Bawo ni lati fi sori ẹrọ ati tunto SSH server on Debian Linux?

Fifi ati igbeyewo ni SSH Server

O yoo nilo lati wa ni root lati se awọn wọnyi…

su

1. Fi sori ẹrọ SSH Server

   apt install openssh-server
    

2. Ṣayẹwo ti o ba awọn olupin ilana to wa. Eleyi tọkasi awọn fi lọ daradara.

   ps -A | grep sshd

   o wu (tabi iru): 1753 ? 00:00:00 sshd

    

3. Fi sori ẹrọ SSH ose lati ṣayẹwo awọn SSH Server asopọ

   apt install openssh-client

   Sopọ si localhost lati se idanwo asopọ

   ssh localhost

   Tun buwolu wọle pẹlu awọn wiwo IP adirẹsi

   Gba IP adirẹsi

   ip addr

   SSH si ip adirẹsi

   ssh {ipaddress here}
    

Ipamo awọn SSH Server

O ti wa ni kan ti o dara agutan lati oluso awọn SSH server nipa disallowing root lati buwolu ati ki o leto wiwọle nikan nipa àkọsílẹ bọtini i.e. wiwọle lilo awọn ọrọigbaniwọle ti wa ni ko ba gba laaye

Rii daju lati ìdájọ awọn wọnyi ase bi olumulo rẹ ki o si ko bi root

1. Lilö kiri si awọn olumulo ile liana

   cd
    

2. Ṣayẹwo ti o ba .ssh wa

   ls -a
    

3. Ti o ba ti .ssh ko ni tẹlẹ, ṣẹda o

   mkdir .ssh
    

4. Ṣeto awọn folda fun aiye lati 700

   chmod 700 .ssh
    

5. Ṣẹda awọn authorized_keys faili

   touch ./.ssh/authorized_keys
    

6. Ayipada aiye lori awọn authorized_keys faili to 600

   chmod 600 ./.ssh/authorized_keys
    

7. Ṣii awọn authorized_keys faili

   nano ./.ssh/authorized_keys
    

8. Lẹẹmọ rẹ àkọsílẹ bọtini sinu awọn faili

   O le gba rẹ àkọsílẹ bọtini lati SSH ni ose. Ti o ba ti ni ose ni Windows 10 ki o si o yoo wa ni %USERPROFILE%/.ssh/id_rsa.pub file. Ti o ba ti ni ose ni Debian ki o si awọn àkọsílẹ bọtini ni ~/.ssh/id_rsa.pub.

   Ti o ba ti àkọsílẹ bọtini ko ni tẹlẹ, ina o lori ose ẹrọ

   ssh-keygen -t rsa -C "email@domain.com"
    

9. Ayipada si root olumulo

   su

10. Tunto rẹ SSH server lati gba nikan àkọsílẹ bọtini logins ati ki o se wiwọle fun root

    nano /etc/ssh/sshd_config

    Uncomment ati / tabi satunkọ awọn wọnyi ila

    PermitRootLogin no
StrictModes yes
PubkeyAuthentication yes
AuthorizedKeysFile .ssh/authorized_keys .ssh/authorized_keys2
PasswordAuthentication no
     

11. Tun sshd iṣẹ

    service sshd restart
     

12. Gbiyanju wíwọlé ni bi root lati rẹ SSH ni ose lilo ọrọigbaniwọle

    ssh root@{ssh server ip address}

    o wu: Permission denied (publickey).

     

13. Gbiyanju wíwọlé ni bi orukọ olumulo rẹ SSH ni ose lilo ọrọigbaniwọle

    ssh username@{ssh server ip address}

    o wu: Permission denied (publickey).

     

14. Gbiyanju wíwọlé ni bi root lati rẹ SSH ni ose lilo awọn àkọsílẹ bọtini

    ssh root@{ssh server ip address} -i .ssh/id_rsa

    o wu: Permission denied (publickey).

     

15. Wọle bi orukọ olumulo rẹ SSH ni ose lilo awọn àkọsílẹ bọtini

    ssh username@{ssh server ip address} -i .ssh/id_rsa
     

Ti o ba ti SSH ni ose ni o ni a aimi IP adiresi ki o si le fẹ lati ro nikan adiresi IP rẹ le buwolu wọle si awọn SSH server.