1. #!/bin/bash
    3. function installopenssh() {
    4. #### 请将此目录放到/opt目录下执行####
    5. #### 配置YUM源####
    7. clear
    8. echo -e  "\t\t########################"
    9. echo -e  "\t\t#     配置YUM仓库      #"
    10. echo -e  "\t\t########################"
    12. sleep 1 
    13. echo -e "启动脚本....................................\033[32m [成功] \033[0m"
    14. sleep 1
    15. echo -e "备份YUM源中.................................\033[33m [稍等] \033[0m"
    16. sleep 3 
    17. mkdir /etc/yum.repos.d/yum.bak &>/dev/null 
    18. mv /etc/yum.repos.d/* /etc/yum.repos.d/yum.bak/ &>/dev/null
    19. id &>/dev/null 
    20. if [ $? -eq 0 ];then
    22. echo -e "备份YUM源...................................\033[32m [成功] \033[0m"
    24. else
    25. echo -e "备份YUM源...................................\033[31m [失败] \033[0m"
    26. fi
    28. sleep 1
    30. echo -e "配置YUM源中.................................\033[33m [稍等] \033[0m"
    31. sleep 1
    32. cat > /etc/yum.repos.d/local.repo <<EOF
    33. [local]
    34. name=localyum
    35. baseurl=ftp://x.x.x.x/pub/centos7.5
    36. enabled=1
    37. gpgcheck=0
    38. EOF
    40. yum clean all &>/dev/null
    42. if [ $? -eq 0 ];then
    43. echo -e "配置YUM源...................................\033[32m [成功] \033[0m"
    44. else 
    45. echo -e "配置YUM源...................................\033[31m [失败] \033[0m"
    46. fi
    48. #### 配置install openssh8.0 ####
    49. cp /etc/ssh/sshd_config /etc/ssh/sshd_config.bak &>/dev/null
    50. echo -e  "\t\t########################"
    51. echo -e  "\t\t#   ssh文件备份完成    #"
    52. echo -e  "\t\t########################"
    53. clear
    54. echo -e  "\t\t########################"
    55. echo -e  "\t\t#   配置安装openssh    #"
    56. echo -e  "\t\t########################"
    58. echo -e "安装依赖包....................................\033[33m [稍等] \033[0m"
    59. RPMS='zlib-devel openssl-devel gcc perl-devel pam-devel unzip'
    60. yum install -y $RPMS &>/dev/null
    62. echo "openssh8.0默认路径为:/opt/openssh.install/RPM/openssh8.0"
    63. echo "openssh8.6默认路径为:/opt/openssh.install/RPM/openssh8.6"
    64. read -p "请输入存放RPM包绝对路径目录位置:" path
    66. if [ -d $path ];then
    67. echo -e "判断文件是否存在.......................... \033[032m [存在] \033[0m"
    68. cd $path
    69. yum -y install * &>/dev/null
    70. if [ $? -eq 0 ];then
    71. echo -e "安装成功...................................\033[032m [成功] \033[0m"   
    72. else
    73. echo -e "安装失败...................................\033[031m [失败] \033[0m"
    74. fi
    75. else
    76. echo -e "判断文件是否存在......................... \033[031m [不存在] \033[0m"
    77. fi
    78. sleep 2
    79. #### 其他 配置####
    80. clear
    81. echo -e  "\t\t########################"
    82. echo -e  "\t\t#    其他 配置         #"
    83. echo -e  "\t\t########################"
    85. cd /etc/ssh/
    86. chmod 400 ssh_host_ecdsa_key ssh_host_ed25519_key ssh_host_rsa_key
    87. if [ $? -eq 0 ];then
    88. echo -e "调整权限....................................\033[032m [成功] \033[0m"
    89. else
    90. echo -e "调整权限....................................\033[031m [失败] \033[0m"
    91. fi
    92. sleep 2 
    94. clear
    95. echo -e  "\t\t########################"
    96. echo -e  "\t\t#     最后的配置       #"
    97. echo -e  "\t\t########################"
    99. cat >> /etc/ssh/sshd_config <<EOF
    100. PubkeyAuthentication yes
    101. PasswordAuthentication yes 
    102. PermitRootLogin yes
    103. EOF
    105. sshd -t &>/dev/null
    106. if [ $? -eq 0 ];then
    107. read -p "完成所有配置是否重启sshd服务[Y/N]:" yn
    108. if [ $yn == y ];then
    109. systemctl restart sshd
    110. sleep 2 
    112. if [ $? -eq 0 ];then
    113. echo "[重启成功]"
    114. else 
    115. echo "[重启失败]"
    116. fi
    118. elif [ $yn == n ];then
    119. echo "[完成]没有重启sshd服务"
    120. else 
    121. echo "[输入无效]"
    122. fi
    123. fi
    124. sleep 2
    125. clear
    126. echo "SElinux开启状态会影响到root用户禁止远程登入状态"
    127. read -p "是否关闭SElinux?[Y/N]:" yn2
    129. if [ $yn2 == y ];then
    130. setenforce 0
    131. sed -i  s/SELINUX=enforcing/SELINUX=disabled/g /etc/selinux/config
    132. echo "[已关闭]"
    133. elif [ $yn2 == n ];then
    134. echo "[不进行操作]"
    135. else
    136. echo "[输入无效]"
    137. fi
    139. #### raw格式优化 ####
    140. cp /etc/ssh/sshd_config /etc/ssh/sshd_config.bak &>/dev/null
    141. rm -rf /etc/ssh/sshd_config &>/dev/null
    142. cp /opt/openssh.install/sshd_config /etc/ssh/ &>/dev/null
    143. systemctl restart sshd &>/dev/null
    145. }
    147. #### 安装telnet ####
    148. function telnet_install() {
    149. yum -y localinstall /opt/openssh.install/telent/* &>/dev/null
    150. cp telent/telnet /etc/xinetd.d/
    151. mv /etc/securetty  /etc/securetty.bak &>/dev/null
    152. systemctl restart xinetd
    154. #### firewalld ####
    155. firewall-cmd --add-service=telnet --permanent &>/dev/null
    156. firewall-cmd --reload &>/dev/null
    158. }
    160. #### 卸载telnet ####
    162. function telnet_remove() {
    163. rpm -e telnet-0.17-66.el7.x86_64
    164. rpm -e telnet-server-0.17-66.el7.x86_64
    166. firewall-cmd --remove-service=telnet --permanent 
    167. firewall-cmd --reload 
    169. mv /etc/securetty.bak /etc/securetty
    170. mv /etc/xinetd.d/telnet /etc/xinetd.d/telnet.bak
    171. }
    174. ##  =====函数引用===== ##
    176. installopenssh
    177. #telnet_install 
    178. #telnet_remove
    182. 1qaz!QAZ