SSH masofadagi Linux server bilan shifrlangan aloqa o‘rnatish uchun ishlatiladi. Serverda OpenSSH Server paketi va ishlayotgan sshd xizmati bo‘lishi kerak.

Xizmat holatini tekshirish

sudo systemctl status ssh
sudo ss -tlnp | grep ’:22’

Kalit juftligini yaratish

ssh-keygen -t ed25519 -C "feruzbek-laptop"
ssh-copy-id user@192.0.2.10
ssh user@192.0.2.10

Maxfiy private key faylini hech kimga yubormang. Public key (.pub) serverdagi authorized_keys fayliga joylanadi.

Xavfsizlik tekshiruvlari

  • Keraksiz akkauntlarga SSH kirishini bermang.
  • Kalit fayl ruxsatlarini cheklang (chmod 600).
  • Firewall’da SSH portini faqat kerakli manbalardan oching.
  • PasswordAuthentication sozlamasini o‘zgartirishdan oldin yangi kalit bilan kirish ishlashini ikkinchi sessiyada tekshiring.

Mashq

Virtual mashinada Ed25519 kalit yarating, public key’ni serverga yuboring va kalit bilan loginni sinang.