Please add systemd service for dropbear, plus a one-time target that generates the hostkeys. Debian ships this that could be modified for Gentoo: https://salsa.debian.org/debian/dropbear/-/blob/debian/latest/debian/dropbear.service?ref_type=heads For generating the keys, likely need to move the conf.d check_config block to a separate script, and do something like: ExecStartPre=/usr/libexec/dropbear_generate_keys (infra installs dropbear as a rescue shell for official hosts, and we're looking at supporting systemd in addition to openrc)