这是一个简单记录，代码非原创，属于升级openssh 8.4 过程中，自行打centos下rpm包的过渡产物，属于就是“为了这点醋，包的这顿饺子”，故事之 -- openssl-1.1.1j 打包篇.
代码如下
#!/bin/bash
echo ----openssl-1.1.1j--2021-02-25--by cnrock------
set -e
set -v
if [[ ! -f "/root/openssl-1.1.1j.tar.gz" ]];then
wget -O /root/openssl-1.1.1j.tar.gz https://www.openssl.org/source/openssl-1.1.1j.tar.gz
fi
mkdir ~/openssl && cd ~/openssl
yum -y install \
curl \
which \
make \
gcc \
perl \
perl-WWW-Curl \
rpm-build
# Get openssl tarball
if [[ ! -f "./openssl-1.1.1j.tar.gz" ]];then
cp /root/openssl-1.1.1j.tar.gz ./
fi
# SPEC file
cat << 'EOF' > ~/openssl/openssl.spec
Summary: OpenSSL 1.1.1j for Centos by cnrock
Name: openssl
Version: %{?version}%{!?version:1.1.1j}
Release: 1%{?dist}
Obsoletes: %{name} <= %{version}
Provides: %{name} = %{version}
URL: https://www.openssl.org/
License: GPLv2+
Source: https://www.openssl.org/source/%{name}-%{version}.tar.gz
BuildRequires: make gcc perl perl-WWW-Curl
BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root
%global openssldir /usr/local/openssl
%description
OpenSSL RPM for version 1.1.1j on Centos
%package devel
Summary: Development files for programs which will use the openssl library
Group: Development/Libraries
Requires: %{name} = %{version}-%{release}
%description devel
OpenSSL RPM for version 1.1.1j on Centos (development package)
%prep
%setup -q
%build
./config --prefix=%{openssldir} --openssldir=%{openssldir}
make
%install
[ "%{buildroot}" != "/" ] && %{__rm} -rf %{buildroot}
%make_install
mkdir -p %{buildroot}%{_bindir}
mkdir -p %{buildroot}%{_libdir}
ln -sf %{openssldir}/lib/libssl.so.1.1 %{buildroot}%{_libdir}
ln -sf %{openssldir}/lib/libcrypto.so.1.1 %{buildroot}%{_libdir}
ln -sf %{openssldir}/bin/openssl %{buildroot}%{_bindir}
%clean
[ "%{buildroot}" != "/" ] && %{__rm} -rf %{buildroot}
%files
%{openssldir}
%defattr(-,root,root)
/usr/bin/openssl
/usr/lib64/libcrypto.so.1.1
/usr/lib64/libssl.so.1.1
%files devel
%{openssldir}/include/*
%defattr(-,root,root)
%post -p /sbin/ldconfig
%postun -p /sbin/ldconfig
EOF
mkdir -p /root/rpmbuild/{BUILD,RPMS,SOURCES,SPECS,SRPMS}
cp ~/openssl/openssl.spec /root/rpmbuild/SPECS/openssl.spec
mv openssl-1.1.1j.tar.gz /root/rpmbuild/SOURCES
cd /root/rpmbuild/SPECS && \
rpmbuild \
-D "version 1.1.1j" \
-ba openssl.spec
# Before Uninstall Openssl : rpm -qa openssl
# Uninstall Current Openssl Vesion : yum -y remove openssl
# For install: rpm -ivvh /root/rpmbuild/RPMS/x86_64/openssl-1.1.1j-1.el7.x86_64.rpm --nodeps
# or rpm -Uvh openssl-1.1.1j-1.el7.x86_64.rpm --nodeps --force
# Verify install: rpm -qa openssl
# openssl version
打包输出略
升级前后版本变化如下
# cd /root/rpmbuild/RPMS/x86_64
# ls
openssl-1.1.1j-1.el7.x86_64.rpm openssl-devel-1.1.1j-1.el7.x86_64.rpm
openssl-debuginfo-1.1.1j-1.el7.x86_64.rpm
# rpm -Uvh openssl-1.1.1j-1.el7.x86_64.rpm --nodeps --force
Preparing... ################################# [100%]
Updating / installing...
1:openssl-1.1.1j-1.el7 ################################# [ 50%]
Cleaning up / removing...
2:openssl-1.1.1i-1.el7 ################################# [100%]
# openssl version
OpenSSL 1.1.1j 16 Feb 2021
openssl-1.1.1j rpm
今天（2021.06.19 ）另一个环境打包1.1.1k时遇到报错如下:
/usr/include/bits/local_lim.h:38:26: fatal error: linux/limits.h: No such file or directory
#include <linux/limits.h>
^
compilation terminated.
make[1]: *** [apps/app_rand.o] Error 1
make[1]: Leaving directory `/root/rpmbuild/BUILD/openssl-1.1.1k'
make: *** [all] Error 2
错误：/var/tmp/rpm-tmp.nfoCYS (%build) 退出状态不好
RPM 构建错误：
/var/tmp/rpm-tmp.nfoCYS (%build) 退出状态不好
解决方法如下：
yum install kernel-headers -y
安装了 ---> 最新内核 kernel-headers.x86_64.0.3.10.0-1160.31.1.el7
打包更新后版本如下：
OpenSSL 1.1.1k 25 Mar 2021
文章评论