Recently, ssh logins to TW start showing two Last Login lines (and motd).

$ ssh <tumbleweed-host>
Last login: Wed Jun 30 18:21:24 CEST 2021 from
2a02:8108:96bf:f598:9582:81ac:8c44:b109 on pts/6
Have a lot of fun...
Last login: Wed Jun 30 18:21:27 2021 from
2a02:8108:96bf:f598:9582:81ac:8c44:b109
Have a lot of fun...


Relatedly, `last -ax` is now showing entries with an additional terminal device
("ssh"), perhaps this is connected to that.

jengelh  pts/6        Wed Jun 30 18:22   still logged in   
2a02:8108:96bf:f598:9582:81ac:8c44:b109
jengelh  ssh          Wed Jun 30 18:22   still logged in   
2a02:8108:96bf:f598:9582:81ac:8c44:b109

The first record of the new ssh type is with Sun Jun 27 00:24, which coincides
with `rpm -qa --last`:

openssh-server-8.4p1-6.1.x86_64               2021-06-27T00:20:46 CEST

Maybe this has to do with pam_motd?

(rpm -q --changelog openssh)
* Tue May 18 2021 Thorsten Kukuk <kukuk@suse.com>
- Use pam_motd to unify motd message output [bsc#1185897]
  (openssh-8.4p1-pam_motd.patch)


# grep -ri motd /etc/ssh/
/etc/ssh/sshd_config:#PrintMotd yes
# grep -ri motd /usr/etc/ssh/
/usr/etc/ssh/sshd_config:PrintMotd no