麒麟服务器arm64架构离线升级openssh9.8p1

1.官网下载openssh、openssl、zlib源码包

提示：如果生产环境下请先在测试服务器测试，没问题后再更新正式环境

#openssh下载链接
https://cdn.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-9.8p1.tar.gz
#openssl下载链接
https://www.openssl.org/source/openssl-3.3.1.tar.gz
#zlib下载链接
https://www.zlib.net/zlib-1.3.1.tar.gz

2.安装zlib

tar -zxf zlib.tar.gz
cd zlib-1.3.1
#检查配置并设置安装路径
./configure --prefix=/usr/local/zlib 
#编译安装
make && make install 

3.安装openssl

tar -zxf openssl-3.3.1.tar.gz 
cd openssl-3.3.1
./Configure --prefix=/usr/local/openssl
#允许4个核心编译，速度快
make -j 4 && make install
#让系统能够找到并加载 OpenSSL 库
echo "/usr/local/openssl/lib" >> /etc/ld.so.conf
#应用库配置
ldconfig

4.安装openssh

tar -zxf openssh-9.8p1.tar.gz 
cd openssh-9.8p1/
#备份
mv /etc/ssh /etc/ssh_old.bak
mv /usr/bin/ssh /usr/bin/ssh_old.bak
mv /usr/bin/ssh-keygen /usr/bin/ssh-keygen_old.bak
mv /usr/sbin/sshd /usr/sbin/sshd_old.bak
cp /etc/pam.d/sshd /etc/pam.d/sshd_old.bak
./configure --prefix=/usr/local/openssh --sysconfdir=/etc
/ssh --with-pam --with-ssl-dir=/usr/local/openssl --with
-zlib=/usr/local/zlib
make && make install
#更新系统服务和配置文件
cp /usr/local/openssh/sbin/sshd /usr/sbin/sshd
cp /usr/local/openssh/bin/ssh /usr/bin/ssh
cp /usr/local/openssh/bin/ssh-keygen /usr/bin/ssh-keygen
cp -p contrib/redhat/sshd.init /etc/init.d/sshd
chmod +x /etc/init.d/sshd
#配置文件允许root远程，允许密码认证，允许公钥认证
echo 'PermitRootLogin yes' >> /etc/ssh/sshd_config
echo 'PubkeyAuthentication yes' >> /etc/ssh/sshd_config
echo 'PasswordAuthentication yes' >> /etc/ssh/sshd_config
#开机自启并立即运行ssh服务
systemctl enable --now sshd 
#重启ssh服务
systemctl restart sshd