Starting work on Implementing SSH Server Service

kernel/etc/bare-os/posix_utilities.json

@@ -1,7 +1,7 @@
 {
   "schema": 2,
   "profileId": "bare-os-posix-like",
-  "generatedAt": "2026-04-06T12:49:59.150Z",
+  "generatedAt": "2026-04-09T00:01:38.210Z",
   "note": "Sparse POSIX Issue 7 coverage hints for /bin utilities. Omitted command names are not yet profiled here.",
   "commandIndex": [
     {
@@ -12,6 +12,10 @@
       "name": "awk",
       "tier": "tier1_bin"
     },
+    {
+      "name": "bare-sshd",
+      "tier": "tier1_bin"
+    },
     {
       "name": "baretop",
       "tier": "tier1_bin"
@@ -464,6 +468,10 @@
       "name": "ssh-keygen",
       "tier": "tier1_bin"
     },
+    {
+      "name": "sshd",
+      "tier": "tier1_bin"
+    },
     {
       "name": "stat",
       "tier": "tier1_bin"
@@ -610,6 +618,7 @@
     "pear-runtime-matrix",
     "sidecar",
     "ssh-keygen",
+    "sshd",
     "systemctl",
     "tar"
   ],

kernel/etc/ssh/sshd_config

@@ -0,0 +1,23 @@
+# Bare OS sshd — stock defaults (see man sshd_config)
+# Host keys live on the writable personal drive (not under read-only /etc).
+
+Port 2222
+ListenAddress 127.0.0.1
+
+# Writable host key (generated on first start if missing)
+HostKey ~/.config/bare-os/ssh/host/ssh_host_ed25519_key
+
+PermitRootLogin no
+PasswordAuthentication yes
+PubkeyAuthentication yes
+PermitEmptyPasswords no
+ChallengeResponseAuthentication no
+
+AuthorizedKeysFile .ssh/authorized_keys
+
+AllowTcpForwarding no
+MaxAuthTries 6
+ClientAliveInterval 60
+ClientAliveCountMax 3
+
+Subsystem sftp internal-sftp