Solved Why is openssh an optional feature and takes ages to install (add optional feature)


jimbo45

Well-known member
Pro User
VIP
Local time
6:21 PM
Posts
5,780
Location
Hafnarfjörður IS
OS
Windows XP,11 Linux Fedora Rawhide pre-release 45
Hi folks

many people want to simply ssh into windows from remote clients -- but this needs openssh to be up and running on the target machine. It can be added via add optional feature but that takes ages (goodness knows why) and you have to enable the openssh server to start automatically in services after installing the feature.

On a fast machine it's taken 9 minutes to get to this point -- nothing else running !!!!

Skjámynd 2025-06-21 114220.webp

What's even more bonkers it's the sme problem with Windows 2025 LTSC server -- you'd think a server should surely have this enabled in its core features !!!.

Cheers
jimbo
 

My Computer

System One

  • OS
    Windows XP,11 Linux Fedora Rawhide pre-release 45
    Computer type
    PC/Desktop
    CPU
    2 X Intel i7
    Screen Resolution
    4KUHD X 2
Why the delay? OpenSSH is an optional FOD package which isn't integrated in the install image. If it was already on-disk, DISM /Add-Capability would only take a minute or two. MS could bundle OpenSSH, but half of you folks would loudly complain Windows is too bloated.

Downloading the 2-3 MB OpenSSH feature doesn't take that long. But since it's not an on-disk feature, Windows has to first install the package and re-apply the current Monthly Update on top of it (in case the same feature was patched by the CU). This takes the bulk of your time waiting.

The Windows servicing model always delivers the same base FOD package, you can't get a Dec 2024 or May 2025 updated version. So the CU must always be checked and applied over it to bring the FOD up to date. Not to mention any installed Language Packs. That's why you're sitting there for 10 min. to install a 2-3 MB feature.

PS - 24H2 CU does patch the OpenSSH files...
 

My Computer

System One

  • OS
    Windows 7
Wow, I would have never guessed that. Fantastic info, garlin.
 

My Computers

System One System Two

  • OS
    Win11 Pro 25H2 (RTM+)
    Computer type
    PC/Desktop
    Manufacturer/Model
    Acemagic
    CPU
    Intel i7-14650HX
    Memory
    32 GB
    Graphics Card(s)
    No GPU - Built-in Intel Graphics
    Sound Card
    Integrated
    Monitor(s) Displays
    Varies as machine will often be moved to locations with different monitors
    Screen Resolution
    Varies
    Hard Drives
    1 x 1TB Gen 4 NVMe SSD
    PSU
    120W Power Brick
    Keyboard
    Corsair K70 Max RGB Magnetic Keyboard
    Mouse
    Logitech MX Master 3
    Internet Speed
    1Gb Up / 1 Gb Down
    Browser
    Edge
    Antivirus
    Windows Defender
  • Operating System
    Win11 Pro 25H2 (RTM+)
    Computer type
    Laptop
    Manufacturer/Model
    Lenovo ThinkBook 13x Gen 2
    CPU
    Intel i7-1255U
    Memory
    16 GB
    Graphics card(s)
    Intel Iris Xe Graphics
    Sound Card
    Realtek® ALC3306-CG codec
    Monitor(s) Displays
    13.3-inch IPS Display
    Screen Resolution
    WQXGA (2560 x 1600)
    Hard Drives
    2 TB 4 x 4 NVMe SSD
    PSU
    USB-C / Thunderbolt 4 Power / Charging
    Keyboard
    Backlit, spill resistant keyboard
    Mouse
    Buttonless Glass Precision Touchpad
    Internet Speed
    1Gb Up / 1Gb Down
    Browser
    Edge
    Antivirus
    Windows Defender
    Other Info
    WiFi 6e / Bluetooth 5.1 / Facial Recognition / Fingerprint Sensor / ToF (Time of Flight) Human Presence Sensor
Same reason Language Packs take forever to install on a live system. Windows Settings is secretly re-applying the CU, because patches have to be applied in order (base package first, update last). Otherwise you will have an inconsistent install image.

When you do DISM updates to an offline image, doing it in the correct order is YOUR PROBLEM. And a common mistake is to apply LP's after the CU. Otherwise you get the common problem of "I get the wrong translations".
 

My Computer

System One

  • OS
    Windows 7
I'm guessing it must be the same for the old .NET. Two days I installed it on an old machine that needs it for its hotkey utility. It took about 15 minutes to install.
 

My Computers

System One System Two

  • OS
    Win11 Pro 25H2 (RTM+)
    Computer type
    PC/Desktop
    Manufacturer/Model
    Acemagic
    CPU
    Intel i7-14650HX
    Memory
    32 GB
    Graphics Card(s)
    No GPU - Built-in Intel Graphics
    Sound Card
    Integrated
    Monitor(s) Displays
    Varies as machine will often be moved to locations with different monitors
    Screen Resolution
    Varies
    Hard Drives
    1 x 1TB Gen 4 NVMe SSD
    PSU
    120W Power Brick
    Keyboard
    Corsair K70 Max RGB Magnetic Keyboard
    Mouse
    Logitech MX Master 3
    Internet Speed
    1Gb Up / 1 Gb Down
    Browser
    Edge
    Antivirus
    Windows Defender
  • Operating System
    Win11 Pro 25H2 (RTM+)
    Computer type
    Laptop
    Manufacturer/Model
    Lenovo ThinkBook 13x Gen 2
    CPU
    Intel i7-1255U
    Memory
    16 GB
    Graphics card(s)
    Intel Iris Xe Graphics
    Sound Card
    Realtek® ALC3306-CG codec
    Monitor(s) Displays
    13.3-inch IPS Display
    Screen Resolution
    WQXGA (2560 x 1600)
    Hard Drives
    2 TB 4 x 4 NVMe SSD
    PSU
    USB-C / Thunderbolt 4 Power / Charging
    Keyboard
    Backlit, spill resistant keyboard
    Mouse
    Buttonless Glass Precision Touchpad
    Internet Speed
    1Gb Up / 1Gb Down
    Browser
    Edge
    Antivirus
    Windows Defender
    Other Info
    WiFi 6e / Bluetooth 5.1 / Facial Recognition / Fingerprint Sensor / ToF (Time of Flight) Human Presence Sensor
Why the delay? OpenSSH is an optional FOD package which isn't integrated in the install image. If it was already on-disk, DISM /Add-Capability would only take a minute or two. MS could bundle OpenSSH, but half of you folks would loudly complain Windows is too bloated.

Downloading the 2-3 MB OpenSSH feature doesn't take that long. But since it's not an on-disk feature, Windows has to first install the package and re-apply the current Monthly Update on top of it (in case the same feature was patched by the CU). This takes the bulk of your time waiting.

The Windows servicing model always delivers the same base FOD package, you can't get a Dec 2024 or May 2025 updated version. So the CU must always be checked and applied over it to bring the FOD up to date. Not to mention any installed Language Packs. That's why you're sitting there for 10 min. to install a 2-3 MB feature.

PS - 24H2 CU does patch the OpenSSH files...
Thanks -- it's great to get info --- intuitively you can see why a small package makes one wonder why it takes that long to install it. The same thing happens if you add things like the extra pan european fonts / chinese / hebrew etc.

Cheers
jimbo
 

My Computer

System One

  • OS
    Windows XP,11 Linux Fedora Rawhide pre-release 45
    Computer type
    PC/Desktop
    CPU
    2 X Intel i7
    Screen Resolution
    4KUHD X 2
Same reason Language Packs take forever to install on a live system. Windows Settings is secretly re-applying the CU, because patches have to be applied in order (base package first, update last). Otherwise you will have an inconsistent install image.

Please excuse me for hijacking the thread.
Are you sure that when installing language packs via the GUI (on a live system), the LCU is automatically reinstalled?
The following is often quoted:

After you install a language pack, you have to reinstall the latest cumulative update (LCU).
If you do not reinstall the LCU, you may encounter errors.
If the LCU is already installed, Windows Update does not offer it again. You have to manually install the LCU.
Source
So, does this only apply to an offline image?

Thanks and all the best, Martin
 

My Computer

System One

  • OS
    Win11 22H2
When you add LP's to an offline image, the LP update packages must be processed first (and alone). Then you can reload the image and apply any LCU's. There's a specific ordering of how the component folders are supposed to "stack" like a cake with different layers.

[top]
LCU
Language Packs
base Windows
[bottom]

This order can causes problems with incorrectly translated text:
[top]
Language Packs
LCU
base Windows
[bottom]

When you add LP's (or some Optional Features) through the Settings app, it's doing behind-the-scenes magic to to re-apply any updates back on top of the newly installed LP's. This is why it takes forever to process.
 

My Computer

System One

  • OS
    Windows 7
That explains why it takes too long to add optional features. Also why adding language packs sometimes displays mixed text and is fixed later when installing new updates. Thanks for the info! However, it is a little weird. When you choose more than one optional feature, it should install them all and then install the LCU once and for all. I guess it installs it every single time to avoid system issues if the computer suddenly restarts or something before the LCU is installed.
 

My Computers

System One System Two

  • OS
    Windows 11 Pro 23H2 (5699), 25H2 (8457)
    Computer type
    Laptop
    Manufacturer/Model
    Acer Extensa 5630EZ
    CPU
    Mobile DualCore Intel Core 2 Duo T7250, 2000 MHz
    Motherboard
    Acer Extensa 5630
    Memory
    4GB
    Graphics Card(s)
    Mobile Intel(R) GMA 4500M (Mobile 4 series)
    Sound Card
    Realtek ALC268 @ Intel 82801IB ICH9 - High Definition Audio Controller
    Monitor(s) Displays
    1
    Screen Resolution
    1280x800
    Hard Drives
    Samsung SSD 850 EVO 250GB SATA Device (250 GB, SATA-III)
    Internet Speed
    VDSL 50 Mbps
    Browser
    MICROSOFT EDGE
    Antivirus
    WINDOWS DEFENDER
    Other Info
    Legacy MBR installation, no TPM, no Secure Boot, no WDDM 2.0 graphics drivers, no SSE4.2, cannot get more unsupported ;) This is only my test laptop. I had installed Windows 11 here before upgrading my main PC. For my main PC I use everyday see my 2nd system specs.
  • Operating System
    Windows 11 Pro v25H2 (build 26200.8457)
    Computer type
    PC/Desktop
    Manufacturer/Model
    Custom-built PC
    CPU
    Intel Core-i7 3770 3.40GHz s1155 (3rd generation)
    Motherboard
    Asus P8H61 s1155 ATX
    Memory
    2x Kingston Hyper-X Blu 8GB DDR3-1600
    Graphics card(s)
    GIGABYTE GeForce RTX 3050 WINDFORCE OC V2 6GB (GV-N3050WF2OCV2-6GD)
    Sound Card
    Realtek HD audio (ALC887)
    Monitor(s) Displays
    Sony Bravia KDL-19L4000 19" LCD TV via VGA
    Screen Resolution
    1440x900 32-bit 60Hz
    Hard Drives
    WD Blue SA510 2.5 1000GB SSD as system disk, Western Digital Caviar Purple 4TB SATA III (WD40PURZ) as second
    PSU
    Thermaltake Litepower RGB 550W Full Wired
    Case
    SUPERCASE MIDI-TOWER
    Cooling
    Deepcool Gamma Archer CPU cooler, 1x 8cm fan at the back
    Keyboard
    Mitsumi 101-key PS/2
    Mouse
    Sunnyline OptiEye PS/2
    Internet Speed
    100Mbps
    Browser
    Microsoft Edge, Mozilla Firefox
    Antivirus
    Microsoft Windows Defender
    Other Info
    Legacy BIOS (MBR) installation, no TPM, no Secure Boot, WDDM 3.0 graphics drivers, WEI score 7.4
On a fast machine it's taken 9 minutes to get to this point -- nothing else running !!!!
That is twice as long compared to what it took for my phone to downoad latest Android OS update (4.2GB), apply the update, reboot, enter SIM and lockscreen credentials and be up and running again. :LOL:
 

My Computers

System One System Two

  • OS
    Win 11 Pro 25H2 26200.8457 / Linux Mint 22.3
    Computer type
    Laptop
    Manufacturer/Model
    Lenovo A485
    CPU
    Ryzen 7 2700U Pro
    Motherboard
    Lenovo (WiFi/BT module upgraded to Intel Wireless-AC-9260)
    Memory
    32GB
    Graphics Card(s)
    iGPU Vega 10
    Sound Card
    Realtek
    Monitor(s) Displays
    14" FHD (built-in) + 14" Lenovo Thinkvision M14t (touch+pen) + 32" Asus PB328
    Screen Resolution
    FHD + FHD + 1440p
    Hard Drives
    Intel 660p m.2 nVME PCIe3.0 x2 512GB
    PSU
    125W(Dock)/65W(Travel Adapter)
    Keyboard
    Thinkpad / Logitech MX Keys
    Mouse
    Logitech MX Master 2S
    Internet Speed
    1/1Gbit
    Browser
    Firefox
    Antivirus
    Windows Defender
    Other Info
    SecureBoot: Enabled
    TPM2.0: Enabled
    AMD-V: Enabled
  • Operating System
    Win 11 Pro 25H2 26200.8521(RP)
    Computer type
    PC/Desktop
    Manufacturer/Model
    Custom
    CPU
    i7-7700k @4.8GHz
    Motherboard
    Asus PRIME Z270-A
    Memory
    32GB 2x16GB 2133MHz CL15
    Graphics card(s)
    EVGA GTX1080Ti FTW 11GB
    Sound Card
    Integrated
    Monitor(s) Displays
    32" 10-bit Asus PB328Q
    Screen Resolution
    WQHD 2560x1440
    Hard Drives
    512GB ADATA SX8000NP NVMe PCIe Gen 3 x4
    PSU
    850W
    Case
    Fractal Design Define 7
    Cooling
    Noctua NH-D15 chromax.black
    Keyboard
    Logitech MX Keys
    Mouse
    Logitech MX Master 2S
    Internet Speed
    1/1Gbit
    Browser
    Firefox
    Antivirus
    Windows Defender
    Other Info
    AC WiFi Card

Latest Support Threads

Back
Top Bottom