heckyel/book
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

[ssh]: update

Browse Source
This commit is contained in:
Jesús 2021-05-23 15:15:48 -05:00
parent f0ba596bb1
commit 0cedeb0f68
No known key found for this signature in database
GPG Key ID: F6EE7BC59A315766
1 changed files with 15 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
ssh/README.md
View File

@ -16,7 +16,7 @@ $ chmod 600 ~/.ssh/id_ed25519
To connect to a server, run: To connect to a server, run:
``` ```console
$ ssh -p port user@server-address $ ssh -p port user@server-address
``` ```
@ -25,15 +25,17 @@ $ ssh -p port user@server-address
#### Copy SSH key #### Copy SSH key
1. `sudo apt-get install xclip` or `sudo pacman -S xclip` 1. `sudo apt-get install xclip` or `sudo pacman -S xclip`
2. `xclip -sel clip < ~/.ssh/id_rsa.pub` 2. `xclip -sel clip < ~/.ssh/id_ed25519.pub`
#### Configuration #### Configuration
The client can be configured to store common options and hosts. All options can be declared globally or restricted to specific hosts. For example: The client can be configured to store common options and hosts. All options can be declared globally or restricted to specific hosts. For example:
```console
$ nano -w ~/.ssh/config
```
```bash ```bash
nano -w ~/.ssh/config
-------------------------------
# host-specific options # host-specific options
Host myserver Host myserver
HostName ssh.heckyel.ga HostName ssh.heckyel.ga
@ -61,15 +63,21 @@ The SSH daemon configuration file can be found and edited in /etc/ssh/sshd_confi
To allow access only for some users add this line: To allow access only for some users add this line:
```bash
AllowUsers user1 user2 AllowUsers user1 user2
```
To allow access only for some groups: To allow access only for some groups:
```bash
AllowGroups group1 group2 AllowGroups group1 group2
```
To add a nice welcome message (e.g. from the /etc/issue file), configure the Banner option: To add a nice welcome message (e.g. from the /etc/issue file), configure the Banner option:
```bash
Banner /etc/issue Banner /etc/issue
```
#### Securing the authorized_keys file #### Securing the authorized_keys file