복사되었습니다!
OS 환경 : Oracle Linux 9.6 (64bit)
방법 : 리눅스 9 패스워드 없는 ssh 연결 설정 스크립트
rac 설치시 패스워드 없는 ssh 연결이 필요함, 이때는 $GRID_HOME/oui/prov/resources/scripts/sshUserSetup.sh 스크립트를 이용하면됨
하지만 rac 설치 뿐만 아니라 다른 경우에도 가끔 패스워드 없는 ssh 연결 설정을 해야하는데
아래 스크립트를 이용하면 간편하게 설정 가능함(sshUserSetup.sh을 가져와서 이용해도됨)
sshpasswdless.sh 파일 생성
|
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
|
# cat sshpasswdless.sh
#!/bin/sh
# "sh sshpasswdless.sh" 로 실행해도 bash로 재실행
[ -n "$BASH_VERSION" ] || exec bash "$0" "$@"
set -u
echo "=================================================="
echo " SSH Passwordless Setup"
echo "=================================================="
echo
# --------------------------------------------------
# 사전 체크
# --------------------------------------------------
for cmd in ssh ssh-keygen ssh-keyscan sshpass; do
if ! command -v "$cmd" >/dev/null 2>&1; then
echo "[ERROR] '$cmd' 명령어를 찾을 수 없습니다."
echo
if [ "$cmd" = "sshpass" ]; then
echo "sshpass 패키지가 필요합니다."
echo "예:"
echo " RHEL / Oracle Linux 8+ : dnf install sshpass"
echo " RHEL / Oracle Linux 7 : yum install sshpass"
fi
exit 1
fi
done
# --------------------------------------------------
# 사용자 입력
# --------------------------------------------------
DEFAULT_USER=$(whoami)
read -r -p "SSH 계정 [${DEFAULT_USER}]: " SSH_USER
SSH_USER=${SSH_USER:-$DEFAULT_USER}
echo
echo "설정할 노드를 콤마(,)로 구분해서 입력하세요."
echo "예: node1,node2,node3"
echo "예: 192.168.10.11,192.168.10.12,192.168.10.13"
echo
read -r -p "Nodes: " NODE_INPUT
if [ -z "$NODE_INPUT" ]; then
echo "[ERROR] 노드를 입력해야 합니다."
exit 1
fi
IFS=',' read -ra RAW_NODES <<< "$NODE_INPUT"
NODES=()
for node in "${RAW_NODES[@]}"; do
# 앞뒤 공백 제거
node=$(echo "$node" | xargs)
if [ -z "$node" ]; then
continue
fi
# 일반 hostname / IPv4 기준 간단한 검증
if [[ ! "$node" =~ ^[A-Za-z0-9._-]+$ ]]; then
echo "[ERROR] 잘못된 hostname/IP 형식: $node"
exit 1
fi
NODES+=("$node")
done
if [ "${#NODES[@]}" -eq 0 ]; then
echo "[ERROR] 유효한 노드가 없습니다."
exit 1
fi
echo
echo "--------------------------------------------------"
echo "SSH 계정 : $SSH_USER"
echo "대상 노드:"
for node in "${NODES[@]}"; do
echo " - $node"
done
echo "--------------------------------------------------"
echo
# --------------------------------------------------
# 각 서버 Password 입력
# --------------------------------------------------
declare -a PASSWORDS
for ((i=0; i<${#NODES[@]}; i++)); do
node="${NODES[$i]}"
while true; do
read -r -s -p "${SSH_USER}@${node} password: " pw
echo
if [ -n "$pw" ]; then
PASSWORDS[$i]="$pw"
break
fi
echo "[WARN] Password가 비어 있습니다. 다시 입력하세요."
done
done
echo
echo "=================================================="
echo " 1. SSH Host Key 수집"
echo "=================================================="
TMPDIR=$(mktemp -d /tmp/sshpasswdless.XXXXXX)
cleanup()
{
unset PASSWORDS
rm -rf "$TMPDIR"
}
trap cleanup EXIT
KNOWN_HOSTS_FILE="$TMPDIR/known_hosts"
PUBKEY_FILE="$TMPDIR/all_pubkeys"
touch "$KNOWN_HOSTS_FILE"
touch "$PUBKEY_FILE"
chmod 600 "$KNOWN_HOSTS_FILE"
chmod 600 "$PUBKEY_FILE"
for node in "${NODES[@]}"; do
echo "[INFO] ssh-keyscan : $node"
if ! ssh-keyscan -T 5 "$node" >> "$KNOWN_HOSTS_FILE" 2>/dev/null; then
echo "[ERROR] SSH Host Key를 가져오지 못했습니다: $node"
exit 1
fi
done
sort -u "$KNOWN_HOSTS_FILE" -o "$KNOWN_HOSTS_FILE"
# 현재 실행 서버에도 known_hosts 등록
mkdir -p "$HOME/.ssh"
chmod 700 "$HOME/.ssh"
touch "$HOME/.ssh/known_hosts"
chmod 600 "$HOME/.ssh/known_hosts"
while IFS= read -r line; do
grep -qxF "$line" "$HOME/.ssh/known_hosts" 2>/dev/null ||
echo "$line" >> "$HOME/.ssh/known_hosts"
done < "$KNOWN_HOSTS_FILE"
echo
echo "=================================================="
echo " 2. 각 노드 SSH Key 생성 및 Public Key 수집"
echo "=================================================="
SSH_OPTIONS=(
-o ConnectTimeout=10
-o PreferredAuthentications=password
-o PubkeyAuthentication=no
-o StrictHostKeyChecking=yes
)
for ((i=0; i<${#NODES[@]}; i++)); do
node="${NODES[$i]}"
password="${PASSWORDS[$i]}"
echo
echo "[INFO] $node SSH Key 확인"
# SSH directory 생성
if ! SSHPASS="$password" sshpass -e ssh \
"${SSH_OPTIONS[@]}" \
"${SSH_USER}@${node}" \
'mkdir -p ~/.ssh &&
chmod 700 ~/.ssh &&
touch ~/.ssh/authorized_keys &&
touch ~/.ssh/known_hosts &&
chmod 600 ~/.ssh/authorized_keys ~/.ssh/known_hosts'; then
echo "[ERROR] SSH 접속 실패: $node"
echo " 계정 / Password / SSH 설정을 확인하세요."
exit 1
fi
# SSH Key가 없으면 생성
if ! SSHPASS="$password" sshpass -e ssh \
"${SSH_OPTIONS[@]}" \
"${SSH_USER}@${node}" \
'if [ ! -f ~/.ssh/id_rsa ] || [ ! -f ~/.ssh/id_rsa.pub ]; then
echo "[REMOTE] SSH RSA Key 생성"
ssh-keygen -q -t rsa -b 3072 -N "" -f ~/.ssh/id_rsa
else
echo "[REMOTE] 기존 SSH Key 사용"
fi'; then
echo "[ERROR] SSH Key 생성 실패: $node"
exit 1
fi
# Public Key 수집
pubkey=$(
SSHPASS="$password" sshpass -e ssh \
"${SSH_OPTIONS[@]}" \
"${SSH_USER}@${node}" \
'cat ~/.ssh/id_rsa.pub'
)
if [ -z "$pubkey" ]; then
echo "[ERROR] Public Key를 가져올 수 없습니다: $node"
exit 1
fi
echo "$pubkey" >> "$PUBKEY_FILE"
echo "[OK] Public Key 수집 완료: $node"
done
sort -u "$PUBKEY_FILE" -o "$PUBKEY_FILE"
echo
echo "=================================================="
echo " 3. 모든 노드에 Public Key 배포"
echo "=================================================="
for ((i=0; i<${#NODES[@]}; i++)); do
node="${NODES[$i]}"
password="${PASSWORDS[$i]}"
echo "[INFO] authorized_keys 설정 : $node"
SSHPASS="$password" sshpass -e ssh \
"${SSH_OPTIONS[@]}" \
"${SSH_USER}@${node}" \
'cat > ~/.ssh/.all_pubkeys.tmp' < "$PUBKEY_FILE"
if [ $? -ne 0 ]; then
echo "[ERROR] Public Key 전송 실패: $node"
exit 1
fi
SSHPASS="$password" sshpass -e ssh \
"${SSH_OPTIONS[@]}" \
"${SSH_USER}@${node}" \
'
while IFS= read -r key
do
if ! grep -qxF "$key" ~/.ssh/authorized_keys 2>/dev/null
then
echo "$key" >> ~/.ssh/authorized_keys
fi
done < ~/.ssh/.all_pubkeys.tmp
rm -f ~/.ssh/.all_pubkeys.tmp
chmod 700 ~/.ssh
chmod 600 ~/.ssh/authorized_keys
'
if [ $? -ne 0 ]; then
echo "[ERROR] authorized_keys 설정 실패: $node"
exit 1
fi
echo "[OK] $node"
done
echo
echo "=================================================="
echo " 4. known_hosts 배포"
echo "=================================================="
for ((i=0; i<${#NODES[@]}; i++)); do
node="${NODES[$i]}"
password="${PASSWORDS[$i]}"
echo "[INFO] known_hosts 설정 : $node"
SSHPASS="$password" sshpass -e ssh \
"${SSH_OPTIONS[@]}" \
"${SSH_USER}@${node}" \
'cat > ~/.ssh/.known_hosts.tmp' < "$KNOWN_HOSTS_FILE"
if [ $? -ne 0 ]; then
echo "[ERROR] known_hosts 전송 실패: $node"
exit 1
fi
SSHPASS="$password" sshpass -e ssh \
"${SSH_OPTIONS[@]}" \
"${SSH_USER}@${node}" \
'
while IFS= read -r key
do
if ! grep -qxF "$key" ~/.ssh/known_hosts 2>/dev/null
then
echo "$key" >> ~/.ssh/known_hosts
fi
done < ~/.ssh/.known_hosts.tmp
rm -f ~/.ssh/.known_hosts.tmp
chmod 600 ~/.ssh/known_hosts
'
echo "[OK] $node"
done
echo
echo "=================================================="
echo " 5. Passwordless SSH 테스트"
echo "=================================================="
FAIL_COUNT=0
for ((i=0; i<${#NODES[@]}; i++)); do
src="${NODES[$i]}"
password="${PASSWORDS[$i]}"
echo
echo "[$src]"
for dst in "${NODES[@]}"; do
printf " %-25s -> %-25s : " "$src" "$dst"
result=$(
SSHPASS="$password" sshpass -e ssh \
"${SSH_OPTIONS[@]}" \
"${SSH_USER}@${src}" \
"ssh \
-o BatchMode=yes \
-o ConnectTimeout=5 \
-o StrictHostKeyChecking=yes \
${SSH_USER}@${dst} hostname" 2>/dev/null
)
if [ $? -eq 0 ]; then
echo "OK ($result)"
else
echo "FAIL"
((FAIL_COUNT++))
fi
done
done
echo
echo "=================================================="
if [ "$FAIL_COUNT" -eq 0 ]; then
echo " SSH Passwordless 설정 완료"
echo " 모든 노드 간 SSH 테스트 성공"
else
echo " 설정 완료, 하지만 ${FAIL_COUNT}개의 SSH 연결 테스트가 실패했습니다."
echo " 위 FAIL 항목을 확인하세요."
fi
echo "=================================================="
|
수행
|
1
2
3
4
5
6
7
8
9
10
11
|
# sh sshpasswdless.sh
==================================================
SSH Passwordless Setup
==================================================
[ERROR] 'sshpass' 명령어를 찾을 수 없습니다.
sshpass 패키지가 필요합니다.
예:
RHEL / Oracle Linux 8+ : dnf install sshpass
RHEL / Oracle Linux 7 : yum install sshpass
|
sshpass 패키지가 없다고 나옴
sshpass 패키지 설치
|
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
|
# dnf install sshpass -y
Last metadata expiration check: 1:01:41 ago on Fri 25 Sep 2026 03:17:10 PM KST.
Dependencies resolved.
=====================================================================================================================================================================
Package Architecture Version Repository Size
=====================================================================================================================================================================
Installing:
sshpass x86_64 1.09-4.el9 ol9_appstream 33 k
Transaction Summary
=====================================================================================================================================================================
Install 1 Package
Total download size: 33 k
Installed size: 47 k
Downloading Packages:
sshpass-1.09-4.el9.x86_64.rpm 51 kB/s | 33 kB 00:00
---------------------------------------------------------------------------------------------------------------------------------------------------------------------
Total 50 kB/s | 33 kB 00:00
Running transaction check
Transaction check succeeded.
Running transaction test
Transaction test succeeded.
Running transaction
Preparing : 1/1
Installing : sshpass-1.09-4.el9.x86_64 1/1
Running scriptlet: sshpass-1.09-4.el9.x86_64 1/1
Verifying : sshpass-1.09-4.el9.x86_64 1/1
Installed:
sshpass-1.09-4.el9.x86_64
Complete!
|
다시 스크립트 수행
|
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
|
# sh sshpasswdless.sh
==================================================
SSH Passwordless Setup
==================================================
SSH 계정 [root]: root
설정할 노드를 콤마(,)로 구분해서 입력하세요.
예: node1,node2,node3
예: 192.168.10.11,192.168.10.12,192.168.10.13
Nodes: 192.168.137.161,192.168.137.162
--------------------------------------------------
SSH 계정 : root
대상 노드:
- 192.168.137.161
- 192.168.137.162
--------------------------------------------------
root@192.168.137.161 password:
root@192.168.137.162 password:
==================================================
1. SSH Host Key 수집
==================================================
[INFO] ssh-keyscan : 192.168.137.161
[INFO] ssh-keyscan : 192.168.137.162
==================================================
2. 각 노드 SSH Key 생성 및 Public Key 수집
==================================================
[INFO] 192.168.137.161 SSH Key 확인
[REMOTE] SSH RSA Key 생성
[OK] Public Key 수집 완료: 192.168.137.161
[INFO] 192.168.137.162 SSH Key 확인
[REMOTE] SSH RSA Key 생성
[OK] Public Key 수집 완료: 192.168.137.162
==================================================
3. 모든 노드에 Public Key 배포
==================================================
[INFO] authorized_keys 설정 : 192.168.137.161
[OK] 192.168.137.161
[INFO] authorized_keys 설정 : 192.168.137.162
[OK] 192.168.137.162
==================================================
4. known_hosts 배포
==================================================
[INFO] known_hosts 설정 : 192.168.137.161
[OK] 192.168.137.161
[INFO] known_hosts 설정 : 192.168.137.162
[OK] 192.168.137.162
==================================================
5. Passwordless SSH 테스트
==================================================
[192.168.137.161]
192.168.137.161 -> 192.168.137.161 : OK (adg1)
192.168.137.161 -> 192.168.137.162 : OK (adg2)
[192.168.137.162]
192.168.137.162 -> 192.168.137.161 : OK (adg1)
192.168.137.162 -> 192.168.137.162 : OK (adg2)
==================================================
SSH Passwordless 설정 완료
모든 노드 간 SSH 테스트 성공
==================================================
|
162 서버로 접속 테스트
|
1
2
3
4
5
6
7
|
# ssh 192.168.137.162
Activate the web console with: systemctl enable --now cockpit.socket
Last failed login: Fri Sep 25 16:16:14 KST 2026 from 192.168.137.161 on ssh:notty
There was 1 failed login attempt since the last successful login.
Last login: Fri Sep 25 15:08:26 2026 from 10.212.134.200
#
|
정상적으로 패스워드 입력 없이 162 서버로 ssh 연결이 됨
결론 :
본문의 스크립트를 사용하면 간편하게 노드간 패스워드 없는 ssh 연결이 가능함
참조 :
'Linux, Unix > Tip' 카테고리의 다른 글
| Oracle Linux 10 nmcli 명령으로 IP 확인 및 변경 방법 (0) | 2026.09.07 |
|---|---|
| AIX nmon 명령어를 이용한 시스템 자원 모니터링 (0) | 2026.07.26 |
| Oracle Linux 8 grep 또는 find 명령 특정 단어 들어간 파일 찾기 (0) | 2026.06.11 |
| Oracle Linux 9 온라인 디스크 증설 방법 (0) | 2026.05.23 |
| Oracle Linux 9 oracle asmlib v3 구성 가이드 (0) | 2026.01.09 |