146 lines
4.1 KiB
Plaintext
146 lines
4.1 KiB
Plaintext
# Obarun : 66 init/supervisor
|
|
# Maintainer : Eric Vidal <eric@obarun.org>
|
|
# Maintainer : Jean-Michel T.Dydak <jean-michel@obarun.org>
|
|
# Maintainer : YianIris <yianiris At disroot Dot org>
|
|
# Source : url="https://git.obarun.org/pkg/obcore/openssh"
|
|
#----------------
|
|
# Website : https://www.openssh.org/portable.html/
|
|
#-----------------------------------------------------------------------
|
|
|
|
pkgname=openssh
|
|
|
|
pkgdesc='Premier connectivity tool for remote login with the SSH protocol'
|
|
|
|
pkgver=8.8p1
|
|
pkgrel=2
|
|
|
|
url="https://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable"
|
|
|
|
track=branch
|
|
target="${pkgname}-${pkgver}.tar.gz"
|
|
source=(
|
|
"${url}/${target}"
|
|
'sshd.pam'
|
|
'sshd.conf'
|
|
'glibc-2.31.patch'
|
|
)
|
|
|
|
#--BUILD CONFIGURATION--------------------------------------------------
|
|
|
|
makedepends=(
|
|
'linux-headers' 'git' 'autoconf' 'automake')
|
|
|
|
#--BUILD CONTROL--------------------------------------------------------
|
|
|
|
path=(
|
|
--prefix=/usr
|
|
--sbindir=/usr/bin
|
|
--libexecdir=/usr/lib/ssh
|
|
--sysconfdir=/etc/ssh
|
|
)
|
|
|
|
flags=(
|
|
--disable-strip
|
|
--with-ldns
|
|
--with-libedit
|
|
--with-ssl-engine
|
|
--with-pam
|
|
--with-privsep-user=nobody
|
|
--with-kerberos5=/usr
|
|
--with-xauth=/usr/bin/xauth
|
|
--with-md5-passwords
|
|
--with-pid-dir=/run
|
|
--with-default-path=/usr/local/sbin:/usr/local/bin:/usr/bin
|
|
--disable-strip
|
|
)
|
|
|
|
#--BUILD PREPARATION----------------------------------------------------
|
|
|
|
prepare() {
|
|
cd "${pkgname}-${pkgver}"
|
|
|
|
patch -p1 -i "${srcdir}/glibc-2.31.patch"
|
|
|
|
autoreconf
|
|
}
|
|
|
|
#--BUILD----------------------------------------------------------------
|
|
|
|
build() {
|
|
cd "${pkgname}-${pkgver}"
|
|
|
|
./configure "${path[@]}" "${flags[@]}"
|
|
make
|
|
}
|
|
|
|
#--CHECK----------------------------------------------------------------
|
|
|
|
check() {
|
|
cd "${pkgname}-${pkgver}"
|
|
|
|
## Tests require openssh to be already installed system-wide,
|
|
## also connectivity tests will fail under makechrootpkg since
|
|
## it runs as nobody which has /bin/false as login shell.
|
|
|
|
if [[ -e /usr/bin/scp && ! -e /.arch-chroot ]]; then
|
|
make tests || true
|
|
fi
|
|
|
|
}
|
|
|
|
#--PACKAGE--------------------------------------------------------------
|
|
|
|
package() {
|
|
cd "${pkgname}-${pkgver}"
|
|
|
|
make DESTDIR="${pkgdir}" install
|
|
|
|
ln -sf ssh.1.gz "${pkgdir}"/usr/share/man/man1/slogin.1.gz
|
|
install -Dm644 LICENCE "${pkgdir}/usr/share/licenses/${pkgname}/LICENCE"
|
|
|
|
install -Dm644 ../sshd.conf "${pkgdir}"/usr/lib/tmpfiles.d/sshd.conf
|
|
|
|
install -Dm644 ../sshd.pam "${pkgdir}"/etc/pam.d/sshd
|
|
|
|
install -Dm755 contrib/findssl.sh "${pkgdir}"/usr/bin/findssl.sh
|
|
install -Dm755 contrib/ssh-copy-id "${pkgdir}"/usr/bin/ssh-copy-id
|
|
install -Dm644 contrib/ssh-copy-id.1 "${pkgdir}"/usr/share/man/man1/ssh-copy-id.1
|
|
|
|
sed \
|
|
-e '/^#ChallengeResponseAuthentication yes$/c ChallengeResponseAuthentication no' \
|
|
-e '/^#PrintMotd yes$/c PrintMotd no # pam does that' \
|
|
-e '/^#UsePAM no$/c UsePAM yes' \
|
|
-i "${pkgdir}"/etc/ssh/sshd_config
|
|
}
|
|
|
|
#--INSTALL CONFIGURATION------------------------------------------------
|
|
|
|
arch=('x86_64')
|
|
|
|
checkdepends=('inetutils')
|
|
|
|
depends=(
|
|
'krb5'
|
|
'openssl'
|
|
'libedit'
|
|
'ldns')
|
|
|
|
optdepends=(
|
|
'xorg-xauth: X11 forwarding'
|
|
'x11-ssh-askpass: input passphrase in X'
|
|
'libfido2: FIDO/U2F support')
|
|
|
|
backup=(
|
|
'etc/ssh/ssh_config'
|
|
'etc/ssh/sshd_config'
|
|
'etc/pam.d/sshd')
|
|
|
|
#--SECURITY AND LICENCE-------------------------------------------------
|
|
|
|
license=('custom:BSD')
|
|
|
|
sha512sums=('d44cd04445f9c8963513b0d5a7e8348985114ff2471e119a6e344498719ef40f09c61c354888a3be9dabcb5870e5cbe5d3aafbb861dfa1d82a4952f3d233a8df' # openssh-8.8p1.tar.gz
|
|
'298e47a21c337101974fa5237b3110aa3c7638b5fa53bd07661413236c8ed3212b431abaeffd875af6c9a72b4f8e1c8512e1e1960cbfff15bfee62b32d305fc3' # sshd.pam
|
|
'838252ca7bfa69797cba8e31340321ece06a58428b47002cb835678d8e29c6f23f6521269a2b5b17820860a56df308185bc651484db24327cc58191e5f83222a' # sshd.conf
|
|
'aeee097dbf46aa22f411d78a49b9db7b2451dd0351bb5f57c7b3159c7ddc29aa994cd43046c187033c474f8fb2952165536197139eb7c495db99f6697f41637d') # glibc-2.31.patch
|