Update openssh7.9 on centos6

原创

司空琦爷 2018-10-22 20:32:50 ©著作权

©著作权归作者所有：来自51CTO博客作者司空琦爷的原创作品，请联系作者获取转载授权，否则将追究法律责任

一、制作RPM安装包 1）依赖安装 yum install rpm-build gcc make wget openssl-devel krb5-devel pam-devel libX11-devel xmkmf libXt-devel

2）目录创建 mkdir -p /usr/src/redhat/{SOURCES,SPECS} cd /usr/src/redhat/SOURCES/

3）安装文件下载 wget https://ftp.openbsd.org/pub/OpenBSD/OpenSSH/openssh-7.9.tar.gz wget https://src.fedoraproject.org/repo/pkgs/openssh/x11-ssh-askpass-1.2.4.1.tar.gz/8f2e41f3f7eaa8543a2440454637f3c3/x11-ssh-askpass-1.2.4.1.tar.gz

4）解压编译文件 cd /usr/src/redhat/SOURCES/ tar xfz openssh-7.9p1.tar.gz openssh-7.9p1/contrib/redhat/openssh.spec mv openssh-7.9p1/contrib/redhat/openssh.spec ../SPECS/ chown sshd:sshd /usr/src/redhat/SPECS/openssh.spec cp /usr/src/redhat/SPECS/openssh.spec /usr/src/redhat/SPECS/openssh.spec_bak

修改几个配置选项可选项 #关掉no_gnome_askpass no_x11_askpass这两个参数 sed -i -e "s/%define no_gnome_askpass 0/%define no_gnome_askpass 1/g" /usr/src/redhat/SPECS/openssh.spec sed -i -e "s/%define no_x11_askpass 0/%define no_x11_askpass 1/g" /usr/src/redhat/SPECS/openssh.spec #查看修改了哪些参数 diff openssh.spec openssh.spec_bak

6）拷贝安装软件到预编译目录 mkdir -pv /root/rpmbuild/SOURCES/ cp /usr/src/redhat/SOURCES/openssh-7.9p1.tar.gz /root/rpmbuild/SOURCES/ cp /usrsrc/redhat/SOURCES/x11-ssh-askpass-1.2.4.1.tar.gz /root/rpmbuild/SOURCES/ #执行编译操作 cd /usr/src/redhat/SPECS/ rpmbuild -ba openssh.spec #编译后生成的目录结构如下 tree -L 2 /root/rpmbuild/ /root/rpmbuild/ ├── BUILD │ └── openssh-7.9p1 ├── BUILDROOT ├── RPMS │ └── x86_64 ├── SOURCES │ ├── openssh-7.9p1.tar.gz │ └── x11-ssh-askpass-1.2.4.1.tar.gz ├── SPECS └── SRPMS └── openssh-7.9p1-1.el6.src.rpm #编译后RPM包目录 /root/rpmbuild/RPMS/x86_64/openssh-7.9p1-1.el6.x86_64.rpm /root/rpmbuild/RPMS/x86_64/openssh-clients-7.9p1-1.el6.x86_64.rpm /root/rpmbuild/RPMS/x86_64/openssh-debuginfo-7.9p1-1.el6.x86_64.rpm /root/rpmbuild/RPMS/x86_64/openssh-server-7.9p1-1.el6.x86_64.rpm #取出供其他机器安装的RPM包 mkdir -pv /root/openssh7.9 cp /root/rpmbuild/RPMS/x86_64/{openssh-7.9p1-1.el6.x86_64.rpm,openssh-clients-7.9p1-1.el6.x86_64.rpm,openssh-server-7.9p1-1.el6.x86_64.rpm} /root/openssh7.9

6）自己打的rpm包下载地址，懒人可以直接下，centos6的！centos6的！centos6的！7别装！ https://pan.baidu.com/s/1UNete3cn9tX5taQt30qnwg

二、利用RPM安装包，升级openssh至7.9 1）查看系统已openssh安装包版本 #如果曾经有手动编译安装，未必能查到信息 rpm -qa|grep openssh* 2）查看查看已安装老rpm包和待安装新rpm版本有哪些文件 cd openssh新版rpm包的目录 rpm -ql openssh-???.???p1 rpm -qpl openssh-7.9p1-1.el6.x86_64.rpm rpm -ql openssh-clients-???.???p1 rpm -qpl openssh-clients-7.9p1-1.el6.x86_64.rpm rpm -ql openssh-server-???.???p1 rpm -qpl openssh-server-7.9p1-1.el6.x86_64.rpm 3）选择性备份一些配置 #备份原有的openssh服务 mkdir -pv /root/oppenssh_backup cd /root/oppenssh_backup tar -cvzf etc_ssh.tar.gz /etc/ssh tar -cvzf etc_pamd.tar.gz /etc/pam.d cp /etc/pam.d/sshd /etc/pam.d/system-auth . cp -p /etc/pam.d/sshd /etc/pam.d/sshd_date +%Y%m%d cp -p /etc/pam.d/system-auth /etc/pam.d/system-auth_date +%Y%m%d 一般来说rpm包安装时遇到存在的同名配置文件，不会覆盖。会把生成的同名文件重命名为filename.rpmnew 4）升级安装RPM 可能会由于各种原因爆炸，建议多开几个ssh窗口，保险起见可以也安装telnet并测试连接，保底openssh配置错误，服务器不会失联 cd openssh新版rpm包的目录 rpm -Uvh ./*.rpm 5）按需修改配置文件检查/etc/pam.d/sshd /etc/pam.d/system-auth /etc/ssh/sshd.conf等是否为升级之前的配置，被改了就备份一下新生成的配置文件，再利用备份的文件把配置文件替换回升级前的配置。 6）重启sshd服务 #CentOS 6 service sshd restart #CentOS 7 #systemctl restart sshd 7）重新连接查看版本 ssh -V