Instance: Permission denied (publickey)

分享于 

7分钟阅读

互联网

  繁體

问题:

这是我尝试连接时的输出:


~ λ ssh -v 34.89.154.144


OpenSSH_8.3p1, OpenSSL 1.1.1h 22 Sep 2020


debug1: Reading configuration data /etc/ssh/ssh_config


debug1: Connecting to 34.89.154.144 [34.89.154.144] port 22.


debug1: Connection established.


debug1: identity file /home/tim/.ssh/id_rsa type 0


debug1: identity file /home/tim/.ssh/id_rsa-cert type -1


debug1: identity file /home/tim/.ssh/id_dsa type -1


debug1: identity file /home/tim/.ssh/id_dsa-cert type -1


debug1: identity file /home/tim/.ssh/id_ecdsa type -1


debug1: identity file /home/tim/.ssh/id_ecdsa-cert type -1


debug1: identity file /home/tim/.ssh/id_ecdsa_sk type -1


debug1: identity file /home/tim/.ssh/id_ecdsa_sk-cert type -1


debug1: identity file /home/tim/.ssh/id_ed25519 type -1


debug1: identity file /home/tim/.ssh/id_ed25519-cert type -1


debug1: identity file /home/tim/.ssh/id_ed25519_sk type -1


debug1: identity file /home/tim/.ssh/id_ed25519_sk-cert type -1


debug1: identity file /home/tim/.ssh/id_xmss type -1


debug1: identity file /home/tim/.ssh/id_xmss-cert type -1


debug1: Local version string SSH-2.0-OpenSSH_8.3


debug1: Remote protocol version 2.0, remote software version OpenSSH_7.2p2 Ubuntu-4ubuntu2.10


debug1: match: OpenSSH_7.2p2 Ubuntu-4ubuntu2.10 pat OpenSSH_7.0*,OpenSSH_7.1*,OpenSSH_7.2*,OpenSSH_7.3*,OpenSSH_7.4*,OpenSSH_7.5*,OpenSSH_7.6*,OpenSSH_7.7* compat 0x04000002


debug1: Authenticating to 34.89.154.144:22 as 'tim'


debug1: SSH2_MSG_KEXINIT sent


debug1: SSH2_MSG_KEXINIT received


debug1: kex: algorithm: curve25519-sha256@libssh.org


debug1: kex: host key algorithm: ecdsa-sha2-nistp256


debug1: kex: server->client cipher: chacha20-poly1305@openssh.com MAC: <implicit> compression: none


debug1: kex: client->server cipher: chacha20-poly1305@openssh.com MAC: <implicit> compression: none


debug1: expecting SSH2_MSG_KEX_ECDH_REPLY


debug1: Server host key: ecdsa-sha2-nistp256 SHA256:w2LwJiLfvysv6AJDqA6R0u5dZuXVbwdqXsQCZ0IhlT8


debug1: Host '34.89.154.144' is known and matches the ECDSA host key.


debug1: Found key in /home/tim/.ssh/known_hosts:2


debug1: rekey out after 134217728 blocks


debug1: SSH2_MSG_NEWKEYS sent


debug1: expecting SSH2_MSG_NEWKEYS


debug1: SSH2_MSG_NEWKEYS received


debug1: rekey in after 134217728 blocks


debug1: Will attempt key: /home/tim/.ssh/id_rsa RSA SHA256:DDVIWu+4qABFT+8uCSJuZ9bSh4y1FH+zAW2owNw1J7I


debug1: Will attempt key: /home/tim/.ssh/id_dsa


debug1: Will attempt key: /home/tim/.ssh/id_ecdsa


debug1: Will attempt key: /home/tim/.ssh/id_ecdsa_sk


debug1: Will attempt key: /home/tim/.ssh/id_ed25519


debug1: Will attempt key: /home/tim/.ssh/id_ed25519_sk


debug1: Will attempt key: /home/tim/.ssh/id_xmss


debug1: SSH2_MSG_EXT_INFO received


debug1: kex_input_ext_info: server-sig-algs=<rsa-sha2-256,rsa-sha2-512>


debug1: SSH2_MSG_SERVICE_ACCEPT received


debug1: Authentications that can continue: publickey


debug1: Next authentication method: publickey


debug1: Offering public key: /home/tim/.ssh/id_rsa RSA SHA256:DDVIWu+4qABFT+8uCSJuZ9bSh4y1FH+zAW2owNw1J7I


debug1: Authentications that can continue: publickey


debug1: Trying private key: /home/tim/.ssh/id_dsa


debug1: Trying private key: /home/tim/.ssh/id_ecdsa


debug1: Trying private key: /home/tim/.ssh/id_ecdsa_sk


debug1: Trying private key: /home/tim/.ssh/id_ed25519


debug1: Trying private key: /home/tim/.ssh/id_ed25519_sk


debug1: Trying private key: /home/tim/.ssh/id_xmss


debug1: No more authentication methods to try.


tim@34.89.154.144: Permission denied (publickey).




答案1:

我收到了相同的错误:


ssh <MY-IP>


The authenticity of host '<MY-IP> (<MY-IP>)' can't be established.


ECDSA key fingerprint is SHA256:A....


Are you sure you want to continue connecting (yes/no)? yes


Warning: Permanently added '<MY-IP>' (ECDSA) to the list of known hosts.


<MY-USER>@<MY-IP>: Permission denied (publickey).




我按照以下步骤操作:使用第三方工具连接,我可以使用ssh连接到新实例:


ssh -i <my-private-ssh-key> <MY-IP>




Linux <MY-INSTANCE-NAME> 4.19.0-11-cloud-amd64 #1 SMP Debian 4.19.146-1 (2020-09-17) x86_64



The programs included with the Debian GNU/Linux system are free software;


the exact distribution terms for each program are described in the


individual files in /usr/share/doc/*/copyright.



Debian GNU/Linux comes with ABSOLUTELY NO WARRANTY, to the extent


permitted by applicable law.


Last login: Thu Oct 1 14:50:16 2020 from <SOME-IP>


<MY-USER>s@<MY-INSTANCE-NAME>:~$ hostname


<MY-INSTANCE-NAME>



另一个好的选择是安装Google Cloud SDK,然后使用


gcloud compute ssh --project <PROJECT_ID> --zone <ZONE> <VM-INSTANCE_NAME>



有关更多信息,请参见以下链接


答案2:

将ssh公钥添加到(操作系统登录)元数据服务器应该修复这个问题,使用gcloud SDK或在cloud shell中尝试这些命令


gcloud auth login 


gcloud config set project *project-name*


gcloud compute os-login ssh-keys add --key-file ../path/to/public/key



,并检查你是否拥有使用os登录方法登录的正确角色


 log-in with out sudo permissions : roles/compute.oslogin 


 log-in with sudo permissions : roles/compute.osAdminlogin