CheungSSH web2.0 automated operation and maintenance
Introduction to CheungSSH
CheungSSH is a Linux operation and maintenance automation management server software independently developed by Chinese people. It is an open source operation and maintenance automation system created with the concept of reducing operating costs for enterprises, liberating administrators' hands and automating production.
Features of ChuengSSH
Simple operation, full web interface, no specific grammar, no need to learn the operating principle, even people who don't know Linux can operate, the interface is all Chinese, and you can command thousands of servers to operate in an orderly manner with a click of the mouse. Complete functions, support network Devices, Linux servers, Windows servers, command execution, file transfer, batch deployment programs, server asset information collection, scheduled tasks, open API and other main functions
Easy secondary development, python language, open source code, completely free and easy to use, no need to install any plug-ins, easy to manage
Safe and worry-free, the server is managed through the SSH protocol that comes with Linux, the communication is safe, there is no need to open additional ports and start additional programs, all operations are reserved on the CheungSSH control machine, and any configuration data of the managed server is not modified.
Securely store data, using Mysql Oracle database
The management is simple, there is no need to create any additional management accounts, only the CheungSSH business account is needed, that is, the account that usually logs in to the server. To achieve incognito operation, do not add extra burden to the server
Higher efficiency, using Redis caching technology, all data is cached in Redis, and reading is faster
Permission control, only authorized operations can make changes to the production server on the live network
Permission audit, all operations have operation records
For the bastion machine, all operations are performed by CheungSSH for you, which is safe, worry-free, and time-saving
Unattended, basically liberates the operation and maintenance personnel to get started, and unbinds the life time of operation and maintenance
Illegal operation interception, such as rm command, will be intercepted without authorization
CheungSSH Features
Batch execution of commands
Script batch execution
Automatic file upload
Automatic file download
Scheduled tasks
Automatically deploy software
Program automatic synchronization
Server Asset Collection
Server Status Check
Technology Introduction
Online file editing instead of Vi editor
Front-end technology: Angulars javascript jQuery ngfileupload scrollbar uigrid typeahead cors Bootstrap
Backend technology: Django Redis Mysql Oracle SSH paramiko websocket crontab SFTP Cache
CheungSSH Architecture
module architecture
Running schema:
As a bastion machine , CheungSSH replaces administrators to manage many servers, liberates the hands of operation and maintenance administrators, and authorizes all operations first, then operates, and records after operations. Controllable in advance and auditable afterwards.
First ask yourself: what is automated operation and maintenance?
Why do you need automation?
I believe that friends in IT operation and maintenance know that operation and maintenance automation has only been mentioned in large numbers in the past two years? Because the cloud computing era has come, the scale of the company's servers is unprecedentedly large. In the past, when there were one or two hundred machines, there was nothing in the management. Now, thousands of servers, tens of thousands of servers, come out, how to effectively manage these servers? It has become a problem that every boss must face!
Because there are too many servers and the company is not staffed enough, the boss has to invite more people, but the boss finds out one day, and it is not the way to go in like this, and the money is like water. So at present, many companies are looking for automated operation and maintenance tools developed by third parties, such as puppet, ansible, saltstack and so on. Because they really want to use the power of these tools to replace their own company's labor costs. Or your own company invites several professional operation and maintenance developers to develop an operation and maintenance system by themselves. But there is one problem that cannot be avoided ...cost !
What is automation?
I found that many people still think that they need to find a tool with well-developed functions to manage thousands of servers in the company, and it can also be managed very flexibly, so that automation is realized. Here, I want to pour a spoonful of cold water!
That's not called automation, because even if you choose some tools with great functions, there is still one problem - cost ! Because it takes a lot of time to learn some tools, and the person who learns must have a certain Linux foundation, or even a good Linux foundation, so he still failed to reduce the cost to a minimum, so in this case, still Not called automation!
Because I think the cost of hiring someone who is proficient in Linux, or someone who is relatively familiar with Linux, is too high, because it is no more expensive than hiring someone who just graduated from college! Is not it? However, if you invite someone who has just graduated from college, you can't do this, what should you do?
Therefore, I think that the colleague who realizes powerful function management can also minimize the operating cost of the enterprise. That is the holy place of operation and maintenance in my mind - operation and maintenance automation!
Why does CheungSSH exist?
Like why wasn't Docs popular back then? After Microsoft launched the GUI, Bill Gates instantly became the richest man! why is that? Because what users want is simplicity, and simplicity again! A system that does not need to be learned can be truly popular. Therefore, it only needs to click the mouse to complete the operation. This is the automation and tool that CheungSSH pursues! Unleash the productivity of your business! Let CheungSSH be a reliable logistical support system for your business supply chain.
The purpose and value of CheungSSH
realizes full automation of operation and maintenance, reducing the operating cost of enterprises! is to a minimum ! Using CheungSSH, you do not need to learn shell operations again, but the functions are complete.
CheungSSH follow-up development
Make a powerful system that can combine monitoring, CMDB, and automated operation and maintenance into one system, and use lower learning costs to truly automate operation and maintenance!
Download address https://www.github.com/zhangqichuan/CheungSSH
Install
[root@cheungssh tmp]# unzip CheungSSH-Master.zip
[root@cheungssh tmp]# cd CheungSSH-Master/bin/
[root@cheungssh bin]# sh install-CheungSSH.sh install #This is a one-click automatic installation, no need to manually solve headaches such as dependencies
Reminder: It is recommended that you use Yum to install dependent modules online, which is faster
[ root@cheungssh bin ]# sh install - CheungSSH . sh update # for update installation
Login to CheungSSH Web
Add managed host configuration information
Click "Add Server"
After adding, as follows:
Normal configuration
Here, what we consider is that there is no need to do any configuration on the managed server, even if SSH-key binding is required. In CheungSSH, it is completely unnecessary, because what we want to do is simple and simple! Therefore, when adding a managed server, you only need to fill in the login password of the managed server, or SSH-key, which is the way you usually log in to the server, which is easy to understand!
So, I don't need to introduce more at all, when you see the interface, you can understand it! What information should be filled in. Please believe in CheungSSH, what we want to do is to make it easy for users!
Advanced configuration
sudo login
You can choose sudo as yes; it means that when executing the command, sudo is enabled, and when executing the command, you do not need to enter sudo at the beginning, it is a command directly, such as sudo ifconfig originally, now you only need ifconfig, CheungSSH automatically switches 
su for you - root
You can choose su as yes; it means that when executing the command, su-root is enabled, and when executing the command, it is not necessary to enter su-root at the beginning, it is a command directly. For example, after the original su-root, execute ifconfig, now only Requires ifconfig, CheungSSH switches it automatically for you
Excuting an order
Application scenario: Execute a whoami command, please remember that this command is executed on the managed remote server
Command echo, function area introduction:
select server
Application scenario: If you have 10,000 servers on the existing network, and this time you only want to operate on 1,000 servers, you can select the host to perform the task.
Add scheduled tasks
Application Scenario:
If you need to execute some commands on some hosts at 24:00 tonight to collect server information, at this time, you don’t need to be on duty at night to use this function, and leave it to the scheduled task module of CheungSSH, then you can feel at ease sleepy
Select the time of the scheduled task, which corresponds to the time-sharing day, month and week of the Linux system:
Confirm the time of the scheduled task. You can see that the time format is exactly the same as that of the Linux system. Yes, we made it into the crontab function of the operating system:
View the current list of scheduled tasks in the CheungSSH scheduled tasks
View scheduled tasks
CheungSSH Scheduled Task View Operating System Scheduled Task View
Tip :
CheungSSH is still for the user's consideration. Through the above scheduled tasks, you may know how to use it, but the results of the scheduled tasks and the running process are not clear. Here, I think it is necessary for me to explain to you, or In that sentence, what CheungSSH wants to do is to make users feel simple and really make it easy for users to use, so the principle of this scheduled task is: the scheduled tasks done on the CheungSSH control machine are not managed by Do scheduled tasks on the server, so that you can reduce more operating costs for you. The important thing is that you do not change your managed machines, and once again achieve stability! Reduce complexity!
document dowload
file transfer log
Application scenario: We have recorded all the records of uploading and downloading files, and the following is the record of transmission
document dowload
Application scenario: There is a file on the remote managed server. If you need to get the content of the file, you can use our download function to download the file on the remote server to the CheungSSH server, and then download it from the CheungSSH server. to your local computer PC machine, and the magic is, all this process is automatic!
Download the file you just downloaded from the remote server to your local computer from CheungSSH:
File Upload
Application scenario: If you need to update or upload some files to the managed server, then you can use the upload function here:
File upload and download have progress display Oh!
Script management
execute script
Display the relevant information of the script (the script has permission control, only authorized users can operate)
script execution
Scheduled Tasks
Permission audit
Authorization
Security Settings
More features...
And fortress machine characters...
Host Information API
Server Running Log API
Server Status Check API
File Transfer API
Command execution API
Asset Information API
Scheduled Task API
More APIs.....
I will not introduce them one by one here. When you see the CheungSSH web interface, I don't need to introduce more, you can see at a glance how this thing should be used! When you are hesitant, you can go to GitHub to download and install it with one click. It only takes 2 minutes to experience the simplicity of this system. Because we insist on simplicity! Simpler! At present, there are 800 units and users, and they rarely ask me how to use this function, they all understand at a glance!
contact us
Chief Designer: Zhang Qichuan
CheungSSH official QQ group: 445342415
Alipay donation:
This article is from the " SSH login security of Linux " blog, please keep this source http://keichuen.blog.51cto.com/6321640/1727559