SSH 无法连接到 Google Cloud Compute-Engine-Instance：权限被拒绝（公钥）

Question 1

我尝试在新的 VM 实例中重现我自己项目中的错误并按照您提到的视频进行操作，但收到了与您相同的错误：

ssh <MY-IP>
The authenticity of host '<MY-IP> (<MY-IP>)' can't be established.
ECDSA key fingerprint is SHA256:A....
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added '<MY-IP>' (ECDSA) to the list of known hosts.
<MY-USER>@<MY-IP>: Permission denied (publickey).

我遵循以下步骤：使用第三方工具连接相反，我能够使用 ssh 将我的 Debian 连接到我的新实例：

ssh -i <my-private-ssh-key> <MY-IP>

Linux <MY-INSTANCE-NAME> 4.19.0-11-cloud-amd64 #1 SMP Debian 4.19.146-1 (2020-09-17) x86_64

The programs included with the Debian GNU/Linux system are free software;
the exact distribution terms for each program are described in the
individual files in /usr/share/doc/*/copyright.

Debian GNU/Linux comes with ABSOLUTELY NO WARRANTY, to the extent
permitted by applicable law.
Last login: Thu Oct  1 14:50:16 2020 from <SOME-IP>
<MY-USER>s@<MY-INSTANCE-NAME>:~$ hostname
<MY-INSTANCE-NAME>

另一个不错的选择是安装 Google Cloud SDK然后使用

gcloud compute ssh --project <PROJECT_ID> --zone <ZONE> <VM-INSTANCE_NAME>

你会看到以下内容关联了解更多信息。

Answer

我尝试在新的 VM 实例中重现我自己项目中的错误并按照您提到的视频进行操作，但收到了与您相同的错误：

ssh <MY-IP>
The authenticity of host '<MY-IP> (<MY-IP>)' can't be established.
ECDSA key fingerprint is SHA256:A....
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added '<MY-IP>' (ECDSA) to the list of known hosts.
<MY-USER>@<MY-IP>: Permission denied (publickey).

我遵循以下步骤：使用第三方工具连接相反，我能够使用 ssh 将我的 Debian 连接到我的新实例：

ssh -i <my-private-ssh-key> <MY-IP>

Linux <MY-INSTANCE-NAME> 4.19.0-11-cloud-amd64 #1 SMP Debian 4.19.146-1 (2020-09-17) x86_64

The programs included with the Debian GNU/Linux system are free software;
the exact distribution terms for each program are described in the
individual files in /usr/share/doc/*/copyright.

Debian GNU/Linux comes with ABSOLUTELY NO WARRANTY, to the extent
permitted by applicable law.
Last login: Thu Oct  1 14:50:16 2020 from <SOME-IP>
<MY-USER>s@<MY-INSTANCE-NAME>:~$ hostname
<MY-INSTANCE-NAME>

另一个不错的选择是安装 Google Cloud SDK然后使用

gcloud compute ssh --project <PROJECT_ID> --zone <ZONE> <VM-INSTANCE_NAME>

你会看到以下内容关联了解更多信息。

Question 2

将 ssh 公钥添加到您的（os-login）元数据服务器应该可以解决问题，请使用 gcloud SDK 或在 cloud shell 中尝试这些命令

gcloud auth login    
gcloud config set project *project-name*
gcloud compute os-login ssh-keys add --key-file ../path/to/public/key

并使用 os-login 方法检查您是否具有正确的登录角色

 log-in with out sudo permissions   : roles/compute.oslogin   
 log-in with sudo permissions       : roles/compute.osAdminlogin

Answer

将 ssh 公钥添加到您的（os-login）元数据服务器应该可以解决问题，请使用 gcloud SDK 或在 cloud shell 中尝试这些命令

gcloud auth login    
gcloud config set project *project-name*
gcloud compute os-login ssh-keys add --key-file ../path/to/public/key

并使用 os-login 方法检查您是否具有正确的登录角色

 log-in with out sudo permissions   : roles/compute.oslogin   
 log-in with sudo permissions       : roles/compute.osAdminlogin

SSH 无法连接到 Google Cloud Compute-Engine-Instance：权限被拒绝（公钥）

答案1

答案2

相关内容