function在bash中为关键字9159金沙官网

作者: 操作系统  发布:2019-09-03

Ubuntu自动搭建VPNServer-PPTP的Shell脚本

#!/bin/bash

if [ "$UID" != "0" ]; then
    echo "please use sudo to run $0"
    exit 1
fi

if [ "$#" != "5" ]; then
    echo "Usage: (5 parameters)"
    echo "    $0 localip remoteip username password networkSegment/NetMask"
    echo ""
    echo "  such as: $0 192.168.1.1 192.168.1.1-254 tmp tmp 192.168.1.0/24"
    echo "           $0 192.168.1.1 10.0.0.2-130 myuser mypassword 10.0.0.0/24"
    exit 1
fi

which pptpd > /dev/null
if [ "$?" != "0" ]; then
    apt-get install -y pptpd
fi

# 1. config /etc/pptpd.conf
sed -i "s%localip%#local_old_ip%g" /etc/pptpd.conf
sed -i "s%remoteip%#remote_old_ip%g" /etc/pptpd.conf
echo "localip $1" >> /etc/pptpd.conf # 这个就是你当前主机的IP地址
echo "remoteip $2" >> /etc/pptpd.conf # 这个就是给客户端分配置的IP地址池

# 2. 添加DNS , config /etc/ppp/options
sed -i "s%ms-dns%#old-dns%g" /etc/ppp/options
echo "ms-dns 114.114.114.114" >> /etc/ppp/options
echo "ms-dns 10.0.101.10" >> /etc/ppp/options
echo "ms-dns 8.8.8.8" >> /etc/ppp/options

# 3. 添加服务器名称 /etc/ppp/pptpd-options
# sed -i "s%name pptpd%name $1%g" /etc/ppp/pptpd-options
sed -i "s%name%#na_me%g" /etc/ppp/pptpd-options
echo "name $1" >> /etc/ppp/pptpd-options
echo "logfile /var/log/pptp.log" >> /etc/ppp/pptpd-options

# 4. 服务端的用户名和密码的配置 /etc/ppp/chap-secrets
#(位置): 
#  用户名 服务器名(可设置为*) 密码 允许登入的ip(可设置为*)
echo ""$3"    $1  "$4"  *" >> /etc/ppp/chap-secrets
# such as: "tmp" 192.168.1.1 "tmp" *

# 5. 查看运行的端口
# netstat -tnlpu | grep pptpd
# pptp 端口是tcp1723,可以看到1723端口开户
echo 1 > /proc/sys/net/ipv4/ip_forward #修改内核设置,使其支持转发
# 要想永久生效,使其支持转发的话
# config /etc/sysctl.conf
#echo "net.ipv4.ip_forward = 1" >> /etc/sysctl.conf # 将后面值改为1,然后保存文件
sed -i "s%net.ipv4.ip_forward=1%#net_old_.ipv4.ip_forward = 1%g" /etc/sysctl.conf # 将后面值改为1,然后保存文件
echo "net.ipv4.ip_forward = 1" >> /etc/sysctl.conf # 将后面值改为1,然后保存文件
sysctl -p # 马上生效

# 6. 第四步打开端口转发后,路由器端口转发
# 转发本地tcp1723端口即可

# 7. 不加这条只能访问内网资源,加了可访问外网
# iptables -t nat -A POSTROUTING -s 10.0.0.0/24 -o eth0 -j MASQUERADE
iptables -t nat -A POSTROUTING -s $5 -o eth0 -j MASQUERADE
# 7.1 出现在openwrt无法上网
# 默认在OpenWrt中安装pptpd并设置好后,虽然能通过vpn连接上,但是连上之后无法通过路由器上网。网上有人说在iptables中增加POSTROUTING的masquerade的规则,经老衲测试,没有效果。
#经反复摸索,发现客户端拨完vpn后,上网时的包都被rst掉了,于是想到应该是防火墙在搞鬼。
#看了下iptable,还真是复杂,增加了好几个链。想来想去应该是在FORWORD链中有名堂,于是加了条规则,发现终于可以上网了。甚喜,遂来分享之。
# iptables -A forwarding_rule -s 10.1.56.0/24 -j ACCEPT
iptables -A forwarding_rule -s $5 -j ACCEPT

# 8. 可能问题1:连接过程中无法通过帐号密码验证,logfile显示:pppd[26133]: Couldn’t open the /dev/ppp device: No such file or directory 
# 确少/dev/ppp
ls /dev/ppp
if [ "$?" != "0" ]; then
    mknod /dev/ppp c 108 0
fi

# 8. 重启pptpd服务否则客户端获取的IP段不生效
/etc/init.d/pptpd restart

exit 0

#!/bin/bashif [ $UID != 0 ]; then echo please use sudo to run $0 exit 1fiif [ $# != 5 ]; then echo Usage: (5 parameters) echo $0 loca...

Dash与Bash的语法区别

#!/bin/bash
#变量不区分大小写
name=zhangjia
echo "This is name $name"
echo $UID
echo $PWD
echo "#########################33"
#打印文件本身
echo $0
#打印第一个参数
echo $1
#打印第二个参数
echo $2
#$?判断上个命令是否正确.是转义符
echo “The $1 is $1“
#$*表示打印所有参数
echo "The $* is $*"
#$#表示统计参数的个数
echo "The $# is $#"
#打印颜色
echo -c "\033[32m------------\033[0m"
#!/bin/bash
#打印菜单
echo "Please select menue install fllow:"
echo "1)安装apache"
echo "2)安装mysql"
echo "3)安装php"
echo "4)配置lamp web "

#!/bin/bash
#主机信息每日巡检

 

IPADDR=$(ifconfig eth0|grep 'inet addr'|awk -F '[ :]' '{print $13}')
#环境变量PATH没设好,在cron里执行时有很多命令会找不到
export PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin:/root/bin
source /etc/profile

如今Debian和Ubuntu中,/bin/sh默认已经指向dash,这是一个不同于bash的shell,它主要是为了执行脚本而出现,而不是交互,它速度更快,但功能相比bash要少很多,语法严格遵守POSIX标准,下面简要列举下从bash迁移到dash一般需要注意的问题

[ $(id -u) -gt 0 ] && echo "请用root用户执行此脚本!" && exit 1
centosVersion=$(awk '{print $(NF-1)}' /etc/redhat-release)
VERSION="2017.08.22"

 

#日志相关
PROGPATH=`echo $0 | sed -e 's,[\/][^\/][^\/]*$,,'`
[ -f $PROGPATH ] && PROGPATH="."
LOGPATH="$PROGPATH/log"
[ -e $LOGPATH ] || mkdir $LOGPATH
RESULTFILE="$LOGPATH/HostDailyCheck-$IPADDR-`date %Y%m%d`.txt"

1.定义函数

#定义报表的全局变量
report_DateTime="" #日期 ok
report_Hostname="" #主机名 ok
report_OSRelease="" #发行版本 ok
report_Kernel="" #内核 ok
report_Language="" #语言/编码 ok
report_LastReboot="" #最近启动时间 ok
report_Uptime="" #运行时间(天) ok
report_CPUs="" #CPU数量 ok
report_CPUType="" #CPU类型 ok
report_Arch="" #CPU架构 ok
report_MemTotal="" #内存总容量(MB) ok
report_MemFree="" #内存剩余(MB) ok
report_MemUsedPercent="" #内存使用率% ok
report_DiskTotal="" #硬盘总容量(GB) ok
report_DiskFree="" #硬盘剩余(GB) ok
report_DiskUsedPercent="" #硬盘使用率% ok
report_InodeTotal="" #Inode总量 ok
report_InodeFree="" #Inode剩余 ok
report_InodeUsedPercent="" #Inode使用率 ok
report_IP="" #IP地址 ok
report_MAC="" #MAC地址 ok
report_Gateway="" #默认网关 ok
report_DNS="" #DNS ok
report_Listen="" #监听 ok
report_Selinux="" #Selinux ok
report_Firewall="" #防火墙 ok
report_USERs="" #用户 ok
report_USEREmptyPassword="" #空密码用户 ok
report_USERTheSameUID="" #相同ID的用户 ok
report_PasswordExpiry="" #密码过期(天) ok
report_RootUser="" #root用户 ok
report_Sudoers="" #sudo授权 ok
report_SSHAuthorized="" #SSH信任主机 ok
report_SSHDProtocolVersion="" #SSH协议版本 ok
report_SSHDPermitRootLogin="" #允许root远程登录 ok
report_DefunctProsess="" #僵尸进程数量 ok
report_SelfInitiatedService="" #自启动服务数量 ok
report_SelfInitiatedProgram="" #自启动程序数量 ok
report_RuningService="" #运行中服务数 ok
report_Crontab="" #计划任务数 ok
report_Syslog="" #日志服务 ok
report_SNMP="" #SNMP OK
report_NTP="" #NTP ok
report_JDK="" #JDK版本 ok
function version(){
echo ""
echo ""
echo "系统巡检脚本:Version $VERSION"
}

 

function getCpuStatus(){
echo ""
echo ""
echo "############################ CPU检查 #############################"
Physical_CPUs=$(grep "physical id" /proc/cpuinfo| sort | uniq | wc -l)
Virt_CPUs=$(grep "processor" /proc/cpuinfo | wc -l)
CPU_Kernels=$(grep "cores" /proc/cpuinfo|uniq| awk -F ': ' '{print $2}')
CPU_Type=$(grep "model name" /proc/cpuinfo | awk -F ': ' '{print $2}' | sort | uniq)
CPU_Arch=$(uname -m)
echo "物理CPU个数:$Physical_CPUs"
echo "逻辑CPU个数:$Virt_CPUs"
echo "每CPU核心数:$CPU_Kernels"
echo " CPU型号:$CPU_Type"
echo " CPU架构:$CPU_Arch"
#报表信息
report_CPUs=$Virt_CPUs #CPU数量
report_CPUType=$CPU_Type #CPU类型
report_Arch=$CPU_Arch #CPU架构
}

bash: function在bash中为关键字

function getMemStatus(){
echo ""
echo ""
echo "############################ 内存检查 ############################"
if [[ $centosVersion < 7 ]];then
free -mo
else
free -h
fi
#报表信息
MemTotal=$(grep MemTotal /proc/meminfo| awk '{print $2}') #KB
MemFree=$(grep MemFree /proc/meminfo| awk '{print $2}') #KB
let MemUsed=MemTotal-MemFree
MemPercent=$(awk "BEGIN {if($MemTotal==0){printf 100}else{printf "%.2f",$MemUsed*100/$MemTotal}}")
report_MemTotal="$((MemTotal/1024))""MB" #内存总容量(MB)
report_MemFree="$((MemFree/1024))""MB" #内存剩余(MB)
report_MemUsedPercent="$(awk "BEGIN {if($MemTotal==0){printf 100}else{printf "%.2f",$MemUsed*100/$MemTotal}}")""%" #内存使用率%
}

 

function getDiskStatus(){
echo ""
echo ""
echo "############################ 磁盘检查 ############################"
df -hiP | sed 's/Mounted on/Mounted/'> /tmp/inode
df -hTP | sed 's/Mounted on/Mounted/'> /tmp/disk
join /tmp/disk /tmp/inode | awk '{print $1,$2,"|",$3,$4,$5,$6,"|",$8,$9,$10,$11,"|",$12}'| column -t
#报表信息
diskdata=$(df -TP | sed '1d' | awk '$2!="tmpfs"{print}') #KB
disktotal=$(echo "$diskdata" | awk '{total =$3}END{print total}') #KB
diskused=$(echo "$diskdata" | awk '{total =$4}END{print total}') #KB
diskfree=$((disktotal-diskused)) #KB
diskusedpercent=$(echo $disktotal $diskused | awk '{if($1==0){printf 100}else{printf "%.2f",$2*100/$1}}')
inodedata=$(df -iTP | sed '1d' | awk '$2!="tmpfs"{print}')
inodetotal=$(echo "$inodedata" | awk '{total =$3}END{print total}')
inodeused=$(echo "$inodedata" | awk '{total =$4}END{print total}')
inodefree=$((inodetotal-inodeused))
inodeusedpercent=$(echo $inodetotal $inodeused | awk '{if($1==0){printf 100}else{printf "%.2f",$2*100/$1}}')
report_DiskTotal=$((disktotal/1024/1024))"GB" #硬盘总容量(GB)
report_DiskFree=$((diskfree/1024/1024))"GB" #硬盘剩余(GB)
report_DiskUsedPercent="$diskusedpercent""%" #硬盘使用率%
report_InodeTotal=$((inodetotal/1000))"K" #Inode总量
report_InodeFree=$((inodefree/1000))"K" #Inode剩余
report_InodeUsedPercent="$inodeusedpercent""%" #Inode使用率%

[email protected] ~ $ foo(){ echo $0;}

}

[email protected] ~ $ foo

function getSystemStatus(){
echo ""
echo ""
echo "############################ 系统检查 ############################"
if [ -e /etc/sysconfig/i18n ];then
default_LANG="$(grep "LANG=" /etc/sysconfig/i18n | grep -v "^#" | awk -F '"' '{print $2}')"
else
default_LANG=$LANG
fi
export LANG="en_US.UTF-8"
Release=$(cat /etc/redhat-release 2>/dev/null)
Kernel=$(uname -r)
OS=$(uname -o)
Hostname=$(uname -n)
SELinux=$(/usr/sbin/sestatus | grep "SELinux status: " | awk '{print $3}')
LastReboot=$(who -b | awk '{print $3,$4}')
uptime=$(uptime | sed 's/.*up ([^,]*), .*/1/')
echo " 系统:$OS"
echo " 发行版本:$Release"
echo " 内核:$Kernel"
echo " 主机名:$Hostname"
echo " SELinux:$SELinux"
echo "语言/编码:$default_LANG"
echo " 当前时间:$(date '%F %T')"
echo " 最后启动:$LastReboot"
echo " 运行时间:$uptime"
#报表信息
report_DateTime=$(date "%F %T") #日期
report_Hostname="$Hostname" #主机名
report_OSRelease="$Release" #发行版本
report_Kernel="$Kernel" #内核
report_Language="$default_LANG" #语言/编码
report_LastReboot="$LastReboot" #最近启动时间
report_Uptime="$uptime" #运行时间(天)
report_Selinux="$SELinux"
export LANG="$default_LANG"

/bin/bash

}

[email protected] ~ $ function foo2(){ echo $0;}

function getServiceStatus(){
echo ""
echo ""
echo "############################ 服务检查 ############################"
echo ""
if [[ $centosVersion > 7 ]];then
conf=$(systemctl list-unit-files --type=service --state=enabled --no-pager | grep "enabled")
process=$(systemctl list-units --type=service --state=running --no-pager | grep ".service")
#报表信息
report_SelfInitiatedService="$(echo "$conf" | wc -l)" #自启动服务数量
report_RuningService="$(echo "$process" | wc -l)" #运行中服务数量
else
conf=$(/sbin/chkconfig | grep -E ":on|:启用")
process=$(/sbin/service --status-all 2>/dev/null | grep -E "is running|正在运行")
#报表信息
report_SelfInitiatedService="$(echo "$conf" | wc -l)" #自启动服务数量
report_RuningService="$(echo "$process" | wc -l)" #运行中服务数量
fi
echo "服务配置"
echo "--------"
echo "$conf" | column -t
echo ""
echo "正在运行的服务"
echo "--------------"
echo "$process"

[email protected] ~ $ foo2

}

/bin/bash

function getAutoStartStatus(){
echo ""
echo ""
echo "############################ 自启动检查 ##########################"
conf=$(grep -v "^#" /etc/rc.d/rc.local| sed '/^$/d')
echo "$conf"
#报表信息
report_SelfInitiatedProgram="$(echo $conf | wc -l)" #自启动程序数量
}

dash: dash中没有function这个关键字

function getLoginStatus(){
echo ""
echo ""
echo "############################ 登录检查 ############################"
last | head
}

 

function getNetworkStatus(){
echo ""
echo ""
echo "############################ 网络检查 ############################"
if [[ $centosVersion < 7 ]];then
/sbin/ifconfig -a | grep -v packets | grep -v collisions | grep -v inet6
else
#ip a
for i in $(ip link | grep BROADCAST | awk -F: '{print $2}');do ip add show $i | grep -E "BROADCAST|global"| awk '{print $2}' | tr 'n' ' ' ;echo "" ;done
fi
GATEWAY=$(ip route | grep default | awk '{print $3}')
DNS=$(grep nameserver /etc/resolv.conf| grep -v "#" | awk '{print $2}' | tr 'n' ',' | sed 's/,$//')
echo ""
echo "网关:$GATEWAY "
echo " DNS:$DNS"
#报表信息
IP=$(ip -f inet addr | grep -v 127.0.0.1 | grep inet | awk '{print $NF,$2}' | tr 'n' ',' | sed 's/,$//')
MAC=$(ip link | grep -v "LOOPBACK|loopback" | awk '{print $2}' | sed 'N;s/n//' | tr 'n' ',' | sed 's/,$//')
report_IP="$IP" #IP地址
report_MAC=$MAC #MAC地址
report_Gateway="$GATEWAY" #默认网关
report_DNS="$DNS" #DNS
}

$ foo(){ echo $0;}

function getListenStatus(){
echo ""
echo ""
echo "############################ 监听检查 ############################"
TCPListen=$(ss -ntul | column -t)
echo "$TCPListen"
#报表信息
report_Listen="$(echo "$TCPListen"| sed '1d' | awk '/tcp/ {print $5}' | awk -F: '{print $NF}' | sort | uniq | wc -l)"
}

$ foo

function getCronStatus(){
echo ""
echo ""
echo "############################ 计划任务检查 ########################"
Crontab=0
for shell in $(grep -v "/sbin/nologin" /etc/shells);do
for user in $(grep "$shell" /etc/passwd| awk -F: '{print $1}');do
crontab -l -u $user >/dev/null 2>&1
status=$?
if [ $status -eq 0 ];then
echo "$user"
echo "--------"
crontab -l -u $user
let Crontab=Crontab $(crontab -l -u $user | wc -l)
echo ""
fi
done
done
#计划任务
find /etc/cron* -type f | xargs -i ls -l {} | column -t
let Crontab=Crontab $(find /etc/cron* -type f | wc -l)
#报表信息
report_Crontab="$Crontab" #计划任务数
}
function getHowLongAgo(){
# 计算一个时间戳离现在有多久了
datetime="$*"
[ -z "$datetime" ] && echo "错误的参数:getHowLongAgo() $*"
Timestamp=$(date %s -d "$datetime") #转化为时间戳
Now_Timestamp=$(date %s)
Difference_Timestamp=$(($Now_Timestamp-$Timestamp))
days=0;hours=0;minutes=0;
sec_in_day=$((60*60*24));
sec_in_hour=$((60*60));
sec_in_minute=60
while (( $(($Difference_Timestamp-$sec_in_day)) > 1 ))
do
let Difference_Timestamp=Difference_Timestamp-sec_in_day
let days
done
while (( $(($Difference_Timestamp-$sec_in_hour)) > 1 ))
do
let Difference_Timestamp=Difference_Timestamp-sec_in_hour
let hours
done
echo "$days 天 $hours 小时前"
}

dash

function getUserLastLogin(){
# 获取用户最近一次登录的时间,含年份
# 很遗憾last命令不支持显示年份,只有"last -t YYYYMMDDHHMMSS"表示某个时间之间的登录,我
# 们只能用最笨的方法了,对比今天之前和今年元旦之前(或者去年之前和前年之前……)某个用户
# 登录次数,如果登录统计次数有变化,则说明最近一次登录是今年。
username=$1
: ${username:="`whoami`"}
thisYear=$(date %Y)
oldesYear=$(last | tail -n1 | awk '{print $NF}')
while(( $thisYear >= $oldesYear));do
loginBeforeToday=$(last $username | grep $username | wc -l)
loginBeforeNewYearsDayOfThisYear=$(last $username -t $thisYear"0101000000" | grep $username | wc -l)
if [ $loginBeforeToday -eq 0 ];then
echo "从未登录过"
break
elif [ $loginBeforeToday -gt $loginBeforeNewYearsDayOfThisYear ];then
lastDateTime=$(last -i $username | head -n1 | awk '{for(i=4;i<(NF-2);i )printf"%s ",$i}')" $thisYear" #格式如: Sat Nov 2 20:33 2015
lastDateTime=$(date " %Y-%m-%d %H:%M:%S" -d "$lastDateTime")
echo "$lastDateTime"
break
else
thisYear=$((thisYear-1))
fi
done

$ function foo2(){ echo $0;}

}

dash: Syntax error: "(" unexpected

function getUserStatus(){
echo ""
echo ""
echo "############################ 用户检查 ############################"
#/etc/passwd 最后修改时间
pwdfile="$(cat /etc/passwd)"
Modify=$(stat /etc/passwd | grep Modify | tr '.' ' ' | awk '{print $2,$3}')

2.select var in list; do command; done

echo "/etc/passwd 最后修改时间:$Modify ($(getHowLongAgo $Modify))"
echo ""
echo "特权用户"
echo "--------"
RootUser=""
for user in $(echo "$pwdfile" | awk -F: '{print $1}');do
if [ $(id -u $user) -eq 0 ];then
echo "$user"
RootUser="$RootUser,$user"
fi
done
echo ""
echo "用户列表"
echo "--------"
USERs=0
echo "$(
echo "用户名 UID GID HOME SHELL 最后一次登录"
for shell in $(grep -v "/sbin/nologin" /etc/shells);do
for username in $(grep "$shell" /etc/passwd| awk -F: '{print $1}');do
userLastLogin="$(getUserLastLogin $username)"
echo "$pwdfile" | grep -w "$username" |grep -w "$shell"| awk -F: -v lastlogin="$(echo "$userLastLogin" | tr ' ' '_')" '{print $1,$3,$4,$6,$7,lastlogin}'
done
let USERs=USERs $(echo "$pwdfile" | grep "$shell"| wc -l)
done
)" | column -t
echo ""
echo "空密码用户"
echo "----------"
USEREmptyPassword=""
for shell in $(grep -v "/sbin/nologin" /etc/shells);do
for user in $(echo "$pwdfile" | grep "$shell" | cut -d: -f1);do
r=$(awk -F: '$2=="!!"{print $1}' /etc/shadow | grep -w $user)
if [ ! -z $r ];then
echo $r
USEREmptyPassword="$USEREmptyPassword,"$r
fi
done
done
echo ""
echo "相同ID的用户"
echo "------------"
USERTheSameUID=""
UIDs=$(cut -d: -f3 /etc/passwd | sort | uniq -c | awk '$1>1{print $2}')
for uid in $UIDs;do
echo -n "$uid";
USERTheSameUID="$uid"
r=$(awk -F: 'ORS="";$3=='"$uid"'{print ":",$1}' /etc/passwd)
echo "$r"
echo ""
USERTheSameUID="$USERTheSameUID $r,"
done
#报表信息
report_USERs="$USERs" #用户
report_USEREmptyPassword=$(echo $USEREmptyPassword | sed 's/^,//')
report_USERTheSameUID=$(echo $USERTheSameUID | sed 's/,$//')
report_RootUser=$(echo $RootUser | sed 's/^,//') #特权用户
}

 

function getPasswordStatus {
echo ""
echo ""
echo "############################ 密码检查 ############################"
pwdfile="$(cat /etc/passwd)"
echo ""
echo "密码过期检查"
echo "------------"
result=""
for shell in $(grep -v "/sbin/nologin" /etc/shells);do
for user in $(echo "$pwdfile" | grep "$shell" | cut -d: -f1);do
get_expiry_date=$(/usr/bin/chage -l $user | grep 'Password expires' | cut -d: -f2)
if [[ $get_expiry_date = ' never' || $get_expiry_date = 'never' ]];then
printf "%-15s 永不过期n" $user
result="$result,$user:never"
else
password_expiry_date=$(date -d "$get_expiry_date" " %s")
current_date=$(date " %s")
diff=$(($password_expiry_date-$current_date))
let DAYS=$(($diff/(60*60*24)))
printf "%-15s %s天后过期n" $user $DAYS
result="$result,$user:$DAYS days"
fi
done
done
report_PasswordExpiry=$(echo $result | sed 's/^,//')

bash:支持

echo ""
echo "密码策略检查"
echo "------------"
grep -v "#" /etc/login.defs | grep -E "PASS_MAX_DAYS|PASS_MIN_DAYS|PASS_MIN_LEN|PASS_WARN_AGE"

 

}

[email protected] ~ $ select input in A B

function getSudoersStatus(){
echo ""
echo ""
echo "############################ Sudoers检查 #########################"
conf=$(grep -v "^#" /etc/sudoers| grep -v "^Defaults" | sed '/^$/d')
echo "$conf"
echo ""
#报表信息
report_Sudoers="$(echo $conf | wc -l)"
}

> do

function getInstalledStatus(){
echo ""
echo ""
echo "############################ 软件检查 ############################"
rpm -qa --last | head | column -t
}

>   case $input in

function getProcessStatus(){
echo ""
echo ""
echo "############################ 进程检查 ############################"
if [ $(ps -ef | grep defunct | grep -v grep | wc -l) -ge 1 ];then
echo ""
echo "僵尸进程";
echo "--------"
ps -ef | head -n1
ps -ef | grep defunct | grep -v grep
fi
echo ""
echo "内存占用TOP10"
echo "-------------"
echo -e "PID %MEM RSS COMMAND
$(ps aux | awk '{print $2, $4, $6, $11}' | sort -k3rn | head -n 10 )"| column -t
echo ""
echo "CPU占用TOP10"
echo "------------"
top b -n1 | head -17 | tail -11
#报表信息
report_DefunctProsess="$(ps -ef | grep defunct | grep -v grep|wc -l)"
}

>     A)

function getJDKStatus(){
echo ""
echo ""
echo "############################ JDK检查 #############################"
java -version 2>/dev/null
if [ $? -eq 0 ];then
java -version 2>&1
fi
echo "JAVA_HOME="$JAVA_HOME""
#报表信息
report_JDK="$(java -version 2>&1 | grep version | awk '{print $1,$3}' | tr -d '"')"
}
function getSyslogStatus(){
echo ""
echo ""
echo "############################ syslog检查 ##########################"
echo "服务状态:$(getState rsyslog)"
echo ""
echo "/etc/rsyslog.conf"
echo "-----------------"
cat /etc/rsyslog.conf 2>/dev/null | grep -v "^#" | grep -v "^\$" | sed '/^$/d' | column -t
#报表信息
report_Syslog="$(getState rsyslog)"
}
function getFirewallStatus(){
echo ""
echo ""
echo "############################ 防火墙检查 ##########################"
#防火墙状态,策略等
if [[ $centosVersion < 7 ]];then
/etc/init.d/iptables status >/dev/null 2>&1
status=$?
if [ $status -eq 0 ];then
s="active"
elif [ $status -eq 3 ];then
s="inactive"
elif [ $status -eq 4 ];then
s="permission denied"
else
s="unknown"
fi
else
s="$(getState iptables)"
fi
echo "iptables: $s"
echo ""
echo "/etc/sysconfig/iptables"
echo "-----------------------"
cat /etc/sysconfig/iptables 2>/dev/null
#报表信息
report_Firewall="$s"
}

>        echo 'Input:A'

function getSNMPStatus(){
#SNMP服务状态,配置等
echo ""
echo ""
echo "############################ SNMP检查 ############################"
status="$(getState snmpd)"
echo "服务状态:$status"
echo ""
if [ -e /etc/snmp/snmpd.conf ];then
echo "/etc/snmp/snmpd.conf"
echo "--------------------"
cat /etc/snmp/snmpd.conf 2>/dev/null | grep -v "^#" | sed '/^$/d'
fi
#报表信息
report_SNMP="$(getState snmpd)"
}

>        break

function getState(){
if [[ $centosVersion < 7 ]];then
if [ -e "/etc/init.d/$1" ];then
if [ `/etc/init.d/$1 status 2>/dev/null | grep -E "is running|正在运行" | wc -l` -ge 1 ];then
r="active"
else
r="inactive"
fi
else
r="unknown"
fi
else
#CentOS 7
r="$(systemctl is-active $1 2>&1)"
fi
echo "$r"
}

>        ;;

function getSSHStatus(){
#SSHD服务状态,配置,受信任主机等
echo ""
echo ""
echo "############################ SSH检查 #############################"
#检查受信任主机
pwdfile="$(cat /etc/passwd)"
echo "服务状态:$(getState sshd)"
Protocol_Version=$(cat /etc/ssh/sshd_config | grep Protocol | awk '{print $2}')
echo "SSH协议版本:$Protocol_Version"
echo ""
echo "信任主机"
echo "--------"
authorized=0
for user in $(echo "$pwdfile" | grep /bin/bash | awk -F: '{print $1}');do
authorize_file=$(echo "$pwdfile" | grep -w $user | awk -F: '{printf $6"/.ssh/authorized_keys"}')
authorized_host=$(cat $authorize_file 2>/dev/null | awk '{print $3}' | tr 'n' ',' | sed 's/,$//')
if [ ! -z $authorized_host ];then
echo "$user 授权 "$authorized_host" 无密码访问"
fi
let authorized=authorized $(cat $authorize_file 2>/dev/null | awk '{print $3}'|wc -l)
done

>     B)

echo ""
echo "是否允许ROOT远程登录"
echo "--------------------"
config=$(cat /etc/ssh/sshd_config | grep PermitRootLogin)
firstChar=${config:0:1}
if [ $firstChar == "#" ];then
PermitRootLogin="yes" #默认是允许ROOT远程登录的
else
PermitRootLogin=$(echo $config | awk '{print $2}')
fi
echo "PermitRootLogin $PermitRootLogin"

>        echo 'Input:B'

echo ""
echo "/etc/ssh/sshd_config"
echo "--------------------"
cat /etc/ssh/sshd_config | grep -v "^#" | sed '/^$/d'

>        break

#报表信息
report_SSHAuthorized="$authorized" #SSH信任主机
report_SSHDProtocolVersion="$Protocol_Version" #SSH协议版本
report_SSHDPermitRootLogin="$PermitRootLogin" #允许root远程登录
}
function getNTPStatus(){
#NTP服务状态,当前时间,配置等
echo ""
echo ""
echo "############################ NTP检查 #############################"
if [ -e /etc/ntp.conf ];then
echo "服务状态:$(getState ntpd)"
echo ""
echo "/etc/ntp.conf"
echo "-------------"
cat /etc/ntp.conf 2>/dev/null | grep -v "^#" | sed '/^$/d'
fi
#报表信息
report_NTP="$(getState ntpd)"
}

>        ;;

function uploadHostDailyCheckReport(){
json="{
"DateTime":"$report_DateTime",
"Hostname":"$report_Hostname",
"OSRelease":"$report_OSRelease",
"Kernel":"$report_Kernel",
"Language":"$report_Language",
"LastReboot":"$report_LastReboot",
"Uptime":"$report_Uptime",
"CPUs":"$report_CPUs",
"CPUType":"$report_CPUType",
"Arch":"$report_Arch",
"MemTotal":"$report_MemTotal",
"MemFree":"$report_MemFree",
"MemUsedPercent":"$report_MemUsedPercent",
"DiskTotal":"$report_DiskTotal",
"DiskFree":"$report_DiskFree",
"DiskUsedPercent":"$report_DiskUsedPercent",
"InodeTotal":"$report_InodeTotal",
"InodeFree":"$report_InodeFree",
"InodeUsedPercent":"$report_InodeUsedPercent",
"IP":"$report_IP",
"MAC":"$report_MAC",
"Gateway":"$report_Gateway",
"DNS":"$report_DNS",
"Listen":"$report_Listen",
"Selinux":"$report_Selinux",
"Firewall":"$report_Firewall",
"USERs":"$report_USERs",
"USEREmptyPassword":"$report_USEREmptyPassword",
"USERTheSameUID":"$report_USERTheSameUID",
"PasswordExpiry":"$report_PasswordExpiry",
"RootUser":"$report_RootUser",
"Sudoers":"$report_Sudoers",
"SSHAuthorized":"$report_SSHAuthorized",
"SSHDProtocolVersion":"$report_SSHDProtocolVersion",
"SSHDPermitRootLogin":"$report_SSHDPermitRootLogin",
"DefunctProsess":"$report_DefunctProsess",
"SelfInitiatedService":"$report_SelfInitiatedService",
"SelfInitiatedProgram":"$report_SelfInitiatedProgram",
"RuningService":"$report_RuningService",
"Crontab":"$report_Crontab",
"Syslog":"$report_Syslog",
"SNMP":"$report_SNMP",
"NTP":"$report_NTP",
"JDK":"$report_JDK"
}"
#echo "$json"
curl -l -H "Content-type: application/json" -X POST -d "$json" "$uploadHostDailyCheckReportApi" 2>/dev/null
}

>   esac

function check(){
version
getSystemStatus
getCpuStatus
getMemStatus
getDiskStatus
getNetworkStatus
getListenStatus
getProcessStatus
getServiceStatus
getAutoStartStatus
getLoginStatus
getCronStatus
getUserStatus
getPasswordStatus
getSudoersStatus
getJDKStatus
getFirewallStatus
getSSHStatus
getSyslogStatus
getSNMPStatus
getNTPStatus
getInstalledStatus
}

> done

#执行检查并保存检查结果
check > $RESULTFILE

1) A

echo "检查结果:$RESULTFILE"

2) B

#? 1

Input:A

[email protected] ~ $ echo $0

/bin/bash

dash:不支持, 替代方法:采用while read case来实现

 

menu(){ echo -n "1)A;n2)Bn>";}

menu

while read input

do

    case $input in

      1)

         echo 'A'

         break

         ;;

      2)

         echo 'B'

         break

         ;;

      *)

         menu

         continue

         ;;

    esac

done

  1. echo {0..10}

 

bash:支持{n..m}展开

 

[email protected] ~ $ echo $0

/bin/bash

[email protected] ~ $ echo {0..10}

0 1 2 3 4 5 6 7 8 9 10

dash:不支持,替代方法, 采用seq外部命令

 

$ echo $0

dash

$ echo {0..10}

{0..10}

$ echo `seq 0 10`

0 1 2 3 4 5 6 7 8 9 10

  1. here string

 

bash:支持here string

 

[email protected] ~ $ cat <<<"string"

string

[email protected] ~ $ echo $0

/bin/bash

dash:不支持, 替代方法:可采用here documents

 

$ echo $0

dash

$ cat <<<"string"

dash: Syntax error: redirection unexpected

$ cat <<EOF

> string

> EOF

string

  1. >&word重定向标准输出和标准错误

 

bash: 当word为非数字时,>&word变成重定向标准错误和标准输出到文件word, 常见用法>&/dev/null

 

[email protected] ~/test $ ls

a

[email protected] ~/test $ ls a b

ls: cannot access b: No such file or directory

a

[email protected] ~/test $ ls a b >&/dev/null

[email protected] ~/test $ ls a b >/dev/null 2>&1

[email protected] ~/test $ echo $0

/bin/bash

dash: >&word, word不支持非数字, 替代方法: >word 2>&1; 常见用法 >/dev/null 2>&1

 

$ echo $0

dash

$ ls a

a

$ ls a b

ls: cannot access b: No such file or directory

a

$ ls a b >&/dev/null

dash: Syntax error: Bad fd number

$ ls a b >/dev/null 2>&1

$

  1. 数组

 

bash: 支持数组, bash4支持关联数组

 

[email protected] ~/test $ echo $0

/bin/bash

[email protected] ~/test $ array=( a b c )

[email protected] ~/test $ echo ${array[2]}

c

dash: 不支持数组,替代方法, 采用变量名 序号来实现类似的效果

 

$ for i in a b c

> do

> id=$((${id:=-1} 1))

> eval array_$id=$i

> done

$ echo ${array_1}

b

$ echo $0

dash

很蛋疼的方法,非不得以不建议这么用

 

  1. 子字符串扩展

 

bash: 支持${parameter:offset:length},${parameter:offset}

 

[email protected] ~/test $ string='hello'

[email protected] ~/test $ echo ${string:1:3}

ell

[email protected] ~/test $ echo ${string:1}

ello

[email protected] ~/test $ echo $0

/bin/bash

dash: 不支持, 替代方法:采用expr或cut外部命令代替

 

$ string='hello'

$ expr substr "$string" 2 3

ell

$ echo "$string" | cut -c2-4

ell

$ expr substr "$string" 2 "${#string}"

ello

$ echo "$string" | cut -c2-

ello

$ echo $0

dash

$

  1. 大小写转换

 

bash: 支持${parameter^pattern},${parameter^^pattern},${parameter,pattern},${parameter,,pattern}

 

[email protected] ~/test $ string="abcABC"

[email protected] ~/test $ echo ${string^^}

ABCABC

[email protected] ~/test $ echo ${string,,}

abcabc

[email protected] ~/test $ echo ${string^^b}

aBcABC

[email protected] ~/test $ echo $0

/bin/bash

dash: 不支持,替代方法:采用tr/sed/awk等外部命令转换

 

$ string='abcABC'

$ echo "$string" | tr '[a-z]' '[A-Z]'

ABCABC

$ echo "$string" | tr '[A-Z]' '[a-z]'

abcabc

$ echo "$string" | sed 's/b/U&/g'

aBcABC

$

  1. 进程替换<(command), >(command)

 

bash: 支持进程替换

 

[email protected] ~ $ diff <(seq 3) <(seq 4)

3a4

> 4

[email protected] ~ $ echo $0

/bin/bash

dash: 不支持, 替代方法, 通过临时文件中转

 

$ diff <(seq 3) <(seq 4)

dash: Syntax error: "(" unexpected

$ seq 3 >tmp1

$ seq 4 >tmp2

$ diff tmp1 tmp2

3a4

> 4

$ echo $0

dash

$

  1. [ string1 = string2 ] 和 [ string1 == string2 ]

 

bash: 支持两者

 

[email protected] ~ $ [ 'a' = 'a' ] && echo 'equal'

equal

[email protected] ~ $ [ 'a' == 'a' ] && echo 'equal'

equal

[email protected] ~ $ echo $0

/bin/bash

dash: 只支持=

 

$ [ 'a' = 'a' ] && echo 'equal'

equal

$ [ 'a' == 'a' ] && echo 'equal'

[: 2: a: unexpected operator

$ echo $0

dash

$

  1. [[ 加强版test

 

bash: 支持[[ ]], 可实现正则匹配等强大功能

 

[email protected] ~ $ [[ 'xyz123' =~ xyz[0-9] ]] && echo 'equal'

equal

[email protected] ~ $ echo $0

/bin/bash

dash: 不支持[[ ]], 替代方法,采用外部命令

 

$ [[ 'xyz123' =~ xyz[0-9] ]] && echo 'equal'

dash: [[: not found

$ echo 'xyz123' | grep -q 'xyz[0-9] ' && echo 'equal'

equal

$ echo $0

dash

$

  1. for (( expr1 ; expr2 ; expr3 )) ; do list ; done

 

bash: 支持C语言格式的for循环

 

[email protected] ~ $ for((i=0;i<=3;i ));do echo "$i";done

 

[email protected] ~ $ echo $0

/bin/bash

dash: 不支持该格式的for, 替代方法,用while $((expression))实现

 

$ i=0

$ while [ "$i" -le 3 ]

> do

> echo "$i"

> i=$((i 1))

> done

0

1

2

3

$ echo $0

dash

$

  1. let命令和((expression))

 

bash: 有内置命令let, 也支持((expression))方式

 

[email protected] ~ $ i=0

[email protected] ~ $ let i

[email protected] ~ $ echo $i

1

[email protected] ~ $ ((i ))

[email protected] ~ $ echo $i

2

[email protected] ~ $ echo $0

/bin/bash

dash: 不支持,替代方法,采用$((expression))或者外部命令做计算

 

$ i=0

$ i=$((i 1))

$ echo $i

1

$ echo $0

dash

$

  1. $((expression))

 

bash: 支持id ,id--, id,--id这样到表达式

 

[email protected] ~ $ i=0

[email protected] ~ $ echo $((i ))

0

[email protected] ~ $ echo $i

1

[email protected] ~ $ echo $(( i))

2

[email protected] ~ $ echo $i

2

[email protected] ~ $ echo $0

/bin/bash

dash: 不支持 ,--, 替代方法:id =1,id-=1, id=id 1,id=id-1

 

$ i=0

$ echo $((i ))

dash: arithmetic expression: expecting primary: "i "

$ echo $i;i=$((i 1))

0

$ echo $i

1

$ echo $((i =1))

2

$ echo $i

2

$ echo $0

dash

$

如今Debian和Ubuntu中,/bin/sh默认已经指向dash,这是一个不同于bash的shell,它主要是为了执行脚本而出现,而不是交互,...

本文由9159.com发布于操作系统,转载请注明出处:function在bash中为关键字9159金沙官网

关键词: 9159.com 9159金沙官网

上一篇:文件中设置,文件中设置
下一篇:没有了