terraform登录ec2实例

andyliuzhii

已于 2022-06-25 18:59:15 修改

阅读量875

点赞数

分类专栏：云计算文章标签： aws 云计算

于 2022-05-03 17:33:36 首次发布

本文链接：https://blog.csdn.net/andyliuzhii/article/details/124558467

版权

云计算专栏收录该内容

11 篇文章 0 订阅

订阅专栏

本文档详细介绍了如何使用SSH密钥对在AWS EC2上创建实例，并通过Terraform进行配置管理。步骤包括：1) 使用ssh-keygen生成密钥对；2) 在Terraform配置文件中指定密钥启动EC2实例；3) 使用私钥通过SSH登录实例；4) 从AWS控制台生成pem文件并进行SSH连接。此外，还提供了PuTTY作为Windows登录EC2的工具。

摘要由CSDN通过智能技术生成

1、Generate key-pair(public key, private key) using ssh keygen
ssh-keygen -t rsa -b 2048
生成秘钥保存到 /home/rahul/Jhooq/keys/aws/aws_key, 在/home/rahul/Jhooq/keys/aws/出现两个文件
aws_key (private key)
aws_key.pub (public key)
当通过key pair生成私钥时，可以再用puttygen生成对应的公钥，puttygen生成.ppk文件用来登录；
（尤其适应当情况4生成的pem私钥文件）

AWS 创建EC2及使用ssh登录_Andy____Li的博客-CSDN博客_aws ssh

AWS 创建EC2及使用ssh登录_Andy____Li的博客-CSDN博客_aws sshAWS EC2创建的区域即右上角你选择的服务器决定。目前成都测试，下午电信联通环境下，都是绕北京到AWS 日本首尔线路十分拥堵掉包严重，所以建议可以考虑AWS 新加坡区域，测试发现是直接从香港出海，掉包率较低。1 AWS后台创建EC2实例1 登录AWS EC2控制台并选择EC2服务进入EC2控制界面点击启动实例（确定拥有足够权限）2 选择你需要为EC2预装的操作系统版本，这里我选择ubu...https://blog.csdn.net/m0_37263637/article/details/91045566

2、Use public key to start EC2 instance
参见aws_instance 文件中main.tf内容

provider "aws" {
region = "us-east-1"
access_key = "AKIAYNQ5KD5LOLCBDJOP"
secret_key = "RiK6l8t+bpsw93NsZDfw4deEOcCiA9m9VsdVq/wt"
}

resource "aws_instance" "ec2_example" {

ami = "ami-0022f774911c1d690"
instance_type = "t2.micro"
key_name= "aws_key"
vpc_security_group_ids = [aws_security_group.main.id]

provisioner "remote-exec" {
inline = [
"touch hello.txt",
"echo helloworld remote provisioner >> hello.txt",
]
}
connection {
type = "ssh"
host = self.public_ip
user = "ec2-user"
private_key = file("../aws_key.pem") ##私钥文件
timeout = "4m"
}
}

resource "aws_security_group" "main" {
egress = [
{
cidr_blocks = [ "0.0.0.0/0", ]
description = ""
from_port = 0
ipv6_cidr_blocks = []
prefix_list_ids = []
protocol = "-1"
security_groups = []
self = false
to_port = 0
}
]
ingress = [
{
cidr_blocks = [ "0.0.0.0/0", ]
description = ""
from_port = 22
ipv6_cidr_blocks = []
prefix_list_ids = []
protocol = "tcp"
security_groups = []
self = false
to_port = 22
}
]
}

resource "aws_key_pair" "deployer" {
key_name = "aws_key"
public_key = "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8Sic9GXwZHRtXeCTDV8Ns7UbVTYnfc280HZaPIFTG1o+kxzt07tHYAPfgdysxayda/zRaYSZHuIIbhQt8foRs5Ctpz189ALSmtd8vnBF2Tnf0/8EoqkZsl4Nc6hK1ee7QEJ6Yo8JZYq75zBfIMSyTWE84VhUXpTVhoUCDLbVlxgH8od7mOhgoHOuDBTsZTxo/XyQ7diNzBO1+v1ne6AEaOCLJRuzIea5rPEE4GpvuBajTpUA6d1J2OeaLOIl9NZcWpVOvZtsrRYHoE+HgQNDrF9ItePVFUqcmogrHhLNU5Bxs5PA8LnqoPSZYW91EG/cSp5V2OYM2y4A25myb7gDX 86176@DESKTOP-CVS925O" ##公钥
}

3. Use private key ‘aws_key’ to SSH into EC2 instance
ssh -i "aws_key" ubuntu@ec2-18-185-22-181.eu-central-1.compute.amazonaws.com
4. Generate pem file from AWS console and use the file to SSH into EC2
登录时需要改动权限chmod 400 aws_key.pem，win10下文件权限修改参见https://blog.csdn.net/qq_41554005/article/details/118341781
ssh -i "aws_key.pem" ubuntu@ec2-52-58-111-83.eu-central-1.compute.amazonaws.com

具体参考 https://jhooq.com/terraform-ssh-into-aws-ec2/

putty登录使用 PuTTY 从 Windows 连接到 Linux 实例 - Amazon Elastic Compute Cloud

Terraform 实战：Terraform入门_人邮异步社区的博客-CSDN博客_terraform入门

附录：

私钥：

公钥：

ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5iPt04KuyWKlCRscGi8CRQLcBNiUOX8oZP9JM0IQvLDdtCYLTT+Jl9WrUtXQkwqu/EF5MIfU9fpR8HXYJpjGiivJA/YL37SjPVnjC//ut5Gm5f1hE5u2IgqaxjiB9IdcE+uZn3BXsBQ2emrxXKvbLgk2bJ2S0eBSWhNV6+peydwPkFIN8pRbil56GrQ0XFAtXBekAU7GmoTePQBIySUxI1++r5AgDhTErn/ze+9VlFL7wvMaemw7AvHb10TghBZ8a4xgOXRrUcAdOigh68HjsUKcZFpQ/1ccT2+AXwOz3v1ttK7fzAcVTf/Bit3RMWmiyJ/dHD1jIbaPvw/bH67ub 86176@DESKTOP-CVS925O