OpenSSH Server on Alpine Linux
- Alejandro Perez Mendez
Alpine Linux does not ship with a version of OpenSSH that is compatible with Moonshot. To get Moonshot support for it, you must install a specific Moonshot-enabled version. We have a precompiled version available in our repositories.
Contents
All of the instructions below assume that you have root access, and will work as the root user (either directly or using sudo).
The instructions on this page will replace the system provided OpenSSH packages with the Moonshot enabled ones (don't worry, standard SSH things will still work!)
Following the instructions on this page will give you a Moonshot-enabled OpenSSH Server only.
1. System Preparation
1.1. Add the Moonshot libraries
If you have not already done so, you first need to follow the instructions on how to Install Moonshot Libraries on an Alpine Linux Server.
1.2. Ensure that your hostname is correct
The channel bindings check requires that the hostname of your SSH server match the hostname people are SSHing to. That is, the output of the hostname and hostname -f commands should match the FQDN of the server. If it doesn't, change the relevant line in /etc/hostname to make it so.
2. Installation Instructions
Install the Moonshot-enabled pre-compiled OpenSSH packages using apk. If you had the openssh-server already installed, you will need to uninstall it first:
apk del openssh-server apk add openssh-server@moonshot # in Alpine >= 3.15 apk add openssh-server-krb5@moonshot
3. Configuration Instructions
Once installed, the Moonshot-enabled OpenSSH server will still need a few quick tweaks in order to turn on the Moonshot support.
Follow the configuration instructions on the OpenSSH Server page to configure the server.