SSH免密码登录配置

配置主机A免密登录到主机B

1. 在主机A生产密钥对，会在~/.ssh目录下产生2个密钥文件（ssh-keygen -t rsa 4个回车）：

$ ssh-keygen -t rsa
Generating public/private rsa key pair.
Enter file in which to save the key (/home/tangqh/.ssh/id_rsa): 
Enter passphrase (empty for no passphrase): 
Enter same passphrase again: 
Your identification has been saved in /home/tangqh/.ssh/id_rsa.
Your public key has been saved in /home/tangqh/.ssh/id_rsa.pub.
The key fingerprint is:
SHA256:EdyyfYD5h7t8TVV7DeGMg9ObvFsWPj0XAptx4QK6upU tangqh@builder.ubuntu16
The key's randomart image is:
+---[RSA 2048]----+
|       ..=   ... |
|        *.+o.+o .|
|       ..=o*+oo.+|
|        o.+oX+ .+|
|       .S  *+..o.|
|      . . .  ooo.|
|     . E . ..o=.o|
|      o   o .+..o|
|     .     ..    |
+----[SHA256]-----+
~/.ssh$ ll
total 24
drwx------  2 tangqh tangqh 4096 Mar 16 15:39 ./
drwxr-xr-x 16 tangqh tangqh 4096 Mar 16 15:30 ../
-rw-------  1 tangqh tangqh  796 Mar 16 14:10 authorized_keys
-rw-------  1 tangqh tangqh 1675 Mar 16 15:39 id_rsa
-rw-r--r--  1 tangqh tangqh  405 Mar 16 15:39 id_rsa.pub
-rw-r--r--  1 tangqh tangqh  886 Mar 11 16:33 known_hosts

2. 把公钥文件发送到主机B:

~/.ssh$scp ./id_rsa.pub tangqh@10.0.13.58:/tmp/id_rsa.pub

3. 将主机A的公钥加到主机B的授权列表~/.ssh/authorized_keys：

tangqh@builder:~$cat /tmp/id_rsa.pub >> ~/.ssh/authorized_keys

4. 若.ssh目录不存在则手动创建：权限700，用户和组改为主机B的登录用户
5. 若authorized_keys文件不存在则手动创建：权限600，用户和组改为主机B的登录用户

example：

tangqh@builder:~$ ll
drwx------  2 tangqh tangqh      4096 Mar 16 15:30 .ssh/
tangqh@builder:~/.ssh$ ll
-rw-------  1 tangqh tangqh  796 Mar 16 14:10 authorized_keys
tangqh@builder:~$ cat ~/.ssh/authorized_keys 
ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDU2BEjX+neo/Mgyl7/9TQR+Mhp9h37qXaIw6O+AE523dcNqmbwZEUHvhFpFulxUhXgHBPaoOPppHwrA2+qiOlzb1u54YQqirWV6ttzxmqZ3oDV6mpul3q5aDl3MFzs4akMukibaSK2EkuhEpuPAdj0zvdXiNUxhe6p47KmSoJO9srGQoSPp64q9i7OdaLTojVD23hU1yshKfbL4DzEdBpW71irrZgvJgKakIkvoHVBPUiEkmA86POGCTfI9Lo8QN1y3Q5qXtvguO9YAZlU6Q/+Pet361xT5ecgQRwURHpV0rw5E1O+48giTqsmtkPA4OBya5Xu3S7qWXzE5b7cWxgn yangzp1@xiaopeng.com
ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCkptFrkrMiVYLuLfJFnqK6P2qpqV/O6nQcML/JAM4MHAjlUhom0TNhtersRCPLxcmQ0+Bw4pwIgtbv6jgHp+N+3b0s5UhUa3pkumkGsIKsdHtvsvU4hjuOeS674YgpOuvK55hq2Aih8gSOaRgvIjYJNneeIo37kJmZS7dL0TLC/ve+EsYP+Wv//jmsMTmyHfqDpV/I+1tmVaIuMoAVNyZ/mj9akd8iTkn54Ec4Ze287lPAKbgyIcosM398qXHAIDjvG4ZrIsN7rnMt8mWF/0XAuUSVJQrxnK4pioOMfz6ii27wJalwLGU5pyYs0GBZ/+TnfrGRwMWEu2j0eZcT4Wpd hong@ubuntu