Add the Moonshot libraries.
If you have not already done so, you first need to follow the instructions on how to install the Moonshot Libraries on Debian 9.
Prepare the building environment
Install the required packages.
apt-get install build-essential dpkg-dev fakeroot gnupg lintian patch patchutils strace unzip pbuilder debian-builder quilt automake autoconf debhelper dh-make devscripts libgtk2.0-dev libedit-dev libselinux1-dev
apt-get source openssh
apt-get build-dep openssh
Download the gssapi-generic.patch and the XXXXXX openssh-nulluser-7.4p1.patch to your /tmp directory, then build the packages.
cp /tmp/debian-gssapi-generic.patch debian/patches
cp /tmp/openssh-nulluser-7.4p1.patch debian/patches
echo "debian-gssapi-generic.patch" >> debian/patches/series
echo "openssh-nulluser-7.4p1.patch" >> debian/patches/series
debuild -us -uc
The new packages can be installed with dpkg.
$ dpkg -i ../openssh-server_7.4p1-X_<arch>.deb
Debian 9 currently ships with OpenSSH 7.4p1 as well. So that you can install our OpenSSH, and not have it reverted back to the non-Moonshot-enabled system-provided OpenSSH next time you do an
apt-get upgrade, we must tell
apt that the manually-installed version has precedence over the official Debian repositories.
Create a file called
/etc/apt/preferences.d/moonshot, with the following content:
Pin: release o=moonshot
Pin: release o=Debian
Once installed, the Moonshot-enabled OpenSSH server will still need a few quick tweaks in order to turn on the Moonshot support.
Follow the configuration instructions on the OpenSSH Server page to configure the server.