Setting up a SSH server - Revision history

John3-16: 1. /* Further Reading*/ Added: Remote Desktop Server; 2. Style/grammar amendments, including correcting header level styling.

2026-01-10T20:39:25Z

1. Further Reading: Added: Remote Desktop Server; 2. Style/grammar amendments, including correcting header level styling.

← Older revision		Revision as of 20:39, 10 January 2026
Line 1:		Line 1:
	= Overview =		== Overview ==

	This article provides a short overview of SSH on Alpine Linux.		This article provides a short overview of SSH on Alpine Linux.
Line 7:		Line 7:
	{{Note\|This article describes two popular SSH implementations: OpenSSH and Dropbear. Either can be installed using the [[Alpine setup scripts#setup-sshd\|setup-sshd]] script, or by following the instructions below.}}		{{Note\|This article describes two popular SSH implementations: OpenSSH and Dropbear. Either can be installed using the [[Alpine setup scripts#setup-sshd\|setup-sshd]] script, or by following the instructions below.}}

	= OpenSSH =		== OpenSSH ==

	[https://www.openssh.com/ OpenSSH] is a popular SSH implementation for remote encrypted login to a machine. OpenSSH defines ''sshd'' as the daemon, and ''ssh'' as the client program.		[https://www.openssh.com/ OpenSSH] is a popular SSH implementation for remote encrypted login to a machine. OpenSSH defines ''sshd'' as the daemon, and ''ssh'' as the client program.
Line 13:		Line 13:
	The {{Pkg\|openssh}} package provides OpenSSH on Alpine Linux.		The {{Pkg\|openssh}} package provides OpenSSH on Alpine Linux.

	== Installation ==		=== Installation ===
	Install the {{Pkg\|openssh}} package:		Install the {{Pkg\|openssh}} package:
	{{Cmd\|apk add openssh}}		{{Cmd\|apk add openssh}}
Line 21:		Line 21:
	Also see [[Alpine_Package_Keeper\|Alpine Linux package management]].		Also see [[Alpine_Package_Keeper\|Alpine Linux package management]].

	== Service commands ==		=== Service commands ===
	Enable the sshd service so that it starts at boot:		Enable the sshd service so that it starts at boot:
	{{Cmd\|rc-update add sshd}}		{{Cmd\|rc-update add sshd}}
Line 35:		Line 35:
	Also see [[OpenRC\|Alpine Linux Init System]].		Also see [[OpenRC\|Alpine Linux Init System]].

	== Fine tuning ==		=== Fine tuning ===

	You may wish to change the default configuration. This section describes some of the configuration options as examples, ~~however it~~ is by no means an exhaustive list. See [https://www.openssh.com/manual.html the manual] for full details.		You may wish to change the default configuration. This section describes some of the configuration options as examples. However, this is by no means an exhaustive list. See [https://www.openssh.com/manual.html the manual] for full details.

	The fine-tuning is done by editing {{Path\|/etc/ssh/sshd_config}}. Any line starting with "#" is ignored by ''sshd''.		The fine tuning is done by editing {{Path\|/etc/ssh/sshd_config}}. Any line starting with "#" is ignored by ''sshd''.

	UseDNS no # By setting this to no, connection speed can increase.		UseDNS no # By setting this to no, connection speed can increase.
Line 46:		Line 46:
	Other configuration options are shown in {{Path\|etc/ssh/sshd_config}}. The file includes comments that explain many of the options.		Other configuration options are shown in {{Path\|etc/ssh/sshd_config}}. The file includes comments that explain many of the options.

	== Firewalling and Port Changes ==		=== Firewalling and Port Changes ===
	By default, sshd will communicate on TCP port '''22'''.<BR>		By default, sshd will communicate on TCP port '''22'''.<BR>

Line 59:		Line 59:
	{{Note\|If you are running from RAM, ensure you save your settings using the 'lbu ci' command as necessary. See [https://wiki.alpinelinux.org/wiki/Alpine_local_backup Alpine local backup].}}		{{Note\|If you are running from RAM, ensure you save your settings using the 'lbu ci' command as necessary. See [https://wiki.alpinelinux.org/wiki/Alpine_local_backup Alpine local backup].}}

	= Dropbear =		== Dropbear ==

	[https://matt.ucc.asn.au/dropbear/dropbear.html Dropbear] is a lightweight SSH client/server alternative to OpenSSH.		[https://matt.ucc.asn.au/dropbear/dropbear.html Dropbear] is a lightweight SSH client/server alternative to OpenSSH.

	=== ~~server~~ ===		=== Server ===
	{{Tip\|You can use {{Path\|~/.ssh/authorized_keys}} in the same way as with OpenSSH}}		{{Tip\|You can use {{Path\|~/.ssh/authorized_keys}} in the same way as with OpenSSH.}}

	{{Pkg\|dropbear}} can be install through the [[Alpine setup scripts]], or manually with:		{{Pkg\|dropbear}} can be install through the [[Alpine setup scripts]], or manually with:
	{{Cmd\|apk add dropbear}}		{{Cmd\|apk add dropbear}}

	Start it:		Start it:
	{{Cmd\|rc-service dropbear start}}		{{Cmd\|rc-service dropbear start}}
Line 80:		Line 81:
	{{Tip\|<code>DROPBEAR_OPTS{{=}}"-w -s"</code> will forbid root login and password login}}		{{Tip\|<code>DROPBEAR_OPTS{{=}}"-w -s"</code> will forbid root login and password login}}

	=== ~~client~~ ===		=== Client ===
	{{Pkg\|dropbear-dbclient}} contains the SSH client and can be installed manually with:		{{Pkg\|dropbear-dbclient}} contains the SSH client and can be installed manually with:
	{{Cmd\|apk add dropbear-dbclient}}		{{Cmd\|apk add dropbear-dbclient}}

	In its simplest form it can be used like this:		In its simplest form, it can be used like this:
	{{Cmd\|dbclient <user>@host.example.com}}		{{Cmd\|dbclient <user>@host.example.com}}
	{{Cmd\|dbclient host.example.com}}		{{Cmd\|dbclient host.example.com}}
Line 91:		Line 92:
	Use <code>dbclient -h</code> to see all available options.		Use <code>dbclient -h</code> to see all available options.

	= See also =		== See also ==
	* [[HOWTO OpenSSH 2FA with password and Google Authenticator\|Two Factor Authentication With OpenSSH]]		* [[HOWTO OpenSSH 2FA with password and Google Authenticator\|Two Factor Authentication With OpenSSH]]

	= Further Reading =		== Further Reading ==

	[https://www.openssh.com/portable.html OpenSSH (openssh.com)]<BR>		* [https://www.openssh.com/portable.html OpenSSH (openssh.com)]<BR>
	[https://en.wikipedia.org/wiki/OpenSSH OpenSSH (wikipedia.org)]		* [https://en.wikipedia.org/wiki/OpenSSH OpenSSH (wikipedia.org)]
			* [[Remote Desktop Server]]

	[[Category:Server]]		[[Category:Server]]
	[[Category:Networking]]		[[Category:Networking]]
	[[Category:Security]]		[[Category:Security]]

Zcrayfish: /* See also */ Grammar.

2023-12-20T11:39:12Z

Sertonix: replace /etc/init.d with rc-service

2023-11-17T09:53:06Z

replace /etc/init.d with rc-service

← Older revision		Revision as of 09:53, 17 November 2023
Line 29:		Line 29:

	Start the sshd service immediately and create configuration files:		Start the sshd service immediately and create configuration files:
	{{Cmd\|~~/etc/init.d/~~sshd start}}		{{Cmd\|rc-service sshd start}}

	{{Note\|If you are running from RAM, ensure you save your settings using the 'lbu ci' command as necessary. See [https://wiki.alpinelinux.org/wiki/Alpine_local_backup Alpine local backup].}}		{{Note\|If you are running from RAM, ensure you save your settings using the 'lbu ci' command as necessary. See [https://wiki.alpinelinux.org/wiki/Alpine_local_backup Alpine local backup].}}
Line 55:		Line 55:

	Restart ''sshd'' after making modifications to the configuration file:		Restart ''sshd'' after making modifications to the configuration file:
	{{Cmd\|~~/etc/init.d/~~sshd restart}}		{{Cmd\|rc-service sshd restart}}

	{{Note\|If you are running from RAM, ensure you save your settings using the 'lbu ci' command as necessary. See [https://wiki.alpinelinux.org/wiki/Alpine_local_backup Alpine local backup].}}		{{Note\|If you are running from RAM, ensure you save your settings using the 'lbu ci' command as necessary. See [https://wiki.alpinelinux.org/wiki/Alpine_local_backup Alpine local backup].}}

Zcrayfish: /* Service commands */ hyperlink -> wikilink

2023-07-26T14:05:29Z

Service commands: hyperlink -> wikilink

← Older revision		Revision as of 14:05, 26 July 2023
Line 33:		Line 33:
	{{Note\|If you are running from RAM, ensure you save your settings using the 'lbu ci' command as necessary. See [https://wiki.alpinelinux.org/wiki/Alpine_local_backup Alpine local backup].}}		{{Note\|If you are running from RAM, ensure you save your settings using the 'lbu ci' command as necessary. See [https://wiki.alpinelinux.org/wiki/Alpine_local_backup Alpine local backup].}}

	Also see [~~https://wiki.alpinelinux.org/wiki/Alpine_Linux_Init_System~~ Alpine Linux Init System].		Also see [[OpenRC\|Alpine Linux Init System]].

	== Fine tuning ==		== Fine tuning ==

Zcrayfish: /* Installation */ Changed APK hyperlink to wikilink.

2023-07-26T14:04:27Z

Installation: Changed APK hyperlink to wikilink.

← Older revision		Revision as of 14:04, 26 July 2023
Line 19:		Line 19:
	{{Note\|To use the ACF-frontend for openssh, install {{Pkg\|acf-openssh}} instead (assuming that you have the setup-acf script).}}		{{Note\|To use the ACF-frontend for openssh, install {{Pkg\|acf-openssh}} instead (assuming that you have the setup-acf script).}}

	Also see [~~https://wiki.alpinelinux.org/wiki/Alpine_Linux_package_management~~ Alpine Linux package management ].		Also see [[Alpine_Package_Keeper\|Alpine Linux package management]].

	== Service commands ==		== Service commands ==

Zcrayfish: /* OpenSSH */ Changed a hyperlink to https

2023-07-26T14:01:56Z

OpenSSH: Changed a hyperlink to https

← Older revision		Revision as of 14:01, 26 July 2023
Line 9:		Line 9:
	= OpenSSH =		= OpenSSH =

	[~~http~~://www.openssh.com/ OpenSSH] is a popular SSH implementation for remote encrypted login to a machine. OpenSSH defines ''sshd'' as the daemon, and ''ssh'' as the client program.		[https://www.openssh.com/ OpenSSH] is a popular SSH implementation for remote encrypted login to a machine. OpenSSH defines ''sshd'' as the daemon, and ''ssh'' as the client program.

	The {{Pkg\|openssh}} package provides OpenSSH on Alpine Linux.		The {{Pkg\|openssh}} package provides OpenSSH on Alpine Linux.

Sertonix: use path template

2023-07-02T21:56:03Z

use path template

W1nst0n: Improve /* Dropbear */ section

2022-05-29T01:52:39Z

Improve Dropbear: section

← Older revision		Revision as of 01:52, 29 May 2022
Line 61:		Line 61:
	= Dropbear =		= Dropbear =

	[https://matt.ucc.asn.au/dropbear/dropbear.html Dropbear] is ~~another open source~~ SSH ~~implementation~~.		[https://matt.ucc.asn.au/dropbear/dropbear.html Dropbear] is a lightweight SSH client/server alternative to OpenSSH.
	~~Install~~ {{~~Pkg~~\|~~dropbear~~}}~~, and optionally~~ {{Pkg\|dropbear~~-dbclient~~}} through the [[Alpine setup scripts]], or manually with:
			=== server ===
			{{Tip\|You can use {{Path\|~/.ssh/authorized_keys}} in the same way as with OpenSSH}}

			{{Pkg\|dropbear}} can be install through the [[Alpine setup scripts]], or manually with:
	{{Cmd\|apk add dropbear}}		{{Cmd\|apk add dropbear}}
	Start it:		Start it:
Line 74:		Line 78:
	The config file is located at <code>/etc/conf.d/dropbear</code>		The config file is located at <code>/etc/conf.d/dropbear</code>

	{{Pkg\|dropbear-dbclient}} contains SSH client ~~which in its simplest form~~ can be ~~used like this~~:		{{Tip\|{{Path\|<nowiki>DROPBEAR_OPTS="-w -s"</nowiki>}} will forbid root login and password login}}

			=== client ===
			{{Pkg\|dropbear-dbclient}} contains the SSH client and can be installed manually with:
			{{Cmd\|apk add dropbear-dbclient}}

			In its simplest form it can be used like this:
			{{Cmd\|dbclient <user>@host.example.com}}
	{{Cmd\|dbclient host.example.com}}		{{Cmd\|dbclient host.example.com}}

	{{Cmd\|dbclient x.x.x.x}} (where x.x.x.x is the IP address of the remote machine).		{{Cmd\|dbclient x.x.x.x}} (where x.x.x.x is the IP address of the remote machine).

Arrogance: Arrogance moved page Setting up a ssh-server to Setting up a SSH server: SSH should be capitalized, and I see no reason to hyphenate the title

2021-11-11T03:47:03Z

Arrogance moved page Setting up a ssh-server to Setting up a SSH server: SSH should be capitalized, and I see no reason to hyphenate the title

← Older revision	Revision as of 03:47, 11 November 2021
(No difference)

Owbk: /* Dropbear */ Add seperate package info for dropbear-dbclient

2021-11-05T12:59:56Z

Dropbear: Add seperate package info for dropbear-dbclient

← Older revision		Revision as of 12:59, 5 November 2021
Line 62:		Line 62:

	[https://matt.ucc.asn.au/dropbear/dropbear.html Dropbear] is another open source SSH implementation.		[https://matt.ucc.asn.au/dropbear/dropbear.html Dropbear] is another open source SSH implementation.
	Install {{Pkg\|dropbear}} through the [[Alpine setup scripts]], or manually with:		Install {{Pkg\|dropbear}}, and optionally {{Pkg\|dropbear-dbclient}} through the [[Alpine setup scripts]], or manually with:
	{{Cmd\|apk add dropbear}}		{{Cmd\|apk add dropbear}}
	Start it:		Start it:
Line 74:		Line 74:
	The config file is located at <code>/etc/conf.d/dropbear</code>		The config file is located at <code>/etc/conf.d/dropbear</code>

	{{Pkg\|dropbear}} ~~also includes an~~ SSH client which in its simplest form can be used like this:		{{Pkg\|dropbear-dbclient}} contains SSH client which in its simplest form can be used like this:

	{{Cmd\|dbclient host.example.com}}		{{Cmd\|dbclient host.example.com}}

← Older revision		Revision as of 11:39, 20 December 2023
Line 92:		Line 92:

	= See also =		= See also =
	* [[Two ~~Factors~~ Authentication With OpenSSH]]		* [[HOWTO OpenSSH 2FA with password and Google Authenticator\|Two Factor Authentication With OpenSSH]]

	= Further Reading =		= Further Reading =

← Older revision		Revision as of 21:56, 2 July 2023
Line 39:		Line 39:
	You may wish to change the default configuration. This section describes some of the configuration options as examples, however it is by no means an exhaustive list. See [https://www.openssh.com/manual.html the manual] for full details.		You may wish to change the default configuration. This section describes some of the configuration options as examples, however it is by no means an exhaustive list. See [https://www.openssh.com/manual.html the manual] for full details.

	The fine-tuning is done by editing ~~'''~~/etc/ssh/sshd_config~~'''~~. Any line starting with "#" is ignored by ''sshd''.		The fine-tuning is done by editing {{Path\|/etc/ssh/sshd_config}}. Any line starting with "#" is ignored by ''sshd''.

	UseDNS no # By setting this to no, connection speed can increase.		UseDNS no # By setting this to no, connection speed can increase.
	PasswordAuthentication no # Do not allow password authentication.		PasswordAuthentication no # Do not allow password authentication.

	Other configuration options are shown in ~~'''/~~etc/ssh/sshd_config~~'''~~. The file includes comments that explain many of the options.		Other configuration options are shown in {{Path\|etc/ssh/sshd_config}}. The file includes comments that explain many of the options.

	== Firewalling and Port Changes ==		== Firewalling and Port Changes ==
	By default, sshd will communicate on TCP port '''22'''.<BR>		By default, sshd will communicate on TCP port '''22'''.<BR>

	Sometimes '''22/tcp''' is blocked by a firewall over which you have no control. Changing the '''Port''' option to an unused port number in ~~'''~~/etc/ssh/sshd_config~~'''~~ may be useful in this situation.<BR>		Sometimes '''22/tcp''' is blocked by a firewall over which you have no control. Changing the '''Port''' option to an unused port number in {{Path\|/etc/ssh/sshd_config}} may be useful in this situation.<BR>
	Port 443 # Use whichever port number fits your needs		Port 443 # Use whichever port number fits your needs

Line 76:		Line 76:
	{{Cmd\|dropbear -h}}		{{Cmd\|dropbear -h}}

	The config file is located at ~~<code>~~/etc/conf.d/dropbear~~</code>~~		The config file is located at {{Path\|/etc/conf.d/dropbear}}

	{{Tip~~\|{{Path~~\|<~~nowiki~~>DROPBEAR_OPTS="-w -s"</~~nowiki~~>}} will forbid root login and password login}}		{{Tip\|<code>DROPBEAR_OPTS{{=}}"-w -s"</code> will forbid root login and password login}}

	=== client ===		=== client ===