diff --git a/ssh/update-ssh-el6.sh b/ssh/update-ssh-el6.sh new file mode 100644 index 0000000..a4a4d0c --- /dev/null +++ b/ssh/update-ssh-el6.sh @@ -0,0 +1,56 @@ +#!/bin/bash +# Centos6下Openssh-8.2p1离线rpm安装包下载 +# https://aq2.cn/131.html + +NowTime=$(/bin/date +%Y%m%d%H%M%S) + +if [[ "$(whoami)" != "root" ]]; then + echo "please run this script as root !" >&2 + exit 1 +fi + +if [[ ! -f /bin/cp ]]; then + echo "/bin/cp file exists" >&2 + exit 1 +fi +if [[ ! -d "/opt/backup/openssh_bak" ]];then + mkdir -p /opt/backup/openssh_bak/ + /bin/cp /etc/pam.d/sshd /opt/backup/openssh_bak/sshd.bak + /bin/cp /etc/pam.d/system-auth /opt/backup/openssh_bak/system-auth.bak + /bin/cp /etc/ssh/sshd_config /opt/backup/openssh_bak/ + /bin/cp /etc/ssh/ssh_config /opt/backup/openssh_bak/ + /bin/cp /etc/ssh/ssh*key /opt/backup/openssh_bak/ +else + mkdir -p "/opt/backup/openssh_$NowTime/" + /bin/cp /etc/pam.d/sshd "/opt/backup/openssh_$NowTime/sshd.bak" + /bin/cp /etc/pam.d/system-auth "/opt/backup/openssh_$NowTime/system-auth.bak" + /bin/cp /etc/ssh/sshd_config "/opt/backup/openssh_$NowTime/" + /bin/cp /etc/ssh/ssh_config "/opt/backup/openssh_$NowTime/" + /bin/cp /etc/ssh/ssh*key "/opt/backup/openssh_$NowTime/" +fi + +yum localinstall openssh-*.rpm -y +chmod 600 /etc/ssh/ssh_host_*_key +/bin/cp /opt/backup/openssh_bak/sshd.bak /etc/pam.d/sshd +echo -e ' +Port 22 +AddressFamily inet +ListenAddress 0.0.0.0 +Protocol 2 +SyslogFacility AUTHPRIV +PermitRootLogin yes +MaxAuthTries 6 +PubkeyAuthentication yes +AuthorizedKeysFile .ssh/authorized_keys +PasswordAuthentication yes +PermitEmptyPasswords no +UsePAM yes +UseDNS no +X11Forwarding yes +Subsystem sftp /usr/libexec/openssh/sftp-server +' > /etc/ssh/sshd_config + +chkconfig sshd on +service sshd restart + +ssh -V \ No newline at end of file diff --git a/ssh/update-ssh-el7.sh b/ssh/update-ssh-el7.sh new file mode 100644 index 0000000..1426706 --- /dev/null +++ b/ssh/update-ssh-el7.sh @@ -0,0 +1,56 @@ +#!/bin/bash +# Centos7下Openssh-8.2p1离线rpm安装包下载 +# https://aq2.cn/132.html + +NowTime=$(/bin/date +%Y%m%d%H%M%S) + +if [[ "$(whoami)" != "root" ]]; then + echo "please run this script as root !" >&2 + exit 1 +fi + +if [[ ! -f /usr/bin/cp ]]; then + echo "/usr/bin/cp file exists" >&2 + exit 1 +fi +if [[ ! -d "/opt/backup/openssh_bak" ]];then + mkdir -p /opt/backup/openssh_bak/ + /usr/bin/cp /etc/pam.d/sshd /opt/backup/openssh_bak/sshd.bak + /usr/bin/cp /etc/pam.d/system-auth /opt/backup/openssh_bak/system-auth.bak + /usr/bin/cp /etc/ssh/sshd_config /opt/backup/openssh_bak/ + /usr/bin/cp /etc/ssh/ssh_config /opt/backup/openssh_bak/ + /usr/bin/cp /etc/ssh/ssh*key /opt/backup/openssh_bak/ +else + mkdir -p "/opt/backup/openssh_$NowTime/" + /usr/bin/cp /etc/pam.d/sshd "/opt/backup/openssh_$NowTime/sshd.bak" + /usr/bin/cp /etc/pam.d/system-auth "/opt/backup/openssh_$NowTime/system-auth.bak" + /usr/bin/cp /etc/ssh/sshd_config "/opt/backup/openssh_$NowTime/" + /usr/bin/cp /etc/ssh/ssh_config "/opt/backup/openssh_$NowTime/" + /usr/bin/cp /etc/ssh/ssh*key "/opt/backup/openssh_$NowTime/" +fi + +yum localinstall openssh-*.rpm -y +chmod 600 /etc/ssh/ssh_host_*_key +/usr/bin/cp /opt/backup/openssh_bak/sshd.bak /etc/pam.d/sshd +echo -e ' +Port 22 +AddressFamily inet +ListenAddress 0.0.0.0 +Protocol 2 +SyslogFacility AUTHPRIV +PermitRootLogin yes +MaxAuthTries 6 +PubkeyAuthentication yes +AuthorizedKeysFile .ssh/authorized_keys +PasswordAuthentication yes +PermitEmptyPasswords no +UsePAM yes +UseDNS no +X11Forwarding yes +Subsystem sftp /usr/libexec/openssh/sftp-server +' > /etc/ssh/sshd_config + +systemctl enable sshd +systemctl restart sshd + +ssh -V \ No newline at end of file