spanskiblog/content/posts/SSH.md

1.4 KiB

+++ date="2022-12-25" author="spanskiduh" title="SSH" description="click to read about SSH" +++

SSH

basic

  • /etc/ssh/ssh_config - config location (client)
  • /etc/ssh/sshd_config - config location (server)

Enable encryption

  • ssh-keygen -t rsa - generate private and public key
  • ssh-copy-id <server-ip> - copy ssh identity to server

--> uncomment PasswordAuthentication no (on server) Warning store private key on a secure location, if you lose it, you will lose connection to a server!

SSH ECDSA (smaller keys)

Generate keypair

ssh-keygen -t ed25519 -f ~/.ssh/keys/id_ed2552_devel_server

Copy to remote

ssh-copy-id devel@devel.hsrv -i ~/.ssh/keys/id_ed25519_devel_server

FAIL2BAN

  • use it to secure ssh

SCP

  • scp <filename> <user@server_ip:/destination_folder> - copy file to server, same goes for rsync

SSH CONFIG FILE

example for github:

Host github.com
  User git
  Hostname github.com
  PreferredAuthentications publickey
  IdentityFile ~/.ssh/id_ed25519

exmaple for any server:

Host vpn.de 
  HostName vpn.de 
  IdentityFile ~/.ssh/keys/vpn_de
  Port 22
  User root

note: You should put your server's ip in /etc/hosts/ for easier migrations.

How to joke around with medic

oli@bert:~$ ssh tim
oli@tim:~$ export DISPLAY=:0
oli@tim:~$ firefox