openssh

Information

License

BSD-2-Clause

Kind

binary

Recipe updated

2025-09-13T12:59:19.000Z

Platforms

• android: armeabi, armeabi-v7a, arm64-v8a, riscv64, x86, x86_64, mips, mip64
• msys: i386, x86_64
• mingw: i386, x86_64, arm, arm64
• windows: x86, x64, arm, arm64, arm64ec
• linux: i386, x86_64, armv7, armv7s, arm64, mips, mips64, mipsel, mips64el, loong64, riscv64, s390x, ppc, ppc64, ppc64el, sparc64
• bsd: i386, x86_64, arm, arm64, ppc, ppc64, ppc64el, riscv64, sparc64
• harmony: armeabi-v7a, arm64-v8a, x86, x86_64
• cross: i386, x86_64, arm, armv7, arm64, mips, mips64, mips64el, riscv, riscv64, loong64, s390x, ppc, ppc64, ppc64el, sh4, sparc64
• wasm: wasm32, wasm64
• iphoneos: arm64, x86_64
• macosx: x86_64, arm64

Options

bsd_auth

Enable BSD auth support. · Type: boolean

default_path

Specify default $PATH environment for server. · Type: string

etc_default_login

Enable using PATH from /etc/default/login. · Type: boolean · Default: true

fd_passing

Enable file descriptor passsing. · Type: boolean · Default: true

hardening

Use toolchain hardening flags. · Type: boolean

ip4in6

Check for and convert IPv4 in IPv6 mapped addresses. · Type: boolean

ipaddr_display

Use ip address instead of hostname in $DISPLAY. · Type: boolean

kerberos5

Enable Kerberos 5 support. · Type: boolean · Default: false

largefile

Enable support for large files. · Type: boolean · Default: true

lastlog

If detected, enable use of lastlog. · Type: boolean · Default: true

lastlog_dir

Specify lastlog location common locations. · Type: string

libcrypto

Select a crypto backend. · Type: string · Default: openssl3 · Values: builtin, libressl, openssl, openssl3

libutil

Enable use of libutil. (login() etc.) · Type: boolean · Default: true

linux_memlock_onfault

Enables memory locking on Linux. · Type: boolean

maildir

Specify your system mail directory. · Type: string

pam

Enable PAM support. · Type: boolean

pam_service

Specify PAM service name. · Type: string

pid_dir

Specify location of sshd.pid file. · Type: string

pkcs11

Enable PKCS#11 support. · Type: boolean · Default: true

privsep_path

Path for privilege separation chroot. · Type: string

privsep_user

Specify non-privileged user for privilege separation. · Type: string

prngd_port

Read entropy from PRNGD/EGD TCP localhost:PORT · Type: number

prngd_socket

Read entropy from PRNGD/EGD socket FILE. · Type: string

pututline

Enable use of pututline() etc. (uwtmp) · Type: boolean · Default: true

pututxline

Enable use of pututxline() etc. (uwtmpx) · Type: boolean · Default: true

retpoline

Enable retpoline spectre mitigation. · Type: boolean

sandbox

Specify privilege separation sandbox. · Type: string · Values: no, capsicum, darwin, rlimit, seccomp_filter

security_key

Enable U2F/FIDO support. · Type: boolean · Default: true

security_key_builtin

Include builtin U2F/FIDO support. · Type: boolean

security_key_standalone

Build standalone sk-libfido2 SecurityKeyProvider. · Type: boolean

selinux

Enable SELinux support. · Type: boolean

shadow

Enable shadow password support. · Type: boolean

ssl_engine

Enable OpenSSL (hardware) ENGINE support. · Type: boolean

stackprotect

Use compiler's stack protection. · Type: boolean

strip

Enable calling strip(1) on install. · Type: boolean · Default: true

superuser_path

Specify different path for super-user. · Type: string

utmp

If detected, enable use of utmp. · Type: boolean · Default: true

utmpx

If detected, enable use of utmpx. · Type: boolean · Default: true

wtmp

If detected, enable use of utmpx. · Type: boolean · Default: true

wtmpx

If detected, enable use of utmpx. · Type: boolean · Default: true

xauth

Specify path to xauth program. · Type: string

zlib

Enable compression support. · Type: boolean · Default: true

Versions

• 10.0p2

Dependencies

No dependencies declared.

Install with xrepo

Install the package independently of a project and inspect its available configuration.

install

xrepo install "openssh 10.0p2"

show info

xrepo info "openssh"

Declare a project tool

This package provides executables, not a library to link. Declare it as a requirement and use xrepo env shell from the project directory to access its environment.

xmake.lua

add_requires("openssh 10.0p2")

project environment

xrepo env shell

Open a package environment

Open a shell with the environment exported by this package. Use the executable names documented by the package.

enter shell

xrepo env -b "openssh 10.0p2" shell