自动化运维

1. 自动禁止恶意IP访问

#!/bin/bash
# 从访问记录log里获取恶意ip访问信息

SEC_FILE=/var/log/secure
# 筛选恶意访问(密码错误多次[>=4次])多次的ip
IP_ADDR=`tail -n 1000 $SEC_FILE | grep "Failed password" | egrep -o "([0-9]{1,3}\.){3}[0-9]{1,3}" | sort -nr | uniq -c | awk ' $1>=4 {print $2}'`
IPTABLE_CONF=/etc/sysconfig/iptables
echo 
cat <<EOF
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
---------------------welcome to use ssh login drop failed ip------------------
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
EOF
for i in `echo $IP_ADDR`
do
	# 抓取防火墙中对应的ip信息
	cat $IPTABLE_CONF | grep $i >/dev/null
	
	# 判断是否已经存在对应ip的拒绝信息, 如存在, 就不添加相应信息
	if [ $? -ne 0];then
		sed -i "/lo/a -A INPUT -s $i -m state --state NEW -m tcp -p tcp --dropt 22 -j DROP" $IPTABLE_CONF
	else 
		echo "This $i is exists in the iptables."
	fi
done

/etc/init.d/iptables restart

2.网络自动化部署以及管理

#!/bin/bash
# Auto change Server Files


# 缺少ip.txt
if [ ! -f ip.txt ];then
	echo "Please Create ip.txt Files, the ip.txt contents models are as follows: "
	cat <<EOF
	192.168.149.128
	192.168.149.129
	EOF
	exit
fi
# 缺少参数
if [ -z "$1" ];then
	echo "Usage: $0 command, example{Src_Files|Src_Dir Des_dir}. "
	exit
fi
# 抓去ip.txt的行数
count='cat ip.txt | wc -l'
rm -rf ip.txt.swp
i=0
while ((i< $count))
do
	i=`expr $i + 1`
	# 抓去ip.txt的第$i行的ip并赋予至ip.txt.swp
	sed "${i}s/^/&${i} /g" ip.txt >>ip.txt.swp
	# 获取需要同步的ip
	IP=`awk -v I="$i" '{if(I==$1)print $2}' ip.txt.swp`
	# 同步语句	
	scp -r $1 root@${IP}:$2
	
done

3.批量远程服务器执行命令

#!/bin/bash

if [ ! -f ip.txt ];then
	echo "Please Create ip.txt Files, the ip.txt contents models are as follows: "
	cat <<EOF
	192.168.149.128
	192.168.149.129
	EOF
	exit
fi

if [ -z "$*" ];then
	echo "Usage: $0 command, example {rm /tmp/test.txt | mkdir /tmp/20140228}"
	exit
fi

count='cat ip.txt | wc -l'
rm -rf ip.txt.swp
i=0
while ((i< $count))
do
	i=`expr $i + 1`
	# 抓去ip.txt的第$i行的ip并赋予至ip.txt.swp
	sed "${i}s/^/&${i} /g" ip.txt >>ip.txt.swp
	# 获取需要同步的ip
	IP=`awk -v I="$i" '{if(I==$1)print $2}' ip.txt.swp`
	# 命令语句, 并输出操作返回结果
	ssh -q -l root $IP "$*";echo "The $IP Execution Command: $* succeed";sleep 2"	
done

4.Rsync+SSH批量自动化部署

#!/bin/bash

# 刷新函数
flush(){
	if [ ! -f rsync.list ];then
		echo "Please Create rsync.list Files, the rsync.list contents should be look like as follow:"
		cat <<EOF
		192.168.149.128 src_dir des_dir
		192.168.149.127 src_dir des_dir
		EOF
		exit
	fi
	
	rm -rf rsync.list.swp ; cat rsync.list | grep -v "#" >rsync.list.swp
	COUNT=`cat rsync.list.swp | wc -l`
	i=0
	while ((${i} < $COUNT))
	do
		i = `expr $i + 1`
		Line=`sed -n "${i}p" rsync.list.swp`
		IP=`echo $Line | awk '{print $1}'`
		SRC=`echo $Line | awk '{print $2}'`
		DES=`echo $Line | awk '{print $3}'`
		rsync -ap --delete ${SRC}/ root@${IP}:${DES}/
	done
}

# 重启
restart(){
	if [ ! -f restart.list ];then
		echo "Please Create restart.list Files, the rsync.list contents should be look like as follow:"
		cat <<EOF
		192.168.149.128 Command
		192.168.149.127 Command
		EOF
		exit
	fi
	rm -rf restart.list.swp ; cat restart.list | grep -v "#" >>restart.list.swp
	COUNT=`cat restart.list.swp | wc -l`
	i=0
	while ((${i} < $COUNT))
	do
		i = `expr $i + 1`
		Line=`sed -n "${i}p" restart.list.swp`
		IP=`echo $Line | awk '{print $1}'`
		Command=`echo $Line | awk '{print $2}'`
		ssh -l root $IP "sh $Command;echo 'The $IP Exec Command and : sh $Command success'"
	done	
}

case $i in 
	flush )
	flush
	;;
	restart )
	restart
	;;
	*)
	echo "Usage: $0 command, example{flush|restart}"

4.增量备份脚本

• 完整备份

  完整的将文件全部备份

  tar -g /tmp/snapshot -czvf /tmp/2014_full_system_data.tar.gz /data/sh/

• 增量备份

  将新增的文件进行备份

  tar -g /tmp/snapshot -czvf /tmp/2014_add01_system_data.tar.gz /data/sh/

一般是周日进行完整备份，每天进行一次增量备份

定时备份：

确定今天是周几: date +%u

#!/bin/bash

# 所有文件
SOURCE_DIR=(
	$*
)

TARGET_DIR=/data/backup/

YEAR=`date +%Y`
MONTH=`date +%m`
DAY=`date +%d`
WEEK=`date +%u`
A_NAME=`date +%H%M`
FILES=${A_NAME}_system_backup.tgz
CODE=$?

if [ -z "$*" ];then
	echo "Please Enter Your Backup Files or Directories"
	echo "Usage: { $0 /boot /etc }"
	exit
fi

if [ ! -d $TARGET_DIR/$YEAR/$MONTH/$DAY ];then
	mkdir -p $TARGET_DIR/$YEAR/$MONTH/$DAY
	echo "The $TARGET_DIR Created success"
fi
Full_Backup(){
	if [ "$WEEK" -eq "7" ];then
		rm -rf $TARGET_DIR/snapshot
		cd $TARGET_DIR/$YEAR/$MONTH/$DAY ;tar -g $TARGET_DIR/snapshot -czvf $FILES ${SOURCE_DIR[@]}
		[ "$CODE" == "0" ]&&echo "These Full_backup System Files $TARGET_DIR/$YEAR/$MONTH/$DAY/$FILES Backup Success"
	fi
}
Add_Backup(){
	if [ "$WEEK" -ne "7" ];then
		cd $TARGET_DIR/$YEAR/$MONTH/$DAY ;tar -g $TARGET_DIR/snapshot -czvf $FILES ${SOURCE_DIR[@]}
		[ "$CODE" == "0" ]&&echo "These Add_backup System Files $TARGET_DIR/$YEAR/$MONTH/$DAY/$FILES Backup Success"
	fi
}
sleep 3
Full_Backup;Add_Backup