ssh通过公钥实现身份认证，可以手工创建.ssh目录并将公钥拷贝至远程主机。

也可通过ssh-copy-id命令将公钥传递至远程主机。

对于批量化部署：

1首先要解决的是身份认证的问题（root密码应该统一）。

2然后通过sshpass的-p密码或-f指定密码文件的方式来传递密码，实现认证登录。

3通过sshpass配合ssh-copy-id命令执行公钥传递

 

脚本实现公钥的批量分发：

1 sshpass的安装

下载sshpass-1.06

解压并安装

tar zxvf sshpass-1.06

./configure

make&&make install

 

2脚本

#!/bin/bash

 

. /etc/init.d/functions

 

usage () {

if [ ! $# -eq 2 ];then

   echo "Usage:/bin/sh $0 -f host_list_file"

   exit 0

fi

}

 

auth () {

ID=`id|awk -F"[=()]+" '{print$2}'`

if [ $ID -ne 0 ];then

  echo "This tool should be running under root. Exit."

  exit 0

fi

}

 

pubkey () {

#Create ssh_key

if [ ! -f ~/.ssh/id_dsa ];then

   echo "The ssh key is not exist. It will be created..."

   echo -e "\n"|ssh-keygen -t dsa -N "" >/dev/null2>&1

   echo "The key is created successful."

fi

 

#Disable StrictHostKeyChecking

grep "^StrictHostKeyChecking no"/etc/ssh/ssh_config >/dev/null 2>&1

if [ $? -ne 0 ];then

   echo "StrictHostKeyChecking no" >> /etc/ssh/ssh_config&>/dev/null

fi

}

 

deploy () {

#input root and  password

echo "Deploying pub key."

read -p "Please type the remoteaccount:" ac

read -s -p "Please type the remotepassword:" pw

echo

 

#Deploy pub key

if [ -f $Hosts ];then

  for n in `cat $Hosts`

   do

     sshpass -p $pw ssh-copy-id -i .ssh/id_dsa.pub $ac@$n &>/dev/null

       if [ $? -eq 0 ];then

         action "Deploying pub_key for $n......Success!" /bin/true

       else

         action "Deploying pub_key for $n......Failed!" /bin/false

       fi

   done

else

 exit 0

fi

}

 

 

usage $1 $2

Hosts="$2"

 

auth

pubkey

deploy

 

 

3测试

创建主机列表文件hosts

cat /root/hosts

192.168.1.104

192.168.1.105

 

执行脚本sh deploy_pubkey.sh -f host

wKioL1eNtjHQaE4sAAF20dqtAno820.jpg


然后就可以通过ssh/sshpass/pssh等工具进行远程管理了。