i have found the reason:

The know_host file is necessary for the login. This file is supposed to
be saved in /var/www/.ssh. Therefore i use account "tinyos" to create
directory .ssh, then chown www-data .ssh, change the ownership to
www-data.

Then the passwordless ssh works for www-data


db