The openssh cookbook now provides custom resources for package-managed Linux OpenSSH installs.

• Amazon Linux 2023
• Debian 12 and 13
• Rocky Linux 9
• Ubuntu 22.04 and 24.04

• Chef Infra Client >= 16.0

• openssh_client
• openssh_server
• openssh_firewall

Detailed resource documentation lives in the documentation directory.

openssh_client 'default'

openssh_server 'default' do
  port 22
  action :create
end

openssh_firewall 'default' do
  port 22
  action :create
end

openssh_client 'default'

openssh_server 'default' do
  ca_keys ['ssh-ed25519 AAAAC3Nza... example-ca']
end

openssh_firewall 'default'

• The cookbook manages distro packages only. It does not install OpenSSH from source.
• Historical Windows and other legacy-platform recipe paths were removed as part of the full custom-resource migration.
• The CI, Kitchen matrix, and metadata support list are intentionally aligned with the current ossec cookbook workflow pattern.