2021-10-22 22:32:43 -06:00
|
|
|
# openssh-server
|
|
|
|
|
Bastille template to bootstrap openssh-server
|
|
|
|
|
|
|
|
|
|
## Usage
|
|
|
|
|
```shell
|
2023-10-03 14:15:03 -06:00
|
|
|
bastille template TARGET security/openssh-server
|
2021-10-22 22:32:43 -06:00
|
|
|
```
|
|
|
|
|
|
|
|
|
|
## Optional:
|
|
|
|
|
The following are optional customizations to this template and basic
|
|
|
|
|
instructions on how to do so.
|
|
|
|
|
|
|
|
|
|
### custom config
|
|
|
|
|
Use a custom `/etc/ssh/sshd_config` in the template:
|
|
|
|
|
|
2025-06-21 21:22:34 -07:00
|
|
|
1. fork security/openssh-server
|
2021-10-22 22:32:43 -06:00
|
|
|
2. add an `CP etc` directive to the Bastillefile
|
|
|
|
|
3. add an `etc/ssh/sshd_config` in the template
|
|
|
|
|
4. commit; bootstrap fork; apply template
|
|
|
|
|
|
|
|
|
|
### Use custom `sshd_flags`:
|
|
|
|
|
Use custom `sshd_flags` in jailed ssh service:
|
|
|
|
|
|
2025-06-21 21:22:34 -07:00
|
|
|
1. fork security/openssh-server
|
2021-10-22 22:32:43 -06:00
|
|
|
2. update the Bastillefile and add `SYSRC sshd_flags=""`
|
|
|
|
|
3. commit; bootstrap fork; apply template
|