Test config before applying it

openssh/config.sls

@@ -12,6 +12,7 @@ sshd_config:
     - user: {{ openssh.sshd_config_user }}
     - group: {{ openssh.sshd_config_group }}
     - mode: {{ openssh.sshd_config_mode }}
+    - check_cmd: {{ openssh.sshd_binary }} -t -f
     - watch_in:
       - service: {{ openssh.service }}
 {% endif %}

openssh/defaults.yaml

@@ -1,5 +1,6 @@
 openssh:
   sshd_enable: True
+  sshd_binary: /usr/sbin/sshd
   sshd_config: /etc/ssh/sshd_config
   sshd_config_src: salt://openssh/files/sshd_config
   sshd_config_user: root