1、配置ssh免密登录
两台：
10-1-1-161
10-1-1-8
要实现10.1.1.161 免密登录 10.1.1.8
一键产生非交互的密钥对
[root@oracledb ~]# ssh-keygen -t rsa -f /root/.ssh/id_rsa -P ""
Generating public/private rsa key pair.
Enter file in which to save the key (/root/.ssh/id_rsa):
Enter passphrase (empty for no passphrase):
Enter same passphrase again:
Your identification has been saved in /root/.ssh/id_rsa.
Your public key has been saved in /root/.ssh/id_rsa.pub.
The key fingerprint is:
SHA256:5hsmlVOgHKM8E0vmJ/Thc97k4ukaxUGK/8ZUs1V7vQE root@host-10-1-1-8
The key's randomart image is:
+---[RSA 2048]----+
| = + o E. |
| * O B . ....|
| X O o = . ..o|
| * = O + .o|
| . S + . |
| X + |
| o X |
| * o |
| ..o |
+----[SHA256]-----+
[root@host-10-1-1-8 ssh]# ls /root/.ssh/
id_rsa id_rsa.pub
将公钥(id_rsa.pub)拷贝到10.1.1.8的机器上:
[root@host-10-1-1-161 .ssh]# ssh-copy-id -i ~/.ssh/id_rsa.pub root@10.1.1.8
本机也要操作：
cat /root/.ssh/id_rsa.pub >> /root/.ssh/authorized_keys
chmod 600 /root/.ssh/authorized_keys
2、报错解决：
2.1、ssh拷贝秘钥报错解决：
报出下面错误，各种方法都试过，都不管用，后来发现 /root/.ssh 目录下多了一个文件 config 删除即可，请看下面操作：
unix_listener: cannot bind to path: /root/.ssh/sockets/root@192.168.0.92-22.Lh6rQMayvvRFfued
[root@test1 ~]# ssh-copy-id -i ~/.ssh/id_rsa.pub root@192.168.0.92
/usr/bin/ssh-copy-id: INFO: Source of key(s) to be installed: "/root/.ssh/id_rsa.pub"
/usr/bin/ssh-copy-id: INFO: attempting to log in with the new key(s), to filter out any that are already installed
/usr/bin/ssh-copy-id: INFO: 1 key(s) remain to be installed -- if you are prompted now it is to install the new keys
root@192.168.0.92's password:
bind: No such file or directory
unix_listener: cannot bind to path: /root/.ssh/sockets/root@192.168.0.92-22.Lh6rQMayvvRFfued
[root@test1 ~]# cd /root/.ssh
[root@test1 .ssh]#
[root@test1 .ssh]# ls
authorized_keys config id_rsa id_rsa.pub known_hosts
[root@test1 .ssh]#
[root@test1 .ssh]# rm -rf config
[root@test1 .ssh]# ssh-copy-id -i ~/.ssh/id_rsa.pub root@192.168.0.92
/usr/bin/ssh-copy-id: INFO: Source of key(s) to be installed: "/root/.ssh/id_rsa.pub"
/usr/bin/ssh-copy-id: INFO: attempting to log in with the new key(s), to filter out any that are already installed
/usr/bin/ssh-copy-id: INFO: 1 key(s) remain to be installed -- if you are prompted now it is to install the new keys
root@192.168.0.92's password:
Number of key(s) added: 1
Now try logging into the machine, with: "ssh 'root@192.168.0.92'"
and check to make sure that only the key(s) you wanted were added.
拷贝秘钥成功
参照文档ansible篇：
https://www.cnblogs.com/effortsing/p/10012079.html
