Changeset 0e389d13 for postlfs/security/openssh-systemd.xml

Timestamp:

10/26/2014 02:55:55 PM (10 years ago)

Author:

Krejzi <krejzi@…>

Branches:

krejzi/svn

Children:

169031f

Parents:

cb9c6940

Message:

More conversion.

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/branches/systemd-ng@14740 af4574ff-66df-0310-9fd7-8a98e5e911e0

File:

• postlfs/security/openssh-systemd.xml (moved) (moved from postlfs/security/openssh.xml ) (4 diffs)

postlfs/security/openssh-systemd.xml

@@ -83 +83 @@
     <para role="required">
       <xref linkend="openssl"/> or
-      <ulink url="http://www.libressl.org/">LibreSSL Portable</ulink></para>
+      <ulink url="http://www.libressl.org/">LibreSSL Portable</ulink>
+    </para>
 
     <bridgehead renderas="sect4">Optional</bridgehead>
@@ -302 +303 @@
 
     <sect3  id="openssh-init">
-      <title>Boot Script</title>
-
-      <para>
-        To start the SSH server at system boot, install the
-      <filename>/etc/rc.d/init.d/sshd</filename> init script included
-      in the <xref linkend="bootscripts"/> package.
-        </para>
+      <title>Systemd Units</title>
+
+      <para>
+        To start the <command>sshd</command> daemon at boot,
+        install the systemd units from the <xref linkend="bootscripts"/>
+        package by running the following command as the
+        <systemitem class="username">root</systemitem> user:
+      </para>
 
       <indexterm zone="openssh openssh-init">
@@ -315 +317 @@
 
 <screen role="root"><userinput>make install-sshd</userinput></screen>
+
+      <note>
+        <para>
+          This package comes with two types of units: A service file and a socket file. 
+          The service file will start sshd daemon once at boot and it will keep running until the 
+          system shuts down. The socket file will make systemd listen on sshd port (Default 22, needs 
+          to be edited for anything else) and will start sshd daemon when something tries to connect 
+          to that port and stop the daemon when the connection is terminated. This is 
+          called socket activation.
+
+          By default, the first method is used - sshd daemon is started at boot and stopped at shutdown. 
+          If the socket method is desired, you need to run as the
+          <systemitem class="username">root</systemitem> user:
+
+<screen role="root"><userinput>systemctl stop sshd &amp;&amp; 
+systemctl disable sshd &amp;&amp;
+systemctl enable sshd.socket &amp;&amp;
+systemctl start sshd.socket</userinput></screen>
+        </para>
+      </note>
+
     </sect3>
   </sect2>
@@ -336 +359 @@
         <seg>
           /etc/ssh,
+          /usr/libexec/openssh,
           /usr/share/doc/openssh-&openssh-version;, and
           /var/lib/sshd