使用介紹:
腳本可以判斷centos6,和centos7系統(tǒng)版本來對openssh進行升級
centos7升級openssh到9.0
centos6升級openssh到8.0
需要有可用的源下載依賴豺旬，openssh安裝包可以在官網找护奈，腳本wget那一步可以進行修改。
腳本內容如下
#!/bin/bash
source ~/.bashrc
#centos7修復函數
function centos7(){
yum install -y openssl openssl-devel gcc gcc-c++ make zlib-devel
rpm -e --nodeps `rpm -qa |grep openssh`
cd /root
#下載新版本安裝包
wget https://mirrors.hirain.com/package/ssh/openssh-9.0p1.tar.gz
tar -zxvf openssh-9.0p1.tar.gz -C ./
cd openssh-9.0p1
編譯
./configure --prefix=/usr/ --sysconfdir=/etc/ssh/ --with-ssl-dir=/usr/local/ssl --with-md5-passwords --mandir=/usr/share/man
make&& make install
chmod 600 /etc/ssh/ssh_host_rsa_key /etc/ssh/ssh_host_ecdsa_key /etc/ssh/ssh_host_ed25519_key
cat >> /usr/lib/systemd/system/sshd.service << EOF
[Unit]
Description=OpenSSH server daemon
Documentation=man:ssh(8) man:sshd_config(5)
After=network.target
[Service]
ExecStart=/usr/sbin/sshd
[Install]
WantedBy=multi-user.target
EOF
sed -i '32a PermitRootLogin yes' /etc/ssh/sshd_config && sed -i '13a Port 22' /etc/ssh/sshd_config
#重啟服務
systemctl enable sshd
systemctl restart sshd
#檢查ssh版本
ssh -V
}
function centos6(){
cp -rp /etc/ssh /etc/ssh.bak
yum install -y gcc zlib zlib-devel openssl-devel
cd /root
wget https://mirrors.hirain.com/package/ssh/openssh-8.0p1.tar.gz
#安裝
tar -xf openssh-8.0p1.tar.gz
cd openssh-8.0p1
./configure && make&&make install
sed -i 's#SSHD=/usr/sbin/sshd#SSHD=/usr/local/sbin/sshd#g' /etc/rc.d/init.d/sshd
sed -i '32a PermitRootLogin yes' /usr/local/etc/sshd_config
service sshd restart
ssh -V
}
function repairopenssh(){
systemver=`cat /etc/redhat-release|sed -r 's/.* ([0-9]+)\..*/\1/'`
if [[ $systemver = "6" ]];then
echo "當前是Centos6系統(tǒng),執(zhí)行centos6修復腳本"
centos6
else
echo "當前是Centos7系統(tǒng),執(zhí)行centos7修復腳本"
centos7
fi
}
repairopenssh
