write basic ssh
This commit is contained in:
parent
c4313277e8
commit
93a48fded8
89
networking/ssh.md
Normal file
89
networking/ssh.md
Normal file
@ -0,0 +1,89 @@
|
||||
---
|
||||
title: "ssh"
|
||||
tags: [ "networking" ]
|
||||
---
|
||||
# Basic `ssh`
|
||||
|
||||
Try out basic ssh by accessing `git.charm.sh`, without needing authentication:
|
||||
|
||||
|
||||
```bash
|
||||
ssh git.charm.sh
|
||||
```
|
||||
|
||||
Start an ssh server to try it out.
|
||||
The ssh server is sometimes in a package called `openssh`, and sometimes only in `openssh-server`.
|
||||
|
||||
Once it's installed, check it's working:
|
||||
|
||||
```bash
|
||||
sudo systemctl status ssh
|
||||
```
|
||||
|
||||
If that doesn't work, the service may be called `sshd`.
|
||||
|
||||
```bash
|
||||
sudo systemctl status sshd
|
||||
```
|
||||
|
||||
Then start that service:
|
||||
|
||||
```bash
|
||||
sudo systemctl start sshd
|
||||
```
|
||||
Test it works by using ssh into your own system, from inside:
|
||||
|
||||
|
||||
```bash
|
||||
ssh $USER@localhost
|
||||
```
|
||||
|
||||
Access the computer from another computer on the same local network by finding your computer's IP address.
|
||||
|
||||
|
||||
```bash
|
||||
ip address | grep inet
|
||||
```
|
||||
|
||||
Here is mine:
|
||||
|
||||
|
||||
> inet 127.0.0.1/8 scope host lo
|
||||
>
|
||||
> inet6 ::1/128 scope host noprefixroute
|
||||
>
|
||||
> inet 192.168.0.12/24 brd 192.168.0.255 scope global dynamic noprefixroute en
|
||||
|
||||
|
||||
The first one starts `127`, which means it returns back to that computer (like `localhost`).
|
||||
The second is an ipv6 address, which is too angelic for this world, and has yet to ascend.
|
||||
The third will work from a remote computer.
|
||||
|
||||
|
||||
```bash
|
||||
ssh $USERNAME@IP_ADDRESS
|
||||
```
|
||||
|
||||
Once you have that, generate some ssh keys:
|
||||
|
||||
```bash
|
||||
ssh-keygen
|
||||
```
|
||||
|
||||
Look at your keys:
|
||||
|
||||
|
||||
```bash
|
||||
ls ~/.ssh
|
||||
```
|
||||
|
||||
You can share the one ending in `.pub` freely.
|
||||
The other is secret.
|
||||
|
||||
Now send those keys to a remote computer:
|
||||
|
||||
```bash
|
||||
ssh-copy-id $USERNAME@IP_ADDRESS
|
||||
```
|
||||
|
||||
Now you can log in without a password.
|
Loading…
Reference in New Issue
Block a user