docs(step1): add txt root to user ssh key copy
This commit is contained in:
25
doc/step-001-ssh-copy-key-root-to-user.txt
Normal file
25
doc/step-001-ssh-copy-key-root-to-user.txt
Normal file
@@ -0,0 +1,25 @@
|
||||
Step 001: Jak skopiowac klucze SSH na uzytkownika "user" uruchamiajac komendy jako root
|
||||
|
||||
Cel: skopiowac klucze/konfiguracje SSH z /root/.ssh do /home/user/.ssh albo tylko dodac klucz publiczny do authorized_keys.
|
||||
|
||||
Wariant A: Skopiuj caly katalog /root/.ssh do usera (ustaw prawa)
|
||||
|
||||
sudo install -d -m 700 -o user -g user /home/user/.ssh
|
||||
sudo cp -a /root/.ssh/. /home/user/.ssh/
|
||||
sudo chown -R user:user /home/user/.ssh
|
||||
sudo chmod 700 /home/user/.ssh
|
||||
sudo chmod 600 /home/user/.ssh/authorized_keys 2>/dev/null || true
|
||||
sudo chmod 600 /home/user/.ssh/id_* 2>/dev/null || true
|
||||
sudo chmod 644 /home/user/.ssh/*.pub 2>/dev/null || true
|
||||
sudo chmod 644 /home/user/.ssh/known_hosts 2>/dev/null || true
|
||||
|
||||
Uwaga: kopiowanie prywatnych kluczy (id_ed25519/id_rsa) na innego uzytkownika zwieksza ryzyko. Czasem lepiej uzyc wariantu B.
|
||||
|
||||
Wariant B: Tylko dopisz klucz publiczny roota do authorized_keys usera
|
||||
|
||||
sudo install -d -m 700 -o user -g user /home/user/.ssh
|
||||
sudo install -m 600 -o user -g user /dev/null /home/user/.ssh/authorized_keys
|
||||
sudo cat /root/.ssh/id_ed25519.pub | sudo tee -a /home/user/.ssh/authorized_keys >/dev/null
|
||||
sudo chown user:user /home/user/.ssh/authorized_keys
|
||||
sudo chmod 600 /home/user/.ssh/authorized_keys
|
||||
|
||||
Reference in New Issue
Block a user