Arch Linux User Repository

To maintain behavior pre-HPN17v0, install openssh-hpn-shim.

@zer0def

Thanks for the advice. I forgot to check the changes for the packages, too. Normally, paru does well with this but somehow had a hiccup with downloading a new PKGBUILD. All is good for me now. Definitely a personal learning experience with git patches though.

@CrimsonKnight13 That's already addressed in https://aur.archlinux.org/cgit/aur.git/commit/?h=openssh-hpn&id=c46c4093629f5ae7bac34235e6938bef36d1bd03, so perform a git fetch or punt your AUR helper into correct behavior.

Hi zer0def,

I found the following issues when building openssh-hpn & openssh-hpn-shim:

1. The source tar.gz fails to validate (hpn-18.6.2.tar.gz)
2. The version keeps going back to 18.6.1 instead of 18.6.2 due to issue 3
3. There's a commit that will need to be patched in due to the source tar.gz not having it implemented due to github build issues https://github.com/rapier1/hpn-ssh/commit/5334968dd69fab9f72420c0e09d75f417310ffb0

0001-Neglected-to-increment-version-number.patch

From 5334968dd69fab9f72420c0e09d75f417310ffb0 Mon Sep 17 00:00:00 2001
From: Chris Rapier <rapier@psc.edu>
Date: Wed, 19 Mar 2025 10:00:02 -0400
Subject: [PATCH] Neglected to increment version number

---
version.h | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/version.h b/version.h
index e851fc003..c3d03b737 100644
--- a/version.h
+++ b/version.h
@@ -3,5 +3,5 @@
#define SSH_VERSION    "OpenSSH_9.9"

#define SSH_PORTABLE   "p2"
-#define SSH_HPN         "_hpn18.6.1"
+#define SSH_HPN         "_hpn18.6.2"
#define SSH_RELEASE    SSH_VERSION SSH_PORTABLE SSH_HPN
--
2.49.0

I'm getting an issue validating a checksum. Checking if others have same issue? hpn-18.6.0.tar.gz FAILED

Due to a potentially significant security fix affecting exclusively OpenSSH 9.1, I've marked this package as out of date as a means of discouraging users from installing it until HPN rebases onto 9.2. Users are temporarily encouraged to either roll back to hpn-9.0 or install upstream OpenSSH.

Correct checksums for latest hpn-9_0_P1 tag, dated Dec 5th, 2022 are:

• sha256: b0e345425d5fe52c93e1fb313288076f0c5c3a6f9b56bedfb17d0d822269cbffc192d0a7967fbf94a5dee775c3d7c5dfc178dd3053bac82ba747571f7c665952
• blake2: c02da824ffe4e25ea9003f3e43baeeebbbd1cd5faf8437de60d3c1232a9905dcf44e1e6e58ebac3ddb00262c9085ff272b19dc7767d0cdeab88d55e775b5d719
• blake3: 346813d846cfb590de895cc11675e7751cf5e758817db12635551c2fcab48d5a

ref: https://www.openssh.com/releasenotes.html | https://bugzilla.mindrot.org/show_bug.cgi?id=3522

new checksums:

diff --git a/PKGBUILD b/PKGBUILD
index f537e9c..7ccf251 100644
--- a/PKGBUILD
+++ b/PKGBUILD
@@ -83 +83 @@ sha512sums=(
-  'b487eceec2158fd2caf429316d60e1d0cc5b16e79f965b31921f1664ebb0393dac9a3896a08847123aa201bd2cfa9bd8ffd390560a78a8d4f407acb7a8fc73d5'
+  'c0047d47570e3dde4b3531ca99d506d5d415fa608994875740d1e0b0f3a73237150b3a45de6c62071a2ea92e8915e80b73c340ecb20f14d098ccf9e95199bd51'
@@ -99 +99 @@ b2sums=(
-  'f5030284afd2b86960c3879214f548d3c0b53ddb2c4958d05f7c91db30a6f563700489cb6a2ad5ad936566d51d7c94fed33f1093052884797c804169959488eb'
+  'a9eee5c2189ae4fb5b8cfc0f9f4022fdd6b2f42b3356e6cb7c0e947bd3240bb2a42b0e3f48df035034563d0625bb16ae410cb3fffa39976828347d0181fbe501'

with 9.0p1.hpn17v4-2

error: failed to commit transaction (conflicting files)
openssh-hpn: /usr/share/man/man1/slogin.1.gz exists in filesystem (owned by openssh)

to fix the below message and other missing files (like man pages):

diff --git a/PKGBUILD b/PKGBUILD
index 010ca5a..e62d32c 100644
--- a/PKGBUILD
+++ b/PKGBUILD
@@ -49,7 +49,7 @@ _hpn_ver=hpn17v0
 #_pkgver="$(sed -e 's/\./_/' -e 's/p/_P/' <<< ${_openssh_ver})_new"
 _pkgver="$(sed -e 's/\./_/' -e 's/p/_P/' <<< ${_openssh_ver})"
 pkgver="${_openssh_ver}.${_hpn_ver}"
-pkgrel=6
+pkgrel=7
 pkgdesc='A Secure SHell server/client fork with High Performance patches included'
 url='https://www.psc.edu/index.php/hpn-ssh/'
 license=('custom:BSD')
@@ -75,14 +75,6 @@ source=(
   'sshd.pam'
   'sshd.conf'
 )
-backup=(
-  'etc/ssh/ssh_config'
-  'etc/ssh/sshd_config'
-  'etc/pam.d/sshd'
-  'etc/hpnssh/ssh_config'
-  'etc/hpnssh/sshd_config'
-  'etc/pam.d/hpnsshd'
-)

 sha512sums=(
   '190e4261a76ce5b31f8cdc76bc149c3c240611410461dd400e41ca55f4be4d5675473f16edbd648eaeb6d373136b831d61a9ae9f59c4e38ef8ecde738fda7880'
@@ -190,6 +182,12 @@ build() {
 #}

 package_openssh-hpn() {
+  backup=(
+    'etc/hpnssh/ssh_config'
+    'etc/hpnssh/sshd_config'
+    'etc/pam.d/hpnsshd'
+  )
+
   cd "${srcdir}/openssh-portable-hpn-${_pkgver}/"

   make DESTDIR="${pkgdir}" install
@@ -215,6 +213,11 @@ package_openssh-hpn() {
 }

 package_openssh-hpn-shim(){
+  backup=(
+    'etc/ssh/ssh_config'
+    'etc/ssh/sshd_config'
+    'etc/pam.d/sshd'
+  )
   depends=('openssh-hpn')
   provides=('openssh')
   conflicts=('openssh' 'openssh-hpn-git')
@@ -222,14 +225,35 @@ package_openssh-hpn-shim(){
   cd "${srcdir}/openssh-portable-hpn-${_pkgver}/"

   install -dm0755 "${pkgdir}/usr/bin" "${pkgdir}/usr/lib/ssh";
-  pushd "${pkgdir}/usr/bin"
+  pushd "${pkgdir}/usr/bin" > /dev/null
   for i in findssl.sh scp sftp ssh ssh-add ssh-agent ssh-copy-id ssh-keygen ssh-keyscan sshd; do
     ln -s "hpn${i}" "${i}"
-  done; popd
-  pushd "${pkgdir}/usr/lib/ssh"
+  done; popd > /dev/null
+  pushd "${pkgdir}/usr/lib/ssh" > /dev/null
   for i in sftp-server ssh-keysign ssh-pkcs11-helper ssh-sk-helper; do
     ln -s "../hpnssh/hpn${i}" "${i}"
-  done; popd
+  done; popd > /dev/null
+  install -dm0755 "${pkgdir}/usr/share/man/man1" "${pkgdir}/usr/share/man/man5" "${pkgdir}/usr/share/man/man8"
+  pushd "${pkgdir}/usr/share/man" > /dev/null
+    pushd man1 > /dev/null
+    for i in scp sftp ssh-add ssh-agent ssh-copy-id ssh-keygen ssh-keyscan ssh; do
+      ln -s "hpn${i}.1.gz" "${i}.1.gz"
+    done; popd > /dev/null
+    pushd man5 > /dev/null
+    for i in moduli ssh_config sshd_config; do
+      ln -s "hpn${i}.5.gz" "${i}.5.gz"
+    done; popd > /dev/null
+    pushd man8 > /dev/null
+    for i in sftp-server ssh-keysign ssh-pkcs11-helper ssh-sk-helper sshd; do
+      ln -s "hpn${i}.8.gz" "${i}.8.gz"
+    done; popd > /dev/null
+  popd > /dev/null
+  install -dm0755 "${pkgdir}/etc/ssh"
+  pushd "${pkgdir}/etc" > /dev/null
+  for i in moduli ssh_config sshd_config; do
+    ln -s "hpnssh/${i}" "ssh/${i}"
+  done
+  popd > /dev/null

   install -Dm644 ../sshdgenkeys.service "${pkgdir}"/usr/lib/systemd/system/sshdgenkeys.service
   install -Dm644 ../sshd.service "${pkgdir}"/usr/lib/systemd/system/sshd.service

Ok. Since update via normal update function (trizen -Syu) did not work, I got it installed with "trizen -S openssh-hpn-shim" But after reboot sshd.service failed to start :(

After some investigating I found that my old "/etc/ssh/sshd_config" was removed :( Veryfied this on 2 notebooks. The old config was removed on every device.

So I have to create a new one. i.e. cp /etc/hpnssh/sshd_config /etc/ssh/

Afterwards I have to change the port in /etc/ssh/sshd_config to 22. And so change "HostKey" line to point to my original key files again. Check if other features fits your needs ... (i.e. I have to set the non chipher to NoneEnabled yes)

To maintain behavior pre-HPN17v0, install openssh-hpn-shim.