這個文章nice,https://www.cnblogs.com/ftl1012/p/ssh.htmlhtml
ssh,secure shell縮寫,加密傳輸,比telnet明文傳輸更安全,旨在替代ftp和telnet鏈接linux服務器linux
默認端口22,服務器端包含ssh服務和sftp服務,客戶端包含ssh鏈接命令和scp拷貝命令shell
scp每次都是全量拷貝,效率低,適合第一次拷貝,增量拷貝用rsync,能夠雙向拷貝安全
安裝openssh,須要四個包:bash
openssh-clients:客戶端服務器
openssh-server:服務端ssh
openssh-askpass:密碼診斷工具(能夠不要)tcp
openssh:核心文件ide
openssl:提供加密的程序工具
配置文件/etc/ssh/sshd_config
配置互信免密登錄參考http://www.javashuo.com/article/p-owkljsya-mq.html
和別的服務同樣能夠stop start reload restart
查看ssh端口
[hadoop@master ~]$ netstat -lntup | grep ssh (Not all processes could be identified, non-owned process info will not be shown, you would have to be root to see it all.) [hadoop@master ~]$ sudo netstat -lntup | grep ssh [sudo] password for hadoop: tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 1247/sshd tcp6 0 0 :::22 :::* LISTEN 1247/sshd [hadoop@master ~]$ sudo ss |grep ssh tcp ESTAB 0 0 192.168.168.11:ssh 192.168.168.1:53026 [hadoop@master ~]$ sudo netstat -a | grep ssh tcp 0 0 0.0.0.0:ssh 0.0.0.0:* LISTEN tcp 0 0 master:ssh 192.168.168.1:53273 ESTABLISHED tcp 0 0 master:ssh 192.168.168.1:53026 ESTABLISHED tcp6 0 0 [::]:ssh [::]:* LISTEN [hadoop@master ~]$ sudo netstat -lnt | grep 22 tcp 0 0 192.168.122.1:53 0.0.0.0:* LISTEN tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN tcp6 0 0 :::22 :::* LISTEN [hadoop@master ~]$ sudo netstat -lnt | grep ssh | wc -l 0 [hadoop@master ~]$
遠程登錄
ssh 192.168.168.12 ssh root@192.168.168.12 ssh -X root@192.168.168.12 ssh 192.168.168.12 "ifconfig" ssh omd@192.168.168.12 -t "sh /home/hadoop/test.sh"