Yadda ake haɗawa da uwar garken Linux ta hanyar SSH

Babbar hanyar haɗi zuwa sabar Linux ita ce ta hanyar yarjejeniyar SSH . Wannan nau'in haɗin yana da aminci, saboda duk bayanan da aka canjawa ta hanyarsa an ɓoye su. Domin kafa haɗin SSH ya kamata ka saita shi akan sabar nesa da kake son haɗawa da ita, da kuma abokin ciniki a gefen mai amfani. Akwai ɗimbin software don haɗin SSH. Dangane da Linux, fakitin OpenSSH shine mafi shahara kuma ga mutanen Windows galibi suna amfani da PuTTY.

Bari mu kalli tsarin uwar garken ta hanyar amfani da Ubuntu Server 18.04 a matsayin misali, sannan mu yi ƙoƙarin haɗi zuwa uwar garken daga Linux da Windows.

Duk abin da muke yi zai fito ne daga asusun mai amfani na yau da kullun. A wannan yanayin, mun ƙirƙiri wani mai amfani da kalmar " mihail ", kuma asusun " root " zai kashe ta hanyar tsoho.

Saitin gefen uwar garken

Saita kunshin yana gudanar da wannan umarni:

sudo apt install openssh-server

Bayan an gama shigarwa, tabbatar cewa sabis ɗin yana gudana. Yi amfani da wannan umarni:

systemctl status sshd

Matsayin " Active (aiki) " yana nufin cewa an kunna sabis ɗin kuma yana aiki yadda ya kamata.

Domin gujewa toshe hanyoyin shiga ta hanyar Tacewar zaɓi, tabbatar da cewa kun kashe shi, saboda ba za mu saita Firewall na cibiyar sadarwa a cikin wannan labarin ba.

Yi amfani da wannan umarni:

sudo ufw disable

A wannan mataki kuna iya riga haɗi zuwa uwar garken. Tare da saitunan saitunan tsoho yana ba da damar haɗi zuwa daidaitaccen tashar tashar jiragen ruwa 22 tare da ingantaccen tushen kalmar sirri.

Haɗin SSH daga Linux

A matsayinka na mai mulki, an shigar da abokin ciniki na OpenSSH akan Linux ta tsohuwa kuma baya buƙatar ƙarin saitin jagora. Ana iya kafa haɗin kai daga tasha tare da taimakon umarnin ssh. Ma'auni a wannan yanayin zai zama sunan mai amfani da adireshin IP na uwar garken nesa. A kan uwar garken gwajin mu da muke amfani da shi a matsayin misali akwai asusu guda ɗaya “mihail”, don haka za mu yi amfani da wannan.

ssh [email protected]

A farkon haɗin, dole ne ka tabbatar da ƙara maɓallin jama'a na uwar garken zuwa ga rumbun adana bayanai, don haka amsa " eh ". Bayan haka za ka iya shigar da kalmar sirri. Idan an yi nasarar haɗa haɗin, za ka ga saƙon maraba na layin umarnin uwar garken. Yanzu duk umarnin za a aiwatar da su kai tsaye a kan uwar garken nesa.

SSH daga Windows

Buɗe Putty kuma saita sigogin haɗi. Tabbatar cewa an juya maɓallin " Nau'in Haɗin " zuwa SSH . Shigar da adireshin IP a cikin filin " Sunan Mai masaukin baki ", ƙimar tsoho 22 zuwa " Tashar Jiragen Ruwa " sannan danna " Buɗe ".

A farkon haɗin, Putty zai nemi ka tabbatar da cewa ka amince da wannan sabar, don haka danna " Ee ".

Bayan ka shigar da login da kalmar sirri, za ka ga layin umarni na sabar nesa.

Tabbatarwa ta maɓalli. Ƙara matakin tsaro

Lokacin da abokin ciniki ke ƙoƙarin kafa amintaccen haɗi zuwa uwar garken ta hanyar SSH, kafin barin haɗin uwar garken yana buƙatar tantance (tabbatar) abokin ciniki. Kamar yadda aka ambata a baya, ana amfani da ingantaccen tushen kalmar sirri ta tsohuwa. Ba ya samar da ingantaccen tsaro, domin koyaushe akwai hanyar da za a murkushe shi. Bayan haka, tabbatar da kalmar wucewa baya amfani da haɗin SSH tare da amfani da rubutun.

Don irin wannan nau'in ayyuka akwai hanyar tantancewa ta musamman ta maɓalli. Ma'anar ita ce abokin ciniki yana samar da maɓallan sirri da na jama'a sannan a aika da maɓallin jama'a zuwa uwar garken. Bayan haka ba kwa buƙatar kalmar sirri don haɗawa da uwar garken, saboda ana gudanar da tantancewa ta hanyar maɓallan jama'a da na sirri. Don samar da kyakkyawan matakin tsaro, damar shiga maɓalli na sirri yakamata a iyakance. Saboda gaskiyar cewa an adana maɓallin keɓaɓɓen a gefen abokin ciniki kuma ba a canza shi ta hanyar hanyar sadarwa ba, an yi imanin wannan hanyar ta fi tsaro.

Tabbatarwa ta maɓalli akan Linux

Bari mu samar da maɓallan jama'a da na sirri akan abokin ciniki tare da taimakon ssh-keygen software mai amfani. Kayan aikin zai ba da shawarar canza hanya zuwa maɓalli na sirri kuma shigar da kalmar wucewa don ƙarin tsaro. Bar duk sigogi ta tsohuwa ta latsa Shigar a duk buƙatun.

Sakamakon haka, a cikin babban fayil ɗin gida a cikin babban fayil ɗin .ssh za ku sami fayiloli guda biyu da aka samar: id_rsa da id_rsa.pub waɗanda ke ɗauke da maɓallan sirri da na jama'a daidai gwargwado.

Bayan haka, za ku buƙaci aika maɓallin jama'a zuwa uwar garken. Domin yin hakan, kwafi abubuwan da ke cikin fayil ɗin " id_rsa.pub " zuwa fayil ɗin " ~/.ssh/authorized_keys " akan uwar garken. Bari mu tafi hanya mafi sauƙi tare da taimakon kayan aikin " ssh-copy-id ". Shigar da adireshin shiga da adireshin IP na uwar garken, kamar yadda yake tare da haɗin kai na yau da kullun. Bayan kun shigar da kalmar sirri, maɓallin jama'a na abokin ciniki za a kwafi ta atomatik zuwa uwar garken. Gudanar da wannan umarni:

ssh-copy-id [email protected]

Bayan kun yi duk wannan, uwar garken ba zai buƙaci shigar da kalmar wucewa ba kuma.

Tabbatarwa ta maɓalli akan Windows

Buɗe PUTTYGEN ka danna “ Ƙirƙira ”. Domin samar da maɓallan, kawai kana buƙatar motsa linzamin kwamfuta a kan allo kuma kayan aikin zai samar da maɓallan bazuwar.

Bayan an ƙirƙiri maɓallan, danna " Save private key " sannan ka ajiye shi a cikin fayil ɗin tare da maɓallin sirri akan faifai ɗinka. Za ka iya saita duk hanyar da kake so, amma bayan ɗan lokaci kaɗan za ka buƙaci ka ƙayyade shi a cikin Putty. Sannan ka kwafi maɓallin jama'a daga saman taga.

Bari mu aika da maɓallin jama'a ta hanyar kwafi shi zuwa tashar. Buɗe Putty kuma haɗa zuwa sabar kamar yadda aka saba. Yanzu bari mu ƙirƙiri " .ssh/authorized_keys " kuma mu takaita sauran masu amfani daga samun damar fayil ɗin, don haka yana samuwa ga mai ƙirƙira kawai.

mkdir .ssh
touch .ssh/authorized_keys
chmod 700 .ssh
chmod 600 .ssh/authorized_keys

Bayan ƙirƙirar fayil ɗin, sanya maɓallin jama'a na abokin ciniki a ciki. A matakin baya mun kwafi maɓalli na jama'a zuwa allo. Don yin rikodin abin da ke cikin allo zuwa fayil ɗin yi amfani da umarnin cat da jujjuyawar fitarwa.

cat > .ssh/authorized_keys

Bayan ka shigar da umarnin, danna maɓallin linzamin kwamfuta na dama a cikin taga na ƙarshe sannan ka liƙa abin da ke cikin allo. Don tabbatar da shigarwar, danna gajeriyar hanyar " Ctrl+D " sannan ka cire haɗin daga sabar.

Yanzu bari mu saka hanyar zuwa maɓalli na sirri a Putty kuma mu sake haɗawa da uwar garken.

Daga yanzu, don haɗi zuwa uwar garken kuna buƙatar shigar da sunan mai amfani kawai. Idan kuna ƙoƙarin haɗawa da uwar garken daga wata na'urar da ba ta da maɓalli na sirri daidai, uwar garken zai buƙaci kalmar sirri. Bayan an saita ingantaccen tushen maɓalli, zaku iya hana shiga ta kalmar sirri.