Linux

1、使用PUTTYGEN生成证书，保存公钥和私钥，私钥用来认证时引用。如下图：

2、将公钥追加到/root/.ssh/authorized_keys

例如：cat >>/root/.ssh/authorized_keys << EOF

ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC
EOF

3、采用证书登陆命令

putty -ssh root@10.18.126.1 -i xxx.ppk  //此处引用私钥

      Linux集群规模20台，需相互间免密登陆。

      先选择一台主机保存所有主机的密钥，然后将密钥复制到所有主机。

1.登陆每台主机创建ssh.pub：

[root@master-1 ~]# ssh-keygen
Generating public/private rsa key pair.
Enter file in which to save the key (/root/.ssh/id_rsa):
Enter passphrase (empty for no passphrase):
Enter same passphrase again:
Your identification has been saved in /root/.ssh/id_rsa
Your public key has been saved in /root/.ssh/id_rsa.pub
The key fingerprint is:
SHA256:Z0rzrrX1DA+Yjw6S9iFnoGQfQc9NVn1PXEXHohC/gno root@jumpserver
The key's randomart image is:
+---[RSA 3072]----+
|      .   +o.. +B|
|     . o +..  o *|
|      . o .... +.|
|       . .  ..  .|
|    o o S + .    |
|   o o * * +     |
|    . B E = +    |
|     . B = = *   |
|        oo= . +  |
+----[SHA256]-----+
 

2. 每台主机执行ssh-copy-id root@master-1复制到Master-1

3.登陆Master-1将密码复制到所有主机：

scp .ssh/authorized_keys root@master-2:/root/ssh.txt

scp .ssh/authorized_keys root@master-3:/root/ssh.txt

scp .ssh/authorized_keys root@node-1:/root/ssh.txt

....

4.登陆每台主机，将ssh.txt追加到.ssh/authorized_keys即可。

cat /root/ssh.txt >> /root/.ssh/authorized_keys

　　安装好docker后执行下面命令

 sed -i "s/^DOCKER_NETWORK_OPTIONS=/DOCKER_NETWORK_OPTIONS=\'--bip=192.168.255.1\/24\'/g" /etc/sysconfig/docker-network 

即在/etc/sysconfig/docker-network 文件中DOCKER_NETWORK_OPTIONS=后添加'--bip=192.168.255.1/24';192.168.255.1/24根据实际情况进行修改。避免冲突