bundlewrap/bundles/openssh/metadata.py

from bundlewrap.metadata import atomic

defaults = {
    'apt': {
        'packages': {
            'openssh-client': {},
            'openssh-server': {},
            'openssh-sftp-server': {},
        },
    },
    'pacman': {
        'packages': {
            'openssh': {},
        },
    },
}

@metadata_reactor.provides(
    'firewall/port_rules',
)
def firewall(metadata):
    return {
        'firewall': {
            'port_rules': {
                '22/tcp': atomic(metadata.get('openssh/restrict-to', {'*'})),
            },
        },
    }