linux 远程连接管理

1.Openssh服务
S以在本地主机和远程服务器之间进行加密地传输数据，实现数据的安全。OpenSSH是SSH协议的免费开源实现
当主机开启了openssh服务就意味着开启了远程连接的接口

SSH的工作原理
SSH是由服务端和客户端组成，服务端是一个守护进程，它在后台运行并响应来自客户端的连接请求
openssh服务的服务端是 sshd
openssh服务的客户端是ssh
实验准备
打开两台虚拟机分别配置IP为192.168.0.155/192.168.0.131只要不同即可

服务端：
hostnamectl set-hostname service.com 更改名字方便区分
[root@service ~]# ifconfig 查看IP 192.168.0.155
客户端：
hostnamectl set-hostname client.com 更改名字方便区分
[root@client ~]ifconfig 查看IP 192.168.0.131
客户端连接需要密码:
[root@client ~]# rm -fr /root/.ssh/ 删除.ssh目录

[root@client ~]# ssh root@192.168.0.155  连接服务端，目录会自动生成
The authenticity of host ' 192.168.0.155 ( 192.168.0.155)' can't be established.
ECDSA key fingerprint is b1:05:1c:1c:99:8d:fd:26:e7:d9:62:3c:32:4d:91:66.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added ' 192.168.0.155' (ECDSA) to the list of known hosts.
root@ 192.168.0.155's password: 
Last login: Thu Jun 14 08:33:55 2018 from  192.168.0.155

[root@service ~]# exit
logout
Connection to 192.168.0.155 closed.
[root@client ~]# cd /root/.ssh/ 切换到.ssh路径
[root@client .ssh]# ls 查看已经有了连接
known_hosts

在服务端：
[root@service ~]# rm -fr /root/.ssh/ 删除.ssh目录

[root@service ~]# ssh root@ 192.168.0.131  连接客户端生成目录
The authenticity of host '  192.168.0.131( 192.168.0.131)' can't be established.
ECDSA key fingerprint is 1c:8a:8c:8e:fe:33:f3:7a:9d:70:11:f9:9a:57:6c:23.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added ' 192.168.0.131' (ECDSA) to the list of known hosts.
root@172.25.254.221's password: 
Last login: Thu Jun 14 08:21:20 2018 from 172.25.254.84
[root@client ~]# exit
logout
Connection to  192.168.0.131 closed.

[root@service ~]# cd /root/.ssh/ 切换到.ssh路径
[root@service .ssh]# ls 已经有了连接
known_hosts

在服务端：
生成锁和钥匙：
[root@service .ssh]# ssh-keygen 生成密钥的命令

Generating public/private rsa key pair.
Enter file in which to save the key (/root/.ssh/id_rsa): 保存加密字符的文件用默认
Enter passphrase (empty for no passphrase):  可以为空，如果不想为空必须大于4位
Enter same passphrase again: 
Your identification has been saved in /root/.ssh/id_rsa. 私钥
Your public key has been saved in /root/.ssh/id_rsa.pub. 公钥
The key fingerprint is:
4c:ce:8b:d0:98:b5:c5:5c:e3:72:a9:11:9b:e0:b6:ce root@service.com
The key's randomart image is:
+--[ RSA 2048]----+
|      . . o      |
|     . + * o     |
|      + X +      |
|     * O =       |
|    + + S        |
|     + . .       |
|      E .        |
|                 |
|                 |
+-----------------+

[root@service .ssh]# ls
id_rsa id_rsa.pub known_hosts

加密ssh用户的认证：
[root@service .ssh]# ssh-copy-id -i /root/.ssh/id_rsa.pub root@192.168.0.155 对服务端进行加密
ssh-copy-id 加密命令
-i 指定密钥
/root/.ssh/id_rsa.pub 密钥
root 加密用户
192.168.0.155 主机ip
[root@service .ssh]# ls 已经生成锁文件
authorized_keys id_rsa id_rsa.pub known_hosts

验证：

[root@service .ssh]# scp /root/.ssh/id_rsa root@ 192.168.0.131:/root/.ssh/
root@ 192.168.0.131's password: 
id_rsa                                        100% 1675     1.6KB/s   00:00      解密文件传输到客户端

在客户端：
[root@client .ssh]# ls 查看已经有了私钥
id_rsa known_hosts
[root@client .ssh]# ssh root@ 192.168.0.155 可以免密连接
Last login: Thu Jun 14 08:41:02 2018 from 192.168.0.131
[root@service ~]# exit 退出
logout
Connection to 192.168.0.155 closed.

在服务端：
[root@service .ssh]# rm -fr authorized_keys 当此文件被删除，客户端解密文件失效
[root@service .ssh]# ls 查看已经被删除
id_rsa id_rsa.pub known_hosts

在客户端：
[root@client .ssh]# ssh root@ 192.168.0.155 连接需要密码
root@ 192.168.0.155’s password:
Last login: Thu Jun 14 08:49:10 2018 from 192.168.0.131
[root@service ~]# exit 退出
logout
Connection to 192.168.0.155 closed.

在服务端：
[root@service .ssh]# scp /root/.ssh/id_rsa.pub /root/.ssh/authorized_keys 从新生成锁文件，解密文件功能恢复
[root@service .ssh]# ls 查看已经生成锁文件
authorized_keys id_rsa id_rsa.pub known_hosts

在客户端：
[root@client .ssh]# ssh root@ 192.168.0.155 可以免密连接
Last login: Thu Jun 14 08:49:35 2018 from 192.168.0.131
[root@service ~]# exit 退出
logout
Connection to 192.168.0.155 closed.
[root@client .ssh]# rm -fr id_rsa 在客户端删除私钥之后也没办法免密执行
[root@client .ssh]# ls 查看已经删除私钥
known_hosts
[root@client .ssh]# ssh root@ 192.168.0.155 连接需要密码
root@ 192.168.0.155’s password:
Last login: Thu Jun 14 08:50:10 2018 from 192.168.0.131
[root@service ~]# exit 退出
logout
Connection to 192.168.0.155 closed.

在服务端：

[root@service .ssh]# scp /root/.ssh/id_rsa root@ 192.168.0.131:/root/.ssh/  重新发送解密文件
root@ 192.168.0.131's password: 
id_rsa                                        100% 1675     1.6KB/s   00:00

在客户端：
[root@client .ssh]# ls 查看已经有了私钥
id_rsa known_hosts
[root@client .ssh]# ssh root@ 192.168.0.155 可以免密连接
Last login: Thu Jun 14 08:50:23 2018 from 192.168.0.131
[root@service ~]# exit 退出
logout
Connection to 192.168.0.155 closed.

文件传输·
1.从服务器上下载文件

scp username@servername:/path/filename /var/www/local_dir（本地目录）

2.上传本地文件到服务器

scp /path/filename username@servername:/path

3.从服务器下载整个目录

scp -r username@servername:/var/www/remote_dir/（远程目录） /var/www/local_dir（本地目录）

4.上传目录到服务器

scp -r local_dir username@servername:remote_dir