https://kkato.dev/tags/linux/ Recent content in Linux on kkato.dev https://kkato.dev/%3Clink%20or%20path%20of%20image%20for%20opengraph,%20twitter-cards%3E https://kkato.dev/%3Clink%20or%20path%20of%20image%20for%20opengraph,%20twitter-cards%3E Hugo -- 0.146.0 en Wed, 12 Jul 2023 21:23:52 +0900 https://kkato.dev/posts/pubkey-auth/ Wed, 12 Jul 2023 21:23:52 +0900 https://kkato.dev/posts/pubkey-auth/ <p>Linuxでの公開鍵認証の設定をよく忘れてしまうので、備忘録としてメモを残しておきます。</p> <h3 id="接続元での設定">接続元での設定</h3> <p>接続元で鍵を生成し、公開鍵を接続先のサーバーへコピーします。</p> <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-sh" data-lang="sh"><span class="line"><span class="cl">ssh-keygen </span></span><span class="line"><span class="cl">scp ~/id_rsa.pub username@server:~/ </span></span></code></pre></div><h3 id="接続先の設定">接続先の設定</h3> <p>接続先のサーバーで公開鍵の情報をauthorized_keysに登録し、適切な権限を設定します。</p> <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-sh" data-lang="sh"><span class="line"><span class="cl">mkdir ~/.ssh </span></span><span class="line"><span class="cl">chmod <span class="m">700</span> ~/.ssh </span></span><span class="line"><span class="cl">cat id_rsa.pub &gt;&gt; ~/.ssh/authorized_keys </span></span><span class="line"><span class="cl">chmod <span class="m">600</span> ~/.ssh/authorized_keys </span></span></code></pre></div><p>公開鍵認証を有効化し、パスワード認証を無効化します。</p> <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-sh" data-lang="sh"><span class="line"><span class="cl">sudo vi /etc/ssh/sshd_config </span></span><span class="line"><span class="cl">--- </span></span><span class="line"><span class="cl">PubkeyAuthentication yes </span></span><span class="line"><span class="cl">PasswordAuthentication no </span></span></code></pre></div><p>sshdを再起動します。</p> <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-sh" data-lang="sh"><span class="line"><span class="cl">systemctl restart sshd </span></span></code></pre></div>