Chapter 7. Installing RHEL 6 on the cloner 133
7.2.8 Configuring SSH keys
SSH sessions are typically authenticated with passwords entered on the keyboard. With SSH
key-based authentication, sessions can be authenticated with public and private keys so that
no password is needed. SSH key-based authentication can be set up from the cloner (client)
to the virtual servers. If the master image has a copy of cloner’s public key in the
/etc/ssh/authorized_keys file, then key-based authentication will work on the cloned virtual
servers. Create a new DSA key in the /root/.ssh/ directory. If the /root/.ssh/ directory
does not yet exist, create it by running the mkdir command:
# cd /root/.ssh
# ssh-keygen -t dsa -P "" -f id_dsa
Generating public/private dsa key pair.
Your identification has been saved in id_dsa.
Your public key has been saved in id_dsa.pub.
The key fingerprint is:
The key's randomart image is:
+--[ DSA 1024]----+
|.==. |
|o. . . |
|E o o . o |
|=+ + = |
|oo. S |
|= . |
|=o |
|oo |
|. |
+-----------------+
This command creates a key pair where the file with the .pub suffix is the public key and the
other file is the private key. Note that the private key is only readable by root:
# ls -l id_dsa*
-rw-------. 1 root root 668 Oct 19 16:49 id_dsa
-rw-r--r--. 1 root root 619 Oct 19 16:49 id_dsa.pub
These files will be copied to the golden image Chapter 8, “Installing and configuring the
golden image” on page 137.
7.2.9 Inserting the vmcp module
To issue CP commands, the vmcp module is needed. By default, it is not loaded at boot time.
If you would like it to run at boot time, add the modprobe vmcp command, which will insert the
module, to the /etc/rc.d/rc.local, file, which is run at boot time:
# cd /etc/rc.d
# vi rc.local // add one line
...
touch /var/lock/subsys/local
modprobe vmcp
The vmcp command will now be available after the next reboot.
Commenti su questo manuale