[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#1103773: openssh-server: systemd unit to After=network-online.target



* Colin Watson <cjwatson@debian.org> [250421 19:09]:
Yeah, I think the requested change would be counterproductive for other users: a lot of people want sshd enabled as soon as possible, and most people don't explicitly set ListenAddress.

+1

If it helps in your local setup, I'd encourage you to use a local override file.

I'd be happy to add additional advice about this to README.Debian if somebody else writes it. But ideally it'd be more fine-grained than just whacking in a dependency on network-online.target; perhaps we can advise people how to configure their system so that ssh.service waits for a particular interface to come up.

Another way might be to set IP_FREEBIND, possibly with an sshd config option.

Personally I just enable the ip_nonlocal_bind sysctl on machines where I intend to bind services (not just sshd) to specific IP addresses.

Chris


Reply to: