脚本实现功能：批量或单个SSH免交互登录认证

脚本应用场景：当部署集群时，大多数实现要配置好管理节点与从节点的SSH免交互登录，针对这样的情况，写了下面脚本，简化工作。

脚本支持系统：Ubuntu和CentOS

#!/bin/bash
# Description: configuration local host and remote host ssh keypair authentication, Support Ubuntu and CentOS operation system.
# Blog: http://lizhenliang.blog.51cto.comfunction color_echo() {if [ $1 == "green" ]; thenecho -e "\033[32;40m$2\033[0m"elif [ $1 == "red" ]; thenecho -e "\033[31;40m$2\033[0m"fi
}
function os_version() {local OS_V=$(cat /etc/issue |awk 'NR==1{print $1}')if [ $OS_V == "\S" -o $OS_V == "CentOS" ]; thenecho "CentOS"elif [ $OS_V == "Ubuntu" ]; thenecho "Ubuntu"fi
}
function check_ssh_auth() {if $(grep "Permission denied" $EXP_TMP_FILE >/dev/null); thencolor_echo red "Host $IP SSH authentication failure! Login password error."exit 1elif $(ssh $INFO 'echo yes >/dev/null'); thencolor_echo green "Host $IP SSH authentication successfully."firm $EXP_TMP_FILE >/dev/null
}
function check_pkg() {local PKG_NAME=$1if [ $(os_version) == "CentOS" ]; thenif ! $(rpm -ql $PKG_NAME >/dev/null 2>&1); thenecho noelseecho yesfielif [ $(os_version) == "Ubuntu" ]; thenif ! $(dpkg -l $PKG_NAME >/dev/null 2>&1); thenecho noelseecho yesfifi
}
function install_pkg() {local PKG_NAME=$1if [ $(os_version) == "CentOS" ]; thenif [ $(check_pkg $PKG_NAME) == "no" ]; thenyum install $PKG_NAME -yif [ $(check_pkg $PKG_NAME) == "no" ]; thencolor_echo green "The $PKG_NAME installation failure! Try to install again."yum makecacheyum install $PKG_NAME -y[ $(check_pkg $PKG_NAME) == "no" ] && color_echo red "The $PKG_NAME installation failure!" && exit 1fifielif [ $(os_version) == "Ubuntu" ]; thenif [ $(check_pkg $PKG_NAME) == "no" ]; thenapt-get install $PKG_NAME -yif [ $(check_pkg $PKG_NAME) == "no" ]; thencolor_echo green "$PKG_NAME installation failure! Try to install again."apt-get autoremove && apt-get updateapt-get install $PKG_NAME --force-yes -y[ $(check_pkg $PKG_NAME) == "no" ] && color_echo red "The $PKG_NAME installation failure!" && exit 1fififi
}
function generate_keypair() {if [ ! -e ~/.ssh/id_rsa.pub ]; thencolor_echo green "The public/private rsa key pair not exist, start Generating..."expect -c "spawn ssh-keygenexpect {\"ssh/id_rsa):\" {send \"\r\";exp_continue}\"passphrase):\" {send \"\r\";exp_continue}\"again:\" {send \"\r\";exp_continue}}" >/dev/null 2>&1if [ -e ~/.ssh/id_rsa.pub ]; thencolor_echo green "Generating public/private rsa key pair successfully."elsecolor_echo red "Generating public/private rsa key pair failure!"exit 1fifi
}EXP_TMP_FILE=/tmp/expect_ssh.tmpif [[ $1 =~ ^[a-z]+@[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}@.* ]]; theninstall_pkg expect ; generate_keypairfor i in $@; doUSER=$(echo $i|cut -d@ -f1)IP=$(echo $i|cut -d@ -f2)PASS=$(echo $i|cut -d@ -f3)INFO=$USER@$IPexpect -c "spawn ssh-copy-id $INFOexpect {\"(yes/no)?\" {send \"yes\r\";exp_continue}\"password:\" {send \"$PASS\r\";exp_continue}}" > $EXP_TMP_FILE  # if login failed, login error info append temp filecheck_ssh_authdone
elif [[ $1 =~ ^[a-z]+@[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}-[0-9]{1,3}@.* ]]; theninstall_pkg expect ; generate_keypairSTART_IP_NUM=$(echo $1|sed -r 's/.*\.(.*)-(.*)@.*/\1/')END_IP_NUM=$(echo $1|sed -r 's/.*\.(.*)-(.*)@.*/\2/')for ((i=$START_IP_NUM;i<=$END_IP_NUM;i++)); doUSER=$(echo $1|cut -d@ -f1)PASS=$(echo $1|cut -d@ -f3)IP_RANGE=$(echo $1|sed -r 's/.*@(.*\.).*/\1/')IP=$IP_RANGE$iINFO=$USER@$IP_RANGE$iexpect -c "spawn ssh-copy-id $INFOexpect {\"(yes/no)?\" {send \"yes\r\";exp_continue}\"password:\" {send \"$PASS\r\";exp_continue}}" > $EXP_TMP_FILEcheck_ssh_authdone
elseecho "Example1: $0 <root@192.168.1.10-15@password>"echo "Example2: $0 <root@192.168.1.10@password>"echo "Example3: $0 [root@192.168.1.10@password root@192.168.1.11@password root@192.168.1.12@password ...]"
fi