![SSH 无法连接到 Google Cloud Compute-Engine-Instance:权限被拒绝(公钥)](https://linux22.com/image/758261/SSH%20%E6%97%A0%E6%B3%95%E8%BF%9E%E6%8E%A5%E5%88%B0%20Google%20Cloud%20Compute-Engine-Instance%EF%BC%9A%E6%9D%83%E9%99%90%E8%A2%AB%E6%8B%92%E7%BB%9D%EF%BC%88%E5%85%AC%E9%92%A5%EF%BC%89.png)
我跟着本教程介绍如何使用 ssh 设置 GCE-VM。但是我似乎无法像视频中的人那样通过 ssh 成功连接!这是我尝试连接时的输出(IP 是虚构的):
~ λ ssh -v 34.89.154.144
OpenSSH_8.3p1, OpenSSL 1.1.1h 22 Sep 2020
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: Connecting to 34.89.154.144 [34.89.154.144] port 22.
debug1: Connection established.
debug1: identity file /home/tim/.ssh/id_rsa type 0
debug1: identity file /home/tim/.ssh/id_rsa-cert type -1
debug1: identity file /home/tim/.ssh/id_dsa type -1
debug1: identity file /home/tim/.ssh/id_dsa-cert type -1
debug1: identity file /home/tim/.ssh/id_ecdsa type -1
debug1: identity file /home/tim/.ssh/id_ecdsa-cert type -1
debug1: identity file /home/tim/.ssh/id_ecdsa_sk type -1
debug1: identity file /home/tim/.ssh/id_ecdsa_sk-cert type -1
debug1: identity file /home/tim/.ssh/id_ed25519 type -1
debug1: identity file /home/tim/.ssh/id_ed25519-cert type -1
debug1: identity file /home/tim/.ssh/id_ed25519_sk type -1
debug1: identity file /home/tim/.ssh/id_ed25519_sk-cert type -1
debug1: identity file /home/tim/.ssh/id_xmss type -1
debug1: identity file /home/tim/.ssh/id_xmss-cert type -1
debug1: Local version string SSH-2.0-OpenSSH_8.3
debug1: Remote protocol version 2.0, remote software version OpenSSH_7.2p2 Ubuntu-4ubuntu2.10
debug1: match: OpenSSH_7.2p2 Ubuntu-4ubuntu2.10 pat OpenSSH_7.0*,OpenSSH_7.1*,OpenSSH_7.2*,OpenSSH_7.3*,OpenSSH_7.4*,OpenSSH_7.5*,OpenSSH_7.6*,OpenSSH_7.7* compat 0x04000002
debug1: Authenticating to 34.89.154.144:22 as 'tim'
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug1: kex: algorithm: [email protected]
debug1: kex: host key algorithm: ecdsa-sha2-nistp256
debug1: kex: server->client cipher: [email protected] MAC: <implicit> compression: none
debug1: kex: client->server cipher: [email protected] MAC: <implicit> compression: none
debug1: expecting SSH2_MSG_KEX_ECDH_REPLY
debug1: Server host key: ecdsa-sha2-nistp256 SHA256:w2LwJiLfvysv6AJDqA6R0u5dZuXVbwdqXsQCZ0IhlT8
debug1: Host '34.89.154.144' is known and matches the ECDSA host key.
debug1: Found key in /home/tim/.ssh/known_hosts:2
debug1: rekey out after 134217728 blocks
debug1: SSH2_MSG_NEWKEYS sent
debug1: expecting SSH2_MSG_NEWKEYS
debug1: SSH2_MSG_NEWKEYS received
debug1: rekey in after 134217728 blocks
debug1: Will attempt key: /home/tim/.ssh/id_rsa RSA SHA256:DDVIWu+4qABFT+8uCSJuZ9bSh4y1FH+zAW2owNw1J7I
debug1: Will attempt key: /home/tim/.ssh/id_dsa
debug1: Will attempt key: /home/tim/.ssh/id_ecdsa
debug1: Will attempt key: /home/tim/.ssh/id_ecdsa_sk
debug1: Will attempt key: /home/tim/.ssh/id_ed25519
debug1: Will attempt key: /home/tim/.ssh/id_ed25519_sk
debug1: Will attempt key: /home/tim/.ssh/id_xmss
debug1: SSH2_MSG_EXT_INFO received
debug1: kex_input_ext_info: server-sig-algs=<rsa-sha2-256,rsa-sha2-512>
debug1: SSH2_MSG_SERVICE_ACCEPT received
debug1: Authentications that can continue: publickey
debug1: Next authentication method: publickey
debug1: Offering public key: /home/tim/.ssh/id_rsa RSA SHA256:DDVIWu+4qABFT+8uCSJuZ9bSh4y1FH+zAW2owNw1J7I
debug1: Authentications that can continue: publickey
debug1: Trying private key: /home/tim/.ssh/id_dsa
debug1: Trying private key: /home/tim/.ssh/id_ecdsa
debug1: Trying private key: /home/tim/.ssh/id_ecdsa_sk
debug1: Trying private key: /home/tim/.ssh/id_ed25519
debug1: Trying private key: /home/tim/.ssh/id_ed25519_sk
debug1: Trying private key: /home/tim/.ssh/id_xmss
debug1: No more authentication methods to try.
[email protected]: Permission denied (publickey).
我尝试过以下方法来解决这个问题:
- 在不同的地区(亚洲而不是欧洲)设置虚拟机
- 使用不同的映像(debian、ubuntu、最小和标准)设置虚拟机
- 尝试在 Windows 和 Linux 下进行设置
enable-oslogin = TRUE
项目范围内以及特定实例范围内- 从公共 ssh 密钥中删除主机部分
ssh [IP]
,,ssh [USER_IN_KEY]@[IP]
ssh [USER_ON_VM]@[IP]
我实际上不知道在哪里可以找到问题!有人能给我一些建议吗?告诉我可以尝试什么,或者问题可能出在哪里?
谢谢!
答案1
我尝试在新的 VM 实例中重现我自己项目中的错误并按照您提到的视频进行操作,但收到了与您相同的错误:
ssh <MY-IP>
The authenticity of host '<MY-IP> (<MY-IP>)' can't be established.
ECDSA key fingerprint is SHA256:A....
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added '<MY-IP>' (ECDSA) to the list of known hosts.
<MY-USER>@<MY-IP>: Permission denied (publickey).
我遵循以下步骤:使用第三方工具连接相反,我能够使用 ssh 将我的 Debian 连接到我的新实例:
ssh -i <my-private-ssh-key> <MY-IP>
Linux <MY-INSTANCE-NAME> 4.19.0-11-cloud-amd64 #1 SMP Debian 4.19.146-1 (2020-09-17) x86_64
The programs included with the Debian GNU/Linux system are free software;
the exact distribution terms for each program are described in the
individual files in /usr/share/doc/*/copyright.
Debian GNU/Linux comes with ABSOLUTELY NO WARRANTY, to the extent
permitted by applicable law.
Last login: Thu Oct 1 14:50:16 2020 from <SOME-IP>
<MY-USER>s@<MY-INSTANCE-NAME>:~$ hostname
<MY-INSTANCE-NAME>
另一个不错的选择是安装 Google Cloud SDK然后使用
gcloud compute ssh --project <PROJECT_ID> --zone <ZONE> <VM-INSTANCE_NAME>
你会看到以下内容关联了解更多信息。
答案2
将 ssh 公钥添加到您的(os-login)元数据服务器应该可以解决问题,请使用 gcloud SDK 或在 cloud shell 中尝试这些命令
gcloud auth login
gcloud config set project *project-name*
gcloud compute os-login ssh-keys add --key-file ../path/to/public/key
并使用 os-login 方法检查您是否具有正确的登录角色
log-in with out sudo permissions : roles/compute.oslogin
log-in with sudo permissions : roles/compute.osAdminlogin