* Colin Watson <cjwat...@debian.org> [250421 19:09]:
Yeah, I think the requested change would be counterproductive for
other users: a lot of people want sshd enabled as soon as possible,
and most people don't explicitly set ListenAddress.
+1
If it helps in your local setup, I'd encourage you to use a local
override file.
I'd be happy to add additional advice about this to README.Debian if
somebody else writes it. But ideally it'd be more fine-grained than
just whacking in a dependency on network-online.target; perhaps we can
advise people how to configure their system so that ssh.service waits
for a particular interface to come up.
Another way might be to set IP_FREEBIND, possibly with an sshd
config option.
Personally I just enable the ip_nonlocal_bind sysctl on machines
where I intend to bind services (not just sshd) to specific IP
addresses.
Chris
