init file from sshd_config_default on Windows

resources/sshdconfig/locales/en-us.toml

@@ -11,6 +11,7 @@ inputMustBeBoolean = "value of '%{input}' must be true or false"
 
 [error]
 command = "Command"
+configInitRequired = "Configuration File Initialization Required"
 envVar = "Environment Variable"
 fileNotFound = "File not found: %{path}"
 invalidInput = "Invalid Input"
@@ -86,7 +87,6 @@ defaultShellDebug = "default_shell: %{shell}"
 expectedArrayForKeyword = "Expected array for keyword '%{keyword}'"
 failedToParse = "failed to parse: '%{input}'"
 failedToParseDefaultShell = "failed to parse input for DefaultShell with error: '%{error}'"
-purgeFalseRequiresExistingFile = "_purge=false requires an existing sshd_config file. Use _purge=true to create a new configuration file."
 settingDefaultShell = "Setting default shell"
 settingSshdConfig = "Setting sshd_config"
 shellPathDoesNotExist = "shell path does not exist: '%{shell}'"
@@ -99,6 +99,9 @@ writingTempConfig = "Writing temporary sshd_config file"
 [util]
 cleanupFailed = "Failed to clean up temporary file %{path}: %{error}"
 getIgnoresInputFilters = "get command does not support filtering based on input settings, provided input will be ignored"
+seededConfigFromDefault = "Seeded missing sshd_config from '%{source}' to '%{target}'"
+sshdConfigDefaultNotFound = "'%{path}' does not exist and no default source could be found. Checked: %{paths}. Start the sshd service to initialize it, then retry."
+sshdConfigNotFoundNonWindows = "'%{path}' does not exist. Start the sshd service to initialize it, then retry."
 sshdConfigReadFailed = "failed to read sshd_config at path: '%{path}'"
 sshdElevation = "elevated security context required"
 tempFileCreated = "temporary file created at: %{path}"

resources/sshdconfig/src/error.rs

@@ -9,6 +9,8 @@ use thiserror::Error;
 pub enum SshdConfigError {
     #[error("{t}: {0}", t = t!("error.command"))]
     CommandError(String),
+    #[error("{t}: {0}", t = t!("error.configInitRequired"))]
+    ConfigInitRequired(String),
     #[error("{t}: {0}", t = t!("error.envVar"))]
     EnvVarError(#[from] std::env::VarError),
     #[error("{t}", t = t!("error.fileNotFound", path = .0))]

resources/sshdconfig/src/set.rs

@@ -24,7 +24,7 @@ use crate::repeat_keyword::{
     RepeatInput, RepeatListInput, NameValueEntry,
     add_or_update_entry, extract_single_keyword, remove_entry, parse_and_validate_entries
 };
-use crate::util::{build_command_info, get_default_sshd_config_path, invoke_sshd_config_validation};
+use crate::util::{build_command_info, ensure_sshd_config_exists, get_default_sshd_config_path, invoke_sshd_config_validation};
 
 /// Invoke the set command.
 ///
@@ -189,16 +189,9 @@ fn set_sshd_config(cmd_info: &mut CommandInfo) -> Result<(), SshdConfigError> {
         let mut get_cmd_info = cmd_info.clone();
         get_cmd_info.include_defaults = false;
         get_cmd_info.input = Map::new();
+        ensure_sshd_config_exists(get_cmd_info.metadata.filepath.clone())?;
 
-        let mut existing_config = match get_sshd_settings(&get_cmd_info, true) {
-            Ok(config) => config,
-            Err(SshdConfigError::FileNotFound(_)) => {
-                return Err(SshdConfigError::InvalidInput(
-                    t!("set.purgeFalseRequiresExistingFile").to_string()
-                ));
-            }
-            Err(e) => return Err(e),
-        };
+        let mut existing_config = get_sshd_settings(&get_cmd_info, true)?;
         for (key, value) in &cmd_info.input {
             if value.is_null() {
                 existing_config.remove(key);
@@ -281,12 +274,6 @@ fn get_existing_config(cmd_info: &CommandInfo) -> Result<Map<String, Value>, Ssh
     let mut get_cmd_info = cmd_info.clone();
     get_cmd_info.include_defaults = false;
     get_cmd_info.input = Map::new();
-    match get_sshd_settings(&get_cmd_info, false) {
-        Ok(config) => Ok(config),
-        Err(SshdConfigError::FileNotFound(_)) => {
-            // If file doesn't exist, create empty config
-            Ok(Map::new())
-        }
-        Err(e) => Err(e),
-    }
+    ensure_sshd_config_exists(get_cmd_info.metadata.filepath.clone())?;
+    get_sshd_settings(&get_cmd_info, false)
 }

resources/sshdconfig/src/util.rs

@@ -107,6 +107,69 @@ pub fn get_default_sshd_config_path(input: Option<PathBuf>) -> Result<PathBuf, S
     }
 }
 
+fn get_sshd_config_default_source_candidates() -> Vec<PathBuf> {
+    let mut candidates: Vec<PathBuf> = Vec::new();
+
+    if cfg!(windows) && let Ok(win_dir) = std::env::var("windir") {
+        candidates.push(
+            PathBuf::from(win_dir)
+                .join("System32")
+                .join("OpenSSH")
+                .join("sshd_config_default"),
+        );
+    }
+
+    candidates
+}
+
+/// Ensure the target `sshd_config` exists by seeding it from a platform default source.
+///
+/// # Errors
+///
+/// This function returns an error if the target cannot be created or no source default config is available.
+pub fn ensure_sshd_config_exists(input: Option<PathBuf>) -> Result<PathBuf, SshdConfigError> {
+    let target_path = get_default_sshd_config_path(input)?;
+    if target_path.exists() {
+        return Ok(target_path);
+    }
+
+    if !cfg!(windows) {
+        return Err(SshdConfigError::ConfigInitRequired(
+            t!("util.sshdConfigNotFoundNonWindows", path = target_path.display()).to_string(),
+        ));
+    }
+
+    let candidates = get_sshd_config_default_source_candidates();
+    let source_path = candidates
+        .iter()
+        .find(|candidate| candidate.is_file())
+        .cloned()
+        .ok_or_else(|| {
+            let paths = candidates
+                .iter()
+                .map(|path| path.display().to_string())
+                .collect::<Vec<String>>()
+                .join(", ");
+            SshdConfigError::ConfigInitRequired(
+                t!(
+                    "util.sshdConfigDefaultNotFound",
+                    path = target_path.display(),
+                    paths = paths
+                )
+                .to_string(),
+            )
+        })?;
+
+    if let Some(parent) = target_path.parent() {
+        std::fs::create_dir_all(parent)?;
+    }
+
+    std::fs::copy(&source_path, &target_path)?;
+    debug!("{}", t!("util.seededConfigFromDefault", source = source_path.display(), target = target_path.display()));
+
+    Ok(target_path)
+}
+
 /// Invoke sshd -T.
 ///
 /// # Errors
@@ -244,5 +307,3 @@ pub fn read_sshd_config(input: Option<PathBuf>) -> Result<String, SshdConfigErro
         Err(SshdConfigError::FileNotFound(filepath.display().to_string()))
     }
 }
-
-

resources/sshdconfig/tests/sshdconfig.get.tests.ps1

@@ -148,7 +148,7 @@ PasswordAuthentication no
         Remove-Item -Path $stderrFile -Force -ErrorAction SilentlyContinue
     }
 
-    It 'Should fail when config file does not exist' {
+    It 'Should fail without creating target config when file does not exist' {
         $nonExistentPath = Join-Path $TestDrive 'nonexistent_sshd_config'
 
         $inputData = @{
@@ -161,8 +161,11 @@ PasswordAuthentication no
         sshdconfig get --input $inputData -s sshd-config 2>$stderrFile
         $LASTEXITCODE | Should -Not -Be 0
 
+        Test-Path $nonExistentPath | Should -Be $false
+
         $stderr = Get-Content -Path $stderrFile -Raw -ErrorAction SilentlyContinue
         $stderr | Should -Match "File not found"
+
         Remove-Item -Path $stderrFile -Force -ErrorAction SilentlyContinue
     }
 }

resources/sshdconfig/tests/sshdconfig.set.tests.ps1

@@ -180,25 +180,104 @@ Describe 'sshd_config Set Tests' -Skip:($skipTest) {
             sshdconfig set --input $validConfig -s sshd-config
         }
 
-        It 'Should fail with purge=false when file does not exist' {
-            $nonExistentPath = Join-Path $TestDrive "nonexistent_sshd_config"
+        Context 'Missing target with _purge=false on non-Windows' -Skip:($IsWindows) {
+            It 'Should fail when the target file does not exist' {
+                $nonExistentPath = Join-Path $TestDrive "nonexistent_sshd_config_nonwindows"
+                $stderrFile = Join-Path $TestDrive "stderr_purgefalse_nofile_nonwindows.txt"
+                $inputConfig = @{
+                    _metadata = @{
+                        filepath = $nonExistentPath
+                    }
+                    _purge = $false
+                    Port = "8888"
+                } | ConvertTo-Json
 
-            $inputConfig = @{
-                _metadata = @{
-                    filepath = $nonExistentPath
+                sshdconfig set --input $inputConfig -s sshd-config 2>$stderrFile
+
+                $LASTEXITCODE | Should -Not -Be 0
+                Test-Path $nonExistentPath | Should -Be $false
+                (Get-Content -Path $stderrFile -Raw -ErrorAction SilentlyContinue) | Should -Match "does not exist"
+
+                Remove-Item -Path $stderrFile -Force -ErrorAction SilentlyContinue
+                Remove-Item -Path $nonExistentPath -Force -ErrorAction SilentlyContinue
+            }
+        }
+
+        Context 'Missing target with _purge=false on Windows' -Skip:(-not $IsWindows) {
+            BeforeAll {
+                $script:MockWinDir = Join-Path $TestDrive "mock_windir"
+                New-Item -Path $script:MockWinDir -ItemType Directory -Force | Out-Null
+                $script:WindowsDefaultSourcePath = Join-Path $script:MockWinDir "System32\OpenSSH\sshd_config_default"
+            }
+
+            AfterEach {
+                Remove-Item -Path $script:CurrentWindowsStderrFile -Force -ErrorAction SilentlyContinue
+                Remove-Item -Path $script:CurrentWindowsTargetPath -Force -ErrorAction SilentlyContinue
+            }
+
+            It 'Should create the target file from the default source' {
+                $script:CurrentWindowsTargetPath = Join-Path $TestDrive "nonexistent_sshd_config_windows_success"
+                $script:CurrentWindowsStderrFile = Join-Path $TestDrive "stderr_purgefalse_nofile_windows_success.txt"
+
+                $defaultSourceDirectory = Split-Path -Path $script:WindowsDefaultSourcePath -Parent
+                New-Item -Path $defaultSourceDirectory -ItemType Directory -Force | Out-Null
+                Set-Content -Path $script:WindowsDefaultSourcePath -Value @(
+                    "Port 22",
+                    "PasswordAuthentication yes"
+                ) -Encoding ascii
+
+                $inputConfig = @{
+                    _metadata = @{
+                        filepath = $script:CurrentWindowsTargetPath
+                    }
+                    _purge = $false
+                    Port = "8888"
+                } | ConvertTo-Json
+
+                $origWinDir = $env:windir
+                try {
+                    $env:windir = $script:MockWinDir
+                    sshdconfig set --input $inputConfig -s sshd-config 2>$script:CurrentWindowsStderrFile
+                }
+                finally {
+                    $env:windir = $origWinDir
                 }
-                _purge = $false
-                Port = "8888"
-            } | ConvertTo-Json
 
-            $stderrFile = Join-Path $TestDrive "stderr_purgefalse_nofile.txt"
-            sshdconfig set --input $inputConfig -s sshd-config 2>$stderrFile
-            $LASTEXITCODE | Should -Not -Be 0
+                $LASTEXITCODE | Should -Be 0
+                Test-Path $script:CurrentWindowsTargetPath | Should -Be $true
+                $result = sshdconfig get --input $inputConfig -s sshd-config 2>$null | ConvertFrom-Json
+                $result.Port | Should -Be "8888"
+
+                Remove-Item -Path $script:WindowsDefaultSourcePath -Force -ErrorAction SilentlyContinue
+            }
 
-            $stderr = Get-Content -Path $stderrFile -Raw -ErrorAction SilentlyContinue
-            $stderr | Should -Match "_purge=false requires an existing sshd_config file"
-            $stderr | Should -Match "Use _purge=true to create a new configuration file"
-            Remove-Item -Path $stderrFile -Force -ErrorAction SilentlyContinue
+            It 'Should fail and leave the target file absent when the default source is unavailable' {
+                $script:CurrentWindowsTargetPath = Join-Path $TestDrive "nonexistent_sshd_config_windows_missing_default"
+                $script:CurrentWindowsStderrFile = Join-Path $TestDrive "stderr_purgefalse_nofile_windows_missing_default.txt"
+
+                Test-Path -Path $script:WindowsDefaultSourcePath -PathType Leaf -ErrorAction SilentlyContinue | Should -Be $false
+
+                $inputConfig = @{
+                    _metadata = @{
+                        filepath = $script:CurrentWindowsTargetPath
+                    }
+                    _purge = $false
+                    Port = "8888"
+                } | ConvertTo-Json
+
+                $origWinDir = $env:windir
+                try {
+                    $env:windir = $script:MockWinDir
+                    sshdconfig set --input $inputConfig -s sshd-config 2>$script:CurrentWindowsStderrFile
+                }
+                finally {
+                    $env:windir = $origWinDir
+                }
+
+                $LASTEXITCODE | Should -Not -Be 0
+                Test-Path $script:CurrentWindowsTargetPath | Should -Be $false
+                (Get-Content -Path $script:CurrentWindowsStderrFile -Raw -ErrorAction SilentlyContinue) | Should -Match "no default source could be found"
+            }
         }
 
         It 'Should fail with invalid keyword and not modify file' {