1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
|
dropbear (2022.82-1) unstable; urgency=medium
Setting NO_START=1 in /etc/default/dropbear in order to avoid automatically
starting dropbear(8) is no longer honored. Use your service manager
instead, for instance run `systemctl disable --now dropbear`.
Alternatively, you can run `apt remove dropbear` to remove startup scripts
and service files (you'll still be able to start dropbear(8) manually if
the 'dropbear-bin' package is installed, and use the initramfs integration
if the 'dropbear-initramfs' package is installed.)
In addition, /etc/default/dropbear settings DROPBEAR_*KEY and
DROPBEAR_BANNER are subsumed by DROPBEAR_EXTRA_ARGS are no longer honored.
See /etc/default/dropbear for examples.
-- Guilhem Moulin <guilhem@debian.org> Sat, 02 Apr 2022 15:51:17 +0200
dropbear (2019.78-1) unstable; urgency=medium
'dropbear' < 2019.78-1 was renamed to 'dropbear' with 2019.78-1.
'dropbear-run' is now a transitional dummy package depending on
'dropbear'.
On systems which do rely on the initramfs integration, one can mark
'dropbear-initramfs' as being manually installed (so APT never selects it
for auto-removal) with the following command:
apt-mark manual dropbear-initramfs
On the other hand, the 'dropbear-initramfs' package can be safely
removed on systems not relying on initramfs integration.
-- Guilhem Moulin <guilhem@debian.org> Mon, 08 Jul 2019 17:06:07 +0200
dropbear (2015.68-1) unstable; urgency=low
dropbear < 2015.68-1 has been split into dropbear-bin (binaries),
dropbear-run (init scripts) and dropbear-initramfs (initramfs
integration). 'dropbear' is now a transitional dummy package
depending on dropbear-run and dropbear-initramfs.
/usr/share/initramfs-tools/conf-hooks.d/dropbear is no longer marked
as a configuration file, since doing so violates the Debian Policy
Manual section 10.7.2. (Regression from 2014.64-1.) Instead, move
the file to /etc/initramfs-tools/conf-hooks.d/dropbear and add a
symlink in /usr/share/initramfs-tools/conf-hooks.d.
Upstream has removed the '-d' option from the manpage. '-r' is now
used to specify all three types of host key file: RSA, DSS, and
ECDSA.
Updating the initramfs no longer displays a warning about changing
host keys: users shouldn't be encouraged to use the same keys in the
encrypted partition and in the initramfs. The proper fix is to use
an alternative port or UserKnownHostFile.
By default all interfaces are now brought down, and IP routes and
addressed are flushed before exiting the ramdisk, in order to avoid
dirty network configuration in the regular kernel. The interfaces
considered are those matching the $DROPBEAR_IFDOWN shell pattern
(default: '*'); the special value 'none' keeps all interfaces up and
preserves routing tables and addresses.
-- Guilhem Moulin <guilhem@guilhem.org> Sat, 03 Oct 2015 20:47:25 +0200
|
