Ubuntu 網路

ubuntu

127.0.0.1       localhost
# 127.0.1.1       ubuntu (1)

sudo reboot now

ens32     Link encap:Ethernet  HWaddr 00:0c:29:06:dd:7e (1)
          inet addr:192.168.1.2  Bcast:192.168.1.254  Mask:255.255.255.0

查看內容:
cat /etc/resolv.conf

# Dynamic resolv.conf(5) file for glibc resolver(3) generated by resolvconf(8)
#     DO NOT EDIT THIS FILE BY HAND -- YOUR CHANGES WILL BE OVERWRITTEN
nameserver 192.168.1.254

# ifupdown has been replaced by netplan(5) on this system.  See
# /etc/netplan for current configuration.
# To re-enable ifupdown on this system, you can run:
#    sudo apt install ifupdown

cat /etc/netplan/*.yaml

# This is the network config written by 'subiquity'
network:
  version: 2
  renderer: networkd
  ethernets:
    ens32:(1)
      dhcp4: true

# This is the network config written by 'subiquity'
network:
  version: 2
  # renderer: networkd
  ethernets:
    ens32:
      # dhcp4: true
      addresses: [192.168.1.102/24](1)
      gateway4: 192.168.1.254
      nameservers:
        addresses: [192.168.1.254](2)

# The loopback network interface
auto lo
iface lo inet loopback

# The primary network interface
auto ens32 (1)
iface ens32 inet dhcp

# The loopback network interface
auto lo
iface lo inet loopback

# The primary network interface
auto ens32
# iface ens32 inet dhcp

iface ens32 inet static
address 192.168.1.102
netmask 255.255.255.0
gateway 192.168.1.254
dns-nameserver 192.168.1.254

sudo /etc/init.d/networking restart

rem Clear DNS Server Cache on Windows
ipconfig/flushdns

rem Clear NetBIOS/WINS cache
nbtstat -R (1)

sudo apt install cifs-utils -y

先在 /mnt 建立共享目錄名稱:
sudo mkdir /mnt/files
sudo mkdir /mnt/share

sudo mount -t cifs //$host/share /mnt/share -o user=$user,password=$password,vers=1.0,file_mode=0777,dir_mode=0777 (1)
sudo mount -t cifs //$host/files /mnt/files -o user=$user,password=$password,vers=1.0,file_mode=0555,dir_mode=0555

強制卸載 CIFS 連接:
sudo umount -a -t cifs,nfs -l

//$host/share /mnt/share cifs username=$user,password=$password,vers=1.0,file_mode=0777,dir_mode=0777
//$host/files /mnt/files cifs username=$user,password=$password,vers=1.0,file_mode=0555,dir_mode=0555

CIFS VFS: Server 192.168.1.2 has not responded in 180 seconds. Reconnecting...

Ubuntu 16 需安裝:
apt install open-vm-tools

檢查狀態:
service open-vm-tools status

如果下列表示執行正確
active (running)

檢查版本:
/usr/bin/vmware-toolbox-cmd -v

11.0.5.17716 (build-15389592)

先在 /mnt/hgfs 建立共享目錄名稱:
mkdir /mnt/hgfs/files
mkdir /mnt/hgfs/share

顯示共享目錄名稱:
vmware-hgfsclient

share
files

已事先在 VMWare 中的 Shared folders 建立好 share files 並啟用 Folder sharing，但找不到任何檔案:
ls /mnt/hgfs/files

共享目錄找不到任何檔案

需要執行 vmhgfs-fuse 掛載:
vmhgfs-fuse -o nonempty -o allow_other .host:/files /mnt/hgfs/files
vmhgfs-fuse -o nonempty -o allow_other .host:/share /mnt/hgfs/share

檢查掛載是否正確:
ls  /mnt/hgfs/files

PubkeyAuthentication yes

# 啟用密碼驗證，用戶端才能傳送公開金鑰。
PasswordAuthentication yes

ssh-keygen -t rsa -f ~/.ssh/id_rsa -N ""

-t ras           金鑰類型 rsa
-f ~/.ssh/id_rsa 指定金鑰檔案的路徑及名稱
-N ""            雙重認證密碼為空白。

-C 設定公開金鑰檔案結尾的註解，預設為「用戶@主機名稱」

rm ~/.ssh/id_*
ssh-keygen -t rsa -f ~/.ssh/id_rsa -N ""
ssh-keygen -t ecdsa -f ~/.ssh/id_ecdsa -N ""
ssh-keygen -t ed25519 -f ~/.ssh/id_ed25519 -N ""

cat ~/.ssh/id_rsa.pub > ~/.ssh/authorized_keys
cat ~/.ssh/id_ecdsa.pub >> ~/.ssh/authorized_keys
cat ~/.ssh/id_ed25519.pub >> ~/.ssh/authorized_keys

ssh-copy-id ubuntu@my-ssh-server (1)

$cat /home/ubuntu/.ssh/authorized_keys
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIE1l9OKM6n3rLhIMmGerihH+HzwsogkwF7QFWe1p5QDH ubuntu@client1 (1)

userhome=~

列出權限 rwx 採用下列：
ls -ld $userhome; ls -ld $userhome/.ssh; ls -l $userhome/.ssh

drwxr-xr-x 6 ubuntu ubuntu 11 2023-01-21 03:56 /home/ubuntu
drwx------ 2 ubuntu ubuntu 9 2023-01-21 16:51 /home/ubuntu/.ssh
total 9
-rw------- 1 ubuntu ubuntu  689 2023-01-21 16:51 authorized_keys
-rw------- 1 ubuntu ubuntu  227 2023-01-21 16:51 id_ecdsa
-rw-r--r-- 1 ubuntu ubuntu  183 2023-01-21 16:51 id_ecdsa.pub
-rw------- 1 ubuntu ubuntu  411 2023-01-21 16:51 id_ed25519
-rw-r--r-- 1 ubuntu ubuntu  103 2023-01-21 16:51 id_ed25519.pub
-rw------- 1 ubuntu ubuntu 1675 2023-01-21 16:51 id_rsa
-rw-r--r-- 1 ubuntu ubuntu  403 2023-01-21 16:51 id_rsa.pub

列出權限數字，採用下列：
stat -c "%a %n" $userhome/; stat -c "%a %n" $userhome/.ssh; stat -c "%a %n" $userhome/.ssh/*

755 /home/ubuntu/
700 /home/ubuntu/.ssh
600 /home/ubuntu/.ssh/authorized_keys
600 /home/ubuntu/.ssh/id_ecdsa
644 /home/ubuntu/.ssh/id_ecdsa.pub
600 /home/ubuntu/.ssh/id_ed25519
644 /home/ubuntu/.ssh/id_ed25519.pub
600 /home/ubuntu/.ssh/id_rsa
644 /home/ubuntu/.ssh/id_rsa.pub

UserHost='ubuntu@192.168.1.1' (1)

cd ~
mkdir ssh2 (2)

scp $UserHost:~/.ssh/* ssh2 (3)

rm -r .ssh/* (4)
cp ssh2/* .ssh
rm -rf ssh2

chmod -R 700 ~/.ssh (5)
chmod 600 ~/.ssh/authorized_keys

ssh $UserHost (6)

sudo cp /home/ubuntu/.ssh/* ~/.ssh (1)
sudo chown $USER:$USER ~/.ssh -R (2)

# sudo chown $USER:$USER ~/ (3)
chmod go-w ~/
chmod -R 700 ~/.ssh
chmod 600 ~/.ssh/authorized_keys

# ssh ubuntu@my-ssh-server (4)

ssh [options] [user@]hostname [command]

sudo chown $USER:$USER ~/

chmod 755 ~/
chmod -R 700 ~/.ssh

userhome=/home/ubuntu (1)
userhome=~ (2)
stat -c "%a %n" $userhome/; stat -c "%a %n" $userhome/.ssh; stat -c "%a %n" $userhome/.ssh/*

755 /home/ubuntu/
700 /home/ubuntu/.ssh (1)
700 /home/ubuntu/.ssh/authorized_keys
700 /home/ubuntu/.ssh/id_ecdsa
700 /home/ubuntu/.ssh/id_ecdsa.pub
700 /home/ubuntu/.ssh/id_ed25519
700 /home/ubuntu/.ssh/id_ed25519.pub
700 /home/ubuntu/.ssh/id_rsa
700 /home/ubuntu/.ssh/id_rsa.pub
700 /home/ubuntu/.ssh/known_hosts

userhome=~
ls -ld $userhome; ls -ld $userhome/.ssh; ls -l $userhome/.ssh

drwxr-xr-x 5 ubuntu ubuntu 4096 Sep 22 14:07 /home/ubuntu
drwx------ 2 ubuntu ubuntu 4096 Sep 22 14:06 /home/ubuntu/.ssh (1)
total 32
-rwx------ 1 ubuntu ubuntu  662 Sep 22 14:06 authorized_keys
-rwx------ 1 ubuntu ubuntu  227 Sep 22 14:06 id_ecdsa
-rwx------ 1 ubuntu ubuntu  174 Sep 22 14:06 id_ecdsa.pub
-rwx------ 1 ubuntu ubuntu  399 Sep 22 14:06 id_ed25519
-rwx------ 1 ubuntu ubuntu   94 Sep 22 14:06 id_ed25519.pub
-rwx------ 1 ubuntu ubuntu 1679 Sep 22 14:06 id_rsa
-rwx------ 1 ubuntu ubuntu  394 Sep 22 14:06 id_rsa.pub
-rwx------ 1 ubuntu ubuntu 1332 Sep 22 14:08 known_hosts

本地端的密鑰權限要為 700，改為 750：
chmod -R 750 ~/.ssh

以公鑰連接時，出現本地端的密鑰檔案權限錯誤：
ssh my-ssh-server
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@         WARNING: UNPROTECTED PRIVATE KEY FILE!          @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
Permissions 0750 for '/home/ubuntu/.ssh/id_ed25519' are too open.
It is required that your private key files are NOT accessible by others.
This private key will be ignored.

改回正確權限：
chmod -R 700 ~/.ssh

chmod 777 ~/.ssh/authorized_keys

$ssh my-ssh-server
ubuntu@my-ssh-server's password:

sudo journalctl -f
sudo tail -f /var/log/auth.log

~/.ssh/authorized_keys 權限不正確如下：
Jan 21 21:19:36 my-ssh-server sshd[1099]: Authentication refused: bad ownership or modes for file /home/ubuntu/.ssh/authorized_keys

~/ 權限不正確如下：
Jan 21 21:52:35 my-ssh-server sshd[1794]: Authentication refused: bad ownership or modes for directory /home/ubuntu

~/.ssh 權限不正確如下：
Jan 21 21:54:38 my-ssh-server sshd[1883]: Authentication refused: bad ownership or modes for directory /home/ubuntu/.ssh

ssh user@host -v

* 42,51 *
  debug1: Authentications that can continue: publickey,password (1)
  debug1: Next authentication method: publickey
  debug1: Offering public key: RSA SHA256:wijHZKyNlDnpWjsWOrJ1SpWtmDnXo0dF9se0XocyEZU /home/ubuntu/.ssh/id_rsa
! debug1: Authentications that can continue: publickey,password
! debug1: Trying private key: /home/ubuntu/.ssh/id_dsa
! debug1: Offering public key: ECDSA SHA256:RDesAMx/MZuCU0tPLpzwAVqgSxPQxsJCAXS1gKGpXy8 /home/ubuntu/.ssh/id_ecdsa
! debug1: Authentications that can continue: publickey,password
! debug1: Offering public key: ED25519 SHA256:mIdfzZ/RHKWrI+zoyEELflGW5jaL70VVzIUWfoOcNyM /home/ubuntu/.ssh/id_ed25519
! debug1: Authentications that can continue: publickey,password
! debug1: Next authentication method: password
--- 42,74 ----
  debug1: Authentications that can continue: publickey,password (2)
  debug1: Next authentication method: publickey
  debug1: Offering public key: RSA SHA256:wijHZKyNlDnpWjsWOrJ1SpWtmDnXo0dF9se0XocyEZU /home/ubuntu/.ssh/id_rsa
! debug1: Server accepts key: pkalg rsa-sha2-512 blen 279*
! debug1: Authentication succeeded (publickey).