@xbrother2026/pkg-ssh10-6-rbcpro 0.0.0-stage → 1.0.0

package/README.txt

@@ -0,0 +1,11 @@
+OPENSSH 10.6p1 升级包
+适用于：FAU-RBC02-PRO
+
+构建信息：
+- ARM64 / GCC 4.8.5 / 最高 GLIBC_2.26
+- OpenSSL 3.0.18 libcrypto.so.3 同目录共享，zlib 1.3.1 静态链接
+- PAM 已启用，使用目标系统现有 libpam.so.0 和 PAM 配置
+- 程序和配套 libcrypt.so.1 安装到 /home/openssh，根分区只更新符号链接
+- OpenSSH sandbox、SELinux、Kerberos 已关闭
+
+安装过程中请勿断电或关闭升级工具，安装完成后会重启 ssh 服务。

package/config.toml

@@ -0,0 +1,15 @@
+[info]
+name = "ssh10.6p1"
+compatible = ["FAU-RBC02-PRO"]
+tips = "安装过程不能断电！！最后会重启sshd服务。"
+desc = "OpenSSH 10.6p1 for RBC Pro (ARM64, PAM enabled, sandbox disabled)"
+
+[[stage]]
+updir = "/home/openssh10"
+keep = true
+wait = 5
+
+[[stage]]
+updir = "/tmp/stage1"
+keep = false
+wait = 1

package/package.json

@@ -1,6 +1,12 @@
 {
   "name": "@xbrother2026/pkg-ssh10-6-rbcpro",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "1.0.0",
+  "description": "FAU RBC02-PRO OpenSSH 10.6p1 upgrade package",
+  "license": "UNLICENSED",
+  "files": ["config.toml", "README.txt", "stage1/", "stage2/"],
+  "publishConfig": { "access": "public" },
+  "fauDoctor": {
+    "packageId": "pkg.ssh10.6.rbcpro",
+    "displayName": "ssh10.6p1"
+  }
+}

package/stage1/run.sh

@@ -0,0 +1,94 @@
+#!/bin/sh
+set -eu
+
+PASSWD_ROOT="Xbrother@136"
+SCRIPT_DIR=$(CDPATH= cd -- "$(dirname -- "$0")" && pwd)
+SCRIPT_PATH="$SCRIPT_DIR/$(basename -- "$0")"
+OPENSSH_DIR_TEMP="/home/openssh10"
+OPENSSH_DIR="/home/openssh"
+OPENSSH_PREVIOUS="/home/openssh.previous"
+
+if [ "$(id -u)" -ne 0 ]; then
+	echo "Not running as root, switching to root using su..."
+	printf '%s\n' "$PASSWD_ROOT" | su -c "sh '$SCRIPT_PATH'" root
+	exit $?
+fi
+
+for payload in ssh sshd sshd-auth sshd-session libcrypto.so.3 libcrypt.so.1; do
+	if [ ! -f "$SCRIPT_DIR/$payload" ]; then
+		echo "Missing stage1 payload: $payload" >&2
+		exit 1
+	fi
+done
+if [ ! -e /lib/libpam.so.0 ] && [ ! -e /usr/lib/libpam.so.0 ] && \
+	[ ! -e /lib/aarch64-linux-gnu/libpam.so.0 ] && \
+	[ ! -e /usr/lib/aarch64-linux-gnu/libpam.so.0 ]; then
+	echo "Target system does not provide libpam.so.0" >&2
+	exit 1
+fi
+
+chmod 755 "$SCRIPT_DIR/ssh" "$SCRIPT_DIR/sshd" \
+	"$SCRIPT_DIR/sshd-auth" "$SCRIPT_DIR/sshd-session"
+chmod 644 "$SCRIPT_DIR/libcrypto.so.3" "$SCRIPT_DIR/libcrypt.so.1"
+
+mkdir -p /usr/libexec /var/empty
+chown root:root /var/empty
+chmod 755 /var/empty
+
+version=$($SCRIPT_DIR/sshd -V 2>&1)
+case "$version" in
+	OpenSSH_10.6p1,*) ;;
+	*)
+		echo "Unexpected sshd version: $version" >&2
+		exit 1
+		;;
+esac
+
+if [ -f /etc/ssh/sshd_config ]; then
+	"$SCRIPT_DIR/sshd" -t -f /etc/ssh/sshd_config
+fi
+
+rm -rf "$OPENSSH_PREVIOUS"
+if [ -e "$OPENSSH_DIR" ]; then
+	mv "$OPENSSH_DIR" "$OPENSSH_PREVIOUS"
+else
+	mkdir -p "$OPENSSH_PREVIOUS"
+	cp -pfL /usr/bin/ssh "$OPENSSH_PREVIOUS/ssh"
+	cp -pfL /usr/sbin/sshd "$OPENSSH_PREVIOUS/sshd"
+	for payload in sshd-auth sshd-session; do
+		if [ -e "/usr/libexec/$payload" ]; then
+			cp -pfL "/usr/libexec/$payload" "$OPENSSH_PREVIOUS/$payload"
+		fi
+	done
+fi
+if ! mv "$OPENSSH_DIR_TEMP" "$OPENSSH_DIR"; then
+	[ ! -e "$OPENSSH_PREVIOUS" ] || mv "$OPENSSH_PREVIOUS" "$OPENSSH_DIR"
+	exit 1
+fi
+chown -R root:root "$OPENSSH_DIR"
+chmod 755 "$OPENSSH_DIR"
+chmod 755 "$OPENSSH_DIR/ssh" "$OPENSSH_DIR/sshd" \
+	"$OPENSSH_DIR/sshd-auth" "$OPENSSH_DIR/sshd-session"
+chmod 644 "$OPENSSH_DIR/libcrypto.so.3" "$OPENSSH_DIR/libcrypt.so.1"
+
+ln -sfn "$OPENSSH_DIR/ssh" /usr/bin/ssh
+ln -sfn "$OPENSSH_DIR/sshd" /usr/sbin/sshd
+ln -sfn "$OPENSSH_DIR/sshd-auth" /usr/libexec/sshd-auth
+ln -sfn "$OPENSSH_DIR/sshd-session" /usr/libexec/sshd-session
+sync
+
+(
+	sleep 3
+	killall sshd 2>/dev/null || true
+	killall sshd-session 2>/dev/null || true
+	if ! systemctl start ssh; then
+		if [ -d "$OPENSSH_PREVIOUS" ]; then
+			rm -rf "$OPENSSH_DIR"
+			mv "$OPENSSH_PREVIOUS" "$OPENSSH_DIR"
+			systemctl start ssh
+		fi
+	fi
+) </dev/null >/dev/null 2>&1 &
+
+echo "$version"
+exit 0

package/stage2/run.sh

@@ -0,0 +1,9 @@
+#!/bin/sh
+set -eu
+
+version=$(/usr/sbin/sshd -V 2>&1)
+echo "$version"
+case "$version" in
+	OpenSSH_10.6p1,*) exit 0 ;;
+	*) exit 1 ;;
+esac

package/README.md

@@ -1,3 +0,0 @@
-# Temporary Holding Version
-
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.