創建本地YUM源
cd /mnt
mkdir cdrom
mount -o loop -t iso9660 /dev/cdrom /mnt/cdrom/
cd /etc/yum.repos.d/
vi redhat7.repo
[redhat7]
name=redhat7
baseurl=file:///mnt/cdrom
enabled=1
gpgcheck=0
再輸入yum repolist 查看可用yum源
再輸入yum makecache 緩存本地源
注意：
如果想永久掛載的話就需要編輯vi /etc/fstab 這個文件在末尾添加一行,本次不需要
/dev/sr0 /mnt/cdrom udf defaults 0 0
cd /usr/local/src/
mv /openssh-7.9p1.tar.gz ./
tar -zxvf *
安裝telnet服務，防止ssh升級后登錄不上,如果以安裝跳過
rpm -qa|grep telnet
rpm -qa|grep xinetd
telnet的安裝和啟動
1. 安裝telent服務端
yum -y install telnet-server*
2.安裝telnet客戶端
yum install telnet.*
3.安裝telnet守護進程xinetd
yum install xinetd.x86_64
4、啟動telnet服務
vi /etc/xinetd.d/telnet，將disable=yes改成disable=no；
systemctl start telnet.socket
關閉telnet服務
vi /etc/xinetd.d/telnet，將disable=no改成disable=yes
systemctl stop telnet.socket
5、關閉防火牆
systemctl stop firewalld
安裝編譯所需工具包
yum -y install gcc pam-devel zlib-devel
yum -y install openssl-devel
find / -name openssl
find / -name ssh
whereis ssh
備份當前openssh
# 備份啟動腳本以及配置文件
cp -rf /etc/init.d/ssh /etc/init.d/ssh.old
cp -rf /etc/ssh /etc/ssh.old
./configure --prefix=/usr --sysconfdir=/etc/ssh --with-pam --with-zlib --with-md5-passwords --with-tcp-wrappers
tar -zxf openssh-7.9p1.tar.gz
cd openssh-7.9p1
yum install -y gcc openssl-devel pam-devel rpm-build
make && make install
---------------------------------------------
./configure --prefix=/usr --sysconfdir=/etc/ssh --with-pam --with-zlib --with-ssl-dir=/usr --with-md5-passwords --mandir=/usr/share/man --with-kerberos5=/usr/lib64/libkrb5.so
make && make install
---------------------------------------------
修改配置文件,允許root登錄
/bin/sed -i '/^#PermitRootLogin/s/#PermitRootLogin yes/PermitRootLogin yes/' /etc/ssh/sshd_config
/bin/sed -i 's_#PermitRootLogin yes_PermitRootLogin yes_g' /etc/ssh/sshd_config
sed -i '/^GSSAPICleanupCredentials/s/GSSAPICleanupCredentials yes/#GSSAPICleanupCredentials yes/' /etc/ssh/sshd_config
sed -i '/^GSSAPIAuthentication/s/GSSAPIAuthentication yes/#GSSAPIAuthentication yes/' /etc/ssh/sshd_config
sed -i '/^GSSAPIAuthentication/s/GSSAPIAuthentication no/#GSSAPIAuthentication no/' /etc/ssh/sshd_config
編譯OpenSSH可能遇到的報錯
# 報錯： configure: error: PAM headers not found
# 解決： ubuntu: apt-get install libpam0g-dev
# centos: yum -y install pam-devel
# 報錯： configure: error: *** OpenSSL headers missing - please install first or check config.log ***
# 解決： ubuntu: apt-get install libssl-dev
# centos: yum -y install openssl-devel
恢復
cp -rf /etc/ssh.old /etc/ssh