【Linux】自动化部署可信任登录

Linux信任登录，免密码登录的脚本：

需要安装expect，可以yum也可以编译安装，编译后注意脚本中的expect路径。

rsa.exp

#!/usr/bin/expect
##################################################
#                                                #
# Author:                               #
# Date: 2011-06-20                               #
# Descrition: SSH auto create rsa key at local   #
#                                                #
##################################################

# Get parameter
set dbip [lindex $argv 0]
set pass [lindex $argv 1]


# create local rsa key
spawn ssh-keygen -t rsa;
expect "*(/root/.ssh/id_rsa):";
send "\r";
expect "*(empty for no passphrase):";
send "\r";
expect "*Enter same passphrase again:";
send "\r";
expect eof

 pubKey.exp

#!/usr/bin/expect
##################################################
#                                                #
# Author:                    #
# Date: 2011-07-29                               #
# Descrition: SSH auto add accredit to server    #
#                                                #
##################################################

# Get parameter
set dbip [lindex $argv 0]
set pass [lindex $argv 1]
set timeout 30

# create .ssh dir
spawn ssh root@$dbip
expect {
"yes/no" { send "yes\r"; exp_continue}
"password:" {
  send "$pass\r";
  expect {
    "Last login" {
       send "mkdir -p /root/.ssh \r";
       send "chmod 700 /root/.ssh \r"
     }
  }
}
"Last login" { exit }
}
expect ""


# scp rsa key to remote server
spawn scp /root/.ssh/id_rsa.pub root@$dbip:/root/.ssh/id_rsa.pub.tmp;
expect "*password:";
send "$pass\r";
expect eof


spawn ssh root@$dbip cat /root/.ssh/id_rsa.pub.tmp >> /root/.ssh/authorized_keys
expect "*password:";
send "$pass\r";
expect eof

spawn ssh root@$dbip rm -f /root/.ssh/id_rsa.pub.tmp

 

在登录时系统提示信息，例如提示：

Address 10.1.1.1 maps to localhost, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!

可以通过修改sshd配置取消输出，以免影响自动化部署脚本允许：

[root@zabbix ~]# sed -i 's/GSSAPIAuthentication yes/GSSAPIAuthentication no/g' /etc/ssh/sshd_config ; service sshd restart