75 lines
2.4 KiB
Bash
Executable File
75 lines
2.4 KiB
Bash
Executable File
#!/bin/bash
|
||
|
||
: << 'EOF'
|
||
配置主机之间的信任关系，使得scp，ssh 等可以免密登陆
|
||
EOF
|
||
|
||
# 检查本地是否存在 id_rsa.pub
|
||
if [ ! -f ~/.ssh/id_rsa.pub ]; then
|
||
echo "本地未找到 id_rsa.pub，开始生成新的 SSH 密钥对..."
|
||
ssh-keygen -t rsa -b 4096 -C "oscar@easyprompt8.com" -N "" -f ~/.ssh/id_rsa
|
||
if [ $? -eq 0 ]; then
|
||
echo "SSH 密钥对生成成功。"
|
||
else
|
||
echo "生成 SSH 密钥对时出错。"
|
||
exit 1
|
||
fi
|
||
fi
|
||
|
||
# 处理服务器列表
|
||
# bash push_ssh_key.sh user1@server1 user2@server2
|
||
if [ $# -gt 0 ]; then
|
||
servers=("$@")
|
||
else
|
||
echo "请提供包含服务器列表的文件路径："
|
||
read file_path
|
||
if [ ! -f "$file_path" ]; then
|
||
echo "文件 $file_path 不存在。"
|
||
exit 1
|
||
fi
|
||
servers=()
|
||
while IFS= read -r line; do
|
||
# 跳过空行和注释行
|
||
[[ -z "$line" || "$line" =~ ^# ]] && continue
|
||
servers+=("$line")
|
||
done < "$file_path"
|
||
fi
|
||
|
||
# 推送公钥到远程服务器
|
||
public_key=$(cat ~/.ssh/id_rsa.pub)
|
||
for server in "${servers[@]}"; do
|
||
# 第一次尝试推送
|
||
echo "正在推送公钥到 $server..."
|
||
output=$(ssh "$server" "mkdir -p ~/.ssh && echo '$public_key' >> ~/.ssh/authorized_keys" 2>&1)
|
||
exit_code=$?
|
||
|
||
if [ $exit_code -eq 0 ]; then
|
||
echo "公钥已成功推送到 $server"
|
||
continue
|
||
fi
|
||
|
||
# 检测是否是主机密钥验证失败
|
||
if echo "$output" | grep -q "Host key verification failed"; then
|
||
echo "检测到 $server 的主机密钥已变更，正在清理旧密钥..."
|
||
# 提取主机地址（处理 user@host 格式，取 @ 后面的部分）
|
||
host=$(echo "$server" | cut -d'@' -f2)
|
||
# 清理旧密钥
|
||
cleanup_output=$(ssh-keygen -R "$host" 2>&1)
|
||
if [ $? -ne 0 ]; then
|
||
echo "清理 $host 旧密钥失败：$cleanup_output"
|
||
continue
|
||
fi
|
||
echo "已清理 $host 的旧密钥，重新尝试推送..."
|
||
# 重新推送
|
||
retry_output=$(ssh "$server" "mkdir -p ~/.ssh && echo '$public_key' >> ~/.ssh/authorized_keys" 2>&1)
|
||
retry_code=$?
|
||
if [ $retry_code -eq 0 ]; then
|
||
echo "公钥已成功推送到 $server"
|
||
else
|
||
echo "重新推送 $server 失败：$retry_output"
|
||
fi
|
||
else
|
||
# 其他错误类型
|
||
echo "推送 $server 失败：$output"
|
||
fi
|
||
done |