【deepin】linux配置ssh服务，开启ssh远程访问

2022-06-08

首先我发现ssh启动报错，查看状态错误日志如下：

david@david-pc:/etc$ sudo service ssh status
× ssh.service - OpenBSD Secure Shell server
     Loaded: loaded (/lib/systemd/system/ssh.service; disabled; vendor preset: enabled)
     Active: failed (Result: exit-code) since Wed 2022-06-08 15:39:31 CST; 7s ago
       Docs: man:sshd(8)
             man:sshd_config(5)
    Process: 5847 ExecStartPre=/usr/sbin/sshd -t (code=exited, status=1/FAILURE)

6月 08 15:39:31 david-pc systemd[1]: ssh.service: Control process exited, code=exited, status=1/FAILURE
6月 08 15:39:31 david-pc systemd[1]: ssh.service: Failed with result 'exit-code'.
6月 08 15:39:31 david-pc systemd[1]: Failed to start OpenBSD Secure Shell server.
6月 08 15:39:31 david-pc systemd[1]: ssh.service: Scheduled restart job, restart counter is at 5.
6月 08 15:39:31 david-pc systemd[1]: Stopped OpenBSD Secure Shell server.
6月 08 15:39:31 david-pc systemd[1]: ssh.service: Start request repeated too quickly.
6月 08 15:39:31 david-pc systemd[1]: ssh.service: Failed with result 'exit-code'.
6月 08 15:39:31 david-pc systemd[1]: Failed to start OpenBSD Secure Shell server.
david@david-pc:/etc$ cat /etc/ssh/sshd_config
cat: /etc/ssh/sshd_config: 没有那个文件或目录

发现检查/etc/ssh/sshd_config目录下是否存在此文件，如果不存在可以复制Ubuntu等其他系统文件：

修改配置文件，在授权这里，打开下面三行注释：

# Authentication: deepin davidzheng update QQ986945193

LoginGraceTime 2m
PermitRootLogin prohibit-password
StrictModes yes
#MaxAuthTries 6
#MaxSessions 10

最后再起执行启动命令，发现找不到rsa文件

david@david-pc:/etc/ssh$ sudo service ssh restart
david@david-pc:/etc/ssh$ sudo service ssh status
● ssh.service - OpenBSD Secure Shell server
     Loaded: loaded (/lib/systemd/system/ssh.service; disabled; vendor preset: enabled)
     Active: active (running) since Wed 2022-06-08 16:32:45 CST; 33s ago
       Docs: man:sshd(8)
             man:sshd_config(5)
    Process: 10568 ExecStartPre=/usr/sbin/sshd -t (code=exited, status=0/SUCCESS)
   Main PID: 10569 (sshd)
      Tasks: 1 (limit: 1649)
     Memory: 1.0M
     CGroup: /system.slice/ssh.service
             └─10569 /usr/sbin/sshd -D

6月 08 16:32:45 david-pc sshd[10569]: Server listening on :: port 22.
6月 08 16:32:45 david-pc systemd[1]: Started OpenBSD Secure Shell server.
6月 08 16:32:51 david-pc sshd[10576]: error: Could not load host key: /etc/ssh/ssh_host_rsa_key
6月 08 16:32:51 david-pc sshd[10576]: error: Could not load host key: /etc/ssh/ssh_host_ecdsa_key
6月 08 16:32:51 david-pc sshd[10576]: error: Could not load host key: /etc/ssh/ssh_host_ed25519_key
6月 08 16:32:51 david-pc sshd[10576]: fatal: No supported key exchange algorithms [preauth]
6月 08 16:33:09 david-pc sshd[10596]: error: Could not load host key: /etc/ssh/ssh_host_rsa_key
6月 08 16:33:09 david-pc sshd[10596]: error: Could not load host key: /etc/ssh/ssh_host_ecdsa_key
6月 08 16:33:09 david-pc sshd[10596]: error: Could not load host key: /etc/ssh/ssh_host_ed25519_key
6月 08 16:33:10 david-pc sshd[10596]: fatal: No supported key exchange algorithms [preauth]

执行生成秘钥文件，最后重启即可连接。

sudo ssh-keygen -t rsa -f /etc/ssh/ssh_host_rsa_key
sudo ssh-keygen -t ecdsa -f /etc/ssh/ssh_host_ecdsa_key
sudo ssh-keygen -t ed25519 -f /etc/ssh/ssh_host_ed25519_key

david@david-pc:/etc/ssh$ ssh-keygen -t rsa -f /etc/ssh/ssh_host_rsa_key
Generating public/private rsa key pair.
Enter passphrase (empty for no passphrase): 
Enter same passphrase again: 
Saving key "/etc/ssh/ssh_host_rsa_key" failed: Permission denied
david@david-pc:/etc/ssh$ 
david@david-pc:/etc/ssh$ sudo ssh-keygen -t rsa -f /etc/ssh/ssh_host_rsa_key
Generating public/private rsa key pair.
Enter passphrase (empty for no passphrase): 
Enter same passphrase again: 
Passphrases do not match.  Try again.
Enter passphrase (empty for no passphrase): 
Enter same passphrase again: 
Your identification has been saved in /etc/ssh/ssh_host_rsa_key.
Your public key has been saved in /etc/ssh/ssh_host_rsa_key.pub.
The key fingerprint is:
SHA256:QwOUp5iVDtwXrfbhcSNit+C7djp10Z6MnBHZJko1Xho root@david-pc
The key's randomart image is:
+---[RSA 2048]----+
|   . ooo.o .Eo.  |
|    o =.o o.+=o  |
|     * +oo .o=   |
|    o o.*.* = .  |
|       +S* B O . |
|        ..= = +  |
|         o .     |
|        + .      |
|       .o=       |
+----[SHA256]-----+
david@david-pc:/etc/ssh$ ssh-keygen -t ecdsa -f /etc/ssh/ssh_host_ecdsa_key
Generating public/private ecdsa key pair.
Enter passphrase (empty for no passphrase): 

david@david-pc:/etc/ssh$ sudo ssh-keygen -t ecdsa -f /etc/ssh/ssh_host_ecdsa_key
Generating public/private ecdsa key pair.
Enter passphrase (empty for no passphrase): 
Enter same passphrase again: 
Your identification has been saved in /etc/ssh/ssh_host_ecdsa_key.
Your public key has been saved in /etc/ssh/ssh_host_ecdsa_key.pub.
The key fingerprint is:
SHA256:um1+vTyn213vGYDfvGBaZv4iK/pep5El/dFKZrLLOG0 root@david-pc
The key's randomart image is:
+---[ECDSA 256]---+
|                 |
|                 |
|                 |
|            o   .|
|        S  o.++..|
|       .    =*=..|
|      .    *.O.=.|
|       o..+=E+o.*|
|      .+*+o*XB+=+|
+----[SHA256]-----+
david@david-pc:/etc/ssh$ sudo ssh-keygen -t ed25519 -f /etc/ssh/ssh_host_ed25519_key
Generating public/private ed25519 key pair.
Enter passphrase (empty for no passphrase): 
Enter same passphrase again: 
Your identification has been saved in /etc/ssh/ssh_host_ed25519_key.
Your public key has been saved in /etc/ssh/ssh_host_ed25519_key.pub.
The key fingerprint is:
SHA256:b0SV2rTBfmt3q2VBCjqq0jW6fiVgCMHhC783rL+t/OU root@david-pc
The key's randomart image is:
+--[ED25519 256]--+
|.oo        ...   |
|.o         .=    |
|... .     .* o . |
|.... o   .o = +  |
| .. . . So.  o o |
|   o   +.+.   o +|
|  . = o.= o  . +o|
|   = =.+ .    o. |
|  ..BB= E    ..  |
+----[SHA256]-----+
david@david-pc:/etc/ssh$ sudo service ssh restart

#Linux