主机间信任关系建立之ssh+sshpass批量化部署

utydgf

ssh通过公钥实现身份认证，可以手工创建.ssh目录并将公钥拷贝至远程主机。
也可通过ssh-copy-id命令将公钥传递至远程主机。
对于批量化部署：
1首先要解决的是身份认证的问题（root密码应该统一）。
2然后通过sshpass的-p密码或-f指定密码文件的方式来传递密码，实现认证登录。
3通过sshpass配合ssh-copy-id命令执行公钥传递

脚本实现公钥的批量分发：
1 sshpass的安装
下载sshpass-1.06
解压并安装
tar zxvf sshpass-1.06
./configure
make&&make install

2脚本
#!/bin/bash

. /etc/init.d/functions

usage () {
if [ ! $# -eq 2 ];then
   echo "Usage:/bin/sh $0 -f host_list_file"
   exit 0
fi
}


auth () {
ID=`id|awk -F"[=()]+" '{print$2}'`
if [ $ID -ne 0 ];then
  echo "This tool should be running under root. Exit."
  exit 0
fi
}

pubkey () {
#Create ssh_key
if [ ! -f ~/.ssh/id_dsa ];then
   echo "The ssh key is not exist. It will be created..."
   echo -e "\n"|ssh-keygen -t dsa -N "" >/dev/null2>&1
   echo "The key is created successful."
fi

#Disable StrictHostKeyChecking
grep "^StrictHostKeyChecking no"/etc/ssh/ssh_config >/dev/null 2>&1
if [ $? -ne 0 ];then
   echo "StrictHostKeyChecking no" >> /etc/ssh/ssh_config&>/dev/null
fi
}

deploy () {
#input root and  password
echo "Deploying pub key."
read -p "Please type the remoteaccount:" ac
read -s -p "Please type the remotepassword:" pw
echo

#Deploy pub key
if [ -f $Hosts ];then
  forn in `cat $Hosts`
   do
     sshpass -p $pw ssh-copy-id -i .ssh/id_dsa.pub $ac@$n &>/dev/null
       if [ $? -eq 0 ];then
         action "Deploying pub_key for $n......Success!" /bin/true
       else
         action "Deploying pub_key for $n......Failed!" /bin/false
       fi
   done
else
exit 0
fi
}


usage $1 $2
Hosts="$2"

auth
pubkey
deploy


3测试
创建主机列表文件hosts
cat /root/hosts
192.168.1.104
192.168.1.105

执行脚本sh deploy_pubkey.sh -f host


然后就可以通过ssh/sshpass/pssh等工具进行远程管理了。