toby
/
common-tools
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

更新 'cg_init_machine.sh'

This commit is contained in:
toby 2023-03-29 11:40:46 +08:00
parent d9427edfb8
commit 41fec6d673
1 changed files with 13 additions and 11 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
cg_init_machine.sh
View File

@ -18,12 +18,8 @@ END
getent group wheel || groupadd wheel getent group wheel || groupadd wheel
useradd cg_maintain_user useradd cg_maintain_user
if command -v groupmems &> /dev/null
then
groupmems -g wheel -a cg_maintain_user
else
usermod -a -G wheel cg_maintain_user usermod -a -G wheel cg_maintain_user
fi
echo '%wheel ALL=(ALL:ALL) NOPASSWD: ALL' | EDITOR='tee -a' visudo echo '%wheel ALL=(ALL:ALL) NOPASSWD: ALL' | EDITOR='tee -a' visudo
mkdir -p /home/cg_maintain_user/.ssh mkdir -p /home/cg_maintain_user/.ssh
res="$(python3 -c "$GET_KEY_CODE")" res="$(python3 -c "$GET_KEY_CODE")"
@ -31,15 +27,21 @@ echo "$res" >/home/cg_maintain_user/.ssh/authorized_keys
chown -R cg_maintain_user:cg_maintain_user /home/cg_maintain_user chown -R cg_maintain_user:cg_maintain_user /home/cg_maintain_user
chmod 600 /home/cg_maintain_user/.ssh/authorized_keys chmod 600 /home/cg_maintain_user/.ssh/authorized_keys
if command -v yum &> /dev/null if command -v yum >/dev/null >/dev/null 2>&1
then then
yum install -y net-snmp sudo yum install -y net-snmp
else else
apt-get install -y snmpd sudo apt-get install -y snmpd
fi fi
sudo cp /etc/snmp/snmpd.conf /etc/snmp/snmpd.bak sudo cp /etc/snmp/snmpd.conf /etc/snmp/snmpd.bak
sudo curl -L -o /etc/snmp/snmpd.conf https://git.tobyliu.com/toby/common-tools/raw/branch/main/snmpd.conf sudo curl -L -o /etc/snmp/snmpd.conf https://git.tobyliu.com/toby/common-tools/raw/branch/main/snmpd.conf
sudo systemctl restart snmpd sudo systemctl restart snmpd
if command -v firewall-cmd >/dev/null >/dev/null 2>&1
then
sudo firewall-cmd --zone=public --add-service=snmp --permanent sudo firewall-cmd --zone=public --add-service=snmp --permanent
sudo firewall-cmd --reload sudo firewall-cmd --reload
else
sudo ufw allow from any to any port 161
fi