config BR2_PACKAGE_DROPBEAR bool "dropbear" select BR2_PACKAGE_ZLIB if !BR2_PACKAGE_DROPBEAR_SMALL select BR2_PACKAGE_LIBTOMCRYPT if !BR2_PACKAGE_DROPBEAR_SMALL help A small SSH 2 server designed for small memory environments. Note that dropbear requires a per-device unique host key. The key will be generated when dropbear starts, but it is not persistent over reboot (if you have a read-only rootfs) or upgrade (if you have a read-write rootfs). To make the key persistent, replace /etc/dropbear with a symlink to a directory on a persistent, writeable filesystem. Alternatively, mount a persistent unionfs over your root filesystem. https://matt.ucc.asn.au/dropbear/dropbear.html if BR2_PACKAGE_DROPBEAR config BR2_PACKAGE_DROPBEAR_CLIENT bool "client programs" default y help Provides the programs: dbclient, ssh Note that the following programs are also used server-side and are therefore always build regardless this setting: dropbear, dropbearkey, dropbearconvert, scp config BR2_PACKAGE_DROPBEAR_DISABLE_REVERSEDNS bool "disable reverse DNS lookups" help Disable reverse DNS lookups on connection. This can be handy on systems without working DNS, as connections otherwise stall until DNS times out. config BR2_PACKAGE_DROPBEAR_SMALL bool "optimize for size" default y help Compile dropbear for the smallest possible binary size. Tradeoffs are slower hashes and ciphers, and disabling of the blowfish cipher and zlib. config BR2_PACKAGE_DROPBEAR_WTMP bool "log dropbear access to wtmp" help Enable logging of dropbear access to wtmp. Notice that Buildroot does not generate wtmp by default. config BR2_PACKAGE_DROPBEAR_LASTLOG bool "log dropbear access to lastlog" help Enable logging of dropbear access to lastlog. Notice that Buildroot does not generate lastlog by default. config BR2_PACKAGE_DROPBEAR_LEGACY_CRYPTO bool "enable legacy crypto" help Enable legacy and possibly insecure algorithms: 3DES encryption SHA1-96 message integrity CBC encryption mode DSA public keys Diffie-Hellman Group1 key exchange endif