0004403: Etc Config Files When Installing OpenSSH in Solaris Zone or NFS environment

OpenCSW Bug Tracker

Project:

Viewing Issue Simple Details [ Jump to Notes ]

[ View Advanced ] [ Issue History ] [ Print ]

Category

Severity

Reproducibility

Date Submitted

Last Update

0004403

[openssh] regular use

major

always

2010-04-20 16:27

2011-11-04 23:01

Reporter

ckmehta1

View Status

public

Assigned To

yann

Priority

normal

Resolution

fixed

Status

closed

Summary

0004403: Etc Config Files When Installing OpenSSH in Solaris Zone or NFS environment

Description

This might be on your internal to-do list, but currently when you install OpenCSW version of OpenSSH, in a global zone and you either want to share that installed version of OpenSSH via NFS and/or inherited zone environment, the etc-config files for OpenSSH cannot be easily abstracted for a particular NFS-share-client or zone.

Since the etc-config files are located in /opt/csw/etc/ssh, when you zone-inherit or NFS-share the /opt/csw directory, as currently compiled, OpenSSH is only going to look at /opt/csw/etc/ssh.

Ideally OpenSSH could be compiled to look at /etc/opt/csw/ssh and then /opt/csw/etc/ssh. This way every machine/zone can have their own config, but if you want to live the old method and share keys amongst machines, it would work. I got these directories based on information in:
---------- http://www.opencsw.org/userguide/sharingcsw [^]
---------- http://wiki.opencsw.org/shared-opt-csw-setup [^]

Additional Information

As for the install script, you have to handle a few different scenarios:
1. New Install in Global Zone - Just create /etc/opt/csw/ssh and populate all your files there and then have a symlinked directory at /opt/csw/etc/ssh pointing to /etc/opt/csw/ssh
2. New Install in Non Global Zone - Just create /etc/opt/csw/ssh and populate all your config files there and then check to see if /opt/csw/etc/ssh already exists. If /opt/csw/etc/ssh does not exist and if /opt/csw/etc/ is writable, create a symlink to /etc/opt/csw/ssh.
3. Upgrade in Global Zone -
• Assuming /etc/opt/csw/ssh doesn't exist, then create /etc/opt/csw/ssh and copy existing files in /opt/csw/etc/ssh to the new directory and then do normal config-file upgrades and then create a symlinked directory at /opt/csw/etc/ssh pointing to /etc/opt/csw/ssh
• Assuming /etc/opt/csw/ssh DOES exist, then do normal config-file upgrades in /etc/opt/csw/ssh
4. Upgrade in Non Global Zone (trickiest to handle given all the possible workarounds people have possibly implemented, might be worth asking around)
• Assuming /etc/opt/csw/ssh doesn't exist, then create /etc/opt/csw/ssh and copy existing files in /opt/csw/etc/ssh to the new directory and then do normal config-file upgrades and then create a symlinked directory at /opt/csw/etc/ssh pointing to /etc/opt/csw/ssh IF /opt/csw/etc is writable
• Assuming /etc/opt/csw/ssh DOES exist, then do normal config-file upgrades in /etc/opt/csw/ssh

Tags

No tags attached.

Attached Files

Relationships

Notes
(0007895) ckmehta1 (reporter) 2010-04-21 22:57	This page may be more applicable to handling all the zone/NFS use-cases when migrating etc-files: http://wiki.opencsw.org/configuration-directory-migration [^]

(0008612) yann (manager) 2010-12-20 21:35	Hi, You will find the latest openssh packages in my experimental repository [1] with configuration files migrated to /etc/opt/csw/ssh. Could you try these packages and tell me if they work for you ? [1] http://buildfarm.opencsw.org/experimental.html#yann [^]

(0009278) yann (manager) 2011-09-19 22:10	the package openssh 5.8p2 entered the current branch on July, 25 and have its configuration files moved to /etc/opt/csw/ssh, so I am set this bug as resolved :)