initial buildroot for linux 5.15
This commit is contained in:
Huan.Feng
@@ -0,0 +1,34 @@
|
||||
config BR2_PACKAGE_OPENSSH
|
||||
bool "openssh"
|
||||
depends on BR2_USE_MMU # fork()
|
||||
select BR2_PACKAGE_OPENSSL
|
||||
select BR2_PACKAGE_ZLIB
|
||||
help
|
||||
A free version of the SSH protocol suite of network
|
||||
connectivity tools. The standard 'ssh', 'sshd', 'scp', and
|
||||
friends.
|
||||
|
||||
http://www.openssh.com/
|
||||
|
||||
if BR2_PACKAGE_OPENSSH
|
||||
|
||||
config BR2_PACKAGE_OPENSSH_CLIENT
|
||||
bool "client"
|
||||
default y
|
||||
help
|
||||
Client programs: ssh, scp, sftp, ssh-agent, ssh-add,
|
||||
ssh-copy-id.
|
||||
|
||||
config BR2_PACKAGE_OPENSSH_SERVER
|
||||
bool "server"
|
||||
default y
|
||||
help
|
||||
Server programs: sshd, sftp-server
|
||||
|
||||
config BR2_PACKAGE_OPENSSH_KEY_UTILS
|
||||
bool "key utilities"
|
||||
default y
|
||||
help
|
||||
Key utilities: ssh-keygen, ssh-keyscan.
|
||||
|
||||
endif
|
||||
@@ -0,0 +1,47 @@
|
||||
#!/bin/sh
|
||||
#
|
||||
# sshd Starts sshd.
|
||||
#
|
||||
|
||||
# Make sure the ssh-keygen progam exists
|
||||
[ -f /usr/bin/ssh-keygen ] || exit 0
|
||||
|
||||
umask 077
|
||||
|
||||
start() {
|
||||
# Create any missing keys
|
||||
/usr/bin/ssh-keygen -A
|
||||
|
||||
printf "Starting sshd: "
|
||||
/usr/sbin/sshd
|
||||
touch /var/lock/sshd
|
||||
echo "OK"
|
||||
}
|
||||
stop() {
|
||||
printf "Stopping sshd: "
|
||||
killall sshd
|
||||
rm -f /var/lock/sshd
|
||||
echo "OK"
|
||||
}
|
||||
restart() {
|
||||
stop
|
||||
start
|
||||
}
|
||||
|
||||
case "$1" in
|
||||
start)
|
||||
start
|
||||
;;
|
||||
stop)
|
||||
stop
|
||||
;;
|
||||
restart|reload)
|
||||
restart
|
||||
;;
|
||||
*)
|
||||
echo "Usage: $0 {start|stop|restart}"
|
||||
exit 1
|
||||
esac
|
||||
|
||||
exit $?
|
||||
|
||||
@@ -0,0 +1,4 @@
|
||||
# From https://www.openssh.com/txt/release-8.8 (base64 encoded)
|
||||
sha256 4590890ea9bb9ace4f71ae331785a3a5823232435161960ed5fc86588f331fe9 openssh-8.8p1.tar.gz
|
||||
# Locally calculated
|
||||
sha256 432abf7480fb31473a6706627212913fc70032e3fb71b90fecb28ae26a2d741d LICENCE
|
||||
@@ -0,0 +1,131 @@
|
||||
################################################################################
|
||||
#
|
||||
# openssh
|
||||
#
|
||||
################################################################################
|
||||
|
||||
OPENSSH_VERSION_MAJOR = 8.8
|
||||
OPENSSH_VERSION_MINOR = p1
|
||||
OPENSSH_VERSION = $(OPENSSH_VERSION_MAJOR)$(OPENSSH_VERSION_MINOR)
|
||||
OPENSSH_CPE_ID_VERSION = $(OPENSSH_VERSION_MAJOR)
|
||||
OPENSSH_CPE_ID_UPDATE = $(OPENSSH_VERSION_MINOR)
|
||||
OPENSSH_SITE = http://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable
|
||||
OPENSSH_LICENSE = BSD-4-Clause, BSD-3-Clause, BSD-2-Clause, Public Domain
|
||||
OPENSSH_LICENSE_FILES = LICENCE
|
||||
OPENSSH_CONF_ENV = \
|
||||
LD="$(TARGET_CC)" \
|
||||
LDFLAGS="$(TARGET_CFLAGS)" \
|
||||
LIBS=`$(PKG_CONFIG_HOST_BINARY) --libs openssl`
|
||||
OPENSSH_CPE_ID_VENDOR = openbsd
|
||||
OPENSSH_CONF_OPTS = \
|
||||
--sysconfdir=/etc/ssh \
|
||||
--with-default-path=$(BR2_SYSTEM_DEFAULT_PATH) \
|
||||
--disable-lastlog \
|
||||
--disable-utmp \
|
||||
--disable-utmpx \
|
||||
--disable-wtmp \
|
||||
--disable-wtmpx \
|
||||
--disable-strip
|
||||
|
||||
define OPENSSH_PERMISSIONS
|
||||
/var/empty d 755 root root - - - - -
|
||||
endef
|
||||
|
||||
ifeq ($(BR2_TOOLCHAIN_SUPPORTS_PIE),)
|
||||
OPENSSH_CONF_OPTS += --without-pie
|
||||
endif
|
||||
|
||||
OPENSSH_DEPENDENCIES = host-pkgconf zlib openssl
|
||||
|
||||
ifeq ($(BR2_PACKAGE_CRYPTODEV_LINUX),y)
|
||||
OPENSSH_DEPENDENCIES += cryptodev-linux
|
||||
OPENSSH_CONF_OPTS += --with-ssl-engine
|
||||
else
|
||||
OPENSSH_CONF_OPTS += --without-ssl-engine
|
||||
endif
|
||||
|
||||
ifeq ($(BR2_PACKAGE_AUDIT),y)
|
||||
OPENSSH_DEPENDENCIES += audit
|
||||
OPENSSH_CONF_OPTS += --with-audit=linux
|
||||
else
|
||||
OPENSSH_CONF_OPTS += --without-audit
|
||||
endif
|
||||
|
||||
ifeq ($(BR2_PACKAGE_LINUX_PAM),y)
|
||||
define OPENSSH_INSTALL_PAM_CONF
|
||||
$(INSTALL) -D -m 644 $(@D)/contrib/sshd.pam.generic $(TARGET_DIR)/etc/pam.d/sshd
|
||||
$(SED) '\%password required /lib/security/pam_cracklib.so%d' $(TARGET_DIR)/etc/pam.d/sshd
|
||||
$(SED) 's/\#UsePAM no/UsePAM yes/' $(TARGET_DIR)/etc/ssh/sshd_config
|
||||
endef
|
||||
|
||||
OPENSSH_DEPENDENCIES += linux-pam
|
||||
OPENSSH_CONF_OPTS += --with-pam
|
||||
OPENSSH_POST_INSTALL_TARGET_HOOKS += OPENSSH_INSTALL_PAM_CONF
|
||||
else
|
||||
OPENSSH_CONF_OPTS += --without-pam
|
||||
endif
|
||||
|
||||
ifeq ($(BR2_PACKAGE_LIBSELINUX),y)
|
||||
OPENSSH_DEPENDENCIES += libselinux
|
||||
OPENSSH_CONF_OPTS += --with-selinux
|
||||
else
|
||||
OPENSSH_CONF_OPTS += --without-selinux
|
||||
endif
|
||||
|
||||
ifeq ($(BR2_PACKAGE_SYSTEMD_SYSUSERS),y)
|
||||
define OPENSSH_INSTALL_SYSTEMD_SYSUSERS
|
||||
$(INSTALL) -m 0644 -D package/openssh/sshd-sysusers.conf \
|
||||
$(TARGET_DIR)/usr/lib/sysusers.d/sshd.conf
|
||||
endef
|
||||
else
|
||||
define OPENSSH_USERS
|
||||
sshd -1 sshd -1 * /var/empty - - SSH drop priv user
|
||||
endef
|
||||
endif
|
||||
|
||||
# Let the default install rule only install the configuration file.
|
||||
# The programs will be installed based on the config options selected.
|
||||
OPENSSH_INSTALL_TARGET_OPTS = DESTDIR=$(TARGET_DIR) install-sysconf
|
||||
|
||||
ifeq ($(BR2_PACKAGE_OPENSSH_CLIENT),y)
|
||||
define OPENSSH_INSTALL_CLIENT_PROGRAMS
|
||||
$(INSTALL) -D -m 0755 $(@D)/ssh $(TARGET_DIR)/usr/bin/ssh
|
||||
$(INSTALL) -D -m 0755 $(@D)/scp $(TARGET_DIR)/usr/bin/scp
|
||||
$(INSTALL) -D -m 0755 $(@D)/sftp $(TARGET_DIR)/usr/bin/sftp
|
||||
$(INSTALL) -D -m 0755 $(@D)/ssh-agent $(TARGET_DIR)/usr/bin/ssh-agent
|
||||
$(INSTALL) -D -m 0755 $(@D)/ssh-add $(TARGET_DIR)/usr/bin/ssh-add
|
||||
$(INSTALL) -D -m 4711 $(@D)/ssh-keysign $(TARGET_DIR)/usr/libexec/ssh-keysign
|
||||
$(INSTALL) -D -m 0755 $(@D)/ssh-pkcs11-helper $(TARGET_DIR)/usr/libexec/ssh-pkcs11-helper
|
||||
$(INSTALL) -D -m 0755 $(@D)/contrib/ssh-copy-id $(TARGET_DIR)/usr/bin/ssh-copy-id
|
||||
endef
|
||||
OPENSSH_POST_INSTALL_TARGET_HOOKS += OPENSSH_INSTALL_CLIENT_PROGRAMS
|
||||
endif
|
||||
|
||||
ifeq ($(BR2_PACKAGE_OPENSSH_SERVER),y)
|
||||
define OPENSSH_INSTALL_SERVER_PROGRAMS
|
||||
$(INSTALL) -D -m 0755 $(@D)/sshd $(TARGET_DIR)/usr/sbin/sshd
|
||||
$(INSTALL) -D -m 0755 $(@D)/sftp-server $(TARGET_DIR)/usr/libexec/sftp-server
|
||||
endef
|
||||
OPENSSH_POST_INSTALL_TARGET_HOOKS += OPENSSH_INSTALL_SERVER_PROGRAMS
|
||||
|
||||
define OPENSSH_INSTALL_INIT_SYSTEMD
|
||||
$(INSTALL) -D -m 644 package/openssh/sshd.service \
|
||||
$(TARGET_DIR)/usr/lib/systemd/system/sshd.service
|
||||
$(OPENSSH_INSTALL_SYSTEMD_SYSUSERS)
|
||||
endef
|
||||
|
||||
define OPENSSH_INSTALL_INIT_SYSV
|
||||
$(INSTALL) -D -m 755 package/openssh/S50sshd \
|
||||
$(TARGET_DIR)/etc/init.d/S50sshd
|
||||
endef
|
||||
endif
|
||||
|
||||
ifeq ($(BR2_PACKAGE_OPENSSH_KEY_UTILS),y)
|
||||
define OPENSSH_INSTALL_KEY_UTILS
|
||||
$(INSTALL) -D -m 0755 $(@D)/ssh-keygen $(TARGET_DIR)/usr/bin/ssh-keygen
|
||||
$(INSTALL) -D -m 0755 $(@D)/ssh-keyscan $(TARGET_DIR)/usr/bin/ssh-keyscan
|
||||
endef
|
||||
OPENSSH_POST_INSTALL_TARGET_HOOKS += OPENSSH_INSTALL_KEY_UTILS
|
||||
endif
|
||||
|
||||
$(eval $(autotools-package))
|
||||
@@ -0,0 +1 @@
|
||||
u sshd - "SSH drop priv user" /var/empty
|
||||
@@ -0,0 +1,11 @@
|
||||
[Unit]
|
||||
Description=OpenSSH server daemon
|
||||
After=syslog.target network.target auditd.service
|
||||
|
||||
[Service]
|
||||
ExecStartPre=/usr/bin/ssh-keygen -A
|
||||
ExecStart=/usr/sbin/sshd -D -e
|
||||
ExecReload=/bin/kill -HUP $MAINPID
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
||||
Reference in New Issue
Block a user