先在樹莓派上生成SSH Key:
- ssh-keygen -t rsa -C <YOURNANME>@<YOURDEVICE>
- cd ~
- install -d -m 700 ~/.ssh
- cat ~/.ssh/id_rsa.pub | ssh <USERNAME>@<IP-ADDRESS> 'cat >> .ssh/authorized_keys'
也可在putty或其它軟件上生成
然后將生成的公鑰 pi.pub 用Samba/SFTP/ZMODEM傳送至樹莓派
- cat pi.pub >> .ssh/authorized_keys
7.為SSH啟用兩步認證
- sudo apt-get install libpam-google-authenticator
配置:
- google-authenticator
截屏(WIN: WIN + Prtscr, Android: Power Button + Volume -) 存至安全的地方
所有選項均選yes
用手機掃描二維碼
- sudo nano /etc/pam.d/sshd
添加:
- auth required pam_google_authenticator.so
然后
- sudo nano /etc/ssh/sshd_config
找到 ChallengeResponseAuthentication
把 no 改成 yes
- sudo apt-get install ssh
- sudo /etc/init.d/sshd restart
測試:
- ssh pi@raspberrypi