1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12

# 安装（CentOS）
yum install -y sshpass

# 安装（Debian/Ubuntu）
apt install -y sshpass

# 免密 SSH 登录
sshpass -p 'your-password' ssh root@<host-ip>

# sshpass + ssh 不提示 yes/no
sshpass -p 'your-password' ssh \
    -o StrictHostKeyChecking=no user@<host-ip>

1
2
3
4

vim /etc/ssh/ssh_config

# 加上这一行
StrictHostKeyChecking no

1
2
3
4
5
6

vim /etc/ssh/sshd_config

GSSAPIAuthentication no
UseDNS no

service sshd restart

1
2
3
4
5
6

ssh-keygen -t rsa
# 默认 2048 位 RSA，公私钥存在 ~/.ssh/

# 当前目录下多出两个文件
# id_rsa       ← 私钥（**绝不能泄露**）
# id_rsa.pub   ← 公钥（要上传到服务器）

1
2
3
4
5
6
7
8

# 假设你已经在服务器上
mkdir -p ~/.ssh
chmod 700 ~/.ssh
touch ~/.ssh/authorized_keys
chmod 600 ~/.ssh/authorized_keys

# 把本地公钥内容粘贴进去
cat id_rsa.pub >> ~/.ssh/authorized_keys

1

ssh-copy-id -i ~/.ssh/id_rsa.pub user@<host-ip>

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17

vim /etc/ssh/sshd_config

# 启用 RSA 认证（默认是 yes）
RSAAuthentication yes
PubkeyAuthentication yes

# 指定公钥文件位置
AuthorizedKeysFile .ssh/authorized_keys

# 允许 root 登录（视业务）
PermitRootLogin yes

# **关键：禁用密码登录**
PasswordAuthentication no

# 重启 sshd
service sshd restart

1

cat other_id_rsa.pub >> ~/.ssh/authorized_keys

1
2
3
4
5
6
7
8

# 文件
scp /local/file.txt user@<host>:/remote/path/

# 目录（加 -r）
scp -r /local/dir user@<host>:/remote/path/

# 携带密码（自动化场景）
sshpass -p 'your-password' scp -r /local/dir user@<host>:/remote/path/

1
2
3
4
5
6
7
8

# 文件
scp user@<host>:/remote/file.txt /local/path/

# 目录
scp -r user@<host>:/remote/dir /local/path/

# 携带密码
sshpass -p 'your-password' scp user@<host>:/remote/file.txt /local/path/

1
2
3
4

ethtool eno1
# 找到 "Supports Wake-on:" 和 "Wake-on:" 两行
# Supports Wake-on: pumbg
# Wake-on: d        ← d = 禁用

 1
 2
 3
 4
 5
 6
 7
 8
 9
10

# 立即启用（重启后失效）
ethtool -s eno1 wol g

# 永久启用：写进网卡配置
# CentOS/RHEL
echo "ETHTOOL_OPTS='-s eno1 wol g'" >> /etc/sysconfig/network-scripts/ifcfg-eno1

# Debian/Ubuntu
# 在 /etc/network/interfaces 里加
# up ethtool -s eno1 wol g

1
2

ip a
# link/ether 58:11:22:c3:1b:4d

1
2
3
4
5
6
7
8
9

# 安装 wakeonlan
apt install wakeonlan    # Debian/Ubuntu
yum install wakeonlan    # CentOS（需 EPEL）

# 在同一局域网内发送
wakeonlan 58:11:22:c3:1b:4d

# 指定目标 IP（跨网段需要中继）
wakeonlan -i 10.8.33.5 58:11:22:c3:1b:4d

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16

# 立即关机
shutdown now
# 或
shutdown --poweroff now

# 取消关机
shutdown -c

# 预关机（带警告）
shutdown --poweroff

# 深度睡眠
pm-hibernate

# 重启
shutdown --reboot

1
2
3
4
5
6

# 重启网络
/etc/init.d/networking restart
systemctl restart networking

# 网卡配置
vim /etc/network/interfaces

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18

# This file describes the network interfaces available on your system
# and how to activate them. For more information, see interfaces(5).
source /etc/network/interfaces.d/*

# 环回口
auto lo
iface lo inet loopback

# DHCP 自动获取
auto eth0
iface eth0 inet dhcp

# 静态 IP
auto eth0
iface eth0 inet static
address 192.168.1.122
netmask 255.255.255.0
gateway 192.168.1.2

1
2
3
4
5
6
7

# 临时配置
cat /etc/resolv.conf
# nameserver 8.8.8.8
# nameserver 114.114.114.114

# 永久配置
sudo apt install resolvconf

1
2

# 配置
vim /etc/netplan/00-installer-config.yaml

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18

network:
  ethernets:
    eno1:
      dhcp4: false
      addresses:
        - 192.168.10.127/24
      routes:
        - to: default
          via: 192.168.10.1
      nameservers:
        addresses: [211.138.24.66, 114.114.114.114, 192.168.10.1]
    eno2:
      dhcp4: true
    eno3:
      dhcp4: true
    eno4:
      dhcp4: true
  version: 2

1
2

# 应用配置
netplan apply

1
2
3
4
5
6
7
8

vim /etc/systemd/resolved.conf

[Resolve]
# 几个公开 DNS（示例）
#DNS=1.1.1.1 8.8.8.8
DNS=114.114.114.114

systemctl restart systemd-resolved

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22

# 1. 查当前 IP
ip a
# 或
ifconfig

# 2. 备份原配置
cp /etc/network/interfaces /etc/network/interfaces.bak

# 3. 改成静态
cat > /etc/network/interfaces << "EOF"
auto lo
iface lo inet loopback

auto eth0
iface eth0 inet static
address 192.168.1.122
netmask 255.255.255.0
gateway 192.168.1.2
EOF

# 4. 重启
systemctl restart networking

1
2
3
4
5
6

# ed25519
ssh-keygen -t ed25519 -C "lwd@<your-host>"

# 加 passphrase（用 ssh-agent / GNOME Keyring 记）
ssh-keygen -t ed25519 -a 100 -C "lwd@<your-host>"
# -a 100 = 100 轮 KDF，增强私钥文件抗爆破

1
2
3
4
5
6
7
8
9

# 客户端 ~/.ssh/config
Include config.d/*.conf

# /etc/ssh/sshd_config.d/00-hardening.conf
PasswordAuthentication no
PermitRootLogin prohibit-password
MaxAuthTries 3
X11Forwarding no
AllowAgentForwarding no

1
2
3
4
5

# 上传
sftp user@host <<< 'put -r /local/dir /remote/path'

# 下载
sftp user@host <<< 'get -r /remote/path /local/'

1
2
3
4
5

rsync -avz --progress /local/dir/ user@host:/remote/dir/
# -a 归档模式
# -v 详细
# -z 传输时压缩
# --progress 显示进度

1
2
3
4
5
6
7
8

# 阿里云 SDK 远程开机
from aliyunsdkcore.client import AcsClient
from aliyunsdkecs.request.v20140526 import StartInstanceRequest

client = AcsClient('<access-key-id>', '<access-key-secret>', 'cn-hangzhou')
request = StartInstanceRequest.StartInstanceRequest()
request.set_InstanceIds(['i-bp1xxxxxxxxxxxxxx'])
client.do_action_with_exception(request)

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15

# 装
apt install wireguard

# 生成密钥
wg genkey | tee /etc/wireguard/privatekey | wg pubkey > /etc/wireguard/publickey

# 配置 /etc/wireguard/wg0.conf
[Interface]
Address = 10.0.0.1/24
PrivateKey = <server-private-key>
ListenPort = 51820

[Peer]
PublicKey = <client-public-key>
AllowedIPs = 10.0.0.2/32

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11

# 看现有连接
nmcli connection show

# 改 IP
nmcli connection modify "Wired connection 1" \
    ipv4.addresses 192.168.1.100/24 \
    ipv4.gateway 192.168.1.1 \
    ipv4.dns "1.1.1.1,8.8.8.8" \
    ipv4.method manual

nmcli connection up "Wired connection 1"

1
2
3
4

# Tailscale（2024 年最易上手）
curl -fsSL https://tailscale.com/install.sh | sh
tailscale up
# 自动获得 100.x.x.x 虚拟 IP，全网互通