On Wed, Apr 22, 2020 at 6:52 AM Alex Kiernan <[email protected]> wrote:
>
> sshd.socket launches the templated [email protected], so by moving the
> sshdgenkeys.service to sshd.socket, key generation can start in advance
> of a connection.

Is deferring key generation until the first connection a bug or by design?

> Signed-off-by: Alex Kiernan <[email protected]>
> ---
>
>  meta/recipes-connectivity/openssh/openssh/sshd.socket   | 1 +
>  meta/recipes-connectivity/openssh/openssh/[email protected] | 2 --
>  2 files changed, 1 insertion(+), 2 deletions(-)
>
> diff --git a/meta/recipes-connectivity/openssh/openssh/sshd.socket 
> b/meta/recipes-connectivity/openssh/openssh/sshd.socket
> index 12c39b26b59b..8d76d623097b 100644
> --- a/meta/recipes-connectivity/openssh/openssh/sshd.socket
> +++ b/meta/recipes-connectivity/openssh/openssh/sshd.socket
> @@ -1,5 +1,6 @@
>  [Unit]
>  Conflicts=sshd.service
> +Wants=sshdgenkeys.service
>
>  [Socket]
>  ExecStartPre=@BASE_BINDIR@/mkdir -p /var/run/sshd
> diff --git a/meta/recipes-connectivity/openssh/openssh/[email protected] 
> b/meta/recipes-connectivity/openssh/openssh/[email protected]
> index 9d83dfb2bb1c..422450c7a190 100644
> --- a/meta/recipes-connectivity/openssh/openssh/[email protected]
> +++ b/meta/recipes-connectivity/openssh/openssh/[email protected]
> @@ -1,13 +1,11 @@
>  [Unit]
>  Description=OpenSSH Per-Connection Daemon
> -Wants=sshdgenkeys.service
>  After=sshdgenkeys.service
>
>  [Service]
>  Environment="SSHD_OPTS="
>  EnvironmentFile=-/etc/default/ssh
>  ExecStart=-@SBINDIR@/sshd -i $SSHD_OPTS
> -ExecReload=@BASE_BINDIR@/kill -HUP $MAINPID
>  StandardInput=socket
>  StandardError=syslog
>  KillMode=process
> --
> 2.17.1
>
> 
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.

View/Reply Online (#137393): 
https://lists.openembedded.org/g/openembedded-core/message/137393
Mute This Topic: https://lists.openembedded.org/mt/73195919/21656
Group Owner: [email protected]
Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub  
[[email protected]]
-=-=-=-=-=-=-=-=-=-=-=-

Reply via email to