ssh互信脚本

2019独角兽企业重金招聘Python工程师标准>>>

ssh 互信脚本

1. 检测本地是否有秘钥文件
    1.1 没有则生成秘钥文件
2. 检测是否安装 expect 命令
    2.1 没有则安装 expect
3. 循环主机列表
    3.1 将本机公钥发送到主机列表中的所有主机
    3.2 检测列表中的主机是否有秘钥文件
        3.2.1 没有则生成秘钥文件
        3.2.2 检测本机 authorized_keys 文件中是否包含远程主机公钥
            3.2.2.1 没有则将远程主机公钥添加到本机 authorized_keys 文件
4. 循环主机列表
    4.1 将本机 authorized_keys 文件同步到远程所有主机
    4.2 远程主机创建 ssh 配置文件(ssh免输入yes)
5. 循环主机列表(测试连通性)

创建 ssh-key.sh 文件

cat >ssh-key.sh  <<'EOF'
#!/bin/bash

# 检测脚本输入的变量是否是两个
if [ $# != 2 ] ; then 
    echo "USAGE: $0 '192.168.0.2 192.168.0.3 102.168.0.4' password" 
    exit 1; 
fi

# 本机生成密钥
[ -f ~/.ssh/id_rsa ] || ssh-keygen -t rsa -P '' -f ~/.ssh/id_rsa

# 安装 expect
echo 'Install expect .... '
[ -f /usr/bin/expect ] || yum -y install expect >/dev/null

# 将本机公钥发送到远程主机
SSH_KEY(){
/usr/bin/expect -c "
set timeout 10
spawn ssh-copy-id -o StrictHostKeyChecking=no -i /root/.ssh/id_rsa.pub root@$1
expect {
    password: {
        send $2\r;
        interact;
    }
}
"
}

for IP in $1; do
    SSH_KEY $IP $2
    ssh $IP "[ -f ~/.ssh/id_rsa ] || ssh-keygen -t rsa -P '' -f ~/.ssh/id_rsa"
    RemoteKey="$(ssh $IP 'cat ~/.ssh/id_rsa.pub')"
    if [ ! "$(grep "$RemoteKey" ~/.ssh/authorized_keys)" ];then
        echo "$RemoteKey"  >> ~/.ssh/authorized_keys
    fi
done

for IP in $1; do
    scp ~/.ssh/authorized_keys $IP:~/.ssh/authorized_keys
    ssh $IP "
      echo 'Host *'  > ~/.ssh/config
      echo 'UserKnownHostsFile /dev/null'  >> ~/.ssh/config
      echo 'StrictHostKeyChecking no'  >> ~/.ssh/config
      echo 'LogLevel quiet' >> ~/.ssh/config
      echo 'Port 22' >> ~/.ssh/config
    "
done

# test
for IP in $1; do
    echo Local: $IP
    ssh -T -o StrictHostKeyChecking=no $IP "
        for IP in $1; do 
            ssh -T \$IP hostname -I
        done
    "
done
EOF

使用方法

chmod +x ssh-key.sh
./ssh-key.sh '192.168.0.2 192.168.0.3 192.168.0.4' RootPass

转载于:https://my.oschina.net/yx571304/blog/3008872