@xbrother2026/pkg-ssh10-5-rbc02 1.0.0

package/README.md

@@ -0,0 +1,3 @@
+# pkg.ssh10.5.rbc02
+
+FAU RBC02 OpenSSH 10.5p1 升级包，供 FAU Doctor 使用。

package/README.txt

@@ -0,0 +1,14 @@
+OPENSSH 10.5p1 升级包
+适用于：RBC02 / 彩虹C02 电池网关、资产条网关
+
+构建信息：
+- ARMv5TE soft-float
+- GCC 4.8.5
+- OpenSSL 3.0.18 libcrypto.so.3 同目录共享，zlib 1.3.1 静态链接
+- 随包提供 libatomic.so.1 和 libcrypt.so.1
+- 程序与私有库安装到 /home/openssh，根分区只更新符号链接
+- OpenSSH sandbox、PAM、SELinux、Kerberos 已关闭
+- 目标程序最高使用 GLIBC_2.18 符号，并随包提供 libcrypt.so.1
+
+安装说明：
+升级完成后会延迟重启 sshd。升级过程中请勿断电或关闭升级工具。

package/config.toml

@@ -0,0 +1,20 @@
+[info]
+name = "ssh10.5p1"
+compatible = ["FAU-C3000-PHY", "FAU-C3000-RJ45", "FAU-G3000", "FAU-A3000", "FAU-C3000-CN", "FAU-G3000-CN", "FAU-A3000-CN"]
+tips = "安装过程不能断电！！最后会重启sshd服务。"
+desc = "OpenSSH 10.5p1 for RBC02 (ARMv5, sandbox disabled)"
+
+[[stage]]
+updir = "/tmp/stage1"
+keep = false
+wait = 2
+
+[[stage]]
+updir = "/home/openssh10"
+keep = true
+wait = 5
+
+[[stage]]
+updir = "/tmp/stage1"
+keep = false
+wait = 1

package/package.json

@@ -0,0 +1,12 @@
+{
+  "name": "@xbrother2026/pkg-ssh10-5-rbc02",
+  "version": "1.0.0",
+  "description": "FAU RBC02 OpenSSH 10.5p1 upgrade package",
+  "license": "UNLICENSED",
+  "files": ["config.toml", "README.txt", "stage1/", "stage2/", "stage3/"],
+  "publishConfig": { "access": "public" },
+  "fauDoctor": {
+    "packageId": "pkg.ssh10.5.rbc02",
+    "displayName": "ssh10.5p1"
+  }
+}

package/stage1/run.sh

@@ -0,0 +1,19 @@
+#!/bin/sh
+set -eu
+
+PASSWD_ROOT="Xbrother@136"
+SCRIPT_DIR=$(CDPATH= cd -- "$(dirname -- "$0")" && pwd)
+SCRIPT_PATH="$SCRIPT_DIR/$(basename -- "$0")"
+OPENSSH_DIR_TEMP="/home/openssh10"
+
+if [ "$(id -u)" -ne 0 ]; then
+	echo "Not running as root, switching to root using su..."
+	printf '%s\n' "$PASSWD_ROOT" | su -c "sh '$SCRIPT_PATH'" root
+	exit $?
+fi
+
+rm -rf "$OPENSSH_DIR_TEMP"
+mkdir -p "$OPENSSH_DIR_TEMP"
+chown xbrother:xbrother "$OPENSSH_DIR_TEMP"
+chmod 755 "$OPENSSH_DIR_TEMP"
+echo "Prepared $OPENSSH_DIR_TEMP"

package/stage2/run.sh

@@ -0,0 +1,82 @@
+#!/bin/sh
+set -eu
+
+PASSWD_ROOT="Xbrother@136"
+SCRIPT_DIR=$(CDPATH= cd -- "$(dirname -- "$0")" && pwd)
+SCRIPT_PATH="$SCRIPT_DIR/$(basename -- "$0")"
+OPENSSH_DIR_TEMP="/home/openssh10"
+OPENSSH_DIR="/home/openssh"
+OPENSSH_PREVIOUS="/home/openssh.previous"
+
+if [ "$(id -u)" -ne 0 ]; then
+	echo "Not running as root, switching to root using su..."
+	printf '%s\n' "$PASSWD_ROOT" | su -c "sh '$SCRIPT_PATH'" root
+	exit $?
+fi
+
+for payload in ssh sshd sshd-auth sshd-session libcrypto.so.3 libcrypt.so.1 \
+	libatomic.so.1; do
+	if [ ! -f "$SCRIPT_DIR/$payload" ]; then
+		echo "Missing stage2 payload: $payload" >&2
+		exit 1
+	fi
+done
+chmod 755 "$SCRIPT_DIR/ssh" "$SCRIPT_DIR/sshd" \
+	"$SCRIPT_DIR/sshd-auth" "$SCRIPT_DIR/sshd-session"
+chmod 644 "$SCRIPT_DIR/libcrypto.so.3" "$SCRIPT_DIR/libcrypt.so.1" \
+	"$SCRIPT_DIR/libatomic.so.1"
+
+mkdir -p /usr/libexec /var/empty
+chown root:root /var/empty
+chmod 755 /var/empty
+
+version=$($SCRIPT_DIR/sshd -V 2>&1)
+case "$version" in
+	OpenSSH_10.5p1,*) ;;
+	*)
+		echo "Unexpected sshd version: $version" >&2
+		exit 1
+		;;
+esac
+
+if [ -f /etc/ssh/sshd_config ]; then
+	"$SCRIPT_DIR/sshd" -t -f /etc/ssh/sshd_config
+fi
+
+rm -rf "$OPENSSH_PREVIOUS"
+if [ -e "$OPENSSH_DIR" ]; then
+	mv "$OPENSSH_DIR" "$OPENSSH_PREVIOUS"
+fi
+if ! mv "$OPENSSH_DIR_TEMP" "$OPENSSH_DIR"; then
+	[ ! -e "$OPENSSH_PREVIOUS" ] || mv "$OPENSSH_PREVIOUS" "$OPENSSH_DIR"
+	exit 1
+fi
+chown -R root:root "$OPENSSH_DIR"
+chmod 755 "$OPENSSH_DIR"
+chmod 755 "$OPENSSH_DIR/ssh" "$OPENSSH_DIR/sshd" \
+	"$OPENSSH_DIR/sshd-auth" "$OPENSSH_DIR/sshd-session"
+chmod 644 "$OPENSSH_DIR/libcrypto.so.3" "$OPENSSH_DIR/libcrypt.so.1" \
+	"$OPENSSH_DIR/libatomic.so.1"
+
+ln -sfn "$OPENSSH_DIR/sshd" /usr/sbin/sshd
+ln -sfn "$OPENSSH_DIR/ssh" /usr/bin/ssh
+ln -sfn "$OPENSSH_DIR/sshd-session" /usr/libexec/sshd-session
+ln -sfn "$OPENSSH_DIR/sshd-auth" /usr/libexec/sshd-auth
+sync
+
+(
+	sleep 3
+	echo "Restarting SSH service..."
+	killall sshd 2>/dev/null || true
+	killall sshd-session 2>/dev/null || true
+	if ! /etc/init.d/S50sshd start; then
+		if [ -d "$OPENSSH_PREVIOUS" ]; then
+			rm -rf "$OPENSSH_DIR"
+			mv "$OPENSSH_PREVIOUS" "$OPENSSH_DIR"
+			/etc/init.d/S50sshd start
+		fi
+	fi
+) </dev/null >/dev/null 2>&1 &
+
+echo "$version"
+exit 0

package/stage3/run.sh

@@ -0,0 +1,9 @@
+#!/bin/sh
+set -eu
+
+version=$(/usr/sbin/sshd -V 2>&1)
+echo "$version"
+case "$version" in
+	OpenSSH_10.5p1,*) exit 0 ;;
+	*) exit 1 ;;
+esac