OpenSSH pre login banner

OpenSSH pre login banner

[Amit Tomer]

[-- Attachment #1: Type: text/plain, Size: 775 bytes --]

---------- Forwarded message ----------
From: Amit Tomer <amittomer25@gmail.com>
Date: Thu, Oct 3, 2013 at 1:50 PM
Subject: OpenSSH pre login banner
To: "yocto-request@yoctoproject.org" <yocto-request@yoctoproject.org>


I am new to OpenEmbedded Yocto and have a requirement where OpenSSH pre
login banner
should come when do ssh from target board

Now I know I have to create a simple .txt file(banner) and put my banner in
to it and add the following to sshd_config

Banner /etc/ssh/banner

But now  wanted to know where should I keep my banner file in yocto so that
Yocto build infrastructure will pack banner file  to /etc/ssh/banner into
final image.

I do have receipes for openssh in meta-xyz/recipes-connectivity/openssh
 folder

Thanks
Amit

[-- Attachment #2: Type: text/html, Size: 1341 bytes --]

Re: OpenSSH pre login banner

[Bryan Evenson]

[-- Attachment #1: Type: text/plain, Size: 2435 bytes --]

Amit,

From your message, I'm assuming you have a bbappend file for openssh.  Following the example in section of 5.1.4 of the Mega Manual (located at http://www.yoctoproject.org/docs/current/mega-manual/mega-manual.html#using-bbappend-files) and from personal experience, put the following in your bbappend file:

FILESEXTRAPATHS_prepend := " ${THISDIR}: "
SRC_URI += " file://banner "
FILES_${PN} += " /etc/ssh/banner "

do_install_append() {
                install -d ${D}${sysconfdir}/ssh
                install -m 0644 ${WORKDIR}/banner ${D}${sysconfdir/ssh/banner
}
PRINC := "${@int(PRINC) + 1}"

then place your banner file and sshd_config in the same directory as your bbappend.  When openssh gets built, Bitbake will find your sshd_config first and use and install that file instead of the one from the main layer.  The recipe also tells it how to handle the new banner file that is not part of the original recipe; you do not need to put these rules in place for sshd_config because that is already part of the original recipe.  Then in the future every time you make a change to the openssh package in your layer, increment the PRINC so your package management tools will see it as an upgrade.  For example, if you change the contents of the banner file, then change the "+ 1" to "+ 2".

-Bryan

From: yocto-bounces@yoctoproject.org [mailto:yocto-bounces@yoctoproject.org] On Behalf Of Amit Tomer
Sent: Thursday, October 03, 2013 7:05 AM
To: yocto@yoctoproject.org
Subject: [yocto] Fwd: OpenSSH pre login banner


---------- Forwarded message ----------
From: Amit Tomer <amittomer25@gmail.com<mailto:amittomer25@gmail.com>>
Date: Thu, Oct 3, 2013 at 1:50 PM
Subject: OpenSSH pre login banner
To: "yocto-request@yoctoproject.org<mailto:yocto-request@yoctoproject.org>" <yocto-request@yoctoproject.org<mailto:yocto-request@yoctoproject.org>>

I am new to OpenEmbedded Yocto and have a requirement where OpenSSH pre login banner
should come when do ssh from target board

Now I know I have to create a simple .txt file(banner) and put my banner in to it and add the following to sshd_config

Banner /etc/ssh/banner

But now  wanted to know where should I keep my banner file in yocto so that Yocto build infrastructure will pack banner file  to /etc/ssh/banner into final image.

I do have receipes for openssh in meta-xyz/recipes-connectivity/openssh  folder

Thanks
Amit





[-- Attachment #2: Type: text/html, Size: 8842 bytes --]

Re: OpenSSH pre login banner

[Amit Tomer]

[-- Attachment #1: Type: text/plain, Size: 3478 bytes --]

Hi Brayan

Thanks for your help

The way I modify .bbapend file is below

PRINC = "4"
SRC_URI = "file://banner"
FILESEXTRAPATHS_prepend := "${THISDIR}/openssh-6.1p1:"
do_install_append() {

Install -m 755 ${WORKDIR}/banner ${D}${sysconfdir}/ssh
}



But it gives me

Below problem

WARNING:
/tmp/work/cortexa15hf-vfp-neon-poky-linux-gnueabi/openssh/6.1p1-r3/openssh-6.1p1/LICENCE
could not be copied for some reason. It may not exist. WARN for now.

And my build process is really got slow and sometimes I am getting the
error also

What could be the reason for above??







On Thu, Oct 3, 2013 at 5:49 PM, Bryan Evenson <bevenson@melinkcorp.com>wrote:

> Amit,****
>
> ** **
>
> From your message, I’m assuming you have a bbappend file for openssh.
> Following the example in section of 5.1.4 of the Mega Manual (located at
> http://www.yoctoproject.org/docs/current/mega-manual/mega-manual.html#using-bbappend-files)
> and from personal experience, put the following in your bbappend file:****
>
> ** **
>
> FILESEXTRAPATHS_prepend := " ${THISDIR}: "****
>
> SRC_URI += “ file://banner ”****
>
> FILES_${PN} += “ /etc/ssh/banner ”****
>
> ** **
>
> do_install_append() {****
>
>                 install –d ${D}${sysconfdir}/ssh****
>
>                 install –m 0644 ${WORKDIR}/banner
> ${D}${sysconfdir/ssh/banner****
>
> }****
>
> PRINC := "${@int(PRINC) + 1}"****
>
> ** **
>
> then place your banner file and sshd_config in the same directory as your
> bbappend.  When openssh gets built, Bitbake will find your sshd_config
> first and use and install that file instead of the one from the main
> layer.  The recipe also tells it how to handle the new banner file that is
> not part of the original recipe; you do not need to put these rules in
> place for sshd_config because that is already part of the original recipe.
> Then in the future every time you make a change to the openssh package in
> your layer, increment the PRINC so your package management tools will see
> it as an upgrade.  For example, if you change the contents of the banner
> file, then change the “+ 1” to “+ 2”.****
>
> ** **
>
> -Bryan****
>
> ** **
>
> *From:* yocto-bounces@yoctoproject.org [mailto:
> yocto-bounces@yoctoproject.org] *On Behalf Of *Amit Tomer
> *Sent:* Thursday, October 03, 2013 7:05 AM
> *To:* yocto@yoctoproject.org
> *Subject:* [yocto] Fwd: OpenSSH pre login banner****
>
> ** **
>
> ** **
>
> ---------- Forwarded message ----------
> From: *Amit Tomer* <amittomer25@gmail.com>
> Date: Thu, Oct 3, 2013 at 1:50 PM
> Subject: OpenSSH pre login banner
> To: "yocto-request@yoctoproject.org" <yocto-request@yoctoproject.org>
>
> ****
>
> I am new to OpenEmbedded Yocto and have a requirement where OpenSSH pre
> login banner****
>
> should come when do ssh from target board****
>
> ** **
>
> Now I know I have to create a simple .txt file(banner) and put my banner
> in to it and add the following to sshd_config****
>
> ** **
>
> Banner /etc/ssh/banner ****
>
> ** **
>
> But now  wanted to know where should I keep my banner file in yocto so
> that Yocto build infrastructure will pack banner file  to /etc/ssh/banner
> into final image.****
>
> ** **
>
> I do have receipes for openssh in meta-xyz/recipes-connectivity/openssh
>  folder****
>
> ** **
>
> Thanks ****
>
> Amit ****
>
>  ****
>
> ** **
>
> ** **
>
> ** **
>

[-- Attachment #2: Type: text/html, Size: 8924 bytes --]

Re: OpenSSH pre login banner

[Bryan Evenson]

[-- Attachment #1: Type: text/plain, Size: 4896 bytes --]

Amit,

First, I suggest you change
PRINC = "4"
to
PRINC := "${@int(PRINC) + 1}"

This way your bbappend will always increment the PR to one more than the PR called out by the main recipe.  So if the openssh recipe would get updated and increment the PR, you do not have to change your bbappend.

Change
SRC_URI = "file://banner"
To
SRC_URI += "file://banner"

The += appends your banner file to the SRC_URI for the openssh recipe.  With your line, you are overriding all the SRC_URI for the entire openssh recipe and the openssh recipe will only include the banner file.  I've taken to the habit of writing the SRC_URI as follows:

SRC_URI += " \
file://banner \
"
just to ensure that words aren't joined together when my SRC_URI is appended to the existing one.  I don't know if this is strictly necessary, but it's not a bad habit.

Change
FILESEXTRAPATHS_prepend := "${THISDIR}/openssh-6.1p1:"
to
FILESEXTRAPATHS_prepend := "${THISDIR}:"

so Bitbake can find your banner file and sshd_config that you have in the same directory as the bbappend.

I can't remember if you get a warning if Bitbake can't find the license file at all or if it fails on each attempt through the filepath.  Since your new path is first, it won't find LICENCE in your layer since you didn't copy it.  Once way to quiet this warning would be to copy the license file to your directory.

-Bryan

From: Amit Tomer [mailto:amittomer25@gmail.com]
Sent: Thursday, October 03, 2013 8:23 AM
To: Bryan Evenson
Cc: yocto@yoctoproject.org
Subject: Re: [yocto] Fwd: OpenSSH pre login banner

Hi Brayan

Thanks for your help

The way I modify .bbapend file is below

PRINC = "4"
SRC_URI = "file://banner<file:///\\banner>"
FILESEXTRAPATHS_prepend := "${THISDIR}/openssh-6.1p1:"
do_install_append() {

Install -m 755 ${WORKDIR}/banner ${D}${sysconfdir}/ssh
}



But it gives me

Below problem

WARNING: /tmp/work/cortexa15hf-vfp-neon-poky-linux-gnueabi/openssh/6.1p1-r3/openssh-6.1p1/LICENCE could not be copied for some reason. It may not exist. WARN for now.

And my build process is really got slow and sometimes I am getting the error also

What could be the reason for above??






On Thu, Oct 3, 2013 at 5:49 PM, Bryan Evenson <bevenson@melinkcorp.com<mailto:bevenson@melinkcorp.com>> wrote:
Amit,

From your message, I'm assuming you have a bbappend file for openssh.  Following the example in section of 5.1.4 of the Mega Manual (located at http://www.yoctoproject.org/docs/current/mega-manual/mega-manual.html#using-bbappend-files) and from personal experience, put the following in your bbappend file:

FILESEXTRAPATHS_prepend := " ${THISDIR}: "
SRC_URI += " file://banner<file:///\\banner> "
FILES_${PN} += " /etc/ssh/banner "

do_install_append() {
                install -d ${D}${sysconfdir}/ssh
                install -m 0644 ${WORKDIR}/banner ${D}${sysconfdir/ssh/banner
}
PRINC := "${@int(PRINC) + 1}"

then place your banner file and sshd_config in the same directory as your bbappend.  When openssh gets built, Bitbake will find your sshd_config first and use and install that file instead of the one from the main layer.  The recipe also tells it how to handle the new banner file that is not part of the original recipe; you do not need to put these rules in place for sshd_config because that is already part of the original recipe.  Then in the future every time you make a change to the openssh package in your layer, increment the PRINC so your package management tools will see it as an upgrade.  For example, if you change the contents of the banner file, then change the "+ 1" to "+ 2".

-Bryan

From: yocto-bounces@yoctoproject.org<mailto:yocto-bounces@yoctoproject.org> [mailto:yocto-bounces@yoctoproject.org<mailto:yocto-bounces@yoctoproject.org>] On Behalf Of Amit Tomer
Sent: Thursday, October 03, 2013 7:05 AM
To: yocto@yoctoproject.org<mailto:yocto@yoctoproject.org>
Subject: [yocto] Fwd: OpenSSH pre login banner


---------- Forwarded message ----------
From: Amit Tomer <amittomer25@gmail.com<mailto:amittomer25@gmail.com>>
Date: Thu, Oct 3, 2013 at 1:50 PM
Subject: OpenSSH pre login banner
To: "yocto-request@yoctoproject.org<mailto:yocto-request@yoctoproject.org>" <yocto-request@yoctoproject.org<mailto:yocto-request@yoctoproject.org>>
I am new to OpenEmbedded Yocto and have a requirement where OpenSSH pre login banner
should come when do ssh from target board

Now I know I have to create a simple .txt file(banner) and put my banner in to it and add the following to sshd_config

Banner /etc/ssh/banner

But now  wanted to know where should I keep my banner file in yocto so that Yocto build infrastructure will pack banner file  to /etc/ssh/banner into final image.

I do have receipes for openssh in meta-xyz/recipes-connectivity/openssh  folder

Thanks
Amit






[-- Attachment #2: Type: text/html, Size: 19792 bytes --]

Re: OpenSSH pre login banner

[Amit Tomer]

[-- Attachment #1: Type: text/plain, Size: 6911 bytes --]

Thanks again Bryan for your kind response

The reason for having the PRINC ="4" is becaue when I started modifying
this already existing file
value of PRINC is set 3 ,so for my changes I Incremented it to One.

Change****

SRC_URI = “file://banner”****

To****

SRC_URI += “file://banner“


I am really feeling bit stupid here ,I just in hurry forgot to put + sign

Though I learned a new point


"With your line, you are overriding all the SRC_URI for the entire openssh
recipe and the openssh recipe will only include the banner file ".


Change****

FILESEXTRAPATHS_prepend := "${THISDIR}/openssh-6.1p1:"****

to****

FILESEXTRAPATHS_prepend := "${THISDIR}:"****

**

We already had openssh-6.1p1 folder where our sshd_config file is placed
,So I guess it won't harm

much if I put FILESEXTRAPATHS_prepend := "${THISDIR}/openssh-6.1p1:" with
banner file in openssh-6.1p1 folder


One more point wanted from your end,what is best way to learn Yocto

How can improve my knowledge in Yocto?


Thanks

Amit.






On Thu, Oct 3, 2013 at 7:05 PM, Bryan Evenson <bevenson@melinkcorp.com>wrote:

> Amit,****
>
> ** **
>
> First, I suggest you change****
>
> PRINC = “4”****
>
> to****
>
> PRINC := "${@int(PRINC) + 1}"****
>
> ** **
>
> This way your bbappend will always increment the PR to one more than the
> PR called out by the main recipe.  So if the openssh recipe would get
> updated and increment the PR, you do not have to change your bbappend.****
>
> ** **
>
> Change****
>
> SRC_URI = “file://banner”****
>
> To****
>
> SRC_URI += “file://banner“****
>
> ** **
>
> The += appends your banner file to the SRC_URI for the openssh recipe.
> With your line, you are overriding all the SRC_URI for the entire openssh
> recipe and the openssh recipe will only include the banner file.  I’ve
> taken to the habit of writing the SRC_URI as follows:****
>
> ** **
>
> SRC_URI += “ \****
>
> file://banner \****
>
> “****
>
> just to ensure that words aren’t joined together when my SRC_URI is
> appended to the existing one.  I don’t know if this is strictly necessary,
> but it’s not a bad habit.****
>
> ** **
>
> Change****
>
> FILESEXTRAPATHS_prepend := "${THISDIR}/openssh-6.1p1:"****
>
> to****
>
> FILESEXTRAPATHS_prepend := "${THISDIR}:"****
>
> ** **
>
> so Bitbake can find your banner file and sshd_config that you have in the
> same directory as the bbappend.****
>
> ** **
>
> I can’t remember if you get a warning if Bitbake can’t find the license
> file at all or if it fails on each attempt through the filepath.  Since
> your new path is first, it won’t find LICENCE in your layer since you
> didn’t copy it.  Once way to quiet this warning would be to copy the
> license file to your directory.****
>
> ** **
>
> -Bryan****
>
> ** **
>
> *From:* Amit Tomer [mailto:amittomer25@gmail.com]
> *Sent:* Thursday, October 03, 2013 8:23 AM
> *To:* Bryan Evenson
> *Cc:* yocto@yoctoproject.org
> *Subject:* Re: [yocto] Fwd: OpenSSH pre login banner****
>
> ** **
>
> Hi Brayan****
>
> ** **
>
> Thanks for your help****
>
> ** **
>
> The way I modify .bbapend file is below****
>
> ** **
>
> PRINC = "4"****
>
> SRC_URI = "file://banner"****
>
> FILESEXTRAPATHS_prepend := "${THISDIR}/openssh-6.1p1:"****
>
> do_install_append() {****
>
> ** **
>
> Install -m 755 ${WORKDIR}/banner ${D}${sysconfdir}/ssh****
>
> }****
>
> ** **
>
> ** **
>
> ** **
>
> But it gives me ****
>
> ** **
>
> Below problem****
>
> ** **
>
> WARNING:
> /tmp/work/cortexa15hf-vfp-neon-poky-linux-gnueabi/openssh/6.1p1-r3/openssh-6.1p1/LICENCE
> could not be copied for some reason. It may not exist. WARN for now.****
>
> ** **
>
> And my build process is really got slow and sometimes I am getting the
> error also****
>
> ** **
>
> What could be the reason for above??****
>
> ** **
>
> ** **
>
> ** **
>
> ** **
>
> ** **
>
> ** **
>
> On Thu, Oct 3, 2013 at 5:49 PM, Bryan Evenson <bevenson@melinkcorp.com>
> wrote:****
>
> Amit,****
>
>  ****
>
> From your message, I’m assuming you have a bbappend file for openssh.
> Following the example in section of 5.1.4 of the Mega Manual (located at
> http://www.yoctoproject.org/docs/current/mega-manual/mega-manual.html#using-bbappend-files)
> and from personal experience, put the following in your bbappend file:****
>
>  ****
>
> FILESEXTRAPATHS_prepend := " ${THISDIR}: "****
>
> SRC_URI += “ file://banner ”****
>
> FILES_${PN} += “ /etc/ssh/banner ”****
>
>  ****
>
> do_install_append() {****
>
>                 install –d ${D}${sysconfdir}/ssh****
>
>                 install –m 0644 ${WORKDIR}/banner
> ${D}${sysconfdir/ssh/banner****
>
> }****
>
> PRINC := "${@int(PRINC) + 1}"****
>
>  ****
>
> then place your banner file and sshd_config in the same directory as your
> bbappend.  When openssh gets built, Bitbake will find your sshd_config
> first and use and install that file instead of the one from the main
> layer.  The recipe also tells it how to handle the new banner file that is
> not part of the original recipe; you do not need to put these rules in
> place for sshd_config because that is already part of the original recipe.
> Then in the future every time you make a change to the openssh package in
> your layer, increment the PRINC so your package management tools will see
> it as an upgrade.  For example, if you change the contents of the banner
> file, then change the “+ 1” to “+ 2”.****
>
>  ****
>
> -Bryan****
>
>  ****
>
> *From:* yocto-bounces@yoctoproject.org [mailto:
> yocto-bounces@yoctoproject.org] *On Behalf Of *Amit Tomer
> *Sent:* Thursday, October 03, 2013 7:05 AM
> *To:* yocto@yoctoproject.org
> *Subject:* [yocto] Fwd: OpenSSH pre login banner****
>
>  ****
>
>  ****
>
> ---------- Forwarded message ----------
> From: *Amit Tomer* <amittomer25@gmail.com>
> Date: Thu, Oct 3, 2013 at 1:50 PM
> Subject: OpenSSH pre login banner
> To: "yocto-request@yoctoproject.org" <yocto-request@yoctoproject.org>****
>
> I am new to OpenEmbedded Yocto and have a requirement where OpenSSH pre
> login banner****
>
> should come when do ssh from target board****
>
>  ****
>
> Now I know I have to create a simple .txt file(banner) and put my banner
> in to it and add the following to sshd_config****
>
>  ****
>
> Banner /etc/ssh/banner ****
>
>  ****
>
> But now  wanted to know where should I keep my banner file in yocto so
> that Yocto build infrastructure will pack banner file  to /etc/ssh/banner
> into final image.****
>
>  ****
>
> I do have receipes for openssh in meta-xyz/recipes-connectivity/openssh
>  folder****
>
>  ****
>
> Thanks ****
>
> Amit ****
>
>  ****
>
>  ****
>
>  ****
>
>  ****
>
> ** **
>

[-- Attachment #2: Type: text/html, Size: 24503 bytes --]

Re: OpenSSH pre login banner

[Bryan Evenson]

[-- Attachment #1: Type: text/plain, Size: 6729 bytes --]

Amit,

Good to hear you got your recipe in order.  Best way to learn more about the Yocto Project and the Poky distribution is through watching this mailing list and the Poky mailing list (poky@yoctoproject.org<mailto:poky@yoctoproject.org>) to see how other people solve their problems they come across.  And, by reading the documentation over at http://www.yoctoproject.org/documentation/current/.

-Bryan

From: Amit Tomer [mailto:amittomer25@gmail.com]
Sent: Thursday, October 03, 2013 10:03 AM
To: Bryan Evenson
Cc: yocto@yoctoproject.org
Subject: Re: [yocto] Fwd: OpenSSH pre login banner

Thanks again Bryan for your kind response

The reason for having the PRINC ="4" is becaue when I started modifying this already existing file
value of PRINC is set 3 ,so for my changes I Incremented it to One.

Change
SRC_URI = "file://banner<file:///\\banner>"
To
SRC_URI += "file://banner"

I am really feeling bit stupid here ,I just in hurry forgot to put + sign
Though I learned a new point

"With your line, you are overriding all the SRC_URI for the entire openssh recipe and the openssh recipe will only include the banner file ".

Change
FILESEXTRAPATHS_prepend := "${THISDIR}/openssh-6.1p1:"
to
FILESEXTRAPATHS_prepend := "${THISDIR}:"

We already had openssh-6.1p1 folder where our sshd_config file is placed ,So I guess it won't harm
much if I put FILESEXTRAPATHS_prepend := "${THISDIR}/openssh-6.1p1:" with banner file in openssh-6.1p1 folder

One more point wanted from your end,what is best way to learn Yocto
How can improve my knowledge in Yocto?

Thanks
Amit.




On Thu, Oct 3, 2013 at 7:05 PM, Bryan Evenson <bevenson@melinkcorp.com<mailto:bevenson@melinkcorp.com>> wrote:
Amit,

First, I suggest you change
PRINC = "4"
to
PRINC := "${@int(PRINC) + 1}"

This way your bbappend will always increment the PR to one more than the PR called out by the main recipe.  So if the openssh recipe would get updated and increment the PR, you do not have to change your bbappend.

Change
SRC_URI = "file://banner<file:///\\banner>"
To
SRC_URI += "file://banner"

The += appends your banner file to the SRC_URI for the openssh recipe.  With your line, you are overriding all the SRC_URI for the entire openssh recipe and the openssh recipe will only include the banner file.  I've taken to the habit of writing the SRC_URI as follows:

SRC_URI += " \
file://banner<file:///\\banner> \
"
just to ensure that words aren't joined together when my SRC_URI is appended to the existing one.  I don't know if this is strictly necessary, but it's not a bad habit.

Change
FILESEXTRAPATHS_prepend := "${THISDIR}/openssh-6.1p1:"
to
FILESEXTRAPATHS_prepend := "${THISDIR}:"

so Bitbake can find your banner file and sshd_config that you have in the same directory as the bbappend.

I can't remember if you get a warning if Bitbake can't find the license file at all or if it fails on each attempt through the filepath.  Since your new path is first, it won't find LICENCE in your layer since you didn't copy it.  Once way to quiet this warning would be to copy the license file to your directory.

-Bryan

From: Amit Tomer [mailto:amittomer25@gmail.com<mailto:amittomer25@gmail.com>]
Sent: Thursday, October 03, 2013 8:23 AM
To: Bryan Evenson
Cc: yocto@yoctoproject.org<mailto:yocto@yoctoproject.org>
Subject: Re: [yocto] Fwd: OpenSSH pre login banner

Hi Brayan

Thanks for your help

The way I modify .bbapend file is below

PRINC = "4"
SRC_URI = "file://banner<file:///\\banner>"
FILESEXTRAPATHS_prepend := "${THISDIR}/openssh-6.1p1:"
do_install_append() {

Install -m 755 ${WORKDIR}/banner ${D}${sysconfdir}/ssh
}



But it gives me

Below problem

WARNING: /tmp/work/cortexa15hf-vfp-neon-poky-linux-gnueabi/openssh/6.1p1-r3/openssh-6.1p1/LICENCE could not be copied for some reason. It may not exist. WARN for now.

And my build process is really got slow and sometimes I am getting the error also

What could be the reason for above??






On Thu, Oct 3, 2013 at 5:49 PM, Bryan Evenson <bevenson@melinkcorp.com<mailto:bevenson@melinkcorp.com>> wrote:
Amit,

From your message, I'm assuming you have a bbappend file for openssh.  Following the example in section of 5.1.4 of the Mega Manual (located at http://www.yoctoproject.org/docs/current/mega-manual/mega-manual.html#using-bbappend-files) and from personal experience, put the following in your bbappend file:

FILESEXTRAPATHS_prepend := " ${THISDIR}: "
SRC_URI += " file://banner<file:///\\banner> "
FILES_${PN} += " /etc/ssh/banner "

do_install_append() {
                install -d ${D}${sysconfdir}/ssh
                install -m 0644 ${WORKDIR}/banner ${D}${sysconfdir/ssh/banner
}
PRINC := "${@int(PRINC) + 1}"

then place your banner file and sshd_config in the same directory as your bbappend.  When openssh gets built, Bitbake will find your sshd_config first and use and install that file instead of the one from the main layer.  The recipe also tells it how to handle the new banner file that is not part of the original recipe; you do not need to put these rules in place for sshd_config because that is already part of the original recipe.  Then in the future every time you make a change to the openssh package in your layer, increment the PRINC so your package management tools will see it as an upgrade.  For example, if you change the contents of the banner file, then change the "+ 1" to "+ 2".

-Bryan

From: yocto-bounces@yoctoproject.org<mailto:yocto-bounces@yoctoproject.org> [mailto:yocto-bounces@yoctoproject.org<mailto:yocto-bounces@yoctoproject.org>] On Behalf Of Amit Tomer
Sent: Thursday, October 03, 2013 7:05 AM
To: yocto@yoctoproject.org<mailto:yocto@yoctoproject.org>
Subject: [yocto] Fwd: OpenSSH pre login banner


---------- Forwarded message ----------
From: Amit Tomer <amittomer25@gmail.com<mailto:amittomer25@gmail.com>>
Date: Thu, Oct 3, 2013 at 1:50 PM
Subject: OpenSSH pre login banner
To: "yocto-request@yoctoproject.org<mailto:yocto-request@yoctoproject.org>" <yocto-request@yoctoproject.org<mailto:yocto-request@yoctoproject.org>>
I am new to OpenEmbedded Yocto and have a requirement where OpenSSH pre login banner
should come when do ssh from target board

Now I know I have to create a simple .txt file(banner) and put my banner in to it and add the following to sshd_config

Banner /etc/ssh/banner

But now  wanted to know where should I keep my banner file in yocto so that Yocto build infrastructure will pack banner file  to /etc/ssh/banner into final image.

I do have receipes for openssh in meta-xyz/recipes-connectivity/openssh  folder

Thanks
Amit







[-- Attachment #2: Type: text/html, Size: 30306 bytes --]

Re: OpenSSH pre login banner

[Amit Tomer]

[-- Attachment #1: Type: text/plain, Size: 8482 bytes --]

Fine Bryan,Thanks for your Suggestion

Not sure should I Share it with you or not but I have seen very weird
behaviour on my Targer board regarding Openssh Banner.

When I login to my Hardware Board(after freash boot) and do ssh
some_ip_address ,I am able to see Banner message
But in /etc/ssh/sshd_config file

#Banner is set to nothing

Then when I do ssh some_ip_address again ,I could not see any banner as it
is expected behaviour.

Hope you would provide any pointer on the same .

Thanks
Amit





On Thu, Oct 3, 2013 at 7:40 PM, Bryan Evenson <bevenson@melinkcorp.com>wrote:

> Amit,****
>
> ** **
>
> Good to hear you got your recipe in order.  Best way to learn more about
> the Yocto Project and the Poky distribution is through watching this
> mailing list and the Poky mailing list (poky@yoctoproject.org) to see how
> other people solve their problems they come across.  And, by reading the
> documentation over at http://www.yoctoproject.org/documentation/current/.*
> ***
>
> ** **
>
> -Bryan ****
>
> ** **
>
> *From:* Amit Tomer [mailto:amittomer25@gmail.com]
> *Sent:* Thursday, October 03, 2013 10:03 AM
>
> *To:* Bryan Evenson
> *Cc:* yocto@yoctoproject.org
> *Subject:* Re: [yocto] Fwd: OpenSSH pre login banner****
>
> ** **
>
> Thanks again Bryan for your kind response ****
>
> ** **
>
> The reason for having the PRINC ="4" is becaue when I started modifying
> this already existing file****
>
> value of PRINC is set 3 ,so for my changes I Incremented it to One.****
>
> ** **
>
> Change****
>
> SRC_URI = “file://banner”****
>
> To****
>
> SRC_URI += “file://banner“****
>
> ** **
>
> I am really feeling bit stupid here ,I just in hurry forgot to put + sign*
> ***
>
> Though I learned a new point ****
>
> ** **
>
> "With your line, you are overriding all the SRC_URI for the entire openssh
> recipe and the openssh recipe will only include the banner file ".****
>
> ** **
>
> Change****
>
> FILESEXTRAPATHS_prepend := "${THISDIR}/openssh-6.1p1:"****
>
> to****
>
> FILESEXTRAPATHS_prepend := "${THISDIR}:"****
>
>  ****
>
> We already had openssh-6.1p1 folder where our sshd_config file is placed
> ,So I guess it won't harm****
>
> much if I put FILESEXTRAPATHS_prepend := "${THISDIR}/openssh-6.1p1:" with
> banner file in openssh-6.1p1 folder****
>
> ** **
>
> One more point wanted from your end,what is best way to learn Yocto****
>
> How can improve my knowledge in Yocto?****
>
> ** **
>
> Thanks ****
>
> Amit.****
>
> ** **
>
> ** **
>
> ** **
>
> ** **
>
> On Thu, Oct 3, 2013 at 7:05 PM, Bryan Evenson <bevenson@melinkcorp.com>
> wrote:****
>
> Amit,****
>
>  ****
>
> First, I suggest you change****
>
> PRINC = “4”****
>
> to****
>
> PRINC := "${@int(PRINC) + 1}"****
>
>  ****
>
> This way your bbappend will always increment the PR to one more than the
> PR called out by the main recipe.  So if the openssh recipe would get
> updated and increment the PR, you do not have to change your bbappend.****
>
>  ****
>
> Change****
>
> SRC_URI = “file://banner”****
>
> To****
>
> SRC_URI += “file://banner“****
>
>  ****
>
> The += appends your banner file to the SRC_URI for the openssh recipe.
> With your line, you are overriding all the SRC_URI for the entire openssh
> recipe and the openssh recipe will only include the banner file.  I’ve
> taken to the habit of writing the SRC_URI as follows:****
>
>  ****
>
> SRC_URI += “ \****
>
> file://banner \****
>
> “****
>
> just to ensure that words aren’t joined together when my SRC_URI is
> appended to the existing one.  I don’t know if this is strictly necessary,
> but it’s not a bad habit.****
>
>  ****
>
> Change****
>
> FILESEXTRAPATHS_prepend := "${THISDIR}/openssh-6.1p1:"****
>
> to****
>
> FILESEXTRAPATHS_prepend := "${THISDIR}:"****
>
>  ****
>
> so Bitbake can find your banner file and sshd_config that you have in the
> same directory as the bbappend.****
>
>  ****
>
> I can’t remember if you get a warning if Bitbake can’t find the license
> file at all or if it fails on each attempt through the filepath.  Since
> your new path is first, it won’t find LICENCE in your layer since you
> didn’t copy it.  Once way to quiet this warning would be to copy the
> license file to your directory.****
>
>  ****
>
> -Bryan****
>
>  ****
>
> *From:* Amit Tomer [mailto:amittomer25@gmail.com]
> *Sent:* Thursday, October 03, 2013 8:23 AM
> *To:* Bryan Evenson
> *Cc:* yocto@yoctoproject.org
> *Subject:* Re: [yocto] Fwd: OpenSSH pre login banner****
>
>  ****
>
> Hi Brayan****
>
>  ****
>
> Thanks for your help****
>
>  ****
>
> The way I modify .bbapend file is below****
>
>  ****
>
> PRINC = "4"****
>
> SRC_URI = "file://banner"****
>
> FILESEXTRAPATHS_prepend := "${THISDIR}/openssh-6.1p1:"****
>
> do_install_append() {****
>
>  ****
>
> Install -m 755 ${WORKDIR}/banner ${D}${sysconfdir}/ssh****
>
> }****
>
>  ****
>
>  ****
>
>  ****
>
> But it gives me ****
>
>  ****
>
> Below problem****
>
>  ****
>
> WARNING:
> /tmp/work/cortexa15hf-vfp-neon-poky-linux-gnueabi/openssh/6.1p1-r3/openssh-6.1p1/LICENCE
> could not be copied for some reason. It may not exist. WARN for now.****
>
>  ****
>
> And my build process is really got slow and sometimes I am getting the
> error also****
>
>  ****
>
> What could be the reason for above??****
>
>  ****
>
>  ****
>
>  ****
>
>  ****
>
>  ****
>
>  ****
>
> On Thu, Oct 3, 2013 at 5:49 PM, Bryan Evenson <bevenson@melinkcorp.com>
> wrote:****
>
> Amit,****
>
>  ****
>
> From your message, I’m assuming you have a bbappend file for openssh.
> Following the example in section of 5.1.4 of the Mega Manual (located at
> http://www.yoctoproject.org/docs/current/mega-manual/mega-manual.html#using-bbappend-files)
> and from personal experience, put the following in your bbappend file:****
>
>  ****
>
> FILESEXTRAPATHS_prepend := " ${THISDIR}: "****
>
> SRC_URI += “ file://banner ”****
>
> FILES_${PN} += “ /etc/ssh/banner ”****
>
>  ****
>
> do_install_append() {****
>
>                 install –d ${D}${sysconfdir}/ssh****
>
>                 install –m 0644 ${WORKDIR}/banner
> ${D}${sysconfdir/ssh/banner****
>
> }****
>
> PRINC := "${@int(PRINC) + 1}"****
>
>  ****
>
> then place your banner file and sshd_config in the same directory as your
> bbappend.  When openssh gets built, Bitbake will find your sshd_config
> first and use and install that file instead of the one from the main
> layer.  The recipe also tells it how to handle the new banner file that is
> not part of the original recipe; you do not need to put these rules in
> place for sshd_config because that is already part of the original recipe.
> Then in the future every time you make a change to the openssh package in
> your layer, increment the PRINC so your package management tools will see
> it as an upgrade.  For example, if you change the contents of the banner
> file, then change the “+ 1” to “+ 2”.****
>
>  ****
>
> -Bryan****
>
>  ****
>
> *From:* yocto-bounces@yoctoproject.org [mailto:
> yocto-bounces@yoctoproject.org] *On Behalf Of *Amit Tomer
> *Sent:* Thursday, October 03, 2013 7:05 AM
> *To:* yocto@yoctoproject.org
> *Subject:* [yocto] Fwd: OpenSSH pre login banner****
>
>  ****
>
>  ****
>
> ---------- Forwarded message ----------
> From: *Amit Tomer* <amittomer25@gmail.com>
> Date: Thu, Oct 3, 2013 at 1:50 PM
> Subject: OpenSSH pre login banner
> To: "yocto-request@yoctoproject.org" <yocto-request@yoctoproject.org>****
>
> I am new to OpenEmbedded Yocto and have a requirement where OpenSSH pre
> login banner****
>
> should come when do ssh from target board****
>
>  ****
>
> Now I know I have to create a simple .txt file(banner) and put my banner
> in to it and add the following to sshd_config****
>
>  ****
>
> Banner /etc/ssh/banner ****
>
>  ****
>
> But now  wanted to know where should I keep my banner file in yocto so
> that Yocto build infrastructure will pack banner file  to /etc/ssh/banner
> into final image.****
>
>  ****
>
> I do have receipes for openssh in meta-xyz/recipes-connectivity/openssh
>  folder****
>
>  ****
>
> Thanks ****
>
> Amit ****
>
>  ****
>
>  ****
>
>  ****
>
>  ****
>
>  ****
>
> ** **
>

[-- Attachment #2: Type: text/html, Size: 25082 bytes --]

Re: OpenSSH pre login banner

[Bryan Evenson]

[-- Attachment #1: Type: text/plain, Size: 8300 bytes --]

Amit,

To me it looks like it did not take your sshd_config file.  Maybe try adding it to the SRC_URI in your bbappend?

Instead of running the updated package on your target board, you can open up the newly created package and verify the file you want is where it should be.  Ipks are basically a tar.gz file, so you can open their contents with any unpacking tool that can read tar.gz (file-roller is what I use).  In the .ipk, open up the etc/ssh/sshd_config file and verify it matches the one with your modifications.  If not, then Bitbake isn't grabbing your modified sshd_config.  If you're using RPM or DEB packages, I believe something similar can be done.

-Bryan

From: Amit Tomer [mailto:amittomer25@gmail.com]
Sent: Thursday, October 03, 2013 10:41 AM
To: Bryan Evenson; yocto@yoctoproject.org
Subject: Re: [yocto] Fwd: OpenSSH pre login banner

Fine Bryan,Thanks for your Suggestion

Not sure should I Share it with you or not but I have seen very weird behaviour on my Targer board regarding Openssh Banner.

When I login to my Hardware Board(after freash boot) and do ssh some_ip_address ,I am able to see Banner message
But in /etc/ssh/sshd_config file

#Banner is set to nothing

Then when I do ssh some_ip_address again ,I could not see any banner as it is expected behaviour.

Hope you would provide any pointer on the same .

Thanks
Amit




On Thu, Oct 3, 2013 at 7:40 PM, Bryan Evenson <bevenson@melinkcorp.com<mailto:bevenson@melinkcorp.com>> wrote:
Amit,

Good to hear you got your recipe in order.  Best way to learn more about the Yocto Project and the Poky distribution is through watching this mailing list and the Poky mailing list (poky@yoctoproject.org<mailto:poky@yoctoproject.org>) to see how other people solve their problems they come across.  And, by reading the documentation over at http://www.yoctoproject.org/documentation/current/.

-Bryan

From: Amit Tomer [mailto:amittomer25@gmail.com<mailto:amittomer25@gmail.com>]
Sent: Thursday, October 03, 2013 10:03 AM

To: Bryan Evenson
Cc: yocto@yoctoproject.org<mailto:yocto@yoctoproject.org>
Subject: Re: [yocto] Fwd: OpenSSH pre login banner

Thanks again Bryan for your kind response

The reason for having the PRINC ="4" is becaue when I started modifying this already existing file
value of PRINC is set 3 ,so for my changes I Incremented it to One.

Change
SRC_URI = "file://banner<file:///\\banner>"
To
SRC_URI += "file://banner"

I am really feeling bit stupid here ,I just in hurry forgot to put + sign
Though I learned a new point

"With your line, you are overriding all the SRC_URI for the entire openssh recipe and the openssh recipe will only include the banner file ".

Change
FILESEXTRAPATHS_prepend := "${THISDIR}/openssh-6.1p1:"
to
FILESEXTRAPATHS_prepend := "${THISDIR}:"

We already had openssh-6.1p1 folder where our sshd_config file is placed ,So I guess it won't harm
much if I put FILESEXTRAPATHS_prepend := "${THISDIR}/openssh-6.1p1:" with banner file in openssh-6.1p1 folder

One more point wanted from your end,what is best way to learn Yocto
How can improve my knowledge in Yocto?

Thanks
Amit.




On Thu, Oct 3, 2013 at 7:05 PM, Bryan Evenson <bevenson@melinkcorp.com<mailto:bevenson@melinkcorp.com>> wrote:
Amit,

First, I suggest you change
PRINC = "4"
to
PRINC := "${@int(PRINC) + 1}"

This way your bbappend will always increment the PR to one more than the PR called out by the main recipe.  So if the openssh recipe would get updated and increment the PR, you do not have to change your bbappend.

Change
SRC_URI = "file://banner<file:///\\banner>"
To
SRC_URI += "file://banner"

The += appends your banner file to the SRC_URI for the openssh recipe.  With your line, you are overriding all the SRC_URI for the entire openssh recipe and the openssh recipe will only include the banner file.  I've taken to the habit of writing the SRC_URI as follows:

SRC_URI += " \
file://banner<file:///\\banner> \
"
just to ensure that words aren't joined together when my SRC_URI is appended to the existing one.  I don't know if this is strictly necessary, but it's not a bad habit.

Change
FILESEXTRAPATHS_prepend := "${THISDIR}/openssh-6.1p1:"
to
FILESEXTRAPATHS_prepend := "${THISDIR}:"

so Bitbake can find your banner file and sshd_config that you have in the same directory as the bbappend.

I can't remember if you get a warning if Bitbake can't find the license file at all or if it fails on each attempt through the filepath.  Since your new path is first, it won't find LICENCE in your layer since you didn't copy it.  Once way to quiet this warning would be to copy the license file to your directory.

-Bryan

From: Amit Tomer [mailto:amittomer25@gmail.com<mailto:amittomer25@gmail.com>]
Sent: Thursday, October 03, 2013 8:23 AM
To: Bryan Evenson
Cc: yocto@yoctoproject.org<mailto:yocto@yoctoproject.org>
Subject: Re: [yocto] Fwd: OpenSSH pre login banner

Hi Brayan

Thanks for your help

The way I modify .bbapend file is below

PRINC = "4"
SRC_URI = "file://banner<file:///\\banner>"
FILESEXTRAPATHS_prepend := "${THISDIR}/openssh-6.1p1:"
do_install_append() {

Install -m 755 ${WORKDIR}/banner ${D}${sysconfdir}/ssh
}



But it gives me

Below problem

WARNING: /tmp/work/cortexa15hf-vfp-neon-poky-linux-gnueabi/openssh/6.1p1-r3/openssh-6.1p1/LICENCE could not be copied for some reason. It may not exist. WARN for now.

And my build process is really got slow and sometimes I am getting the error also

What could be the reason for above??






On Thu, Oct 3, 2013 at 5:49 PM, Bryan Evenson <bevenson@melinkcorp.com<mailto:bevenson@melinkcorp.com>> wrote:
Amit,

From your message, I'm assuming you have a bbappend file for openssh.  Following the example in section of 5.1.4 of the Mega Manual (located at http://www.yoctoproject.org/docs/current/mega-manual/mega-manual.html#using-bbappend-files) and from personal experience, put the following in your bbappend file:

FILESEXTRAPATHS_prepend := " ${THISDIR}: "
SRC_URI += " file://banner<file:///\\banner> "
FILES_${PN} += " /etc/ssh/banner "

do_install_append() {
                install -d ${D}${sysconfdir}/ssh
                install -m 0644 ${WORKDIR}/banner ${D}${sysconfdir/ssh/banner
}
PRINC := "${@int(PRINC) + 1}"

then place your banner file and sshd_config in the same directory as your bbappend.  When openssh gets built, Bitbake will find your sshd_config first and use and install that file instead of the one from the main layer.  The recipe also tells it how to handle the new banner file that is not part of the original recipe; you do not need to put these rules in place for sshd_config because that is already part of the original recipe.  Then in the future every time you make a change to the openssh package in your layer, increment the PRINC so your package management tools will see it as an upgrade.  For example, if you change the contents of the banner file, then change the "+ 1" to "+ 2".

-Bryan

From: yocto-bounces@yoctoproject.org<mailto:yocto-bounces@yoctoproject.org> [mailto:yocto-bounces@yoctoproject.org<mailto:yocto-bounces@yoctoproject.org>] On Behalf Of Amit Tomer
Sent: Thursday, October 03, 2013 7:05 AM
To: yocto@yoctoproject.org<mailto:yocto@yoctoproject.org>
Subject: [yocto] Fwd: OpenSSH pre login banner


---------- Forwarded message ----------
From: Amit Tomer <amittomer25@gmail.com<mailto:amittomer25@gmail.com>>
Date: Thu, Oct 3, 2013 at 1:50 PM
Subject: OpenSSH pre login banner
To: "yocto-request@yoctoproject.org<mailto:yocto-request@yoctoproject.org>" <yocto-request@yoctoproject.org<mailto:yocto-request@yoctoproject.org>>
I am new to OpenEmbedded Yocto and have a requirement where OpenSSH pre login banner
should come when do ssh from target board

Now I know I have to create a simple .txt file(banner) and put my banner in to it and add the following to sshd_config

Banner /etc/ssh/banner

But now  wanted to know where should I keep my banner file in yocto so that Yocto build infrastructure will pack banner file  to /etc/ssh/banner into final image.

I do have receipes for openssh in meta-xyz/recipes-connectivity/openssh  folder

Thanks
Amit








[-- Attachment #2: Type: text/html, Size: 36765 bytes --]

Re: OpenSSH pre login banner

[Amit Tomer]

[-- Attachment #1: Type: text/plain, Size: 10275 bytes --]

Yes Brayan

I did the whole process again and  looked into Target filesystem /etc/ssh.
I can see the banner file with my content is there
/etc/ssh/banner

Then I see the /etc/ssh/sshd-config with Banner variable to set to
/etc/ssh/sshd-config

But still, when I do ssh IP_address, I did not see any Banner message .

I restarted the sshd service without any luck

I have connected to board using putty on serial line /dev/ttyUSB1 .

What could be the problem here??


On Thu, Oct 3, 2013 at 10:17 AM, Bryan Evenson <bevenson@melinkcorp.com>wrote:

> Amit,****
>
> ** **
>
> To me it looks like it did not take your sshd_config file.  Maybe try
> adding it to the SRC_URI in your bbappend?****
>
> ** **
>
> Instead of running the updated package on your target board, you can open
> up the newly created package and verify the file you want is where it
> should be.  Ipks are basically a tar.gz file, so you can open their
> contents with any unpacking tool that can read tar.gz (file-roller is what
> I use).  In the .ipk, open up the etc/ssh/sshd_config file and verify it
> matches the one with your modifications.  If not, then Bitbake isn’t
> grabbing your modified sshd_config.  If you’re using RPM or DEB packages, I
> believe something similar can be done.****
>
> ** **
>
> -Bryan****
>
> ** **
>
> *From:* Amit Tomer [mailto:amittomer25@gmail.com]
> *Sent:* Thursday, October 03, 2013 10:41 AM
> *To:* Bryan Evenson; yocto@yoctoproject.org
>
> *Subject:* Re: [yocto] Fwd: OpenSSH pre login banner****
>
> ** **
>
> Fine Bryan,Thanks for your Suggestion****
>
> ** **
>
> Not sure should I Share it with you or not but I have seen very weird
> behaviour on my Targer board regarding Openssh Banner.****
>
> ** **
>
> When I login to my Hardware Board(after freash boot) and do ssh
> some_ip_address ,I am able to see Banner message****
>
> But in /etc/ssh/sshd_config file ****
>
> ** **
>
> #Banner is set to nothing****
>
> ** **
>
> Then when I do ssh some_ip_address again ,I could not see any banner as it
> is expected behaviour.****
>
> ** **
>
> Hope you would provide any pointer on the same .****
>
> ** **
>
> Thanks ****
>
> Amit ****
>
> ** **
>
> ** **
>
> ** **
>
> ** **
>
> On Thu, Oct 3, 2013 at 7:40 PM, Bryan Evenson <bevenson@melinkcorp.com>
> wrote:****
>
> Amit,****
>
>  ****
>
> Good to hear you got your recipe in order.  Best way to learn more about
> the Yocto Project and the Poky distribution is through watching this
> mailing list and the Poky mailing list (poky@yoctoproject.org) to see how
> other people solve their problems they come across.  And, by reading the
> documentation over at http://www.yoctoproject.org/documentation/current/.*
> ***
>
>  ****
>
> -Bryan ****
>
>  ****
>
> *From:* Amit Tomer [mailto:amittomer25@gmail.com]
> *Sent:* Thursday, October 03, 2013 10:03 AM****
>
>
> *To:* Bryan Evenson
> *Cc:* yocto@yoctoproject.org
> *Subject:* Re: [yocto] Fwd: OpenSSH pre login banner****
>
>  ****
>
> Thanks again Bryan for your kind response ****
>
>  ****
>
> The reason for having the PRINC ="4" is becaue when I started modifying
> this already existing file****
>
> value of PRINC is set 3 ,so for my changes I Incremented it to One.****
>
>  ****
>
> Change****
>
> SRC_URI = “file://banner”****
>
> To****
>
> SRC_URI += “file://banner“****
>
>  ****
>
> I am really feeling bit stupid here ,I just in hurry forgot to put + sign*
> ***
>
> Though I learned a new point ****
>
>  ****
>
> "With your line, you are overriding all the SRC_URI for the entire openssh
> recipe and the openssh recipe will only include the banner file ".****
>
>  ****
>
> Change****
>
> FILESEXTRAPATHS_prepend := "${THISDIR}/openssh-6.1p1:"****
>
> to****
>
> FILESEXTRAPATHS_prepend := "${THISDIR}:"****
>
>  ****
>
> We already had openssh-6.1p1 folder where our sshd_config file is placed
> ,So I guess it won't harm****
>
> much if I put FILESEXTRAPATHS_prepend := "${THISDIR}/openssh-6.1p1:" with
> banner file in openssh-6.1p1 folder****
>
>  ****
>
> One more point wanted from your end,what is best way to learn Yocto****
>
> How can improve my knowledge in Yocto?****
>
>  ****
>
> Thanks ****
>
> Amit.****
>
>  ****
>
>  ****
>
>  ****
>
>  ****
>
> On Thu, Oct 3, 2013 at 7:05 PM, Bryan Evenson <bevenson@melinkcorp.com>
> wrote:****
>
> Amit,****
>
>  ****
>
> First, I suggest you change****
>
> PRINC = “4”****
>
> to****
>
> PRINC := "${@int(PRINC) + 1}"****
>
>  ****
>
> This way your bbappend will always increment the PR to one more than the
> PR called out by the main recipe.  So if the openssh recipe would get
> updated and increment the PR, you do not have to change your bbappend.****
>
>  ****
>
> Change****
>
> SRC_URI = “file://banner”****
>
> To****
>
> SRC_URI += “file://banner“****
>
>  ****
>
> The += appends your banner file to the SRC_URI for the openssh recipe.
> With your line, you are overriding all the SRC_URI for the entire openssh
> recipe and the openssh recipe will only include the banner file.  I’ve
> taken to the habit of writing the SRC_URI as follows:****
>
>  ****
>
> SRC_URI += “ \****
>
> file://banner \****
>
> “****
>
> just to ensure that words aren’t joined together when my SRC_URI is
> appended to the existing one.  I don’t know if this is strictly necessary,
> but it’s not a bad habit.****
>
>  ****
>
> Change****
>
> FILESEXTRAPATHS_prepend := "${THISDIR}/openssh-6.1p1:"****
>
> to****
>
> FILESEXTRAPATHS_prepend := "${THISDIR}:"****
>
>  ****
>
> so Bitbake can find your banner file and sshd_config that you have in the
> same directory as the bbappend.****
>
>  ****
>
> I can’t remember if you get a warning if Bitbake can’t find the license
> file at all or if it fails on each attempt through the filepath.  Since
> your new path is first, it won’t find LICENCE in your layer since you
> didn’t copy it.  Once way to quiet this warning would be to copy the
> license file to your directory.****
>
>  ****
>
> -Bryan****
>
>  ****
>
> *From:* Amit Tomer [mailto:amittomer25@gmail.com]
> *Sent:* Thursday, October 03, 2013 8:23 AM
> *To:* Bryan Evenson
> *Cc:* yocto@yoctoproject.org
> *Subject:* Re: [yocto] Fwd: OpenSSH pre login banner****
>
>  ****
>
> Hi Brayan****
>
>  ****
>
> Thanks for your help****
>
>  ****
>
> The way I modify .bbapend file is below****
>
>  ****
>
> PRINC = "4"****
>
> SRC_URI = "file://banner"****
>
> FILESEXTRAPATHS_prepend := "${THISDIR}/openssh-6.1p1:"****
>
> do_install_append() {****
>
>  ****
>
> Install -m 755 ${WORKDIR}/banner ${D}${sysconfdir}/ssh****
>
> }****
>
>  ****
>
>  ****
>
>  ****
>
> But it gives me ****
>
>  ****
>
> Below problem****
>
>  ****
>
> WARNING:
> /tmp/work/cortexa15hf-vfp-neon-poky-linux-gnueabi/openssh/6.1p1-r3/openssh-6.1p1/LICENCE
> could not be copied for some reason. It may not exist. WARN for now.****
>
>  ****
>
> And my build process is really got slow and sometimes I am getting the
> error also****
>
>  ****
>
> What could be the reason for above??****
>
>  ****
>
>  ****
>
>  ****
>
>  ****
>
>  ****
>
>  ****
>
> On Thu, Oct 3, 2013 at 5:49 PM, Bryan Evenson <bevenson@melinkcorp.com>
> wrote:****
>
> Amit,****
>
>  ****
>
> From your message, I’m assuming you have a bbappend file for openssh.
> Following the example in section of 5.1.4 of the Mega Manual (located at
> http://www.yoctoproject.org/docs/current/mega-manual/mega-manual.html#using-bbappend-files)
> and from personal experience, put the following in your bbappend file:****
>
>  ****
>
> FILESEXTRAPATHS_prepend := " ${THISDIR}: "****
>
> SRC_URI += “ file://banner ”****
>
> FILES_${PN} += “ /etc/ssh/banner ”****
>
>  ****
>
> do_install_append() {****
>
>                 install –d ${D}${sysconfdir}/ssh****
>
>                 install –m 0644 ${WORKDIR}/banner
> ${D}${sysconfdir/ssh/banner****
>
> }****
>
> PRINC := "${@int(PRINC) + 1}"****
>
>  ****
>
> then place your banner file and sshd_config in the same directory as your
> bbappend.  When openssh gets built, Bitbake will find your sshd_config
> first and use and install that file instead of the one from the main
> layer.  The recipe also tells it how to handle the new banner file that is
> not part of the original recipe; you do not need to put these rules in
> place for sshd_config because that is already part of the original recipe.
> Then in the future every time you make a change to the openssh package in
> your layer, increment the PRINC so your package management tools will see
> it as an upgrade.  For example, if you change the contents of the banner
> file, then change the “+ 1” to “+ 2”.****
>
>  ****
>
> -Bryan****
>
>  ****
>
> *From:* yocto-bounces@yoctoproject.org [mailto:
> yocto-bounces@yoctoproject.org] *On Behalf Of *Amit Tomer
> *Sent:* Thursday, October 03, 2013 7:05 AM
> *To:* yocto@yoctoproject.org
> *Subject:* [yocto] Fwd: OpenSSH pre login banner****
>
>  ****
>
>  ****
>
> ---------- Forwarded message ----------
> From: *Amit Tomer* <amittomer25@gmail.com>
> Date: Thu, Oct 3, 2013 at 1:50 PM
> Subject: OpenSSH pre login banner
> To: "yocto-request@yoctoproject.org" <yocto-request@yoctoproject.org>****
>
> I am new to OpenEmbedded Yocto and have a requirement where OpenSSH pre
> login banner****
>
> should come when do ssh from target board****
>
>  ****
>
> Now I know I have to create a simple .txt file(banner) and put my banner
> in to it and add the following to sshd_config****
>
>  ****
>
> Banner /etc/ssh/banner ****
>
>  ****
>
> But now  wanted to know where should I keep my banner file in yocto so
> that Yocto build infrastructure will pack banner file  to /etc/ssh/banner
> into final image.****
>
>  ****
>
> I do have receipes for openssh in meta-xyz/recipes-connectivity/openssh
>  folder****
>
>  ****
>
> Thanks ****
>
> Amit ****
>
>  ****
>
>  ****
>
>  ****
>
>  ****
>
>  ****
>
>  ****
>
> ** **
>

[-- Attachment #2: Type: text/html, Size: 29197 bytes --]

Re: OpenSSH pre login banner

[Bryan Evenson]

[-- Attachment #1: Type: text/plain, Size: 9259 bytes --]

Amit,

Did you name the file sshd-config or sshd_config?  Because it should be sshd_config.

-Bryan

From: Amit Tomer [mailto:amittomer25@gmail.com]
Sent: Thursday, October 03, 2013 2:36 PM
To: Bryan Evenson
Cc: yocto@yoctoproject.org
Subject: Re: [yocto] Fwd: OpenSSH pre login banner

Yes Brayan

I did the whole process again and  looked into Target filesystem /etc/ssh. I can see the banner file with my content is there
/etc/ssh/banner

Then I see the /etc/ssh/sshd-config with Banner variable to set to /etc/ssh/sshd-config

But still, when I do ssh IP_address, I did not see any Banner message .

I restarted the sshd service without any luck

I have connected to board using putty on serial line /dev/ttyUSB1 .

What could be the problem here??

On Thu, Oct 3, 2013 at 10:17 AM, Bryan Evenson <bevenson@melinkcorp.com<mailto:bevenson@melinkcorp.com>> wrote:
Amit,

To me it looks like it did not take your sshd_config file.  Maybe try adding it to the SRC_URI in your bbappend?

Instead of running the updated package on your target board, you can open up the newly created package and verify the file you want is where it should be.  Ipks are basically a tar.gz file, so you can open their contents with any unpacking tool that can read tar.gz (file-roller is what I use).  In the .ipk, open up the etc/ssh/sshd_config file and verify it matches the one with your modifications.  If not, then Bitbake isn't grabbing your modified sshd_config.  If you're using RPM or DEB packages, I believe something similar can be done.

-Bryan

From: Amit Tomer [mailto:amittomer25@gmail.com<mailto:amittomer25@gmail.com>]
Sent: Thursday, October 03, 2013 10:41 AM
To: Bryan Evenson; yocto@yoctoproject.org<mailto:yocto@yoctoproject.org>

Subject: Re: [yocto] Fwd: OpenSSH pre login banner

Fine Bryan,Thanks for your Suggestion

Not sure should I Share it with you or not but I have seen very weird behaviour on my Targer board regarding Openssh Banner.

When I login to my Hardware Board(after freash boot) and do ssh some_ip_address ,I am able to see Banner message
But in /etc/ssh/sshd_config file

#Banner is set to nothing

Then when I do ssh some_ip_address again ,I could not see any banner as it is expected behaviour.

Hope you would provide any pointer on the same .

Thanks
Amit




On Thu, Oct 3, 2013 at 7:40 PM, Bryan Evenson <bevenson@melinkcorp.com<mailto:bevenson@melinkcorp.com>> wrote:
Amit,

Good to hear you got your recipe in order.  Best way to learn more about the Yocto Project and the Poky distribution is through watching this mailing list and the Poky mailing list (poky@yoctoproject.org<mailto:poky@yoctoproject.org>) to see how other people solve their problems they come across.  And, by reading the documentation over at http://www.yoctoproject.org/documentation/current/.

-Bryan

From: Amit Tomer [mailto:amittomer25@gmail.com<mailto:amittomer25@gmail.com>]
Sent: Thursday, October 03, 2013 10:03 AM

To: Bryan Evenson
Cc: yocto@yoctoproject.org<mailto:yocto@yoctoproject.org>
Subject: Re: [yocto] Fwd: OpenSSH pre login banner

Thanks again Bryan for your kind response

The reason for having the PRINC ="4" is becaue when I started modifying this already existing file
value of PRINC is set 3 ,so for my changes I Incremented it to One.

Change
SRC_URI = "file://banner<file:///\\banner>"
To
SRC_URI += "file://banner"

I am really feeling bit stupid here ,I just in hurry forgot to put + sign
Though I learned a new point

"With your line, you are overriding all the SRC_URI for the entire openssh recipe and the openssh recipe will only include the banner file ".

Change
FILESEXTRAPATHS_prepend := "${THISDIR}/openssh-6.1p1:"
to
FILESEXTRAPATHS_prepend := "${THISDIR}:"

We already had openssh-6.1p1 folder where our sshd_config file is placed ,So I guess it won't harm
much if I put FILESEXTRAPATHS_prepend := "${THISDIR}/openssh-6.1p1:" with banner file in openssh-6.1p1 folder

One more point wanted from your end,what is best way to learn Yocto
How can improve my knowledge in Yocto?

Thanks
Amit.




On Thu, Oct 3, 2013 at 7:05 PM, Bryan Evenson <bevenson@melinkcorp.com<mailto:bevenson@melinkcorp.com>> wrote:
Amit,

First, I suggest you change
PRINC = "4"
to
PRINC := "${@int(PRINC) + 1}"

This way your bbappend will always increment the PR to one more than the PR called out by the main recipe.  So if the openssh recipe would get updated and increment the PR, you do not have to change your bbappend.

Change
SRC_URI = "file://banner<file:///\\banner>"
To
SRC_URI += "file://banner"

The += appends your banner file to the SRC_URI for the openssh recipe.  With your line, you are overriding all the SRC_URI for the entire openssh recipe and the openssh recipe will only include the banner file.  I've taken to the habit of writing the SRC_URI as follows:

SRC_URI += " \
file://banner<file:///\\banner> \
"
just to ensure that words aren't joined together when my SRC_URI is appended to the existing one.  I don't know if this is strictly necessary, but it's not a bad habit.

Change
FILESEXTRAPATHS_prepend := "${THISDIR}/openssh-6.1p1:"
to
FILESEXTRAPATHS_prepend := "${THISDIR}:"

so Bitbake can find your banner file and sshd_config that you have in the same directory as the bbappend.

I can't remember if you get a warning if Bitbake can't find the license file at all or if it fails on each attempt through the filepath.  Since your new path is first, it won't find LICENCE in your layer since you didn't copy it.  Once way to quiet this warning would be to copy the license file to your directory.

-Bryan

From: Amit Tomer [mailto:amittomer25@gmail.com<mailto:amittomer25@gmail.com>]
Sent: Thursday, October 03, 2013 8:23 AM
To: Bryan Evenson
Cc: yocto@yoctoproject.org<mailto:yocto@yoctoproject.org>
Subject: Re: [yocto] Fwd: OpenSSH pre login banner

Hi Brayan

Thanks for your help

The way I modify .bbapend file is below

PRINC = "4"
SRC_URI = "file://banner<file:///\\banner>"
FILESEXTRAPATHS_prepend := "${THISDIR}/openssh-6.1p1:"
do_install_append() {

Install -m 755 ${WORKDIR}/banner ${D}${sysconfdir}/ssh
}



But it gives me

Below problem

WARNING: /tmp/work/cortexa15hf-vfp-neon-poky-linux-gnueabi/openssh/6.1p1-r3/openssh-6.1p1/LICENCE could not be copied for some reason. It may not exist. WARN for now.

And my build process is really got slow and sometimes I am getting the error also

What could be the reason for above??






On Thu, Oct 3, 2013 at 5:49 PM, Bryan Evenson <bevenson@melinkcorp.com<mailto:bevenson@melinkcorp.com>> wrote:
Amit,

From your message, I'm assuming you have a bbappend file for openssh.  Following the example in section of 5.1.4 of the Mega Manual (located at http://www.yoctoproject.org/docs/current/mega-manual/mega-manual.html#using-bbappend-files) and from personal experience, put the following in your bbappend file:

FILESEXTRAPATHS_prepend := " ${THISDIR}: "
SRC_URI += " file://banner<file:///\\banner> "
FILES_${PN} += " /etc/ssh/banner "

do_install_append() {
                install -d ${D}${sysconfdir}/ssh
                install -m 0644 ${WORKDIR}/banner ${D}${sysconfdir/ssh/banner
}
PRINC := "${@int(PRINC) + 1}"

then place your banner file and sshd_config in the same directory as your bbappend.  When openssh gets built, Bitbake will find your sshd_config first and use and install that file instead of the one from the main layer.  The recipe also tells it how to handle the new banner file that is not part of the original recipe; you do not need to put these rules in place for sshd_config because that is already part of the original recipe.  Then in the future every time you make a change to the openssh package in your layer, increment the PRINC so your package management tools will see it as an upgrade.  For example, if you change the contents of the banner file, then change the "+ 1" to "+ 2".

-Bryan

From: yocto-bounces@yoctoproject.org<mailto:yocto-bounces@yoctoproject.org> [mailto:yocto-bounces@yoctoproject.org<mailto:yocto-bounces@yoctoproject.org>] On Behalf Of Amit Tomer
Sent: Thursday, October 03, 2013 7:05 AM
To: yocto@yoctoproject.org<mailto:yocto@yoctoproject.org>
Subject: [yocto] Fwd: OpenSSH pre login banner


---------- Forwarded message ----------
From: Amit Tomer <amittomer25@gmail.com<mailto:amittomer25@gmail.com>>
Date: Thu, Oct 3, 2013 at 1:50 PM
Subject: OpenSSH pre login banner
To: "yocto-request@yoctoproject.org<mailto:yocto-request@yoctoproject.org>" <yocto-request@yoctoproject.org<mailto:yocto-request@yoctoproject.org>>
I am new to OpenEmbedded Yocto and have a requirement where OpenSSH pre login banner
should come when do ssh from target board

Now I know I have to create a simple .txt file(banner) and put my banner in to it and add the following to sshd_config

Banner /etc/ssh/banner

But now  wanted to know where should I keep my banner file in yocto so that Yocto build infrastructure will pack banner file  to /etc/ssh/banner into final image.

I do have receipes for openssh in meta-xyz/recipes-connectivity/openssh  folder

Thanks
Amit









[-- Attachment #2: Type: text/html, Size: 41758 bytes --]

Re: OpenSSH pre login banner

[Amit Tomer]

[-- Attachment #1: Type: text/plain, Size: 11075 bytes --]

Sorry for the typo mistake ,its sshd_config only
In fact I didn't create this file ,its already existing file which I just
modified.


On Thu, Oct 3, 2013 at 11:40 AM, Bryan Evenson <bevenson@melinkcorp.com>wrote:

> Amit,****
>
> ** **
>
> Did you name the file sshd-config or sshd_config?  Because it should be
> sshd_config.****
>
> ** **
>
> -Bryan****
>
> ** **
>
> *From:* Amit Tomer [mailto:amittomer25@gmail.com]
> *Sent:* Thursday, October 03, 2013 2:36 PM
>
> *To:* Bryan Evenson
> *Cc:* yocto@yoctoproject.org
> *Subject:* Re: [yocto] Fwd: OpenSSH pre login banner****
>
> ** **
>
> Yes Brayan****
>
> ** **
>
> I did the whole process again and  looked into Target filesystem /etc/ssh.
> I can see the banner file with my content is there****
>
> /etc/ssh/banner****
>
> ** **
>
> Then I see the /etc/ssh/sshd-config with Banner variable to set to
> /etc/ssh/sshd-config****
>
> ** **
>
> But still, when I do ssh IP_address, I did not see any Banner message .***
> *
>
> ** **
>
> I restarted the sshd service without any luck****
>
> ** **
>
> I have connected to board using putty on serial line /dev/ttyUSB1 .****
>
> ** **
>
> What could be the problem here?? ****
>
> ** **
>
> On Thu, Oct 3, 2013 at 10:17 AM, Bryan Evenson <bevenson@melinkcorp.com>
> wrote:****
>
> Amit,****
>
>  ****
>
> To me it looks like it did not take your sshd_config file.  Maybe try
> adding it to the SRC_URI in your bbappend?****
>
>  ****
>
> Instead of running the updated package on your target board, you can open
> up the newly created package and verify the file you want is where it
> should be.  Ipks are basically a tar.gz file, so you can open their
> contents with any unpacking tool that can read tar.gz (file-roller is what
> I use).  In the .ipk, open up the etc/ssh/sshd_config file and verify it
> matches the one with your modifications.  If not, then Bitbake isn’t
> grabbing your modified sshd_config.  If you’re using RPM or DEB packages, I
> believe something similar can be done.****
>
>  ****
>
> -Bryan****
>
>  ****
>
> *From:* Amit Tomer [mailto:amittomer25@gmail.com]
> *Sent:* Thursday, October 03, 2013 10:41 AM
> *To:* Bryan Evenson; yocto@yoctoproject.org****
>
>
> *Subject:* Re: [yocto] Fwd: OpenSSH pre login banner****
>
>  ****
>
> Fine Bryan,Thanks for your Suggestion****
>
>  ****
>
> Not sure should I Share it with you or not but I have seen very weird
> behaviour on my Targer board regarding Openssh Banner.****
>
>  ****
>
> When I login to my Hardware Board(after freash boot) and do ssh
> some_ip_address ,I am able to see Banner message****
>
> But in /etc/ssh/sshd_config file ****
>
>  ****
>
> #Banner is set to nothing****
>
>  ****
>
> Then when I do ssh some_ip_address again ,I could not see any banner as it
> is expected behaviour.****
>
>  ****
>
> Hope you would provide any pointer on the same .****
>
>  ****
>
> Thanks ****
>
> Amit ****
>
>  ****
>
>  ****
>
>  ****
>
>  ****
>
> On Thu, Oct 3, 2013 at 7:40 PM, Bryan Evenson <bevenson@melinkcorp.com>
> wrote:****
>
> Amit,****
>
>  ****
>
> Good to hear you got your recipe in order.  Best way to learn more about
> the Yocto Project and the Poky distribution is through watching this
> mailing list and the Poky mailing list (poky@yoctoproject.org) to see how
> other people solve their problems they come across.  And, by reading the
> documentation over at http://www.yoctoproject.org/documentation/current/.*
> ***
>
>  ****
>
> -Bryan ****
>
>  ****
>
> *From:* Amit Tomer [mailto:amittomer25@gmail.com]
> *Sent:* Thursday, October 03, 2013 10:03 AM****
>
>
> *To:* Bryan Evenson
> *Cc:* yocto@yoctoproject.org
> *Subject:* Re: [yocto] Fwd: OpenSSH pre login banner****
>
>  ****
>
> Thanks again Bryan for your kind response ****
>
>  ****
>
> The reason for having the PRINC ="4" is becaue when I started modifying
> this already existing file****
>
> value of PRINC is set 3 ,so for my changes I Incremented it to One.****
>
>  ****
>
> Change****
>
> SRC_URI = “file://banner”****
>
> To****
>
> SRC_URI += “file://banner“****
>
>  ****
>
> I am really feeling bit stupid here ,I just in hurry forgot to put + sign*
> ***
>
> Though I learned a new point ****
>
>  ****
>
> "With your line, you are overriding all the SRC_URI for the entire openssh
> recipe and the openssh recipe will only include the banner file ".****
>
>  ****
>
> Change****
>
> FILESEXTRAPATHS_prepend := "${THISDIR}/openssh-6.1p1:"****
>
> to****
>
> FILESEXTRAPATHS_prepend := "${THISDIR}:"****
>
>  ****
>
> We already had openssh-6.1p1 folder where our sshd_config file is placed
> ,So I guess it won't harm****
>
> much if I put FILESEXTRAPATHS_prepend := "${THISDIR}/openssh-6.1p1:" with
> banner file in openssh-6.1p1 folder****
>
>  ****
>
> One more point wanted from your end,what is best way to learn Yocto****
>
> How can improve my knowledge in Yocto?****
>
>  ****
>
> Thanks ****
>
> Amit.****
>
>  ****
>
>  ****
>
>  ****
>
>  ****
>
> On Thu, Oct 3, 2013 at 7:05 PM, Bryan Evenson <bevenson@melinkcorp.com>
> wrote:****
>
> Amit,****
>
>  ****
>
> First, I suggest you change****
>
> PRINC = “4”****
>
> to****
>
> PRINC := "${@int(PRINC) + 1}"****
>
>  ****
>
> This way your bbappend will always increment the PR to one more than the
> PR called out by the main recipe.  So if the openssh recipe would get
> updated and increment the PR, you do not have to change your bbappend.****
>
>  ****
>
> Change****
>
> SRC_URI = “file://banner”****
>
> To****
>
> SRC_URI += “file://banner“****
>
>  ****
>
> The += appends your banner file to the SRC_URI for the openssh recipe.
> With your line, you are overriding all the SRC_URI for the entire openssh
> recipe and the openssh recipe will only include the banner file.  I’ve
> taken to the habit of writing the SRC_URI as follows:****
>
>  ****
>
> SRC_URI += “ \****
>
> file://banner \****
>
> “****
>
> just to ensure that words aren’t joined together when my SRC_URI is
> appended to the existing one.  I don’t know if this is strictly necessary,
> but it’s not a bad habit.****
>
>  ****
>
> Change****
>
> FILESEXTRAPATHS_prepend := "${THISDIR}/openssh-6.1p1:"****
>
> to****
>
> FILESEXTRAPATHS_prepend := "${THISDIR}:"****
>
>  ****
>
> so Bitbake can find your banner file and sshd_config that you have in the
> same directory as the bbappend.****
>
>  ****
>
> I can’t remember if you get a warning if Bitbake can’t find the license
> file at all or if it fails on each attempt through the filepath.  Since
> your new path is first, it won’t find LICENCE in your layer since you
> didn’t copy it.  Once way to quiet this warning would be to copy the
> license file to your directory.****
>
>  ****
>
> -Bryan****
>
>  ****
>
> *From:* Amit Tomer [mailto:amittomer25@gmail.com]
> *Sent:* Thursday, October 03, 2013 8:23 AM
> *To:* Bryan Evenson
> *Cc:* yocto@yoctoproject.org
> *Subject:* Re: [yocto] Fwd: OpenSSH pre login banner****
>
>  ****
>
> Hi Brayan****
>
>  ****
>
> Thanks for your help****
>
>  ****
>
> The way I modify .bbapend file is below****
>
>  ****
>
> PRINC = "4"****
>
> SRC_URI = "file://banner"****
>
> FILESEXTRAPATHS_prepend := "${THISDIR}/openssh-6.1p1:"****
>
> do_install_append() {****
>
>  ****
>
> Install -m 755 ${WORKDIR}/banner ${D}${sysconfdir}/ssh****
>
> }****
>
>  ****
>
>  ****
>
>  ****
>
> But it gives me ****
>
>  ****
>
> Below problem****
>
>  ****
>
> WARNING:
> /tmp/work/cortexa15hf-vfp-neon-poky-linux-gnueabi/openssh/6.1p1-r3/openssh-6.1p1/LICENCE
> could not be copied for some reason. It may not exist. WARN for now.****
>
>  ****
>
> And my build process is really got slow and sometimes I am getting the
> error also****
>
>  ****
>
> What could be the reason for above??****
>
>  ****
>
>  ****
>
>  ****
>
>  ****
>
>  ****
>
>  ****
>
> On Thu, Oct 3, 2013 at 5:49 PM, Bryan Evenson <bevenson@melinkcorp.com>
> wrote:****
>
> Amit,****
>
>  ****
>
> From your message, I’m assuming you have a bbappend file for openssh.
> Following the example in section of 5.1.4 of the Mega Manual (located at
> http://www.yoctoproject.org/docs/current/mega-manual/mega-manual.html#using-bbappend-files)
> and from personal experience, put the following in your bbappend file:****
>
>  ****
>
> FILESEXTRAPATHS_prepend := " ${THISDIR}: "****
>
> SRC_URI += “ file://banner ”****
>
> FILES_${PN} += “ /etc/ssh/banner ”****
>
>  ****
>
> do_install_append() {****
>
>                 install –d ${D}${sysconfdir}/ssh****
>
>                 install –m 0644 ${WORKDIR}/banner
> ${D}${sysconfdir/ssh/banner****
>
> }****
>
> PRINC := "${@int(PRINC) + 1}"****
>
>  ****
>
> then place your banner file and sshd_config in the same directory as your
> bbappend.  When openssh gets built, Bitbake will find your sshd_config
> first and use and install that file instead of the one from the main
> layer.  The recipe also tells it how to handle the new banner file that is
> not part of the original recipe; you do not need to put these rules in
> place for sshd_config because that is already part of the original recipe.
> Then in the future every time you make a change to the openssh package in
> your layer, increment the PRINC so your package management tools will see
> it as an upgrade.  For example, if you change the contents of the banner
> file, then change the “+ 1” to “+ 2”.****
>
>  ****
>
> -Bryan****
>
>  ****
>
> *From:* yocto-bounces@yoctoproject.org [mailto:
> yocto-bounces@yoctoproject.org] *On Behalf Of *Amit Tomer
> *Sent:* Thursday, October 03, 2013 7:05 AM
> *To:* yocto@yoctoproject.org
> *Subject:* [yocto] Fwd: OpenSSH pre login banner****
>
>  ****
>
>  ****
>
> ---------- Forwarded message ----------
> From: *Amit Tomer* <amittomer25@gmail.com>
> Date: Thu, Oct 3, 2013 at 1:50 PM
> Subject: OpenSSH pre login banner
> To: "yocto-request@yoctoproject.org" <yocto-request@yoctoproject.org>****
>
> I am new to OpenEmbedded Yocto and have a requirement where OpenSSH pre
> login banner****
>
> should come when do ssh from target board****
>
>  ****
>
> Now I know I have to create a simple .txt file(banner) and put my banner
> in to it and add the following to sshd_config****
>
>  ****
>
> Banner /etc/ssh/banner ****
>
>  ****
>
> But now  wanted to know where should I keep my banner file in yocto so
> that Yocto build infrastructure will pack banner file  to /etc/ssh/banner
> into final image.****
>
>  ****
>
> I do have receipes for openssh in meta-xyz/recipes-connectivity/openssh
>  folder****
>
>  ****
>
> Thanks ****
>
> Amit ****
>
>  ****
>
>  ****
>
>  ****
>
>  ****
>
>  ****
>
>  ****
>
>  ****
>
> ** **
>

[-- Attachment #2: Type: text/html, Size: 32096 bytes --]

Re: OpenSSH pre login banner

[Bryan Evenson]

[-- Attachment #1: Type: text/plain, Size: 10190 bytes --]

Amit,

If your banner file and sshd_config are populated where they are supposed to be on your target board based upon your bbappend and have the contents you specified, then your bbappend is doing its job.  If your banner isn't working, then there is some other configuration issue you're having with OpenSSH.  In that case I'd suggest checking with the OpenSSH community to see what you may be doing wrong.

-Bryan

From: Amit Tomer [mailto:amittomer25@gmail.com]
Sent: Thursday, October 03, 2013 2:52 PM
To: Bryan Evenson
Cc: yocto@yoctoproject.org
Subject: Re: [yocto] Fwd: OpenSSH pre login banner

Sorry for the typo mistake ,its sshd_config only
In fact I didn't create this file ,its already existing file which I just modified.

On Thu, Oct 3, 2013 at 11:40 AM, Bryan Evenson <bevenson@melinkcorp.com<mailto:bevenson@melinkcorp.com>> wrote:
Amit,

Did you name the file sshd-config or sshd_config?  Because it should be sshd_config.

-Bryan

From: Amit Tomer [mailto:amittomer25@gmail.com<mailto:amittomer25@gmail.com>]
Sent: Thursday, October 03, 2013 2:36 PM

To: Bryan Evenson
Cc: yocto@yoctoproject.org<mailto:yocto@yoctoproject.org>
Subject: Re: [yocto] Fwd: OpenSSH pre login banner

Yes Brayan

I did the whole process again and  looked into Target filesystem /etc/ssh. I can see the banner file with my content is there
/etc/ssh/banner

Then I see the /etc/ssh/sshd-config with Banner variable to set to /etc/ssh/sshd-config

But still, when I do ssh IP_address, I did not see any Banner message .

I restarted the sshd service without any luck

I have connected to board using putty on serial line /dev/ttyUSB1 .

What could be the problem here??

On Thu, Oct 3, 2013 at 10:17 AM, Bryan Evenson <bevenson@melinkcorp.com<mailto:bevenson@melinkcorp.com>> wrote:
Amit,

To me it looks like it did not take your sshd_config file.  Maybe try adding it to the SRC_URI in your bbappend?

Instead of running the updated package on your target board, you can open up the newly created package and verify the file you want is where it should be.  Ipks are basically a tar.gz file, so you can open their contents with any unpacking tool that can read tar.gz (file-roller is what I use).  In the .ipk, open up the etc/ssh/sshd_config file and verify it matches the one with your modifications.  If not, then Bitbake isn't grabbing your modified sshd_config.  If you're using RPM or DEB packages, I believe something similar can be done.

-Bryan

From: Amit Tomer [mailto:amittomer25@gmail.com<mailto:amittomer25@gmail.com>]
Sent: Thursday, October 03, 2013 10:41 AM
To: Bryan Evenson; yocto@yoctoproject.org<mailto:yocto@yoctoproject.org>

Subject: Re: [yocto] Fwd: OpenSSH pre login banner

Fine Bryan,Thanks for your Suggestion

Not sure should I Share it with you or not but I have seen very weird behaviour on my Targer board regarding Openssh Banner.

When I login to my Hardware Board(after freash boot) and do ssh some_ip_address ,I am able to see Banner message
But in /etc/ssh/sshd_config file

#Banner is set to nothing

Then when I do ssh some_ip_address again ,I could not see any banner as it is expected behaviour.

Hope you would provide any pointer on the same .

Thanks
Amit




On Thu, Oct 3, 2013 at 7:40 PM, Bryan Evenson <bevenson@melinkcorp.com<mailto:bevenson@melinkcorp.com>> wrote:
Amit,

Good to hear you got your recipe in order.  Best way to learn more about the Yocto Project and the Poky distribution is through watching this mailing list and the Poky mailing list (poky@yoctoproject.org<mailto:poky@yoctoproject.org>) to see how other people solve their problems they come across.  And, by reading the documentation over at http://www.yoctoproject.org/documentation/current/.

-Bryan

From: Amit Tomer [mailto:amittomer25@gmail.com<mailto:amittomer25@gmail.com>]
Sent: Thursday, October 03, 2013 10:03 AM

To: Bryan Evenson
Cc: yocto@yoctoproject.org<mailto:yocto@yoctoproject.org>
Subject: Re: [yocto] Fwd: OpenSSH pre login banner

Thanks again Bryan for your kind response

The reason for having the PRINC ="4" is becaue when I started modifying this already existing file
value of PRINC is set 3 ,so for my changes I Incremented it to One.

Change
SRC_URI = "file://banner<file:///\\banner>"
To
SRC_URI += "file://banner"

I am really feeling bit stupid here ,I just in hurry forgot to put + sign
Though I learned a new point

"With your line, you are overriding all the SRC_URI for the entire openssh recipe and the openssh recipe will only include the banner file ".

Change
FILESEXTRAPATHS_prepend := "${THISDIR}/openssh-6.1p1:"
to
FILESEXTRAPATHS_prepend := "${THISDIR}:"

We already had openssh-6.1p1 folder where our sshd_config file is placed ,So I guess it won't harm
much if I put FILESEXTRAPATHS_prepend := "${THISDIR}/openssh-6.1p1:" with banner file in openssh-6.1p1 folder

One more point wanted from your end,what is best way to learn Yocto
How can improve my knowledge in Yocto?

Thanks
Amit.




On Thu, Oct 3, 2013 at 7:05 PM, Bryan Evenson <bevenson@melinkcorp.com<mailto:bevenson@melinkcorp.com>> wrote:
Amit,

First, I suggest you change
PRINC = "4"
to
PRINC := "${@int(PRINC) + 1}"

This way your bbappend will always increment the PR to one more than the PR called out by the main recipe.  So if the openssh recipe would get updated and increment the PR, you do not have to change your bbappend.

Change
SRC_URI = "file://banner<file:///\\banner>"
To
SRC_URI += "file://banner"

The += appends your banner file to the SRC_URI for the openssh recipe.  With your line, you are overriding all the SRC_URI for the entire openssh recipe and the openssh recipe will only include the banner file.  I've taken to the habit of writing the SRC_URI as follows:

SRC_URI += " \
file://banner<file:///\\banner> \
"
just to ensure that words aren't joined together when my SRC_URI is appended to the existing one.  I don't know if this is strictly necessary, but it's not a bad habit.

Change
FILESEXTRAPATHS_prepend := "${THISDIR}/openssh-6.1p1:"
to
FILESEXTRAPATHS_prepend := "${THISDIR}:"

so Bitbake can find your banner file and sshd_config that you have in the same directory as the bbappend.

I can't remember if you get a warning if Bitbake can't find the license file at all or if it fails on each attempt through the filepath.  Since your new path is first, it won't find LICENCE in your layer since you didn't copy it.  Once way to quiet this warning would be to copy the license file to your directory.

-Bryan

From: Amit Tomer [mailto:amittomer25@gmail.com<mailto:amittomer25@gmail.com>]
Sent: Thursday, October 03, 2013 8:23 AM
To: Bryan Evenson
Cc: yocto@yoctoproject.org<mailto:yocto@yoctoproject.org>
Subject: Re: [yocto] Fwd: OpenSSH pre login banner

Hi Brayan

Thanks for your help

The way I modify .bbapend file is below

PRINC = "4"
SRC_URI = "file://banner<file:///\\banner>"
FILESEXTRAPATHS_prepend := "${THISDIR}/openssh-6.1p1:"
do_install_append() {

Install -m 755 ${WORKDIR}/banner ${D}${sysconfdir}/ssh
}



But it gives me

Below problem

WARNING: /tmp/work/cortexa15hf-vfp-neon-poky-linux-gnueabi/openssh/6.1p1-r3/openssh-6.1p1/LICENCE could not be copied for some reason. It may not exist. WARN for now.

And my build process is really got slow and sometimes I am getting the error also

What could be the reason for above??






On Thu, Oct 3, 2013 at 5:49 PM, Bryan Evenson <bevenson@melinkcorp.com<mailto:bevenson@melinkcorp.com>> wrote:
Amit,

From your message, I'm assuming you have a bbappend file for openssh.  Following the example in section of 5.1.4 of the Mega Manual (located at http://www.yoctoproject.org/docs/current/mega-manual/mega-manual.html#using-bbappend-files) and from personal experience, put the following in your bbappend file:

FILESEXTRAPATHS_prepend := " ${THISDIR}: "
SRC_URI += " file://banner<file:///\\banner> "
FILES_${PN} += " /etc/ssh/banner "

do_install_append() {
                install -d ${D}${sysconfdir}/ssh
                install -m 0644 ${WORKDIR}/banner ${D}${sysconfdir/ssh/banner
}
PRINC := "${@int(PRINC) + 1}"

then place your banner file and sshd_config in the same directory as your bbappend.  When openssh gets built, Bitbake will find your sshd_config first and use and install that file instead of the one from the main layer.  The recipe also tells it how to handle the new banner file that is not part of the original recipe; you do not need to put these rules in place for sshd_config because that is already part of the original recipe.  Then in the future every time you make a change to the openssh package in your layer, increment the PRINC so your package management tools will see it as an upgrade.  For example, if you change the contents of the banner file, then change the "+ 1" to "+ 2".

-Bryan

From: yocto-bounces@yoctoproject.org<mailto:yocto-bounces@yoctoproject.org> [mailto:yocto-bounces@yoctoproject.org<mailto:yocto-bounces@yoctoproject.org>] On Behalf Of Amit Tomer
Sent: Thursday, October 03, 2013 7:05 AM
To: yocto@yoctoproject.org<mailto:yocto@yoctoproject.org>
Subject: [yocto] Fwd: OpenSSH pre login banner


---------- Forwarded message ----------
From: Amit Tomer <amittomer25@gmail.com<mailto:amittomer25@gmail.com>>
Date: Thu, Oct 3, 2013 at 1:50 PM
Subject: OpenSSH pre login banner
To: "yocto-request@yoctoproject.org<mailto:yocto-request@yoctoproject.org>" <yocto-request@yoctoproject.org<mailto:yocto-request@yoctoproject.org>>
I am new to OpenEmbedded Yocto and have a requirement where OpenSSH pre login banner
should come when do ssh from target board

Now I know I have to create a simple .txt file(banner) and put my banner in to it and add the following to sshd_config

Banner /etc/ssh/banner

But now  wanted to know where should I keep my banner file in yocto so that Yocto build infrastructure will pack banner file  to /etc/ssh/banner into final image.

I do have receipes for openssh in meta-xyz/recipes-connectivity/openssh  folder

Thanks
Amit










[-- Attachment #2: Type: text/html, Size: 45827 bytes --]

Re: OpenSSH pre login banner

[Matthew Weigel]

On 10/03/2013 01:36 PM, Amit Tomer wrote:
> Yes Brayan
>
> I did the whole process again and  looked into Target filesystem
> /etc/ssh. I can see the banner file with my content is there
> /etc/ssh/banner
>
> Then I see the /etc/ssh/sshd-config with Banner variable to set to
> /etc/ssh/sshd-config

Is the file named "sshd-config" with a hyphen or "sshd_config" with an 
underscore?  That might be the problem.
-- 
  Matthew Weigel