centos7做openssh rpm包

最新推荐文章于 2024-09-18 11:48:47 发布

薄田三亩

最新推荐文章于 2024-09-18 11:48:47 发布

阅读量528

点赞数

分类专栏： linux 文章标签： centos linux 运维

本文链接：https://blog.csdn.net/qq_36583318/article/details/121143979

版权

linux 专栏收录该内容

3 篇文章 0 订阅

订阅专栏

centos7做openssh8.x rpm包

1、rpm-build以及编译打包环境搭建

yum install rpm-build zlib-devel openssl-devel gcc perl-devel pam-devel

2、创建rpm构建目录，下载所需源码包到source并解压

wget https://cdn.openbsd.org/pub/openbsd/openssh/portable/openssh-8.7p1.tar.gz

wget https://src.fedoraproject.org/repo/pkgs/openssh/x11-ssh-askpass-1.2.4.1.tar.gz

mkdir -p /root/rpmbuild/sources

mkdir -p /root/rpmbuild/specs

cp /root/openssh-8.7p1.tar.gz /root/rpmbuild/sources/

cp /root/x11-ssh-askpass-1.2.4.1.tar.gz /root/rpmbuild/sources/

cd /root/rpmbuild/sources/

tar -zxvf openssh-8.7p1.tar.gz
在这里插入图片描述

复制出需要的spec编译文件

cp /root/rpmbuild/sources/openssh-8.7p1/contrib/redhat/openssh.spec /root/rpmbuild/specs/

修改文件参数

vim /root/rpmbuild/specs/openssh.spec

将原先openssh.spec中的

%global no_x11_askpass 0

%global no_gnome_askpass 0

修改为

%global no_x11_askpass 1

%global no_gnome_askpass 1

或者执行

sed -i -e “s/%global no_gnome_askpass 0/%global no_gnome_askpass 1/g” openssh.spec

sed -i -e “s/%global no_x11_askpass 0/%global no_x11_askpass 1/g” openssh.spec

注释掉#buildrequires: openssl-devel < 1.1

因为openssl安装的版本都低于1.1

在这里插入图片描述

cd /root/rpmbuild/specs

3、rpmbuild打包

rpmbuild -ba openssh.spec # -ba参数,建立源码和二进制包
在这里插入图片描述
生成的rpm包在/root/rpmbuild/rpms/x86_64目录下

cd /root/rpmbuild/rpms/x86_64
在这里插入图片描述

4、下面来测试安装下写了个脚本

脚本内容
[root@localhost openssh-8.7p1]# cat update.sh
#!/bin/bash
cp -ar /etc/ssh{,.bak_ $KaTeX parse error: Expected group after '_' at position 40: …am.d/sshd{,.bak_̲$ (date +%F)}
yum localinstall .rpm -y
mv /etc/ssh{,.v8.7.rpmnew}
mv /etc/pam.d/sshd{,.v8.7.rpmnew}
mv /etc/ssh.bak_ $KaTeX parse error: Expected group after '_' at position 43: \dots/pam.d/sshd.bak_̲$ (date +%F) /etc/pam.d/sshd
chmod 600 /etc/ssh/
echo ‘change before:’
grep PermitRootLogin /etc/ssh/sshd_config
sed -i ‘s/#PermitRootLogin/PermitRootLogin/’ /etc/ssh/sshd_config
echo ‘change after:’
grep PermitRootLogin /etc/ssh/sshd_config
echo “KexAlgorithms curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1” >> /etc/ssh/sshd_config
systemctl restart sshd