blocks|key|1729404|text|您应该以超级用户身份运行整个脚本。如果您希望以非超级用户身份运行某些命令，请使用sudo+"-u“选项：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1729405|#!/bin/bash

sudo+-u+username+command1
command2
sudo+-u+username+command3
command4|code-block|syntax|javascript|1729406|当以root用户身份运行时，sudo不会要求输入密码。|1729407|entityMap^0|0|0|0^^$0|@$1|2|3|4|5|6|7|K|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|L|8|@]|9|@]|A|$E|F]]|$1|G|3|H|5|6|7|M|8|@]|9|@]|A|$]]|$1|I|3|-4|5|6|7|N|8|@]|9|@]|A|$]]]|J|$]]

You should run your entire script as superuser. If you want to run some command as non-superuser, use "-u" option of sudo:

<pre><code>#!/bin/bash

sudo -u username command1
command2
sudo -u username command3
command4
</code></pre>

When running as root, sudo doesn't ask for a password.

blocks|key|1729447|text|如果你使用这个，也要检查man+sudo：|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|1729448|#!/bin/bash

sudo+echo+"Hi,+I'm+root"

sudo+-u+nobody+echo+"I'm+nobody"

sudo+-u+1000+touch+/test_user|code-block|syntax|javascript|1729449|entityMap^0|C|8|0|0^^$0|@$1|2|3|4|5|6|7|M|8|@$9|N|A|O|B|C]]|D|@]|E|$]]|$1|F|3|G|5|H|7|P|8|@]|D|@]|E|$I|J]]|$1|K|3|-4|5|6|7|Q|8|@]|D|@]|E|$]]]|L|$]]

If you use this, check <code>man sudo</code> too:

<pre><code>#!/bin/bash

sudo echo "Hi, I'm root"

sudo -u nobody echo "I'm nobody"

sudo -u 1000 touch /test_user
</code></pre>

blocks|key|1943182|text|好吧，你有一些选择。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1943183|您可以将sudo配置为不提示输入密码。由于存在安全风险，不建议这样做。|1943184|您可以编写一个expect脚本来读取密码，并在需要时将其提供给sudo，但这样做既笨重又脆弱。|1943185|我建议将脚本设计为以root用户身份运行，并在不需要的时候删除其特权。对于不需要根用户的命令，只需让其sudo+-u+someotheruser+command即可。|offset|length|style|CODE|1943186|(如果它们必须以调用脚本的用户身份运行，那么您可以让脚本保存uid并通过sudo调用另一个脚本，并将id作为参数，这样它就知道将su切换到谁。)|1943187|entityMap^0|0|0|0|1F|T|0|0^^$0|@$1|2|3|4|5|6|7|P|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|Q|8|@]|9|@]|A|$]]|$1|D|3|E|5|6|7|R|8|@]|9|@]|A|$]]|$1|F|3|G|5|6|7|S|8|@$H|T|I|U|J|K]]|9|@]|A|$]]|$1|L|3|M|5|6|7|V|8|@]|9|@]|A|$]]|$1|N|3|-4|5|6|7|W|8|@]|9|@]|A|$]]]|O|$]]

Well, you have some options. 

You could configure sudo to not prompt for a password. This is not recommended, due to the security risks.

You could write an expect script to read the password and supply it to sudo when required, but that's clunky and fragile.

I would recommend designing the script to run as root and drop its privileges whenever they're not needed. Simply have it <code>sudo -u someotheruser command</code> for the commands that don't require root.

(If they have to run specifically as the user invoking the script, then you could have the script save the uid and invoke a second script via sudo with the id as an argument, so it knows who to su to..)

blocks|key|1730126|text|文件sutest|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|1730127|#!/bin/bash
echo+"uid+is+${UID}"
echo+"user+is+${USER}"
echo+"username+is+${USERNAME}"|code-block|syntax|javascript|1730128|运行它：`./sutest‘给我|1730129|uid+is+500
user+is+stephenp
username+is+stephenp|1730130|但是使用sudo：sudo+./sutest提供了|1730131|uid+is+0
user+is+root
username+is+stephenp|1730132|因此，在以sudo身份运行时，您将保留$USERNAME中的原始用户名。这导致了一个类似于其他人发布的解决方案：|1730133|#!/bin/bash
sudo+-u+${USERNAME}+normal_command_1
root_command_1
root_command_2
sudo+-u+${USERNAME}+normal_command_2
#+etc.|1730134|只需sudo在第一个位置调用您的脚本，它将提示输入密码一次。|1730135|1730136|我最初在Linux上写了这个答案，Linux和OS+X确实有一些不同|1730137|1730138|更改OS+X的原始脚本，它将变为...|1730139|#!/bin/bash
sudo+-u+${SUDO_USER}+normal_command_1
root_command_1
root_command_2
sudo+-u+${SUDO_USER}+normal_command_2
#+etc.|1730140|让它跨平台的第一次尝试可能是……|1730141|#!/bin/bash
#
#+set+"THE_USER"+to+SUDO_USER+if+that's+set,
#++else+set+it+to+USERNAME+if+THAT+is+set,
#+++else+set+it+to+the+string+"unknown"
#+should+probably+then+test+to+see+if+it's+"unknown"
#
THE_USER=${SUDO_USER:-${USERNAME:-unknown}}

sudo+-u+${THE_USER}+normal_command_1
root_command_1
root_command_2
sudo+-u+${THE_USER}+normal_command_2
#+etc.|1730142|entityMap^0|2|6|0|0|0|0|9|D|0|0|0|0|0|0|0|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|1C|8|@$9|1D|A|1E|B|C]]|D|@]|E|$]]|$1|F|3|G|5|H|7|1F|8|@]|D|@]|E|$I|J]]|$1|K|3|L|5|6|7|1G|8|@]|D|@]|E|$]]|$1|M|3|N|5|H|7|1H|8|@]|D|@]|E|$I|J]]|$1|O|3|P|5|6|7|1I|8|@$9|1J|A|1K|B|C]]|D|@]|E|$]]|$1|Q|3|R|5|H|7|1L|8|@]|D|@]|E|$I|J]]|$1|S|3|T|5|6|7|1M|8|@]|D|@]|E|$]]|$1|U|3|V|5|H|7|1N|8|@]|D|@]|E|$I|J]]|$1|W|3|X|5|6|7|1O|8|@]|D|@]|E|$]]|$1|Y|3|-4|5|6|7|1P|8|@]|D|@]|E|$]]|$1|Z|3|10|5|6|7|1Q|8|@]|D|@]|E|$]]|$1|11|3|-4|5|6|7|1R|8|@]|D|@]|E|$]]|$1|12|3|13|5|6|7|1S|8|@]|D|@]|E|$]]|$1|14|3|15|5|H|7|1T|8|@]|D|@]|E|$I|J]]|$1|16|3|17|5|6|7|1U|8|@]|D|@]|E|$]]|$1|18|3|19|5|H|7|1V|8|@]|D|@]|E|$I|J]]|$1|1A|3|-4|5|6|7|1W|8|@]|D|@]|E|$]]]|1B|$]]

File <code>sutest</code>

<pre class="lang-sh prettyprint-override"><code>#!/bin/bash
echo "uid is ${UID}"
echo "user is ${USER}"
echo "username is ${USERNAME}"
</code></pre>

run it: `./sutest' gives me

<pre><code>uid is 500
user is stephenp
username is stephenp
</code></pre>

but using sudo: <code>sudo ./sutest</code> gives

<pre><code>uid is 0
user is root
username is stephenp
</code></pre>

So you retain the original user name in $USERNAME when running as sudo. This leads to a solution similar to what others posted:

<pre class="lang-sh prettyprint-override"><code>#!/bin/bash
sudo -u ${USERNAME} normal_command_1
root_command_1
root_command_2
sudo -u ${USERNAME} normal_command_2
# etc.
</code></pre>

Just sudo to invoke your script in the first place, it will prompt for the password once.

<hr>

I originally wrote this answer on Linux, which does have some differences with OS X

OS X (I'm testing this on Mountain Lion 10.8.3) has an environment variable <code>SUDO_USER</code> when you're running sudo, which can be used in place of <code>USERNAME</code> above, or to be more cross-platform the script could check to see if SUDO_USER is set and use it if so, or use USERNAME if that's set.

Changing the original script for OS X, it becomes...

<pre class="lang-sh prettyprint-override"><code>#!/bin/bash
sudo -u ${SUDO_USER} normal_command_1
root_command_1
root_command_2
sudo -u ${SUDO_USER} normal_command_2
# etc.
</code></pre>

A first stab at making it cross-platform could be...

<pre class="lang-sh prettyprint-override"><code>#!/bin/bash
#
# set "THE_USER" to SUDO_USER if that's set,
# else set it to USERNAME if THAT is set,
# else set it to the string "unknown"
# should probably then test to see if it's "unknown"
#
THE_USER=${SUDO_USER:-${USERNAME:-unknown}}

sudo -u ${THE_USER} normal_command_1
root_command_1
root_command_2
sudo -u ${THE_USER} normal_command_2
# etc.
</code></pre>

I want to write a shell script to automate a series of commands. The problem is some commands MUST be run as superuser and some commands MUST NOT be run as superuser. What I have done so far is something like this:

<pre><code>#!/bin/bash

command1
sudo command2
command3
sudo command4
</code></pre>

The problem is, this means somebody has to wait until command1 finishes before they are prompted for a password, then, if command3 takes long enough, they will then have to wait for command3 to finish. It would be nice if the person could get up and walk away, then come back an hour later and be done. For example, the following script has this problem:

<pre><code>#!/bin/bash

sleep 310
sudo echo "Hi, I'm root"
sleep 310
sudo echo "I'm still root?"
</code></pre>

How can I make it so that the user can just enter their password once, at the very start, and then walk away?

Update:

Thanks for the responses. I'm running on Mac OS X Lion and ran Stephen P's script and got different results: (I also added $HOME)

<pre><code>pair@abbey scratch$ ./test2.sh
uid is 501
user is pair
username is 
home directory is /Users/pair
pair@abbey scratch$ sudo ./test2.sh 
Password:
uid is 0
user is root
username is root
home directory is /Users/pair
</code></pre>

How to write a shell script that runs some commands as superuser and some commands not as superuser, without having to babysit it?

翻译质量差，导致语言生硬或混乱。

没有提供实际的解决方法或示例。

解答不清晰，无法理解或解决问题。

页面排版不美观，阅读体验差。

文章

问答

视频

学习中心

腾讯云实验室

直播

竞赛

腾讯云代码分析专区

腾讯iOA零信任安全管理系统专区

腾讯云架构师技术同盟交流圈

腾讯云数据库专区

腾讯云顾问专区

腾讯云原生专区

腾讯混元专区

腾讯云TCE专区

腾讯云Lighthouse专区

腾讯云HAI专区

腾讯云Edgeone专区

腾讯云存储专区

腾讯云智能专区

腾讯轻联专区 

腾讯云开发专区

TAPD专区

腾讯轻量云游戏服专区

腾讯云最具价值专家

腾讯云架构师技术同盟

腾讯云创作之星

腾讯云开发者先锋

腾讯云代码助手

云原生构建

TAPD 敏捷项目管理

Cloud Studio

SDK中心

API中心

命令行工具

涵盖代码开发、场景应用、自动测试全流程，助你从零构建专属AI助手

一站式MCP教程库，解锁AI应用新玩法

我想写一个shell脚本来自动执行一系列命令。问题是有些命令必须以超级用户身份运行，而有些命令则不能以超级用户身份运行。到目前为止，我所做的事情是这样的：#!/bin/bashcommand1sudo command2command3sudo command4问题是，这意味着有人必须等到command1完成后才会被提示...

问如何编写一个shell脚本，以超级用户身份运行一些命令，而不是以超级用户身份运行一些命令，而不必看管它？
EN

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问如何编写一个shell脚本，以超级用户身份运行一些命令，而不是以超级用户身份运行一些命令，而不必看管它？EN

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问如何编写一个shell脚本，以超级用户身份运行一些命令，而不是以超级用户身份运行一些命令，而不必看管它？
EN