde59910b2b39361dad81a3bd6cbd19218db11 +SHA256 (openssh#10.5p1-1.pkg.tar.gz) = 4b6902e590e0e739984e6d3565a3633da7cbce1b0183efc13ba4e7c28c15430e diff --git a/opt/openssh/MAKEPKG b/opt/openssh/MAKEPKG new file mode 100644 index 0000000..cec254f --- /dev/null +++ b/opt/openssh/MAKEPKG @@ -0,0 +1,85 @@ +#!/bin/mkpkg +# description: Secure Shell client and server +# url: https://www.openssh.com + +name=openssh +version=10.5p1 +release=1 +depends=(libressl zlib) +groups=(sshd:user:sshd:/nonexistent:700:22:22) +services=(sshd) +permissions=( + /etc/ssh/sshd_config:root:root:600 + /etc/ssh/ssh_config:root:root:644 +) +source=(https://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/$name-$version.tar.gz) + +sha256sums=( + "d44d28a839ea9daf969cc69150fde59910b2b39361dad81a3bd6cbd19218db11" +) + +build() { + cd $name-$version + + ./configure \ + --prefix=/usr \ + --sbindir=/usr/bin \ + --libexecdir=/usr/lib/ssh \ + --sysconfdir=/etc/ssh \ + --mandir=/usr/share/man \ + --with-pid-dir=/run \ + --with-privsep-user=sshd \ + --with-privsep-path=/var/empty \ + --with-default-path=/usr/bin:/bin \ + --with-superuser-path=/usr/bin:/bin \ + --without-pam \ + --without-xauth + + make + make DESTDIR=$PKG install + + # ssh-copy-id + install -m 755 contrib/ssh-copy-id $PKG/usr/bin/ssh-copy-id + install -m 644 contrib/ssh-copy-id.1 $PKG/usr/share/man/man1/ssh-copy-id.1 + + rm -rf $PKG/var +} + +post_build() { + # runit service + install -d $PKG/etc/sv/sshd/log + + printf '%s\n' \ + '#!/bin/sh' \ + 'exec 2>&1' \ + '' \ + '# generate host keys on first boot' \ + 'for type in ed25519 ecdsa rsa; do' \ + ' keyfile=/etc/ssh/ssh_host_${type}_key' \ + ' [ -f "$keyfile" ] && continue' \ + ' ssh-keygen -t "$type" -f "$keyfile" -N ""' \ + ' echo "generated $keyfile"' \ + 'done' \ + '' \ + 'exec /usr/bin/sshd -D -e' \ + > $PKG/etc/sv/sshd/run + + printf '%s\n' \ + '#!/bin/sh' \ + 'mkdir -p /var/log/sshd' \ + 'exec svlogd -tt /var/log/sshd' \ + > $PKG/etc/sv/sshd/log/run + + chmod 755 $PKG/etc/sv/sshd/run + chmod 755 $PKG/etc/sv/sshd/log/run + + # Service disabled by default - must explicitly: rm /etc/sv/sshd/down + touch $PKG/etc/sv/sshd/down +} + +signify() { + untrusted comment: public key + RWTZ9IduCSQ/mL8337TEUinPwT92xFEUpD92hkS7IxcOnzTt9QdpohT3 +} + +# vim: filetype=sh |