[Bug 1991566] [NEW] Package creates a socket file for all addresses of all families, even when bind to a single address

[Corey Reichle]

Public bug reported:

I am configuring OpenSSH to listen only on ipv4 and only on one
interface and one address, with nginx listening on 22 on the other
interface, and families.

In order to make this happen, I had to "break" the socket file installed
by the package at:

/etc/systemd/system/sockets.target.wants/ssh.socket

To read as follows:

[Unit]
Description=OpenBSD Secure Shell server socket
Before=ssh.service
Conflicts=ssh.service
ConditionPathExists=!/etc/ssh/sshd_not_to_be_run

#[Socket]
#ListenStream=22
#Accept=yes

#[Install]
#WantedBy=sockets.target

(Commented out the lines that installed the socket)

Then a daemon-reload, and restart of ngxinx, and all components of the
solution are working as required.

ProblemType: Bug
DistroRelease: Ubuntu 22.04
Package: openssh-server 1:8.9p1-3 [modified: lib/systemd/system/ssh.socket]
ProcVersionSignature:
 
Uname: Linux 5.15.53-1-pve x86_64
ApportVersion: 2.20.11-0ubuntu82.1
Architecture: amd64
CasperMD5CheckResult: unknown
Date: Mon Oct  3 16:36:37 2022
ProcEnviron:
 TERM=linux
 PATH=(custom, no user)
 LANG=C
 SHELL=/bin/bash
SourcePackage: openssh
UpgradeStatus: No upgrade log present (probably fresh install)

** Affects: openssh (Ubuntu)
     Importance: Undecided
         Status: New


** Tags: amd64 apport-bug jammy

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to openssh in Ubuntu.
https://bugs.launchpad.net/bugs/1991566

Title:
  Package creates a socket file for all addresses of all families, even
  when bind to a single address

Status in openssh package in Ubuntu:
  New

Bug description:
  I am configuring OpenSSH to listen only on ipv4 and only on one
  interface and one address, with nginx listening on 22 on the other
  interface, and families.

  In order to make this happen, I had to "break" the socket file
  installed by the package at:

  /etc/systemd/system/sockets.target.wants/ssh.socket

  To read as follows:

  [Unit]
  Description=OpenBSD Secure Shell server socket
  Before=ssh.service
  Conflicts=ssh.service
  ConditionPathExists=!/etc/ssh/sshd_not_to_be_run

  #[Socket]
  #ListenStream=22
  #Accept=yes

  #[Install]
  #WantedBy=sockets.target

  (Commented out the lines that installed the socket)

  Then a daemon-reload, and restart of ngxinx, and all components of the
  solution are working as required.

  ProblemType: Bug
  DistroRelease: Ubuntu 22.04
  Package: openssh-server 1:8.9p1-3 [modified: lib/systemd/system/ssh.socket]
  ProcVersionSignature:
   
  Uname: Linux 5.15.53-1-pve x86_64
  ApportVersion: 2.20.11-0ubuntu82.1
  Architecture: amd64
  CasperMD5CheckResult: unknown
  Date: Mon Oct  3 16:36:37 2022
  ProcEnviron:
   TERM=linux
   PATH=(custom, no user)
   LANG=C
   SHELL=/bin/bash
  SourcePackage: openssh
  UpgradeStatus: No upgrade log present (probably fresh install)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openssh/+bug/1991566/+subscriptions