环境检查脚本

1、网络

ansible -i all.ini all -m shell -a "systemctl status NetworkManager" |grep -C 3 "NetworkManager.service - Network Manager"
ansible -i all.ini all -m command -a "systemctl status network" 
ansible -i all.ini all -m command -a "systemctl status iptables" 
ansible -i all.ini all -m command -a "systemctl status firewalld"
ansible -i all.ini all -m command -a "ethtool bond0"
ansible -i all.ini all -m command -a "ethtool bond1"
ansible -i all.ini all -m command -a "cat /proc/net/bonding/bond0"
ansible -i all.ini all -m command -a "cat /proc/net/bonding/bond1"
ansible -i all.ini all -m command -a "ip -4 a"
ansible -i all.ini all -m command -a "cilium status"

2、服务器、系统、内核、存储、内存、CPU

kubectl get node -owide
ansible -i all.ini all -m command -a "dmidecode -t 1"
ansible -i all.ini all -m command -a "cat /etc/os-release"
ansible -i all.ini all -m command -a "uname -a"
ansible -i all.ini all -m command -a "lsblk"
ansible -i all.ini all -m command -a "cat /etc/fstab"
ansible -i all.ini all -m command -a "free -h"
ansible -i all.ini all -m command -a "lscpu"

3、系统参数

ansible -i all.ini all -m command -a "grep -i SELINUX /etc/selinux/config"
ansible -i all.ini all -m shell -a "sysctl -a | grep fs.aio"

4、时间同步

ansible -i inventory.ini all -m command -a 'date'

ansible -i inventory.ini all -m command -a 'systemctl status ntpd'

ansible -i inventory.ini all -m command -a 'ntpd -q'

ansible -i inventory.ini all -m command -a 'crontab -l '

ansible -i all.ini all -m command -a ' "docker  exec -it qfusion-chrony sh -c "chronyc sources -v" '

5、证书检查

for item in `find /etc/kubernetes/pki -maxdepth 2 -name "*.crt"`;do openssl x509 -in $item -text -noout| grep Not;echo ======================$item===============;done