simplify sshd config and add basic tests for it

Signed-off-by: clux <sszynrae@gmail.com>

templates/sshd_config.j2

@@ -1,20 +1,14 @@
 # Security - public keys only
 PasswordAuthentication no
-ChallengeResponseAuthentication no
+KbdInteractiveAuthentication no
 AuthenticationMethods publickey
 AuthorizedKeysFile .ssh/authorized_keys
+PermitRootLogin no
 X11Forwarding no
-AllowTcpForwarding yes
 
 # Misc
 Port 8702
 PrintMotd no
 LoginGraceTime 30
-
-# Privileges
-PermitRootLogin no
-{% if ansible_os_family == "Archlinux" %}
-Subsystem sftp /usr/lib/ssh/sftp-server
-{% elif ansible_os_family == "Debian" %}
-Subsystem sftp /usr/lib/openssh/sftp-server
-{% endif %}
+AllowTcpForwarding yes
+Subsystem sftp internal-sftp

test/install.test.bats

@@ -214,3 +214,9 @@ exists() {
   run gpg --list-keys
   echo "$output" && echo "$output" | grep -iq "\[ultimate\] Eirik"
 }
+
+@test "ssh" {
+  # verify sshd works against a keychain loaded private key
+  run ssh -q localhost -i ~/.ssh/main_id -p 8702 -o StrictHostKeyChecking=no echo ok
+  echo "$output" | grep "ok"
+}