Hoʻohui i Windows ma o SSH e like me Linux

Ua pilikia au i ka hoʻopili ʻana i nā mīkini Windows. ʻAʻole, ʻaʻole wau he hoa paio a kākoʻo ʻole iā Microsoft a me kā lākou huahana. Loaʻa kēlā me kēia huahana no kāna kumu ponoʻī, akā ʻaʻole ia ka mea e pili ana i kēia.
Ua ʻeha mau loa iaʻu ke hoʻopili ʻana i nā kikowaena Windows, no ka mea, ua hoʻonohonoho ʻia kēia mau pilina ma kahi hoʻokahi (hello WinRM me HTTPS) a i ʻole hana paʻa loa (hello RDP i nā mīkini virtual ma waho).

No laila, i ka loaʻa ʻole ʻana o ka papahana Win32-OpenSSH, Ua hoʻoholo wau e kaʻana like i kaʻu ʻike hoʻonohonoho. Hiki paha i kēia mea hana ke ho'ōla i kekahi i ka nui o nā aʻalolo.

Nā koho hoʻonoho:

1. Nānā
2. Ma o ka pūʻolo Kokoleka
3. Via Ansible, no ka laʻana kuleana jborean93.win_openssh

Ma hope aʻe, e kamaʻilio wau e pili ana i ka helu mua, no ka mea, ʻoi aku ka liʻiliʻi o nā mea a pau me ke koena.

Makemake au e hoʻomaopopo aia nō kēia papahana ma ka pae beta, no laila ʻaʻole ʻōlelo ʻia e hoʻohana ia i ka hana.

No laila, e hoʻoiho i ka hoʻokuʻu hou loa, i kēia manawa 7.9.0.0p1-beta. Aia nā mana no nā ʻōnaehana 32 a me 64 bit.

Wehe i loko C: Nā Kōnae PapahanaOpenSSH
He wahi koi no ka hana pololei: ʻo ka ʻO ka polokalamu a me ka hui admin.

Ke hoʻouka nei i nā lawelawe me ka hoʻohana ʻana i kahi palapala hoʻokomo-sshd.ps1 aia ma keia papa kuhikuhi

powershell.exe -ExecutionPolicy Bypass -File install-sshd.ps1

E ʻae i nā hoʻokuʻi ʻana ma ke awa 22:

New-NetFirewallRule -Name sshd -DisplayName 'OpenSSH Server (sshd)' -Enabled True -Direction Inbound -Protocol TCP -Action Allow -LocalPort 22

Ka wehewehe: applet New-NetFirewallRule hoʻohana ʻia ma Windows Server 2012 a ma hope. Ma nā ʻōnaehana kahiko loa (a i ʻole ka desktop) hiki iā ʻoe ke hoʻohana i ke kauoha:

netsh advfirewall firewall add rule name=sshd dir=in action=allow protocol=TCP localport=22

E hoʻomaka kākou i ka lawelawe:

net start sshd

I ka hoʻomaka ʻana, e hana ʻia nā kī hoʻokipa (inā nalo) i loko %programdata%ssh

Hiki iā mākou ke hana i ka autostart o ka lawelawe ke hoʻomaka ka ʻōnaehana me ke kauoha:

Set-Service sshd -StartupType Automatic

Hiki iā ʻoe ke hoʻololi i ka shell command default (ma hope o ke kau ʻana, ʻo ka paʻamau Kime):

New-ItemProperty -Path "HKLM:SOFTWAREOpenSSH" -Name DefaultShell -Value "C:WindowsSystem32WindowsPowerShellv1.0powershell.exe" -PropertyType String -Force

Ka wehewehe: Pono ʻoe e kuhikuhi i kahi ala pololei.

He aha ka mea e hiki mai ana?

A laila hoʻonohonoho mākou sshd_config, a makou e waiho ai C: ʻIke Papahana. ^ E Ha yM. Ma ke ʻano he:

PasswordAuthentication no
PubkeyAuthentication yes

A hana i kahi papa kuhikuhi ma ka waihona mea hoʻohana .ssh, a i loko o laila ka faila ʻae_hula_. Kākau mākou i nā kī lehulehu ma laila.

ʻO ka wehewehe koʻikoʻi: ʻo ka mea hoʻohana wale nō i loko o kāna papa kuhikuhi i loaʻa ai ka faila ke kuleana e kākau i kēia faila.

Akā inā loaʻa iā ʻoe nā pilikia me kēia, hiki iā ʻoe ke hoʻopau i ka nānā ʻana i nā kuleana ma ka config:

StrictModes no

Ma ke ala, ma C: Nā Kōnae PapahanaOpenSSH aia 2 mau palapala (FixHostFilePermissions.ps1, FixUserFilePermissions.ps1), ʻaʻole pono e hoʻoponopono i nā kuleana, me ka ʻae_hula_, akā no kekahi kumu ʻaʻole lākou i kākau inoa.

Mai poina e hoʻomaka hou i ka lawelawe ssh ma hope o ka hoʻopili ʻana i nā hoʻololi.

ru-mbp-666:infrastructure$ ssh [email protected] -i ~/.ssh/id_rsa
Windows PowerShell
Copyright (C) 2016 Microsoft Corporation. All rights reserved.

PS C:UsersAdministrator> Get-Host


Name             : ConsoleHost
Version          : 5.1.14393.2791
InstanceId       : 653210bd-6f58-445e-80a0-66f66666f6f6
UI               : System.Management.Automation.Internal.Host.InternalHostUserInterface
CurrentCulture   : en-US
CurrentUICulture : en-US
PrivateData      : Microsoft.PowerShell.ConsoleHost+ConsoleColorProxy
DebuggerEnabled  : True
IsRunspacePushed : False
Runspace         : System.Management.Automation.Runspaces.LocalRunspace

PS C:UsersAdministrator>

Nā mea maikaʻi/kūpono.

Kākoʻo:

• ʻO ke ala maʻamau no ka hoʻopili ʻana i nā kikowaena.
  Ke liʻiliʻi nā mīkini Windows, he mea maʻalahi loa ke:
  No laila, eia mākou e hele ma ssh, a eia mākou e hoʻohana ai i ka rdp,
  a ma ka laulā, ʻo ka hoʻomaʻamaʻa maikaʻi loa me nā bastions ka mua he tunnel ssh, a me RDP ma o ia.
• ʻO ka maʻalahi o ka hoʻonohonoho
  Manaʻo wau ua maopopo kēia.
• Ka wikiwiki o ka pilina a me ka hana me kahi mīkini mamao
  ʻAʻohe pūpū kiʻi, mālama i nā kumuwaiwai ʻelua a me ka nui o ka ʻikepili i hoʻouna ʻia.

ʻAla:

• ʻAʻole ia e pani piha iā RDP.
  ʻAʻole hiki ke hana i nā mea a pau mai ka console, auwe. Ke'ōlelo nei au i nā kūlana kahi e koiʻia ai kahi GUI.

Nā mea i hoʻohana ʻia ma ka ʻatikala:
loulou i ka papahana pono'ī
Hoʻopili hilahila ʻole ʻia nā koho hoʻonohonoho Nā palapala kūpono.

Source: www.habr.com