From 052754351a114160aea9d3028ff0f17d489ecacd Mon Sep 17 00:00:00 2001
From: mhoellein <mario@hoellein.online>
Date: Fri, 21 Jan 2022 09:21:47 +0100
Subject: [PATCH] committing changes in /etc made by "apt-get install dropbear"

Package changes:
+cryptsetup 2:2.2.2-3ubuntu2.3 amd64
+cryptsetup-bin 2:2.2.2-3ubuntu2.3 amd64
+cryptsetup-initramfs 2:2.2.2-3ubuntu2.3 all
+cryptsetup-run 2:2.2.2-3ubuntu2.3 all
+dropbear 2019.78-2build1 all
+dropbear-bin 2019.78-2build1 amd64
+dropbear-initramfs 2019.78-2build1 all
+libtomcrypt1 1.18.2-3 amd64
+libtommath1 1.2.0-3 amd64
---
 .etckeeper                                 |  20 ++++++
 cryptsetup-initramfs/conf-hook             |  28 ++++++++
 crypttab                                   |   1 +
 default/cryptdisks                         |  12 ++++
 default/dropbear                           |  25 +++++++
 dropbear-initramfs/config                  |  18 +++++
 dropbear-initramfs/dropbear_dss_host_key   | Bin 0 -> 458 bytes
 dropbear-initramfs/dropbear_ecdsa_host_key | Bin 0 -> 141 bytes
 dropbear-initramfs/dropbear_rsa_host_key   | Bin 0 -> 805 bytes
 dropbear/dropbear_dss_host_key             | Bin 0 -> 458 bytes
 dropbear/dropbear_ecdsa_host_key           | Bin 0 -> 140 bytes
 dropbear/dropbear_rsa_host_key             | Bin 0 -> 805 bytes
 dropbear/log/main                          |   1 +
 dropbear/log/run                           |   2 +
 dropbear/run                               |   3 +
 init.d/cryptdisks                          |  53 ++++++++++++++
 init.d/cryptdisks-early                    |  53 ++++++++++++++
 init.d/dropbear                            |  79 +++++++++++++++++++++
 rc0.d/K01cryptdisks                        |   1 +
 rc0.d/K01cryptdisks-early                  |   1 +
 rc0.d/K01dropbear                          |   1 +
 rc1.d/K01dropbear                          |   1 +
 rc2.d/S01dropbear                          |   1 +
 rc3.d/S01dropbear                          |   1 +
 rc4.d/S01dropbear                          |   1 +
 rc5.d/S01dropbear                          |   1 +
 rc6.d/K01cryptdisks                        |   1 +
 rc6.d/K01cryptdisks-early                  |   1 +
 rc6.d/K01dropbear                          |   1 +
 rcS.d/S01cryptdisks                        |   1 +
 rcS.d/S01cryptdisks-early                  |   1 +
 31 files changed, 308 insertions(+)
 create mode 100644 cryptsetup-initramfs/conf-hook
 create mode 100644 crypttab
 create mode 100644 default/cryptdisks
 create mode 100644 default/dropbear
 create mode 100644 dropbear-initramfs/config
 create mode 100644 dropbear-initramfs/dropbear_dss_host_key
 create mode 100644 dropbear-initramfs/dropbear_ecdsa_host_key
 create mode 100644 dropbear-initramfs/dropbear_rsa_host_key
 create mode 100644 dropbear/dropbear_dss_host_key
 create mode 100644 dropbear/dropbear_ecdsa_host_key
 create mode 100644 dropbear/dropbear_rsa_host_key
 create mode 120000 dropbear/log/main
 create mode 100755 dropbear/log/run
 create mode 100755 dropbear/run
 create mode 100755 init.d/cryptdisks
 create mode 100755 init.d/cryptdisks-early
 create mode 100755 init.d/dropbear
 create mode 120000 rc0.d/K01cryptdisks
 create mode 120000 rc0.d/K01cryptdisks-early
 create mode 120000 rc0.d/K01dropbear
 create mode 120000 rc1.d/K01dropbear
 create mode 120000 rc2.d/S01dropbear
 create mode 120000 rc3.d/S01dropbear
 create mode 120000 rc4.d/S01dropbear
 create mode 120000 rc5.d/S01dropbear
 create mode 120000 rc6.d/K01cryptdisks
 create mode 120000 rc6.d/K01cryptdisks-early
 create mode 120000 rc6.d/K01dropbear
 create mode 120000 rcS.d/S01cryptdisks
 create mode 120000 rcS.d/S01cryptdisks-early

diff --git a/.etckeeper b/.etckeeper
index 1c4acf9..824d58d 100755
--- a/.etckeeper
+++ b/.etckeeper
@@ -510,6 +510,9 @@ maybe chmod 0644 'crontab'
 maybe chmod 0755 'cruft'
 maybe chmod 0755 'cruft/filters-unex'
 maybe chmod 0644 'cruft/filters-unex/etckeeper'
+maybe chmod 0755 'cryptsetup-initramfs'
+maybe chmod 0644 'cryptsetup-initramfs/conf-hook'
+maybe chmod 0644 'crypttab'
 maybe chmod 0755 'dbconfig-common'
 maybe chmod 0600 'dbconfig-common/config'
 maybe chmod 0755 'dbus-1'
@@ -528,8 +531,10 @@ maybe chmod 0644 'default/bsdmainutils'
 maybe chmod 0644 'default/console-setup'
 maybe chmod 0644 'default/crda'
 maybe chmod 0644 'default/cron'
+maybe chmod 0644 'default/cryptdisks'
 maybe chmod 0644 'default/dbus'
 maybe chmod 0644 'default/dovecot'
+maybe chmod 0644 'default/dropbear'
 maybe chmod 0644 'default/grub'
 maybe chmod 0755 'default/grub.d'
 maybe chmod 0644 'default/grub.d/init-select.cfg'
@@ -599,6 +604,18 @@ maybe chmod 0755 'dpkg/dpkg.cfg.d'
 maybe chmod 0755 'dpkg/origins'
 maybe chmod 0644 'dpkg/origins/debian'
 maybe chmod 0644 'dpkg/origins/ubuntu'
+maybe chmod 0755 'dropbear'
+maybe chmod 0755 'dropbear-initramfs'
+maybe chmod 0644 'dropbear-initramfs/config'
+maybe chmod 0600 'dropbear-initramfs/dropbear_dss_host_key'
+maybe chmod 0600 'dropbear-initramfs/dropbear_ecdsa_host_key'
+maybe chmod 0600 'dropbear-initramfs/dropbear_rsa_host_key'
+maybe chmod 0600 'dropbear/dropbear_dss_host_key'
+maybe chmod 0600 'dropbear/dropbear_ecdsa_host_key'
+maybe chmod 0600 'dropbear/dropbear_rsa_host_key'
+maybe chmod 0755 'dropbear/log'
+maybe chmod 0755 'dropbear/log/run'
+maybe chmod 0755 'dropbear/run'
 maybe chmod 0644 'e2scrub.conf'
 maybe chmod 0755 'emacs'
 maybe chmod 0755 'emacs/site-start.d'
@@ -805,8 +822,11 @@ maybe chmod 0755 'init.d/apache2'
 maybe chmod 0755 'init.d/apparmor'
 maybe chmod 0755 'init.d/console-setup.sh'
 maybe chmod 0755 'init.d/cron'
+maybe chmod 0755 'init.d/cryptdisks'
+maybe chmod 0755 'init.d/cryptdisks-early'
 maybe chmod 0755 'init.d/dbus'
 maybe chmod 0755 'init.d/dovecot'
+maybe chmod 0755 'init.d/dropbear'
 maybe chmod 0755 'init.d/grub-common'
 maybe chmod 0755 'init.d/hwclock.sh'
 maybe chmod 0755 'init.d/icinga2'
diff --git a/cryptsetup-initramfs/conf-hook b/cryptsetup-initramfs/conf-hook
new file mode 100644
index 0000000..81de87e
--- /dev/null
+++ b/cryptsetup-initramfs/conf-hook
@@ -0,0 +1,28 @@
+#
+# Configuration file for the cryptroot initramfs hook.
+#
+
+#
+# KEYFILE_PATTERN: ...
+#
+# The value of this variable is interpreted as a shell pattern.
+# Matching key files from the crypttab(5) are included in the initramfs
+# image.  The associated devices can then be unlocked without manual
+# intervention.  (For instance if /etc/crypttab lists two key files
+# /etc/keys/{root,swap}.key, you can set KEYFILE_PATTERN="/etc/keys/*.key"
+# to add them to the initrd.)
+#
+# If KEYFILE_PATTERN if null or unset (default) then no key file is
+# copied to the initramfs image.
+#
+# Note that the glob(7) is not expanded for crypttab(5) entries with a
+# 'keyscript=' option.  In that case, the field is not treated as a file
+# name but given as argument to the keyscript.
+#
+# WARNING: If the initramfs image is to include private key material,
+# you'll want to create it with a restrictive umask in order to keep
+# non-privileged users at bay.  For instance, set UMASK=0077 in
+# /etc/initramfs-tools/initramfs.conf
+#
+
+#KEYFILE_PATTERN=
diff --git a/crypttab b/crypttab
new file mode 100644
index 0000000..8320514
--- /dev/null
+++ b/crypttab
@@ -0,0 +1 @@
+# <target name>	<source device>		<key file>	<options>
diff --git a/default/cryptdisks b/default/cryptdisks
new file mode 100644
index 0000000..c1f837c
--- /dev/null
+++ b/default/cryptdisks
@@ -0,0 +1,12 @@
+# Run cryptdisks initscripts at startup? Default is Yes.
+CRYPTDISKS_ENABLE=Yes
+
+# Mountpoints to mount, before cryptsetup is invoked at initscripts. Takes
+# mountpoins which are configured in /etc/fstab as arguments. Separate
+# mountpoints by space.
+# This is useful for keyfiles on removable media. Default is unset.
+CRYPTDISKS_MOUNT=""
+
+# Default check script. Takes effect, if the 'check' option is set in crypttab
+# without a value.
+CRYPTDISKS_CHECK=blkid
diff --git a/default/dropbear b/default/dropbear
new file mode 100644
index 0000000..b1e09ae
--- /dev/null
+++ b/default/dropbear
@@ -0,0 +1,25 @@
+# disabled because OpenSSH is installed
+# change to NO_START=0 to enable Dropbear
+NO_START=1
+# the TCP port that Dropbear listens on
+DROPBEAR_PORT=22
+
+# any additional arguments for Dropbear
+DROPBEAR_EXTRA_ARGS=
+
+# specify an optional banner file containing a message to be
+# sent to clients before they connect, such as "/etc/issue.net"
+DROPBEAR_BANNER=""
+
+# RSA hostkey file (default: /etc/dropbear/dropbear_rsa_host_key)
+#DROPBEAR_RSAKEY="/etc/dropbear/dropbear_rsa_host_key"
+
+# DSS hostkey file (default: /etc/dropbear/dropbear_dss_host_key)
+#DROPBEAR_DSSKEY="/etc/dropbear/dropbear_dss_host_key"
+
+# ECDSA hostkey file (default: /etc/dropbear/dropbear_ecdsa_host_key)
+#DROPBEAR_ECDSAKEY="/etc/dropbear/dropbear_ecdsa_host_key"
+
+# Receive window size - this is a tradeoff between memory and
+# network performance
+DROPBEAR_RECEIVE_WINDOW=65536
diff --git a/dropbear-initramfs/config b/dropbear-initramfs/config
new file mode 100644
index 0000000..8dcf5c0
--- /dev/null
+++ b/dropbear-initramfs/config
@@ -0,0 +1,18 @@
+#
+# Configuration options for the dropbear-initramfs boot scripts.
+# You must run update-initramfs(8) to effect changes to this file (like
+# for other files under the '/etc/dropbear-initramfs' directory).
+
+#
+# Command line options to pass to dropbear(8)
+#
+#DROPBEAR_OPTIONS=
+
+#
+# On local (non-NFS) mounts, interfaces matching this pattern are
+# brought down before exiting the ramdisk to avoid dirty network
+# configuration in the normal kernel.
+# The special value 'none' keeps all interfaces up and preserves routing
+# tables and addresses.
+#
+#IFDOWN=*
diff --git a/dropbear-initramfs/dropbear_dss_host_key b/dropbear-initramfs/dropbear_dss_host_key
new file mode 100644
index 0000000000000000000000000000000000000000..5126d6584c2f12911181e4df7bcdea1064898dd0
GIT binary patch
literal 458
zcmV;*0X6;r000Mbb7(DOb8`Ry0D%C*TxZ)=VN(u5TBjD;fm9cn;<Ql(>}P(IQ=W9%
zI~x$7$n}H-yFfPsoDP>?Br^<$ec@!toZbDjjG=i)GNlF$=SF!a6?R5vTEhCqO6-pG
zcO_=&S=R$6%Z^dixUiOM(mHFge5RpNATQGrHbN6^TXkqtM79d2_rogq7j;hn000#L
zxHQU+p;iWon@u@927?uPq-#<^0001hb?-}z?>y-#{Z8Xskl06f1>Eo}fjR9=;EP&Q
zE-`LmEZB)7PQtc^0zGFNI{HIr=1P6tCqt`8f>%Bcuuy>&M?@;sEDpypl9V>-$^mHo
z1qRoCo71Xg-nj=)LV0LM2M3~rJjEsB;CAJA!-xO9{;?Z?@!f!uHJHOhJYvn~0001i
z0GPN)JXPI8$qX`p<=hbr-*u!4$4vs|yc&!0ji7T*1e^tQV!MSri#|-~8zlszNA`(W
zFyMU5{6T-K!yzD{(U7WqTNVD-O=<J9MHUoT)J&r{RqJM(u2Jm!D(CL#u&o#O)Y9>>
zU~|3#z2o&!AtlaDVSrUxI=ePlC)BEcfdBvi6jAP~k?R+_0A)5sPh~apnu`>>dx)&h
A^8f$<

literal 0
HcmV?d00001

diff --git a/dropbear-initramfs/dropbear_ecdsa_host_key b/dropbear-initramfs/dropbear_ecdsa_host_key
new file mode 100644
index 0000000000000000000000000000000000000000..7b21ac1a1af272deeb3ab83b5ce415f81b3f261d
GIT binary patch
literal 141
zcmZQzU=U7CPAN{*EzU?Z(#^{(E-5fFHDh34;6P$KvgCM~<+n44KGCydm25ua^lN7S
zvE^ImuyU(K3zVl#eY8SKD)f`UL>KYQ(mMXtbFxqKZV;R@`<l|{hB;#E_DA~P0vf2u
n&~yA{;ieb=T)Sny%-x+)efyyGtCuW$S)R7V?RxgG+&3BkQ#m;E

literal 0
HcmV?d00001

diff --git a/dropbear-initramfs/dropbear_rsa_host_key b/dropbear-initramfs/dropbear_rsa_host_key
new file mode 100644
index 0000000000000000000000000000000000000000..69720f2fcfbcab46c4c28e6b9a40a8302af9ea11
GIT binary patch
literal 805
zcmV+=1KRum000Mbb7(Dcb724g00RL40RR920RX0J%^MUayC=5cZ_TzW`kQtLAX`)T
zTf{tH?R0X0XOpKDu^!Q2AuM*n{&E1dBAz+Aq7)X@{@uA-!g7P{^F89?r`Z!0BvR+d
z_g%GQx$q6b>#_01lN#y8zxBrv)N9%?B79Kpmc202f5DTr?oYKhl^;^JgXtLm(_8>O
zjzo<gCX*3eJWfM{yE&e416)nEhAm?F$wM|T(h^cZG6v8Pc5-5{Qa@e!w<M$L>Ug4D
zzo8Nx&`W`F(@2h>UBDTCmPw2bf*^nCf1`;SkS#}Dhy0i=>SX+T`=XXCg51m~V)46b
zZDd(9U+D2}-OOOFQ7gypHU<<ifZc+Gr!N2i0RRMI<WmW_N?e5S$SaxH@uaIzXM~mt
zsSt))gOmk$knH(bX|G!B4GA7lHn^cG&#=WnzzExe<YmfKI?o;75LVgd2*oQvNG2qd
zcop#8sKrG0m6E<|@*7MiWF&!%vKE+3_d5<h21XJ^S`4dfsLfJZ7O!rp|AAvm^@i0w
zbi{B1PF%L_%u(`7s%9$>r(v!_Bx;vOT4{R<niEE6Lxf4l3UAu@;!%s7hA69f;BlLC
z`Q|Cf4;p6<Zc(<h$YmWI(dsndj$@`)LuaBQjY|(4c@d_z%Kp^tBKIR46=Yb=MIKgg
zm=X3>p#u^}J)qY)L_6<Km4>YyvEC}kB{2X10D%Cg@^pBYED=M{M5N<e(tgY(7G#c{
zB!`6Au5I?z3y*DXC2}Q#CCAV<6i?VHLFnDTSSNGJpp{Qnv#1fhT)SRc%pTDFxY27t
z^{;83k?0xb1qWttRL(s75#Ht7t0T_MAAk-$3+=|GQWJ0soFrC-(VkCuSrM;#81pn8
zIsfed004mi{46DnWMLVwa-6@l`)7e>w(ZI*Q4KbyAMH28N)KrE+ZpPIDD)A#KDC|O
z<gTV;6a2|S_Q-r+yua|~3bDLl>aDK7VJgwa(fJmZ^<VFJGT`i7;=2Ty3u5YL*j!jF
jW+cMAp=Y(=BQb_|2H-|MOvFZ)Y1TS!gd0WL8@xyhf9ify

literal 0
HcmV?d00001

diff --git a/dropbear/dropbear_dss_host_key b/dropbear/dropbear_dss_host_key
new file mode 100644
index 0000000000000000000000000000000000000000..1586b2f85b675a21250d052cdbf12ceb43a23878
GIT binary patch
literal 458
zcmV;*0X6;r000Mbb7(DOb8`Ry0D%C9=Hn`1SRFV^91qA7oevd1>`X|AMU*RdK#9=3
zE)Uj<p$i;i-udLubys4%^3P`ar)&^ENi9ystIo}{qX2Ml$r70>o!7mi&<P@^_~Pwe
za}7vL03^`TU>2N9`D|mmpQ>Y;`7tsV-eZ%)+u+3zJ_Dd|4G`kho+8Gui3{TZ000#L
z_Lf-dpa0G?%DuVPu*5AD;5DLi0001i0EKCNm}7yJ9L(YF12hrE<L?-S_$BKni^7if
zeO}ZId*0tzcBqW3*z%F#?7+DLvRH7axluW03<Ii!Iezdj!LI@H$0*|*6ufRFY?857
z0;9Y}2{Si|N-<|@8Z87;rUJ+v^WaAXaE>G~EHfxLsDMv*6GP)*?(uch`%2s^v;Y7A
zfI>2eNEppNXOFNIZ<2A0f2mUb7J20U>^!ctiUy{6Y*jnjJC9u78;c8%6Nx|Fh=tZt
zhH^8Yy+!5`)7jgjAOgf*JB;G@KRoor&cJ2%px<@=nog4_=}q^-F~qUD0hvXtlX-iM
z*n^{>Mb#Y;7HIU@<bjG?Sy|t;B=C*?N&o-=6mm1?d1TmvKWXG*{9q3Z9rrt-wS(>1
AuK)l5

literal 0
HcmV?d00001

diff --git a/dropbear/dropbear_ecdsa_host_key b/dropbear/dropbear_ecdsa_host_key
new file mode 100644
index 0000000000000000000000000000000000000000..6d83cc270523cca646a5a4d9e85c495f0a77907e
GIT binary patch
literal 140
zcmZQzU=U7CPAN{*EzU?Z(#^{(E-5fFHDh34;6P$KvNXjO9j#v?8a`jd{A|TB4}Q1R
zPDd6lJ7|)z!$jKVAFKXt#lRqrnYAk3R^3-hR?VE8FZ#UbN?i!skFOU5PJHqT0vf2m
mFyYJ8L%dHoW!9@~;#|#I`MG6L@$2p0I}{9J%iV5mQ3C*K-8PZ{

literal 0
HcmV?d00001

diff --git a/dropbear/dropbear_rsa_host_key b/dropbear/dropbear_rsa_host_key
new file mode 100644
index 0000000000000000000000000000000000000000..e19793332bc1ba8f0d6c1e44d511e3abd5e6aff5
GIT binary patch
literal 805
zcmV+=1KRum000Mbb7(Dcb724g00RL40RR920RXKyGsWNlmvwbK6_86bjByv2Od})o
zp_GgTD!~k%)l0+VGvD-$y_d&{g2*NdOe*U%Lvxd-KvzmM;sVXEv7TxRYmW$S7Wd5n
zEf(Q6ZCD2kr}#;BFv1<5@Qt%23dv@O8K=>l#th1-Xao(=ovN!Ek$+HwfUK0|+Vun<
zE?gEjNdw8$ew=$4JOdh^mp>4Z>rVq+x{7vr(6RHNy#%=f$8mul<!{@Bhg6cU-&lvW
z1TH`7BWMsuK}Ih)<CotJqs3B44P2CtUtiF~IF|YXC}g7-{W$tfQd!-(HajA2n!rx0
z+BSwWKcFo$4K%I##9++^vu!e30+uvxIu!r_0RUnsp&k~i|0phj7w;y{=5Gh#QsM6O
zC&X9$ZI|pI?b-Wo3;%OO2Np$|r6cNlD0G3yq8O5?ii&KYzZ$!k&u(YMg!B&J<KGmj
zZsM{?_j#1H6;fNiz%HOa3_u_*bBJNH>SggDm=cqnpf&sECK8(0d2ikxM*@X*Be)3H
z>Y9-AZ3!{*iE!gQKF5sY`@`Hh`!Ns1mBNym<ZUPYE#T2hfv=sI4izwE?Tsw*&ky3m
zMe(so#x(@aPHfX~sC8d1#&f*RD#trNccE^Ue0a*>oeSR;giq+svPH*Xx=Kczjmt@3
z4wI@XfJk&JqHlK-x&m=B;6Jk7JK6~tQb7O!0D%DH|BE#o?~<K2_oqOSP(9rTnJ9Z1
z)cJn(x6?NqX1WfVA8nw1U~eyeTT=v^A1jbjnHu&S{*EB@QXmn7dH^bX7h^2CicmWK
zG}q9L2vl(CzW0Sf5bBR0GQl2mj+Y?-2rP$C(Pjr6IWYDXi@JQ>CuI7AjGLUf;qUFv
zs%QNG004mi!KCq-KL|J^x}r#$>YQGT3e|tup5BmRdYs!aR3x3RxEUp6i%tCYwyPk$
z=?K!nUf;Izg)xcrBD5&n`Sqp~*rZEpG~pqmY4BLhzCD?(?&H6J=2*1Z(kvr3ll$%6
jCY<ndLOl)r2!#6FOQqtOYll@s@68Ok;dg{K^wRnHMz?-c

literal 0
HcmV?d00001

diff --git a/dropbear/log/main b/dropbear/log/main
new file mode 120000
index 0000000..d1077ca
--- /dev/null
+++ b/dropbear/log/main
@@ -0,0 +1 @@
+/var/log/dropbear
\ No newline at end of file
diff --git a/dropbear/log/run b/dropbear/log/run
new file mode 100755
index 0000000..2ffb13d
--- /dev/null
+++ b/dropbear/log/run
@@ -0,0 +1,2 @@
+#!/bin/sh
+exec chpst -udropbearlog svlogd -tt ./main
diff --git a/dropbear/run b/dropbear/run
new file mode 100755
index 0000000..f208085
--- /dev/null
+++ b/dropbear/run
@@ -0,0 +1,3 @@
+#!/bin/sh
+exec 2>&1
+exec dropbear -d ./dropbear_dss_host_key -r ./dropbear_rsa_host_key -F -E -p 22
diff --git a/init.d/cryptdisks b/init.d/cryptdisks
new file mode 100755
index 0000000..0cd4a83
--- /dev/null
+++ b/init.d/cryptdisks
@@ -0,0 +1,53 @@
+#! /bin/sh
+### BEGIN INIT INFO
+# Provides:          cryptdisks
+# Required-Start:    checkroot cryptdisks-early
+# Required-Stop:     umountroot cryptdisks-early
+# Should-Start:      udev mdadm-raid lvm2
+# Should-Stop:       udev mdadm-raid lvm2
+# X-Start-Before:    checkfs
+# X-Stop-After:      umountfs
+# X-Interactive:     true
+# Default-Start:     S
+# Default-Stop:      0 6
+# Short-Description: Setup remaining encrypted block devices.
+# Description:
+### END INIT INFO
+
+set -e
+
+if [ -r /lib/cryptsetup/cryptdisks-functions ]; then
+	. /lib/cryptsetup/cryptdisks-functions
+else
+	exit 0
+fi
+
+INITSTATE="remaining"
+DEFAULT_LOUD="yes"
+
+case "$CRYPTDISKS_ENABLE" in
+[Nn]*)
+	exit 0
+	;;
+esac
+
+case "$1" in
+start)
+	do_start
+	;;
+stop)
+	do_stop
+	;;
+restart|reload|force-reload)
+	do_stop
+	do_start
+	;;
+force-start)
+	FORCE_START="yes"
+	do_start
+	;;
+*)
+	echo "Usage: cryptdisks {start|stop|restart|reload|force-reload|force-start}"
+	exit 1
+	;;
+esac
diff --git a/init.d/cryptdisks-early b/init.d/cryptdisks-early
new file mode 100755
index 0000000..6498431
--- /dev/null
+++ b/init.d/cryptdisks-early
@@ -0,0 +1,53 @@
+#! /bin/sh
+### BEGIN INIT INFO
+# Provides:          cryptdisks-early
+# Required-Start:    checkroot
+# Required-Stop:     umountroot
+# Should-Start:      udev mdadm-raid
+# Should-Stop:       udev mdadm-raid
+# X-Start-Before:    lvm2
+# X-Stop-After:      lvm2 umountfs
+# X-Interactive:     true
+# Default-Start:     S
+# Default-Stop:      0 6
+# Short-Description: Setup early encrypted block devices.
+# Description:
+### END INIT INFO
+
+set -e
+
+if [ -r /lib/cryptsetup/cryptdisks-functions ]; then
+	. /lib/cryptsetup/cryptdisks-functions
+else
+	exit 0
+fi
+
+INITSTATE="early"
+DEFAULT_LOUD=""
+
+case "$CRYPTDISKS_ENABLE" in
+[Nn]*)
+	exit 0
+	;;
+esac
+
+case "$1" in
+start)
+	do_start
+	;;
+stop)
+	do_stop
+	;;
+restart|reload|force-reload)
+	do_stop
+	do_start
+	;;
+force-start)
+	FORCE_START="yes"
+	do_start
+	;;
+*)
+	echo "Usage: cryptdisks-early {start|stop|restart|reload|force-reload|force-start}"
+	exit 1
+	;;
+esac
diff --git a/init.d/dropbear b/init.d/dropbear
new file mode 100755
index 0000000..ccd758d
--- /dev/null
+++ b/init.d/dropbear
@@ -0,0 +1,79 @@
+#!/bin/sh
+### BEGIN INIT INFO
+# Provides:          dropbear
+# Required-Start:    $remote_fs $syslog
+# Required-Stop:     $remote_fs $syslog
+# Default-Start:     2 3 4 5
+# Default-Stop:      0 1 6
+# Short-Description: Lightweight SSH server
+# Description:       Init script for drobpear SSH server.  Edit
+#                    /etc/default/dropbear to configure the server.
+### END INIT INFO
+#
+# Do not configure this file. Edit /etc/default/dropbear instead!
+#
+
+PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin
+DAEMON=/usr/sbin/dropbear
+NAME=dropbear
+DESC="Dropbear SSH server"
+DEFAULTCFG=/etc/default/dropbear
+
+DROPBEAR_PORT=22
+DROPBEAR_EXTRA_ARGS=
+NO_START=0
+
+set -e
+
+. /lib/lsb/init-functions
+
+cancel() { echo "$1" >&2; exit 0; };
+test ! -r $DEFAULTCFG || . $DEFAULTCFG
+test -x "$DAEMON" || cancel "$DAEMON does not exist or is not executable."
+test ! -x /usr/sbin/update-service || ! update-service --check dropbear ||
+  cancel 'The dropbear service is controlled through runit, use the sv(8) program'
+
+[ ! "$DROPBEAR_BANNER" ] || DROPBEAR_EXTRA_ARGS="$DROPBEAR_EXTRA_ARGS -b $DROPBEAR_BANNER"
+[ ! -f "$DROPBEAR_RSAKEY" ]   || DROPBEAR_EXTRA_ARGS="$DROPBEAR_EXTRA_ARGS -r $DROPBEAR_RSAKEY"
+[ ! -f "$DROPBEAR_DSSKEY" ]   || DROPBEAR_EXTRA_ARGS="$DROPBEAR_EXTRA_ARGS -r $DROPBEAR_DSSKEY"
+[ ! -f "$DROPBEAR_ECDSAKEY" ] || DROPBEAR_EXTRA_ARGS="$DROPBEAR_EXTRA_ARGS -r $DROPBEAR_ECDSAKEY"
+test -n "$DROPBEAR_RECEIVE_WINDOW" || \
+  DROPBEAR_RECEIVE_WINDOW="65536"
+
+case "$1" in
+  start)
+	test "$NO_START" = "0" ||
+	cancel "Starting $DESC: [abort] NO_START is not set to zero in $DEFAULTCFG"
+
+	echo -n "Starting $DESC: "
+	start-stop-daemon --start --quiet --pidfile /var/run/"$NAME".pid \
+	  --exec "$DAEMON" -- -p "$DROPBEAR_PORT" -W "$DROPBEAR_RECEIVE_WINDOW" $DROPBEAR_EXTRA_ARGS
+	echo "$NAME."
+	;;
+  stop)
+	echo -n "Stopping $DESC: "
+	start-stop-daemon --stop --quiet --oknodo --pidfile /var/run/"$NAME".pid
+	echo "$NAME."
+	;;
+  restart|force-reload)
+	test "$NO_START" = "0" ||
+	cancel "Restarting $DESC: [abort] NO_START is not set to zero in $DEFAULTCFG"
+
+	echo -n "Restarting $DESC: "
+	start-stop-daemon --stop --quiet --oknodo --pidfile /var/run/"$NAME".pid
+	sleep 1
+	start-stop-daemon --start --quiet --pidfile /var/run/"$NAME".pid \
+	  --exec "$DAEMON" -- $DROPBEAR_KEYS -p "$DROPBEAR_PORT" -W "$DROPBEAR_RECEIVE_WINDOW" $DROPBEAR_EXTRA_ARGS
+	echo "$NAME."
+	;;
+  status)
+		status_of_proc -p /var/run/"$NAME".pid $DAEMON $NAME && exit 0 || exit $?
+	;;
+  *)
+	N=/etc/init.d/$NAME
+	echo "Usage: $N {start|stop|status|restart|force-reload}" >&2
+	exit 1
+	;;
+esac
+
+exit 0
diff --git a/rc0.d/K01cryptdisks b/rc0.d/K01cryptdisks
new file mode 120000
index 0000000..6202e26
--- /dev/null
+++ b/rc0.d/K01cryptdisks
@@ -0,0 +1 @@
+../init.d/cryptdisks
\ No newline at end of file
diff --git a/rc0.d/K01cryptdisks-early b/rc0.d/K01cryptdisks-early
new file mode 120000
index 0000000..caf5ed0
--- /dev/null
+++ b/rc0.d/K01cryptdisks-early
@@ -0,0 +1 @@
+../init.d/cryptdisks-early
\ No newline at end of file
diff --git a/rc0.d/K01dropbear b/rc0.d/K01dropbear
new file mode 120000
index 0000000..44af88d
--- /dev/null
+++ b/rc0.d/K01dropbear
@@ -0,0 +1 @@
+../init.d/dropbear
\ No newline at end of file
diff --git a/rc1.d/K01dropbear b/rc1.d/K01dropbear
new file mode 120000
index 0000000..44af88d
--- /dev/null
+++ b/rc1.d/K01dropbear
@@ -0,0 +1 @@
+../init.d/dropbear
\ No newline at end of file
diff --git a/rc2.d/S01dropbear b/rc2.d/S01dropbear
new file mode 120000
index 0000000..44af88d
--- /dev/null
+++ b/rc2.d/S01dropbear
@@ -0,0 +1 @@
+../init.d/dropbear
\ No newline at end of file
diff --git a/rc3.d/S01dropbear b/rc3.d/S01dropbear
new file mode 120000
index 0000000..44af88d
--- /dev/null
+++ b/rc3.d/S01dropbear
@@ -0,0 +1 @@
+../init.d/dropbear
\ No newline at end of file
diff --git a/rc4.d/S01dropbear b/rc4.d/S01dropbear
new file mode 120000
index 0000000..44af88d
--- /dev/null
+++ b/rc4.d/S01dropbear
@@ -0,0 +1 @@
+../init.d/dropbear
\ No newline at end of file
diff --git a/rc5.d/S01dropbear b/rc5.d/S01dropbear
new file mode 120000
index 0000000..44af88d
--- /dev/null
+++ b/rc5.d/S01dropbear
@@ -0,0 +1 @@
+../init.d/dropbear
\ No newline at end of file
diff --git a/rc6.d/K01cryptdisks b/rc6.d/K01cryptdisks
new file mode 120000
index 0000000..6202e26
--- /dev/null
+++ b/rc6.d/K01cryptdisks
@@ -0,0 +1 @@
+../init.d/cryptdisks
\ No newline at end of file
diff --git a/rc6.d/K01cryptdisks-early b/rc6.d/K01cryptdisks-early
new file mode 120000
index 0000000..caf5ed0
--- /dev/null
+++ b/rc6.d/K01cryptdisks-early
@@ -0,0 +1 @@
+../init.d/cryptdisks-early
\ No newline at end of file
diff --git a/rc6.d/K01dropbear b/rc6.d/K01dropbear
new file mode 120000
index 0000000..44af88d
--- /dev/null
+++ b/rc6.d/K01dropbear
@@ -0,0 +1 @@
+../init.d/dropbear
\ No newline at end of file
diff --git a/rcS.d/S01cryptdisks b/rcS.d/S01cryptdisks
new file mode 120000
index 0000000..6202e26
--- /dev/null
+++ b/rcS.d/S01cryptdisks
@@ -0,0 +1 @@
+../init.d/cryptdisks
\ No newline at end of file
diff --git a/rcS.d/S01cryptdisks-early b/rcS.d/S01cryptdisks-early
new file mode 120000
index 0000000..caf5ed0
--- /dev/null
+++ b/rcS.d/S01cryptdisks-early
@@ -0,0 +1 @@
+../init.d/cryptdisks-early
\ No newline at end of file
-- 
2.43.0