CentOS openssh 升级教程

红兴發表於 2023-12-25 13:24:00

openssh 下载地址
https://www.openssh.com/openbsd.html
 
<ul>
<li>
<h3>OpenSSH 9.6: December 18, 2023</h3>
https://ftp.openbsd.org/pub/OpenBSD/OpenSSH/openssh-9.6.tar.gz
<pre># cd /usr/src/usr.bin
# tar zxvf .../openssh-9.6.tar.gz
# cd ssh
# make obj
# make cleandir
# make depend
# make
# make install
# cp ssh_config sshd_config /etc/ssh # (optional)
</pre>
and restart sshd.</li>
</ul>
先查看系统版本
在 Ubuntu/Debian、CentOS/RHEL 系统上，你可以使用不同的命令来查看 Linux 系统的版本信息。
1. 查看 Ubuntu/Debian 版本： ``` lsb_release -a ```
或者 ``` cat /etc/os-release ```
这些命令将输出包含系统版本信息的文本，其中包括发行版名称、发行版版本和系统内核版本等。
2. 查看 CentOS/RHEL 版本： ``` cat /etc/redhat-release ```
这个命令将直接输出 CentOS 或 RHEL 的版本信息。
除了上面这些命令外，你还可以使用以下命令来获取系统内核版本：
``` uname -a ```
这个命令将输出包含内核版本的详细信息。
请根据你所使用的具体 Linux 发行版本选择适当的命令查看系统版本信息。
 
 
可以使用hostnamectl该命令查看系统
hostnamectl
<img src="https://img2023.cnblogs.com/blog/2730054/202312/2730054-20231225133541093-258080702.png">
 我的是
<div class="_no-spacing_lzhxo_29" data-module="">
AnolisOS 8系统
 
<div>
<div>
升级需要关闭防火墙服务；关闭selinux服务； 
升级过程中需要刷新lib库：ldconfig -v； 
升级顺序：顺序是zlib库-> libressl -> openssh； 
升级需要gcc、make、perl、zlib、zlib-devel、pam、pam-devel依赖包；
<h3>一、安装包准备：</h3>
<table>
<thead>
<tr><th>软件</th><th>版本</th><th>下载地址</th>
</tr>

</thead>
<tbody>
<tr>
<td>openssh</td>
<td>9.6p1</td>
<td>https://cdn.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-9.6p1.tar.gz</td>

</tr>
<tr>
<td>zlib</td>
<td>1.3</td>
<td>https://zlib.net/zlib-1.3.tar.gz</td>

</tr>
<tr>
<td>libressl</td>
<td>3.8.2</td>
<td>https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.8.2.tar.gz</td>

</tr>

</tbody>

</table>
<h3>二、升级前环境准备</h3>
<h5>1、将上文下载的三个文件上传至服务器，目录可自行设定，方便即可。</h5>
zlib-1.3.tar.gz 
libressl-3.8.2.tar.gz 
openssh-9.6p1.tar.gz
<h5>2、关闭系统防火墙</h5>
<div class="_2Uzcx_"><button class="VJbwyy" type="button"></button>
<pre class="line-numberslanguage-css"><code class="language-css">systemctl stop firewalld.service
</code></pre>
</div>
<h5>3、关闭SElinux</h5>
检查是否关闭： 
getenforce 
如果未关闭，关闭之 
setenforce 0 
上面只是临时关闭了，重启后不生效。下面改配置文件，使永久生效。
<div class="_2Uzcx_"><button class="VJbwyy" type="button"></button>
<pre class="line-numberslanguage-undefined"><code class="language-undefined">vi /etc/selinux/config
修改：
　　SELINUX=disabled
保存退出。
</code></pre>
</div>
<div class="image-package">
<div class="image-container">
<div class="image-container-fill">
<img src="https://img2023.cnblogs.com/blog/2730054/202312/2730054-20231225134952601-1649947112.png">
 
</div>
</div>
</div>
<h5>4、安装相关依赖包</h5>
下载不下来更换源
备份
mv /etc/yum.repos.d/AnolisOS-BaseOS.repo /etc/yum.repos.d/AnolisOS-BaseOS.repo.backup.3
下载
wget -O /etc/yum.repos.d/AnolisOS-BaseOS.repo http://mirrors.cloud.tencent.com/repo/centos8_base.repo 
现在阿里云dockece有问题下载不到，用清华源的
cd /etc/yum.repos.d/
wget -O /etc/yum.repos.d/docker-ce.repo https://mirrors.tuna.tsinghua.edu.cn/docker-ce/linux/centos/docker-ce.repo
 
 注意该文件的源并不是指向清华源，所以需要修改docker-ce.repo
 
修改源。修改前面的linux的父目录 vim docker-ce.repo 原来的：baseurl=https://download.docker.com/linux/centos/7/$basearch/stable 原来的：baseurl=https://mirrors.tuna.tsinghua.edu.cn/docker-ce/linux/centos/7/$basearch/stable vim命令快速修改 :%s@https://download.docker.com/@https://mirrors.tuna.tsinghua.edu.cn/docker-ce/@
从源上下载的docker-ce.repo与官方下载的是一样的，需要将文件内容中的download.docker.com也改成mirrors.nju.edu.cn/docker-ce
使用vim编辑配置文件
vim /etc/yum.repos.d/docker-ce.repo 按i进入编辑模式
按ESC退出编辑模式
退出编辑模式后按“:”进入命令模式
命令模式输入”%s/源字符串/目的字符串/g“批量替换
%s/download.docker.com/mirrors.tuna.tsinghua.edu.cn\/docker-ce/g 输入后提示有24项被替换
源链接中有“/”字符，需要在其前面加上”\“字符转义
最后的参数g表示全局匹配，有其他的参数可自行百度
命令模式输入wq保存退出 
 
---------------------------------------------------------------
首先更新全部
sudo yum update
<div class="_2Uzcx_"><button class="VJbwyy" type="button"></button>
<pre class="line-numberslanguage-go"><code class="language-go">yum install -y wget gcc libselinux-devel openssl-devel make perl zlib zlib-devel pam pam-devel
</code></pre>
</div>
安装完毕后执行下面命令，确保所有依赖包正常安装
<div class="_2Uzcx_"><button class="VJbwyy" type="button"></button>
<pre class="line-numberslanguage-ruby"><code class="language-ruby">rpm -qa | egrep "gcc|make|perl|zlib|zlib-devel|pam|pam-devel"
</code></pre>
</div>
<div class="image-package">
<div class="image-container">
<div class="image-container-fill">
<img src="https://img2023.cnblogs.com/blog/2730054/202312/2730054-20231225153632374-577525891.png">
 
</div>
</div>
</div>
<h3>二、升级前环境准备</h3>
<h5>1、停止ssh服务，备份ssh配置文件</h5>
<div class="_2Uzcx_"><button class="VJbwyy" type="button"></button>
<pre class="line-numberslanguage-undefined"><code class="language-undefined">systemctl stop sshd
cp -r /etc/ssh /etc/ssh.old
</code></pre>
</div>
备份sshd.service文件
<div class="_2Uzcx_"><button class="VJbwyy" type="button"></button>
<pre class="line-numberslanguage-bash"><code class="language-bash">cat /usr/lib/systemd/system/sshd.service

Description=OpenSSH server daemon
Documentation=man:sshd(8) man:sshd_config(5)
After=network.target sshd-keygen.target
Wants=sshd-keygen.target

Type=notify
EnvironmentFile=-/etc/crypto-policies/back-ends/opensshserver.config
EnvironmentFile=-/etc/sysconfig/sshd
ExecStart=/usr/sbin/sshd -D $OPTIONS $CRYPTO_POLICY
ExecReload=/bin/kill -HUP $MAINPID
KillMode=process
Restart=on-failure
RestartSec=42s

WantedBy=multi-user.target
</code></pre>
</div>
备份opensshserver.config配置文件
<div class="_2Uzcx_"><button class="VJbwyy" type="button"></button>
<pre class="line-numberslanguage-bash"><code class="language-bash">cat /etc/crypto-policies/back-ends/opensshserver.config
CRYPTO_POLICY='-oCiphers=aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes256-ctr,aes256-cbc,aes128-gcm@openssh.com,aes128-ctr,aes128-cbc -oMACs=hmac-sha2-256-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha1,umac-128@openssh.com,hmac-sha2-512 -oGSSAPIKexAlgorithms=gss-curve25519-sha256-,gss-nistp256-sha256-,gss-group14-sha256-,gss-group16-sha512-,gss-gex-sha1-,gss-group14-sha1- -oKexAlgorithms=curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1 -oHostKeyAlgorithms=ecdsa-sha2-nistp256,ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521,ecdsa-sha2-nistp521-cert-v01@openssh.com,ssh-ed25519,ssh-ed25519-cert-v01@openssh.com,rsa-sha2-256,rsa-sha2-256-cert-v01@openssh.com,rsa-sha2-512,rsa-sha2-512-cert-v01@openssh.com,ssh-rsa,ssh-rsa-cert-v01@openssh.com -oPubkeyAcceptedKeyTypes=ecdsa-sha2-nistp256,ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521,ecdsa-sha2-nistp521-cert-v01@openssh.com,ssh-ed25519,ssh-ed25519-cert-v01@openssh.com,rsa-sha2-256,rsa-sha2-256-cert-v01@openssh.com,rsa-sha2-512,rsa-sha2-512-cert-v01@openssh.com,ssh-rsa,ssh-rsa-cert-v01@openssh.com -oCASignatureAlgorithms=ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,ssh-ed25519,rsa-sha2-256,rsa-sha2-512,ssh-rsa'
</code></pre>
</div>
备份sshd 配置文件
<div class="_2Uzcx_"><button class="VJbwyy" type="button"></button>
<pre class="line-numberslanguage-ruby"><code class="language-ruby">cat /etc/sysconfig/sshd
# Configuration file for the sshd service.

# The server keys are automatically generated if they are missing.
# To change the automatic creation, adjust sshd.service options for
# example usingsystemctl enable sshd-keygen@dsa.serviceto allow creation
# of DSA key orsystemctl mask sshd-keygen@rsa.serviceto disable RSA key
# creation.

# Do not change this option unless you have hardware random
# generator and you REALLY know what you are doing

SSH_USE_STRONG_RNG=0
# SSH_USE_STRONG_RNG=1

# System-wide crypto policy:
# To opt-out, uncomment the following line
# CRYPTO_POLICY=
</code></pre>
</div>
<h2>这个时候千万不能断开链接</h2>
<h5>2、查看系统原有openssh包</h5>
<div class="_2Uzcx_"><button class="VJbwyy" type="button"></button>
<pre class="line-numberslanguage-ruby"><code class="language-ruby">rpm -qa | grep openssh
openssh-8.0p1-5.an8.x86_64
openssh-server-8.0p1-5.an8.x86_64
openssh-clients-8.0p1-5.an8.x86_64
根据上面查询出的结果，卸载系统里原有Openssh（一般有三个包，全部卸载）
rpm -e --nodepsxxxxxxxxxx
rpm -e --nodeps openssh-8.0p1-5.an8.x86_64
rpm -e --nodeps openssh-server-8.0p1-5.an8.x86_64
rpm -e --nodeps openssh-clients-8.0p1-5.an8.x86_64
卸载完成后执行rpm -qa | grep openssh，确保没有回显
rpm -qa | grep openssh
</code></pre>
</div>
<div class="image-package">
<div class="image-container">
<div class="image-container-fill"> </div>
<div class="image-view" data-width="762" data-height="118">
<img src="https://img2023.cnblogs.com/blog/2730054/202312/2730054-20231225154228322-132959826.png">
 
</div>
</div>
</div>
 
卸载openssh-8.0p1 后检查sshd.service 文件，已删除。
<div class="_2Uzcx_"><button class="VJbwyy" type="button"></button>
<pre class="line-numberslanguage-ruby"><code class="language-ruby">systemctl status sshd
Unit sshd.service could not be found.
# ll /usr/lib/systemd/system/sshd.service
ls: 无法访问'/usr/lib/systemd/system/sshd.service': 没有那个文件或目录
# ll /etc/sysconfig/sshd
ls: 无法访问'/etc/sysconfig/sshd': 没有那个文件或目录
# ll /etc/crypto-policies/back-ends/opensshserver.config
lrwxrwxrwx. 1 root root 52 9月26 17:54 /etc/crypto-policies/back-ends/opensshserver.config -> /usr/share/crypto-policies/DEFAULT/opensshserver.txt
# ll /usr/share/crypto-policies/DEFAULT/opensshserver.txt
-rw-r--r--. 2 root root 1663 6月24 2021 /usr/share/crypto-policies/DEFAULT/opensshserver.txt
# cat /usr/share/crypto-policies/DEFAULT/opensshserver.txt
CRYPTO_POLICY='-oCiphers=aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes256-ctr,aes256-cbc,aes128-gcm@openssh.com,aes128-ctr,aes128-cbc -oMACs=hmac-sha2-256-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha1,umac-128@openssh.com,hmac-sha2-512 -oGSSAPIKexAlgorithms=gss-curve25519-sha256-,gss-nistp256-sha256-,gss-group14-sha256-,gss-group16-sha512-,gss-gex-sha1-,gss-group14-sha1- -oKexAlgorithms=curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1 -oHostKeyAlgorithms=ecdsa-sha2-nistp256,ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521,ecdsa-sha2-nistp521-cert-v01@openssh.com,ssh-ed25519,ssh-ed25519-cert-v01@openssh.com,rsa-sha2-256,rsa-sha2-256-cert-v01@openssh.com,rsa-sha2-512,rsa-sha2-512-cert-v01@openssh.com,ssh-rsa,ssh-rsa-cert-v01@openssh.com -oPubkeyAcceptedKeyTypes=ecdsa-sha2-nistp256,ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521,ecdsa-sha2-nistp521-cert-v01@openssh.com,ssh-ed25519,ssh-ed25519-cert-v01@openssh.com,rsa-sha2-256,rsa-sha2-256-cert-v01@openssh.com,rsa-sha2-512,rsa-sha2-512-cert-v01@openssh.com,ssh-rsa,ssh-rsa-cert-v01@openssh.com -oCASignatureAlgorithms=ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,ssh-ed25519,rsa-sha2-256,rsa-sha2-512,ssh-rsa'
</code></pre>
</div>
<h5>3、编译安装zlib</h5>
<div class="_2Uzcx_"><button class="VJbwyy" type="button"></button>
<pre class="line-numberslanguage-bash"><code class="language-bash">tar xzvf zlib-1.3.tar.gz
cd zlib-1.3/
./configure --prefix=/usr/local/zlib
make
make install
</code></pre>
</div>
验证zlib安装是否成功，要包含include、lib、share三个目录。
<div class="_2Uzcx_"><button class="VJbwyy" type="button"></button>
<pre class="line-numberslanguage-php"><code class="language-php"># ll /usr/local/zlib/
总用量 0
drwxr-xr-x 2 root root 35 9月26 15:05 include
drwxr-xr-x 3 root root 91 9月26 15:05 lib
drwxr-xr-x 3 root root 17 9月26 15:05 share
</code></pre>
</div>
<div class="_2Uzcx_"><button class="VJbwyy" type="button"></button>
<pre class="line-numberslanguage-bash"><code class="language-bash">新建并编辑配置文件：
vi /etc/ld.so.conf.d/zlib.conf
加入如下内容后保存退出
/usr/local/zlib/lib
刷新库文件，加载刚才编译安装的zlib生成的库文件
ldconfig -v
</code></pre>
</div>
<h5>4、编译安装libressl</h5>
<div class="_2Uzcx_"><button class="VJbwyy" type="button"></button>
<pre class="line-numberslanguage-bash"><code class="language-bash">tar xzvf libressl-3.8.2.tar.gz
cd libressl-3.8.2/
./configure --prefix=/usr/local/libressl
make
make install
echo '/usr/local/libressl/lib' > /etc/ld.so.conf.d/libressl.conf
ldconfig -v
</code></pre>
</div>
如下libressl库可以被系统找到
<div class="_2Uzcx_"><button class="VJbwyy" type="button"></button>
<pre class="line-numberslanguage-bash"><code class="language-bash"># ldconfig -p|grep /usr/local/libressl
libtls.so.25 (libc6,x86-64) => /usr/local/libressl/lib/libtls.so.25
libtls.so (libc6,x86-64) => /usr/local/libressl/lib/libtls.so
libssl.so.52 (libc6,x86-64) => /usr/local/libressl/lib/libssl.so.52
libssl.so (libc6,x86-64) => /usr/local/libressl/lib/libssl.so
libcrypto.so.49 (libc6,x86-64) => /usr/local/libressl/lib/libcrypto.so.49
libcrypto.so (libc6,x86-64) => /usr/local/libressl/lib/libcrypto.so
</code></pre>
</div>
重命名现有文件目录 
mv /usr/bin/openssl /usr/bin/openssl.bak 
创建ssl相关软连接 
ln -s /usr/local/libressl/bin/openssl /usr/bin/openssl 
ln -s /usr/local/libressl/include/openssl /usr/include/openssl 
编辑配置文件 
vi /etc/ld.so.conf.d/ssl.conf 
加入如下内容后保存退出 
/usr/local/ssl/lib 
刷新库文件，加载刚才编译安装的ssl生成的库文件 
ldconfig -v 
查看openssl版本 
openssl version -a

 
<div class="image-package">
<div class="image-container">
<div class="image-container-fill">
<img src="https://img2023.cnblogs.com/blog/2730054/202312/2730054-20231225160858550-314239417.png">
 

</div>

</div>

</div>
<h5>5、编译安装openssh</h5>
<div class="_2Uzcx_"><button class="VJbwyy" type="button"></button>
<pre class="line-numberslanguage-csharp"><code class="language-csharp">tar xzvf openssh-9.6p1.tar.gz
cd openssh-9.6p1 
./configure --prefix=/usr --with-zlib=/usr/local/zlib --with-ssl-dir=/usr/local/libressl
make
修改文件权限
ll /etc/ssh
总用量 24
-rw-r-----. 1 root ssh_keys480 6月20 17:38 ssh_host_ecdsa_key
-rw-r--r--. 1 root root 162 6月20 17:38 ssh_host_ecdsa_key.pub
-rw-r-----. 1 root ssh_keys387 6月20 17:38 ssh_host_ed25519_key
-rw-r--r--. 1 root root 82 6月20 17:38 ssh_host_ed25519_key.pub
-rw-r-----. 1 root ssh_keys 2578 6月20 17:38 ssh_host_rsa_key
-rw-r--r--. 1 root root 554 6月20 17:38 ssh_host_rsa_key.pub

chmod 600 /etc/ssh/ssh_host_rsa_key
chmod 600 /etc/ssh/ssh_host_ecdsa_key
chmod 600 /etc/ssh/ssh_host_ed25519_key

ll /etc/ssh
总用量 24
-rw-------. 1 root ssh_keys480 6月20 17:38 ssh_host_ecdsa_key
-rw-r--r--. 1 root root 162 6月20 17:38 ssh_host_ecdsa_key.pub
-rw-------. 1 root ssh_keys387 6月20 17:38 ssh_host_ed25519_key
-rw-r--r--. 1 root root 82 6月20 17:38 ssh_host_ed25519_key.pub
-rw-------. 1 root ssh_keys 2578 6月20 17:38 ssh_host_rsa_key
-rw-r--r--. 1 root root 554 6月20 17:38 ssh_host_rsa_key.pub

make install

.......
/usr/bin/install -c -m 644 scp.1.out /usr/share/man/man1/scp.1
/usr/bin/install -c -m 644 ssh-add.1.out /usr/share/man/man1/ssh-add.1
/usr/bin/install -c -m 644 ssh-agent.1.out /usr/share/man/man1/ssh-agent.1
/usr/bin/install -c -m 644 ssh-keygen.1.out /usr/share/man/man1/ssh-keygen.1
/usr/bin/install -c -m 644 ssh-keyscan.1.out /usr/share/man/man1/ssh-keyscan.1
/usr/bin/install -c -m 644 moduli.5.out /usr/share/man/man5/moduli.5
/usr/bin/install -c -m 644 sshd_config.5.out /usr/share/man/man5/sshd_config.5
/usr/bin/install -c -m 644 ssh_config.5.out /usr/share/man/man5/ssh_config.5
/usr/bin/install -c -m 644 sshd.8.out /usr/share/man/man8/sshd.8
/usr/bin/install -c -m 644 sftp.1.out /usr/share/man/man1/sftp.1
/usr/bin/install -c -m 644 sftp-server.8.out /usr/share/man/man8/sftp-server.8
/usr/bin/install -c -m 644 ssh-keysign.8.out /usr/share/man/man8/ssh-keysign.8
/usr/bin/install -c -m 644 ssh-pkcs11-helper.8.out /usr/share/man/man8/ssh-pkcs11-helper.8
/usr/bin/install -c -m 644 ssh-sk-helper.8.out /usr/share/man/man8/ssh-sk-helper.8
/usr/bin/mkdir -p /usr/etc
ssh-keygen: generating new host keys: RSA DSA ECDSA ED25519
/usr/sbin/sshd -t -f/etc/sshd_config

修改配置文件/usr/etc/sshd_config，允许root直接登录 </code></pre>
<pre class="line-numberslanguage-csharp"><code class="language-csharp">vim /etc/sshd_config</code></pre>
<pre class="line-numberslanguage-csharp"><code class="language-csharp">开放22端口,不一定是22端口根据实际的来开放
#Port 22
Port 22

允许root登录
PermitRootLogin yes

#HostKey /etc/ssh_host_rsa_key
#HostKey /etc/ssh_host_ecdsa_key
#HostKey /etc/ssh_host_ed25519_key
改为
HostKey /etc/ssh/ssh_host_rsa_key
HostKey /etc/ssh/ssh_host_ecdsa_key
HostKey /etc/ssh/ssh_host_ed25519_key
保存后退出</code></pre>
</div>
 
<img src="https://img2023.cnblogs.com/blog/2730054/202312/2730054-20231225163244381-1476306518.png">
 
<img src="https://img2023.cnblogs.com/blog/2730054/202312/2730054-20231225163253024-241582131.png">
 
<img src="https://img2023.cnblogs.com/blog/2730054/202312/2730054-20231225163258591-1541979637.png">
 
ssh服务必须开机自启动，因此要进行一些设置 
如果是centos7就需要先备份就的service 
mv/usr/lib/systemd/system/sshd.service/usr/lib/systemd/system/sshd.serviceold 
AnolisOS 8系统则可以直接新建 
新建配置文件/etc/sysconfig/sshd
<div class="_2Uzcx_"><button class="VJbwyy" type="button"></button>
<pre class="line-numberslanguage-bash"><code class="language-bash">vim /etc/sysconfig/sshd
填写如下内容

# Configuration file for the sshd service.

# The server keys are automatically generated if they are missing.
# To change the automatic creation uncomment and change the appropriate
# line. Accepted key types are: DSA RSA ECDSA ED25519.
# The default is "RSA ECDSA ED25519"

# AUTOCREATE_SERVER_KEYS=""
# AUTOCREATE_SERVER_KEYS="RSA ECDSA ED25519"

# Do not change this option unless you have hardware random
# generator and you REALLY know what you are doing

SSH_USE_STRONG_RNG=0
# SSH_USE_STRONG_RNG=1
</code></pre>
</div>
保存后退出
新建sshd.service
<div class="_2Uzcx_"><button class="VJbwyy" type="button"></button>
<pre class="line-numberslanguage-csharp"><code class="language-csharp">vim /usr/lib/systemd/system/sshd.service
[Unit]
Description=OpenSSH 9 server daemon
Documentation=man:sshd(8) man:sshd_config(5)
After=network.target sshd-keygen.service
Wants=sshd-keygen.service

[Service]
Type=simple
EnvironmentFile=/etc/sysconfig/sshd
ExecStart=/usr/sbin/sshd -D $OPTIONS
ExecReload=/bin/kill -HUP $MAINPID
KillMode=process
Restart=on-failure
RestartSec=42s

[Install]
WantedBy=multi-user.target　
</code></pre>
</div>
<div class="_2Uzcx_"><button class="VJbwyy" type="button"></button>
<pre class="line-numberslanguage-jsx"><code class="language-jsx">systemctl daemon-reload
启动sshd服务
systemctl start sshd
设置开机自动启动
systemctl enable sshd.service
查看sshd服务状态
systemctl status sshd -l #启动 systemctl start sshd.service #查看状态 systemctl status sshd.service 增加开机自启 : systemctl enable sshd.service

● sshd.service - OpenSSH 9 server daemon
Loaded: loaded (/usr/lib/systemd/system/sshd.service; disabled; vendor preset: enabled)
Active: active (running) since Mon 2022-09-26 16:34:09 CST; 4s ago
Docs: man:sshd(8)
 man:sshd_config(5)
Main PID: 68932 (sshd)
Tasks: 1 (limit: 23576)
Memory: 764.0K
CGroup: /system.slice/sshd.service
 └─68932 sshd: /usr/sbin/sshd -D 0 of 10-100 startups

9月 26 16:34:09 anolis systemd[1]: Started OpenSSH 9 server daemon.
9月 26 16:34:09 anolis sshd[68932]: Server listening on 0.0.0.0 port 22.
9月 26 16:34:09 anolis sshd[68932]: Server listening on :: port 22.

验证ssh版本
ssh -V</code></pre>
</div>
</div>
</div>
</div> 
来源：https://www.cnblogs.com/wjsqqj/p/17925907.html

頁: [1]

琼殿技术论坛's Archiver

CentOS openssh 升级教程