Gunakan opsi StrictHostKeyChecking, misalnya:
ssh -oStrictHostKeyChecking=no $h uptime
Opsi ini juga dapat ditambahkan ke ~ / .ssh / config, misal:
Host somehost
Hostname 10.0.0.1
StrictHostKeyChecking no
Perhatikan bahwa ketika kunci host telah berubah, Anda akan mendapatkan peringatan, bahkan dengan opsi ini:
$ ssh -oStrictHostKeyChecking=no somehost uptime
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@ WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
Someone could be eavesdropping on you right now (man-in-the-middle attack)!
It is also possible that a host key has just been changed.
The fingerprint for the RSA key sent by the remote host is
31:6f:2a:d5:76:c3:1e:74:f7:73:2f:96:16:12:e0:d8.
Please contact your system administrator.
Add correct host key in /home/peter/.ssh/known_hosts to get rid of this message.
Offending RSA key in /home/peter/.ssh/known_hosts:24
remove with: ssh-keygen -f "/home/peter/.ssh/known_hosts" -R 10.0.0.1
Password authentication is disabled to avoid man-in-the-middle attacks.
Keyboard-interactive authentication is disabled to avoid man-in-the-middle attacks.
ash: uptime: not found
Jika host Anda tidak sering diinstal ulang, Anda bisa membuatnya kurang aman (tetapi lebih nyaman untuk kunci host yang sering berubah) dengan -oUserKnownHostsFile=/dev/null
opsi. Ini membuang semua kunci host yang diterima sehingga tidak akan pernah menghasilkan peringatan.
Dengan 18,04, ada kemungkinan baru: StrictHostKeyChecking=accept-new
. Dari man 5 ssh_config
:
If this flag is set to “accept-new” then ssh will automatically
add new host keys to the user known hosts files, but will not
permit connections to hosts with changed host keys. If this flag
is set to “no” or “off”, ssh will automatically add new host keys
to the user known hosts files and allow connections to hosts with
changed hostkeys to proceed, subject to some restrictions.
yes
menampilkan "y", Anda mungkin lebih beruntungfor h in $SERVER_LIST; do yes yes | ssh $h "uptime"; done
(perhatikan tambahan ya, yang memberi tahu ya apa yang harus dikatakan daripada "y" ").