堡垒机实例

堡垒机实例

paramiko---SSHClient

基于SSH用于连接远程服务器并执行相关操作，

import paramiko
  
# 创建SSH对象
ssh = paramiko.SSHClient()
# 允许连接不在know_hosts文件中的主机
ssh.set_missing_host_key_policy(paramiko.AutoAddPolicy())
# 连接服务器
ssh.connect(hostname='c1.salt.com', port=22, username='wupeiqi', password='123')
  
# 执行命令
stdin, stdout, stderr = ssh.exec_command('df')
# 获取命令结果
result = stdout.read()
  
# 关闭连接
ssh.close()

SSHClient本质上封装transport

import paramiko

transport = paramiko.Transport(('hostname', 22))
transport.connect(username='wupeiqi', password='123')

ssh = paramiko.SSHClient()
ssh._transport = transport

stdin, stdout, stderr = ssh.exec_command('df')
print stdout.read()

transport.close()

import paramiko
 
private_key = paramiko.RSAKey.from_private_key_file('/home/auto/.ssh/id_rsa')
 
# 创建SSH对象
ssh = paramiko.SSHClient()
# 允许连接不在know_hosts文件中的主机
ssh.set_missing_host_key_policy(paramiko.AutoAddPolicy())
# 连接服务器
ssh.connect(hostname='c1.salt.com', port=22, username='wupeiqi', key=private_key)
 
# 执行命令
stdin, stdout, stderr = ssh.exec_command('df')
# 获取命令结果
result = stdout.read()
 
# 关闭连接
ssh.close()

SSHClient本质上封装transport

import paramiko

private_key = paramiko.RSAKey.from_private_key_file('/home/auto/.ssh/id_rsa')

transport = paramiko.Transport(('hostname', 22))
transport.connect(username='wupeiqi', pkey=private_key)

ssh = paramiko.SSHClient()
ssh._transport = transport

stdin, stdout, stderr = ssh.exec_command('df')

transport.close()

paramiko---SFTPClient

 

基于用户名密码的上传下载

import paramiko
 
transport = paramiko.Transport(('hostname',22))
transport.connect(username='wupeiqi',password='123')
 
sftp = paramiko.SFTPClient.from_transport(transport)
# 将location.py 上传至服务器 /tmp/test.py
sftp.put('/tmp/location.py', '/tmp/test.py')
# 将remove_path 下载到本地 local_path
sftp.get('remove_path', 'local_path')
 
transport.close()

 

 

基于公私钥的上传下载

 

 

import paramiko
 
private_key = paramiko.RSAKey.from_private_key_file('/home/auto/.ssh/id_rsa')
transport = paramiko.Transport(('hostname', 22))
transport.connect(username='wupeiqi', pkey=private_key )
sftp = paramiko.SFTPClient.from_transport(transport)
# 将location.py 上传至服务器 /tmp/test.py
sftp.put('/tmp/location.py', '/tmp/test.py')
# 将remove_path 下载到本地 local_path
sftp.get('remove_path', 'local_path')
 
transport.close()

 

 

#!/usr/bin/env python
# -*- coding:utf-8 -*-
import paramiko
import uuid

class Haproxy(object):

    def __init__(self):
        self.host = 'localhost'
        self.port = 22
        self.username = 'root'
        self.pwd = '123'
        self.__k = None

    def create_file(self):
        file_name = str(uuid.uuid4())
        with open(file_name,'w') as f:
            f.write('sb')
        return file_name

    def run(self):
        self.connect()
        self.upload()
        self.rename()
        self.close()

    def connect(self):
        transport = paramiko.Transport((self.host,self.port))
        transport.connect(username=self.username,password=self.pwd)
        self.__transport = transport

    def close(self):

        self.__transport.close()

    def upload(self):
        # 连接，上传
        file_name = self.create_file()

        sftp = paramiko.SFTPClient.from_transport(self.__transport)
        # 将location.py 上传至服务器 /tmp/test.py
        sftp.put(file_name, '/home/wupeiqi/tttttttttttt.py')

    def rename(self):

        ssh = paramiko.SSHClient()
        ssh._transport = self.__transport
        # 执行命令
        stdin, stdout, stderr = ssh.exec_command('mv /home/wupeiqi/tttttttttttt.py /home/wupeiqi/ooooooooo.py')
        # 获取命令结果
        result = stdout.read()


ha = Haproxy()
ha.run()

 

堡垒机的实现

 

堡垒机执行流程：

 

1. 1. 管理员为用户在服务器上创建账号（将公钥放置服务器，或者使用用户名密码）
   2. 用户登陆堡垒机，输入堡垒机用户名密码，现实当前用户管理的服务器列表
   3. 用户选择服务器，并自动登陆
   4. 执行操作并同时将用户操作记录

 

 

 

#!/usr/bin/env python
# -*- coding:utf8 -*-
# written by liYang
import paramiko
import sys
import tty
import termios
import select
import socket
import MySQLdb


class MyJump(object):

    def __init__(self, port=22):
        self.port = port

    def __get_login_from_mysql(self):
        """
        mysql> select user_name,group_name,host_name
                    from users,user_group,user_host
                    where users.group_id = user_group.group_id
                        and users.host_id = user_host.host_id;
        +-----------+------------+----------------+
        | user_name | group_name | host_name      |
        +-----------+------------+----------------+
        | alex      | staff      | 192.168.122.24 |
        | eric      | staff      | 192.168.122.23 |
        | liyang    | admin      | 192.168.122.20 |
        | seven     | staff      | 192.168.122.22 |
        | xiyu      | ops        | 192.168.122.21 |
        +-----------+------------+----------------+
        """
        conn = MySQLdb.connect(host="127.0.0.1",
                               user="root",
                               passwd="123456",
                               db="hostmanager")

        cur = conn.cursor()

        reCount = cur.execute("select user_name,host_name,group_name \
                           from users,user_group,user_host \
                           where users.group_id = user_group.group_id \
                                and users.host_id = user_host.host_id;")
        res = cur.fetchall()
        self.__result = res
        cur.close()
        conn.close()
        # print reCount
        # print res
        # print "host list: "
        # for i in res:
        #    print "\t%s\t%s\t%s" % (i[0], i[1], i[2])

    def operation(self):
        print "host list: "
        for i in self.__result:
            print "\t%s\t%s\t%s" % (i[0], i[1], i[2])
        
        hostname = str(raw_input("your host: "))
        user = str(raw_input("your name: "))
        password = str(raw_input("your password: "))

        # login to remote server
        sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
        sock.connect((hostname, self.port))
        tran = paramiko.Transport(sock)
        tran.start_client()
        tran.auth_password(user, password)

        chan = tran.open_session()
        # 获取一个终端
        chan.get_pty()
        # 激活终端
        chan.invoke_shell()
        oldtty = termios.tcgetattr(sys.stdin)
        try:
            tty.setraw(sys.stdin.fileno())
            chan.settimeout(0.0)
            f = open("record", "a")
            while True:
                r, w, e = select.select([chan, sys.stdin], [], [], 1)
                if chan in r:
                    try:
                        x = chan.recv(1024)
                        if len(x) == 0:
                            print '\r\n*** EOF\r\n',
                            f.close()
                            break
                        sys.stdout.write(x)
                        sys.stdout.flush()
                    except socket.timeout:
                        pass
                if sys.stdin in r:
                    x = sys.stdin.read(1)
                    if len(x) == 0:
                        break
                    f.write(x)
                    chan.send(x)

        finally:
            # 重新设置终端属性
            termios.tcsetattr(sys.stdin, termios.TCSADRAIN, oldtty)

        chan.close()
        tran.close()

    def run(self):
        self.__get_login_from_mysql()
        self.operation()

mj = MyJump()
mj.run()

 

 

 

数据库操作

Python 操作 Mysql 模块的安装

linux：
    yum install MySQL-python
window：
    https://files.cnblogs.com/files/wupeiqi/py-mysql-win.zip

 

Python MySQL API

插入数据、删除数据、修改数据，多是在cursor处执行SQL语句。

import MySQLdb
  
conn = MySQLdb.connect(host='127.0.0.1',user='root',passwd='1234',db='mydb')
  
cur = conn.cursor()
  
reCount = cur.execute('insert into UserInfo(Name,Address) values(%s,%s)',('alex','usa'))
# reCount = cur.execute('insert into UserInfo(Name,Address) values(%(id)s, %(name)s)',{'id':12345,'name':'wupeiqi'})
  
conn.commit()
  
cur.close()
conn.close()
  
print reCount

import MySQLdb

conn = MySQLdb.connect(host='127.0.0.1',user='root',passwd='1234',db='mydb')

cur = conn.cursor()

li =[
     ('alex','usa'),
     ('sb','usa'),
]
reCount = cur.executemany('insert into UserInfo(Name,Address) values(%s,%s)',li)

conn.commit()
cur.close()
conn.close()

print reCount

#!/usr/bin/python  
# import MySQL module  
import MySQLdb  
# get user input  
name = raw_input("Please enter a name: ")  
# connect  
conn = MySQLdb.connect(host="localhost", user="nobody", passwd="nobody", conn="qestar", unix_socket="/tmp/mysql.sock")  
# create a cursor  
cursor = conn.cursor()  
# execute SQL statement  
cursor.execute("INSERT INTO test (nama) VALUES (%s)", name)  
# get ID of last inserted record  
print "ID of last record is ", int(cursor.lastrowid) #最后插入行的主键ID  
print "ID of inserted record is ", int(conn.insert_id()) #最新插入行的主键ID，conn.insert_id()一定要在conn.commit()之前，否则会返回0  
conn.commit()

查询数据

# ############################## fetchone/fetchmany(num)  ##############################
 
import MySQLdb
 
conn = MySQLdb.connect(host='127.0.0.1',user='root',passwd='1234',db='mydb')
cur = conn.cursor()
 
reCount = cur.execute('select * from UserInfo')
 
print cur.fetchone()
print cur.fetchone()
cur.scroll(-1,mode='relative')
print cur.fetchone()
print cur.fetchone()
cur.scroll(0,mode='absolute')
print cur.fetchone()
print cur.fetchone()
 
cur.close()
conn.close()
 
print reCount

# ############################## fetchall  ##############################
 
import MySQLdb
 
conn = MySQLdb.connect(host='127.0.0.1',user='root',passwd='1234',db='mydb')
#cur = conn.cursor(cursorclass = MySQLdb.cursors.DictCursor)
cur = conn.cursor()
 
reCount = cur.execute('select Name,Address from UserInfo')
 
nRet = cur.fetchall()
 
cur.close()
conn.close()
 
print reCount
print nRet
for i in nRet:
    print i[0],i[1]