ssh 免密登陆(使用秘钥登陆)

ssh 免密登陆(使用秘钥登陆)

使用ssh命令登陆到远程服务器的时候每次都要输入一遍密码, 比较繁琐, 我们可以利用自己签发秘钥认证, 来实现免密登陆

1. 生成秘钥

ssh-keygen -t rsa

成功将输出如下信息

Generating public/private rsa key pair.
Enter file in which to save the key (/Users/wangq/.ssh/id_rsa):
Enter passphrase (empty for no passphrase):
Enter same passphrase again:
Your identification has been saved in /Users/wangq/.ssh/id_rsa.
Your public key has been saved in /Users/wangq/.ssh/id_rsa.pub.
The key fingerprint is:
SHA256:vPZOg1UUHugMcqq00I/SJIdxUCv8TzXO+2jTNBYSWow wangq@WanG-MacPro.local
The key's randomart image is:
+---[RSA 3072]----+
|  .o.  o   .+.   |
| .. ..E * .o .   |
|  o=.  *o=  o    |
|  +o= o=..+.     |
|   B.=. S...     |
|  . =o.  =+      |
|   .  . =+o.     |
|       .o=..     |
|       ..o+      |
+----[SHA256]-----+

2. 将公钥上传到服务器

进入生成秘钥的目录

默认是在~/.ssh目录下

cd ~/.ssh

上传公钥

如果需要指定端口:
在~/.shh 创建一个名为config的文件, 并写上Port xxxx(端口号)

ssh-copy-id -i id_rsa.pub root@192.168.31.139

会要求输入一遍root用户的密码

/usr/bin/ssh-copy-id: INFO: Source of key(s) to be installed: "id_rsa.pub"
/usr/bin/ssh-copy-id: INFO: attempting to log in with the new key(s), to filter out any that are already installed
/usr/bin/ssh-copy-id: INFO: 1 key(s) remain to be installed -- if you are prompted now it is to install the new keys
root@192.168.31.139's password:

Number of key(s) added:        1

Now try logging into the machine, with:   "ssh 'root@192.168.31.139'"
and check to make sure that only the key(s) you wanted were added.

3. 测试登陆

ssh root@192.168.31.139

正常情况下就直接通过root登陆到远程服务器了

Activate the web console with: systemctl enable --now cockpit.socket

Last login: Fri Sep 11 00:19:58 2020
[root@test1 ~]# ^C