openssh-rpm-pkg

本文为12月第二周网站忘记续费后从webcache里面找回的，丢失图片.

这是一个简单记录，代码非原创，属于升级openssh 8.4 过程中自行打centos下rpm包的过渡产物，属于就是“为了这点醋，包的这顿饺子”，故事之 --openssh 8.4 rpm 打包篇.

重点是注意先升级本地打包环境的openssl.

代码如下，大概只改了openssl版本吧。

#!/bin/bash set -ex yum install rpm-build zlib-devel openssl-devel gcc perl-devel pam-devel unzip -y mkdir -p /root/rpmbuild/{SOURCES,SPECS} cd /root/rpmbuild/SOURCES if [[ ! -f "openssh-8.4p1.tar.gz" ]];then wget -c http://cdn.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-8.4p1.tar.gz fi if [[ ! -f "x11-ssh-askpass-1.2.4.1.tar.gz" ]];then wget https://src.fedoraproject.org/repo/pkgs/openssh/x11-ssh-askpass-1.2.4.1.tar.gz/8f2e41f3f7eaa8543a2440454637f3c3/x11-ssh-askpass-1.2.4.1.tar.gz fi tar zxvf openssh-8.4p1.tar.gz openssh-8.4p1/contrib/redhat/openssh.spec mv openssh-8.4p1/contrib/redhat/openssh.spec ../SPECS/ chown sshd:sshd /root/rpmbuild/SPECS/openssh.spec cp /root/rpmbuild/SPECS/openssh.spec /root/rpmbuild/SPECS/openssh.spec_def sed -i -e "s/%global no_gnome_askpass 0/%global no_gnome_askpass 1/g" /root/rpmbuild/SPECS/openssh.spec sed -i -e "s/%global no_x11_askpass 0/%global no_x11_askpass 1/g" /root/rpmbuild/SPECS/openssh.spec sed -i -e "s/^BuildRequires: openssl-devel < 1.1/#BuildRequires: openssl-devel < 1.1/g" /root/rpmbuild/SPECS/openssh.spec sed -i -e '/with-privsep-path/a\ --with-openssl-includes=/usr/local/openssl/include \\\n --with-ssl-dir=/usr/local/openssl \\' /root/rpmbuild/SPECS/openssh.spec cd /root/rpmbuild/SPECS/ rpmbuild -ba openssh.spec
这样能打出几个漂亮的 openssh8.4的包。
最终效果 # ssh -V
OpenSSH_8.4p1, OpenSSL 1.1.1j 16 Feb 2021