Linux下SSH配置密钥key登录禁用密码登录

mantou • 2021年4月29日下午5:08 • 代码程序

首先需要在ROOT用户下

操作步骤如下

1 创建用户haoduck

公钥文件一般从自己的电脑上生成，诸如XShell、MobaXterm等工具都是可以生成的。这里就不赘述了

在最后添加一行haoduck ALL=(ALL) ALL或者haoduck ALL=(ALL) NOPASSWD: ALL，后者可以免密码使用sudo

密钥登录：找到以下内容去掉签名的#号
#RSAAuthentication yes #PubkeyAuthentication yes #AuthorizedKeysFile .ssh/authorized_keys

禁用密码和ROOT登录：
找到以下内容
PasswordAuthentication yes PermitRootLogin yes
改为
PasswordAuthentication no PermitRootLogin no

重启sshdsystemctl restart sshd或systemctl restart ssh或service sshd restart或service ssh restart

#!/bin/bash
#username=${1:=”haoduck”}
#pubkey=${2:=”ssh-xxxxx”}
username=“haoduck”
#pubkey=”$(wget -qO- https://直链)”
pubkey=“ssh-xxxxx”
#yum install -y sudo
#apt-get install -y sudo
useradd ${username}
mkdir –p /home/${username}/.ssh/
chmod 700 /home/${username}/.ssh/
echo $pubkey > /home/${username}/.ssh/authorized_keys
chmod 600 /home/${username}/.ssh/authorized_keys
chown –R ${username} /home/${username}/.ssh/
#sudo配置
chmod u+w /etc/sudoers
echo “${username} ALL=(ALL) ALL” > /etc/sudoers.d/${username}
#echo “${username} ALL=(ALL) NOPASSWD: ALL” > /etc/sudoers.d/${username}
#sshd配置
sshd_file=“/etc/ssh/sshd_config”
cp –n $sshd_file /etc/ssh/sshd_config.bak
sed –i “s|#\?RSAAuthentication.*|RSAAuthentication yes|” $sshd_file
sed –i “s|#\?PubkeyAuthentication.*|PubkeyAuthentication yes|” $sshd_file
sed –i “s|#AuthorizedKeysFile .ssh/authorized_keys|AuthorizedKeysFile .ssh/authorized_keys|” $sshd_file
#sed -i “s|#\?PasswordAuthentication.*|PasswordAuthentication no|” $sshd_file
#sed -i “s|#\?PermitRootLogin.*|PermitRootLogin no|” $sshd_file
systemctl restart sshd;systemctl restart ssh;service sshd restart;service ssh restart

如果只需要用ROOT用户，可以省略添加用户的步骤，一键脚本如下：

#pubkey=”$(wget -qO- https://直链)”
pubkey=“ssh-xxxxx” #这里改成你的公钥
mkdir –p /root/.ssh/
chmod 700 /root/.ssh/
echo $pubkey > /root/.ssh/authorized_keys
chmod 600 /root/.ssh/authorized_keys
sshd_file=“/etc/ssh/sshd_config”
cp –n $sshd_file /etc/ssh/sshd_config.bak
sed –i “s|#\?RSAAuthentication.*|RSAAuthentication yes|” $sshd_file
sed –i “s|#\?PubkeyAuthentication.*|PubkeyAuthentication yes|” $sshd_file
sed –i “s|#AuthorizedKeysFile .ssh/authorized_keys|AuthorizedKeysFile .ssh/authorized_keys|” $sshd_file
sed –i “s|#\?PasswordAuthentication.*|PasswordAuthentication no|” $sshd_file
sed –i “s|#\?PermitRootLogin.*|PermitRootLogin yes|” $sshd_file
systemctl restart sshd;systemctl restart ssh;service sshd restart;service ssh restart