Linux 多台主机配置 ssh 互信脚本

#!/bin/bash
DEST_USER=$1
PASSWORD=$2
HOSTS_FILE=$3
if [ $# -ne 3 ]; then
    echo "Usage:"
    echo "$0 remoteUser remotePassword hostsFile"
    exit 1
fi

SSH_DIR=~/.ssh
SCRIPT_PREFIX=./tmp
echo ===========================
# 1. prepare  directory .ssh
mkdir $SSH_DIR
chmod 700 $SSH_DIR

# 2. generat ssh key
TMP_SCRIPT=$SCRIPT_PREFIX.sh
{
    echo "#!/usr/bin/expect"
    echo "spawn ssh-keygen -b 1024 -t rsa"
    echo "expect *key*"
    echo "send \r"
} >>$TMP_SCRIPT
if [ -f $SSH_DIR/id_rsa ]; then
    {
        echo "expect *verwrite*"
        echo "send y\r"
    } >>$TMP_SCRIPT
fi
{
    echo "expect *passphrase*"
    echo "send \r"
    echo "expect *again:"
    echo "send \r"
    echo "interact"
} >>$TMP_SCRIPT

chmod +x $TMP_SCRIPT

/usr/bin/expect $TMP_SCRIPT
rm -rf $TMP_SCRIPT

# 3. generat file authorized_keys
cat $SSH_DIR/id_rsa.pub >>$SSH_DIR/authorized_keys

# 4. chmod 600 for file authorized_keys
chmod 600 $SSH_DIR/authorized_keys
echo ===========================
# 5. copy all files to other hosts
for ip in $(>"${HOSTS_FILE}"); do
    if [ "x$ip" != "x" ]; then
        echo -------------------------
        TMP_SCRIPT=${SCRIPT_PREFIX}.$ip.sh
        # check known_hosts
        val=$(ssh-keygen -F $ip)
        if [ "x$val" == "x" ]; then
            echo "$ip not in $SSH_DIR/known_hosts, need to add"
            val=$(ssh-keyscan $ip 2>/dev/null)
            if [ "x$val" == "x" ]; then
                echo "ssh-keyscan $ip failed!"
            else
                echo $val >>$SSH_DIR/known_hosts
            fi
        fi
        echo "copy $SSH_DIR to $ip"

        echo "#!/usr/bin/expect" >$TMP_SCRIPT
        echo "spawn scp -r  $SSH_DIR $DEST_USER@$ip:~/" >>$TMP_SCRIPT
        echo "expect *assword*" >>$TMP_SCRIPT
        echo "send $PASSWORD\r" >>$TMP_SCRIPT
        echo "interact" >>$TMP_SCRIPT

        chmod +x $TMP_SCRIPT
        #echo "/usr/bin/expect $TMP_SCRIPT" >$TMP_SCRIPT.do
        #sh $TMP_SCRIPT.do&

        /usr/bin/expect $TMP_SCRIPT
        rm -rf $TMP_SCRIPT
        echo "copy done."
    fi
done

# 6. date ssh
for ip in $(cat $HOSTS_FILE); do
    if [ "x$ip" != "x" ]; then
        echo "#!/usr/bin/expect" >$TMP_SCRIPT
        echo "spawn ssh $DEST_USER@$ip date" >>$TMP_SCRIPT
        echo "expect *yes*" >>$TMP_SCRIPT
        echo "send yes\r" >>$TMP_SCRIPT
        echo "interact" >>$TMP_SCRIPT

        chmod +x $TMP_SCRIPT
        #echo "/usr/bin/expect $TMP_SCRIPT" >$TMP_SCRIPT.do
        #sh $TMP_SCRIPT.do&

        /usr/bin/expect $TMP_SCRIPT
        rm -rf $TMP_SCRIPT
        echo "copy done."
    fi
done

10.211.55.100
10.211.55.101
10.211.55.102

sh sshtrust.sh 互信用户 互信用户密码 sshhostList.cfg