python 实现脚本上传远程服务并执行脚本

Posted 2020-11-07

            python 实现脚本上传远程服务并执行脚本

#!/usr/bin/env python 
#coding:utf-8
import paramiko,os,commands
from scp import SCPClient
def sshclient_execmd(hostname, port, username, password, execmd):
        paramiko.util.log_to_file("paramiko.log")
        global s 
        s = paramiko.SSHClient()
        s.set_missing_host_key_policy(paramiko.AutoAddPolicy())
        s.connect(hostname=hostname, port=port, username=username, password=password)
        stdin, stdout, stderr = s.exec_command (execmd)
        stdin.write("Y")  
        print stdout.read()
def main():
        global hostname,port,username, password
        hostname = "192.168.0.200"
        port = 22
        username = 'root'
        password = '123456'
        execmd = "whoami"
        sshclient_execmd(hostname, port, username, password, execmd)   
        upload("bash -x /data/scrips/linux_system_optimization.sh")  
def upload(cmd):
       scpclient = SCPClient(s.get_transport(),socket_timeout=15.0)
       remotepath='/opt/linux_system_optimization.sh'
       localpath='/data/scrips/linux_system_optimization.sh'
       scpclient.put(localpath, remotepath) 
       os.system(cmd)
       s.close()

if __name__=='__main__':    
       main()

[[email protected]]# cat /data/scrips/linux_system_optimization.sh 
#!/bin/bash
#this is yum and python 
function yum_source_edit()
{
if [  -f /etc/yum.repos.d/CentOS-Base.repo ]
   then 
       mv /etc/yum.repos.d/CentOS-Base.repo /etc/yum.repos.d/CentOS-Base.repo.backup 
      wget -t 3 http://mirrors.163.com/.help/CentOS7-Base-163.repo -O  /etc/yum.repos.d/CentOS-163.rep
    yum clean all && yum makecache
else
      echo -e "\033[42;37m yum 文件不存在,替换文件失败 \033[0m"
fi
}


function command_mode(){
  /usr/bin/yum -y install lrzsz zip ntpdate unzip net-tools g++ gcc gcc-c++ epel-release lsof make cmake  make cmake telnet ntp wget git tree nload namp iftop sysstat iotop bind-utils fuse fuse-libs

}

function kernel_optimization(){

sysctl_file="/etc/sysctl.conf"    
touch $sysctl_file
if [ -f $sysctl_file ];then
cat >> $sysctl_file <<EOF
fs.nr_open = 6553600
fs.file-max = 6553600
net.ipv4.ip_forward = 1
net.ipv4.conf.default.rp_filter = 1
net.ipv4.conf.default.accept_source_route = 0
kernel.sysrq = 0
kernel.core_uses_pid = 1
net.ipv4.tcp_syncookies = 1
kernel.msgmnb = 655360
kernel.msgmax = 655360
kernel.shmmax = 68719476736
kernel.shmall = 4294967296
vm.max_map_count = 262144
net.ipv4.tcp_keepalive_probes = 5
net.ipv4.tcp_keepalive_time = 30
net.ipv4.tcp_max_orphans = 3276800
net.ipv4.tcp_max_syn_backlog = 1048576
net.ipv4.tcp_max_tw_buckets = 50000
net.ipv4.tcp_mem = 94500000 915000000 927000000
net.ipv4.tcp_orphan_retries = 3
net.ipv4.tcp_reordering = 5
net.ipv4.tcp_retrans_collapse = 0
net.ipv4.tcp_retries2 = 5
net.ipv4.tcp_rmem = 4096        87380   4194304
net.ipv4.tcp_sack = 1
net.ipv4.tcp_synack_retries = 1
net.ipv4.tcp_syncookies = 0
net.ipv4.tcp_syn_retries = 1
net.ipv4.tcp_timestamps = 0
net.ipv4.tcp_tw_recycle = 0
net.ipv4.tcp_tw_reuse = 1
net.ipv4.tcp_window_scaling = 1
net.ipv4.tcp_wmem = 4096        16384   4194304
net.ipv6.conf.all.disable_ipv6 = 1
net.ipv6.conf.default.disable_ipv6 = 1
EOF
else
    echo "sysctl.conf 文件不存在," >> /var/log/init.log 
fi
}
kernel_optimization


function file_limit(){
    echo  '*        soft    nproc 6553600' >>/etc/security/limits.conf
    echo  '*        soft    nproc 6553600' >> /etc/security/limits.conf
    echo  '*        hard    nproc 6553600' >> /etc/security/limits.conf
    echo  '*        soft    nofile 6553600' >> /etc/security/limits.conf
    echo  '*        hard    nofile 6553600' >> /etc/security/limits.conf
    echo  '*        soft    memlock unlimited' >> /etc/security/limits.conf
    echo  '*        hard    memlock unlimited' >> /etc/security/limits.conf
}

function ntp_server(){
/usr/bin/echo "*/5 * * * * /usr/sbin/ntpdate ntp1.aliyun.com >/dev/null 2>&1" > /var/spool/cron/root
}


function kernel_upgrade_4x(){
nuber=$(rpm -qa |grep git |wc -l)
if [ $nuber -ge 2  ] 
   then
      rpm --import https://www.elrepo.org/RPM-GPG-KEY-elrepo.org 
      rpm -Uvh http://www.elrepo.org/elrepo-release-7.0-3.el7.elrepo.noarch.rpm 
      yum --enablerepo=elrepo-kernel install kernel-ml -y
      sed -i "s#GRUB_DEFAULT.*#GRUB_DEFAULT=0#g" /etc/default/grub
      grub2-mkconfig -o /boot/grub2/grub.cfg 
      grub2-mkconfig -o /etc/grub2.cfg
      grub2-set-default 0
else
      yum -y install git 
      rpm --import https://www.elrepo.org/RPM-GPG-KEY-elrepo.org 
      rpm -Uvh http://www.elrepo.org/elrepo-release-7.0-3.el7.elrepo.noarch.rpm  
          yum --enablerepo=elrepo-kernel install kernel-ml -y
      sed -i "s#GRUB_DEFAULT.*#GRUB_DEFAULT=0#g" /etc/default/grub
      grub2-mkconfig -o /boot/grub2/grub.cfg
      grub2-mkconfig -o /etc/grub2.cfg
      grub2-set-default 0
fi 

}

main(){
echo -e "\033[32m 开始升级系统内核4x  \033[0m"
#kernel_upgrade_4x
echo -e "\033[32m 开始安装 替换默认yum 源  \033[0m"
yum_source_edit
echo -e "\033[32m 开始安装系统常用命令  \033[0m"
command_mode
echo -e "\033[32m 开始优化系统内核参数  \033[0m"
kernel_optimization
echo -e "\033[32m 开始新增文件句柄数  \033[0m"
file_limit
echo -e "\033[32m 同步系统时间 \033[0m"
ntp_server
}

if [[ $1 == "" ]]
  then
      main  
else
      echo -e "\033[42;37m 不需要携带参数执行,请再试一次 \033[0m"
fi