Bendisoloko ndikhathazekile ngokuqhagamshela koomatshini beWindows. Hayi, andingomchasi okanye umxhasi weMicrosoft kunye neemveliso zabo. Imveliso nganye ikhona ngeenjongo zayo, kodwa ayisiyiyo le nto ingayo.
Bekuhlala kubuhlungu kakhulu kum ukudibanisa kwiiseva zeWindows, kuba olu nxibelelwano luqwalaselwe kwindawo enye (molo WinRM ngeHTTPS) okanye alusebenzi ngokuzinzileyo (molweni RDP koomatshini ababonakalayo phesheya).
Ke ngoko, ukufumana ngempazamo iprojekthi
Ngendlela - Ngayo
ipakethe Chocolatey - Via Ansible, umzekelo indima
jborean93.win_openssh
Okulandelayo, ndiza kuthetha ngenqaku lokuqala, kuba yonke into icace ngakumbi okanye icace ngakumbi.
Ndingathanda ukuqaphela ukuba le projekthi isekwinqanaba le-beta, ngoko ke ayikhuthazwa ukuba isetyenziswe kwimveliso.
Ke, khuphela ukukhutshwa kwamva nje, okwangoku
Khupha ngaphakathi C: Iifayile zeNkquboVulaSSH
Indawo enyanzelekileyo ekusebenzeni okuchanekileyo: kuphela i INKQUBO kunye neqela admin.
Ukufakela iinkonzo usebenzisa iscript faka-sshd.ps1 ibekwe kolu lawulo
powershell.exe -ExecutionPolicy Bypass -File install-sshd.ps1
Vumela udibaniso olungenayo kwizibuko 22:
New-NetFirewallRule -Name sshd -DisplayName 'OpenSSH Server (sshd)' -Enabled True -Direction Inbound -Protocol TCP -Action Allow -LocalPort 22
Ingcaciso: applet Umthetho omtsha weNetFirewall isetyenziswe kwiWindows Server 2012 nasemva koko. Kwiinkqubo ezindala (okanye idesktop) ungasebenzisa umyalelo:
netsh advfirewall firewall add rule name=sshd dir=in action=allow protocol=TCP localport=22
Masiqale inkonzo:
net start sshd
Ekuqalisweni, izitshixo zomamkeli ziyakwenziwa ngokuzenzekelayo (ukuba zilahlekile) ngaphakathi %programdata%ssh
Sinako ukwenza i-autostart yenkonzo xa inkqubo iqala ngomyalelo:
Set-Service sshd -StartupType Automatic
Ungatshintsha kwakhona iqokobhe lomyalelo ongagqibekanga (emva kofakelo, okungagqibekanga ku cmd):
New-ItemProperty -Path "HKLM:SOFTWAREOpenSSH" -Name DefaultShell -Value "C:WindowsSystem32WindowsPowerShellv1.0powershell.exe" -PropertyType String -Force
Ingcaciso: Kufuneka ucacise indlela epheleleyo.
Yintoni elandelayo?
Kwaye ke siyimise sshd_config, esiza kubeka kuyo C: Idatha yeNkqubo. Umzekelo:
PasswordAuthentication no
PubkeyAuthentication yes
Kwaye wenze uvimba weefayili kwifolda yomsebenzisi .ssh, kwaye kuyo ifayile izitshixo_ezigunyazisiweyo. Sibhala phantsi izitshixo zoluntu apho.
Ingcaciso ebalulekileyo: ngumsebenzisi kuphela apho ifayile ibekwe khona kufuneka abe nelungelo lokubhalela le fayile.
Kodwa ukuba uneengxaki ngale nto, unokuhlala ucima ukujongwa kwamalungelo kuqwalaselo:
StrictModes no
Ngendlela, kwi C: Iifayile zeNkquboVulaSSH kukho imibhalo emi-2 (FixHostFilePermissions.ps1, FixUserFilePermissions.ps1), ekufuneka kodwa enganyanzelwanga ukulungisa amalungelo, kubandakanywa ne izitshixo_ezigunyazisiweyo, kodwa ngenxa yesizathu esithile ababhalisi.
Ungalibali ukuyiqalisa kwakhona inkonzo ssh emva kokufaka utshintsho.
ru-mbp-666:infrastructure$ ssh [email protected] -i ~/.ssh/id_rsa
Windows PowerShell
Copyright (C) 2016 Microsoft Corporation. All rights reserved.
PS C:UsersAdministrator> Get-Host
Name : ConsoleHost
Version : 5.1.14393.2791
InstanceId : 653210bd-6f58-445e-80a0-66f66666f6f6
UI : System.Management.Automation.Internal.Host.InternalHostUserInterface
CurrentCulture : en-US
CurrentUICulture : en-US
PrivateData : Microsoft.PowerShell.ConsoleHost+ConsoleColorProxy
DebuggerEnabled : True
IsRunspacePushed : False
Runspace : System.Management.Automation.Runspaces.LocalRunspace
PS C:UsersAdministrator>
Izinto eziluncedo/ezingalunganga.
Iinkonzo:
- Indlela esemgangathweni yokudibanisa kwiiseva.
Xa bembalwa oomatshini beWindows, akulula kakhulu xa:
Ke, apha sihamba nge-ssh, kwaye apha sisebenzisa i-rdp,
kwaye ngokubanzi, olona qheliselo lungcono kunye ne-bastions kuqala yitonela ye-ssh, kunye ne-RDP ngayo. - Ukuseta ngokulula
Ndicinga ukuba oku kucacile. - Isantya soqhagamshelo kunye nokusebenza ngomatshini okude
Akukho iqokobhe lomzobo, egcina zombini izibonelelo zeseva kunye nesixa sedatha egqithisiweyo.
Umgcini:
- Ayithathi indawo ngokupheleleyo iRDP.
Ayiyiyo yonke into enokwenziwa kwi-console, yeha. Ndithetha iimeko apho kufuneka i-GUI.
Izinto ezisetyenziswa kwinqaku:
Iinketho zokufakela zikotshwa ngokungenazintloni ukusuka
umthombo: www.habr.com