debian12 - openssh-9.6.P1的编译安装(真机 - 联想G480)

debian12 - openssh-9.6.P1的编译安装(真机 - 联想G480)

概述

以前做了一个实验 debian12 - openssh-9.6.P1的编译安装, 是在vmware16虚拟机上做的。

和同学讨论问题，他那做不通，最后用telnet连不上debain12.
和他实验环境的差别，我用的虚拟机，他用的真机。

那我也用真机做个实验，看看和虚拟机有啥区别。

开始用得峰(Deffad)A17G本本做实验(得峰(Deffad)A17G本本 - 安装debian12)
发现安装完，不嫩正常使用debian12. 有好多命令都会在后台挂住，执行不完。

看看手头的设备，有一台联想G480, 可以拿来做真机实验。
找了一块没用的本本硬盘120GB, 换上，用U盘装debian12.

现在安装完，看起来正常用。
准备按照前面做过的笔记, 来配置debian12, 编译Openssl3.2,openssh, 并更新，看看从局域网ssh连接真机上的debian12, 看看是否正常。

笔记

G480上安装debian12

这步没遇到啥问题，正常安装就ok了。

电源线找不到了，我自己用插头 + 开关电源弄的。 DC20V

将 debian-12.4.0-amd64-DVD-1.iso，用ultraISO"写入硬盘镜像"写入的ISO的U盘启动盘做好
G480的BIOS设置为U盘启动优先，插入U盘，按照提示安装debian12，只从U盘中安装，从默认设置上，多选一个SSH服务器。
安装时，网络选有线网络。
安装完成后，拔掉U盘，安装过程结束，计算机重启。
安装完后，将无线wifi的密码设置好。

现在真机本本有2个IP:
有线的网络端口 IP = 192.168.1.5
无线的IP = 192.168.1.3

配置debian12

以前做好了笔记debian12.4配置
按照这个笔记，先将刚安装完的debian12先配置一下。

就用默认的ssh, 查看状态，ssh是在运行的。
在win10中，用WindTerm_2.6.0按照ssh去连接真机上的debian12, 给了IP, 用户名，口令，是可以连上的。
在WindTerm_2.6.0命令行中看debian12自带的openSSH版本为9.2P1

查看ssh服务状态。

现在用WindTerm_2.6.0按照telnet方式去连接试试

telnet 用的是23端口。

这是我没改的状态，就是安装完原装的组件。
用telnet连上去，马上就会被踢掉。
可以看到，还要在debian12中配置telnet，而不是说ssh服务有问题。

配置debian12中的telnet

用WindTerm_2.6.0按照ssh连接192.168.1.5

sudo apt-get install telnetd-ssl
sudo apt-get install telnet
sudo apt-get install xinetd

已经以上3步，已经存在 /usr/sbin/in.telnetd
增加配置文件 /etc/xinetd.d/telnet, 经过以上3步，并没有这个文件，需要自己增加
sudo vi /etc/xinetd.d/telnet
内容如下

service telnet  
{  
    disable = no  
    flags = REUSE  
    socket_type = stream  
    wait = no  
    user = root  
    server = /usr/sbin/in.telnetd  
    server_args = -h  
    log_on_failure += USERID  
}  

安装telnet服务

sudo systemctl status xinetd
# 看到xinetd服务在运行。

sudo systemctl restart xinetd
sudo systemctl status xinetd
看到telnet服务bind失败，应该是有程序已经启动了telnet-server
这时，用WindTerm_2.6.0按照telnet方式连接192.168.1.3，给定用户名为root, 给出口令后，登录成功。
看资料，用SSH比用telnet好，因为SSH会对内容进行加密，而telent直接传明文。

现在telnet服务已经起来了，就不管了。

查看所有服务

# 查看所有服务
systemctl list-units --all --type=service

root@debian12:~# systemctl list-units --all --type=service
  UNIT                                                  LOAD      ACTIVE   SUB     DESCRIPTION                                         >
  accounts-daemon.service                               loaded    active   running Accounts Service
  alsa-restore.service                                  loaded    active   exited  Save/Restore Sound Card State
  alsa-state.service                                    loaded    inactive dead    Manage Sound Card State (restore and store)
  anacron.service                                       loaded    inactive dead    Run anacron jobs
  apparmor.service                                      loaded    active   exited  Load AppArmor profiles
  apt-daily-upgrade.service                             loaded    inactive dead    Daily apt upgrade and clean activities
  apt-daily.service                                     loaded    inactive dead    Daily apt download activities
* auditd.service                                        not-found inactive dead    auditd.service
* auto-cpufreq.service                                  not-found inactive dead    auto-cpufreq.service
  avahi-daemon.service                                  loaded    active   running Avahi mDNS/DNS-SD Stack
  colord.service                                        loaded    active   running Manage, Install and Generate Color Profiles
* connman.service                                       not-found inactive dead    connman.service
* console-screen.service                                not-found inactive dead    console-screen.service
  console-setup.service                                 loaded    active   exited  Set console font and keymap
  cron.service                                          loaded    active   running Regular background program processing daemon
  cups-browsed.service                                  loaded    active   running Make remote CUPS printers available locally
  cups.service                                          loaded    active   running CUPS Scheduler
  dbus.service                                          loaded    active   running D-Bus System Message Bus
  dpkg-db-backup.service                                loaded    inactive dead    Daily dpkg database backup service
  e2scrub_all.service                                   loaded    inactive dead    Online ext4 Metadata Check for All Filesystems
  e2scrub_reap.service                                  loaded    inactive dead    Remove Stale Online ext4 Metadata Check Snapshots
  emergency.service                                     loaded    inactive dead    Emergency Shell
  fstrim.service                                        loaded    inactive dead    Discard unused blocks on filesystems from /etc/fstab
  fwupd-refresh.service                                 loaded    inactive dead    Refresh fwupd metadata and update motd
  fwupd.service                                         loaded    active   running Firmware update daemon
  gdm.service                                           loaded    active   running GNOME Display Manager
  getty-static.service                                  loaded    inactive dead    getty on tty2-tty6 if dbus and logind are not availa>
  getty@tty1.service                                    loaded    inactive dead    Getty on tty1
  ifupdown-pre.service                                  loaded    active   exited  Helper to synchronize boot up for ifupdown
  initrd-cleanup.service                                loaded    inactive dead    Cleaning Up and Shutting Down Daemons
  initrd-parse-etc.service                              loaded    inactive dead    Mountpoints Configured in the Real Root
  initrd-switch-root.service                            loaded    inactive dead    Switch Root
  initrd-udevadm-cleanup-db.service                     loaded    inactive dead    Cleanup udev Database
* kbd.service                                           not-found inactive dead    kbd.service
  keyboard-setup.service                                loaded    active   exited  Set the console keyboard layout
  kmod-static-nodes.service                             loaded    active   exited  Create List of Static Device Nodes
  logrotate.service                                     loaded    inactive dead    Rotate log files
  low-memory-monitor.service                            loaded    active   running Low Memory Monitor
  man-db.service                                        loaded    inactive dead    Daily man-db regeneration
  ModemManager.service                                  loaded    active   running Modem Manager
  modprobe@configfs.service                             loaded    inactive dead    Load Kernel Module configfs
  modprobe@dm_mod.service                               loaded    inactive dead    Load Kernel Module dm_mod
  modprobe@drm.service                                  loaded    inactive dead    Load Kernel Module drm
  modprobe@efi_pstore.service                           loaded    inactive dead    Load Kernel Module efi_pstore
  modprobe@fuse.service                                 loaded    inactive dead    Load Kernel Module fuse
  modprobe@loop.service                                 loaded    inactive dead    Load Kernel Module loop
  networking.service                                    loaded    active   exited  Raise network interfaces
  NetworkManager-wait-online.service                    loaded    active   exited  Network Manager Wait Online
  NetworkManager.service                                loaded    active   running Network Manager
* nslcd.service                                         not-found inactive dead    nslcd.service
  packagekit.service                                    loaded    active   running PackageKit Daemon
  plymouth-quit-wait.service                            loaded    active   exited  Hold until boot process finishes up
  plymouth-quit.service                                 loaded    inactive dead    Terminate Plymouth Boot Screen
  plymouth-read-write.service                           loaded    active   exited  Tell Plymouth To Write Out Runtime Data
  plymouth-start.service                                loaded    active   exited  Show Plymouth Boot Screen
  plymouth-switch-root.service                          loaded    inactive dead    Plymouth switch root service
  polkit.service                                        loaded    active   running Authorization Manager
  power-profiles-daemon.service                         loaded    active   running Power Profiles daemon
  rc-local.service                                      loaded    inactive dead    /etc/rc.local Compatibility
  rescue.service                                        loaded    inactive dead    Rescue Shell
  rsyslog.service                                       loaded    active   running System Logging Service
  rtkit-daemon.service                                  loaded    active   running RealtimeKit Scheduling Policy Service
  ssh.service                                           loaded    active   running OpenBSD Secure Shell server
  switcheroo-control.service                            loaded    active   running Switcheroo Control Proxy service
* system76-power.service                                not-found inactive dead    system76-power.service
  systemd-ask-password-console.service                  loaded    inactive dead    Dispatch Password Requests to Console
  systemd-ask-password-plymouth.service                 loaded    inactive dead    Forward Password Requests to Plymouth
  systemd-ask-password-wall.service                     loaded    inactive dead    Forward Password Requests to Wall
  systemd-backlight@backlight:intel_backlight.service   loaded    active   exited  Load/Save Screen Backlight Brightness of backlight:i>
  systemd-binfmt.service                                loaded    active   exited  Set Up Additional Binary Formats
  systemd-firstboot.service                             loaded    inactive dead    First Boot Wizard
  systemd-fsck-root.service                             loaded    inactive dead    File System Check on Root Device
  systemd-fsck@dev-disk-by\x2duuid-EEAA\x2d0AFD.service loaded    active   exited  File System Check on /dev/disk/by-uuid/EEAA-0AFD
  systemd-fsckd.service                                 loaded    inactive dead    File System Check Daemon to report status
* systemd-hwdb-update.service                           not-found inactive dead    systemd-hwdb-update.service
  systemd-initctl.service                               loaded    inactive dead    initctl Compatibility Daemon
  systemd-journal-flush.service                         loaded    active   exited  Flush Journal to Persistent Storage
  systemd-journald.service                              loaded    active   running Journal Service
  systemd-logind.service                                loaded    active   running User Login Management
  systemd-machine-id-commit.service                     loaded    inactive dead    Commit a transient machine-id on disk
  systemd-modules-load.service                          loaded    active   exited  Load Kernel Modules
  systemd-networkd.service                              loaded    inactive dead    Network Configuration
* systemd-oomd.service                                  not-found inactive dead    systemd-oomd.service
  systemd-pcrphase-initrd.service                       loaded    inactive dead    TPM2 PCR Barrier (initrd)
  systemd-pcrphase-sysinit.service                      loaded    inactive dead    TPM2 PCR Barrier (Initialization)
  systemd-pcrphase.service                              loaded    inactive dead    TPM2 PCR Barrier (User)
  systemd-pstore.service                                loaded    inactive dead    Platform Persistent Storage Archival
  systemd-quotacheck.service                            loaded    inactive dead    File System Quota Check
  systemd-random-seed.service                           loaded    active   exited  Load/Save Random Seed
  systemd-remount-fs.service                            loaded    active   exited  Remount Root and Kernel File Systems
  systemd-repart.service                                loaded    inactive dead    Repartition Root Disk
  systemd-rfkill.service                                loaded    inactive dead    Load/Save RF Kill Switch Status
  systemd-sysctl.service                                loaded    active   exited  Apply Kernel Variables
  systemd-sysext.service                                loaded    inactive dead    Merge System Extension Images into /usr/ and /opt/
  systemd-sysusers.service                              loaded    active   exited  Create System Users
  systemd-timesyncd.service                             loaded    active   running Network Time Synchronization
  systemd-tmpfiles-clean.service                        loaded    inactive dead    Cleanup of Temporary Directories
  systemd-tmpfiles-setup-dev.service                    loaded    active   exited  Create Static Device Nodes in /dev
  systemd-tmpfiles-setup.service                        loaded    active   exited  Create Volatile Files and Directories
  systemd-udev-settle.service                           loaded    inactive dead    Wait for udev To Complete Device Initialization
  systemd-udev-trigger.service                          loaded    active   exited  Coldplug All udev Devices
  systemd-udevd.service                                 loaded    active   running Rule-based Manager for Device Events and Files
* systemd-update-done.service                           not-found inactive dead    systemd-update-done.service
  systemd-update-utmp-runlevel.service                  loaded    inactive dead    Record Runlevel Change in UTMP
  systemd-update-utmp.service                           loaded    active   exited  Record System Boot/Shutdown in UTMP
  systemd-user-sessions.service                         loaded    active   exited  Permit User Sessions
* systemd-vconsole-setup.service                        not-found inactive dead    systemd-vconsole-setup.service
* tuned.service                                         not-found inactive dead    tuned.service
  udisks2.service                                       loaded    active   running Disk Manager
  upower.service                                        loaded    active   running Daemon for power management
  user-runtime-dir@0.service                            loaded    active   exited  User Runtime Directory /run/user/0
  user-runtime-dir@1000.service                         loaded    active   exited  User Runtime Directory /run/user/1000
  user@0.service                                        loaded    active   running User Manager for UID 0
  user@1000.service                                     loaded    active   running User Manager for UID 1000
  wpa_supplicant.service                                loaded    active   running WPA supplicant
  xinetd.service                                        loaded    active   running LSB: Starts or stops the xinetd daemon.

LOAD   = Reflects whether the unit definition was properly loaded.
ACTIVE = The high-level unit activation state, i.e. generalization of SUB.
SUB    = The low-level unit activation state, values depend on unit type.
116 loaded units listed.
To show all installed unit files use 'systemctl list-unit-files'.

当前ssh, telnet状态

当前真机有2个网络连接，1个有限网口(IP = 192.168.1.5)，一个wifi网口(IP = 192.168.1.3)
现在用WindTerm_2.6.0按照ssh方式连接192.168.1.5成功
现在用WindTerm_2.6.0按照telnet方式连接192.168.1.3成功
经过以上2条的验证，可知，当前用debian12原版的软件包，配置后，ssh和telnet都正常。

准备更新openssl3.2和openssh

跟同学讨论问题，他一直拿telnet来说不好使, 而不说openssh是否好使。而我可以确定的是，我提供的更新方法可以让openssh正常更新到openssl3.2，使ssh操作都是用新版的openssl3.2

我现在有点明白了，要用telnet正常，更新的应该是telnet-ssl或者telnet-server, 而不是openssh.因为我实验没做完，不敢肯定telnet正常用时，要更新哪个。但是我可以确定，更新的一定不是openssh

只有用ssh, 才需要更新openssl3.2和opennssh9.6.

在真机上更新openssl和openssh的实验先不做了。

感觉不是真机和虚拟机的区别。
从问题的分析结果看，telnet更新openssl后不好使，是因为telnet-server没更新。

等以后想在真机上更新openssl和openssh时，就照着以前的笔记来，如果(真机和虚拟机)真有区别，再更新笔记。
debian12 - openssh-9.6.P1的编译安装

END