🔐 Kylin-V10-SP3 系统升级 OpenSSH
 
       
详细升级指南 - 从旧版本升级到 OpenSSH 9.9p2
 
       
 
        方法一：RPM 构建 
        方法二：源码编译 
       
 
      
 
     
 
    
 
  
    
     
  
    
    
 
     
 
      
 
        
       
 
        
⚠️ 重要提醒
 
        
 
         
• 升级前务必备份原有 SSH 配置文件和密钥
 
         
• 建议先配置 Telnet 服务作为备用连接方式，防止升级过程中断连
 
         
• 确保服务器处于联网状态，以便下载依赖包
 
         
• 生产环境建议在测试环境验证后再执行
 
        
 
       
 
      
 
     
 
    
 
  
    
      
 
   
   
 
  
    
     
     
 
      
 
       
📦方法一：通过 RPM 构建方式安装
 
       
适合需要系统级集成、便于后续管理和卸载的场景
 
        
       
 
        
 
         
 
          

            步骤 1 
          
 
          
安装依赖工具
 
         
 
         
 
          
yum install -y rpm-build gcc make openssl-devel zlib-devel pam-devel
 
         
 
        
 
       
 
        
       
 
        
 
         
 
          

            步骤 2 
          
 
          
准备 RPM 构建目录
 
         
 
         
 
          
mkdir -p ~/rpmbuild/{BUILD,RPMS,SOURCES,SPECS,SRPMS}
 
         
 
        
 
       
 
        
       
 
        
 
         
 
          

            步骤 3 
          
 
          
获取 OpenSSH 源码包
 
         
 
         
 
          
wget https://mirrors.aliyun.com/pub/OpenBSD/OpenSSH/portable/openssh-9.9p2.tar.gz 
 
          
tar -zxvf openssh-9.9p2.tar.gz mv openssh-9.9p2 ~/rpmbuild/SOURCES/
 
         
 
        
 
       
 
      
 
      
 
   
   

 
  
    
     
  
    
    
 
     
 
      
 
       

         步骤 4 
       
 
       
创建 Spec 文件
 
      
 
      
在 SPECS 目录下创建 openssh.spec 文件：
 
      
 
       
%define debug_package %{nil} 
 
       
Name: openssh Version: 9.9p2 Release: 1%{?dist} Summary: OpenSSH secure shell protocol implementation License: BSD URL: https://www.openssh.com/ Source0: openssh-9.9p2.tar.gz BuildRequires: openssl-devel, zlib-devel, pam-devel, krb5-devel, libselinux-devel, libedit-devel, autoconf, automake, gcc, make Requires: openssl, zlib, pam, krb5-libs, libselinux, libedit
 
       
%description OpenSSH is a free version of the SSH connectivity tools that technical users of the Internet rely on.
 
       
%package clients Summary: OpenSSH client applications Requires: %{name} = %{version}-%{release}
 
       
%description clients The OpenSSH client applications: ssh, scp, sftp, etc.
 
       
%package server Summary: OpenSSH server (sshd) Requires: %{name} = %{version}-%{release}
 
       
%description server The OpenSSH server daemon and related files.
 
       
%prep %setup -q
 
       
%build ./configure –prefix=%{_prefix} –sysconfdir=%{_sysconfdir}/ssh –with-libedit make %{?_smp_mflags}
 
       
%install rm -rf %{buildroot} make install DESTDIR=%{buildroot}
 
       
确保 /var/empty/sshd 目录存在
 
       
mkdir -p %{buildroot}/var/empty/sshd
 
       
%post /sbin/ldconfig if [ $1 -eq 1 ]; then
 
       
/sbin/chkconfig --add sshd 
 
       
fi
 
       
%preun if [ $1 -eq 0 ]; then
 
       
/sbin/service sshd stop > /dev/null 2>&1 /sbin/chkconfig --del sshd 
 
       
fi
 
       
%files %license LICENCE %doc README* ChangeLog INSTALL
 
       
%files clients %{_bindir}/ssh %{_bindir}/scp %{_bindir}/sftp %{_bindir}/ssh-add %{_bindir}/ssh-agent %{_bindir}/ssh-keygen %{_bindir}/ssh-keyscan %{_libexecdir}/sftp-server %{_mandir}/man1/ssh.1* %{_mandir}/man