Update package version to 10.0p2

check-version.sh

@@ -0,0 +1,18 @@
+#!/bin/bash
+
+# Github repository
+REPO="openssh/openssh-portable"
+
+# Get tag name using Github Rest API
+TAG_NAME=$(curl -s -L -H "X-GitHub-Api-Version: 2022-11-28" -H "Authorization: token ${GITHUB_API_TOKEN}" https://api.github.com/repos/"$REPO"/tags | jq -r '.[0].name')
+
+# Trim prefix
+VERSION=${TAG_NAME//V_/}
+
+# Replace '_P' with 'p'
+VERSION=${VERSION//_P/p}
+
+# Replace '_' with '.'
+VERSION=${VERSION//_/.}
+
+echo "$VERSION"

pkg.info

@@ -1,10 +1,11 @@
 name: openssh
 description: The premier connectivity tool for remote login with the SSH protocol
-version: 9.9p2
+version: 10.0p2
 url: https://www.openssh.com/
 license: BSD-2-Clause,BSD-3-Clause,ISC,LicenseRef-Public-Domain,MIT
 architecture: any
 type: source
-depends: ["glibc","krb5","libmd","libxcrypt","openssl","pam","zlib","shadow"]
+depends: ["glibc","krb5","libedit","libmd","libxcrypt","openssl","pam","zlib","shadow"]
-optional_depends: ["sh","xorg-xauth"]
+optional_depends: ["libfido2"]
+make_depends: ["sh","libfido2","xorg-xauth"]
 keep: ["etc/ssh/"]

source.sh

@@ -18,11 +18,15 @@ build() {
   ./configure --prefix=/usr                                                         \
               --sysconfdir=/etc/ssh                                                 \
               --with-privsep-user=nobody                                            \
+              --with-privsep-path=/usr/share/empty.sshd                             \
               --with-default-path=/usr/bin:/usr/sbin:/usr/local/bin:/usr/local/sbin \
-              --with-superuser-path=/usr/sbin:/usr/bin                              \
               --with-pid-dir=/run                                                   \
+              --with-security-key-builtin                                           \
               --with-kerberos5=/usr                                                 \
-              --with-pam
+              --with-xauth=/usr/bin/xauth                                           \
+              --with-pam                                                            \
+              --with-ssl-engine                                                     \
+              --with-libedit
   make
 }
 
@@ -36,16 +40,20 @@ check() {
 # This function is used to move the compiled files into the output directory
 package() {
   make DESTDIR="$BPM_OUTPUT" install
-  
+
   install -m755 contrib/ssh-copy-id "$BPM_OUTPUT"/usr/bin
   install -m644 contrib/ssh-copy-id.1 "$BPM_OUTPUT"/usr/share/man/man1
-  
+
+  # Install pam module
   install -Dm644 "$BPM_WORKDIR"/sshd-pam "$BPM_OUTPUT"/etc/pam.d/sshd
-  
+
+  # Install default sshd config
   install -Dm644 "$BPM_WORKDIR"/sshd_config "$BPM_OUTPUT"/etc/ssh/sshd_config
-  
+
+  # Install esvm services
   install -Dm644 "$BPM_WORKDIR"/sshd.esv "$BPM_OUTPUT"/etc/esvm/services/sshd.esv
   install -Dm644 "$BPM_WORKDIR"/ssh-keygen.esv "$BPM_OUTPUT"/etc/esvm/services/ssh-keygen.esv
-  
+
+  # Install package license  
   install -Dm644 LICENCE "$BPM_OUTPUT"/usr/share/licenses/openssh/LICENSE
 }