ToolypetMCP
intermediate3 minutessecurity

SSH Deployment Security Setup

Secure SSH deployment: generate key pairs, create passphrases, and set up key fingerprint verification.

sshdeploymentkey-managementdevops

Cuándo usar esta receta

Set up SSH keys for CI/CD deployment pipelines. Secure key pairs with passphrases and fingerprint verification to prevent unauthorized server access.

Pasos

1

Generate deployment key

Indicación:Generate Ed25519 SSH key pair with comment 'deploy@production-server' for CI/CD pipeline
2

Passphrase Generator

Probar esta herramienta

Create key passphrase

Indicación:Generate a 5-word passphrase to protect the SSH private key
3

Create key fingerprint

Indicación:Generate SHA-256 fingerprint of the public key for server-side verification

Preguntas frecuentes

Should CI/CD SSH keys have passphrases?

For interactive use, yes. For automated CI/CD, a passphrase complicates automation. Instead, use deploy keys with restricted permissions, IP allowlisting, and short-lived certificates.

How do I restrict SSH key access?

Use authorized_keys options: command restriction (force specific command), from restriction (IP whitelist), no-port-forwarding, and no-X11-forwarding. Principle of least privilege.

Recetas relacionadas