Karatasi ya Maelezo ya SSH

Zana zote
Bila Malipo

Rejeleo linalotafutika na linaloweza kuchapishwa la SSH — kuunganisha, funguo, usanidi, tunneling, SCP/SFTP na agent forwarding. Bila malipo.

Connecting

10
ssh user@host
Connect as user to host
ssh -p 2222 user@host
Connect on a non-default port
ssh -i ~/.ssh/id_ed25519 user@host
Use a specific identity key
ssh user@host 'uptime'
Run a single remote command and exit
ssh -v user@host
Verbose output for debugging (-vvv for more)
ssh -t user@host 'sudo -i'
Force a pseudo-terminal (for interactive cmds)
ssh -X user@host
Enable X11 forwarding
ssh -o ServerAliveInterval=60 user@host
Send keepalives to avoid timeouts
exit / Ctrl-D
Close the remote session
~.
Force-disconnect a frozen session

Key generation

8
ssh-keygen -t ed25519 -C 'you@example.com'
Generate a modern Ed25519 key pair
ssh-keygen -t rsa -b 4096
Generate a 4096-bit RSA key pair
ssh-keygen -t ed25519 -f ~/.ssh/work
Write the key to a specific file
ssh-keygen -p -f ~/.ssh/id_ed25519
Change the passphrase of an existing key
ssh-keygen -y -f ~/.ssh/id_ed25519
Print the public key from a private key
ssh-keygen -l -f ~/.ssh/id_ed25519.pub
Show a key fingerprint
ssh-keygen -lv -f ~/.ssh/id_ed25519.pub
Show the fingerprint randomart image
ssh-keygen -R host
Remove a host key from known_hosts

Installing public keys

7
ssh-copy-id user@host
Copy your default public key to the server
ssh-copy-id -i ~/.ssh/work.pub user@host
Copy a specific public key
ssh-copy-id -p 2222 user@host
Copy the key over a custom port
cat ~/.ssh/id_ed25519.pub | ssh user@host 'cat >> ~/.ssh/authorized_keys'
Manual copy when ssh-copy-id is missing
chmod 700 ~/.ssh
Correct permissions on the .ssh directory
chmod 600 ~/.ssh/authorized_keys
Correct permissions on authorized_keys
pbcopy < ~/.ssh/id_ed25519.pub
Copy public key to clipboard (macOS)

SSH config (~/.ssh/config)

10
Host myserver
Alias: connect with `ssh myserver`
HostName 203.0.113.10
Real hostname or IP for the alias
User deploy
Default username for this host
Port 2222
Default port for this host
IdentityFile ~/.ssh/work
Key to use for this host
IdentitiesOnly yes
Only offer the listed key
ForwardAgent yes
Forward the SSH agent to this host
Host *.example.com
Wildcard match for a domain
Host *
Global defaults for all hosts
ServerAliveInterval 60
Keepalive interval for all hosts

Port forwarding / tunneling

7
ssh -L 8080:localhost:80 user@host
Local: reach host:80 via local 8080
ssh -L 5432:db.internal:5432 user@host
Local forward to a third host through the server
ssh -R 9000:localhost:3000 user@host
Remote: expose your local 3000 as host:9000
ssh -D 1080 user@host
Dynamic: SOCKS proxy on local port 1080
ssh -N -L 8080:localhost:80 user@host
Tunnel only, do not run a remote shell
ssh -f -N -L 8080:localhost:80 user@host
Open the tunnel in the background
ssh -g -L 8080:localhost:80 user@host
Allow other hosts to use the local forward

Jump hosts / bastions

5
ssh -J jump@bastion user@target
Hop through a bastion to reach the target
ssh -J h1,h2 user@target
Chain multiple jump hosts
ProxyJump bastion
Config equivalent of -J
ProxyCommand ssh -W %h:%p bastion
Older ProxyCommand-based jump
ssh -o ProxyJump=bastion user@target
Inline ProxyJump option

File transfer (scp & sftp)

7
scp file user@host:/path/
Copy a local file to the server
scp user@host:/path/file .
Copy a remote file to the current dir
scp -r dir/ user@host:/path/
Recursively copy a directory
scp -P 2222 file user@host:/path/
Copy over a custom port (note capital -P)
sftp user@host
Start an interactive SFTP session
put localfile / get remotefile
Upload / download inside SFTP
rsync -avz -e ssh dir/ user@host:/path/
Efficient sync over SSH (resumable)

ssh-agent & forwarding

7
eval "$(ssh-agent -s)"
Start the agent in the current shell
ssh-add ~/.ssh/id_ed25519
Add a key to the agent
ssh-add -l
List keys loaded in the agent
ssh-add -D
Remove all keys from the agent
ssh-add --apple-use-keychain ~/.ssh/id_ed25519
Store passphrase in macOS keychain
ssh -A user@host
Forward the agent for this connection
ForwardAgent yes
Config equivalent of agent forwarding

Hakuna kipengele kinacholingana na “:q”.

Kuhusu Karatasi ya Maelezo ya SSH

Karatasi hii ya kumbukumbu ya SSH inakusanya amri na mipangilio unayohitaji kufanya kazi na seva za mbali: kuunganisha, kuzalisha funguo, kusakinisha funguo za umma, faili ya ~/.ssh/config, uelekezaji wa bandari na njia za handaki, seva za kupitia na bastions, uhamishaji wa faili kwa scp na sftp, na ssh-agent pamoja na uelekezaji wa wakala.

Sintaksia ya SSH ni rahisi kusahaulika kwa nusu — ni -L au -R kwa handaki hilo, ni alama zipi za ssh-keygen zinazozalisha ufunguo wa kisasa, ProxyJump inafanyaje kazi? Kila safu mlalo hapa hujibu moja ya maswali hayo kwa amri kamili na maelezo ya mstari mmoja.

Karatasi ni bure na inaonyeshwa kikamilifu kwenye kivinjari chako. Ichuje papo hapo kwa utafutaji, ruka hadi sehemu kupitia orodha ya yaliyomo inayoning'inia, nakili amri yoyote kwa mbofyo mmoja na uichapishe kwa ajili ya nyakati ambazo SSH ndiyo hasa iliyoharibika.

Jinsi ya kutumia Karatasi ya Maelezo ya SSH

  1. Fungua karatasi na pitia sehemu, kuanzia Kuunganisha na Kuzalisha funguo hadi ssh-agent na uelekezaji.
  2. Tafuta neno kama tunnel, scp au ProxyJump ili kuchuja amri papo hapo.
  3. Ruka hadi Uelekezaji wa bandari / handaki au Mipangilio ya SSH kupitia upau wa pembeni unaoning'inia unapohitaji mbinu maalum.
  4. Bofya amri au ikoni yake ya kunakili ili kuinakili, kisha ubadilishe nafasi za mwenyeji na bandari.
  5. Chapisha karatasi ili kuwa na nakala ya nje ya mtandao kwa ajili ya dharura za seva.

Maswali yanayoulizwa mara kwa mara

Sehemu nane: kuunganisha, kuzalisha funguo, kusakinisha funguo za umma, faili ya ~/.ssh/config, uelekezaji wa bandari na handaki, seva za kupitia na bastions, uhamishaji wa faili kwa scp na sftp, na ssh-agent pamoja na uelekezaji.

Ndiyo. Sehemu ya handaki inaonyesha aina za -L na -R bega kwa bega pamoja na maelezo ya mwelekeo unaoelekezwa na kila moja, pamoja na uelekezaji wa mienendo — moja ya sehemu zinazochanganya zaidi za SSH.

Ndiyo. Kuna sehemu za kuzalisha funguo kwa ssh-keygen na za kusakinisha ufunguo wako wa umma kwenye seva, pamoja na amri za wakala za kupakia na kuelekeza funguo.

Ndiyo. Kubofya amri yoyote, au ikoni ya kunakili kwenye safu mlalo yake, hunakili kwenye clipboard yako ili uweze kuibandika kwenye terminal na kubadilisha mwenyeji wako.

Ndiyo, ni bure, hauhitaji akaunti na inachapishwa vizuri kwa matumizi ya nje ya mtandao.
Shiriki hii
Zana Zinazohusiana
Karatasi ya Maelezo ya Shell Rejeleo linalotafutika na linaloweza kuchapishwa la Bash / shell — usogezaji, mafaili, pipes, viwakilishi, loops, masharti na one-liners za manufaa. Bila malipo. Bila Malipo
Karatasi ya Maelezo ya Vim Rejeleo linalotafutika na linaloweza kuchapishwa la Vim — modes, motions, kuhariri, kutafuta na kubadilisha, madirisha, buffers na registers. Bila malipo. Bila Malipo
Karatasi ya Maelezo ya VS Code Rejeleo linalotafutika na linaloweza kuchapishwa la Visual Studio Code — njia za mkato za kibodi za kuhariri, usogezaji, multi-cursor, kutafuta na terminali. Bila malipo. Bila Malipo
Karatasi ya Maelezo ya JavaScript Rejeleo linalotafutika na linaloweza kuchapishwa la JavaScript ya kisasa — sintaksia, safu, mifuatano, vitu, async/await, DOM na vipengele vya ES2022+. Bila malipo. Bila Malipo
Karatasi ya Maelezo ya PHP Rejeleo linalotafutika na linaloweza kuchapishwa la PHP 8.3+ — sintaksia, mifuatano, safu, vitendakazi, klasi, enums, sifa na vipengele vya kisasa. Bila malipo. Bila Malipo
Karatasi ya Maelezo ya MySQL Rejeleo linalotafutika na linaloweza kuchapishwa la MySQL — hoja, joins, fahirisi, vitendakazi, aina za data na amri za usimamizi. Bila malipo. Bila Malipo
Utafutaji maarufu
ssh cheat sheet ssh commands list ssh keygen command ssh config file example ssh port forwarding ssh copy id scp and sftp commands ssh jump host
Unahitaji msaada?
Umepata tatizo na zana hii? Tujulishe timu yetu.
Ripoti tatizo

Ongeza zana hii ya bure kwenye tovuti yako mwenyewe — nakili na ubandike msimbo ulio hapa chini.