[arch-commits] Commit in dropbear/repos (4 files)

[Alexander Rødseth]

    Date: Thursday, September 17, 2020 @ 15:10:15
  Author: arodseth
Revision: 708693

archrelease: copy trunk to community-testing-x86_64

Added:
  dropbear/repos/community-testing-x86_64/
  dropbear/repos/community-testing-x86_64/PKGBUILD
    (from rev 708692, dropbear/trunk/PKGBUILD)
  dropbear/repos/community-testing-x86_64/dropbear.service
    (from rev 708692, dropbear/trunk/dropbear.service)
  dropbear/repos/community-testing-x86_64/localoptions.h
    (from rev 708692, dropbear/trunk/localoptions.h)

------------------+
 PKGBUILD         |   61 +++++++++++++++++++++++++++++++++++++++++++++++++++++
 dropbear.service |   10 ++++++++
 localoptions.h   |   43 +++++++++++++++++++++++++++++++++++++
 3 files changed, 114 insertions(+)

Copied: dropbear/repos/community-testing-x86_64/PKGBUILD (from rev 708692, dropbear/trunk/PKGBUILD)
===================================================================
--- community-testing-x86_64/PKGBUILD	                        (rev 0)
+++ community-testing-x86_64/PKGBUILD	2020-09-17 15:10:15 UTC (rev 708693)
@@ -0,0 +1,61 @@
+# Maintainer: Alexander F. Rødseth <xyproto at archlinux.org>
+# Contributor: Timothy Redaelli <timothy.redaelli at gmail.com>
+# Contributor: Bartlomiej Piotrowski <nospam at bpiotrowski.pl>
+# Contributor: Jaroslav Lichtblau <dragonlord at aur.archlinux.org>
+# Contributor: Jason Pierce <pierce.json at gmail.com>
+# Contributor: Jeremy Cowgar <jeremy at cowgar.com>
+# Contributor: Simon Perry <aur at sanxion.net>
+
+pkgbase=dropbear
+pkgname=(dropbear dropbear-scp)
+pkgver=2020.80
+pkgrel=2
+pkgdesc='Lightweight SSH server'
+arch=(x86_64)
+url='https://github.com/mkj/dropbear'
+license=(MIT)
+options=(emptydirs)
+makedepends=(git)
+validpgpkeys=('F7347EF2EE2E07A267628CA944931494F29C6773')
+source=("git+$url#commit=80e928170150f2f11ce6aeaa030870608bb6323b" # tag: DROPBEAR_2020.80
+        localoptions.h
+        $pkgname.service)
+sha256sums=('SKIP'
+            'a284c2a2570d5b1f98f38fc044ab6fd45b9834be7a91216df7f159257b54e0bc'
+            '0c0e5b9d121b9d728fed92d6574f2a96d74e4f8a61169dc1e452488f43bb1484')
+
+prepare() {
+  cp -f localoptions.h $pkgname/localoptions.h
+}
+
+build() {
+  cd $pkgname
+  autoconf && autoheader
+  ./configure --bindir=/usr/bin --prefix=/usr --sbindir=/usr/bin
+  make PROGRAMS='dbclient dropbear dropbearconvert dropbearkey scp' \
+    SCPPROGRESS=1
+}
+
+package_dropbear() {
+  depends=(libxcrypt zlib)
+
+  install -d "$pkgdir/etc/$pkgname"
+  make -C $pkgbase install DESTDIR="$pkgdir"
+  install -Dm644 $pkgname.service \
+    "$pkgdir/usr/lib/systemd/system/$pkgname.service"
+  install -Dm644 $pkgbase/LICENSE \
+    "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
+}
+
+package_dropbear-scp() {
+  pkgdesc='Lightweight application for copying files over SSH'
+  provides=(scp)
+  conflicts=(openssh)
+
+  make -C $pkgbase install PROGRAMS=scp DESTDIR="$pkgdir"
+  install -Dm644 $pkgbase/LICENSE \
+    "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
+  rmdir "$pkgdir/usr/share/man"{/man1,}
+}
+
+# vim: ts=2 sw=2 et:

Copied: dropbear/repos/community-testing-x86_64/dropbear.service (from rev 708692, dropbear/trunk/dropbear.service)
===================================================================
--- community-testing-x86_64/dropbear.service	                        (rev 0)
+++ community-testing-x86_64/dropbear.service	2020-09-17 15:10:15 UTC (rev 708693)
@@ -0,0 +1,10 @@
+[Unit]
+Description=Dropbear SSH Server
+After=network.target
+
+[Service]
+Type=simple
+ExecStart=/usr/bin/dropbear -F -P /run/dropbear.pid -R
+
+[Install]
+WantedBy=multi-user.target

Copied: dropbear/repos/community-testing-x86_64/localoptions.h (from rev 708692, dropbear/trunk/localoptions.h)
===================================================================
--- community-testing-x86_64/localoptions.h	                        (rev 0)
+++ community-testing-x86_64/localoptions.h	2020-09-17 15:10:15 UTC (rev 708693)
@@ -0,0 +1,43 @@
+/*
+ * Arch Linux configuration for DropBear
+ *
+ * The majority of these options are disabled or enabled as a result of
+ * running ssh-audit:
+ *
+ * https://github.com/arthepsy/ssh-audit
+ */
+
+/* Disable CBC mode for ciphers */
+#define DROPBEAR_ENABLE_CBC_MODE 0
+
+/* Disable X11 forwarding on the server */
+#define DROPBEAR_X11FWD 0
+
+/* Disable reverse DNS lookups */
+#define DO_HOST_LOOKUP 0
+
+/* Enable twofish128 and twofish256 */
+#define DROPBEAR_TWOFISH128 1
+#define DROPBEAR_TWOFISH256 1
+
+/* Disable SHA-96 */
+#define DROPBEAR_SHA1_HMAC 0
+#define DROPBEAR_SHA1_96_HMAC 0
+
+/* Disable DSS */
+#define DROPBEAR_DSS 0
+
+/* Disable ECDH */
+#define DROPBEAR_ECDH 0
+
+/* Keep ECDSA, for practical purposes */
+#define DROPBEAR_ECDSA 1
+
+/* SFTP server path */
+#define SFTPSERVER_PATH "/usr/lib/ssh/sftp-server"
+
+/* Spend a small amount of bytes for an increase in performance */
+#define DROPBEAR_SMALL_CODE 0
+
+/* Default path */
+#define DEFAULT_PATH "/usr/bin"