← Back to Layer Index

openssh-server

general v1.2.0

OpenSSH server daemon and local user SSH key setup. No SSH keys are installed by default. A unique host identity is generated on first boot (see host_keydir to pre-seed one instead).

Relationships

Depends on:

device-user-admin

Required by:

bookworm-minbase trixie-minbase

Requires Provider: systemd

Configuration Variables

Declares (prefix: ssh):

Variable Description Default Validation Policy
IGconf_ssh_pubkey_user1 Controls /home/${IGconf_device_user1}/.ssh/authorized_keys By default, authorized_keys will be created empty. If set to a valid file path, the contents of the file is used to populate authorized_keys. If set to a non-empty string that's not a valid file path, the contents of the variable is used to populate authorized_keys. Since it's possible to pass variables via the command line, one way to specify this in build scripts could be as follows: IGconf_ssh_pubkey_user1=$(< /path/to/.ssh/id_rsa.pub) <empty> String value (may be empty) immediate
IGconf_ssh_pubkey_only Applies sshd settings via /etc/ssh/sshd_config.d/ If n, default sshd settings are in place which means password authentication is enabled. If y, only SSH public key authentication is enabled. Challenge Response, Password and Kerberos authentication are disabled. If alternative sshd settings are required, consider using a device or image rootfs-overlay, or custom bdebstrap hook. n Boolean value - accepts: true/false, 1/0, yes/no, y/n (case insensitive) immediate
IGconf_ssh_host_keydir Path to a directory containing pre-generated SSH host key pairs (ssh_host__key and ssh_host__key.pub to install into the image, giving the device a known identity, instead of a generated one. Keys generated by openssh-server's postinst are always removed. A host SSH key generation service runs on every boot and fills in whichever key types are missing, provided it can write to /etc/ssh/. <empty> String value (may be empty) immediate

mmdebstrap

Packages

Installs:

Attributes

File: net-misc/openssh-server.yaml

Type: static

Overlay: base