云服务器ssh免密登陆

一、在本地客户端生成密钥

在终端执行ssh-keygen即可在本地客户端生成密钥，默认为rsa密钥。

下面会提示Enter passphrase (empty for no passphrase)，直接回车就好，不然以后用ssh克隆github项目或者其他一些涉及ssh的操作都会要你输这个密码，如果没有特殊安全要求建议不要设置密码，一逸永逸。

执行成功后默认会在当前用户的.ssh文件夹下生成私钥id_rsa和公钥id_rsa.pub。

atreus@MacBook-Pro % ssh-keygen
Generating public/private rsa key pair.
Enter file in which to save the key (/Users/atreus/.ssh/id_rsa): 
Enter passphrase (empty for no passphrase): 
Enter same passphrase again: 
Your identification has been saved in /Users/atreus/.ssh/id_rsa
Your public key has been saved in /Users/atreus/.ssh/id_rsa.pub
The key fingerprint is:
SHA256:kPGbgRZ4uMJnQSHBxlS6McnqoKTpHtUnJo9iE5VJcSs atreus@AtreusdeMacBook-Pro.local
The key's randomart image is:
+---[RSA 3072]----+
| ++*=+o          |
| .=+B o*         |
| o*E === o       |
| .+*. . +        |
|oo.* + .S        |
|*.o = o          |
|+* . .           |
|o +              |
|.o               |
+----[SHA256]-----+
atreus@MacBook-Pro % 

二、将公钥上传到服务器

通过ssh-copy-id -i 本地公钥文件路径 远程主机用户@远程主机ip命令便可以把本地的ssh公钥文件安装到远程主机对应的账户下。

安装成功后就可以免密登陆了！

atreus@MacBook-Pro % ssh-copy-id -i ~/.ssh/id_rsa.pub root@127.0.0.1
/usr/bin/ssh-copy-id: INFO: Source of key(s) to be installed: "/Users/atreus/.ssh/id_rsa.pub"
/usr/bin/ssh-copy-id: INFO: attempting to log in with the new key(s), to filter out any that are already installed
/usr/bin/ssh-copy-id: INFO: 1 key(s) remain to be installed -- if you are prompted now it is to install the new keys
root@127.0.0.1's password: 

Number of key(s) added:        1

Now try logging into the machine, with:   "ssh 'root@127.0.0.1'"
and check to make sure that only the key(s) you wanted were added.

atreus@MacBook-Pro %