- 1 Top 10 Enterprise Database Systems to Consider in 2015
- 2 Docker's DCT Delivers Digital Signing for Security
- 3 Red Hat Enterprise Linux 7.2 Enters Beta with Improved Container Support
- 4 VMware CEO Pat Gelsinger Gives VMworld 5 Imperatives for Success
- 5 VMware vSphere Integrated Containers Previewed at VMworld
Tip of the Trade: OpenSSH Speed Tips and Tricks
Although using public key authentication instead of passwords is a great method for increasing the security of SSH transfers, transferring SSH identity keys can be a royal pain. First, you create your key pairs; then, you copy the public key into the correct locations on all the machines you want to log into. The keys must be in a particular format, and you must go into the correct directory with the correct permissions. Fortunately, ssh-copy-id, a slick utility included with OpenSSH, makes it easy. Using public key authentication is a great way to make SSH transfers more secure. Transferring SSH identity keys can be a royal pain, however. Fortunately, ssh-copy-id, a slick utility included with OpenSSH, simplifies the process.
SSH is a secure remote administration utility with a seemingly endless variety of clever shortcuts and capabilities. For example, you can log in and execute a remote command with a single command, rather than first logging in and then typing the command:This is a fun example that also demonstrates a little gotcha- ls ~ will list Carla's home directory, not Terry's. If you want to see Terry's home directory you must specify ls /home/terry. You can do this with any one-off command, such as starting a backup script, viewing running processes or printing a document.
$ ssh-copy-id -i id_rsa.pub terry@host2
Using key-based authentication instead of passwords means you don't have to give away system passwords. To make it easier to manage multiple remote systems, you can give your keys any arbitrary names you want when you create them, like this:
$ ssh-keygen -t rsa -f id_apacheserver
$ ssh -i id_apacheserver email@example.com
$ sshfs hostname:/remotedir localdir/