1、自动化部署脚本如下：
init.sh脚本
#获取当前脚本所在的目录并赋值给变量bin，/opt/xxx/xxx
bin=`dirname "${BASH_SOURCE-$0}"`
bin=`cd "$bin"; pwd`
PORT=3222
STEP=1
ENDSTEP=9
SSH='/usr/bin/ssh'
#SSHID=`netstat -ntlp | grep sshd | grep -w "tcp" | awk '{print $4}' | cut -d: -f2`
SSH_KEYGEN='/usr/bin/ssh-keygen'
SSH_COPY_ID='/usr/bin/ssh-copy-id'
SCP='/usr/bin/scp'
function print_usage(){
echo -e "Usage: ./first.sh [-step stepNUM] [-endstep endstepnum] [-port sshPort] COMMAND"
}
#整个脚本执行的顺序，从哪传的参数,什么时候执行这个代码的。相当于重新获取 port值，step值和endstep值
((NUM=$#%2))
if [ $NUM != 0 ];then
print_usage
exit
fi
# ./frist.sh -step 2 -endstep 6 -port
until [ $# -eq 0 ]
do
case $1 in
-port)
PORT=$2
;;
-step)
STEP=$2
;;
-endstep)
ENDSTEP=$2
;;
*)
print_usage
exit
;;
esac
shift 2
done
#####################public function############################
#1 步骤输出 紫色
#2 正确输出 绿色
#3 错误输出 红色
#4 提示输出 蓝色
#5 警告输出 黄色
function echo_fun(){
if [ $# -ge 2 ];then
params_num=$1
shift 1
params_mes=$@
else
echo_fun 3 请至少输入两个参数 echo_fun ...
exit
fi
case $params_num in
1)
echo -e "\033[35;40;1m ***************************** ${params_mes} *****************************\033[0m\r\n"
;;
2)
echo -e "\033[32;40;1m ${params_mes}\033[0m\r\n"
;;
3)
echo -e "\033[31;40;1m ${params_mes}\033[0m\r\n"
;;
4)
echo -e "\033[36;40;1m ${params_mes}\033[0m\r\n"
;;
5)
echo -e "\033[33;40;1m ${params_mes} \033[0m\r\n"
;;
*)
echo_fun 3 参数异常第一个参数应为1,2,3,4,5
;;
esac
}
# 公共函数 遍历hosts
function list_hosts(){
OLD_IS="$IFS"
IFS=" "
while read LINE
do
arr=($LINE)
HOSTNAME=${arr[0]}
USERNAME=${arr[1]}
PASSWD=${arr[2]}
$1 $USERNAME $HOSTNAME $PASSWD
RES=$?
if [ $RES != "0" ];then
return "$RES"
break
fi
done < $bin/hosts
}
#获取秘钥 ###
function ssh_keygen(){
res=`ssh_keygen_fun $1 $2 $3` #$1,$2,$3分别为 $USERNAME $HOSTNAME $PASSWD
RESULT=$?
MESSAGE="keygen-->$1@$2"
show_result $RESULT $MESSAGE # 公共函数 数据结果
}
#获取秘钥的实际操作步骤 ###
function ssh_keygen_fun(){
expect -c"
spawn $SSH -p$PORT $1@$2 $SSH_KEYGEN
set timeout 30
expect {
\"*Permission denied, please try again*\" {puts \"fail\";exit 9 }
\"*Connection refused*\" {puts \"fail\";exit 7 }
\"*continue connecting (yes/no)*\" {send \"yes\r\";exp_continue}
\"*password*\" {send \"$3\r\";exp_continue}
\"Enter file in which to save the key*\" {send \"\r\";exp_continue}
\"Enter passphrase*\" {send \"\r\";exp_continue}
\"Enter same passphrase again*\" {send \"\r\";puts \"success\";exit 1}
\"Overwrite (y/n)*\" {send \"n\r\";puts \"success\";exit 2}
\"*No route to host*\" {puts \"fail\";exit 8}
\"*Connection timed out*\" {puts \"fail\";exit 6}
}
"
}
# 公共函数 数据结果 ###
#下面的数字是根据上面的函数执行后的结果所返回的
# 9 --> 密码错误
# 8 --> ip/hostname 错误
# 7 --> passwd
# 6 --> Connection timed out
# 2 --> 已经做过的ssh-keygen 不在做了
# 1 --> 新做的ssh-keygen
function show_result(){
if [ $# -ge 2 ];then
params_num=$1
shift 1
params_mes=$@
else
echo_fun 3 请至少输入两个参数 show_result ..
exit
fi
case $params_num in
0)
echo_fun 2 "${params_mes[*]} [ success ]"
;;
1)
echo_fun 2 "${params_mes[*]} [ success ]"
;;
2)
echo_fun 2 "${params_mes[*]} [ success ]"
;;
6)
echo_fun 3 "${params_mes[*]} [ failed ] : Connection timed out"
return 6
;;
7)
echo_fun 3 "${params_mes[*]} [ failed ] : Connection refused(ssh 端口是否正确)"
return 7
;;
8)
echo_fun 3 "${params_mes[*]} [ failed ] : No route to host(ip地址是否正确)"
return 8
;;
9)
echo_fun 3 "${params_mes[*]} [ failed ] : Permission denied(密码错误)"
return 9
;;
*)
echo_fun 3 "${params_mes[*]} [ failed ] : 未知的错误"
return 9
;;
esac
}
#################第一步 读取hosts文本内容,对每台机器生成秘钥对#########################
function step_fun_1(){
echo_fun 1 第一步,生成秘钥对
if [ "`rpm -qa |grep expect`" = "" ];then
echo_fun 4 下载expect...
yum install expect -y >/dev/null 2>&1
if [ `echo $?` != 0 ];then
echo_fun 5 expect下载失败请检查yum源
exit
fi
fi
list_hosts ssh_keygen # 公共函数 遍历hosts
RES=$?
if [ $RES != 0 ];then
echo -e "\033[33;40;1m>>Please check '${bin}/hosts' file<< Retry(yes/no)?\033[0m"
read name
if [ $name = "no" ];then
echo_fun 5 "当前执行第 1 步,如果继续执行请输入 ./frist.sh -step 1 -port portnum "
exit
elif [ $name = "yes" ];then
step_fun_1
else
step_fun_1
fi
fi
echo -e "\r\n"
}
#-----------------------------------第二步 配置单项免密----------------------------
function step_fun_2(){
echo_fun 1 第二步,配置免密
echo_fun 4 "当前机器`hostname`"
ssh_copyid_fun
}
###########循环遍历 做单项免密###############
function ssh_copyid_fun(){
OLD_IS="$IFS"
IFS=" "
while read LINE
do
arr=($LINE)
HOSTNAME=${arr[0]}
USERNAME=${arr[1]}
PASSWD=${arr[2]}
# 免秘钥 ~/.ssh/id_rsa.pub
abc=`expect -c "
spawn $SSH_COPY_ID -p $PORT $USERNAME@$HOSTNAME
expect {
\"*continue connecting (yes/no)*\" {send \"yes\r\";exp_continue}
\"*Permission denied*\" {puts \"fail\";exit 9 }
\"*password*\" {send \"$PASSWD\r\";exp_continue}
\"*No route to host*\" {puts \"fail\r\";exit 8}
\"*Connection timed out*\" {puts \"fail\r\";exit 6}
}
"`
RESULT=$?
MESSAGE="免密-->$USERNAME@$HOSTNAME"
show_result $RESULT $MESSAGE
if [ $RESULT -ne 0 ];then
echo_fun 5 "当前执行第 2 步,如果继续执行请输入 ./frist.sh -step 2 -port portnum "
exit
fi
done < $bin/hosts
}
#opt目录
ENV_PARENT_PATH="/opt"
TAR_JDK_PATH="" #后期的值为jdk包的全路径以及包的名字/opt/software/jdk1.7.0_67.tar.gz
TAR_PYTHON_PATH=""
MYSQL_JDBC_DRIVER="" #后期的值为mysqljar包的全路径以及包的名字
#TAG_MYSQL_JDBC_DRIVER="/usr/share/java/$mysql_jdbc_name"
TAG_MYSQL_JDBC_DRIVER=""
PARENT_PACAKGE="/opt/software"
LN_MYSQL_JDBC_DRIVER=/usr/share/java/mysql-connector-java.jar
function is_opt_exsit(){
$SSH -n -p $PORT $1@$2 "if [ ! -d ${ENV_PARENT_PATH} ];then exit 2; fi"
}
function is_opt_java(){
$SSH -n -p $PORT $1@$2 "if [ -d ${ENV_PARENT_PATH}/java ] ;then exit 2; fi"
}
function is_opt_python(){
$SSH -n -p $PORT $1@$2 "if [ -d ${ENV_PARENT_PATH}/python ];then exit 2; fi"
}
function distri_jdk_fun(){
#TAR_JDK_PATH java的安装包
$SCP -P $PORT $TAR_JDK_PATH $1@$2:${ENV_PARENT_PATH}
}
function distri_py_fun(){
$SCP -P $PORT $TAR_PYTHON_PATH $1@$2:${ENV_PARENT_PATH}
}
function distri_mysql_jdbc(){
$SSH -n -p $PORT $1@$2 "mkdir -p /usr/share/java"
$SCP -P $PORT $MYSQL_JDBC_DRIVER $1@$2:/usr/share/java/
$SSH -n -p $PORT $1@$2 "if [ -f $LN_MYSQL_JDBC_DRIVER ];then rm -r $LN_MYSQL_JDBC_DRIVER; fi"
$SSH -n -p $PORT $1@$2 "ln -s $TAG_MYSQL_JDBC_DRIVER $LN_MYSQL_JDBC_DRIVER"
}
function get_params_value() {
if [ $# -ne 1 ];then
echo_fun 3 参数输入有误 get_params_value
fi
k=$1
value=`awk -F= -v key=${k} '{if ($1 == key ) print $2}' $bin/params`
echo $value
}
#将jdk的包分发到其他机器上
function distri_jdk_fun(){
#TAR_JDK_PATH java的安装包的路径加包名
$SCP -P $PORT $TAR_JDK_PATH $1@$2:${ENV_PARENT_PATH}
}
function loop_hosts(){
i=1
l=$(wc -l $bin/hosts| sed 's/^[ \t]*//g' | cut -d ' ' -f1)
CMD=$1
MESSAGE_3=$2
STEP_3=$3
OLD_IS="$IFS"
IFS=" "
while read LINE
do
arr=($LINE)
HOSTNAME=${arr[0]}
USERNAME=${arr[1]}
PASSWD=${arr[2]}
$CMD $USERNAME $HOSTNAME $PASSWD
RES=$?
if [ $RES != "0" ];then
echo -e "\r\n\033[31;40;1mERROR: $HOSTNAME $MESSAGE_3 \033[0m \r\n"
echo -e "\033[33;40;1m 当前执行第 $STEP_3 步,如果继续执行请输入 ./frist.sh -step $STEP_3 -port portnum \033[0m\r\n"
exit
fi
if [ "`rpm -qa |grep "^bc"`" = "" ];then
echo_fun 4 下载bc...
yum install bc -y >/dev/null 2>&1
if [ `echo $?` != 0 ];then
echo_fun 5 bc下载失败请检查yum源
exit
fi
fi
echo -en "\b\b\b\b" `echo $i*100/$l | bc `'%'
done < $bin/hosts
echo -en '\033[32;40;1m\b\b\b\bOK\033[0m \r\n'
}
function step_fun_3(){
echo_fun 1 第三步,分发jdk python
echo_fun 5 默认情况下是安装python 如果想不装python 请将./tool/params文件的'TAR_PYTHON_NAME'值清空!
echo_fun 4 是否继续[yes/no]:
read value
case $value in
yes)
echo -e "\n"
echo -e "\033[42;33m 接着执行 \033[0m\n"
;;
no)
echo_fun 5 当前执行第 3 步,如果继续执行请输入 ./frist.sh -step 3 -port portnum
exit
;;
*)
step_fun_3
;;
esac
#获取jdk包的名字 TAR_JDK_NAME参数k=v 这里相当于k ，params中的TAR_JDK_NAME=jdk1.7.0_67.tar.gz的key
#tar_jdk_name的值为jdk1.7.0_67.tar.gz
tar_jdk_name=`get_params_value TAR_JDK_NAME`
#获取python包的名字
tar_python_name=`get_params_value TAR_PYTHON_NAME`
#获取mysql的数据库连接jar包名字
mysql_jdbc_name=`get_params_value MYSQL_JDBC_DRIVER`
# 检测是否存在 /opt 目录
CHECK_OPT_MESSAGE="经检查该机器上不存在${ENV_PARENT_PATH}目录"
echo_fun 4 "检查是否存在${ENV_PARENT_PATH}目录....."
loop_hosts is_opt_exsit $CHECK_OPT_MESSAGE "3"
echo_fun 2 "检查是否存在${ENV_PARENT_PATH}目录完毕！"
if [ "$tar_jdk_name" = "" ];then
echo_fun 5 ./tool/params文件中TAR_JDK_NAME值为空,再安装jdk
else
#检测 /opt/java 目录是否存在
echo_fun 4 "检查是否存在${ENV_PARENT_PATH}/java"
CHECK_JAVA_HOME="的机器上已存在${ENV_PARENT_PATH}/java目录，请检查手动清理一下！"
loop_hosts is_opt_java $CHECK_JAVA_HOME 3
TAR_JDK_PATH="${PARENT_PACAKGE}/${tar_jdk_name}"
if [ -f $TAR_JDK_PATH ];then
echo_fun 4 分发JDK
loop_hosts distri_jdk_fun
else
echo_fun 3 $TAR_JDK_PATH 文件不存在 请检查文件的完整性
echo_fun 5 当前执行第 3 步,如果继续执行请输入 ./frist.sh -step 3 -port portnum
exit 9
fi
fi
if [ "$tar_python_name" = "" ];then
echo_fun 5 ./tool/params文件中TAR_PYTHON_NAME值为空 不在安装python
else
TAR_PYTHON_PATH=$PARENT_PACAKGE/$tar_python_name
#检测 /opt/python 目录是否存在
echo_fun 4 "检查是否存在${ENV_PARENT_PATH}/python"
CHECK_PYTHON_HOME="的机器上已存在${ENV_PARENT_PATH}/python目录，请检查手动清理一下一下！"
loop_hosts is_opt_python $CHECK_PYTHON_HOME 3
if [ ! -f $TAR_PYTHON_PATH ];then
echo_fun 3 $TAR_PYTHON_PATH 文件不存在 请检查包的完整性
echo_fun 5 当前执行第 3 步,如果继续执行请输入 ./frist.sh -step 3 -port portnum
exit 9
fi
fi
if [ "$tar_python_name" != "" ];then
echo_fun 4 分发python
loop_hosts distri_py_fun
fi
if [ "$mysql_jdbc_name" = "" ];then
echo_fun 5 ./tool/params文件中MYSQL_JDBC_DRIVER值为空 不在分发mysql驱动
else
MYSQL_JDBC_DRIVER=$PARENT_PACAKGE/$mysql_jdbc_name
TAG_MYSQL_JDBC_DRIVER="/usr/share/java/$mysql_jdbc_name"
if [ -f $MYSQL_JDBC_DRIVER ];then
echo_fun 4 分发jdbc的驱动
loop_hosts distri_mysql_jdbc
else
echo 3 $MYSQL_JDBC_DRIVER 文件不存在
exit
fi
fi
}
#---------------------------------------第四步 安装jdk、python-------------------------------------------------
#检查 是否存在/jdk python 安装包。
function is_exist_java(){
ssh -n -p $PORT $1@$2 "if [ ! -f $TAG_JDK_PATH ];then exit 2; fi"
}
function is_exist_python(){
ssh -n -p $PORT $1@$2 "if [ ! -f $TAG_PYTHON_PATH ];then exit 2; fi"
}
function is_exist_path_java(){
ssh -n -p $PORT $1@$2 "if [ -d ${DECOM_JDK_PATH} ] ;then exit 2; fi"
}
function is_exist_path_python(){
ssh -n -p $PORT $1@$2 "if [ -d ${DECOM_PYTHON_PATH} ];then exit 2; fi"
}
function decom_jdk(){
ssh -n -p $PORT $1@$2 "tar -zxvf $TAG_JDK_PATH -C ${ENV_PARENT_PATH} >/dev/null 2>&1; ln -s ${DECOM_JDK_PATH} ${ENV_PARENT_PATH}/java >/dev/null 2>&1; "
}
function decom_python(){
ssh -n -p $PORT $1@$2 " tar -xvf $TAG_PYTHON_PATH -C ${ENV_PARENT_PATH} >/dev/null 2>&1; ln -s ${DECOM_PYTHON_PATH} ${ENV_PARENT_PATH}/python >/dev/null 2>&1; "
}
TAG_JDK_PATH="" # /opt/jdk1.7.0_67.tar.gz包
TAG_PYTHON_PATH=""
DECOM_JDK_PATH=""
DECOM_PYTHON_PATH=""
#"################################安装jdk,python######################################"
function step_fun_4(){
echo_fun 1 第四步,解压jdk python
tar_jdk_name=`get_params_value TAR_JDK_NAME`
tar_python_name=`get_params_value TAR_PYTHON_NAME`
if [ "$tar_jdk_name" != "" ];then
TAR_JDK_PATH="${PARENT_PACAKGE}/${tar_jdk_name}"
# /opt/jdk1.7.0_67.tar.gz包
TAG_JDK_PATH="${ENV_PARENT_PATH}/${tar_jdk_name}"
#检查各个机器上jdk的安装包是否存在
echo_fun 4 "检查jdk安装包是否存在"
CHECK_JAVA_MESSAGE="的机器上不存在${TAG_JDK_PATH}请检查一下"
loop_hosts is_exist_java $CHECK_JAVA_MESSAGE 4
echo_fun 2 "jdk检查完毕"
after_jdk_decom_path=`tar -tvf $TAG_JDK_PATH |head -n 1 |awk -F ' ' '{print $6}' |awk -F '/' '{print $1}'`
if [ "$after_jdk_decom_path" = "" ];then
echo_fun 3 after_decom_path is null at $LINENO line
exit
fi
DECOM_JDK_PATH="${ENV_PARENT_PATH}/${after_jdk_decom_path}"
#"检查是否存在已经解压好的 jdk python的目录"
CHECK_JAVA_PATH_MESSAGE="的机器上已存在${DECOM_JDK_PATH}请检查一下"
loop_hosts is_exist_path_java ${CHECK_JAVA_PATH_MESSAGE} 4
fi
if [ "$tar_python_name" != "" ];then
TAR_PYTHON_PATH="${PARENT_PACAKGE}/${tar_python_name}"
TAG_PYTHON_PATH="${ENV_PARENT_PATH}/${tar_python_name}"
echo_fun 4 "检查python 安装包是否存在！"
#检查各个机器上python的安装包是否存在
CHECK_PYTHON_MESSAGE="的机器上不存存在${TAG_PYTHON_PATH}请检查一下"
loop_hosts is_exist_python ${CHECK_PYTHON_MESSAGE} 4
echo_fun 2 "python 检查完毕"
after_python_decom_path=`tar -tvf ${TAG_PYTHON_PATH} |head -n 1 |awk -F ' ' '{print $6}' |awk -F '/' '{print $1}'`
if [ "$after_python_decom_path" = "" ];then
echo_fun 3 after_python_decom_path is null at $LINENO line
exit
fi
DECOM_PYTHON_PATH="${ENV_PARENT_PATH}/${after_python_decom_path}"
#"检查是否存在已经解压好的 jdk python的目录"
CHECK_PYTHON_PATH_MESSAGE="的机器上已存在${DECOM_PYTHON_PATH}请检查一下"
loop_hosts is_exist_path_python ${CHECK_PYTHON_PATH_MESSAGE} 4
fi
if [ "$tar_jdk_name" != "" ];then
echo_fun 4 "开始解压jdk包此过程比较缓慢请耐心等待"
loop_hosts decom_jdk "的机器上jdk解压失败" 4
fi
if [ "$tar_python_name" != "" ];then
echo_fun 4 "开始解压python包此过程比较缓慢请耐心等待"
loop_hosts decom_python "的机器上python解压失败" 4
fi
}
#-------------------------------第五步、生成环境变量--------------------------------------------------
function gen_pro_env_fun(){
> /etc/profile.d/bfd_env.sh >/dev/null
if [ -d ${ENV_PARENT_PATH}/python ];then
cat << EOF >> /etc/profile.d/bfd_env.sh
export JAVA_HOME=${ENV_PARENT_PATH}/java
export PATH=\$JAVA_HOME/bin:\$PATH
export CLASSPATH=.:$JAVA_HOME/lib/dt.jar:$JAVA_HOME/lib/tools.jar
export PYTHON_HOME=${ENV_PARENT_PATH}/python
export PATH=\$PYTHON_HOME/bin:\$PATH
EOF
else
cat << EOF >> /etc/profile.d/bfd_env.sh
export JAVA_HOME=${ENV_PARENT_PATH}/java
export PATH=\$JAVA_HOME/bin:\$PATH
export CLASSPATH=.:$JAVA_HOME/lib/dt.jar:$JAVA_HOME/lib/tools.jar
EOF
fi
}
function gen_ld_env_fun(){
ssh -n -p $PORT $1@$2 "
/bin/cat << EOF >> /etc/ld.so.conf
${ENV_PARENT_PATH}/python/lib
EOF
"
}
function scp_pro_env_fun(){
scp -P $PORT /etc/profile.d/bfd_env.sh $1@$2:/etc/profile.d/
}
function exe_env_fun(){
#ssh -n -p $PORT $1@$2 "/sbin/ldconfig;/bin/sh /etc/profile"
ssh -n -p $PORT $1@$2 "/sbin/ldconfig;source /etc/profile.d/bfd_env.sh"
}
function step_fun_5(){
echo_fun 1 第五步,生成环境变量
echo "开始生成环境变量..."
gen_pro_env_fun
loop_hosts scp_pro_env_fun
tar_python_name=`get_params_value TAR_PYTHON_NAME`
if [ "$tar_python_name" != "" ];then
loop_hosts gen_ld_env_fun
loop_hosts exe_env_fun
fi
}
#--------------------------第六步,检查openssl的版本号----------------------
function check_openssl_fun(){
ssh -n -p $PORT $1@$2 "if [ `rpm -qa |grep openssl-1 |awk -F '-' '{print $3}' |awk -F '.' '{print $1}'` -lt 15 ];then exit 3;fi"
}
if [ "`rpm -qa |grep "^redhat-lsb"`" = "" ];then
echo_fun 4 下载redhat-lsb...
yum install redhat-lsb -y >/dev/null 2>&1
if [ `echo $?` != 0 ];then
echo_fun 5 redhat-lsb下载失请检查yum源
exit
fi
fi
function get_centos_verison(){
cen_version=`lsb_release -a |awk -F ' ' '{print $2}' |head -n 4 |tail -n 1 |awk -F '.' '{print $1}'`
echo $cen_version
}
function step_fun_6(){
echo_fun 1 "第六步,检查openssl的版本"
echo_fun 4 检查openssl版本号
centos_version=`get_centos_verison`
case $centos_version in
6)
CHECK_OPENSSL_MESSAGE="该机器上的openssl小于15版本"
loop_hosts check_openssl_fun $CHECK_OPENSSL_MESSAGE 6
echo_fun 2 openssl检查成功
;;
7)
echo_fun 5 "centos7 跳过该步"
;;
*)
echo_fun 3 操作系统版本获取失败
exit
;;
esac
}
#------------------------------第七步，配置ect/hosts------------------------------
function dishosts(){
scp -P $PORT $bin/srchosts $1@$2:/etc/hosts
}
function step_fun_7(){
echo_fun 1 第七步 配置/etc/hosts的文件
echo_fun 4 开始生成hosts文件
sh $bin/genAllHostname.sh $PORT
echo_fun 2 hosts文件生成成功
echo_fun 4 开始分发hosts的文件
if [ ! -f $bin/srchosts ];then
echo_fun 5 $bin/srchosts文件不存在 $LI
echo -e "\033[33;40;1m 当前执行第 7 步,如果继续执行请输入 ./frist.sh -step 7 -port portnum \033[0m\r\n"
exit 9
fi
ERROR_MESSAGE="hosts文件分发失败，请检查原因"
loop_hosts dishosts $ERROR_MESSAGE 8
echo_fun 2 hosts文件分发成功
}
#-------------------第八步,搭建时间同步服务器-------------------------------
function ntp_client_ins(){
host_ip=`hostname -i`
if [ "$host_ip" = "" ];then
echo_fun 5 不能获取到当前机器ip"hostname -i"
exit 9
fi
echo "host_ip $host_ip"
if [ "$host_ip" != "$2" ];then
ssh -n -p $PORT $1@$2 "yum install ntp -y >/dev/null 2 >&1"
if [ `echo $?` != 0 ];then
echo_fun 5 ntp客户端安装失败
echo_fun 4 失败机器hostname$2
exit 9
fi
ssh -n -p $PORT $1@$2 "/usr/sbin/ntpdate $host_ip >/dev/null 2 >&1 "
if [ `echo $?` != 0 ];then
echo_fun 5 ntpdate 更新失败
echo_fun 4 失败机器hostname$2
exit 9
fi
scp -P $PORT $bin/genCrontab.sh $1@$2:/tmp
if [ `echo $?` != 0 ];then
echo_fun 5 "$bin/genCrontab.sh文件分发失败"
echo_fun 4 失败机器hostname$2
exit 9
fi
ssh -n -p $PORT $1@$2 "sh /tmp/genCrontab.sh $host_ip ; /usr/bin/crontab -l"
if [ `echo $?` != 0 ];then
echo_fun 5 配置crontab失败
echo_fun 4 失败机器hostname$2
exit 9
fi
fi
}
function step_fun_8(){
echo_fun 1 "第八步,搭建时间同步服务器"
centos_version=`get_centos_verison`
echo_fun 4 安装ntp服务器
if [ "`rpm -qa|grep ntp- |head -n 1`" = "" ];then
yum install ntp -y >/dev/null 2>&1
if [ `echo $?` != 0 ];then
echo_fun 5 ntp服务器安装失败!
exit 9
fi
fi
echo_fun 2 ntp服务器安装成功
#先注释掉，然后在追加
sed -i '/restrict default/s/^/#/g' /etc/ntp.conf
sed -i '6a\restrict default nomodify\n' /etc/ntp.conf
sed -i '7a\server 127.127.1.0\n' /etc/ntp.conf
echo_fun 4 启动ntp服务器
case $centos_version in
6)
chkconfig ntpd on
service ntpd restart
if [ `echo $?` != 0 ];then
echo_fun 5 ntp服务启动失败
exit 9
fi
;;
7)
systemctl enable ntpd
systemctl restart ntpd
if [ `echo $?` != 0 ];then
echo_fun 5 ntp服务启动失败
exit 9
fi
;;
*)
echo_fun 3 操作系统版本获取失败
exit 9
;;
esac
echo_fun 2 ntp服务器启动成功
echo_fun 4 配置ntp客户端
loop_hosts ntp_client_ins ntp客户端安装失败 "8"
}
#-----------------------------第九步,优化系统参数--------------------------------------
function scp_in_fun6(){
scp -P $PORT $bin/in6.sh $1@$2:/tmp/
}
function ssh_in_fun6(){
ssh -n -p $PORT $1@$2 "/bin/sh /tmp/in6.sh"
}
function scp_in_fun7(){
scp -P $PORT $bin/in7.sh $1@$2:/tmp/
}
function ssh_in_fun7(){
ssh -n -p $PORT $1@$2 "/bin/sh /tmp/in7.sh"
}
function step_fun_9(){
centos_version=`get_centos_verison`
echo_fun 1 "第九步,优化系统参数"
echo_fun 4 开始优化系统参数
case $centos_version in
6)
loop_hosts scp_in_fun6
loop_hosts ssh_in_fun6 > /dev/null 2>&1
;;
7)
loop_hosts scp_in_fun7
loop_hosts ssh_in_fun7 > /dev/null 2>&1
;;
*)
echo_fun 3 获取版本失败
exit
;;
esac
echo_fun 2 优化系统参数完成
}
while (($STEP <= $ENDSTEP))
do
step_fun_$STEP
((STEP++))
done
genAllHostname.sh 脚本
#!/bin/sh
bin=`dirname "${BASH_SOURCE-$0}"`
bin=`cd "$bin"; pwd`
PORT=22
if [ "$1" != "" ];then
PORT=$1
fi
function loop_hosts(){
OLD_IS="$IFS"
IFS=" "
while read LINE
do
arr=($LINE)
HOSTNAME=${arr[0]}
USERNAME=${arr[1]}
PASSWD=${arr[2]}
tag_hostname=`ssh -n -p$PORT $USERNAME@$HOSTNAME "hostname"`
RES=$?
echo "$HOSTNAME $tag_hostname" >> $bin/srchosts
if [ $RES != "0" ];then
echo -e "\r\n\033[31;40;1mERROR: $HOSTNAME 机器主机名获取失败\033[0m \r\n"
exit 9
fi
done < $bin/hosts
}
if [ ! -d $bin/../tmp ];then
mkdir $bin/../tmp
fi
cat > $bin/srchosts << EOF
127.0.0.1 localhost localhost.localdomain localhost4 localhost4.localdomain4
::1 localhost localhost.localdomain localhost6 localhost6.localdomain6
EOF
loop_hosts
genCrontab.sh 脚本
#!/bin/sh
hostname=$1
echo "*/15 * * * * /usr/sbin/ntpdate $hostname" >> /var/spool/cron/root
hosts和params 文件
172.18.1.25 root bfd123
172.18.1.26 root bfd123
TAR_JDK_NAME=jdk1.8.0_131.tar.gz
TAR_PYTHON_NAME=Python-2.7.8.tar.gz
MYSQL_JDBC_DRIVER=mysql-connector-java-5.1.42.jar
in7.sh脚本
#关闭防火墙
if [ "`rpm -qa|grep firewalld- |head -n 1`" = "" ];then
yum install firewalld -y >/dev/null 2>&1
if [ `echo $?` != 0 ];then
echo_fun 5 firewalld安装失败!
exit 9
fi
fi
systemctl stop firewalld
#关闭开启自启
systemctl disable firewalld
#关闭 seliunx
if [ `getenforce` != "Disabled" ];then
setenforce 0
fi
#优化ulimit
cat >> /etc/security/limits.conf << EOF
* soft nofile 655350
* hard nofile 655350
* soft nproc 655350
* hard nproc 655350
EOF
sed -i 's#4096#65535#g' /etc/security/limits.d/20-nproc.conf
#设置ssh
sed -i -e 's/SELINUX=enforcing/SELINUX=disabled/' /etc/selinux/config
sed -i 's/GSSAPIAuthentication yes/GSSAPIAuthentication no/' /etc/ssh/sshd_config
sed -i 's/#UseDNS yes/UseDNS no/' /etc/ssh/sshd_config
sed -i 's/#PermitEmptyPasswords no/PermitEmptyPasswords no/' /etc/ssh/sshd_config
#优化内核参数####
cat > /etc/sysctl.conf << EOF
net.ipv4.ip_forward = 0
net.ipv4.conf.default.rp_filter = 1
net.ipv4.conf.default.accept_source_route = 0
kernel.sysrq = 0
kernel.core_uses_pid = 1
net.ipv4.tcp_syncookies = 1
kernel.msgmnb = 65536
kernel.msgmax = 65536
kernel.shmmax = 68719476736
kernel.shmall = 4294967296
net.ipv4.tcp_max_tw_buckets = 60000
net.ipv4.tcp_sack = 1
net.ipv4.tcp_window_scaling = 1
net.ipv4.tcp_rmem = 4096 87380 4194304
net.ipv4.tcp_wmem = 4096 16384 4194304
net.core.wmem_default = 8388608
net.core.rmem_default = 8388608
net.core.rmem_max = 16777216
net.core.wmem_max = 16777216
net.core.netdev_max_backlog = 262144
net.core.somaxconn = 262144
net.ipv4.tcp_max_orphans = 3276800
net.ipv4.tcp_max_syn_backlog = 262144
net.ipv4.tcp_timestamps = 0
net.ipv4.tcp_synack_retries = 1
net.ipv4.tcp_syn_retries = 1
net.ipv4.tcp_tw_recycle = 1
net.ipv4.tcp_tw_reuse = 1
net.ipv4.tcp_mem = 94500000 915000000 927000000
net.ipv4.tcp_fin_timeout = 1
net.ipv4.tcp_keepalive_time = 1200
net.ipv4.ip_local_port_range = 1024 65535
EOF
sysctl -p >/dev/null 2>&1
in6.sh脚本
#!/bin/bash
#close servers
for i in `chkconfig --list |awk '{print $1}'`
do
chkconfig $i off;
done
#open servers
for i in crond network haldaemon messagebus udev-post ntpd sshd rsyslog sysstat
do
chkconfig $i on;
done
#close iptables
chkconfig iptables off
chkconfig ip6tables off
/etc/init.d/ip6tables stop
/etc/init.d/iptables stop
#close seliunx
if [ `getenforce` != "Disabled" ];then
setenforce 0
fi
#about ssh
#sed -i 's/#Port 22/Port 3222/' /etc/ssh/sshd_config
sed -i -e 's/SELINUX=enforcing/SELINUX=disabled/' /etc/selinux/config
sed -i 's/GSSAPIAuthentication yes/GSSAPIAuthentication no/' /etc/ssh/sshd_config
sed -i 's/#UseDNS yes/UseDNS no/' /etc/ssh/sshd_config
#sed -i 's/X11Forwarding yes/X11Forwarding no/' /etc/ssh/sshd_config
sed -i 's/#PermitEmptyPasswords no/PermitEmptyPasswords no/' /etc/ssh/sshd_config
#modify max openfile and max process
cat >> /etc/security/limits.conf << EOF
* soft nofile 655350
* hard nofile 655350
* soft nproc 655350
* hard nproc 655350
EOF
cat >> /etc/security/limits.d/90-nproc.conf << EOF
* soft nproc 655350
* hard nproc 655350
root soft nproc unlimited
EOF
sed -i 's#exec /sbin/shutdown -r now#\#exec /sbin/shutdown -r now#' /etc/init/control-alt-delete.conf
#modify kernel parameters
cat > /etc/sysctl.conf << EOF
#net.bridge.bridge-nf-call-ip6tables = 0
#net.bridge.bridge-nf-call-iptables = 0
#net.bridge.bridge-nf-call-arptables = 0
net.ipv4.ip_forward = 0
net.ipv4.conf.default.rp_filter = 1
net.ipv4.conf.default.accept_source_route = 0
kernel.sysrq = 0
kernel.core_uses_pid = 1
net.ipv4.tcp_syncookies = 1
kernel.msgmnb = 65536
kernel.msgmax = 65536
kernel.shmmax = 68719476736
kernel.shmall = 4294967296
net.ipv4.tcp_max_tw_buckets = 60000
net.ipv4.tcp_sack = 1
net.ipv4.tcp_window_scaling = 1
net.ipv4.tcp_rmem = 4096 87380 4194304
net.ipv4.tcp_wmem = 4096 16384 4194304
net.core.wmem_default = 8388608
net.core.rmem_default = 8388608
net.core.rmem_max = 16777216
net.core.wmem_max = 16777216
net.core.netdev_max_backlog = 262144
net.core.somaxconn = 262144
net.ipv4.tcp_max_orphans = 3276800
net.ipv4.tcp_max_syn_backlog = 262144
net.ipv4.tcp_timestamps = 0
net.ipv4.tcp_synack_retries = 1
net.ipv4.tcp_syn_retries = 1
net.ipv4.tcp_tw_recycle = 1
net.ipv4.tcp_tw_reuse = 1
net.ipv4.tcp_mem = 94500000 915000000 927000000
net.ipv4.tcp_fin_timeout = 1
net.ipv4.tcp_keepalive_time = 1200
net.ipv4.ip_local_port_range = 1024 65535
EOF
sysctl -p >/dev/null 2>&1
#echo "nameserver 219.141.140.10" >> /etc/resolv.conf
#yum install vim ntpdate lsof -y
#yum install R -y
#/usr/sbin/ntpdate ntp.api.bz
2、执行后的结果如下所示：
