Linux 批量拷贝数据脚本 + ssh 无密码登陆远程LINUX主机

最近想弄个Linux下批量传输拷贝部署远程服务器脚本

思路：1.与远程客户端建立等效性

2.拷贝数据、或者执行远程服务器命令

自动化等效性脚本如下：前提是安装expect这个包

================================================================

服务端生成自动生成rsa key

#!/usr/bin/expect

rm -rf root/.ssh/known_hosts

expect -c "

spawn ssh-keygen -t rsa

expect {

\"*id_rsa*\" {send \r;exp_continue}

\"*passphrase*\" {send \r;exp_continue}

\"*again*\" {send \r;exp_continue}

}

===============================================================

拷贝生成的key到远程服务器上

for p in $(cat /script/ip.txt)

do

ip=$(echo "$p"|cut -f1 -d":")

password=$(echo "$p"|cut -f2 -d":")

expect -c "

spawn ssh-copy-id -i /root/.ssh/id_rsa.pub root@$ip

expect {

\"*yes/no*\" {send \"yes\r\"; exp_continue}

\"*password*\" {send \"$password\r\"; exp_continue}

\"*Password*\" {send \"$password\r\";}

}

"

done

其中ip.txt内容格式为如下：

192.168.1.56:123456

===============================================================

执行服务端到客户端推送命令

for h in $(cat /script/ip.txt|cut -f1 -d":")

do

ssh root@$h "ls $dire"

dire="/tmp/test"

if [ $? -eq 0 ];

then

ssh root@$h rm -rf "$dire"

set timeout 300

ssh root@$h mkdir -p /tmp/test

fi

ssh root@$h touch lgl.txt

scp /root/CentOS-5.3-x86_64-bin-DVD.iso root@192.168.1.56:/home

set timeout 300

done

===============================================================

最后脚本如下：

[root@lgl script]# cat ssh.sh

#!/usr/bin/expect

rm -rf root/.ssh/known_hosts

expect -c "

spawn ssh-keygen -t rsa

expect {

\"*id_rsa*\" {send \r;exp_continue}

\"*passphrase*\" {send \r;exp_continue}

\"*again*\" {send \r;exp_continue}

}

"

for p in $(cat /script/ip.txt)

do

ip=$(echo "$p"|cut -f1 -d":")

password=$(echo "$p"|cut -f2 -d":")

expect -c "

spawn ssh-copy-id -i /root/.ssh/id_rsa.pub root@$ip

expect {

\"*yes/no*\" {send \"yes\r\"; exp_continue}

\"*password*\" {send \"$password\r\"; exp_continue}

\"*Password*\" {send \"$password\r\";}

}

"

done

for h in $(cat /script/ip.txt|cut -f1 -d":")

do

ssh root@$h "ls $dire"

dire="/tmp/test"

if [ $? -eq 0 ];

then

ssh root@$h rm -rf "$dire"

set timeout 300

ssh root@$h mkdir -p /tmp/test

fi

ssh root@$h touch lgl.txt

scp /root/CentOS-5.3-x86_64-bin-DVD.iso root@192.168.1.56:/home

set timeout 300

done

##################################################################

使用下例中ssky-keygen和ssh-copy-id，仅需通过3个步骤的简单设置而无需输入密码就能登录远程Linux主机。

ssh-keygen 创建公钥和密钥。

ssh-copy-id 把本地主机的公钥复制到远程主机的authorized_keys文件上。

ssh-copy-id 也会给远程主机的用户主目录（home）和~/.ssh, 和~/.ssh/authorized_keys设置合适的权限 。

步骤1: 用 ssh-key-gen
在本地主机上创建公钥和密钥

ligh@local-host$ ssh-keygen -t rsa

Enter file in which to save the key (/home/jsmith/.ssh/id_rsa):[Enter key]

Enter passphrase (empty for no passphrase): [Press enter key]

Enter same passphrase again: [Pess enter key]

Your identification has been saved in /home/jsmith/.ssh/id_rsa.

Your public key has been saved in /home/jsmith/.ssh/id_rsa.pub.

The key fingerprint is: 33:b3:fe:af:95:95:18:11:31:d5:de:96:2f:f2:35:f9

ligh@local-host

步骤2: 用 ssh-copy-id
把公钥复制到远程主机上

ligh@local-host$ ssh-copy-id -i ~/.ssh/id_rsa.pub root@192.168.0.3

ligh@remote-host‘s password:

Now try logging into the machine, with ―ssh ?remote-host‘‖, and check in:

.ssh/authorized_keys to make sure we haven‘t added extra keys that you weren‘t expecting.

[注: ssh-copy-id 把密钥追加到远程主机的 .ssh/authorized_key 上.]

步骤3: 直接登录远程主机

ligh@local-host$ ssh remote-host

Last login: Sun Nov 16 17:22:33 2008 from 192.168.1.2

[注: SSH 不会询问密码.]

ligh@remote-host$

[注: 你现在已经登录到了远程主机上]

##################################

SSH的无密码登录

实现原理

使用一种被称为"公私钥"认证的方式来进行ssh登录. "公私钥"认证方式简单的解释是首先在客户端上创建一对公私钥
（公钥文件~/.ssh/id_rsa.pub； 私钥文件：~/.ssh/id_rsa）然后把公钥放到服务器上（~/.ssh/authorized_keys）, 自己保留好私钥当ssh登录时,ssh程序会发送私钥去和服务器上的公钥做匹配.如果匹配成功就可以登录了

1.生成公私钥

# ssh-keygen -t rsa

Generating public/private rsa key pair.

Enter file in which to save the key (/root/.ssh/id_rsa):

Enter passphrase (empty for no passphrase): 为了达到无密码登录，这里不输入任何的东西，如果输入了数据，则登录的时候就要输入现在的数据

Enter same passphrase again:

Your identification has been saved in /root/.ssh/id_rsa.

Your public key has been saved in /root/.ssh/id_rsa.pub.

The key fingerprint is:

8c:87:51:0c:05:e4:4a:6c:74:5f:eb:01:70:47:ea:ab root@httpd2.com

2.将生成的公钥发送到要控制的服务器的/root/.ssh/下

# scp /root/.ssh/id_rsa.pub 192.168.0.29:/root/.ssh/authorized_keys

Address 192.168.0.29 maps to localhost, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!

root@192.168.0.29's password:

id_rsa.pub 100% 397 0.4KB/s 00:00

3.实验无密码登录

# ssh 192.168.0.29

Address 192.168.0.29 maps to localhost, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!

Last login: Thu Apr 14 15:07:40 2011 from 192.168.2.90