I am using dropbear to remotely unlock encrypted disks (https://github.com/ceremcem/unlock-luks-partition) in debian 11. I want to use openssh-server once the system has started. It has previously worked well.
I have now upgraded to debian 12 bookworm. Now dropbear keeps restarting and blocks port 22. I cant succeed to disable it.
/etc/default/dropbear
I have tried reinstalling dropbear.
I have tried changing port during boot/unlock which changed the port I had to use to unlock which makes me think its not during the unlock-process something goes wrong. Dropbear keeps starting at port 22 once the system is booted.
Any ideas why it behaves this way?
I have now upgraded to debian 12 bookworm. Now dropbear keeps restarting and blocks port 22. I cant succeed to disable it.
/etc/default/dropbear
Code:
# disabled because OpenSSH is installed# change to NO_START=0 to enable DropbearNO_START=1# the TCP port that Dropbear listens onDROPBEAR_PORT=22# any additional arguments for DropbearDROPBEAR_EXTRA_ARGS=# specify an optional banner file containing a message to be# sent to clients before they connect, such as "/etc/issue.net"DROPBEAR_BANNER=""# RSA hostkey file (default: /etc/dropbear/dropbear_rsa_host_key)#DROPBEAR_RSAKEY="/etc/dropbear/dropbear_rsa_host_key"# DSS hostkey file (default: /etc/dropbear/dropbear_dss_host_key)#DROPBEAR_DSSKEY="/etc/dropbear/dropbear_dss_host_key"# ECDSA hostkey file (default: /etc/dropbear/dropbear_ecdsa_host_key)#DROPBEAR_ECDSAKEY="/etc/dropbear/dropbear_ecdsa_host_key"# Receive window size - this is a tradeoff between memory and# network performanceDROPBEAR_RECEIVE_WINDOW=65536I have tried changing port during boot/unlock which changed the port I had to use to unlock which makes me think its not during the unlock-process something goes wrong. Dropbear keeps starting at port 22 once the system is booted.
....
root 1472 0.0 0.0 4524 1344 ? Ss 17:41 0:00 /usr/sbin/dropbear -EF -p 22 -W 65536
...
root 1933 0.0 0.0 4524 3180 ? Ss 17:41 0:00 /usr/sbin/dropbear -EF -p 22 -W 65536 -2 8
...
Dropbear version: 2022.83-1+deb12u1tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 1472/dropbear
...
tcp 0 208 192.168.119.24:22 192.168.119.23:62197 ESTABLISHED 1933/dropbear
tcp6 0 0 :::22 :::* LISTEN 1472/dropbear
...
Any ideas why it behaves this way?
Statistics: Posted by JPume — 2024-07-07 16:33 — Replies 1 — Views 56