blocks|key|1868629|text|对于脚本化的ssh登录，您应该使用没有密码的密钥文件。这显然是一个安全风险，请注意密钥文件本身是充分安全的。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1868630|设置无密码ssh访问的说明|offset|length|1868631|entityMap|0|LINK|mutability|MUTABLE|url|http://www.thegeekstuff.com/2008/11/3-steps-to-perform-ssh-login-without-password-using-ssh-keygen-ssh-copy-id/^0|0|0|D|0|0^^$0|@$1|2|3|4|5|6|7|N|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|O|8|@]|9|@$D|P|E|Q|1|R]]|A|$]]|$1|F|3|-4|5|6|7|S|8|@]|9|@]|A|$]]]|G|$H|$5|I|J|K|A|$L|M]]]]

You should use a keyfile without passphrase for scripted ssh logins. This is obviously a security risk, take care that the keyfile itself is adequately secured.

<a href="http://www.thegeekstuff.com/2008/11/3-steps-to-perform-ssh-login-without-password-using-ssh-keygen-ssh-copy-id/" rel="noreferrer">Instructions for setting up passwordless ssh access</a>

blocks|key|316676|text|用一把ssh键。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|316677|看看ssh-keygen和ssh-copy-id。|offset|length|style|CODE|316678|在此之后，您可以以这种方式使用rsync：|316679|rsync+-a+--stats+--progress+--delete+/home/path+server:path|code-block|syntax|javascript|316680|entityMap^0|0|2|A|D|B|0|F|5|0|0^^$0|@$1|2|3|4|5|6|7|Q|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|R|8|@$D|S|E|T|F|G]|$D|U|E|V|F|G]]|9|@]|A|$]]|$1|H|3|I|5|6|7|W|8|@$D|X|E|Y|F|G]]|9|@]|A|$]]|$1|J|3|K|5|L|7|Z|8|@]|9|@]|A|$M|N]]|$1|O|3|-4|5|6|7|10|8|@]|9|@]|A|$]]]|P|$]]

Use a ssh key. 

Look at <code>ssh-keygen</code> and <code>ssh-copy-id</code>.

After that you can use an <code>rsync</code> this way :

<pre><code>rsync -a --stats --progress --delete /home/path server:path
</code></pre>

blocks|key|1512906|text|虽然你现在已经实现了，|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1512907|您还可以使用任何期望实现(您可以在Perl、Python中找到替代方法:+pexpect、paramiko等等)|offset|length|1512908|entityMap|0|LINK|mutability|MUTABLE|url|http://debaan.blogspot.com/2007/09/simple-expect-ssh-example.html^0|0|8|2|0|0^^$0|@$1|2|3|4|5|6|7|N|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|O|8|@]|9|@$D|P|E|Q|1|R]]|A|$]]|$1|F|3|-4|5|6|7|S|8|@]|9|@]|A|$]]]|G|$H|$5|I|J|K|A|$L|M]]]]

Though you've already implemented it by now,

you can also use any <a href="http://debaan.blogspot.com/2007/09/simple-expect-ssh-example.html" rel="nofollow">expect</a> implementation (you'll find alternatives in Perl, Python: pexpect, paramiko, etc..)

blocks|key|1868780|text|通过将环境变量rsync设置为要使用或使用--password-file选项的密码，可以避免在--password-file命令中使用密码提示。|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|1868781|entityMap^0|7|5|L|F|1B|F|0^^$0|@$1|2|3|4|5|6|7|H|8|@$9|I|A|J|B|C]|$9|K|A|L|B|C]|$9|M|A|N|B|C]]|D|@]|E|$]]|$1|F|3|-4|5|6|7|O|8|@]|D|@]|E|$]]]|G|$]]

You can avoid the password prompt on <code>rsync</code> command by setting the environment variable <code>RSYNC_PASSWORD</code> to the password you want to use or using the <code>--password-file</code> option.

blocks|key|1512938|text|使用"sshpass“非交互式ssh密码提供程序实用程序。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1512939|论Ubuntu|1512940|+sudo+apt-get+install+sshpass|code-block|syntax|javascript|1512941|命令到rsync|1512942|+/usr/bin/rsync+-ratlz+--rsh="/usr/bin/sshpass+-p+password+ssh+-o+StrictHostKeyChecking=no+-l+username"+src_path++dest_path|1512943|entityMap^0|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|O|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|P|8|@]|9|@]|A|$]]|$1|D|3|E|5|F|7|Q|8|@]|9|@]|A|$G|H]]|$1|I|3|J|5|6|7|R|8|@]|9|@]|A|$]]|$1|K|3|L|5|F|7|S|8|@]|9|@]|A|$G|H]]|$1|M|3|-4|5|6|7|T|8|@]|9|@]|A|$]]]|N|$]]

Use "sshpass" non-interactive ssh password provider utility

On Ubuntu

<pre><code> sudo apt-get install sshpass
</code></pre>

Command to rsync

<pre><code> /usr/bin/rsync -ratlz --rsh="/usr/bin/sshpass -p password ssh -o StrictHostKeyChecking=no -l username" src_path dest_path
</code></pre>

blocks|key|1512950|text|如果不能使用公钥/私钥，则可以使用expect：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1512951|#!/usr/bin/expect
spawn+rsync+SRC+DEST
expect+"password:"
send+"PASS\n"
expect+eof
if+[catch+wait]+{
++++puts+"rsync+failed"
++++exit+1
}
exit+0|code-block|syntax|javascript|1512952|您需要用常规的rsync源和目标参数替换SRC和DEST，并用密码替换PASS。只需确保这个文件是安全存储的！|1512953|entityMap^0|0|0|0^^$0|@$1|2|3|4|5|6|7|K|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|L|8|@]|9|@]|A|$E|F]]|$1|G|3|H|5|6|7|M|8|@]|9|@]|A|$]]|$1|I|3|-4|5|6|7|N|8|@]|9|@]|A|$]]]|J|$]]

If you can't use a public/private keys, you can use expect:

<pre><code>#!/usr/bin/expect
spawn rsync SRC DEST
expect "password:"
send "PASS\n"
expect eof
if [catch wait] {
 puts "rsync failed"
 exit 1
}
exit 0
</code></pre>

You will need to replace SRC and DEST with your normal rsync source and destination parameters, and replace PASS with your password. Just make sure this file is stored securely!

blocks|key|316763|text|自动输入rsync命令的密码是困难的。为了避免这个问题，我的简单解决方案是挂载要备份的文件夹。然后使用本地rsync命令备份已安装的文件夹。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|316764|mount+-t+cifs+//server/source/+/mnt/source-tmp+-o+username=Username,password=password
rsync+-a+/mnt/source-tmp+/media/destination/
umount+/mnt/source-tmp|code-block|syntax|javascript|316765|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|J|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|H|$]]

Automatically entering the password for the rsync command is difficult. My simple solution to avoid the problem is to mount the folder to be backed up. Then use a local rsync command to backup the mounted folder.

<pre><code>mount -t cifs //server/source/ /mnt/source-tmp -o username=Username,password=password
rsync -a /mnt/source-tmp /media/destination/
umount /mnt/source-tmp
</code></pre>

blocks|key|1868816|text|按照Andrew发布的想法，这是使用sshfs完成的：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1868817|echo+"SuperHardToGuessPass:P"+%7C+sshfs+-o+UserKnownHostsFile=/dev/null+-o+StrictHostKeyChecking=no+user@example.com:/mypath/+/mnt/source-tmp/+-o+workaround=rename+-o+password_stdin
rsync+-a+/mnt/source-tmp/+/media/destination/
umount+/mnt/source-tmp|code-block|syntax|javascript|1868818|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|J|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|H|$]]

Following the idea posted by Andrew Seaford, this is done using sshfs:

<pre><code>echo "SuperHardToGuessPass:P" | sshfs -o UserKnownHostsFile=/dev/null -o StrictHostKeyChecking=no user@example.com:/mypath/ /mnt/source-tmp/ -o workaround=rename -o password_stdin
rsync -a /mnt/source-tmp/ /media/destination/
umount /mnt/source-tmp
</code></pre>

blocks|key|316787|text|我在上使用了一个VBScript文件，它很好地服务于我。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|316788|set+shell+=+CreateObject("WScript.Shell")
shell.run"rsync+-a+Name@192.168.1.100:/Users/Name/Projects/test+."
WScript.Sleep+100
shell.SendKeys"Your_Password"
shell.SendKeys+"{ENTER}"|code-block|syntax|javascript|316789|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|J|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|H|$]]

I use a VBScript file for doing this on Windows platform, it servers me very well.

<pre><code>set shell = CreateObject("WScript.Shell")
shell.run"rsync -a Name@192.168.1.100:/Users/Name/Projects/test ."
WScript.Sleep 100
shell.SendKeys"Your_Password"
shell.SendKeys "{ENTER}"
</code></pre>

blocks|key|1512992|text|以下几点对我来说是可行的：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1512993|SSHPASS='myPassword'
/usr/bin/rsync+-a+-r+-p+-o+-g+--progress+--modify-window=1+--exclude+/folderOne+-s+-u+--rsh="/usr/bin/sshpass+-p+$SSHPASS+ssh+-o+StrictHostKeyChecking=no+-l+root"++source-path++myDomain:dest-path++>&2|code-block|syntax|javascript|1512994|我不得不安装sshpass|offset|length|style|CODE|1512995|entityMap^0|0|0|6|7|0^^$0|@$1|2|3|4|5|6|7|O|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|P|8|@]|9|@]|A|$E|F]]|$1|G|3|H|5|6|7|Q|8|@$I|R|J|S|K|L]]|9|@]|A|$]]|$1|M|3|-4|5|6|7|T|8|@]|9|@]|A|$]]]|N|$]]

The following works for me:

<pre><code>SSHPASS='myPassword'
/usr/bin/rsync -a -r -p -o -g --progress --modify-window=1 --exclude /folderOne -s -u --rsh="/usr/bin/sshpass -p $SSHPASS ssh -o StrictHostKeyChecking=no -l root" source-path myDomain:dest-path &gt;&amp;2
</code></pre>

I had to install <code>sshpass</code>

blocks|key|316804|text|我让它像这样工作：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|316805|sshpass+-p+"password"+rsync+-ae+"ssh+-p+remote_port_ssh"+/local_dir++remote_user@remote_host:/remote_dir|code-block|syntax|javascript|316806|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|J|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|H|$]]

I got it to work like this:

<pre><code>sshpass -p "password" rsync -ae "ssh -p remote_port_ssh" /local_dir remote_user@remote_host:/remote_dir
</code></pre>

blocks|key|316838|text|当我第一次访问时，官方解决方案(和其他解决方案)是不完整的，所以几年后我回来发布这种替代方法，以防其他人在这里打算使用公钥/私钥对：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|316839|从目标备份机执行此操作，从源备份到目标备份。|316840|rsync+-av+--delete+-e+'ssh+-p+59333+-i+/home/user/.ssh/id_rsa'+user@10.9.9.3:/home/user/Server/+/home/keith/Server/|offset|length|style|CODE|316841|从源计算机执行此操作，源计算机将从源发送到目标备份。|316842|rsync+-av+--delete+-e+'ssh+-p+59333+-i+/home/user/.ssh/id_rsa'+/home/user/Server/+user@10.9.9.3:/home/user/Server/|316843|而且，如果您没有为ssh使用备用端口，那么请考虑以下更优雅的示例：|316844|从目标备份机器执行此操作，从源备份到目标备份：|316845|sudo+rsync+-avi+--delete++user@10.9.9.3:/var/www/+/media/sdb1/backups/www/|316846|从源计算机执行此操作，源计算机从源发送到目标备份：|316847|sudo+rsync+-avi+--delete+/media/sdb1/backups/www/+user@10.9.9.3:/var/www/|316848|如果您仍被提示输入密码，则需要在/etc/ssh/sshd_config中检查ssh配置，并通过ssh-copy-id+user@10.9.9.3将每个用户发送到源用户和目标用户中，以验证每个用户都具有其他用户各自的公共ssh密钥。|316849|(同样，这是用于使用不带密码的ssh密钥对作为替代方法，而不是使用而不是通过文件传递密码。)|BOLD|316850|entityMap^0|0|0|0|37|0|0|0|36|0|0|0|0|22|0|0|0|21|0|G|K|1C|P|0|X|3|0^^$0|@$1|2|3|4|5|6|7|14|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|15|8|@]|9|@]|A|$]]|$1|D|3|E|5|6|7|16|8|@$F|17|G|18|H|I]]|9|@]|A|$]]|$1|J|3|K|5|6|7|19|8|@]|9|@]|A|$]]|$1|L|3|M|5|6|7|1A|8|@$F|1B|G|1C|H|I]]|9|@]|A|$]]|$1|N|3|O|5|6|7|1D|8|@]|9|@]|A|$]]|$1|P|3|Q|5|6|7|1E|8|@]|9|@]|A|$]]|$1|R|3|S|5|6|7|1F|8|@$F|1G|G|1H|H|I]]|9|@]|A|$]]|$1|T|3|U|5|6|7|1I|8|@]|9|@]|A|$]]|$1|V|3|W|5|6|7|1J|8|@$F|1K|G|1L|H|I]]|9|@]|A|$]]|$1|X|3|Y|5|6|7|1M|8|@$F|1N|G|1O|H|I]|$F|1P|G|1Q|H|I]]|9|@]|A|$]]|$1|Z|3|10|5|6|7|1R|8|@$F|1S|G|1T|H|11]]|9|@]|A|$]]|$1|12|3|-4|5|6|7|1U|8|@]|9|@]|A|$]]]|13|$]]

The official solution (and others) were incomplete when I first visited, so I came back, years later, to post this alternate approach in case any others wound up here intending to use a public/private key-pair:

Execute this from the target backup machine, which pulls from source to target backup

<code>rsync -av --delete -e 'ssh -p 59333 -i /home/user/.ssh/id_rsa' user@10.9.9.3:/home/user/Server/ /home/keith/Server/</code>

Execute this from the source machine, which sends from source to target backup

<code>rsync -av --delete -e 'ssh -p 59333 -i /home/user/.ssh/id_rsa' /home/user/Server/ user@10.9.9.3:/home/user/Server/</code>

And, if you are not using an alternate port for ssh, then consider the more elegant examples below:

Execute this from the target backup machine, which pulls from source to target backup:

<code>sudo rsync -avi --delete user@10.9.9.3:/var/www/ /media/sdb1/backups/www/</code>

Execute this from the source machine, which sends from source to target backup:

<code>sudo rsync -avi --delete /media/sdb1/backups/www/ user@10.9.9.3:/var/www/</code>

If you are still getting prompted for a password, then you need to check your ssh configuration in <code>/etc/ssh/sshd_config</code> and verify that the users in source and target each have the others' respective public ssh key by sending each over with <code>ssh-copy-id user@10.9.9.3</code>.

(Again, this is for using ssh key-pairs without a password, as an alternate approach, and not for passing the password over via a file.)

blocks|key|1513065|text|在命令中公开密码是不安全的，特别是在使用bash脚本时，如果您尝试使用密钥文件，这将是很好的。使用ssh-keygen在主机中创建密钥，并使用ssh-copy-id+"user@hostname.example.com复制公钥，然后在选项-e+"ssh+-i++$HOME/.ssh/(your+private+key)"中使用rsync插件通过前面创建的私钥使用ssh连接强制rsync。|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|1513066|例子：|1513067|rsync+-avh+--exclude+'$LOGS'+-e+"ssh+-i++$HOME/.ssh/id_rsa"+--ignore-existing+$BACKUP_DIR++$DESTINATION_HOST:$DESTINATION_DIR;|1513068|entityMap^0|1D|A|1Z|12|3B|16|0|0|0|3I|0^^$0|@$1|2|3|4|5|6|7|L|8|@$9|M|A|N|B|C]|$9|O|A|P|B|C]|$9|Q|A|R|B|C]]|D|@]|E|$]]|$1|F|3|G|5|6|7|S|8|@]|D|@]|E|$]]|$1|H|3|I|5|6|7|T|8|@$9|U|A|V|B|C]]|D|@]|E|$]]|$1|J|3|-4|5|6|7|W|8|@]|D|@]|E|$]]]|K|$]]

Exposing a password in a command is not safe, especially when using a bash script, if you tried to work with keyfiles thats will be nice.
create keys in your host with <code>ssh-keygen</code> and copy the public key with <code>ssh-copy-id &quot;user@hostname.example.com</code> and then use rsync addin the option <code>-e &quot;ssh -i $HOME/.ssh/(your private key)&quot;</code> to force rsync using ssh connection via the the private key that you create earlier.
example :
<code>rsync -avh --exclude '$LOGS' -e &quot;ssh -i $HOME/.ssh/id_rsa&quot; --ignore-existing $BACKUP_DIR $DESTINATION_HOST:$DESTINATION_DIR;</code>

blocks|key|316908|text|这里有一个使用gpg加密密码的安全解决方案。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|316909|1.使用以下命令在与rsync脚本相同的文件夹中创建包含密码的.secret文件：|316910|echo+'my-very-secure-password'+>+.secret|code-block|syntax|javascript|316911|请注意，默认情况下，该文件是隐藏的，以获得额外的安全性。|316912|2.使用以下gpg命令加密密码文件，并按照提示操作：|316913|gpg+-c+.secret|316914|这将创建另一个名为.secret.gpg的文件。你的密码现在加密了。|316915|3.删除纯文本密码文件|316916|rm+.secret|316917|4.最后，在rsync脚本中使用gpg和sshpass，如下所示：|316918|gpg+-dq+secret.gpg+%7C+sshpass+rsync+-avl+--mkpath+/home/john+user_name@x.x.x.x/home|316919|该示例是将名为john的用户的整个主文件夹同步到具有IP+x.x的远程服务器上。|316920|entityMap^0|0|0|0|0|0|0|0|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|12|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|13|8|@]|9|@]|A|$]]|$1|D|3|E|5|F|7|14|8|@]|9|@]|A|$G|H]]|$1|I|3|J|5|6|7|15|8|@]|9|@]|A|$]]|$1|K|3|L|5|6|7|16|8|@]|9|@]|A|$]]|$1|M|3|N|5|F|7|17|8|@]|9|@]|A|$G|H]]|$1|O|3|P|5|6|7|18|8|@]|9|@]|A|$]]|$1|Q|3|R|5|6|7|19|8|@]|9|@]|A|$]]|$1|S|3|T|5|F|7|1A|8|@]|9|@]|A|$G|H]]|$1|U|3|V|5|6|7|1B|8|@]|9|@]|A|$]]|$1|W|3|X|5|F|7|1C|8|@]|9|@]|A|$G|H]]|$1|Y|3|Z|5|6|7|1D|8|@]|9|@]|A|$]]|$1|10|3|-4|5|6|7|1E|8|@]|9|@]|A|$]]]|11|$]]

Here's a secure solution using a gpg encrypted password.
1.Create a .secret file containing your password in the same folder as your rsync script using the command:
<pre><code>echo 'my-very-secure-password' &gt; .secret
</code></pre>
Note that the file is hidden by default for extra security.
2.Encrypt your password file using the following gpg command and follow the prompts:
<pre><code>gpg -c .secret
</code></pre>
This will create another file named .secret.gpg. Your password is now encrypted.
3.Delete the plain text password file
<pre><code>rm .secret
</code></pre>
4.Finally in your rsync script use gpg and sshpass as follows:
<pre><code>gpg -dq secret.gpg | sshpass rsync -avl --mkpath /home/john user_name@x.x.x.x/home
</code></pre>
The example is syncing the entire home folder for the user named john to a remote server with IP x.x.x.x

I need to do <code>rsync</code> by <code>ssh</code> and want to do it automatically without the need of passing password for <code>ssh</code> manually.

How to pass password automatically for rsync SSH command?

翻译质量差，导致语言生硬或混乱。

没有提供实际的解决方法或示例。

解答不清晰，无法理解或解决问题。

页面排版不美观，阅读体验差。

文章

问答

视频

学习中心

腾讯云实验室

直播

竞赛

腾讯云代码分析专区

腾讯iOA零信任安全管理系统专区

腾讯云架构师技术同盟交流圈

腾讯云数据库专区

腾讯云顾问专区

腾讯云原生专区

腾讯混元专区

腾讯云TCE专区

腾讯云Lighthouse专区

腾讯云HAI专区

腾讯云Edgeone专区

腾讯云存储专区

腾讯云智能专区

腾讯轻联专区 

腾讯云开发专区

TAPD专区

腾讯轻量云游戏服专区

腾讯云最具价值专家

腾讯云架构师技术同盟

腾讯云创作之星

腾讯云开发者先锋 

腾讯云代码助手

CODING DevOps

Cloud Studio

SDK中心

API中心

命令行工具

我需要通过rsync通过ssh，并希望自动完成它，而不需要传递密码的ssh手动。

问如何为rsync SSH命令自动传递密码？
EN

Stack Overflow用户

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问如何为rsync SSH命令自动传递密码？EN