https://blog.inshomepgup.com/en-usMon, 24 Aug 2026 00:00:00 +0000https://blog.inshomepgup.com/p/keepass-ssh/Mon, 24 Aug 2026 00:00:00 +0000https://blog.inshomepgup.com/p/keepass-ssh/<p>换机器最烦的不是装系统，是 <code>~/.ssh</code> 要再拷一遍。私钥散落在 U 盘、网盘、旧电脑里，权限一不对 ssh 直接不理你。</p> <p>后来把钥匙放进 KeePass 库，主机信息也写在同一份 kdbx 里。库跟着网盘走，Windows、Debian、macOS 各自用客户端把钥匙交给 ssh，不必再复制私钥文件。</p> <p>生成钥匙本身还是老办法，见 <a class="link" href="https://blog.inshomepgup.com/p/ssh-key/" >SSH Key 生成、配置与连接</a>。这篇只讲：<strong>库怎么记，三个系统怎么接到 <code>ssh config</code>。</strong></p> <p>客户端约定：</p> <table> <thead> <tr> <th>系统</th> <th>客户端</th> <th>钥匙怎么交给 ssh</th> </tr> </thead> <tbody> <tr> <td>Debian / Ubuntu</td> <td>KeePassXC</td> <td>注入系统 <code>ssh-agent</code></td> </tr> <tr> <td>Windows</td> <td>KeePassXC</td> <td>注入 Windows OpenSSH Agent（或 Pageant）</td> </tr> <tr> <td>macOS</td> <td>Strongbox（Pro）</td> <td>Strongbox 自己当 agent</td> </tr> </tbody> </table> <p>同一份 kdbx。KeePassXC 和 Strongbox 都认 KeeAgent 那套约定。</p> <h2 id="库里怎么记">库里怎么记 </h2><p>两台机经常共用一把钥匙。所以不要「一台主机一条，私钥复制两份」。</p> <div class="highlight"><div class="chroma"> <table class="lntable"><tr><td class="lntd"> <pre tabindex="0" class="chroma"><code><span class="lnt">1 </span><span class="lnt">2 </span><span class="lnt">3 </span><span class="lnt">4 </span></code></pre></td> <td class="lntd"> <pre tabindex="0" class="chroma"><code class="language-fallback" data-lang="fallback"><span class="line"><span class="cl">SSH/ </span></span><span class="line"><span class="cl"> Keys/prod-ed25519 ← 私钥 + 公钥，只这一条 </span></span><span class="line"><span class="cl"> Hosts/vps-a ← 连谁 </span></span><span class="line"><span class="cl"> Hosts/vps-b </span></span></code></pre></td></tr></table> </div> </div><p><strong>钥匙条目</strong> <code>/SSH/Keys/prod-ed25519</code>：</p>ComputerKeePassSSHKeePassXCStrongboxWindowsLinuxmacOS