ssh 免密登陆(使用秘钥登陆)

野性酷女 2022-12-23 01:58 258阅读 0赞

# ssh 免密登陆(使用秘钥登陆) #

> 使用`ssh`命令登陆到远程服务器的时候每次都要输入一遍密码, 比较繁琐, 我们可以利用自己签发秘钥认证, 来实现免密登陆

## 1. 生成秘钥 ##

ssh-keygen -t rsa

> 成功将输出如下信息
> 
>     Generating public/private rsa key pair.
>     Enter file in which to save the key (/Users/wangq/.ssh/id_rsa):
>     Enter passphrase (empty for no passphrase):
>     Enter same passphrase again:
>     Your identification has been saved in /Users/wangq/.ssh/id_rsa.
>     Your public key has been saved in /Users/wangq/.ssh/id_rsa.pub.
>     The key fingerprint is:
>     SHA256:vPZOg1UUHugMcqq00I/SJIdxUCv8TzXO+2jTNBYSWow wangq@WanG-MacPro.local
>     The key's randomart image is:
>     +---[RSA 3072]----+
>     |  .o.  o   .+.   |
>     | .. ..E * .o .   |
>     |  o=.  *o=  o    |
>     |  +o= o=..+.     |
>     |   B.=. S...     |
>     |  . =o.  =+      |
>     |   .  . =+o.     |
>     |       .o=..     |
>     |       ..o+      |
>     +----[SHA256]-----+

## 2. 将公钥上传到服务器 ##

#### 进入生成秘钥的目录 ####

默认是在`~/.ssh`目录下

cd ~/.ssh

#### 上传公钥 ####

ssh-copy-id -i id_rsa.pub root@192.168.31.139

> 会要求输入一遍`root`用户的密码
> 
>     /usr/bin/ssh-copy-id: INFO: Source of key(s) to be installed: "id_rsa.pub"
>     /usr/bin/ssh-copy-id: INFO: attempting to log in with the new key(s), to filter out any that are already installed
>     /usr/bin/ssh-copy-id: INFO: 1 key(s) remain to be installed -- if you are prompted now it is to install the new keys
>     root@192.168.31.139's password: Number of key(s) added: 1 Now try logging into the machine, with: "ssh 'root@192.168.31.139'"
>     and check to make sure that only the key(s) you wanted were added.

## 3. 测试登陆 ##

ssh root@192.168.31.139

> 正常情况下就直接通过`root`登陆到远程服务器了
> 
>     Activate the web console with: systemctl enable --now cockpit.socket
>     
>     Last login: Fri Sep 11 00:19:58 2020
>     [root@test1 ~]# ^C