diff --git a/sys.sh b/sys.sh new file mode 100644 index 0000000..fc9178d --- /dev/null +++ b/sys.sh @@ -0,0 +1,634 @@ +#!/bin/bash +#参数定义 +date=`date +"%Y-%m-%d-%H:%M:%S"` +centosVersion=$(awk '{print $(NF-1)}' /etc/redhat-release) +VERSION=`date +%F` +#日志相关 +LOGPATH="/tmp/awr" +[ -e $LOGPATH ] || mkdir -p $LOGPATH +RESULTFILE="$LOGPATH/HostCheck-`hostname`-`date +%Y%m%d`.txt" + +#调用函数库 +[ -f /etc/init.d/functions ] && source /etc/init.d/functions +export PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin:/root/bin +source /etc/profile + +#root用户执行脚本 +[ $(id -u) -gt 0 ] && echo "请用root用户执行此脚本!" && exit 1 + +function version(){ + echo "" + echo "" + echo "[${date}] >>> `hostname -s` 主机巡检" +} + +function getSystemStatus(){ + echo "" + echo -e "\033[33m****************************************************系统检查****************************************************\033[0m" + if [ -e /etc/sysconfig/i18n ];then + default_LANG="$(grep "LANG=" /etc/sysconfig/i18n | grep -v "^#" | awk -F '"' '{print $2}')" + else + default_LANG=$LANG + fi + export LANG="en_US.UTF-8" + Release=$(cat /etc/redhat-release 2>/dev/null) + Kernel=$(uname -r) + OS=$(uname -o) + Hostname=$(uname -n) + SELinux=$(/usr/sbin/sestatus | grep "SELinux status: " | awk '{print $3}') + LastReboot=$(who -b | awk '{print $3,$4}') + uptime=$(uptime | sed 's/.*up \([^,]*\), .*/\1/') + echo " 系统:$OS" + echo " 发行版本:$Release" + echo " 内核:$Kernel" + echo " 主机名:$Hostname" + echo " SELinux:$SELinux" + echo "语言/编码:$default_LANG" + echo " 当前时间:$(date +'%F %T')" + echo " 最后启动:$LastReboot" + echo " 运行时间:$uptime" + export LANG="$default_LANG" +} + +function getCpuStatus(){ + echo "" + echo -e "\033[33m****************************************************CPU检查*****************************************************\033[0m" + Physical_CPUs=$(grep "physical id" /proc/cpuinfo| sort | uniq | wc -l) + Virt_CPUs=$(grep "processor" /proc/cpuinfo | wc -l) + CPU_Kernels=$(grep "cores" /proc/cpuinfo|uniq| awk -F ': ' '{print $2}') + CPU_Type=$(grep "model name" /proc/cpuinfo | awk -F ': ' '{print $2}' | sort | uniq) + CPU_Arch=$(uname -m) + echo "物理CPU个数:$Physical_CPUs" + echo "逻辑CPU个数:$Virt_CPUs" + echo "每CPU核心数:$CPU_Kernels" + echo " CPU型号:$CPU_Type" + echo " CPU架构:$CPU_Arch" +} + +function getMemStatus(){ + echo "" + echo -e "\033[33m**************************************************内存检查*****************************************************\033[0m" + if [[ $centosVersion < 7 ]];then + free -mo + else + free -h + fi + #报表信息 + MemTotal=$(grep MemTotal /proc/meminfo| awk '{print $2}') #KB + MemFree=$(grep MemFree /proc/meminfo| awk '{print $2}') #KB + let MemUsed=MemTotal-MemFree + MemPercent=$(awk "BEGIN {if($MemTotal==0){printf 100}else{printf \"%.2f\",$MemUsed*100/$MemTotal}}") +} + +function getDiskStatus(){ + echo "" + echo -e "\033[33m**************************************************磁盘检查******************************************************\033[0m" + df -hiP | sed 's/Mounted on/Mounted/'> /tmp/inode + df -hTP | sed 's/Mounted on/Mounted/'> /tmp/disk + join /tmp/disk /tmp/inode | awk '{print $1,$2,"|",$3,$4,$5,$6,"|",$8,$9,$10,$11,"|",$12}'| column -t + #报表信息 + diskdata=$(df -TP | sed '1d' | awk '$2!="tmpfs"{print}') #KB + disktotal=$(echo "$diskdata" | awk '{total+=$3}END{print total}') #KB + diskused=$(echo "$diskdata" | awk '{total+=$4}END{print total}') #KB + diskfree=$((disktotal-diskused)) #KB + diskusedpercent=$(echo $disktotal $diskused | awk '{if($1==0){printf 100}else{printf "%.2f",$2*100/$1}}') + inodedata=$(df -iTP | sed '1d' | awk '$2!="tmpfs"{print}') + inodetotal=$(echo "$inodedata" | awk '{total+=$3}END{print total}') + inodeused=$(echo "$inodedata" | awk '{total+=$4}END{print total}') + inodefree=$((inodetotal-inodeused)) + inodeusedpercent=$(echo $inodetotal $inodeused | awk '{if($1==0){printf 100}else{printf "%.2f",$2*100/$1}}') +} + +function get_resource(){ + echo "" + echo -e "\033[33m**************************************************资源消耗统计**************************************************\033[0m" + + echo -e "\033[36m*************带宽资源消耗统计*************\033[0m" + #用数组存放网卡名 + nic=(`ifconfig | grep ^[a-z] | grep -vE 'lo|docker0'| awk -F: '{print $1}'`) + time=`date "+%Y-%m-%d %k:%M"` + num=0 + + for ((i=0;i<${#nic[@]};i++)) + do + #循环五次,避免看到的是偶然的数据 + while (( $num<5 )) + do + rx_before=$(cat /proc/net/dev | grep '${nic[$i]}' | tr : " " | awk '{print $2}') + tx_before=$(cat /proc/net/dev | grep '${nic[$i]}' | tr : " " | awk '{print $10}') + sleep 2 + #用sed先获取第7列,再用awk获取第2列,再cut切割,从第7个到最后,即只切割网卡流量数字部分 + rx_after=$(cat /proc/net/dev | grep '${nic[$i]}' | tr : " " | awk '{print $2}') + tx_after=$(cat /proc/net/dev | grep '${nic[$i]}' | tr : " " | awk '{print $10}') + #注意下面截取的相差2秒的两个时刻的累计和发送的bytes(即累计传送和接收的位) + rx_result=$[(rx_after-rx_before)/1024/1024/2*8] + tx_result=$[(tx_after-tx_before)/1024/1024/2*8] + echo "$time Now_In_Speed: $rx_result Mbps Now_OUt_Speed: $tx_result Mbps" >> /tmp/network.txt + let "num++" + done + #注意下面grep后面的$time变量要用双引号括起来 + rx_result=$(cat /tmp/network.txt|grep "$time"|awk '{In+=$4}END{print In}') + tx_result=$(cat /tmp/network.txt|grep "$time"|awk '{Out+=$7}END{print Out}') + In_Speed=$(echo "scale=2;$rx_result/5"|bc) + Out_Speed=$(echo "scale=2;$tx_result/5"|bc) + echo -e "\033[32m In_Speed_average: $In_Speed Mbps Out_Speed_average: $Out_Speed Mbps! \033[0m" + done + + echo -e "\033[36m*************CPU资源消耗统计*************\033[0m" + + #使用vmstat 1 5命令统计5秒内的使用情况,再计算每秒使用情况 + total=`vmstat 1 5|awk '{x+=$13;y+=$14}END{print x+y}'` + cpu_average=$(echo "scale=2;$total/5"|bc) + + #判断CPU使用率(浮点数与整数比较) + if [ `echo "${cpu_average} > 70" | bc` -eq 1 ];then + echo -e "\033[31m Total CPU is already use: ${cpu_average}%,请及时处理!\033[0m" + else + echo -e "\033[32m Total CPU is already use: ${cpu_average}%! \033[0m" + fi + + echo -e "\033[36m*************磁盘资源消耗统计*************\033[0m" + #磁盘使用情况(注意:需要用sed先进行格式化才能进行累加处理) + disk_used=$(df -m | sed '1d;/ /!N;s/\n//;s/ \+/ /;' | awk '{used+=$3} END{print used}') + disk_totalSpace=$(df -m | sed '1d;/ /!N;s/\n//;s/ \+/ /;' | awk '{totalSpace+=$2} END{print totalSpace}') + disk_all=$(echo "scale=4;$disk_used/$disk_totalSpace" | bc) + disk_percent1=$(echo $disk_all | cut -c 2-3) + disk_percent2=$(echo $disk_all | cut -c 4-5) + disk_warning=`df -m | sed '1d;/ /!N;s/\n//;s/ \+/ /;' | awk '{if ($5>85) print $6 "目录使用率:" $5;} '` + + echo -e "\033[32m Total disk has used: $disk_percent1.$disk_percent2% \033[0m" + #echo -e "\t\t.." 表示换行 + if [ -n "$disk_warning" ];then + echo -e "\033[31m${disk_warning} \n [Error]以上目录使用率超过85%,请及时处理!\033[0m" + fi + + echo -e "\033[36m*************内存资源消耗统计*************\033[0m" + + #获得系统总内存 + memery_all=$(free -m | awk 'NR==2' | awk '{print $2}') + #获得占用内存(操作系统 角度) + system_memery_used=$(free -m | awk 'NR==2' | awk '{print $3}') + #获得buffer、cache占用内存,当内存不够时会及时回收,所以这两部分可用于可用内存的计算 + buffer_used=$(free -m | awk 'NR==2' | awk '{print $6}') + cache_used=$(free -m | awk 'NR==2' | awk '{print $7}') + #获得被使用内存,所以这部分可用于可用内存的计算,注意计算方法 + actual_used_all=$[memery_all-(free+buffer_used+cache_used)] + #获得实际占用的内存 + actual_used_all=`expr $memery_all - $free + $buffer_used + $cache_used ` + memery_percent=$(echo "scale=4;$system_memery_used / $memery_all" | bc) + memery_percent2=$(echo "scale=4; $actual_used_all / $memery_all" | bc) + percent_part1=$(echo $memery_percent | cut -c 2-3) + percent_part2=$(echo $memery_percent | cut -c 4-5) + percent_part11=$(echo $memery_percent2 | cut -c 2-3) + percent_part22=$(echo $memery_percent2 | cut -c 4-5) + + #获得占用内存(操作系统角度) + echo -e "\033[32m system memery is already use: $percent_part1.$percent_part2% \033[0m" + #获得实际内存占用率 + echo -e "\033[32m actual memery is already use: $percent_part11.$percent_part22% \033[0m" + echo -e "\033[32m buffer is already used : $buffer_used M \033[0m" + echo -e "\033[32m cache is already used : $cache_used M \033[0m" +} + +function getServiceStatus(){ + echo "" + echo -e "\033[33m*************************************************服务检查*******************************************************\033[0m" + echo "" + if [[ $centosVersion > 7 ]];then + conf=$(systemctl list-unit-files --type=service --state=enabled --no-pager | grep "enabled") + process=$(systemctl list-units --type=service --state=running --no-pager | grep ".service") + else + conf=$(/sbin/chkconfig | grep -E ":on|:启用") + process=$(/sbin/service --status-all 2>/dev/null | grep -E "is running|正在运行") + fi + echo -e "\033[36m******************服务配置******************\033[0m" + echo "$conf" | column -t + echo "" + echo -e "\033[36m**************正在运行的服务****************\033[0m" + echo "$process" +} + +function getAutoStartStatus(){ + echo "" + echo -e "\033[33m***********************************************自启动检查*******************************************************\033[0m" + echo -e "\033[36m****************自启动命令*****************\033[0m" + conf=$(grep -v "^#" /etc/rc.d/rc.local| sed '/^$/d') + echo "$conf" +} + +function getLoginStatus(){ + echo "" + echo -e "\033[33m************************************************登录检查********************************************************\033[0m" + last | head +} + +function getNetworkStatus(){ + echo "" + echo -e "\033[33m************************************************网络检查********************************************************\033[0m" + if [[ $centosVersion < 7 ]];then + /sbin/ifconfig -a | grep -v packets | grep -v collisions | grep -v i + net6 + else + #ip a + for i in $(ip link | grep BROADCAST | awk -F: '{print $2}');do ip add show $i | grep -E "BROADCAST|global"| awk '{print $2}' | tr '\n' ' ' ;echo "" ;done + fi + GATEWAY=$(ip route | grep default | awk '{print $3}') + DNS=$(grep nameserver /etc/resolv.conf| grep -v "#" | awk '{print $2}' | tr '\n' ',' | sed 's/,$//') + echo "" + echo "网关:$GATEWAY " + echo "DNS:$DNS" + #报表信息 + IP=$(ip -f inet addr | grep -v 127.0.0.1 | grep inet | awk '{print $NF,$2}' | tr '\n' ',' | sed 's/,$//') + MAC=$(ip link | grep -v "LOOPBACK\|loopback" | awk '{print $2}' | sed 'N;s/\n//' | tr '\n' ',' | sed 's/,$//') + echo "" +ping -c 4 www.baidu.com >/dev/null 2>&1 +if [ $? -eq 0 ];then + echo "" + echo -e "\033[32m网络连接:正常!\033[0m" +else + echo "" + echo -e "\033[31m网络连接:异常!\033[0m" +fi +} + +function getListenStatus(){ + echo "" + echo -e "\033[33m***********************************************监听检查********************************************************\033[0m" + TCPListen=$(ss -ntul | column -t) + echo "$TCPListen" +} + +function getCronStatus(){ + echo "" + echo -e "\033[33m**********************************************计划任务检查******************************************************\033[0m" + Crontab=0 + for shell in $(grep -v "/sbin/nologin" /etc/shells);do + for user in $(grep "$shell" /etc/passwd| awk -F: '{print $1}');do + crontab -l -u $user >/dev/null 2>&1 + status=$? + if [ $status -eq 0 ];then + echo -e "\033[36m************$user用户的定时任务**************\033[0m" + crontab -l -u $user + let Crontab=Crontab+$(crontab -l -u $user | wc -l) + echo "" + fi + done + done + #计划任务 + #find /etc/cron* -type f | xargs -i ls -l {} | column -t + #let Crontab=Crontab+$(find /etc/cron* -type f | wc -l) +} + +function getHowLongAgo(){ + # 计算一个时间戳离现在有多久了 + datetime="$*" + [ -z "$datetime" ] && echo `stat /etc/passwd|awk "NR==6"` + Timestamp=$(date +%s -d "$datetime") + Now_Timestamp=$(date +%s) + Difference_Timestamp=$(($Now_Timestamp-$Timestamp)) + days=0;hours=0;minutes=0; + sec_in_day=$((60*60*24)); + sec_in_hour=$((60*60)); + sec_in_minute=60 + while (( $(($Difference_Timestamp-$sec_in_day)) > 1 )) + do + let Difference_Timestamp=Difference_Timestamp-sec_in_day + let days++ + done + while (( $(($Difference_Timestamp-$sec_in_hour)) > 1 )) + do + let Difference_Timestamp=Difference_Timestamp-sec_in_hour + let hours++ + done + echo "$days 天 $hours 小时前" +} + +function getUserLastLogin(){ + # 获取用户最近一次登录的时间,含年份 + # 很遗憾last命令不支持显示年份,只有"last -t YYYYMMDDHHMMSS"表示某个时间之间的登录,我 + # 们只能用最笨的方法了,对比今天之前和今年元旦之前(或者去年之前和前年之前……)某个用户 + # 登录次数,如果登录统计次数有变化,则说明最近一次登录是今年。 + username=$1 + : ${username:="`whoami`"} + thisYear=$(date +%Y) + oldesYear=$(last | tail -n1 | awk '{print $NF}') + while(( $thisYear >= $oldesYear));do + loginBeforeToday=$(last $username | grep $username | wc -l) + loginBeforeNewYearsDayOfThisYear=$(last $username -t $thisYear"0101000000" | grep $username | wc -l) + if [ $loginBeforeToday -eq 0 ];then + echo "从未登录过" + break + elif [ $loginBeforeToday -gt $loginBeforeNewYearsDayOfThisYear ];then + lastDateTime=$(last -i $username | head -n1 | awk '{for(i=4;i<(NF-2);i++)printf"%s ",$i}')" $thisYear" + lastDateTime=$(date "+%Y-%m-%d %H:%M:%S" -d "$lastDateTime") + echo "$lastDateTime" + break + else + thisYear=$((thisYear-1)) + fi + done +} + +function getUserStatus(){ + echo "" + echo -e "\033[33m*************************************************用户检查*******************************************************\033[0m" + #/etc/passwd 最后修改时间 + pwdfile="$(cat /etc/passwd)" + Modify=$(stat /etc/passwd | grep Modify | tr '.' ' ' | awk '{print $2,$3}') + echo "/etc/passwd: $Modify ($(getHowLongAgo $Modify))" + echo "" + echo -e "\033[36m******************特权用户******************\033[0m" + RootUser="" + for user in $(echo "$pwdfile" | awk -F: '{print $1}');do + if [ $(id -u $user) -eq 0 ];then + echo "$user" + RootUser="$RootUser,$user" + fi + done + echo "" + echo -e "\033[36m******************用户列表******************\033[0m" + USERs=0 + echo "$( + echo "用户名 UID GID HOME SHELL 最后一次登录" + for shell in $(grep -v "/sbin/nologin" /etc/shells);do + for username in $(grep "$shell" /etc/passwd| awk -F: '{print $1}');do + userLastLogin="$(getUserLastLogin $username)" + echo "$pwdfile" | grep -w "$username" |grep -w "$shell"| awk -F: -v lastlogin="$(echo "$userLastLogin" | tr ' ' '_')" '{print $1,$3,$4,$6,$7,lastlogin}' + done + let USERs=USERs+$(echo "$pwdfile" | grep "$shell"| wc -l) + done + )" | column -t + echo "" + echo -e "\033[36m******************空密码用户****************\033[0m" + USEREmptyPassword="" + for shell in $(grep -v "/sbin/nologin" /etc/shells);do + for user in $(echo "$pwdfile" | grep "$shell" | cut -d: -f1);do + r=$(awk -F: '$2=="!!"{print $1}' /etc/shadow | grep -w $user) + if [ ! -z $r ];then + echo $r + USEREmptyPassword="$USEREmptyPassword,"$r + fi + done + done + echo "" + echo -e "\033[36m*****************相同ID用户*****************\033[0m" + USERTheSameUID="" + UIDs=$(cut -d: -f3 /etc/passwd | sort | uniq -c | awk '$1>1{print $2}') + for uid in $UIDs;do + echo -n "$uid"; + USERTheSameUID="$uid" + r=$(awk -F: 'ORS="";$3=='"$uid"'{print ":",$1}' /etc/passwd) + echo "$r" + echo "" + USERTheSameUID="$USERTheSameUID $r," + done + #报表信息 + report_USERs="$USERs" + report_USEREmptyPassword=$(echo $USEREmptyPassword | sed 's/^,//') + report_USERTheSameUID=$(echo $USERTheSameUID | sed 's/,$//') + report_RootUser=$(echo $RootUser | sed 's/^,//') +} + +function getPasswordStatus { + echo "" + echo -e "\033[33m*************************************************密码检查*******************************************************\033[0m" + pwdfile="$(cat /etc/passwd)" + echo "" + echo -e "\033[36m****************密码过期检查****************\033[0m" + result="" + for shell in $(grep -v "/sbin/nologin" /etc/shells);do + for user in $(echo "$pwdfile" | grep "$shell" | cut -d: -f1);do + get_expiry_date=$(/usr/bin/chage -l $user | grep 'Password expires' | cut -d: -f2) + if [[ $get_expiry_date = ' never' || $get_expiry_date = 'never' ]];then + printf "%-15s 永不过期\n" $user + result="$result,$user:never" + else + password_expiry_date=$(date -d "$get_expiry_date" "+%s") + current_date=$(date "+%s") + diff=$(($password_expiry_date-$current_date)) + let DAYS=$(($diff/(60*60*24))) + printf "%-15s %s天后过期\n" $user $DAYS + result="$result,$user:$DAYS days" + fi + done + done + report_PasswordExpiry=$(echo $result | sed 's/^,//') + echo "" + echo -e "\033[36m****************密码策略检查****************\033[0m" + grep -v "#" /etc/login.defs | grep -E "PASS_MAX_DAYS|PASS_MIN_DAYS|PASS_MIN_LEN|PASS_WARN_AGE" +} + +function getSudoersStatus(){ + echo "" + echo -e "\033[33m**********************************************Sudoers检查*******************************************************\033[0m" + conf=$(grep -v "^#" /etc/sudoers| grep -v "^Defaults" | sed '/^$/d') + echo "$conf" + echo "" +} + +function getInstalledStatus(){ + echo "" + echo -e "\033[33m*************************************************软件检查*******************************************************\033[0m" + rpm -qa --last | head | column -t +} + +function getProcessStatus(){ + echo "" + echo -e "33[33m*******************************************************进程检查*******************************************************33[0m" + if [ $(ps -ef | grep defunct | grep -v grep | wc -l) -ge 1 ];then + echo "" + echo -e "\033[36m***************僵尸进程***************\033[0m" + ps -ef | head -n1 + ps -ef | grep defunct | grep -v grep + fi + echo "" + echo -e "\033[36m************CPU占用TOP 10进程*************\033[0m" + echo -e "PID %MEM RSS COMMAND + $(ps aux | awk '{print $2, $4, $6, $11}' | sort -k3rn | head -n 10 )"| column -t + echo "" + echo -e "\033[36m************内存占用TOP 10进程*************\033[0m" + top b -n1 | head -17 | tail -11 + #报表信息 + report_DefunctProsess="$(ps -ef | grep defunct | grep -v grep|wc -l)" +} + +function getSyslogStatus(){ + echo "" + echo -e "\033[33m***********************************************syslog检查*******************************************************\033[0m" + echo "SYSLOG服务状态:$(getState rsyslog)" + echo "" + echo -e "\033[36m***************rsyslog配置******************\033[0m" + cat /etc/rsyslog.conf 2>/dev/null | grep -v "^#" | grep -v "^\\$" | sed '/^$/d' | column -t +} +function getFirewallStatus(){ + echo "" + echo -e "\033[33m***********************************************防火墙检查*******************************************************\033[0m" + echo -e "\033[36m****************防火墙状态******************\033[0m" + if [[ $centosVersion = 7 ]];then + systemctl status firewalld >/dev/null 2>&1 + status=$? + if [ $status -eq 0 ];then + s="active" + elif [ $status -eq 3 ];then + s="inactive" + elif [ $status -eq 4 ];then + s="permission denied" + else + s="unknown" + fi + else + s="$(getState iptables)" + fi + echo "firewalld: $s" + echo "" + echo -e "\033[36m****************防火墙配置******************\033[0m" + cat /etc/sysconfig/firewalld 2>/dev/null +} +function getSNMPStatus(){ + #SNMP服务状态,配置等 + echo "" + echo -e "\033[33m***********************************************SNMP检查*********************************************************\033[0m" + status="$(getState snmpd)" + echo "SNMP服务状态:$status" + echo "" + if [ -e /etc/snmp/snmpd.conf ];then + echo "/etc/snmp/snmpd.conf" + echo "--------------------" + cat /etc/snmp/snmpd.conf 2>/dev/null | grep -v "^#" | sed '/^$/d' + fi +} + +function getState(){ + if [[ $centosVersion < 7 ]];then + if [ -e "/etc/init.d/$1" ];then + if [ `/etc/init.d/$1 status 2>/dev/null | grep -E "is running|正在运行" | wc -l` -ge 1 ];then + r="active" + else + r="inactive" + fi + else + r="unknown" + fi + else + #CentOS 7+ + r="$(systemctl is-active $1 2>&1)" + fi + echo "$r" +} + +function getSSHStatus(){ + #SSHD服务状态,配置,受信任主机等 + echo "" + echo -e "\033[33m************************************************SSH检查*********************************************************\033[0m" + #检查受信任主机 + pwdfile="$(cat /etc/passwd)" + echo "SSH服务状态:$(getState sshd)" + Protocol_Version=$(cat /etc/ssh/sshd_config | grep Protocol | awk '{print $2}') + echo "SSH协议版本:$Protocol_Version" + echo "" + echo -e "\033[36m****************信任主机******************\033[0m" + authorized=0 + for user in $(echo "$pwdfile" | grep /bin/bash | awk -F: '{print $1}');do + authorize_file=$(echo "$pwdfile" | grep -w $user | awk -F: '{printf $6"/.ssh/authorized_keys"}') + authorized_host=$(cat $authorize_file 2>/dev/null | awk '{print $3}' | tr '\n' ',' | sed 's/,$//') + if [ ! -z $authorized_host ];then + echo "$user 授权 \"$authorized_host\" 无密码访问" + fi + let authorized=authorized+$(cat $authorize_file 2>/dev/null | awk '{print $3}'|wc -l) + done + echo "" + echo -e "\033[36m*******是否允许ROOT远程登录***************\033[0m" + config=$(cat /etc/ssh/sshd_config | grep PermitRootLogin) + firstChar=${config:0:1} + if [ $firstChar == "#" ];then + PermitRootLogin="yes" + else + PermitRootLogin=$(echo $config | awk '{print $2}') + fi + echo "PermitRootLogin $PermitRootLogin" + echo "" + echo -e "\033[36m*************ssh服务配置******************\033[0m" + cat /etc/ssh/sshd_config | grep -v "^#" | sed '/^$/d' +} + +function getNTPStatus(){ + #NTP服务状态,当前时间,配置等 + echo "" + echo -e "\033[33m***********************************************NTP检查**********************************************************\033[0m" + if [ -e /etc/ntp.conf ];then + echo "NTP服务状态:$(getState ntpd)" + echo "" + echo -e "\033[36m*************NTP服务配置******************\033[0m" + cat /etc/ntp.conf 2>/dev/null | grep -v "^#" | sed '/^$/d' + fi +} + + +function getJDKStatus(){ +echo "" +echo -e "\033[33m************************************************JDK检查*********************************************************\033[0m" +java -version 2>/dev/null +if [ $? -eq 0 ];then +java -version 2>&1 +fi +echo "JAVA_HOME=\"$JAVA_HOME\"" +#报表信息 +report_JDK="$(java -version 2>&1 | grep version | awk '{print $1,$3}' | tr -d '"')" +} + +function getJps(){ + echo "" + echo -e "\033[33m**************************************************系统java进程检查****************************************************\033[0m" + jps + jps_output=$(jps) + pids=$(echo "$jps_output" | awk '{print $1}') # 获取进程ID + + for pid in $pids; do + echo "正在查看进程ID为 $pid 的具体信息..." + # 根据进程ID查看具体信息 + echo `ps -aux | grep $pid` + done +} + +function getNetstat(){ + echo "" + echo -e "\033[33m**************************************************系统网络端口程序监听****************************************************\033[0m" + netstat -nltp +} + +function check(){ + version + getJDKStatus + getSystemStatus + get_resource + getCpuStatus + getMemStatus + getDiskStatus + getNetworkStatus + getListenStatus + getProcessStatus + getServiceStatus + getAutoStartStatus + getLoginStatus + getCronStatus + getUserStatus + getPasswordStatus + getSudoersStatus + getFirewallStatus + getSSHStatus + getSyslogStatus + getSNMPStatus + getNTPStatus + getInstalledStatus + getProgress + getJps + getNetstat +} +#执行检查并保存检查结果 +check > $RESULTFILE +echo -e "\033[44;37m 主机巡检结果存放在:$RESULTFILE \033[0m" + +#上传检查结果的文件 +#curl -F "filename=@$RESULTFILE" "$uploadHostDailyCheckApi" 2>/dev/null +cat $RESULTFILE +