代码改变世界

nebula接管esxi的配置脚本

2013-10-22 17:10  陈尚华  阅读(357)  评论(0编辑  收藏  举报

起因:

esxi重启后nebula对esxi的配置信息需要重新配置,为了便捷管理采用如下方法:

修改esxi的/etc/rc.local文件,添加如下内容:

mkdir -p /etc/ssh/keys-oneadmin

echo "ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA7cdy9Oq3ym9GsvdaIfufc43wwQq/cMItYB+V3JTz8KilMtjzunAahuUA9FQY9TnvAr3OYJEboLxEkTwdi8nA+EhCHqTxjv4XPlphMC8mI0c0lYIuEktYUjU+0YVz4Zs2M9b1A85JkfzugqhtHPiZHg3LaE9u0Za0BUcvoLw3uD77WAWjKnLlfbo+4CP7KwpLnb9vlguou7jnoTOriN8EMbj4NfgWsuTadDA39iBs6DAXDA3uaG4aT0a5U7cQjoGvyOelm4JFqbJpdFRPY3ASl1hp/3d5M6T6IG8CPviMRI6FtI2pj5solF0VJR+h1eWueGEGwd49w9PdpinBDYjTQQ== oneadmin@opennebula"  > /etc/ssh/keys-oneadmin/authorized_keys

chown -R oneadmin:cloud /etc/ssh/keys-oneadmin

cp /etc/vmware/firewall/service.xml /

sed '684i </service>' -i /service.xml 

sed '684i <required>false</required>' -i /service.xml

sed '684i <enabled>true</enabled>' -i /service.xml

sed '684i </rule>' -i /service.xml

sed '684i </port>' -i /service.xml

sed '684i <end>5999</end>' -i /service.xml

sed '684i <begin>5800</begin>' -i /service.xml

sed '684i <port>' -i /service.xml

sed '684i <porttype>dst</porttype>' -i /service.xml

sed '684i <protocol>tcp</protocol>' -i /service.xml

sed '684i <direction>inbound</direction>' -i /service.xml

sed "684i <rule id='0001'>" -i /service.xml

sed '684i </rule>' -i /service.xml

sed '684i </port>' -i /service.xml

sed '684i <end>5999</end>' -i /service.xml

sed '684i <begin>5800</begin>' -i /service.xml

sed '684i <port>' -i /service.xml

sed '684i <porttype>dst</porttype>' -i /service.xml

sed '684i <protocol>tcp</protocol>' -i /service.xml

sed '684i <direction>outbound</direction>' -i /service.xml

sed '684i <rule id='0000'>' -i /service.xml

sed '684i <id>VNC</id>' -i /service.xml

sed '684i <service id="0033">' -i /service.xml

sed '684i <!-- VNC -->' -i /service.xml

cp /service.xml /etc/vmware/firewall/service.xml

esxcli network firewall refresh

公钥部分根据实际情况填写。