X-Git-Url: https://gerrit.o-ran-sc.org/r/gitweb?a=blobdiff_plain;f=meta-starlingx%2Fmeta-stx-integ%2Frecipes-connectivity%2Fopenssh%2Fopenssh_7.%25.bbappend;fp=meta-starlingx%2Fmeta-stx-integ%2Frecipes-connectivity%2Fopenssh%2Fopenssh_7.%25.bbappend;h=9765db344a385bc6d534895a14ca2b4c043376ba;hb=e0634c6eaf2fe2641a0fb90e84a5defb880b1335;hp=0000000000000000000000000000000000000000;hpb=210d0f78485e760dffcdd3f630f59cec797f3f11;p=pti%2Frtp.git

diff --git a/meta-starlingx/meta-stx-integ/recipes-connectivity/openssh/openssh_7.%.bbappend b/meta-starlingx/meta-stx-integ/recipes-connectivity/openssh/openssh_7.%.bbappend
new file mode 100644
index 0000000..9765db3
--- /dev/null
+++ b/meta-starlingx/meta-stx-integ/recipes-connectivity/openssh/openssh_7.%.bbappend
@@ -0,0 +1,73 @@
+#
+## Copyright (C) 2019 Wind River Systems, Inc.
+#
+#  Licensed under the Apache License, Version 2.0 (the "License");
+#  you may not use this file except in compliance with the License.
+#  You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+#  Unless required by applicable law or agreed to in writing, software
+#  distributed under the License is distributed on an "AS IS" BASIS,
+#  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+#  See the License for the specific language governing permissions and
+#  limitations under the License.
+
+FILESEXTRAPATHS_prepend := "${THISDIR}/files:"
+
+BRANCH = "r/stx.3.0"
+SRCREV = "d778e862571957ece3c404c0c37d325769772fde"
+
+SRC_URI += "\
+    file://stx/sshd.init \
+    file://stx/sshd-keygen \
+    file://stx/sshd-keygen.service \
+    file://stx/sshd.sysconfig \
+    git://opendev.org/starlingx/config-files.git;protocol=https;rev=${SRCREV};branch=${BRANCH};destsuffix=stx-configfiles;subpath=openssh-config \
+    file://openssh-config-rm-hmac-ripemd160.patch \
+"
+
+do_unpack_append() {
+    bb.build.exec_func('do_copy_config_files', d)
+}
+
+do_copy_config_files () {
+    cp -f ${WORKDIR}/stx-configfiles/files/sshd_config ${S}
+    # remove the unsupported and deprecated options
+    sed -i -e 's/^\(GSSAPIAuthentication.*\)/#\1/' \
+           -e 's/^\(GSSAPICleanupCredentials.*\)/#\1/' \
+           -e 's/^\(UsePrivilegeSeparation.*\)/#\1/' \
+           ${S}/sshd_config
+    cp -f ${WORKDIR}/stx-configfiles/files/ssh_config ${S}
+}
+
+SYSTEMD_SERVICE_${PN}-sshd = "sshd.service"
+
+do_install_append () {
+    rm -f ${D}${systemd_system_unitdir}/sshd.socket
+    rm -f ${D}${systemd_system_unitdir}/sshd@service.socket
+    rm -f ${D}${systemd_system_unitdir}/sshdgenkeys.service
+
+    install -d ${D}/${sysconfdir}/init.d/
+    install -m 755 ${WORKDIR}/stx/sshd.init ${D}/${sysconfdir}/init.d/sshd
+
+    install -d ${D}/${sysconfdir}/sysconfig/
+    install -m 644 ${WORKDIR}/stx/sshd.sysconfig ${D}/${sysconfdir}/sysconfig/sshd
+
+    install -m 755 ${WORKDIR}/stx/sshd-keygen ${D}/${sbindir}/sshd-keygen
+    install -m644 ${WORKDIR}/stx-configfiles/files/sshd.service ${D}/${systemd_system_unitdir}/sshd.service
+    install -m644 ${WORKDIR}/stx/sshd-keygen.service ${D}/${systemd_system_unitdir}/sshd-keygen.service
+
+    install -d ${D}/${sysconfdir}/tmpfiles.d
+    echo "d ${localstatedir}/run/sshd 0755 root root -" >> ${D}/${sysconfdir}/tmpfiles.d/sshd.conf
+
+}
+
+RDEPENDS_${PN} += "bash"
+RDEPENDS_${PN}-sshd += "bash"
+
+# allow both systemd service and sysvinit scripts are installed
+DISTRO_FEATURES_BACKFILL_CONSIDERED_remove = "sysvinit"
+
+USERADD_PARAM_${PN}-sshd = "-r -d /var/empty/sshd -s /sbin/nologin -g sshd -c 'Privilege-separated SSH' sshd"
+GROUPADD_PARAM_${PN}-sshd = "-r ssh_keys; -r sshd"