Dropbear for Debian
-------------------

This package will attempt to listen on port 22. If the OpenSSH
package ("ssh") is installed, the file /etc/default/dropbear
will be set up so that the server does not start by default.

You can run Dropbear concurrently with OpenSSH 'sshd' by
modifying /etc/default/dropbear so that "NO_START" is set to
"0" and changing the port number that Dropbear runs on. Follow
the instructions in the file.

This package suggests you install the "ssh" package. This package
provides the "ssh" client program, as well as the "/usr/bin/scp"
binary you will need to be able to retrieve files from a server
running Dropbear via SCP.

Replacing OpenSSH "sshd" with Dropbear
--------------------------------------

You will still want to have the "ssh" package installed, as it
provides the "ssh" and "scp" binaries. When you install this
package, it checks for existing OpenSSH host keys and if found,
converts them to the Dropbear format.

If this appears to have worked, you should be able to change over
by following these steps:

1. Stop the OpenSSH server
   % /etc/init.d/ssh stop
2. Prevent the OpenSSH server from starting in the future
   % touch /etc/ssh/sshd_not_to_be_run
3. Modify the Dropbear defaults file, set NO_START to 0 and
   ensure DROPBEAR_PORT is set to 22.
   % editor /etc/default/dropbear
4. Restart the Dropbear server.
   % /etc/init.d/dropbear restart

See the Dropbear homepage for more information:
  http://matt.ucc.asn.au/dropbear/dropbear.html

Building with the diet libc
---------------------------

This package optionally can be built with the diet libc instead of the
glibc to provide small statically linked programs.  The resulting package
has no dependency on any other package.

To use the diet libc, make sure the latest versions of the dietlibc-dev
package is installed, and set DEB_BUILD_OPTIONS=diet in the environment
when building the package, e.g.:

 # apt-get install dietlibc-dev
 $ DEB_BUILD_OPTIONS=diet fakeroot apt-get source -b dropbear

 -- Gerrit Pape <pape@smarden.org>, Sat, 17 Jul 2004 19:09:34 +0000

Using the dropbear SSH server with runit's services supervision
---------------------------------------------------------------

The dropbear SSH server is perfectly suited to be run under runit's
service supervision, and this package already has prepared an adequate
service directory.  Follow these steps to enable the dropbear service
using the runit package.

If not yet installed on your system, install the runit package, and make
sure its service supervision is enabled (it's by default)

 # apt-get install runit

Make sure the dropbear service normally handled through the sysv init
script is stopped

 # /etc/init.d/dropbear stop

Create the system user ``dropbearlog'' which will run the logger service,
and own the logs

 # adduser --system --home /var/log/dropbear --no-create-home dropbearlog

Create the log directory and make the newly created system user the owner
of this directory

 # mkdir -p /var/log/dropbear && chown dropbearlog /var/log/dropbear

Optionally adjust the configuration of the dropbear service by editing the
run script

 # vi /etc/dropbear/run

Finally enable the service by linking dropbear's service directory to
/var/service/.  The service will be started within five seconds, and
automatically at boot time.  The sysv init script is disabled; see the
runsvctrl(8) program for information on how to control services handled by
runit.  See the svlogd(8) program on how to configure the log service.

 # ln -s /etc/dropbear /var/service/

Optionally check the status of the service a few seconds later

 # runsvstat -l /var/service/dropbear

 -- Gerrit Pape <pape@smarden.org>, Sun, 16 May 2004 15:52:34 +0000