编译安装

下载dropbear、并解压

# wget http://matt.ucc.asn.au/dropbear/releases/dropbear-2015.67.tar.bz2
# tar xvf dropbear-2015.67.tar.bz2
# cd dropbear-2015.67
# ./configure --prefix=/usr/local/dropbear --sysconfdir=/etc/dropbear

编译安装dropbear，要指定安装dropbear的哪些程序

# make PROGRAMS="dropbear dbclient dropbearkey dropbearconvert scp"
# make PROGRAMS="dropbear dbclient dropbearkey dropbearconvert scp" install

安装完成后没有/etc/dropbear，还要有/etc/dropbear/dropbear_dss_host_key和/etc/dropbear/dropbear_rsa_host_key文件        -t 指定类型 -f 指定安装到那

# mkdir /etc/dropbear
# /usr/local/dropbear/bin/dropbearkey -t dss -f /etc/dropbear/dropbear_dss_host_key
# /usr/local/dropbear/bin/dropbearkey -t rsa -s 4096 -f /etc/dropbear/dropbear_rsa_host_key

现在可以启动dropbear

# /usr/local/dropbear/sbin/dropbear -p 2222        #监听在2222端口
# ps aux | grep dropbear        #服务已经启动了
root     25377  0.0  0.0  15300   536 ?        Ss   17:50   0:00 /usr/local/dropbear/sbin/dropbear -p 2222
root     25379  0.0  0.0 103256   856 pts/2    S+   17:51   0:00 grep dropbear
# netstat -tnlp        #2222端口开始监听
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address               Foreign Address             State       PID/Program name
tcp        0      0 127.0.0.1:8307              0.0.0.0:*                   LISTEN      2861/vmware-hostd
tcp        0      0 0.0.0.0:2222                0.0.0.0:*                   LISTEN      25377/dropbear
tcp        0      0 :::22                       :::*                        LISTEN      2576/sshd
tcp        0      0 :::2222                     :::*                        LISTEN      25377/dropbear
# ss -tanl
tate       Recv-Q Send-Q                           Local Address:Port                             Peer Address:Port
LISTEN      0      100                                         :::2222                                       :::*
LISTEN      0      100                                          *:2222                                        *:*

换一个端口

Xshell :\> ssh 192.168.1.9 2222        #可以连接

不想用ssh服务，回到原端口

# chkconfig sshd off        #默认开机不启动
# service sshd stop

服务脚本的编写

想让dropbear开机启动，换到2222端口

# vim /etc/rc.d/rc.local
/usr/local/dropbear/sbin/dropbear -p 2222    #能启动，但是不能关闭，写个服务脚本

# vim /etc/sysconfig/dropbear
port=2222# vim /etc/rc.d/init.d/dropbear
#!/bin/bash
#
# chkconfig: 2345 75 50    默认级别    启动级别    关闭级别
# description: lightweight ssh2 implementation
#
[ -r /etc/rc.d/init.d/functions ] && . /etc/rc.d/init.d/functions[ -f /etc/sysconfig/dropbear ] && . /etc/sysconfig/dropbeardsskey=/etc/dropbear/dropbear_dss_host_key
rsakey=/etc/dropbear/dropbear_rsa_host_keypidfile=/var/run/dropbear.pid
lockfile=/var/lock/subsys/dropbeardropbearkey=/usr/local/dropbear/bin/dropbearkey
dropbear=/usr/local/dropbear/sbin/dropbearport=${port:=22}gendsskey() {if [ ! -f $dsskey ]; then$dropbearkey -t dss -f $dsskey &> /dev/null[ $? -eq 0 ] && return 0 || return 1RETVAL=$?if [ $RETVAL -eq 0 ]; thenecho -n "Generate dss key finished."passedechoreturn 0elseecho -n "Genrate dss key failed"failureechoexit 6fielsereturn 0fi
}
genrsakey() {if [ ! -f $rsakey ]; then$dropbearkey -t rsa -f $rsakey -s 2048 &> /dev/null#   [ $? -eq 0 ] && return 0 || return 1        #这行不需要了RETVAL=$?if [ $RETVAL -eq 0 ]; thenecho -n "Generate rsa key finished."passedechoreturn 0elseecho -n "Genrate rsa key failed"failureechoexit 6fielsereturn 0fi
}
start() {gendsskeygenrsakey if [ -f $lockfile ]; thenecho -n "dropbear is already running."failureechoexit 7fiecho -n "Start dropbear"daemon --pidfile $pidfile $dropbear -p $portRETVAL=$?echo if [ $RETVAL -eq 0 ];thentouch $lockfilereturn 0elserm -f $lockfile $pidfilereturn 1fi
}
stop() {if [ ! -f $lockfile ]; thenecho -n "dropbear is not running."failureechoexit 8fiecho -n "Stop dropbear:"killproc dropbearRETVAL=$?echo[ $RETVAL -eq 0 ] && rm -f $lockfile && return 0 || return 1
}case $1 in
start)start ;;
stop)stop;;
restart)stop start ;;
*) exit 3 ;;
esac

# service dropbear start
Start dropbear                                             [确定]
# service dropbear restart
Stop dropbear:                                             [确定]
Start dropbear                                             [确定]
# service dropbear stop
Stop dropbear:                                             [确定]