1 前言

一个问题，一篇文章，一出故事。
笔者部署BackupPC后，需要允许BackupPC备份服务器连接到备份服务器上执行备份任务，因此需要配置公钥认证。

2 最佳实践

2.1 BackupPC环境配置

如何部署BackupPC备份服务？

2.2 创建秘钥对

2.2.1 创建秘钥存储目录

mkdir -p /var/lib/BackupPC/.ssh
chown backuppc:backuppc /var/lib/BackupPC/.ssh
chmod 700 /var/lib/BackupPC/.ssh

2.2.2 创建秘钥存储目录

su -s /bin/bash backuppc
ssh-keygen -t rsa -P '' -f ~/.ssh/id_rsa

可见如下显示，

Generating public/private rsa key pair.
Your identification has been saved in /var/lib/BackupPC/.ssh/id_rsa
Your public key has been saved in /var/lib/BackupPC/.ssh/id_rsa.pub
The key fingerprint is:
SHA256:4AqYjb4WEuBUq6klPvekduKSHsf/bY1zPXQxrU+Z6gY backuppc@backuppc.cmdschool.org
The key's randomart image is:
+---[RSA 3072]----+
|  ..             |
|..  .            |
|+  .  .         .|
|.*o  . .       o.|
|=++   . S      .=|
|=+.. .     E ..+.|
|o=o+..    o + oo |
| +*o=.  .+ o =  .|
|oo+ooo....o o..  |
+----[SHA256]-----+

2.3 部署秘钥

su -s /bin/bash backuppc
ssh-copy-id -i ~/.ssh/id_rsa.pub root@host_to_backup