OpenSSH移植
参考文档
OpenSSH到ARM Linux开发板
openssh至arm9嵌入式开发板及常见错误
OpenSSH移植到ARM Linux教程
源码和依赖关系
编译openssh需要zlib和openssl支持，这两个编译参考X11VNC编译
openssh源码下载选择一个服务器下载就行
香港服务器
这里编译了openssh-8.6p这个版本；
openssh 8.0以下的版本用OpenSSL_1_1_1g.tar.gz以下的版本报各种错误，使用要换成openssl_1.0.2g.orig.tar.gz的版本
编译openssl
CC=arm-linux-gcc \
./config \
no-asm \
no-async \
shared \
--prefix=/opt/openssh
执行脚本myconfigure.sh，然后make，然后makeinstall
编译zlib
export CC=arm-linux-gcc
./configure \
--prefix=/opt/openssh
执行脚本myconfigure.sh，然后make，然后makeinstall
配置脚本和编译安装
脚本myconfigure.sh
export PKG_CONFIG_PATH=$PKG_CONFIG_PATH:/opt/openssh/lib/pkgconfig
export CFLAGS="-I/opt/openssh/include"
export LDFLAGS="-L/opt/openssh/lib"
./configure \
--prefix=/opt/openssh \
--host=arm-linux
执行myconfigure.sh会提示下面数据，这是实际上就是部署目录
OpenSSH has been configured with the following options:
User binaries: /opt/openssh/bin
System binaries: /opt/openssh/sbin
Configuration files: /opt/openssh/etc
Askpass program: /opt/openssh/libexec/ssh-askpass
Manual pages: /opt/openssh/share/man/manX
PID file: /var/run
Privilege separation chroot path: /var/empty
sshd default user PATH: /usr/bin:/bin:/usr/sbin:/sbin:/opt/openssh/bin
执行脚本myconfigure.sh，然后make，然后make install
make install并没有把编译生成的文件安装到目标目录，所以需要手动安转
etc目录需要创建
cp -rf sftp scp ssh sshd ssh-add ssh-agent ssh-keygen ssh-keyscan /opt/openssh/bin/
cp -rf moduli ssh_config sshd_config /opt/openssh/etc/
cp -rf sftp-server ssh-keysign /opt/openssh/libexec/
最后的目录结构
root@ubuntu:/opt/openssh# ls -R ./
./:
bin etc libexec sbin share
./bin:
sftp ssh-add ssh-agent ssh-keygen ssh-keyscan
./etc:
moduli ssh_config sshd_config
./libexec:
sftp-server ssh-keysign
./sbin:
./share:
man
sshd
放到哪里都可以 因为这个版本需要绝对路径才能运行无误,建议就是bin路劲
这个路径可以在sshd_config中看到如果版本不同可以去这看看放到config所需要的相应目录中
部署到开发板
部署的开发板路劲
root@ubuntu:/home/mywork/sysTem/t507/out/t507/demo2.0/longan/buildroot/target# ls
bin dev etc init lib lib64 linuxrc media mnt opt proc root run sbin sys THIS_IS_NOT_YOUR_ROOT_FILESYSTEM tmp usr var
root@ubuntu:/home/mywork/sysTem/t507/out/t507/demo2.0/longan/buildroot/target# pwd
/home/mywork/sysTem/t507/out/t507/demo2.0/longan/buildroot/target
生成Key文件
在/opt/openssh建立etc目录
在PC机/opt/openssh/etc目录下运行：这里的ssh-keygen用的是PC自带的ssh-keygen，而不是交叉编译出来的
$ ssh-keygen -t rsa -f ssh_host_rsa_key -N ""
$ ssh-keygen -t dsa -f ssh_host_dsa_key -N ""
$ ssh-keygen -t ecdsa -f ssh_host_ecdsa_key -N ""
$ ssh-keygen -t dsa -f ssh_host_ed25519_key -N ""
拷贝编译出来的文件到开发板
拷贝生成的文件到开发板，拷贝要求：
将生成的bin目录拷贝到开发板的usr/bin，libexec拷贝到开发板的usr/libexec，这两个文件没什么要求，系统找的到就行
etc目录有要求，需要将etc目录拷贝到编译时指定的路劲，编译时指定了/opt/openssh ，使用时这个目录就要拷贝到开发板对应的/opt/openssh目录下面，不然运行不了
需要创建/var/empty，不然没法运行
root@ubuntu:/home/mywork/sysTem/t507/out/t507/demo2.0/longan/buildroot/target# cp -rf /opt/openssh/bin/* ./usr/bin/
root@ubuntu:/home/mywork/sysTem/t507/out/t507/demo2.0/longan/buildroot/target# cp -rf /opt/openssh/libexec ./usr/
root@ubuntu:/home/mywork/sysTem/t507/out/t507/demo2.0/longan/buildroot/target# cp -rf /opt/openssh/etc./usr/
添加ssh用户
修改开发板的passwd和group文件
root@ubuntu:/home/mywork/sysTem/t507/out/t507/demo2.0/longan/buildroot/target/etc# vi passwd
passwd文件添加sshd::15:50:::/bin/sh
root:x:0:0:root:/root:/bin/sh
daemon:x:1:1:daemon:/usr/sbin:/bin/false
bin:x:2:2:bin:/bin:/bin/false
sys:x:3:3:sys:/dev:/bin/false
sync:x:4:100:sync:/bin:/bin/sync
mail:x:8:8:mail:/var/spool/mail:/bin/false
www-data:x:33:33:www-data:/var/www:/bin/false
operator:x:37:37:Operator:/var:/bin/false
nobody:x:65534:65534:nobody:/home:/bin/false
sshd::15:50:::/bin/sh
root@ubuntu:/home/mywork/sysTem/t507/out/t507/demo2.0/longan/buildroot/target/etc# vi group
group文件添加sshd:*:50:
这里的两个50要对应，是组的编号
root:x:0:
daemon:x:1:
bin:x:2:
sys:x:3:
adm:x:4:
tty:x:5:
disk:x:6:
lp:x:7:
mail:x:8:
kmem:x:9:
wheel:x:10:root
cdrom:x:11:
dialout:x:18:
floppy:x:19:
video:x:28:
audio:x:29:
tape:x:32:
www-data:x:33:
operator:x:37:
utmp:x:43:
plugdev:x:46:
staff:x:50:
lock:x:54:
netdev:x:82:
users:x:100:
nogroup:x:65534:
sshd:*:50:
启动ssh服务
需要以绝对路劲的方式启动
/usr/bin/sshd
如果需要开机自启动，则把上面这句加到/etc/init.d/rcS里面即可
连接出错及解决方法
出现错误
使用xshell提示的错误
Connecting to 192.168.1.87:22...
Connection established.
To escape to local shell, press Ctrl+Alt+].
Socket error Event: 32 Error: 10053.
Connection closing...Socket close.
Connection closed by foreign host.
用linux连接提示的错误
root@ubuntu:/home/mywork/openssh/openssh-7.0p1# ssh root@192.168.1.87
Connection reset by 192.168.1.87 port 22
网上说是IP地址冲突啥，但是我反复确认IP确实是不存在问题的
在开发板以debug的模式启动ssh
启动提示
# /usr/bin/sshd -d
debug1: sshd version OpenSSH_8.6, OpenSSL 1.1.1g 21 Apr 2020
debug1: private host key #0: ssh-rsa SHA256:v2bG4tWNl/VzpGpv+ZlvJT5JykR3fYJtFipmCacCt4s
debug1: private host key #1: ecdsa-sha2-nistp256 SHA256:bQt/4aZg/+2EoJk2nhCQDDRXltCNd9O9ELan5p0z0bU
debug1: private host key #2: ssh-ed25519 SHA256:OOWf6Ulu0V+X9g1GnEa7LIUfuYUcADWLgNptTha8Jxo
debug1: rexec_argv[0]='/usr/bin/sshd'
debug1: rexec_argv[1]='-d'
debug1: Set /proc/self/oom_score_adj from 0 to -1000
debug1: Bind to port 22 on 0.0.0.0.
Server listening on 0.0.0.0 port 22.
debug1: Bind to port 22 on ::.
Server listening on :: port 22.
使用ssh工具连接时提示，翻译了下大概意思就版本不匹配
debug1: Server will not fork when running in debugging mode.
debug1: rexec start in 5 out 5 newsock 5 pipe -1 sock 8
debug1: sshd version OpenSSH_8.6, OpenSSL 1.1.1g 21 Apr 2020
debug1: private host key #0: ssh-rsa SHA256:v2bG4tWNl/VzpGpv+ZlvJT5JykR3fYJtFipmCacCt4s
debug1: private host key #1: ecdsa-sha2-nistp256 SHA256:bQt/4aZg/+2EoJk2nhCQDDRXltCNd9O9ELan5p0z0bU
debug1: private host key #2: ssh-ed25519 SHA256:OOWf6Ulu0V+X9g1GnEa7LIUfuYUcADWLgNptTha8Jxo
debug1: inetd sockets after dupping: 3, 3
Connection from 192.168.1.92 port 56515 on 192.168.1.87 port 22
debug1: Local version string SSH-2.0-OpenSSH_8.6
debug1: Remote protocol version 2.0, remote software version nsssh2_7.0.0011 NetSarang Computer, Inc.
debug1: compat_banner: no match: nsssh2_7.0.0011 NetSarang Computer, Inc.
debug1: permanently_set_uid: 15/50 [preauth]
debug1: monitor_read_log: child log fd closed
debug1: do_cleanup
debug1: Killing privsep child 7576
1129
被折叠的 条评论
为什么被折叠?
到【灌水乐园】发言
