OpenSSH for Absolute Beginners
Vložit
- čas přidán 14. 06. 2024
- In today's episode of Veronica Explains, I'm going to demonstrate the very basics of OpenSSH. We'll talk about the client, the server, key-based authentication, and creating a well constructed config file for managing your connections.
All music recorded by me, on Linux, of course!
Chapters:
00:00 Intro
02:47 Is OpenSSH installed?
03:45 Configuring the OpenSSH server
08:24 Connecting via SSH
10:18 Key-based authentication
19:33 SSH client config file
21:40 Outro
#OpenSSH #Server #Linux - Věda a technologie
Your excitement about ssh-copy-id makes it obvious you remember a time before ssh-copy-id. We live in the future!
Some of is still don't know about it. I probably break it (unintentionally) when I set up new users on the machines I manage because I typically don't give them passwords at all. In my view EVERY password on any system is a honeypot for bad guys.
I never use it, because none of our servers have password authentication enabled. And that breaks ssh-copy-id.
@@wombatdkwhen you set first time server. is really useful
I followed your instruction and the result is this message
Failed to enable unit:refusing to operate on alias name or link unit file: sshd service
How can I resolve this issue.thank you
I am using debian in linux
Your broken window background on the windows machine is priceless! Top tier comedy 🤣
Thank you for close captioning your videos, and not just using the auto-generated ones. This means a lot to the deaf community!
It's my pleasure!
Lovely introduction. I'd add one caveat: Whenever you edit the sshd_config file on a remote server... DO NOT disconnect until you verified that you can reconnect :) i.e.:
- edit sshd_conf
- restart sshd
- DO NOT close your active connection
- open a new terminal window on your local machine and connect to your server
- if you broke ssh, use the still-open active connection to fix yer good ol' mistake :)
Nothing sucks more than accidentally locking yourself - and possibly everyone else - out of the server.
Since connections might drop - and will, according to Murphy, at the most inconvenient time -, I usually use another safety net for servers I have no other means of logging into:
First, I create a backup of the working configuration. Then, I set up an _at_ job that restores the old configuration and restarts _sshd_ in maybe ten minutes. Finally, just to be extra sure I won't cut off my sole way of accessing the server, I also create a cronjob to restore the previously backed up configuration and restart _sshd_ every 15 minutes or so.
For many years, the procedure described above has worked for me.
@@Thiesi I've always yolo'ed it ... but that's a rather good idea!
@@Thiesi that is like reverse dead man's switch, nice!
Great Advice! I've done this before, and it sucks!
I've set up three SSH servers this year and I watch this video every time. Thanks for making a comprehensive guide!
I'm glad it's helpful!
I’ve been in into systems engineering for the last 15 years, and dammit, i can confirm, this Girl rocks! She clearly knows exactly the best practices and workarounds… another excellent video.
I would appreciate to work with someone like you.
44 years in the business. Recently took off my Software Engineering hat after 30 years and dusted off my old System Engineering hat. Relearning and/or catching up lots of stuff. I was also a Computer Science Adjunct Professor for 15 of those years and love to teach. Great job! Got the exactly what I needed from your OpenSSH training. You're a natural. Looking forward to more videos.
Just loving your videos! I've been using Linux since the late 90's, so I know 90% of what you're covering, but I love learning the new bits, and how you present it is so entertaining. :-)
You are an SYS_ADMIN CLASSIC ! As a former CNE "dinasour" I met with a lot of network types over the years.
I have a definite soft spot in my heart for QUICK WIT and SARCASM, which, CLEARLY, you have an abundance of... 😲
I believe we developed it over the course of "39 hour" days spent in 65 degree computer rooms chasing gremlins.
I abandoned Novell many years ago and became enamoured with Linux. I too have very little use for Microsoft or Apple.
I am STILL a computer junkie, and derive great pleasure from resurrecting olde systems and repurposing them for others.
Something I encourage other geeks to do is resurrect old PCs and get them into the hands of young kids.
Even if it is just playing games at first, it gets them comfortable with PC utilisation. It can lead them to learning many things.
Oh, BTW, another Subscriber too !
I have always been confused by SSH as often the steps are given, but not the WHY. This video was so helpful. I have it all set up now. Thank you and keep up the great videos!!!
awesome video! I would love a more in depth SSH video and more about fail2ban and stuff. I also had no idea windows had an SSH server!
Keep up the good work! A playlist for beginners would be awesome because you explain stuff very well!
I like the hi-lighting of the relevant text, to make sure we were looking at the correct thing.
I do love an historical review of anything technological ... telnet, etc.
i don't have anything to say but leaving a comment to help her out with the youtube algorithm coz her videos are informative
The energy and explanation in this video are simply amazing!
Clean and crystal clear explanation and subtle jokes to keep engagement.
Please do a video for all those topics and group them into a playlist.
Thanks for the knowledge!
Edit: I subscribed
Just wanted to thank you for this. Extremely helpful. You are an awesome presenter/teacher!
Thank you! It means a lot to me!
Would love to see a video on the history.
I wish I'd found this channel when I was a newbie. I still appreciate the content for being comfy, and sometimes covering something I've missed.
I'd definitely like to see more about key management.
Subscribed because of the clean, direct explanations and the optimistic nerdy vibes.Keep up the good work 👏
Just found your video and I love it. I like how you explain everything most people who make videos always assume you know what their talking about and sometimes setup up and installs are trashed. I have been using Linux for many years but sometimes I still look like a beginner. Thank You.
I've learnt more from this video than anyone has been able to teach me
VMs now set to key only, thanks mate
This was so very well explained. Thank you for taking time to go through the sections of each command. It really helps demystify what I'm looking at when you do that.
Hi Veronica, for this video you have earned my subscription. You are doing an excellent job. Better than me. This even the fact that I've been at it since the early 90's and now have over 30 years of experience on almost all operating systems. But you never stop learning. Also, you forget something again and there does a refresher quite good. All the things you don't do every day ... but you surely know that too. Your B-52's shirt looks good. Further, at 3:32 did I see the Flying Toasters? After Dark's Flying Toasters. That was the time where I gathered my experience.
You asked about next topics: rsync, nfs, smb (cifs), vnc, rdp, rdesktop, X and so on. So I don't run out of topics at all. Keep up the good work. Stay safe. Servus from Bavaria
I'm so very new to this Linuxland. And when I need some info video on certain topics about Linux, I'm happy to see your channel pop-up on my search. Totally enjoying this amazing content! Keep it up... thank you for your magnificent work!
OMG, finally a proper way to explain SSH without password login requirements for avoiding rainbow table attacks. Nature bless you!
That was a really excellent, and very thorough tutorial. Thank you!
Also, if you haven't already, covering ssh-agent and fail2ban in other videos would be great. Since you asked. 🙂
Packed with interesting stuff! I've been a causal Linux user for years, but I learned SO MUCH from this! Thank you!
Excellent!! Very nice presentation, good choice on content depth and outstandingly clear.
I'm glad I came by to watch this. Thanks for this video, Veronica! I'd love to see you explore ssh more on Windows as well since that's my daily driver for work and play. Basically, anything you think is useful for ssh, I'll come watch!
Gonna (probably) get a System76 laptop for my small business, though.
I have searched many websites but none of them explained it this well. I couldn't help myself but thank you again for your time making this video
Veronica .. you are a life savor.
thank you for explaining things in a way my brain processes input. i always struggle with understanding things because of the way they are being explained.
This is super clear about lots of stuff other explanations tend to expect you to already know / don't bother directly stating, & probably would have helped me out a ton when I was trying to learn gitolite AND ssh at the same time a little while ago, lol. Fantastic learning material; thank you!
Thank you so much, I needed a complete explanation of these topics directed for single-neuron ppl like me. Saved me probably hours of research since Im not very good at these things ❤
I just wanted to say how much I'm enjoying your videos - they're awesome!
I've been interested in Linux and Unix for a long time, but I'm really only getting started with it properly now, and your videos are super helpful; thank you! I really like how you explain things in such an approachable and relaxed way.
I'd love to learn more about the history of remote access tools, as it's something I find fascinating too (your video on the Wyse Terminal has got me searching on eBay…).
Thanks again and keep doing what you're doing!
Thank you for watching them! I hope they're helpful!
@@VeronicaExplains They really are! Thank you! 🙂
Loved the simplied SSH class, I had all of this in a college class but the professor bored me to death. Keep up the great videos!
As usual, excellent explanation. Very humble. Thanks
I liked this explanation better than the guy that likes to take " coffee breaks". It filled in some gaps in my knowledge. I have setup ssh between my raspberry pi 4 and 2 VPS's. But so paranoid that if something happened to my PI , I could lose access.
Veronica I encourage you to create more videos on the subject, and yes please do an rsync one.
Thanks for another fun and informative video. As a network engineer I have been using ssh on a daily basis for years an I still had a great time learning a few new tricks. I would like to request a video covering ssh-agent also have you ever thought about making a video on rsynch? . I think that would be really interesting. Ooh one other thing that is really fun with SSH is ssh tunneling! That would probably be a fun video too. Keep on rockin' in the geek world!! :- ) C=
Excellent way of explaining. Love it!. I have learned a lot from your video.
I love your humor!!!! Intelligent, knowledgeable, and good for laughs. Thank you for sharing your brain with the world
You made it simple to understand. A great video, thanks.
What I really like watching videos or reading materials that says "something for absolute beginners" is that I always learn something new.
I never knew that was a tool for copying SSH keys. Usually I was editing the authorize_keys file in order to 'upload my public key'.
To be fair, you usually have to edit the file because most servers won't allow you to use the copy command - it won't work when password auth is disabled.
Woow! So clear and concise! Tnx a lot ❤
Best tutorial so far. Saludos desde El Salvador 🇸🇻 😎
You rock. This video was so helpful in helping me understand a little more about ssh. So glad I discovered your channel!
So much fun and humor in this kind of nerdy content always makes my day! Congrats smart lady... I'm a new sub 4 your chanel!!!
Okay I can't let it go unsaid any longer as I watch this great video. Fingerless gloves and the B52s... I miss the 80s. 😊
I’ve never heard SSD explained so clearly. Thank you.
Awesome as always. Thank you Veronica
Love the cadence of your lessons. Keep up the good work.
Thanks! Watched this a dozen times while SSHing into my opened router!
Because Linux is AWESOME, and so are you!
Oh? The moment that I saw Veronica's new upload as a CZcams suggestion, it was the thumbnail that drew me to quickly click on the link. I did not know that it was to Veronica's tech tutorials. The thumbnail reminded me so much of a loved and missed actress/comedian Gilda Radner that I thought it may be new archive footage of one of her many interviews/performances. Came for the comedy, left with a better understanding of OpenSSH. 🤭🎭💻
Wish I had this video to share with co-workers a few years ago (retired now) it was always "interesting" trying to explain ssh and shared keys. You make it all clear.
Thank you so much for this video!!! I'm learning so much about linux from you. I've been struggling trying to figure out how to just view an IP address, so I especially liked the bonus tip of using "hostname -I"
Fantastic videos, very easy to follow, and hilarious! I'm really enjoying the quirky and goodnaturedly-snarky humor; your writing style has a similar vibe to Technology Connections.
Thank you! His videos are certainly an inspiration.
I work in IT field in a small healthcare company, but I'm not a good one. But I love your channel and learn a lot. It's weird to say this but your channel is like the first The Sims game or Sim City 2000. It reminds me of good old days of computer. Love and support from a small town in Indonesia 🙏
You have an amazing voice for narration! Do you sing?
Also, I love your energy! In the computing space, we tend to talk in very flat tones about things, like we're speaking with all lower case letters, but you totally change that! Don't let anyone tell you to stop :D
Thank you so much! And yes, I do sing!
Thanks a bunch for this video, super helpful. You are a great presenter and obviously very knowledgeable on the topic.
Hi Veronica, you're very funny in the nicest of ways...thank you for all your presentations! Excellent material. Hugs from Buenos Aires.
I have an unexpected urge to rewatch police academy rn. Thank you for the video!
Thankyou Veronica! I truly enjoyed your video and I am just a noob on SSH part while I'm almost expert on Linux. Glad that you made this really clear on SSH part. I followed your instruction and managed to install and setup and manage SSH. I did on both of MX Linux systems. The only thing when I first checked "sudo systemctl status sshd", ended up missing systemd. I figured quickly that boot is not set to Server so I navigate to MX Boot and change "boot to" MXxxxxxxxxamd64 (systemd). Then rebooted and went back to terminal, Bingo it's up and running.. At first, I couldn't get it connected to local computer and googled, found out I forgot to fix firewall to allow ssh thru terminal. Bingo got connected afterward. Thankyou and good job!😁👍 (I subscribed you 😁)
The attention to detail and the little things on the linode screenshot was 10/10
I'm glad you caught it!
would love to see a home server setup video, maybe breaking down and explaining how to self host programs. I really learn a lot from your content and something like this would be very appreciated
Yes, PLEASE! I would really appreciate watching a complete walk thru of installing Ubuntu home server. Thank you. You are a wonderful teacher. kudos
Thank you so much Veronica!! Love your vids :) Sending greetings from Hungary
Just discovered the channel after your post in the Fediverse. I don't learn much (but still do), and that's very pedagogical. Great explanation, good rhythm, good advices... I'll recommend to my tech colleagues and some friends! I still need to find a French equivalent channel for my mum... xD
I am glad your videos are here on youtube! THANK YOU!! I finally was able to remote desktop from win10home to pop!_os but had to use NoMachine and now trying to use it to connect via ssh but am stumbling. I am hoping to use your walkthrough here to figure out just how to do that. :) Also, you mention "keychains"... I will have to look that up!
Super Veronica! Very clear and useful...thx
Thank you for watching! :)
Love the shirt! _Wild Planet_ is an incredible album, and was my first exposure to the B-52's.
I am forever greatful for your content!!!
this really helped make the whole process clear! thanks so much~
Yes, please, to a video on the history of remote tools. 😊
Thank you. So well explained and fun to learn. If only you were my math teacher...
fail2ban is quite important.
Also tunneling. And please include x-windows tunneling.
And if you will teach us how teach like you☺
@Veronica Explains - You just earned a new subscriber because of this video. Thank You !!!!
WOW just what I was looking for!!! thanks so much
Nice video. I've been using ssh for 20+years. Love the shirt. Saw the B-52's back in the early 90's!
Fantastic! One of my favorite bands!
Thank you for this video, Veronica.
Highly informative 🙏
The "like your mother waiting for a phone call" was so good
Thank u very much i wait for this video and i will keep waiting for each video u make
Veronica, excellent content. I've been using ssh for some time but just fiddle not knowing why? Now I know the why, thank you...
🤩 wow, thanks. Good video. Well done. Everything I needed to know. 👍
Amazing, you made that look wicked easy.
Great content, great B-52's shirt. What's not to love?
Hi Veronica, that's a great tutorial about ssh config. I thank you so much for this explanation. Greetz out of cold Germany
This was an incredible tutorial, far better than the information my university provides. For one thing, it's not focused at windows only. This + man pages told me all I needed to get set up.
That was very informative, thanks for sharing!!
I had used ssh to connect to servers a lot but this was so helpful since I did not know about key generation procedures and things that need to be done on the server. If you don't have a server, you can use your Linux system as both client and server for practicing with ssh. you just need to install the ssh service as she mentioned. then get the IP and connect as she mentioned. and you're in a terminal inside another terminal. you can hit ctrl D to exit the SSH connection.
since this is in your local network (and not through the internet), and generally port forwarding on home internet connections is disabled by default, you don't have to worry about being attacked since any device on that network cannot be accessed by others from the internet.
you could enable port forwarding so internet requests go through, then enter your external IP to connect to your pc. so you can connect to your pc with your pc through the internet. you shouldn't do this (unless you want to) LOL
Everyday is a school day. I can't believe managing ssh keys is so easy... I'm over here managing my ssh keys the hard way when it could be so easy. Thanks.
thank you for this awesome explanation .
Thanx a lot Veronica. This helps a great deal !
Great tutorial, spinning up my first Proxmox homelab today, many thanks Mrs! 😊
The windows desktop wallpaper was a nice touch :)
I've follow your video and realized an ssh connection between my Win/Mac/Linux machines... Thanks Veronica!
What a great video! I would love to see one about drive encryption, as mentioned here.
Great video V. Thanks 👍
Hi Veronica, I just wanted to say a quick thank you for this video, and the numerous others I've enjoyed on your channel. This video in particular though, helped me to work around an authentication issue I've been having with SSH, since I replaced some hardware in my server... still don't know what went wrong or what fixed it exactly but it's working now.
I'm so glad it was a helpful video, and I'm glad you got the issue sorted. Thanks for sharing, and good luck! :)
@@VeronicaExplains I've just had to use the video again and I still have to stop myself from calling the key algorithm "ed209"!
You are awesome! So glad I have found your channel!! :)
Thanks for this great video. I really ĺike the way of presentation. It is interesting and entertaining.
Great video, you've earned yourself another subscriber.
wow what an intro! subscribed just for that...cool!
Hi Veronica! Thanks Veronica!
Thanks for the video, it was very helpful for me;)