共计 18387 个字符，预计需要花费 46 分钟才能阅读完成。
#!/bin/bash
#!/bin/bash
#参数定义
date=`date +"%Y-%m-%d-%H:%M:%S"`
centosVersion=$(awk '{print $(NF-1)}' /etc/redhat-release)
VERSION=`date +%F`
#日志相干
LOGPATH="/tmp/awr"
[-e $LOGPATH] || mkdir -p $LOGPATH
RESULTFILE="$LOGPATH/HostCheck-`hostname`-`date +%Y%m%d`.txt"
#调用函数库
[-f /etc/init.d/functions] && source /etc/init.d/functions
export PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin:/root/bin
source /etc/profile
#root 用户执行脚本
[$(id -u) -gt 0 ] && echo "请用 root 用户执行此脚本！" && exit 1
function version(){
echo ""echo""
echo "[${date}] >>> `hostname -s` 主机巡检"
}
function getSystemStatus(){
echo ""echo -e"\033[33m**************************************************** 零碎查看 ****************************************************\033[0m"
if [-e /etc/sysconfig/i18n];then
default_LANG="$(grep"LANG="/etc/sysconfig/i18n | grep -v"^#"| awk -F'"' '{print $2}')"
else
default_LANG=$LANG
fi
export LANG="en_US.UTF-8"
Release=$(cat /etc/redhat-release 2>/dev/null)
Kernel=$(uname -r)
OS=$(uname -o)
Hostname=$(uname -n)
SELinux=$(/usr/sbin/sestatus | grep "SELinux status:" | awk '{print $3}')
LastReboot=$(who -b | awk '{print $3,$4}')
uptime=$(uptime | sed 's/.*up \([^,]*\), .*/\1/')
echo "零碎：$OS"
echo "发行版本：$Release"
echo "内核：$Kernel"
echo "主机名：$Hostname"
echo "SELinux：$SELinux"
echo "语言 / 编码：$default_LANG"
echo "以后工夫：$(date +'%F %T')"
echo "最初启动：$LastReboot"
echo "运行工夫：$uptime"
export LANG="$default_LANG"
}
function getCpuStatus(){echo ""echo -e"\033[33m****************************************************CPU 查看 *****************************************************\033[0m"Physical_CPUs=$(grep"physical id" /proc/cpuinfo| sort | uniq | wc -l)
Virt_CPUs=$(grep "processor" /proc/cpuinfo | wc -l)
CPU_Kernels=$(grep "cores" /proc/cpuinfo|uniq| awk -F ':' '{print $2}')
CPU_Type=$(grep "model name" /proc/cpuinfo | awk -F ':' '{print $2}' | sort | uniq)
CPU_Arch=$(uname -m)
echo "物理 CPU 个数:$Physical_CPUs"
echo "逻辑 CPU 个数:$Virt_CPUs"
echo "每 CPU 外围数:$CPU_Kernels"
echo "CPU 型号:$CPU_Type"
echo "CPU 架构:$CPU_Arch"
}
function getMemStatus(){
echo ""echo -e"\033[33m************************************************** 内存查看 *****************************************************\033[0m"
if [[$centosVersion < 7]];then
free -mo
else
free -h
fi
#报表信息
MemTotal=$(grep MemTotal /proc/meminfo| awk '{print $2}') #KB
MemFree=$(grep MemFree /proc/meminfo| awk '{print $2}') #KB
let MemUsed=MemTotal-MemFree
MemPercent=$(awk "BEGIN {if($MemTotal==0){printf 100}else{printf \"%.2f\",$MemUsed*100/$MemTotal}}")
}
function getDiskStatus(){
echo ""echo -e"\033[33m************************************************** 磁盘查看 ******************************************************\033[0m"df -hiP | sed's/Mounted on/Mounted/'> /tmp/inode
df -hTP | sed 's/Mounted on/Mounted/'> /tmp/disk
join /tmp/disk /tmp/inode | awk '{print $1,$2,"|",$3,$4,$5,$6,"|",$8,$9,$10,$11,"|",$12}'| column -t
#报表信息
diskdata=$(df -TP | sed '1d' | awk '$2!="tmpfs"{print}') #KB
disktotal=$(echo "$diskdata" | awk '{total+=$3}END{print total}') #KB
diskused=$(echo "$diskdata" | awk '{total+=$4}END{print total}') #KB
diskfree=$((disktotal-diskused)) #KB
diskusedpercent=$(echo $disktotal $diskused | awk '{if($1==0){printf 100}else{printf"%.2f",$2*100/$1}}')
inodedata=$(df -iTP | sed '1d' | awk '$2!="tmpfs"{print}')
inodetotal=$(echo "$inodedata" | awk '{total+=$3}END{print total}')
inodeused=$(echo "$inodedata" | awk '{total+=$4}END{print total}')
inodefree=$((inodetotal-inodeused))
inodeusedpercent=$(echo $inodetotal $inodeused | awk '{if($1==0){printf 100}else{printf"%.2f",$2*100/$1}}')
}
function get_resource(){
echo ""echo -e"\033[33m************************************************** 资源耗费统计 **************************************************\033[0m"echo -e"\033[36m************* 带宽资源耗费统计 *************\033[0m"
#用数组寄存网卡名
nic=(`ifconfig | grep ^[a-z] | grep -vE 'lo|docker0'| awk -F: '{print $1}'`)
time=`date "+%Y-%m-%d %k:%M"`
num=0
for ((i=0;i<${#nic[@]};i++))
do
#循环五次，防止看到的是偶尔的数据
while (($num<5))
do
rx_before=$(cat /proc/net/dev | grep '${nic[$i]}' | tr : "" | awk'{print $2}')
tx_before=$(cat /proc/net/dev | grep '${nic[$i]}' | tr : "" | awk'{print $10}')
sleep 2
#用 sed 先获取第 7 列, 再用 awk 获取第 2 列，再 cut 切割, 从第 7 个到最初，即只切割网卡流量数字局部
rx_after=$(cat /proc/net/dev | grep '${nic[$i]}' | tr : "" | awk'{print $2}')
tx_after=$(cat /proc/net/dev | grep '${nic[$i]}' | tr : "" | awk'{print $10}')
#留神上面截取的相差 2 秒的两个时刻的累计和发送的 bytes(即累计传送和接管的位)
rx_result=$[(rx_after-rx_before)/1024/1024/2*8]
tx_result=$[(tx_after-tx_before)/1024/1024/2*8]
echo "$time Now_In_Speed: $rx_result Mbps Now_OUt_Speed: $tx_result Mbps" >> /tmp/network.txt
let "num++"
done
#留神上面 grep 前面的 $time 变量要用双引号括起来
rx_result=$(cat /tmp/network.txt|grep "$time"|awk '{In+=$4}END{print In}')
tx_result=$(cat /tmp/network.txt|grep "$time"|awk '{Out+=$7}END{print Out}')
In_Speed=$(echo "scale=2;$rx_result/5"|bc)
Out_Speed=$(echo "scale=2;$tx_result/5"|bc)
echo -e "\033[32m In_Speed_average: $In_Speed Mbps Out_Speed_average: $Out_Speed Mbps! \033[0m"
done
echo -e "\033[36m*************CPU 资源耗费统计 *************\033[0m"
#应用 vmstat 1 5 命令统计 5 秒内的应用状况，再计算每秒应用状况
total=`vmstat 1 5|awk '{x+=$13;y+=$14}END{print x+y}'`
cpu_average=$(echo "scale=2;$total/5"|bc)
#判断 CPU 使用率（浮点数与整数比拟）if [`echo "${cpu_average} > 70" | bc` -eq 1 ];then
echo -e "\033[31m Total CPU is already use: ${cpu_average}%, 请及时处理！\033[0m"
else
echo -e "\033[32m Total CPU is already use: ${cpu_average}%! \033[0m"
fi
echo -e "\033[36m************* 磁盘资源耗费统计 *************\033[0m"
#磁盘应用状况 (留神：须要用 sed 先进行格式化能力进行累加解决)
disk_used=$(df -m | sed '1d;/ /!N;s/\n//;s/ \+/ /;' | awk '{used+=$3} END{print used}')
disk_totalSpace=$(df -m | sed '1d;/ /!N;s/\n//;s/ \+/ /;' | awk '{totalSpace+=$2} END{print totalSpace}')
disk_all=$(echo "scale=4;$disk_used/$disk_totalSpace" | bc)
disk_percent1=$(echo $disk_all | cut -c 2-3)
disk_percent2=$(echo $disk_all | cut -c 4-5)
disk_warning=`df -m | sed '1d;/ /!N;s/\n//;s/ \+/ /;' | awk '{if ($5>85) print $6" 目录使用率："$5;}'`
echo -e "\033[32m Total disk has used: $disk_percent1.$disk_percent2% \033[0m"
#echo -e "\t\t.." 示意换行
if [-n "$disk_warning"];then
echo -e "\033[31m${disk_warning} \n [Error] 以上目录使用率超过 85%，请及时处理！\033[0m"
fi
echo -e "\033[36m************* 内存资源耗费统计 *************\033[0m"
#取得零碎总内存
memery_all=$(free -m | awk 'NR==2' | awk '{print $2}')
#取得占用内存（操作系统 角度）system_memery_used=$(free -m | awk 'NR==2' | awk '{print $3}')
#取得 buffer、cache 占用内存，当内存不够时会及时回收，所以这两局部可用于可用内存的计算
buffer_used=$(free -m | awk 'NR==2' | awk '{print $6}')
cache_used=$(free -m | awk 'NR==2' | awk '{print $7}')
#取得被应用内存，所以这部分可用于可用内存的计算，留神计算方法
actual_used_all=$[memery_all-(free+buffer_used+cache_used)]
#取得理论占用的内存
actual_used_all=`expr $memery_all - $free + $buffer_used + $cache_used `
memery_percent=$(echo "scale=4;$system_memery_used / $memery_all" | bc)
memery_percent2=$(echo "scale=4; $actual_used_all / $memery_all" | bc)
percent_part1=$(echo $memery_percent | cut -c 2-3)
percent_part2=$(echo $memery_percent | cut -c 4-5)
percent_part11=$(echo $memery_percent2 | cut -c 2-3)
percent_part22=$(echo $memery_percent2 | cut -c 4-5)
#取得占用内存（操作系统角度）echo -e "\033[32m system memery is already use: $percent_part1.$percent_part2% \033[0m"
#取得理论内存占用率
echo -e "\033[32m actual memery is already use: $percent_part11.$percent_part22% \033[0m"
echo -e "\033[32m buffer is already used : $buffer_used M \033[0m"
echo -e "\033[32m cache is already used : $cache_used M \033[0m"}
function getServiceStatus(){
echo ""echo -e"\033[33m************************************************* 服务查看 *******************************************************\033[0m"echo""
if [[$centosVersion > 7]];then
conf=$(systemctl list-unit-files --type=service --state=enabled --no-pager | grep "enabled")
process=$(systemctl list-units --type=service --state=running --no-pager | grep ".service")
else
conf=$(/sbin/chkconfig | grep -E ":on|: 启用")
process=$(/sbin/service --status-all 2>/dev/null | grep -E "is running| 正在运行")
fi
echo -e "\033[36m****************** 服务配置 ******************\033[0m"
echo "$conf" | column -t
echo ""echo -e"\033[36m************** 正在运行的服务 ****************\033[0m"echo"$process"}
function getAutoStartStatus(){echo ""echo -e"\033[33m*********************************************** 自启动查看 *******************************************************\033[0m"echo -e"\033[36m**************** 自启动命令 *****************\033[0m"conf=$(grep -v"^#"/etc/rc.d/rc.local| sed'/^$/d')
echo "$conf"
}
function getLoginStatus(){
echo ""echo -e"\033[33m************************************************ 登录查看 ********************************************************\033[0m"
last | head
}
function getNetworkStatus(){
echo ""echo -e"\033[33m************************************************ 网络查看 ********************************************************\033[0m"
if [[$centosVersion < 7]];then
/sbin/ifconfig -a | grep -v packets | grep -v collisions | grep -v i
net6
else
#ip a
for i in $(ip link | grep BROADCAST | awk -F: '{print $2}');do ip add show $i | grep -E "BROADCAST|global"| awk '{print $2}' | tr '\n' '' ;echo"" ;done
fi
GATEWAY=$(ip route | grep default | awk '{print $3}')
DNS=$(grep nameserver /etc/resolv.conf| grep -v "#" | awk '{print $2}' | tr '\n' ',' | sed 's/,$//')
echo ""echo" 网关：$GATEWAY "echo"DNS：$DNS"
#报表信息
IP=$(ip -f inet addr | grep -v 127.0.0.1 | grep inet | awk '{print $NF,$2}' | tr '\n' ',' | sed 's/,$//')
MAC=$(ip link | grep -v "LOOPBACK\|loopback" | awk '{print $2}' | sed 'N;s/\n//' | tr '\n' ',' | sed 's/,$//')
echo ""
ping -c 4 www.baidu.com >/dev/null 2>&1
if [$? -eq 0];then
echo ""echo -e"\033[32m 网络连接：失常！\033[0m"
else
echo ""echo -e"\033[31m 网络连接：异样！\033[0m"
fi
}
function getListenStatus(){
echo ""echo -e"\033[33m*********************************************** 监听查看 ********************************************************\033[0m"
TCPListen=$(ss -ntul | column -t)
echo "$TCPListen"
}
function getCronStatus(){
echo ""echo -e"\033[33m********************************************** 打算工作查看 ******************************************************\033[0m"
Crontab=0
for shell in $(grep -v "/sbin/nologin" /etc/shells);do
for user in $(grep "$shell" /etc/passwd| awk -F: '{print $1}');do
crontab -l -u $user >/dev/null 2>&1
status=$?
if [$status -eq 0];then
echo -e "\033[36m************$user 用户的定时工作 **************\033[0m"
crontab -l -u $user
let Crontab=Crontab+$(crontab -l -u $user | wc -l)
echo ""
fi
done
done
#打算工作
#find /etc/cron* -type f | xargs -i ls -l {} | column -t
#let Crontab=Crontab+$(find /etc/cron* -type f | wc -l)
}
function getHowLongAgo(){
# 计算一个工夫戳离当初有多久了
datetime="$*"
[-z "$datetime"] && echo `stat /etc/passwd|awk "NR==6"`
Timestamp=$(date +%s -d "$datetime")
Now_Timestamp=$(date +%s)
Difference_Timestamp=$(($Now_Timestamp-$Timestamp))
days=0;hours=0;minutes=0;
sec_in_day=$((60*60*24));
sec_in_hour=$((60*60));
sec_in_minute=60
while (($(($Difference_Timestamp-$sec_in_day)) > 1 ))
do
let Difference_Timestamp=Difference_Timestamp-sec_in_day
let days++
done
while (($(($Difference_Timestamp-$sec_in_hour)) > 1 ))
do
let Difference_Timestamp=Difference_Timestamp-sec_in_hour
let hours++
done
echo "$days 天 $hours 小时前"
}
function getUserLastLogin(){
# 获取用户最近一次登录的工夫，含年份
# 很遗憾 last 命令不反对显示年份，只有 "last -t YYYYMMDDHHMMSS" 示意某个工夫之间的登录，我
# 们只能用最笨的办法了，比照明天之前和往年除夕之前（或者去年之前和前年之前……）某个用户
# 登录次数，如果登录统计次数有变动，则阐明最近一次登录是往年。username=$1
: ${username:="`whoami`"}
thisYear=$(date +%Y)
oldesYear=$(last | tail -n1 | awk '{print $NF}')
while(($thisYear >= $oldesYear));do
loginBeforeToday=$(last $username | grep $username | wc -l)
loginBeforeNewYearsDayOfThisYear=$(last $username -t $thisYear"0101000000" | grep $username | wc -l)
if [$loginBeforeToday -eq 0];then
echo "从未登录过"
break
elif [$loginBeforeToday -gt $loginBeforeNewYearsDayOfThisYear];then
lastDateTime=$(last -i $username | head -n1 | awk '{for(i=4;i<(NF-2);i++)printf"%s ",$i}')"$thisYear"
lastDateTime=$(date "+%Y-%m-%d %H:%M:%S" -d "$lastDateTime")
echo "$lastDateTime"
break
else
thisYear=$((thisYear-1))
fi
done
}
function getUserStatus(){
echo ""echo -e"\033[33m************************************************* 用户查看 *******************************************************\033[0m"
#/etc/passwd 最初批改工夫
pwdfile="$(cat /etc/passwd)"
Modify=$(stat /etc/passwd | grep Modify | tr '.' '' | awk'{print $2,$3}')
echo "/etc/passwd: $Modify ($(getHowLongAgo $Modify))"
echo ""echo -e"\033[36m****************** 特权用户 ******************\033[0m"RootUser=""
for user in $(echo "$pwdfile" | awk -F: '{print $1}');do
if [$(id -u $user) -eq 0 ];then
echo "$user"
RootUser="$RootUser,$user"
fi
done
echo ""echo -e"\033[36m****************** 用户列表 ******************\033[0m"
USERs=0
echo "$(
echo "用户名 UID GID HOME SHELL 最初一次登录"
for shell in $(grep -v "/sbin/nologin" /etc/shells);do
for username in $(grep "$shell" /etc/passwd| awk -F: '{print $1}');do
userLastLogin="$(getUserLastLogin $username)"
echo "$pwdfile" | grep -w "$username" |grep -w "$shell"| awk -F: -v lastlogin="$(echo"$userLastLogin"| tr' ''_')"'{print $1,$3,$4,$6,$7,lastlogin}'
done
let USERs=USERs+$(echo "$pwdfile" | grep "$shell"| wc -l)
done
)" | column -t
echo ""echo -e"\033[36m****************** 空明码用户 ****************\033[0m"USEREmptyPassword=""
for shell in $(grep -v "/sbin/nologin" /etc/shells);do
for user in $(echo "$pwdfile" | grep "$shell" | cut -d: -f1);do
r=$(awk -F: '$2=="!!"{print $1}' /etc/shadow | grep -w $user)
if [! -z $r];then
echo $r
USEREmptyPassword="$USEREmptyPassword,"$r
fi
done
done
echo ""echo -e"\033[36m***************** 雷同 ID 用户 *****************\033[0m"USERTheSameUID=""
UIDs=$(cut -d: -f3 /etc/passwd | sort | uniq -c | awk '$1>1{print $2}')
for uid in $UIDs;do
echo -n "$uid";
USERTheSameUID="$uid"
r=$(awk -F: 'ORS="";$3=='"$uid"'{print ":",$1}' /etc/passwd)
echo "$r"
echo ""USERTheSameUID="$USERTheSameUID $r,"
done
}
function getPasswordStatus {echo ""echo -e"\033[33m************************************************* 明码查看 *******************************************************\033[0m"pwdfile="$(cat /etc/passwd)"echo""
echo -e "\033[36m**************** 明码过期查看 ****************\033[0m"
result=""for shell in $(grep -v"/sbin/nologin" /etc/shells);do
for user in $(echo "$pwdfile" | grep "$shell" | cut -d: -f1);do
get_expiry_date=$(/usr/bin/chage -l $user | grep 'Password expires' | cut -d: -f2)
if [[$get_expiry_date = 'never' || $get_expiry_date = 'never']];then
printf "%-15s 永不过期 \n" $user
result="$result,$user:never"
else
password_expiry_date=$(date -d "$get_expiry_date" "+%s")
current_date=$(date "+%s")
diff=$(($password_expiry_date-$current_date))
let DAYS=$(($diff/(60*60*24)))
printf "%-15s %s 天后过期 \n" $user $DAYS
result="$result,$user:$DAYS days"
fi
done
done
report_PasswordExpiry=$(echo $result | sed 's/^,//')
echo ""echo -e"\033[36m**************** 明码策略查看 ****************\033[0m"grep -v"#"/etc/login.defs | grep -E"PASS_MAX_DAYS|PASS_MIN_DAYS|PASS_MIN_LEN|PASS_WARN_AGE"}
function getSudoersStatus(){echo ""echo -e"\033[33m**********************************************Sudoers 查看 *******************************************************\033[0m"conf=$(grep -v"^#"/etc/sudoers| grep -v"^Defaults"| sed'/^$/d')
echo "$conf"
echo ""
}
function getInstalledStatus(){
echo ""echo -e"\033[33m************************************************* 软件查看 *******************************************************\033[0m"
rpm -qa --last | head | column -t
}
function getProcessStatus(){
echo ""echo -e"\033[33m************************************************* 过程查看 *******************************************************\033[0m"
if [$(ps -ef | grep defunct | grep -v grep | wc -l) -ge 1 ];then
echo ""echo -e"\033[36m*************** 僵尸过程 ***************\033[0m"
ps -ef | head -n1
ps -ef | grep defunct | grep -v grep
fi
echo ""echo -e"\033[36m************CPU 占用 TOP 10 过程 *************\033[0m"echo -e" 用户 过程 ID %CPU 命令
$(ps aux | awk '{print $1, $2, $3, $11}' | sort -k3rn | head -n 10 )"| column -t
echo ""echo -e"\033[36m************ 内存占用 TOP 10 过程 *************\033[0m"echo -e" 用户 过程 ID %MEM 虚拟内存 常驻内存 命令
$(ps aux | awk '{print $1, $2, $4, $5, $6, $11}' | sort -k3rn | head -n 10 )"| column -t
#echo ""#echo -e"\033[36m************SWAP 占用 TOP 10 过程 *************\033[0m"#awk: fatal: cannot open file `/proc/18713/smaps' for reading (No such file or directory)
#for i in `cd /proc;ls |grep "^[0-9]"|awk '$0 >100'`;do awk '{if (-f /proc/$i/smaps) print"$i file is not exist"; else print"$i"}';done
# for i in `cd /proc;ls |grep "^[0-9]"|awk '$0 >100'` ;do awk '/Swap:/{a=a+$2}END{print'"$i"',a/1024"M"}' /proc/$i/smaps ;done |sort -k2nr > /tmp/swap.txt
#echo -e "过程 ID SWAP 应用 $(cat /tmp/swap.txt|grep -v awk | head -n 10)"| column -t
}
function getSyslogStatus(){echo ""echo -e"\033[33m***********************************************syslog 查看 *******************************************************\033[0m"echo"SYSLOG 服务状态：$(getState rsyslog)"echo""
echo -e "\033[36m***************rsyslog 配置 ******************\033[0m"
cat /etc/rsyslog.conf 2>/dev/null | grep -v "^#" | grep -v "^\\$" | sed '/^$/d' | column -t
}
function getFirewallStatus(){
echo ""echo -e"\033[33m*********************************************** 防火墙查看 *******************************************************\033[0m"echo -e"\033[36m**************** 防火墙状态 ******************\033[0m"
if [[$centosVersion = 7]];then
systemctl status firewalld >/dev/null 2>&1
status=$?
if [$status -eq 0];then
s="active"
elif [$status -eq 3];then
s="inactive"
elif [$status -eq 4];then
s="permission denied"
else
s="unknown"
fi
else
s="$(getState iptables)"
fi
echo "firewalld: $s"
echo ""echo -e"\033[36m**************** 防火墙配置 ******************\033[0m"
cat /etc/sysconfig/firewalld 2>/dev/null
}
function getSNMPStatus(){
#SNMP 服务状态，配置等
echo ""echo -e"\033[33m***********************************************SNMP 查看 *********************************************************\033[0m"status="$(getState snmpd)"echo"SNMP 服务状态：$status"echo""
if [-e /etc/snmp/snmpd.conf];then
echo "/etc/snmp/snmpd.conf"
echo "--------------------"
cat /etc/snmp/snmpd.conf 2>/dev/null | grep -v "^#" | sed '/^$/d'
fi
}
function getState(){if [[ $centosVersion < 7]];then
if [-e "/etc/init.d/$1"];then
if [`/etc/init.d/$1 status 2>/dev/null | grep -E "is running| 正在运行" | wc -l` -ge 1];then
r="active"
else
r="inactive"
fi
else
r="unknown"
fi
else
#CentOS 7+
r="$(systemctl is-active $1 2>&1)"
fi
echo "$r"
}
function getSSHStatus(){
#SSHD 服务状态，配置, 受信赖主机等
echo ""echo -e"\033[33m************************************************SSH 查看 *********************************************************\033[0m"
#查看受信赖主机
pwdfile="$(cat /etc/passwd)"
echo "SSH 服务状态：$(getState sshd)"
Protocol_Version=$(cat /etc/ssh/sshd_config | grep Protocol | awk '{print $2}')
echo "SSH 协定版本：$Protocol_Version"
echo ""echo -e"\033[36m**************** 信赖主机 ******************\033[0m"
authorized=0
for user in $(echo "$pwdfile" | grep /bin/bash | awk -F: '{print $1}');do
authorize_file=$(echo "$pwdfile" | grep -w $user | awk -F: '{printf $6"/.ssh/authorized_keys"}')
authorized_host=$(cat $authorize_file 2>/dev/null | awk '{print $3}' | tr '\n' ',' | sed 's/,$//')
if [! -z $authorized_host];then
echo "$user 受权 \"$authorized_host\"无明码拜访"
fi
let authorized=authorized+$(cat $authorize_file 2>/dev/null | awk '{print $3}'|wc -l)
done
echo ""echo -e"\033[36m******* 是否容许 ROOT 近程登录 ***************\033[0m"
config=$(cat /etc/ssh/sshd_config | grep PermitRootLogin)
firstChar=${config:0:1}
if [$firstChar == "#"];then
PermitRootLogin="yes"
else
PermitRootLogin=$(echo $config | awk '{print $2}')
fi
echo "PermitRootLogin $PermitRootLogin"
echo ""echo -e"\033[36m*************ssh 服务配置 ******************\033[0m"cat /etc/ssh/sshd_config | grep -v"^#"| sed'/^$/d'}
function getNTPStatus(){
#NTP 服务状态，以后工夫，配置等
echo ""echo -e"\033[33m***********************************************NTP 查看 **********************************************************\033[0m"
if [-e /etc/ntp.conf];then
echo "NTP 服务状态：$(getState ntpd)"
echo ""echo -e"\033[36m*************NTP 服务配置 ******************\033[0m"cat /etc/ntp.conf 2>/dev/null | grep -v"^#"| sed'/^$/d'
fi
}
function check(){
version
getSystemStatus
get_resource
getCpuStatus
getMemStatus
getDiskStatus
getNetworkStatus
getListenStatus
getProcessStatus
getServiceStatus
getAutoStartStatus
getLoginStatus
getCronStatus
getUserStatus
getPasswordStatus
getSudoersStatus
getFirewallStatus
getSSHStatus
getSyslogStatus
getSNMPStatus
getNTPStatus
getInstalledStatus
}
#执行查看并保留查看后果
check > $RESULTFILE
echo -e "\033[44;37m 主机巡检后果寄存在：$RESULTFILE \033[0m"
#上传查看后果的文件
#curl -F "filename=@$RESULTFILE" "$uploadHostDailyCheckApi" 2>/dev/null
cat $RESULTFILE
正文完
