Ubuntu Server 26.04: Phau ntawv qhia teeb tsa kev ruaj ntseg thawj zaug

Taw qhia: Kho Ubuntu Server

Tom qab koj teeb tsa ib lub tshuab server Ubuntu tshiab lawm, kev teeb tsa cov hauv paus kom tsim nyog yog ib qho tseem ceeb heev los txhim kho ob qho kev ruaj ntseg thiab kev tswj hwm. Cov kauj ruam hauv qab no siv tau rau Ubuntu Server uas nyuam qhuav teeb tsa tiav; Ubuntu cov ntaub ntawv tam sim no tsom rau qhov LTS tshiab tshaj plaws, uas yog Ubuntu 26.04 LTS (raws li ubuntu.com). Yog koj siv Ubuntu 24.04 lossis 22.04 LTS, cov npe lus txib tseem zoo ib yam li hauv phau ntawv qhia no.

Kauj ruam 1 — Nkag mus los ntawm SSH

Koj yuav tsum paub lub tshuab server tus IP pej xeem thiab muaj tus password lossis tus yuam sij ntiag tug uas phim. Nkag mus siv SSH nrog tus account uas tus chaw muab kev pab lossis qhov program teeb tsa tau tsim cia lawm:

ssh username@your_server_ip

SSH muab kev txuas tswj chaw deb uas tau mã hóa los ntawm OpenSSH (raws li ubuntu.com).

Lus ceeb toom txog root: Feem ntau Ubuntu yuav lov tes taw kev nkag ncaj qha siv tus account root raws li qhov pib. Hloov chaw siv root rau kev ua hauj lwm txhua hnub, siv ib tus account ib txwm thiab tsa cai ib ntus xwb los ntawm sudo. Txoj no ua raws li txoj cai siv cai tsawg kawg nkaus thiab pab kom kev tshuaj xyuas cov haujlwm tswj hwm pom meej dua (raws li ubuntu.com).

Kauj ruam 2 — Tsim tus neeg siv tshiab

Yog lub system tseem tsis tau muaj ib tus account tswj hwm ib txwm, hloov sammy ua tus username uas koj xav tsim:

sudo adduser sammy

Teem ib tus password uas muaj zog. Cov ntaub ntawv ntxiv xws li npe puv lossis xov tooj tuaj yeem tso khoob yog tsis tsim nyog. Hauv qee lub cloud server, tus account pib twb raug tsim thaum lub sijhawm teeb tsa lawm, yog li koj tuaj yeem hla kauj ruam no.

Kauj ruam 3 — Muab cai tswj hwm los ntawm sudo

Ntxiv tus neeg siv tshiab rau hauv pawg sudo kom nws thiaj khiav tau txhua lus txib tswj hwm thaum xav tau:

sudo usermod -aG sudo sammy

Tawm hauv qhov kev sib ntsib thiab nkag mus dua kom qhov session txais tau pawg tshiab. Thaum xav tau cai tswj hwm, muab sudo rau pem hauv ntej ntawm lus txib, piv txwv:

sudo command_to_run

Ubuntu txheeb pawg sudo ua pawg uas raug tso cai khiav cov lus txib uas muaj cai tswj hwm (raws li ubuntu.com).

Kauj ruam 4 — Teeb lub firewall UFW

UFW yog lub cuab yeej firewall uas yog qhov pib, pab ua kom yooj yim rau kev tswj cov cai lim tsheb khiav hauv Ubuntu. Ua ntej qhib firewall, tso cai rau SSH port uas tab tom siv kom tsis txhob kaw koj tus kheej tawm ntawm qhov kev txuas tswj chaw deb (raws li documentation.ubuntu.com).

sudo ufw allow OpenSSH
sudo ufw enable

Ntaus y thiab nias ENTER thaum raug nug. Tshawb xyuas xwm txheej siv:

sudo ufw status verbose

Yog SSH service siv lwm port, tso cai rau port ntawd kom raug es tsis txhob siv profile OpenSSH, piv txwv:

sudo ufw allow 2222/tcp

Qhib tsuas yog cov port uas daim application xav tau tiag tiag xwb. Piv txwv, web server feem ntau xav tau HTTP thiab HTTPS:

sudo ufw allow http
sudo ufw allow https

Koj tuaj yeem saib cov application profile uas muaj siv:

sudo ufw app list

Yog xav txwv SSH raws li tus IP address tswj hwm uas ntseeg tau, siv ib txoj cai tshwj xeeb, piv txwv:

sudo ufw allow proto tcp from YOUR_ADMIN_IP to any port 22

Hloov YOUR_ADMIN_IP ua tus IP address tiag tiag thiab rov tshawb xyuas siv sudo ufw status numbered.

Kauj ruam 5 — Qhib SSH rau cov neeg siv ib txwm

Tawm ntawm qhov session tam sim no lossis qhib ib lub qhov rai terminal tshiab, ces sim txuas nrog tus account tshiab:

ssh sammy@your_server_ip

Yog qhib kev txheeb xyuas los ntawm password, lub system yuav thov tus password ntawm sammy. Yog siv SSH key, xyuas kom tus yuam sij pej xeem twb nyob hauv /home/sammy/.ssh/authorized_keys thiab cov cai ntawm directory haum. Tsis tsim nyog luam tag nrho root lub directory .ssh yam tsis tshuaj xyuas; faib tus yuam sij kom raug rau tus neeg siv raug thiab xyuas cov cai tswv cuab.

Tom qab nkag mus lawm, tshawb xyuas sudo cai:

sudo whoami

Qhov txiaj ntsig xav tau yog root. Yog lub server tso cai rau ntau tus neeg siv, koj tuaj yeem txwv cov account uas tso cai SSH los ntawm ib pawg tshwj xeeb thiab qhov kev xaiv AllowGroups hauv OpenSSH configuration (raws li ubuntu.com).

Yog xav kom muaj kev nyab xeeb ntxiv, tshawb xyuas SSH configuration ua ntej siv cov kev hloov pauv:

sudo sshd -t
sudo systemctl reload ssh

Tsuas lov tes taw kev nkag los ntawm password lossis kev nkag los ntawm root tom qab koj tau lees paub tias kev txuas los ntawm SSH key ua haujlwm lawm, lossis muaj kev nkag mus rau console thaub qab. Yog SSH configuration tsis raug, tej zaum koj yuav plam kev nkag mus rau lub server.

Kuj tsim nyog nyeem: Yuav ua li cas teeb tsa WordPress rau Ubuntu nrog LAMP Stack

Xaus lus: Kho Ubuntu Server

Kev tsim ib tug as khauj uas tsis yog root, muab cai sudo uas tswj tau, tiv thaiv kev nkag mus los ntawm SSH thiab tsuas qhib cov chaw nres nkoj uas tsim nyog nrog UFW yog lub hauv paus tseem ceeb rau ib lub Ubuntu server uas nyab xeeb thiab yooj yim tswj. Tom qab ua tiav cov kauj ruam no, txuas ntxiv hloov kho lub kaw lus, soj qab xyuas cov ntaub ntawv teev tseg thiab siv cov kev tiv thaiv uas haum rau daim ntawv thov tiag tiag.

Ubuntu Server 26.04: Phau ntawv qhia teeb tsa kev ruaj ntseg