Page tree

Versions Compared


  • This line was added.
  • This line was removed.
  • Formatting was changed.



Following the instructions on this page will give you a Moonshot-enabled OpenSSH Server only.

Numbered Headings

System Preparation

Add the Moonshot libraries.

If you have not already done so, you first need to follow the instructions on how to install the Moonshot Libraries on Debian 9.

Prepare the building environment

  1. Install the required packages.

    Code Block
    apt-get install build-essential dpkg-dev fakeroot gnupg lintian patch patchutils strace unzip pbuilder debian-builder quilt automake autoconf debhelper dh-make devscripts libgtk2.0-dev libedit-dev libselinux1-dev
    apt-get source openssh
    apt-get build-dep openssh

Building instructions

  1. Download the gssapi-generic.patch and the XXXXXX openssh-nulluser-7.4p1.patch to your /tmp directory, then build the packages.

    Code Block
     cd openssh-7.4p1
     cp /tmp/debian-gssapi-generic.patch debian/patches
     cp /tmp/openssh-nulluser-7.4p1.patch debian/patches
     echo "debian-gssapi-generic.patch" >> debian/patches/series
     echo "openssh-nulluser-7.4p1.patch" >> debian/patches/series
     debuild -us -uc

Installation Instructions

  1. The new packages can be installed with dpkg.

    Code Block
    $ dpkg -i ../openssh-server_7.4p1-X_<arch>.deb

Configuration Instructions

Configure APT

Debian 9 currently ships with OpenSSH 7.4p1 as well. So that you can install our OpenSSH, and not have it reverted back to the non-Moonshot-enabled system-provided OpenSSH next time you do an apt-get upgrade, we must tell apt that the manually-installed version has precedence over the official Debian repositories.

  1. Create a file called /etc/apt/preferences.d/moonshot, with the following content:

    Code Block
    Package: *
    Pin: release o=moonshot
    Pin-Priority: 1200
    Package: openssh*
    Pin: release o=Debian
    Pin-Priority: -10

Configure OpenSSH

Once installed, the Moonshot-enabled OpenSSH server will still need a few quick tweaks in order to turn on the Moonshot support.

Follow the configuration instructions on the OpenSSH Server page to configure the server.