Linux兩台主機之間建立信任

標籤：複製   密碼   node   cas   免密   val   color   ssh   add   

背景： 有時候我們在兩個主機之間複製檔案的時候，提示輸入密碼，很不方便，那如何免密碼複製呢？，就是使用通過linux公開金鑰和秘鑰，建立雙機信任關係。

1. 產生秘鑰，並添加信任

我的環境中node1的ip是192.168.168.201，node2的ip是192.168.168.202.

[[email protected] ~]# ssh-keygen -t rsa -P ‘‘ -f ~/.ssh/id_rsa         #產生rsa[[email protected] ~]# ssh-copy-id -i  ~/.ssh/id_rsa.pub [email protected]192.168.168.202  #複製公開金鑰[[email protected] ~]# ssh-keygen -t rsa -P ‘‘ -f ~/.ssh/id_rsa         #產生rsa[[email protected] ~]# ssh-copy-id -i  ~/.ssh/id_rsa.pub [email protected]192.168.168.201  #複製公開金鑰

2.測試

[[email protected] ~]# ssh 192.168.168.202 ‘ip addr show dev eth0 ‘2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000    link/ether 00:50:56:3f:42:13 brd ff:ff:ff:ff:ff:ff    inet 192.168.168.202/24 brd 192.168.168.255 scope global eth0    inet6 fe80::250:56ff:fe3f:4213/64 scope link        valid_lft forever preferred_lft forever[[email protected] ~]# ssh 192.168.168.201 ‘ip addr show dev eth0‘2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000    link/ether 00:0c:29:c9:20:88 brd ff:ff:ff:ff:ff:ff    inet 192.168.168.201/24 brd 192.168.168.255 scope global eth0    inet 192.168.168.200/24 brd 192.168.168.255 scope global secondary eth0    inet6 fe80::20c:29ff:fec9:2088/64 scope link        valid_lft forever preferred_lft forever

 

Linux兩台主機之間建立信任