f26bc1524f
Add new FIDO2 support, enable by default as recommended by upstream.
66 lines
2.2 KiB
Bash
66 lines
2.2 KiB
Bash
# Template file for 'openssh'
|
|
pkgname=openssh
|
|
version=8.2p1
|
|
revision=1
|
|
build_style=gnu-configure
|
|
configure_args="--datadir=/usr/share/openssh
|
|
--sysconfdir=/etc/ssh --without-selinux --with-privsep-user=nobody
|
|
--with-mantype=doc --without-rpath --with-xauth=/usr/bin/xauth
|
|
--disable-strip --with-privsep-path=/var/chroot/ssh
|
|
--with-pid-dir=/run --with-pam
|
|
--with-libedit --with-Werror
|
|
$(vopt_with ldns ldns=$XBPS_CROSS_BASE/usr)
|
|
$(vopt_if ssl --with-ssl-engine --without-openssl)
|
|
$(vopt_if gssapi --with-kerberos5=$XBPS_CROSS_BASE/usr --without-kerberos5)
|
|
$(vopt_if fido2 --with-security-key-builtin)
|
|
LD=$CC ac_cv_header_sys_cdefs_h=false"
|
|
hostmakedepends="autoconf"
|
|
makedepends="libedit-devel pam-devel zlib-devel
|
|
$(vopt_if gssapi 'mit-krb5-devel') $(vopt_if ldns 'libldns-devel')
|
|
$(vopt_if ssl 'libressl-devel') $(vopt_if fido2 'libfido2-devel')"
|
|
short_desc="OpenSSH free Secure Shell (SSH) client and server implementation"
|
|
maintainer="Enno Boland <gottox@voidlinux.org>"
|
|
license="BSD-2-Clause, ISC"
|
|
homepage="https://www.openssh.com"
|
|
distfiles="https://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/${pkgname}-${version}.tar.gz"
|
|
checksum=43925151e6cf6cee1450190c0e9af4dc36b41c12737619edff8bcebdff64e671
|
|
conf_files="/etc/ssh/moduli /etc/ssh/ssh_config /etc/ssh/sshd_config /etc/pam.d/sshd"
|
|
make_dirs="/var/chroot/ssh 0755 root root"
|
|
|
|
# Package build options
|
|
build_options="fido2 gssapi ldns ssl"
|
|
build_options_default="fido2 ldns ssl"
|
|
desc_option_fido2="Enable support for FIDO2 USB tokens"
|
|
|
|
CFLAGS="-Wno-format-truncation -Wno-stringop-truncation"
|
|
|
|
case $XBPS_TARGET_MACHINE in
|
|
i686-musl)
|
|
CFLAGS+=" -fno-stack-protector"
|
|
configure_args+=" --disable-wtmp --disable-utmp"
|
|
;;
|
|
*-musl)
|
|
configure_args+=" --disable-wtmp --disable-utmp"
|
|
;;
|
|
esac
|
|
|
|
pre_configure() {
|
|
autoreconf -fi
|
|
vsed -i -e 's|#include <sys/sysctl.h>||' servconf.c
|
|
}
|
|
|
|
post_install() {
|
|
vinstall contrib/sshd.pam.generic 644 etc/pam.d sshd
|
|
vbin contrib/ssh-copy-id
|
|
vman contrib/ssh-copy-id.1
|
|
vlicense LICENCE
|
|
|
|
# configure to use PAM
|
|
vsed -i ${DESTDIR}/etc/ssh/sshd_config \
|
|
-e 's|^#\(UsePAM\) no|\1 yes|g' \
|
|
-e 's|^#\(ChallengeResponseAuthentication\) yes|\1 no|g' \
|
|
-e 's|^#\(PrintMotd\) yes|\1 no|g'
|
|
|
|
vinstall ${FILESDIR}/sshd.pam 644 etc/pam.d sshd
|
|
vsv sshd
|
|
}
|