How to use the command used before:
ctrl + r
(default port: 22)
1. vim /etc/ssh/sshd_config
2.
* Port can change to the number close to 65535.
2.1 How to use root account
1) how to change the password of root
sudo passwd root
2) how to change to root
su root
3) create user
adduser test (better)
useradd -m test (-m: create user folder /home/test)
4) delete user
userdel -r test (-r: also delete folder /home/test)
5) change password of user
passwd test
2.2 How to add sudoer
1) "su root"
2) "visudo" (open /etc/sudoers)
3) add "user ALL=(ALL) ALL"
2.3 How to check which user has sudo right
usermod -aG sudo test (add 'test' into sudo group)
getent group sudo
* 通常root账号就只通过密钥登陆,只有一人掌握密钥;
开通1-2个sudo账号,用于管理权限;
开通若干普通账号,用于部署等操作。
IP address can be divided into public ip and private ip.
1. localhost:
Default is point to 127.0.0.1. However, localhost is not equel to 127.0.0.1. It can be changed.
2. 127.0.0.1:
首先我们要先知道一个概念,凡是以127开头的IP地址,都是回环地址(Loop back address),其所在的回环接口一般被理解为虚拟网卡,并不是真正的路由器接口。
所谓的回环地址,通俗的讲,就是我们在主机上发送给127开头的IP地址的数据包会被发送的主机自己接收,根本传不出去,外部设备也无法通过回环地址访问到本机。
*小说明:正常的数据包会从IP层进入链路层,然后发送到网络上;而给回环地址发送数据包,数据包会直接被发送主机的IP层获取,后面就没有链路层他们啥事了。
而127.0.0.1作为{127}集合中的一员,当然也是个回环地址。只不过127.0.0.1经常被默认配置为localhost的IP地址。
一般会通过ping 127.0.0.1来测试某台机器上的网络设备是否工作正常。
3. 0.0.0.0:
首先,0.0.0.0是不能被ping通的。在服务器中,0.0.0.0并不是一个真实的的IP地址,它表示本机中所有的IPV4地址。监听0.0.0.0的端口,就是监听本机中所有IP的端口。
ref: https://www.jianshu.com/p/ad7cd1d5be45
A Dynamic Segment can be created by wrapping a folder's name in square brackets: [folderName]. For example, [id] or [slug].
ssh -i /path/to/private_key.pem username@server_ip
* issue: "WARNING: UNPROTECTED PRIVATE KEY FILE!"
solution: sudo chmod 600 /path/to/private_key.pem