rsyncをパスワードなしで実行、ファイル同期(鍵交換による認証)

[testuser@test-vm-01 ~]$ sudo vi /etc/ssh/sshd_config

# 変更前
44
45 # PubkeyAuthentication yes
46

# 変更前(コメントアウトを外す)
44
45 PubkeyAuthentication yes
46

[testuser@test-vm-01 ~]$ sudo systemctl restart sshd

[testuser@test-vm-02 ~]$ ssh-keygen -t ed25519 -C " -N "
Generating public/private ed25519 key pair.
Enter file in which to save the key (/home/testuser/.ssh/id_ed25519):
Your identification has been saved in /home/testuser/.ssh/id_ed25519
Your public key has been saved in /home/testuser/.ssh/id_ed25519.pub
The key fingerprint is:
SHA256:9eFW7Dbch9sLqw22+Cuwbe5Jq/g4sPqsEpIF42W1S7Q
The key’s randomart image is:
+–[ED25519 256]–+
|o. o.o |
|..+ . o . |
| + E … o |
|o. . . .oo.= o |
|. . . So .+ * o|
| . + . o. . +.|
| o = +. o .. .|
| o oo..++ . o .|
| .ooo==.o.. . |
+—-[SHA256]—–+

[testuser@test-vm-02 ~]$ ls -l ~/.ssh/
total 8
-rw——-. 1 testuser testuser 0 Oct 6 01:56 authorized_keys
-rw——-. 1 testuser testuser 387 Oct 6 05:03 id_ed25519
-rw-r–r–. 1 testuser testuser 82 Oct 6 05:03 id_ed25519.pub

# 公開鍵のファイルを送信側サーバーから受信側サーバーに転送
[testuser@test-vm-02 ~]$ cd  ~/.ssh 
[testuser@test-vm-02 .ssh]$ scp -P 22 /home/testuser/.ssh/id_ed25519.pub testuser@test-vm-01:/home/testuser/.ssh/test-vm-02_id_ed25519.pub
The authenticity of host 'test-vm-01 (10.0.1.4)’ can’t be established.
ED25519 key fingerprint is SHA256:IuqTIBCY+Ini556s6slIbaDUdHEGsdN2LuJ9wRNkG9s.
This key is not known by any other names
Are you sure you want to continue connecting (yes/no/[fingerprint])? yes
Warning: Permanently added 'test-vm-01’ (ED25519) to the list of known hosts.
testuser@test-vm-01’s password:パスワードを入力
id_ed25519.pub 100% 82 200.6KB/s 00:00

# 受信側サーバーで転送された公開鍵のファイルを確認
[testuser@test-vm-01 .ssh]$ ls -al
total 4
drwx——. 2 testuser testuser 62 Oct 6 05:29 .
drwx——. 3 testuser testuser 95 Oct 6 05:00 ..
-rw——-. 1 testuser testuser 0 Oct 6 05:01 authorized_keys
-rw——-. 1 testuser testuser 82 Oct 6 05:29 test-vm-02_id_ed25519.pub

# 事前に転送しておいた、送信側サーバー(test-vm-02)の公開鍵のを受信側サーバー(test-vm-01)のauthorized_keysに書き込み
[testuser@test-vm-01 ~]$ cd  ~/.ssh 
[testuser@test-vm-01 .ssh]$ cat test-vm-02_id_ed25519.pub >> authorized_keys

# 転送しておいた受信側サーバー(test-vm-01)の公開鍵を削除
[testuser@test-vm-01 .ssh]$ rm test-vm-02_id_ed25519.pub

# テスト用のファイルを送信側サーバーで作成
[testuser@test-vm-02 tmp]$ echo test >> /tmp/rsync_test

# rsyncコマンドを送信側サーバーで実行してファイルを転送
[testuser@test-vm-02 .ssh]$ rsync -avz -e “ssh -p 22" /tmp/rsync_test testuser@test-vm-01:/tmp/rsync_test
sending incremental file list
rsync_test
sent 128 bytes received 35 bytes 326.00 bytes/sec
total size is 5 speedup is 0.03

# 受信側サーバーで転送されたファイルを確認
[testuser@test-vm-01 .ssh]$ ls -l /tmp/rsync_test
-rw-r–r–. 1 testuser testuser 9 Oct 6 06:01 /tmp/rsync_test