[B! ssh] nharukiã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

nharuki id:nharuki

sshã«é–¢ã™ã‚‹nharukiã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (7)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

sshã®å…¬é–‹éµ authorized_keys ãƒ•ã‚¡ã‚¤ãƒ«ã®åˆ¶é™æ©Ÿèƒ½ã«ã¤ã„ã¦èª¿ã¹ã¦ã¿ãŸã‚‰æ¥½ã—ã‹ã£ãŸï¼Ž(å®Ÿè¡Œã‚³ãƒžãƒ³ãƒ‰åˆ¶é™ãªã©ï¼‰ - ãã‚Œãƒžã‚°ã§ï¼
authorized_keys ãƒ•ã‚¡ã‚¤ãƒ«ã«ã¤ã„ã¦èª¿ã¹ã¦ã¿ãŸã‚‰æ¥½ã—ã‹ã£ãŸï¼Žãƒãƒ¼ãƒˆãƒ•ã‚©ãƒ¯ãƒ¼ãƒ‰å°‚ç”¨å…¬é–‹éµã¨ã‹ã„ã‚ã„ã‚ä½œã‚Œãã†ã§ã™ authorized_keys ãƒ•ã‚¡ã‚¤ãƒ«ã£ã¦å˜ã«ï¼Œå…¬é–‹éµã‚’å…¥ã‚Œã¦ç½®ãå ´æ‰€ã ã¨æ€ã£ã¦ã¾ã—ãŸ authorized_keys ãƒ•ã‚¡ã‚¤ãƒ«ã«ã¯ãƒã‚°ã‚¤ãƒ³æ™‚ã«è‡ªå‹•å®Ÿè¡Œã™ã‚‹ãƒ—ãƒã‚°ãƒ©ãƒ ã¨ã‹ã€ç’°å¢ƒå¤‰æ•°ã‚’æ›¸ã„ã¦ãŠãã¨ã‹ ã‚¤ãƒã‚¤ãƒä¾¿åˆ©ãªä½¿ã„æ–¹ãŒã‚ã‚‹ã®ã§ã™ï¼Ž ä½¿ãˆã‚‹è¨å®šã¯ä»¥ä¸‹ã®é€šã‚Š ãƒã‚°ã‚¤ãƒ³æ™‚ã«è‡ªå‹•é©å¿œã™ã‚‹è¨å®šã¯æ¬¡ã®é€šã‚Š from="pattern-list" environment="NAME=value" command="command" cert-authority tunnel="n" permitopen="host:port" no-X11-forwarding no-user-rc no-pty Prevents tty allocation (a request to al
nharuki 2023/10/06
ã“ã‚Œã¯çŸ¥ã‚‰ãªã‹ã£ãŸâ€¦ã‚¦ãƒ©ãƒ¯ã‚¶ã®ã‚ˆã†ã

ssh
ãƒªãƒ³ã‚¯
Getting the most out of SSH - hardware acceleration tuning for AES-NI | MichaÅ‚ Turecki
nharuki 2016/11/08
AES-NIæ‹¡å¼µå‘½ä»¤ã‚’å‚™ãˆãŸãƒ›ã‚¹ãƒˆã¸ã®SSHæŽ¥ç¶šã®æš—å·æ–¹å¼ã«ã¯ aes128/[email protected] ã‚’ä½¿ã†ã¨ã‚ªãƒ•ãƒãƒ¼ãƒ‰ã®æ©æµãŒå—ã‘ã‚‰ã‚Œã‚‹ã¨ã„ã†è©±

SSH
ãƒªãƒ³ã‚¯
ãƒžã‚¤ãƒŠãƒ³ãƒãƒ¼ã‚«ãƒ¼ãƒ‰ã§SSHã™ã‚‹ - AAA Blog
ã¿ãªã•ã‚“ãƒžã‚¤ãƒŠãƒ³ãƒãƒ¼ã‚«ãƒ¼ãƒ‰ã¯ã‚‚ã†æ‰‹å…ƒã«å±Šãã¾ã—ãŸã‹? ç§ã®ä½ã‚€å¤§ç”°åŒºã¯ã¨ã¦ã‚‚æ··é›‘ã—ã¦ã„ã¦ç”³è«‹ã‹ã‚‰5ãƒ¶æœˆã‹ã‹ã£ã¦ä»Šæœˆã‚„ã£ã¨äº¤ä»˜ã—ã¦ã‚‚ã‚‰ã†ã“ã¨ãŒã§ãã¾ã—ãŸã€‚ ã“ã®ã‚«ãƒ¼ãƒ‰ã«å«ã¾ã‚Œã‚‹å…¬çš„å€‹äººèªè¨¼æ©Ÿèƒ½ã¯ä»¥å‰ã‹ã‚‰ä½åŸºã‚«ãƒ¼ãƒ‰ã«å…¥ã£ã¦ã„ãŸã‚‚ã®ã§ã™ãŒã€ä»Šå¹´ã‹ã‚‰æ°‘é–“åˆ©ç”¨ã‚‚ã§ãã‚‹ã‚ˆã†ã«ãªã‚Šã¾ã—ãŸã€‚ ã—ã‹ã—ã€ã“ã®å…¬çš„å€‹äººèªè¨¼ã§ã™ãŒè©³ç´°ãªä»•æ§˜ãŒå…¬é–‹ã•ã‚Œã¦ã„ãªã„ãŸã‚ã€å•†ç”¨åˆ©ç”¨ã—ã‚ˆã†ã¨ã„ã†å‹•ãã¯ã¾ã èžãã¾ã›ã‚“ã—ã€æ—¢ã«å‹•ã„ã¦ã„ã‚‹è¡Œæ”¿ã‚µãƒ¼ãƒ“ã‚¹ã®e-govã‚„e-taxã¯IEé™å®šã§ã€ã„ã¾ã ã«Java AppletãŒä½¿ã‚ã‚Œã¦ã„ã‚‹ãªã©å¤§å¤‰æ®‹å¿µãªçŠ¶æ³ã§ã™ã€‚ ã‚«ãƒ¼ãƒ‰ã«å…¥ã£ã¦ã„ã‚‹é›»åè¨¼æ˜Žæ›¸ã¨2048bitã®RSAç§˜å¯†éµã¯æ§˜ã€…ãªç”¨é€”ã«æ´»ç”¨ã§ãã‚‹å¯èƒ½æ€§ãŒã‚ã‚‹ã®ã«ã€ã›ã£ã‹ãç¨Žé‡‘ã‚’è²»ã‚„ã—ã¦ä½œã£ãŸã‚·ã‚¹ãƒ†ãƒ ãŒä½¿ã‚ã‚Œãªã„ã®ã¯ã‚‚ã£ãŸã„ãªã„ã§ã™ãã€‚ æ°‘é–“åˆ©ç”¨ã®ç¬¬ä¸€æ©ã¨ã—ã¦ã€ã‚«ãƒ¼ãƒ‰ã«å…¥ã£ã¦ã„ã‚‹RSAéµã‚’åˆ©ç”¨ã—ã¦è‡ªå®…ã‚µãƒ¼ãƒãƒ¼ã«SSHãƒã‚°ã‚¤ãƒ³ã—ã¦ã¿ã¾ã—ã‚‡ã†!
nharuki 2016/06/23
ãªã«ã“ã‚Œã™ã”ã„

ssh

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
ssh_configã®ã‚¹ã‚¹ãƒ¡
7. ã¤ã¾ã‚Š $ ssh -p 2222 very-long-user-name@very-long-server-name. example.com ã“ã‚Œã‚’ $ cat .ssh/config Host very Port 2222 User very-long-user-name HostName very-long-server-name.example.com $ ssh very ã“ã†ã—ã¦ãŠãã¨ ã“ã†ãªã‚‹ 8. $ scp -P 2222 very-long- user-name@very-long- server-name.example.com: hoge.txt ./ $ scp very:hoge.txt ./ $ rsync --port 2222 very- long-user-name@very-long- server-name.example.com: hoge
nharuki 2015/10/30
Linux

ssh

-Slideshare
ãƒªãƒ³ã‚¯
æœ€å¼·ã®SSHè¸ã¿å°è¨å®š - Qiita
è¿½è¨˜ï¼šopenssh-7.3 ä»¥é™ãªã‚‰ ProxyJump ã‚„ -J ãŒä½¿ãˆã¾ã™ ãƒ›ã‚¹ãƒˆåã‚’ + ã§ç¹‹ã’ã‚‹ã“ã¨ã§å¤šæ®µProxyæŽ¥ç¶šã‚‚ç°¡å˜ã«ã€ãŒã‚³ãƒ³ã‚»ãƒ—ãƒˆã ã£ãŸæœ¬ã‚¨ãƒ³ãƒˆãƒªã®è¨å®šã§ã™ãŒã€OpenSSH 7.3 ã‹ã‚‰ ProxyJump ã¨ã„ã†è¨å®šãŒä½¿ãˆã‚‹ã‚ˆã†ã«ãªã£ãŸã®ã§ã€ä½¿ãˆã‚‹ãªã‚‰ ProxyJump ã‚’ä½¿ã†æ–¹ãŒå¥å…¨ã ã—æŸ”è»Ÿã§ä½¿ã„å‹æ‰‹ã‚‚è‰¯ã„ã®ã§ãã¡ã‚‰ã‚’è¦šãˆã¦å¸°ã‚‹ã“ã¨ã‚’ã‚ªã‚¹ã‚¹ãƒ¡ã—ã¾ã™ã€‚ ä½¿ã„æ–¹ã¯ç°¡å˜ã§ä»¥ä¸‹ã®ã‚ˆã†ãªæ„Ÿã˜ã§ã™ã€‚å¤šæ®µã‚‚è¡Œã‘ã‚‹ã—ã€è¸ã¿å°ãƒ›ã‚¹ãƒˆæ¯Žã«ãƒ¦ãƒ¼ã‚¶åã‚„ãƒãƒ¼ãƒˆç•ªå·ã‚’å¤‰ãˆã‚‹ã“ã¨ã‚‚å‡ºæ¥ã¾ã™ã€‚ # 1. bastion.example.jp -> internal.example.jp ssh -J bastion.example.jp internal.example.jp # 2. bastion.example.jp -> internal.example.jp -> super-de
nharuki 2015/10/16
çµåˆæ–‡å—ã¯ãƒ‘ã‚¤ãƒ—ãŒã„ã„ã‚“ã˜ã‚ƒã¾ã„ã‹ã€‚ã¨æ€ã£ãŸã‘ã©bashãŒèª¤èªè˜ã™ã‚‹ã‹ã‚‰ã ã‚ã½ãƒ»ãƒ»ãƒ»

Linux

tips

ssh
ãƒªãƒ³ã‚¯
SSHã®å¤šé‡æŽ¥ç¶šã«ã¤ã„ã¦
tl;dr ãƒ‡ãƒ—ãƒã‚¤ãƒ„ãƒ¼ãƒ«ã«ã‚ˆã£ã¦ã¯ åŒã˜ã‚µãƒ¼ãƒã« SSH ã§ä½•å›žã‚‚ã‚³ãƒžãƒ³ãƒ‰ã‚’å®Ÿè¡Œã™ã‚‹ã“ã¨ãŒã‚ã‚‹(ansible ã¨ã‹)ã€‚ ã‚³ãƒžãƒ³ãƒ‰ã”ã¨ã«æ¯Žå›žã‚³ãƒã‚¯ã‚·ãƒ§ãƒ³(ãƒˆãƒ³ãƒãƒ«)ã‚’ç¢ºç«‹ã™ã‚‹ã¨ã‚ªãƒ¼ãƒãƒ¼ãƒ˜ãƒƒãƒ‰ã‚‚å¤§ãããªã‚‹ã€‚ OpenSSH ã¯ $HOME/.ssh/config ã«æ¬¡ã®è¨å®šã‚’æ›¸ãã“ã¨ã§ã€æŽ¥ç¶šã‚’å¤šé‡åŒ–(multiplex)ã™ã‚‹ã“ã¨ãŒã§ãã‚‹ã€‚ # $HOME/.ssh/config Host machine1 HostName machine1.example.org ControlPath ~/.ssh/controlmasters/%r@%h:%p ControlMaster auto ControlPersist 1h multiplex å‰å¾Œã®é€Ÿåº¦å·® SSH ã‚’ä½¿ã£ã¦ãƒªãƒ¢ãƒ¼ãƒˆã‚µãƒ¼ãƒã§ echo ã‚³ãƒžãƒ³ãƒ‰ã‚’å®Ÿè¡Œã—ãŸæ™‚ã®é€Ÿåº¦å·®ã‚’è¨ˆæ¸¬ before multiplex $ time ssh
nharuki 2015/01/16
SSHçµŒç”±ã§repo init/syncã—ãŸéš›ã€ã‚³ãƒžãƒ³ãƒ‰ãƒ©ã‚¤ãƒ³ã§è¦‹ã‹ã‘ãŸã®ã‚’ãã£ã‹ã‘ã«èª¿ã¹ã¦ã¿ãŸã€‚çŸ¥ã‚‰ãªã‹ã£ãŸï¼

ssh
ãƒªãƒ³ã‚¯
Samba over SSH (Windows 7/Vista) - penguin meets penguin
Windows XPã§ã‚„ã£ã¦ãŸã‚ˆã†ãªæ–¹æ³•ã§ã¯ã§ããªã„ã®ã§ã™ï¼Žã§ã‚‚Googleå…ˆç”Ÿã«åŠ©ã‘ã¦ã‚‚ã‚‰ã£ã¦ï¼Œ CIFS-over-SSH for Windows Vista/7 ã“ã®ãƒšãƒ¼ã‚¸ã«è¾¿ã‚Šç€ãè§£æ±ºï¼Žä»¥ä¸‹ã‚ã‚‚ï¼Ž Microsoft Loopback Adapterã‚’è¿½åŠ ãƒ‡ãƒã‚¤ã‚¹ã®è¿½åŠ ã¯ï¼ŒWin+Rã§ hdwwiz ã‚’èµ·å‹• TCP/IPv4ã®ã¿æœ‰åŠ¹ã«ã™ã‚‹ NetBIOS over TCP/IP ã‚’ç„¡åŠ¹ã«ã™ã‚‹ (TCP/IPv4ã®ãƒ—ãƒãƒ‘ãƒ†ã‚£>è©³ç´°è¨å®š>WINS) SMBãƒ‰ãƒ©ã‚¤ãƒã®è¨å®š ç®¡ç†è€…æ¨©é™ã§ã‚³ãƒžãƒ³ãƒ‰ãƒ—ãƒãƒ³ãƒ—ãƒˆã‚’èµ·å‹•% sc config smb start= demand %Â netsh interface portproxy add v4tov4 listenaddress=10.255.255.1 listenport=445 connectaddress=10.255.255.1 co
nharuki 2012/02/03
Windows

samba

ssh
ãƒªãƒ³ã‚¯
1