e7d04dd2df
dropbear generates its keys at the first connection, and wants to save
them in /etc/dropbear (not configurable).
Currently, our /etc/dropbear is a directory.
When the filesystem is read-only, dropbear can't save its keys, so
refuses all connections.
Fix that with:
- at build time, create /etc/dropbear as a symlink to
/var/run/dropbear
- at runtime, if the filesystem is RW (we can rm /etc/dropbear),
we replace the symlink with an actual directory; otherwise,
when the filesystem is RO (we can't rm /etc/dropbear), we create
/var/run/dropbear so the symlink points to an existing directory
Signed-off-by: "Yann E. MORIN" <yann.morin.1998@free.fr>
Cc: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Cc: Arnout Vandecappelle <arnout@mind.be>
Cc: Maxime Hadjinlian <maxime.hadjinlian@gmail.com>
Acked-by: "Maxime Hadjinlian" <maxime.hadjinlian@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
58 lines
1.1 KiB
Bash
58 lines
1.1 KiB
Bash
#!/bin/sh
|
|
#
|
|
# Starts dropbear sshd.
|
|
#
|
|
|
|
# Allow a few customizations from a config file
|
|
test -r /etc/default/dropbear && . /etc/default/dropbear
|
|
|
|
start() {
|
|
DROPBEAR_ARGS="$DROPBEAR_ARGS -R"
|
|
|
|
echo -n "Starting dropbear sshd: "
|
|
umask 077
|
|
|
|
# If /etc/dropbear is not a directory, and
|
|
# - the filesystem is RO (i.e. we can not rm the symlink),
|
|
# create the directory pointed to by the symlink.
|
|
# - the filesystem is RW (i.e. we can rm the symlink),
|
|
# replace the symlink with an actual directory
|
|
if ! [ -d /etc/dropbear ]; then
|
|
if rm -f /etc/dropbear; then
|
|
mkdir -p /etc/dropbear
|
|
else
|
|
mkdir -p $(readlink /etc/dropbear)
|
|
fi
|
|
fi
|
|
|
|
start-stop-daemon -S -q -p /var/run/dropbear.pid \
|
|
--exec /usr/sbin/dropbear -- $DROPBEAR_ARGS
|
|
[ $? = 0 ] && echo "OK" || echo "FAIL"
|
|
}
|
|
stop() {
|
|
echo -n "Stopping dropbear sshd: "
|
|
start-stop-daemon -K -q -p /var/run/dropbear.pid
|
|
[ $? = 0 ] && echo "OK" || echo "FAIL"
|
|
}
|
|
restart() {
|
|
stop
|
|
start
|
|
}
|
|
|
|
case "$1" in
|
|
start)
|
|
start
|
|
;;
|
|
stop)
|
|
stop
|
|
;;
|
|
restart|reload)
|
|
restart
|
|
;;
|
|
*)
|
|
echo "Usage: $0 {start|stop|restart}"
|
|
exit 1
|
|
esac
|
|
|
|
exit $?
|