Linux openssh8.0p1升级步骤（shell版本）
运维自动化时代,手动升级太徒劳了,为了提高效率及准确率，自动化安装是必备的。
下面是通过shell写的脚本。也可以将其应用到ansible上.
准备好安装文件：
openssh-8.0p1.tar.gz
openssl-1.1.0k.tar.gz
zlib-1.2.11.tar.gz
openssl-fips-2.0.16.tar.gz
perl-5.10.0.tar.gz(redhat5以下需要，由于编辑openssl,perl版本最底为5.10.0)
脚本内容如下:
#!/bin/bash
#
#setup && update openssh8.0p1
#Action state
mstate(){
if [ $? -eq 0 ];then
echo "--------------------------By installing--------------------------"
else
echo "--------------------------Installation failed--------------------"
exit 1
fi
}
MDIR=`pwd`
#zlib1.2.11
mzlib(){
if [ -d /usr/local/zlib-1.2.11 ];then
echo "------------------------zlib-1.2.11 installation complete------------"
else
echo "-----------------------Start setup zlib------------------------------"
cd $MDIR
tar -xzvf zlib-1.2.11.tar.gz >> /dev/null
cd zlib-1.2.11
./configure --prefix=/usr/local/zlib-1.2.11 && make && make install
mstate
fi
}
#openssl-fips
mopenssl_fips(){
if [ -d /usr/local/ssl/fips-2.0 ];then
echo "-------------openssl-fips-2.0 installation complete-----------------"
else
cd $MDIR
tar -xzvf openssl-fips-2.0.16.tar.gz >> /dev/null
cd openssl-fips-2.0.16
./config && make && make install
mstate
fi
}
mperl(){
if [ -d /usr/local/perl-5.10.0 ];then
echo "-------------perl-5.10.0 installation complete----------------------"
else
cd $MDIR
tar -xzvf perl-5.10.0.tar.gz >> /dev/null
cd perl-5.10.0
./configure.gnu -des -Dprefix=/usr/local/perl-5.10.0 && make && make install
mstate
export PATH=/usr/local/perl-5.10.0/bin:$PATH
fi
}
#openssl-1.1.0k
mopenssl(){
if [ -d /usr/local/openssl-1.1.0k ];then
echo "---------------openssl-1.1.0k installation complete----------------"
else
echo "-------------------Start setup openssl-----------------------------"
cd $MDIR
tar -xzvf openssl-1.1.0k.tar.gz >> /dev/null
cd openssl-1.1.0k
./config --prefix=/usr/local/openssl-1.1.0k --with-fipslibdir=/usr/local/ssl/fips-2.0/lib/ && make && make install
mstate
grep /usr/local/openssl-1.1.0k/lib/ /etc/ld.so.conf
if [ $? -ne 0 ];then
echo "/usr/local/openssl-1.1.0k/lib/" >> /etc/ld.so.conf
fi
ldconfig
fi
}
#openssh-8.0p1
mopenssh(){
if [ -d /usr/local/openssh-8.0p1 ];then
echo "---------------------openshh-8.0p1 installation complete----------"
else
echo "----------------------Start setup openssh-------------------------"
mopenssh_bak
cd $MDIR
tar -xzvf openssh-8.0p1.tar.gz >> /dev/null
cd openssh-8.0p1
./configure --prefix=/usr/local/openssh-8.0p1 --sysconfdir=/etc/ssh --with-ssl-dir=/usr/local/openssl-1.1.0k --with-zlib=/usr/local/zlib-1.2.11 --with-md5-passwords && make && make install
mstate
fi
}
#openssh bak
mopenssh_bak(){
echo "--------bak old openssh config files---------------------------------"
if [ -d /etc/ssh ];then
mv /etc/ssh /etc/ssh_`date +%Y%m%d`
echo "-----------------------/etc/ssh mv complete------------------------"
else
echo "---------------------/etc/ssh no exist-----------------------------"
fi
}
#openssh config (redhat 5 6)
mopenssh_config(){
\cp -a $MDIR/openssh-8.0p1/contrib/redhat/sshd.init /etc/init.d/sshd
sed -i 's/SSHD=\/usr\/sbin\/sshd/SSHD=\/usr\/local\/openssh-8.0p1\/sbin\/sshd/g' /etc/init.d/sshd
sed -i 's/\/usr\/bin\/ssh-keygen -A/\/usr\/local\/openssh-8.0p1\/bin\/ssh-keygen -A/g' /etc/init.d/sshd
chkconfig --add sshd
chkconfig sshd on
}
mopenssh_config7(){
\cp -a $MDIR/openssh-8.0p1/contrib/redhat/sshd.init /etc/init.d/sshd
sed -i 's/SSHD=\/usr\/sbin\/sshd/SSHD=\/usr\/local\/openssh-8.0p1\/sbin\/sshd/g' /etc/init.d/sshd
sed -i 's/\/usr\/bin\/ssh-keygen -A/\/usr\/local\/openssh-8.0p1\/bin\/ssh-keygen -A/g' /etc/init.d/sshd
if [ -f /usr/lib/systemd/system/ssh* ];then
mv -f /usr/lib/systemd/system/ssh* $MDIR
echo "-------------------move redhat7 systemctl sshd.service-----------"
else
echo "-------------------redhat7 systemctl sshd.service no file--------"
fi
chkconfig --add sshd
chkconfig sshd on
}
#openssh path
mopenssh_path(){
grep "export PATH=/usr/local/openssh-8.0p1/bin:$PATH" /etc/profile
if [ $? -ne 0 ];then
echo "export PATH=/usr/local/openssh-8.0p1/bin:$PATH" >> /etc/profile
source /etc/profile
fi
}
magain(){
read -p "Please try again(y/Y) :" mresult
if [ $mresult == 'y' ] || [ $mresult == 'Y' ];then
echo "***************************************************************"
else
echo "**********************Question*********************************"
exit 1
fi
}
mrestart(){
echo "---------------------------sshd service restart--------------------"
service sshd restart
}
m5(){
echo "-------------------------------------------------------------------"
sleep 3
mzlib
echo "-------------------------------------------------------------------"
sleep 3
mopenssl_fips
echo "-------------------------------------------------------------------"
sleep 3
mperl
echo "-------------------------------------------------------------------"
sleep 3
mopenssl
echo "-------------------------------------------------------------------"
sleep 3
mopenssh
echo "-------------------------------------------------------------------"
sleep 3
mopenssh_config
echo "-------------------------------------------------------------------"
sleep 3
mopenssh_path
echo "-------------------------------------------------------------------"
}
m6(){
echo "-------------------------------------------------------------------"
sleep 3
mzlib
echo "-------------------------------------------------------------------"
sleep 3
mopenssl_fips
echo "-------------------------------------------------------------------"
sleep 3
mopenssl
echo "-------------------------------------------------------------------"
sleep 3
mopenssh
echo "-------------------------------------------------------------------"
sleep 3
mopenssh_config
echo "-------------------------------------------------------------------"
sleep 3
mopenssh_path
echo "-------------------------------------------------------------------"
}
m7(){
echo "-------------------------------------------------------------------"
sleep 3
mzlib
echo "-------------------------------------------------------------------"
sleep 3
mopenssl_fips
echo "-------------------------------------------------------------------"
sleep 3
mopenssl
echo "-------------------------------------------------------------------"
sleep 3
mopenssh
echo "-------------------------------------------------------------------"
sleep 3
mopenssh_config7
mopenssh_config
echo "-------------------------------------------------------------------"
sleep 3
mopenssh_path
echo "-------------------------------------------------------------------"
mrestart
}
#system_release
echo "-------------------------system release----------------------------"
cat /etc/redhat-release
echo "---------------------------select release--------------------------"
PS3="Please select a number(1,2,3,4) :"
select mrelease in redhat5 redhat6 redhat7 Quit
do
case $mrelease in
redhat5)
echo "Start $mrelease Setup openssh"
echo "---------------------you select redhat5----------------------"
magain
echo "--------------------------------------------------------------"
m5
echo "--------------------------------------------------------------"
;;
redhat6)
echo "Start $mrelease Setup openssh"
echo "---------------------you select redhat6-----------------------"
magain
echo "--------------------------------------------------------------"
m6
echo "--------------------------------------------------------------"
;;
redhat7)
echo "Start $mrelease Setup openssh"
echo "---------------------you select redhat7-----------------------"
magain
echo "--------------------------------------------------------------"
m7
echo "--------------------------------------------------------------"
;;
Quit)
echo "---------------------Goodble----------------------------------"
exit 0
;;
*)
echo "---------------------Sorry, No release------------------------"
;;
esac
done
