redhat9.0 openssh升级流程

最新推荐文章于 2024-07-04 11:05:41 发布

冯富江的技术博客

最新推荐文章于 2024-07-04 11:05:41 发布

阅读量359

点赞数 3

分类专栏： Linux 文章标签： Linux openssh 升级

本文链接：https://blog.csdn.net/qq_62311779/article/details/138234034

版权

Linux 专栏收录该内容

29 篇文章 10 订阅

订阅专栏

操作系统：redhat9.0

升级路线：openssh8.7p1---->openssh9.4p1

----------------------------------------------------------------------------------软件的下载和解压
[root@FuJiang opt]# pwd
/opt
[root@FuJiang opt]# wget https://mirrors.aliyun.com/pub/OpenBSD/OpenSSH/portable/openssh-9.4p1.tar.gz


[root@FuJiang opt]# ls
openssh-9.4p1.tar.gz
[root@FuJiang opt]# tar -xzf openssh-9.4p1.tar.gz 
[root@FuJiang opt]# ls
openssh-9.4p1  openssh-9.4p1.tar.gz
---------------------------------------------------------------------------------软件仓库配置
[root@FuJiang opt]# mount /dev/cdrom /mnt/
mount: /mnt: WARNING: source write-protected, mounted read-only.
[root@FuJiang opt]# vim /etc/yum.repos.d/dvd.repo
[root@FuJiang opt]# cat /etc/yum.repos.d/dvd.repo
[BaseOS]
name=BaseOS
baseurl=file:///mnt/BaseOS
gpgcheck=1
enabled=1
gpgkey=file:///mnt/RPM-GPG-KEY-redhat-release
[AppStream]
name=AppStream
baseurl=file:///mnt/AppStream
gpgcheck=1
enabled=1
gpgkey=file:///mnt/RPM-GPG-KEY-redhat-release
 

[root@FuJiang opt]# dnf clean all
[root@FuJiang opt]# dnf makecache
[root@FuJiang opt]# dnf repolist 
---------------------------------------------------------------------------------备份文件
几个重要路径：
/usr/local/bin 此目录是ssh的相关命令
/usr/local/sbin 此目录是sshd
[root@FuJiang openssh-9.4p1]# systemctl stop sshd
[root@FuJiang openssh-9.4p1]# systemctl disable sshd
[root@rhel9 ~]# mv /etc/ssh{,.bak} # 备份原来的ssh配置文件
[root@FuJiang openssh-9.4p1]# mv /usr/bin/scp{,.bak}
[root@FuJiang openssh-9.4p1]# mv /usr/bin/sftp{,.bak}
[root@FuJiang openssh-9.4p1]# mv /usr/bin/ssh{,.bak}
[root@FuJiang openssh-9.4p1]# mv /usr/bin/ssh-add{,.bak}
[root@FuJiang openssh-9.4p1]# mv /usr/bin/ssh-agent{,.bak}
[root@FuJiang openssh-9.4p1]# mv /usr/bin/ssh-keygen{,.bak}
[root@FuJiang openssh-9.4p1]# mv /usr/bin/ssh-keyscan{,.bak}
[root@FuJiang openssh-9.4p1]# mv /usr/sbin/sshd{,.bak}

---------------------------------------------------------------------------------编译和安装
[root@FuJiang openssh-9.4p1]# pwd
/opt/openssh-9.4p1
[root@FuJiang openssh-9.4p1]# ./configure --sysconfdir=/etc/ssh
checking for cc... no
checking for gcc... no
checking for clang... no
configure: error: in `/opt/openssh-9.4p1':
configure: error: no acceptable C compiler found in $PATH


[root@FuJiang openssh-9.4p1]# dnf install gcc-c++ make -y
[root@FuJiang openssh-9.4p1]# echo $?
0 #安装成功
[root@FuJiang openssh-9.4p1]# ./configure --sysconfdir=/etc/ssh 再次测试
#们指定了 sysconfdir的路径，所以ssh配置文件路径指到这里。不指定默认在/usr/local/etc/下
configure: error: *** zlib.h missing - please install first or check config.log *** 错误
[root@FuJiang openssh-9.4p1]# dnf provides "*/zlib.h"
zlib-devel-1.2.11-31.el9.i686 : Header files and libraries for Zlib development  缺少的东西是由于该软件包提供
Repo        : AppStream
Matched from:
Filename    : /usr/include/zlib.h
。。。。。。。。。。。。。。。。。。。。。。。
[root@FuJiang openssh-9.4p1]# yum install zlib-devel -y 安装
[root@FuJiang openssh-9.4p1]# ./configure --sysconfdir=/etc/ssh 再次测试
[root@FuJiang openssh-9.4p1]# yum install openssl-devel -y 安装
#yum install zlib-devel openssl-devel gcc-c++ make -y 以上可替换命令
[root@FuJiang openssh-9.4p1]# echo $?
0 #执行成功，证明预配置是OK的
[root@FuJiang openssh-9.4p1]# make -j 2
[root@FuJiang openssh-9.4p1]# make install 
//make && make install
[root@FuJiang openssh-9.4p1]# echo $?
0
#复制新版本的ssh可执行文件
[root@FuJiang openssh-9.4p1]# cp /usr/local/bin/* /usr/bin/
[root@FuJiang openssh-9.4p1]# cp /usr/local/sbin/sshd /usr/sbin/
#配置systemd服务
[root@FuJiang openssh-9.4p1]# mv /usr/lib/systemd/system/sshd.service{,.bak}
[root@FuJiang openssh-9.4p1]# vim /usr/lib/systemd/system/sshd.service.bak



[Unit]
Description=OpenSSH server daemon
After=network.target sshd-keygen.target
Wants=sshd-keygen.target

[Service]
ExecStart=/usr/sbin/sshd -f /etc/ssh/sshd_config -D //修改为指定配置的文件，旧版是环境变量指定
ExecReload=/bin/kill -HUP $MAINPID
KillMode=process
RestartSec=42s

[Install]
WantedBy=multi-user.target

~                                                                                                
                                                                                            
:w /usr/lib/systemd/system/sshd.service //VIM编辑器另存为
[root@FuJiang opt]# systemctl daemon-reload 重载服务配置
[root@FuJiang opt]# systemctl restart sshd
[root@FuJiang opt]# systemctl status sshd
[root@FuJiang opt]# ssh -V
OpenSSH_9.4p1, OpenSSL 3.0.1 14 Dec 2021
[root@FuJiang opt]# systemctl is-enabled sshd
disabled
[root@FuJiang opt]# systemctl enable sshd
[root@FuJiang opt]# vim /etc/ssh/sshd_config 
    PermitRootLogin yes
[root@FuJiang opt]# systemctl restart sshd