Add OpenSSH package

Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>

board/alix/ROOTFS

@@ -26,3 +26,4 @@ file
 iana-etc
 btrfs-progs
 dosfstools
+openssh

board/rpi3/ROOTFS

@@ -30,3 +30,4 @@ iana-etc
 btrfs-progs
 dosfstools
 kbd
+openssh

pkg/openssh/build

@@ -0,0 +1,46 @@
+VERSION="7.6p1"
+SRCDIR="openssh-${VERSION}"
+TARBALL="${SRCDIR}.tar.gz"
+URL="https://cloudflare.cdn.openbsd.org/pub/OpenBSD/OpenSSH/portable"
+SHA256SUM="a323caeeddfe145baaa0db16e98d784b1fbc7dd436a6bf1f479dfd5cd1d21723"
+DEPENDS="openssl zlib"
+
+prepare() {
+	apply_patches
+}
+
+build() {
+	local SOURCE="$1"
+	local BUILD="$2"
+
+	$SOURCE/configure --prefix="" --host="$TARGET" --sbindir=/bin \
+			  --with-pie --without-pam --without-stackprotect \
+			  --without-selinux --disable-strip \
+			  --with-sandbox=seccomp_filter \
+			  --with-privsep-path=/var/lib/sshd
+
+	make -j $NUMJOBS
+}
+
+deploy() {
+	local SOURCE="$1"
+	local BUILD="$2"
+	local DEPLOY="$3"
+
+	make DESTDIR="$DEPLOY" install
+
+	mkdir -p "$DEPLOY/var/lib/sshd"
+	chmod 700 "$DEPLOY/var/lib/sshd"
+
+	rm -r "$DEPLOY/share"
+
+	for i in ${DEPLOY}/bin/* ${DEPLOY}/libexec/*; do
+		if [ -f $i ]; then
+			${TARGET}-strip --discard-all $i
+		fi
+	done
+
+	unset -v i
+
+	install -v -m755 "$SOURCE/contrib/ssh-copy-id" "$DEPLOY/bin"
+}

pkg/rootfs/etc/group

@@ -20,4 +20,5 @@ render:x:18:
 wheel:x:19:
 input:x:24:
 mail:x:34:
+sshd:x:50:
 nogroup:x:99:

pkg/rootfs/etc/passwd

@@ -2,4 +2,5 @@ root:x:0:0:root:/root:/bin/bash
 bin:x:1:1:bin:/dev/null:/bin/false
 daemon:x:6:6:Daemon User:/dev/null:/bin/false
 messagebus:x:18:18:D-Bus Message Daemon User:/var/run/dbus:/bin/false
+sshd:x:50:50:sshd PrivSep:/var/lib/sshd:/bin/false
 nobody:x:99:99:Unprivileged User:/dev/null:/bin/false