玉环建设局网站,网站登录密码保存在哪里设置,平面设计网站大全网站,同学会网站建设方案概述
在大数据测试环境搭建时#xff0c;经常会用到 ssh 免密登录 #xff0c;方便机器之间分发文件#xff0c;从一个机器上登录至其它机器也方便
如何配置 linux 的 ssh 免密登录?
非免密登录
端口是22
[rootKS8P-Test-K8S06 ~]# ssh KS8P-Test-K8S06端口非22
[roo…概述
在大数据测试环境搭建时经常会用到 ssh 免密登录 方便机器之间分发文件从一个机器上登录至其它机器也方便
如何配置 linux 的 ssh 免密登录?
非免密登录
端口是22
[rootKS8P-Test-K8S06 ~]# ssh KS8P-Test-K8S06端口非22
[rootKS8P-Test-K8S05 ~]# ssh KS8P-Test-K8S05
ssh: connect to host ks8p-test-k8s05 port 22: Connection refused
[rootKS8P-Test-K8S05 ~]# ssh -p 42222 KS8P-Test-K8S05
The authenticity of host [ks8p-test-k8s05]:42222 ([10.32.36.135]:42222) cant be established.
ECDSA key fingerprint is SHA256:3/rSIOAKmq3TJ7ITPY4GBMmXn6VfAoJs6o2XB4Rv1A.
ECDSA key fingerprint is MD5:51:32:d3:ac:f1:99:b2:4e:73:c9:66:47:21:b6:94:e7.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added [ks8p-test-k8s05]:42222,[10.32.36.135]:42222 (ECDSA) to the list of known hosts.
rootks8p-test-k8s05s password:
Last login: Wed Oct 14 15:01:05 2020 from 10.35.233.99免密登录配置
生成密钥
连续回车一直到结束
[rootKS8P-Test-K8S05 ~]# ssh-keygen -t rsa
Generating public/private rsa key pair.
Enter file in which to save the key (/root/.ssh/id_rsa):
Enter passphrase (empty for no passphrase):
Enter same passphrase again:
Your identification has been saved in /root/.ssh/id_rsa.
Your public key has been saved in /root/.ssh/id_rsa.pub.
The key fingerprint is:
SHA256:0rtkCNXKmFhQ3PCMv1KHp7D6Bbw3lvbwdvth4b/4bU rootKS8P-Test-K8S05
The keys randomart image is:
---[RSA 2048]----
| .ooo |
| .... |
| o . |
| * |
| . B B S |
| B O . |
| % . o.|
| . * B o ... |
| ... .o..E.|
----[SHA256]-----执行以后会在~/.ssh目录下产生对应的公钥和密钥文件
[rootKS8P-Test-K8S05 ~]# ll ~/.ssh
总用量 16
-rw-------. 1 root root 399 10月 30 2019 authorized_keys
-rw------- 1 root root 1679 10月 14 15:28 id_rsa
-rw-r--r-- 1 root root 402 10月 14 15:28 id_rsa.pub
-rw-r--r-- 1 root root 206 10月 14 15:24 known_hosts本机上登录自己
[rootKS8P-Test-K8S05 ~]# cat ~/.ssh/id_rsa.pub ~/.ssh/authorized_keys
[rootKS8P-Test-K8S05 ~]# ssh -p 42222 KS8P-Test-K8S05
Last login: Wed Oct 14 15:47:43 2020 from 10.35.233.99配置/etc/hosts
先配置/etc/hosts 因为需要在主节点远程连接两个从节点所以需要让主节点能够识别从节点主机名使用主机名远程访问默认情况下只能使用ip远程访问想要使用主机名远程访问的话需要在节点的/etc/hosts文件中配置对应机器的ip和主机名信息
所以在这里需要在KS8P-Test-K8S06的/etc/hosts文件中配置下面信息最好将当前节点信息也配置到里面这样这个文件中的内容就通用了可以直接拷贝到另外两个从节点
[rootbigdata01 ~]# vi /etc/hosts
10.32.45.147 KS8U-Test-K8S06
10.32.36.135 KS8P-Test-K8S05
10.32.36.134 KS8P-Test-K8S04 有了以上配置在KS8U-Test-K8S06 上执行下面命令将公钥拷贝到两个节点 注意 对于非22端口 要写成
scp -P 42222 ~/.ssh/authorized_keys KS8P-Test-K8S05:~/分发将公钥拷贝到需要免密登录的机器上
rootKS8U-Test-K8S06 hadoop-3.2.0]# scp -P 42222 ~/.ssh/authorized_keys KS8P-Test-K8S05:~/
The authenticity of host [ks8p-test-k8s05]:42222 ([10.32.36.135]:42222) cant be established.
ECDSA key fingerprint is SHA256:3/rSIOAKmq3TJ7ITPY4GBMmXn6VfAoJs6o2XB4Rv1A.
ECDSA key fingerprint is MD5:51:32:d3:ac:f1:99:b2:4e:73:c9:66:47:21:b6:94:e7.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added [ks8p-test-k8s05]:42222,[10.32.36.135]:42222 (ECDSA) to the list of known hosts.
rootks8p-test-k8s05s password:
authorized_keys 后分别在KS8U-Test-K8S04与 KS8U-Test-K8S05上操作
[rootKS8P-Test-K8S05 ~]# cat ~/authorized_keys ~/.ssh/authorized_keys[rootKS8P-Test-K8S04 ~]# cat ~/authorized_keys ~/.ssh/authorized_keys测试
[rootKS8U-Test-K8S06 hadoop-3.2.0]# ssh -p 42222 KS8P-Test-K8S04
Last login: Thu Oct 15 00:19:08 2020 from 10.32.45.147
[rootKS8P-Test-K8S04 ~]# [rootKS8U-Test-K8S06 hadoop-3.2.0]# ssh -p 42222 KS8P-Test-K8S05
Last login: Wed Oct 14 15:49:49 2020 from 10.32.36.135
[rootKS8P-Test-K8S05 ~]# 结束
ssh免密登录至此结束
