最新一段时间,需要进行虚拟机的初始化,所以根据需要安装的一些服务,整理一个脚本,分享给大家,
其中可能有些环境配置不适合,需要进行手动修改
#!/bin/bash
#适用于本地虚拟机环境
#进程检测.如果该主机有该服务就不调用安装函数
function detection ( ) {
systemctl status httpd >> $log
if [[ $? = 4 ]]
then
httpd_install
else
echo "http服务已经安装,跳过"
fi
systemctl status salt-minion >> $log
if [[ $? = 4 ]]
then
salt-minion_install
else
echo "salt-minion 服务已经安装,跳过"
fi
python3 -V >> $log
if [[ $? != 0 ]]
then
python_install
else
echo "python3已经安装,跳过"
fi
coscmd -v >> $log
if [[ $? != 255 ]]
then
coscmd_install
else
echo "coscmd已经安装,跳过"
fi
systemctl status mysqld >> $log
if [[ $? = 4 ]]
then
mysql_install
else
ehco "mysql已经安装,跳过"
fi
num=`ps -ef | grep zabbix | awk '{print $8}'| head -n 1 `
test="/etc/init.d/zabbix_agentd"
if [[ "$num"x != "$test"x ]]
then
zabbix_agent_install
else
echo "zabbix-agent 已经安装,跳过"
fi
}
function base_install ( ) {
echo “配置防火墙规则”
setenforce 0
sed -i 's/SELINUX=enforcing/SELINUX=disabled/' /etc/selinux/config
systemctl start firewalld
systemctl enable firewalld
service="http tomcat https ssh zabbix saltstack"
port_list="80 8080 443 22 10051 10050 52526 52525"
echo "-----------------------------"
echo "初始化防火墙添加的端口："
for i in $port_list
do
echo "添加端口：${i}"
firewall-cmd --zone=public --add-port=${i}/tcp --permanent
done
echo "-----------------------------"
systemctl restart firewalld
echo “配置后的防火墙列表”
firewall-cmd --list-all
useradd mrdTomcat
echo "root:Wcp@1234" >> ./passwd.txt
echo "mrdTomcat:1234567" >> ./passwd.txt
chpasswd < ./passwd.txt
rm -f ./passwd.txt
echo "普通用户创建成功"
echo "****************"
echo "开始同步时间"
yum install -y ntpdate
ntpdate ntp.tencent.com
echo "同步阿里云时间完成，当前时间为："
date
yum -y install ntp
systemctl start ntpd
port=`ss -anltup |grep 123| wc -l`
if [[ $port > 0 ]]
then
echo "ntp服务安装成功"
else
echo "ntp服务安装失败"
exit 1
fi
echo "*****************"
echo "开始构建swap分区"
dd if=/dev/zero of=/mnt/swapfile bs=1MB count=1024
mkswap /mnt/swapfile
swapon /mnt/swapfile
echo "查看当前的内存状态"
free -m
echo "开始自动挂载"
echo "/mnt/swapfile swap swap defaults 0 0 " >> /etc/fstab
chown root:root /mnt/swapfile
chmod 0600 /mnt/swapfile
echo "*********************"
# echo "开始挂载磁盘操作，默认将磁盘挂载到home分区下"
deivce="/dev/"
sdb_name_num=`lsblk -r --output NAME,MOUNTPOINT | awk -F \/ '/sd/ { dsk=substr($1,1,3);dsks[dsk]+=1 } END { for ( i in dsks ) { if (dsks[i]==1) print i } }' |wc -l`
if [[ $sdb_name_num = 0 ]]
then
sdb_name="vdb"
DISK=$deivce$sdb_name
bli=`blkid |grep vdb1| wc -l `
if [[ $bli -gt 0 ]]
then
#则已经被格式化了
df_num=`df -h | grep "home" | wc -l `
if [[ $df_num = 0 ]]
then
echo " ${DISK}1 /home ext4 defaults 0 0" >> /etc/fstab
else
echo "/home已经被占用"
fi
else
mkfs.ext4 ${DISK}1
df_num=`df -h | grep "home" | wc -l `
if [[ $df_num = 0 ]]
then
echo " ${DISK}1 /home ext4 defaults 0 0" >> /etc/fstab
else
echo "/home已经被占用"
fi
fi
else #找到磁盘
sdb_name=`lsblk -r --output NAME,MOUNTPOINT | awk -F \/ '/sd/ { dsk=substr($1,1,3);dsks[dsk]+=1 } END { for ( i in dsks ) { if (dsks[i]==1) print i } }'`
bli=`blkid |grep $sdb_name_num| wc -l `
if [[ $bli -gt 0 ]]
then
#则已经被格式化了
df_num=`df -h | grep "home" | wc -l `
if [[ $df_num = 0 ]]
then
echo " ${DISK}1 /home ext4 defaults 0 0" >> /etc/fstab
else
echo "/home已经被占用"
fi
else
/usr/bin/expect -c"
set timeout -1
spawn /sbin/fdisk $DISK
expect \"*m for help*:\"
send -- \"n\r\"
expect \"*p*\n\"
send -- \"p\r\"
expect \"Partition number (1-4,*\"
send -- \"\r\"
expect \"*default*:\"
send -- \"\r\"
expect \"*default*:\"
send -- \"\r\"
expect \"*m for help*:\"
send -- \"w\r\"
expect eof
"
mkfs.ext4 ${DISK}1
df_num=`df -h | grep "home" | wc -l `
if [[ $df_num = 0 ]]
then
echo " ${DISK}1 /home ext4 defaults 0 0" >> /etc/fstab
else
echo "/home已经被占用"
fi
fi
fi
mount -a
echo "*********************"
# echo "设置主机之间的免密互信"
/usr/bin/expect -c"
set timeout -1
spawn /usr/bin/ssh-keygen
expect \"*/root/.ssh/id_rsa*\"
send -- \"\r\"
expect \"*no passphrase*\"
send -- \"\r\"
expect \"* same passphrase*\"
send -- \"\r\"
##要改
spawn ssh-copy-id 192.168.136.3
expect \"*yes/no*\"
send -- \"yes\r\"
expect \"* password*\"
send -- \"Wcp@1234\r\"
expect eof
"
echo "*******************"
ip_list='10.157.0.17 10.157.0.16 10.1.38.2'
for i in $ip_list
do
ip=`cat /etc/hosts.allow | grep $i | wc -l`
if [[ $ip = 0 ]]
then
echo "sshd:${i}" >> /etc/hosts.allow
fi
done
echo "sshd:ALL" >> /etc/hosts.deny #禁止所有登录
systemctl restart sshd
}
#安装httpd服务
function httpd_install ( ) {
echo "开始安装http"
yum install httpd -y
yum -y install php php-gd gcc php-mysql php-xml php-devel
echo "DirectoryIndex index.html index.php" >> /etc/httpd/conf/httpd.conf
echo "AddType application/x-httpd-php .php .php3 .php4 .php5" >> /etc/httpd/conf/httpd.conf
echo "date.timezone=Asia/Shanghai" >> /etc/php.ini
systemctl start httpd >> $log
systemctl enable httpd
ac=`ss -anltp | grep httpd | wc -l`
if [[ $ac > 0 ]]
then
echo "http 服务启动成功！"
else
echo "http 启动失败！请及时排查 "
exit
fi
}
#安装satl-minion
function salt-minion_install ( ) {
cd /etc/yum.repos.d
cat >salt.repo <<EOF
[salt-latest-repo]
name=Salt repo for RHEL/CentOS 7 PY2
baseurl=https://archive.repo.saltproject.io/yum/redhat/7/x86_64/archive/3000.5
skip_if_unavailable=True
failovermethod=priority
enabled=1
enabled_metadata=1
gpgcheck=0
gpgkey=https://archive.repo.saltproject.io/yum/redhat/7/x86_64/archive/30005/SALTSTACK-GPG-KEY.pub, https://archive.repo.saltproject.io/yum/redhat/7/x86_64/archive/3000.5/base/RPM-GPG-KEY-CentOS-7
EOF
yum clean all
echo "开始安装salt-minion"
yum install -y salt-minion
echo "修改minion配置："
###要改
# ip=49.233.21.192
while true
do
ip="192.168.136.3"
test=`telnet $ip 52526 | grep 'Escape character is'`
if [[ $? = 0 ]]
then
echo "主机可连通,开始进行配置"
break
else
echo "主机不可达,请重新输入或排查问题!"
exit 1
fi
done
path="/etc/salt/minion"
echo "master: $ip" >> $path
echo "master_port: 52526" >> $path
echo "user: root" >> $path
ip_add=`ip a | grep brd | tail -n 1| awk '{print $2}'| awk -F '/' '{print $1}'`
echo "id: $ip_add" >> $path
echo "log_file: /var/log/salt/minion" >> $path
systemctl start salt-minion
systemctl status salt-minion
if [[ $? = 0 ]]
then
echo "salt-minion启动成功,开始测试连通性"
# salt-call test.ping
# # if [[ $? = 0 ]]
# # then
# # echo "连接测试通过"
# # else
# # echo "测试连接失败请及时排查!"
# # exit 1
# # fi
else
echo "salt-minion启动失败,请及时排查"
exit 1
fi
}
#安装python和coscmd
function python_install( ) {
echo "开始安装python：为python3.6"
yum install -y python3
python3 -V
if [[ $? -eq 0 ]]
then
echo "python 安装成功！开始安装coscmd"
else
echo "python 安装失败，请及时排查问题！"
exit 1
fi
}
#安装coscmd
function coscmd_install ( ) {
pip3 install coscmd
pip3 install coscmd -U
coscmd=`coscmd -v | wc -l`
if [[ $coscmd > 0 ]]
then
echo "coscmd安装成功"
else
echo "coscmd安装失败"
exit 1
fi
}
function mysql_install ( ) {
dir="/usr/local/mysql5"
mkdir -p $dir
echo "开始安装muysql5"
cd $dir
pwd
#拉取数据响应的yum源
wget http://repo.mysql.com/mysql57-community-release-el7-8.noarch.rpm
rpm -ivh mysql57-community-release-el7-8.noarch.rpm
rpm --import https://repo.mysql.com/RPM-GPG-KEY-mysql-2022
yum install mysql-server -y
systemctl start mysqld.service
systemctl enable mysqld.service
mysql=`ss -anltp | grep mysqld`
if [[ $mysql > 0 ]]
then
echo "mysql启动成功！"
pass=` grep "password" /var/log/mysqld.log | head -n 1| awk '{print $NF}'`
u_pass="Nebula@1234"
echo "您设置的密码：$u_pass" >> ./install.log
mysqladmin -uroot -p$pass password $u_pass
mysql -uroot -p$u_pass -e "grant all privileges on *.* to 'root'@'%' identified by '$u_pass' with grant option;"
mysql -uroot -p$u_pass -e "flush privileges;"
else
echo "mysql启动异常!请检查"
exit 1
fi
}
function zabbix_agent_install () {
#该脚本只用来自动化安装zabbix-agent,且是通过源码包安装.
##这个是测试包
pag="http://101.200.170.223/linux/zabbix_agent5/zabbix-5.0.15_x64_kernel2.6.tgz"
path="/usr/local/zabbix/conf/zabbix_agentd.conf"
#备用自动化安装和确认proxy_ip
echo "开始安装工具包"
yum install -y nc
echo "开始安装zabbix-agent"
mkdir /usr/local/zabbix
cd /usr/local/zabbix
wget $pag
tar xzvf zabbix-5.0.15*
ln -s ./bin/zabbix_sender ./bin/zabbix_get /usr/bin
ln -s ./sbin/zabbix_agent /usr/sbin/
echo "开始修改配置文件"
proxy_ip="192.168.136.3"
sed -i "s/Server=Proxy/Server=$proxy_ip/g" $path
sed -i "s/ServerActive=Proxy/ServerActive=$proxy_ip/g" $path
#获取到主机ip
ip_add=`ip a | grep brd | tail -n 1| awk '{print $2}'| awk -F '/' '{print $1}'`
sed -i "s/Hostname=IP/Hostname=$ip_add/g" $path
cp $path /usr/local/etc
echo "zabbix_agent 10050/tcp" >> /etc/services
echo "zabbix_agent 10050/udp" >> /etc/services
cp /usr/local/zabbix/sbin/zabbix_agentd /etc/init.d
echo "检查对应端口情况"
systemctl status zabbix-agent
if [[ $? = 0 ]]
then
echo "停止yum安装的zabbix-agent"
systemctl stop zabbix-agent
echo "停止成功"
else
num=`netstat -anltp | grep zabbix_agent|wc -l `
if [[ $num = 0 ]]
then
echo "端口未被占用"
else
echo "端口被占用,正在处理"
while true
do
pid=`netstat -anltp | grep zabbix |awk '{print $NF}'| awk -F '/' '{print $1}'`
kill -9 $pid
pid1=`netstat -anltp | grep zabbix |awk '{print $NF}'| awk -F '/' '{print $1}' | wc -l`
if [[ $pid1 = 0 ]]
then
echo "停止成功"
else
echo "停止中"
fi
done
echo "处理成功!"
fi
fi
echo "启动zabbix-agent"
/etc/init.d/zabbix_agentd
num2=`netstat -anltp | grep zabbix_agent|wc -l `
if [[ $num2 > 0 ]]
then
echo "zabbix-agent启动成功!"
else
echo "zabbix-agent启动失败,请及时排查!"
exit 1
fi
}
echo "*******************"
echo "检查网络连通"
ping -c 2 www.baidu.com
if [[ $? -eq 0 ]]
then
log="chushihua.log" #日志收集文件
num=`netstat -anltp | grep -v "ssh"| wc -l`
echo "网络连接成功！开始安装基础工具"
if [ ! -f $log ]
then
date=`date`
echo " $date 初始化主机日志文档 " >> $log
yum install -y vim
yum install -y wget
yum install -y telnet
yum install -y nc
yum install expect -y
base_install
# 安装httpd
detection
fi
else
echo "网络连接失败，请排查！"
exit 1
fi
518
被折叠的 条评论
为什么被折叠?
到【灌水乐园】发言
