prbinu

# pre-req: start Vault server (dev)
# Usage: VAULT_TOKEN=<dev-root-token> ./ssh-cert-template-test.sh

vault policy write test -<<EOF
path "ssh-client-signer/sign/my-role"
{
  capabilities = ["create", "read", "update"]
}
EOF

prbinu

# on a fresh Ubuntu 16.04 host
sudo apt-get update

# copy Ubuntu source packages from http://archive.ubuntu.com/ubuntu/pool/main/o/openssh

wget http://archive.ubuntu.com/ubuntu/pool/main/o/openssh/openssh_7.6p1-4.dsc
wget http://archive.ubuntu.com/ubuntu/pool/main/o/openssh/openssh_7.6p1.orig.tar.gz
wget http://archive.ubuntu.com/ubuntu/pool/main/o/openssh/openssh_7.6p1.orig.tar.gz.asc
wget http://archive.ubuntu.com/ubuntu/pool/main/o/openssh/openssh_7.6p1-4.debian.tar.xz

prbinu

# on a fresh Ubuntu 16.04 host
sudo apt-get update

# copy the packages from https://launchpad.net/debian/+source/openssh/1:7.4p1-10+deb9u3

wget https://launchpad.net/ubuntu/+archive/primary/+sourcefiles/openssh/1:7.4p1-10/openssh_7.4p1-10.dsc
wget https://launchpad.net/ubuntu/+archive/primary/+sourcefiles/openssh/1:7.4p1-10/openssh_7.4p1.orig.tar.gz
wget https://launchpad.net/ubuntu/+archive/primary/+sourcefiles/openssh/1:7.4p1-10/openssh_7.4p1-10.debian.tar.xz

tar -zxvf openssh_7.4p1.orig.tar.gz