国产操作系统 麒麟服务器v10离线升级 openssh9.8p1
1.官网下载openssh、openssl、zlib源码包
- #openssh下载链接
https://cdn.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-9.8p1.tar.gz
- #openssl下载链接
https://www.openssl.org/source/openssl-3.3.1.tar.gz
- #zlib下载链接
https://www.zlib.net/zlib-1.3.1.tar.gz
2.安装zlib
tar -zxf zlib-1.3.1.tar.gz
cd zlib-1.3.1
#检查配置并设置安装路径
./configure --prefix=/usr/local/zlib
#编译安装
make && make install
3.安装openssl
tar -zxf openssl-3.1.3.tar.gz
cd openssl-3.1.3
./Configure --prefix=/usr/local/openssl
#允许4个核心编译，速度快
make -j 4 && make install
#让系统能够找到并加载 OpenSSL 库
echo “/usr/local/openssl/lib” >> /etc/ld.so.conf
#应用库配置
ldconfig
4.安装openssh
tar -zxf openssh-9.8p1.tar.gz
cd openssh-9.8p1/
#备份
mv /etc/ssh /etc/ssh_old.bak
mv /usr/bin/ssh /usr/bin/ssh_old.bak
mv /usr/bin/ssh-keygen /usr/bin/ssh-keygen_old.bak
mv /usr/sbin/sshd /usr/sbin/sshd_old.bak
cp /etc/pam.d/sshd /etc/pam.d/sshd_old.bak
./configure --prefix=/usr/local/openssh --sysconfdir=/etc/ssh --with-pam --with-ssl-dir=/usr/local/openssl --with-zlib=/usr/local/zlib
make && make install
#更新系统服务和配置文件
cp /usr/local/openssh/sbin/sshd /usr/sbin/sshd
cp /usr/local/openssh/bin/ssh /usr/bin/ssh
cp /usr/local/openssh/bin/ssh-keygen /usr/bin/ssh-keygen
cp -p contrib/redhat/sshd.init /etc/init.d/sshd
chmod +x /etc/init.d/sshd
#配置文件允许root远程，允许密码认证，允许公钥认证
#执行前，请确认sshd_config路径
echo ‘PermitRootLogin yes’ >> /etc/sshd_config
echo ‘PubkeyAuthentication yes’ >> /etc/sshd_config
echo ‘PasswordAuthentication yes’ >> /etc/sshd_config
#开机自启并立即运行ssh服务
systemctl enable --now sshd
#重启ssh服务
systemctl restart sshd
