openssh: add openwrt failsafe support
[feed/packages.git] / net / openssh / Makefile
1 #
2 # Copyright (C) 2006-2014 OpenWrt.org
3 #
4 # This is free software, licensed under the GNU General Public License v2.
5 # See /LICENSE for more information.
6 #
7
8 include $(TOPDIR)/rules.mk
9
10 PKG_NAME:=openssh
11 PKG_VERSION:=8.4p1
12 PKG_RELEASE:=2
13
14 PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
15 PKG_SOURCE_URL:=https://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/ \
16 https://ftp.spline.de/pub/OpenBSD/OpenSSH/portable/
17 PKG_HASH:=5a01d22e407eb1c05ba8a8f7c654d388a13e9f226e4ed33bd38748dafa1d2b24
18
19 PKG_LICENSE:=BSD ISC
20 PKG_LICENSE_FILES:=LICENCE
21 PKG_CPE_ID:=cpe:/a:openssh:openssh
22
23 PKG_REMOVE_FILES:=
24
25 include $(INCLUDE_DIR)/package.mk
26
27 define Package/openssh/Default
28 SECTION:=net
29 CATEGORY:=Network
30 DEPENDS:=+libopenssl +zlib
31 TITLE:=OpenSSH
32 MAINTAINER:=Peter Wagner <tripolar@gmx.at>
33 URL:=http://www.openssh.com/
34 SUBMENU:=SSH
35 VARIANT:=without-pam
36 endef
37
38 define Package/openssh-moduli
39 $(call Package/openssh/Default)
40 DEPENDS+= +openssh-keygen
41 TITLE+= moduli file
42 endef
43
44 define Package/openssh-moduli/description
45 OpenSSH server moduli file.
46 endef
47
48 define Package/openssh-client
49 $(call Package/openssh/Default)
50 TITLE+= client
51 ALTERNATIVES:=\
52 200:/usr/bin/ssh:/usr/bin/openssh-ssh \
53 200:/usr/bin/scp:/usr/bin/openssh-scp \
54
55 endef
56
57 define Package/openssh-client/description
58 OpenSSH client.
59 endef
60
61 define Package/openssh-client/conffiles
62 /etc/ssh/ssh_config
63 endef
64
65 define Package/openssh-client-utils
66 $(call Package/openssh/Default)
67 DEPENDS+= +openssh-client +openssh-keygen
68 TITLE+= client utilities
69 endef
70
71 define Package/openssh-client-utils/description
72 OpenSSH client utilities.
73 endef
74
75 define Package/openssh-keygen
76 $(call Package/openssh/Default)
77 TITLE+= keygen
78 endef
79
80 define Package/openssh-keygen/description
81 OpenSSH keygen.
82 endef
83
84 define Package/openssh-server
85 $(call Package/openssh/Default)
86 DEPENDS+= +openssh-keygen
87 TITLE+= server
88 USERID:=sshd=22:sshd=22
89 endef
90
91 define Package/openssh-server/description
92 OpenSSH server.
93 endef
94
95 define Package/openssh-server/conffiles
96 /etc/ssh/sshd_config
97 /etc/ssh/ssh_host_ed25519_key
98 /etc/ssh/ssh_host_ed25519_key.pub
99 /etc/ssh/ssh_host_rsa_key
100 /etc/ssh/ssh_host_rsa_key.pub
101 endef
102
103 define Package/openssh-server-pam
104 $(call Package/openssh/Default)
105 DEPENDS+= +libpthread +openssh-keygen +libpam
106 TITLE+= server (with PAM support)
107 VARIANT:=with-pam
108 USERID:=sshd=22:sshd=22
109 endef
110
111 define Package/openssh-server-pam/description
112 OpenSSH server (with PAM support).
113 endef
114
115 define Package/openssh-server-pam/conffiles
116 /etc/pam.d/sshd
117 /etc/security/access-sshd-local.conf
118 /etc/ssh/sshd_config
119 endef
120
121 define Package/openssh-sftp-client
122 $(call Package/openssh/Default)
123 TITLE+= SFTP client
124 endef
125
126 define Package/openssh-sftp-client/description
127 OpenSSH SFTP client.
128 endef
129
130 define Package/openssh-sftp-server
131 $(call Package/openssh/Default)
132 TITLE+= SFTP server
133 endef
134
135 define Package/openssh-sftp-server/description
136 OpenSSH SFTP server.
137 endef
138
139 define Package/openssh-sftp-avahi-service
140 $(call Package/openssh/Default)
141 TITLE+= (SFTP Avahi service)
142 DEPENDS:=+openssh-sftp-server +avahi-daemon
143 endef
144
145 define Package/openssh-sftp-avahi-service/description
146 This package contains the service definition for announcing
147 SFTP support via mDNS/DNS-SD.
148 endef
149
150 define Package/openssh-sftp-avahi-service/conffiles
151 /etc/avahi/services/sftp-ssh.service
152 endef
153
154 CONFIGURE_ARGS += \
155 --sysconfdir=/etc/ssh \
156 --with-privsep-user=sshd \
157 --with-privsep-path=/var/empty \
158 --disable-strip \
159 --disable-etc-default-login \
160 --disable-lastlog \
161 --disable-utmp \
162 --disable-utmpx \
163 --disable-wtmp \
164 --disable-wtmpx \
165 --without-bsd-auth \
166 --without-kerberos5 \
167 --with-stackprotect \
168 --with$(if $(CONFIG_OPENSSL_ENGINE),,out)-ssl-engine
169
170 ifeq ($(BUILD_VARIANT),with-pam)
171 CONFIGURE_ARGS += \
172 --with-pam
173 else
174 CONFIGURE_ARGS += \
175 --without-pam
176 endif
177
178 CONFIGURE_VARS += LD="$(TARGET_CC)"
179
180 ifeq ($(BUILD_VARIANT),with-pam)
181 TARGET_LDFLAGS += -lpthread
182 endif
183
184 define Build/Compile
185 $(MAKE) -C $(PKG_BUILD_DIR) \
186 DESTDIR="$(PKG_INSTALL_DIR)" \
187 STRIP_OPT="" \
188 all install
189 endef
190
191 define Package/openssh-moduli/install
192 $(INSTALL_DIR) $(1)/etc/ssh
193 $(INSTALL_DATA) $(PKG_INSTALL_DIR)/etc/ssh/moduli $(1)/etc/ssh/
194 endef
195
196 define Package/openssh-client/install
197 $(INSTALL_DIR) $(1)/etc/ssh
198 chmod 0700 $(1)/etc/ssh
199 $(CP) $(PKG_INSTALL_DIR)/etc/ssh/ssh_config $(1)/etc/ssh/
200 $(INSTALL_DIR) $(1)/usr/bin
201 $(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/bin/ssh $(1)/usr/bin/openssh-ssh
202 $(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/bin/scp $(1)/usr/bin/openssh-scp
203 endef
204
205 define Package/openssh-client-utils/install
206 $(INSTALL_DIR) $(1)/usr/bin
207 $(INSTALL_BIN) $(foreach bin,add agent keyscan keysign,$(PKG_BUILD_DIR)/ssh-$(bin)) $(1)/usr/bin/
208 endef
209
210 define Package/openssh-keygen/install
211 $(INSTALL_DIR) $(1)/usr/bin
212 $(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/bin/ssh-keygen $(1)/usr/bin/
213 endef
214
215 define Package/openssh-server/install
216 $(INSTALL_DIR) $(1)/etc/ssh
217 chmod 0700 $(1)/etc/ssh
218 $(INSTALL_DATA) $(PKG_INSTALL_DIR)/etc/ssh/sshd_config $(1)/etc/ssh/
219 sed -r -i 's,^#(HostKey /etc/ssh/ssh_host_(rsa|ed25519)_key)$$$$,\1,' $(1)/etc/ssh/sshd_config
220 $(INSTALL_DIR) $(1)/etc/init.d
221 $(INSTALL_BIN) ./files/sshd.init $(1)/etc/init.d/sshd
222 $(INSTALL_DIR) $(1)/lib/preinit
223 $(INSTALL_BIN) ./files/sshd.failsafe $(1)/lib/preinit/99_10_failsafe_sshd
224 $(INSTALL_DIR) $(1)/usr/sbin
225 $(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/sbin/sshd $(1)/usr/sbin/
226 endef
227
228 define Package/openssh-server-pam/install
229 $(call Package/openssh-server/install,$(1))
230 sed -i 's,#PasswordAuthentication yes,PasswordAuthentication no,g' $(1)/etc/ssh/sshd_config
231 sed -i 's,#UsePAM no,UsePAM yes,g' $(1)/etc/ssh/sshd_config
232 $(INSTALL_DIR) $(1)/etc/pam.d
233 $(INSTALL_DATA) ./files/sshd.pam $(1)/etc/pam.d/sshd
234 $(INSTALL_DIR) $(1)/etc/security
235 $(INSTALL_DATA) ./files/sshd.pam-access $(1)/etc/security/access-sshd-local.conf
236 endef
237
238 define Package/openssh-sftp-client/install
239 $(INSTALL_DIR) $(1)/usr/bin
240 $(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/bin/sftp $(1)/usr/bin/
241 endef
242
243 define Package/openssh-sftp-server/install
244 $(INSTALL_DIR) $(1)/usr/lib
245 $(CP) $(PKG_INSTALL_DIR)/usr/lib/sftp-server $(1)/usr/lib/
246 $(INSTALL_DIR) $(1)/usr/libexec
247 ln -sf ../lib/sftp-server $(1)/usr/libexec/sftp-server
248 endef
249
250 define Package/openssh-sftp-avahi-service/install
251 $(INSTALL_DIR) $(1)/etc/avahi/services
252 $(INSTALL_DATA) ./files/sftp-ssh.service $(1)/etc/avahi/services/
253 endef
254
255 $(eval $(call BuildPackage,openssh-client))
256 $(eval $(call BuildPackage,openssh-moduli))
257 $(eval $(call BuildPackage,openssh-client-utils))
258 $(eval $(call BuildPackage,openssh-keygen))
259 $(eval $(call BuildPackage,openssh-server))
260 $(eval $(call BuildPackage,openssh-server-pam))
261 $(eval $(call BuildPackage,openssh-sftp-client))
262 $(eval $(call BuildPackage,openssh-sftp-server))
263 $(eval $(call BuildPackage,openssh-sftp-avahi-service))