Ukuqhagamshela kwiWindows ngeSSH njengeLinux

Bendisoloko ndikhathazekile ngokuqhagamshela koomatshini beWindows. Hayi, andingomchasi okanye umxhasi weMicrosoft kunye neemveliso zabo. Imveliso nganye ikhona ngeenjongo zayo, kodwa ayisiyiyo le nto ingayo.
Bekuhlala kubuhlungu kakhulu kum ukudibanisa kwiiseva zeWindows, kuba olu nxibelelwano luqwalaselwe kwindawo enye (molo WinRM ngeHTTPS) okanye alusebenzi ngokuzinzileyo (molweni RDP koomatshini ababonakalayo phesheya).

Ke ngoko, ukufumana ngempazamo iprojekthi Win32-OpenSSH, Ndagqiba ekubeni ndibe namava am okuseta. Mhlawumbi esi sixhobo siya kusindisa umntu ezininzi iintsholongwane.

Ukuqhagamshela kwiWindows ngeSSH njengeLinux

Iinketho zokuhlohla:

  1. Ngendlela
  2. Ngayo ipakethe Chocolatey
  3. Via Ansible, umzekelo indima jborean93.win_openssh

Okulandelayo, ndiza kuthetha ngenqaku lokuqala, kuba yonke into icace ngakumbi okanye icace ngakumbi.

Ndingathanda ukuqaphela ukuba le projekthi isekwinqanaba le-beta, ngoko ke ayikhuthazwa ukuba isetyenziswe kwimveliso.

Ke, khuphela ukukhutshwa kwamva nje, okwangoku 7.9.0.0p1-beta. Kukho iinguqulelo kuzo zombini ii-32 kunye ne-64 bit systems.

Khupha ngaphakathi C: Iifayile zeNkquboVulaSSH
Indawo enyanzelekileyo ekusebenzeni okuchanekileyo: kuphela i INKQUBO kunye neqela admin.

Ukufakela iinkonzo usebenzisa iscript faka-sshd.ps1 ibekwe kolu lawulo

powershell.exe -ExecutionPolicy Bypass -File install-sshd.ps1

Vumela udibaniso olungenayo kwizibuko 22:

New-NetFirewallRule -Name sshd -DisplayName 'OpenSSH Server (sshd)' -Enabled True -Direction Inbound -Protocol TCP -Action Allow -LocalPort 22

Ingcaciso: applet Umthetho omtsha weNetFirewall isetyenziswe kwiWindows Server 2012 nasemva koko. Kwiinkqubo ezindala (okanye idesktop) ungasebenzisa umyalelo:

netsh advfirewall firewall add rule name=sshd dir=in action=allow protocol=TCP localport=22

Masiqale inkonzo:

net start sshd

Ekuqalisweni, izitshixo zomamkeli ziyakwenziwa ngokuzenzekelayo (ukuba zilahlekile) ngaphakathi %programdata%ssh

Sinako ukwenza i-autostart yenkonzo xa inkqubo iqala ngomyalelo:

Set-Service sshd -StartupType Automatic

Ungatshintsha kwakhona iqokobhe lomyalelo ongagqibekanga (emva kofakelo, okungagqibekanga ku cmd):

New-ItemProperty -Path "HKLM:SOFTWAREOpenSSH" -Name DefaultShell -Value "C:WindowsSystem32WindowsPowerShellv1.0powershell.exe" -PropertyType String -Force

Ingcaciso: Kufuneka ucacise indlela epheleleyo.

Yintoni elandelayo?

Kwaye ke siyimise sshd_config, esiza kubeka kuyo C: Idatha yeNkqubo. Umzekelo:

PasswordAuthentication no
PubkeyAuthentication yes

Kwaye wenze uvimba weefayili kwifolda yomsebenzisi .ssh, kwaye kuyo ifayile izitshixo_ezigunyazisiweyo. Sibhala phantsi izitshixo zoluntu apho.

Ingcaciso ebalulekileyo: ngumsebenzisi kuphela apho ifayile ibekwe khona kufuneka abe nelungelo lokubhalela le fayile.

Kodwa ukuba uneengxaki ngale nto, unokuhlala ucima ukujongwa kwamalungelo kuqwalaselo:

StrictModes no

Ngendlela, kwi C: Iifayile zeNkquboVulaSSH kukho imibhalo emi-2 (FixHostFilePermissions.ps1, FixUserFilePermissions.ps1), ekufuneka kodwa enganyanzelwanga ukulungisa amalungelo, kubandakanywa ne izitshixo_ezigunyazisiweyo, kodwa ngenxa yesizathu esithile ababhalisi.

Ungalibali ukuyiqalisa kwakhona inkonzo ssh emva kokufaka utshintsho.

ru-mbp-666:infrastructure$ ssh [email protected] -i ~/.ssh/id_rsa
Windows PowerShell
Copyright (C) 2016 Microsoft Corporation. All rights reserved.

PS C:UsersAdministrator> Get-Host


Name             : ConsoleHost
Version          : 5.1.14393.2791
InstanceId       : 653210bd-6f58-445e-80a0-66f66666f6f6
UI               : System.Management.Automation.Internal.Host.InternalHostUserInterface
CurrentCulture   : en-US
CurrentUICulture : en-US
PrivateData      : Microsoft.PowerShell.ConsoleHost+ConsoleColorProxy
DebuggerEnabled  : True
IsRunspacePushed : False
Runspace         : System.Management.Automation.Runspaces.LocalRunspace

PS C:UsersAdministrator>

Izinto eziluncedo/ezingalunganga.

Iinkonzo:

  • Indlela esemgangathweni yokudibanisa kwiiseva.
    Xa bembalwa oomatshini beWindows, akulula kakhulu xa:
    Ke, apha sihamba nge-ssh, kwaye apha sisebenzisa i-rdp,
    kwaye ngokubanzi, olona qheliselo lungcono kunye ne-bastions kuqala yitonela ye-ssh, kunye ne-RDP ngayo.
  • Ukuseta ngokulula
    Ndicinga ukuba oku kucacile.
  • Isantya soqhagamshelo kunye nokusebenza ngomatshini okude
    Akukho iqokobhe lomzobo, egcina zombini izibonelelo zeseva kunye nesixa sedatha egqithisiweyo.

Umgcini:

  • Ayithathi indawo ngokupheleleyo iRDP.
    Ayiyiyo yonke into enokwenziwa kwi-console, yeha. Ndithetha iimeko apho kufuneka i-GUI.

Izinto ezisetyenziswa kwinqaku:
Ikhonkco kwiprojekthi ngokwayo
Iinketho zokufakela zikotshwa ngokungenazintloni ukusuka Amaxwebhu afanelekileyo.

umthombo: www.habr.com

Yongeza izimvo