内核版本5.4.18-85-generic一、安装ssh1、安装命令Ubuntu / Debian sudoaptupdatesudoaptinstallopenssh-server2、启动与开机自启sudosystemctlenable--nowssh或者sudosystemctlenablessh# 开机自启sudosystemctl startssh# 立即启动3、配置文件路径/etc/ssh/sshd_config4、使用 vim 或 nano 编辑需要 root 或 sudo 权限sudovim/etc/ssh/sshd_config配置项推荐值说明配置文件中实际写法PasswordAuthenticationyes必须开启否则无法用密码登录PasswordAuthentication yesPubkeyAuthenticationyes保持开启密钥和密码可并存PubkeyAuthentication yesPort22SSH 服务监听端口建议改高端口Port 22PermitRootLoginno禁止 root 直接密码登录更安全PermitRootLogin noMaxAuthTries6最大密码尝试次数防暴力破解MaxAuthTries 6LoginGraceTime2m登录超时时间超时自动断开LoginGraceTime 2mChallengeResponseAuthenticationno禁用挑战响应认证保持关闭ChallengeResponseAuthentication noUsePAMyesPAM 负责密码验证必须开启UsePAM yes5、重新加载配置sudosystemctl reloadssh6、检查ssh状态sudosystemctl statusssh7、临时登录ssh-oStrictHostKeyCheckingno-oUserKnownHostsFileNUL kylin192.xx.xxx