Package: dropbear
Version: 2022.83-1+deb12u1

I am using dropbear to remotely unlock encrypted disks (https://github.com/ceremcem/unlock-luks-partition) in debian 11. I want to use openssh-server once the system has started. It has previously worked well.

I have now upgraded to debian 12 bookworm. Now dropbear keeps restarting and blocks port 22. I cant succeed to disable it.

/etc/default/dropbear

# disabled because OpenSSH is installed
# change to NO_START=0 to enable Dropbear
NO_START=1
# the TCP port that Dropbear listens on
DROPBEAR_PORT=22

# any additional arguments for Dropbear
DROPBEAR_EXTRA_ARGS=

# specify an optional banner file containing a message to be
# sent to clients before they connect, such as "/etc/issue.net"
DROPBEAR_BANNER=""

# RSA hostkey file (default: /etc/dropbear/dropbear_rsa_host_key)
#DROPBEAR_RSAKEY="/etc/dropbear/dropbear_rsa_host_key"

# DSS hostkey file (default: /etc/dropbear/dropbear_dss_host_key)
#DROPBEAR_DSSKEY="/etc/dropbear/dropbear_dss_host_key"

# ECDSA hostkey file (default: /etc/dropbear/dropbear_ecdsa_host_key)
#DROPBEAR_ECDSAKEY="/etc/dropbear/dropbear_ecdsa_host_key"

# Receive window size - this is a tradeoff between memory and
# network performance
DROPBEAR_RECEIVE_WINDOW=65536

I have tried reinstalling dropbear.

I have tried changing port during boot/unlock which changed the port I had to use to unlock. This makes me think its not during the unlock-process something goes wrong. Dropbear keeps starting at port 22 once the system is booted.

....
root 1472 0.0 0.0 4524 1344 ? Ss 17:41 0:00 /usr/sbin/dropbear -EF -p 22 -W 65536
...
root 1933 0.0 0.0 4524 3180 ? Ss 17:41 0:00 /usr/sbin/dropbear -EF -p 22 -W 65536 -2 8
...

...
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 1472/dropbear
...
tcp 0 208 192.168.119.24:22 192.168.119.23:62197 ESTABLISHED 1933/dropbear
tcp6 0 0 :::22 :::* LISTEN 1472/dropbear
...

Reply via email to