本文来源:IT书 - itbook.com
目的
一键式配置集群节点间免密码登录。前提是所有节点的密码是一致的!
实现
vim ~/nonpassword
脚本内容:
#!/bin/sh
# all node names
NODES=()
# all node password
PASS=$1
###### Validation args length
nodes_length=$(($# - 1))
if [[ ss -gt 0 ]];then
echo "Exit: At least two parameters, eg: your_password, node1"
exit 2
fi
###### Get all node name
i=0
for node in $*
do
if [[ i -gt 0 ]]; then
j=$((i - 1))
NODES[j]=$node
fi
let i++
done
MASTER=`hostname`
yum -y install expect
###################################
function ssh_cmd0(){
user_and_host=$1
password=$2
cmd=$3
/usr/bin/expect <<-EOF
set timeout 5
spawn ssh $user_and_host
expect {
"yes/no" { send "yes\r";exp_continue }
"password" { send "$password\r" }
}
expect "#"
send "$cmd\r"
expect "#"
exit 0
interact
EOF
}
function ssh_cmd(){
ssh_cmd0 "$1" "$2" "echo 'start_mark';$3 ;echo 'end_mark'" | sed -n '/^start_mark/,/^end_mark/p'|grep -Ev '(^start_mark|^end_mark)'
}
###### Create all nodes authorized_keys, And collection to master.
echo "" > ~/.ssh/authorized_keys
echo "" > ~/.ssh/known_hosts
for s in ${NODES[@]}
do
echo -e "\nSTART:: Slave node ($s) generates id_rsa.pub and sends master node ($MASTER)"
ssh_cmd "root@$s" "$PASS" "rm -f ~/.ssh/id_rsa; ssh-keygen -t rsa -P '' -f ~/.ssh/id_rsa"
ssh_cmd "root@$s" "$PASS" "cat ~/.ssh/id_rsa.pub" >> ~/.ssh/authorized_keys
echo "DONE:: Slave node ($s) generates id_rsa.pub and send to master node ($MASTER)"
done
###### Copy collectioned authorized_keys to all nodes.
echo -e "\n######################### SENDING authorized_keys TO ALL NODE #########################"
for s in ${NODES[@]}
do
echo -e "\nSTART:: Master node ($MASTER) send ALL id_rsa.pub(authorized_keys) to slave node ($s)"
ssh_cmd "root@$s" "$PASS" "echo '`cat ~/.ssh/authorized_keys`' > ~/.ssh/authorized_keys"
echo -e "DONE:: Master node ($MASTER) send ALL id_rsa.pub(authorized_keys) to slave node ($s)\n"
done
echo "Complete!"
chmod +x ~/nonpassword
用法
脚本用法:
~/nonpassword <password> <node1> <node2> <node...>
password:所有的节点必须是相同的密码。