[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6},"actionData","errors","routes/tags.$tag",{"_7":8,"_9":10,"_11":12},"tag","security","docs",[13],"count",1,{"_14":15,"_16":17,"_18":19,"_20":21,"_22":23,"_24":25,"_26":27},"slug","enable-ssh-key-login","title","SSH 密钥认证配置","date","2023-11-14","description","配置 SSH 公钥认证实现免密码登录","content","

使用 SSH 密钥认证比密码认证更安全，且可实现免密码登录。

生成密钥对

生成私钥

ssh-keygen -t rsa -b 4096\n

按提示输入保存路径和密码（可选）。建议使用高强度密码保护私钥。

支持的密钥类型：

rsa: 传统 RSA 密钥，兼容性好
ed25519: 新一代算法，更安全高效（推荐）

从私钥生成公钥

ssh-keygen -y -f ./<privateKey>.pem\n

配置服务器

添加公钥到 authorized_keys

echo <publicKey> >> ~/.ssh/authorized_keys\n\n# 确保权限正确\nchmod 700 ~/.ssh\nchmod 600 ~/.ssh/authorized_keys\n

启用公钥认证

编辑 /etc/ssh/sshd_config：

PubkeyAuthentication yes\n

重启 SSH 服务：

systemctl restart sshd\n

使用密钥登录

ssh -i <privateKey> user@host\n

如果私钥有密码保护，会提示输入密码。

禁用密码登录（可选）

提高安全性，禁用密码认证：

# /etc/ssh/sshd_config\nPasswordAuthentication no\n

SSH 配置文件简化登录

编辑 ~/.ssh/config：

Host myserver\n    HostName example.com\n    User myuser\n    IdentityFile ~/.ssh/mykey\n

之后可直接使用 ssh myserver 连接。

注意事项

私钥必须妥善保管，不要泄露
建议使用密码保护私钥
定期检查 authorized_keys，移除不需要的公钥
生产环境建议禁用密码登录

","toc",[30,31,32,33,34,35],"tags",[28,29,8],"linux","ssh",{"_36":37,"_38":61,"_40":41,"_42":62},{"_36":37,"_38":51,"_40":41,"_42":52},{"_36":37,"_38":49,"_40":41,"_42":50},{"_36":37,"_38":47,"_40":41,"_42":48},{"_36":44,"_38":45,"_40":41,"_42":46},{"_36":37,"_38":39,"_40":41,"_42":43},"id","","text","注意事项","depth",2,"children",[],"ssh-","SSH 配置文件简化登录",[],"禁用密码登录（可选）",[],"使用密钥登录",[],"配置服务器",[53,54],{"_36":58,"_38":59,"_40":56,"_42":60},{"_36":37,"_38":55,"_40":56,"_42":57},"启用公钥认证",3,[],"-authorized_keys","添加公钥到 authorized_keys",[],"生成密钥对",[63,64],{"_36":37,"_38":67,"_40":56,"_42":68},{"_36":37,"_38":65,"_40":56,"_42":66},"从私钥生成公钥",[],"生成私钥",[]]