[gobolinux-devel] Actions on install

Hisham Muhammad hisham.hm at gmail.com
Fri Nov 17 20:06:35 UTC 2006


On 11/15/06, Jonas Karlsson <jonka750 at student.liu.se> wrote:
> While trying to get openssh to install on my server (I have too little
> activity to generate any randomness for key generation) I realized that
> the way we redistribute the OpenSSH package is not a good way. As the host
> keys are included in Defaults/Settings anyone can pretend to be the
> packagers server. But without the host keys one can't run sshd. Therefore
> I think that some sort of action to generate these keys at installation or
> just a note that this has to be done in order to use sshd should be
> implemented. This can be used for other apps that need computer specific
> settings and/or files.

InstallPackage supports a script called Resources/PostInstall which
runs in a sandbox with access to the program's contents and settings
only. I believe the OpenSSH recipe should be fixed adding that script.

-- Hisham


More information about the gobolinux-devel mailing list