paramiko是一个用于执行ssh命令的python第三方库,使用该库可实现自动化运维的所有任务,如下是一些常用代码的封装方式,多数代码为半成品,只是敲代码时的备份副本防止丢失,仅供参考。

目前本人巡检百台设备完全无压力,如果要巡检过千台则需要多线程的支持,过万台则需要加入智能判断等。

实现命令执行: 直接使用过程化封装,执行cmd命令.

import paramiko

ssh = paramiko.sshclient()
ssh.set_missing_host_key_policy(paramiko.autoaddpolicy())

def batchcmd(address,username,password,port,command):
  try:
    ssh.connect(hostname=address,username=username,password=password,port=port,timeout=2)
    stdin , stdout , stderr = ssh.exec_command(command)
    result = stdout.read()
    if len(result) != 0:
      result = str(result).replace("\\n", "\n")
      result = result.replace("b'", "").replace("'", "")
      return result
    else:
      return none
  except exception:
    return none

 实现磁盘巡检: 获取磁盘空间并返回字典格式

def getalldiskspace(address,username,password,port):
  ref_dict = {}
  cmd_dict = {"linux\n" : "df | grep -v 'filesystem' | awk '{print $5 \":\" $6}'",
        "aix\n" : "df | grep -v 'filesystem' | awk '{print $4 \":\" $7}'"
        }
  # 首先检测系统版本
  os_version = batchcmd(address,username,password,port,"uname")
  for version,run_cmd in cmd_dict.items():
    if(version == os_version):
      # 根据不同版本选择不同的命令
      os_ref = batchcmd(address,username,password,port,run_cmd)
      ref_list= os_ref.split("\n")
      # 循环将其转换为字典
      for each in ref_list:
        # 判断最后是否为空,过滤最后一项
        if each != "":
          ref_dict[str(each.split(":")[1])] = str(each.split(":")[0])
  return ref_dict

# 磁盘巡检总函数
def diskmain():
  with open("db.json", "r", encoding="utf-8") as read_fp:
    load_json = read_fp.read()
    js = json.loads(load_json)
    base = js.get("base")
    count = len(base)

    for each in range(0,count):
      print("3[37m-3[0m" * 80)
      print("3[35m 检测地址: {0:10} \t 用户名: {1:10} \t 密码: {2:10} \t 端口: {3:4}3[0m".
        format(base[each][1],base[each][2],base[each][3],base[each][4]))
      print("3[37m-3[0m" * 80)

      ref = getalldiskspace(base[each][1],base[each][2],base[each][3],base[each][4])
      for k,v in ref.items():
        # 判断是否存在空盘
        if( v.split("%")[0] != "-"):
          # 将占用百分比转换为整数
          space_ret = int(v.split("%")[0])
          if space_ret >= 70:
            print("3[31m 磁盘分区: {0:30} \t 磁盘占用: {1:5} 3[0m".format(k,v))
            continue
          if space_ret >= 50:
            print("3[33m 磁盘分区: {0:30} \t 磁盘占用: {1:5} 3[0m".format(k, v))
            continue
          else:
            print("3[34m 磁盘分区: {0:30} \t 磁盘占用: {1:5} 3[0m".format(k, v))
            continue
      print()

# 组内传递用户名密码时调用此方法
def groupdiskmain(address,username,password,port):
  ref = getalldiskspace(address,username,password,port)
  for k, v in ref.items():
    if (v.split("%")[0] != "-"):
      space_ret = int(v.split("%")[0])
      if space_ret >= 70:
        print("磁盘分区: {0:30} \t 磁盘占用: {1:5} -> [警告]".format(k, v))
        continue
      if space_ret >= 50:
        print("磁盘分区: {0:30} \t 磁盘占用: {1:5} -> [警惕]".format(k, v))
        continue
      else:
        print("磁盘分区: {0:30} \t 磁盘占用: {1:5} -> [正常]".format(k, v))
        continue
  print()

获取系统内存利用率: 获取系统内存利用率

def getallmemspace(address,username,password,port):
  cmd_dict = {"linux\n" : "cat /proc/meminfo | head -n 2 | awk '{print $2}' | xargs | awk '{print $1 \":\" $2}'",
        "aix\n" : "df | grep -v 'filesystem' | awk '{print $4 \":\" $7}'"
        }
  # 首先检测系统版本
  os_version = batchcmd(address,username,password,port,"uname")
  for version,run_cmd in cmd_dict.items():
    if(version == os_version):
      # 根据不同版本选择不同的命令
      os_ref = batchcmd(address,username,password,port,run_cmd)

      # 首先现将kb转化为mb
      mem_total = math.ceil( int(os_ref.split(":")[0].replace("\n","")) / 1024)
      mem_free = math.ceil(int(os_ref.split(":")[1].replace("\n","")) / 1024)
      mem_used = str( int(mem_total) - int(mem_free))

      # 计算占用空间百分比
      percentage = 100 - int(mem_free / int(mem_total / 100))

      print("内存总计空间: {}".format(str(mem_total) + " mb"))
      print("内存剩余空间: {}".format(str(mem_free) + " mb"))
      print("内存已用空间: {}".format(str(mem_used) + " mb"))
      print("计算百分比: {}".format(str(percentage) + " %"))

获取系统进程信息: 获取系统进程信息,并返回字典格式

def getallprocessspace(address,username,password,port):
  ref_dict = {}
  cmd_dict = {"linux\n" : "ps aux | grep -v 'user' | awk '{print $2 \":\" $11}' | uniq",
        "aix\n" : "ps aux | grep -v 'user' | awk '{print $2 \":\" $12}' | uniq"
        }
  os_version = batchcmd(address,username,password,port,"uname")
  for version,run_cmd in cmd_dict.items():
    if(version == os_version):
      os_ref = batchcmd(address, username, password, port, run_cmd)
      ref_list = os_ref.split("\n")
      for each in ref_list:
        if each != "":
          ref_dict[str(each.split(":")[0])] = str(each.split(":")[1])
  return ref_dict

# 巡检进程是否存在
def processmain():
  with open("db.json", "r", encoding="utf-8") as read_fp:
    load_json = read_fp.read()
    js = json.loads(load_json)

    process = js.get("process")
    process_count = len(process)
    for x in range(0,process_count):
      # 根据process中的值查询base中的账号密码
      base = js.get("base")
      if( list(process[x].keys())[0] == base[x][0] ):
        # 拿到账号密码之后再提取出他们的进程id于进程名
        print("3[37m-3[0m" * 80)
        print("3[35m 检测地址: {0:10} \t 用户名: {1:10} \t 密码: {2:10} \t 端口: {3:4}3[0m".
           format(base[x][1], base[x][2], base[x][3], base[x][4]))
        print("3[37m-3[0m" * 80)

        ref_dic = getallprocessspace(base[x][1],base[x][2],base[x][3],base[x][4])
        # ref_val = 全部进程列表 proc_val = 需要检测的进程列表
        ref_val = list(ref_dic.values())
        proc_val = list(process[x].values())[0]
        # 循环比较是否在列表中
        for each in proc_val:
          flag = each in ref_val
          if(flag == true):
            print("3[34m 进程: {0:50} 状态: √ 3[0m".format(each))
          else:
            print("3[31m 进程: {0:50} 状态: × 3[0m".format(each))

实现剧本运行功能: 针对特定一台主机运行剧本功能,随便写的一个版本,仅供参考

def runrule(address,username,password,port,playbook):
  os_version = batchcmd(address,username,password,port,"uname")
  if(os_version == list(playbook.keys())[0]):
    play = list(playbook.values())[0]
    print()
    print("3[37m-3[0m" * 130)
    print("3[35m 系统类型: {0:4} \t 地址: {1:10} \t 用户名: {2:10} \t 密码: {3:15} \t 端口: {4:4}3[0m"
       .format(os_version.replace("\n",""),address,username,password,port))
    print("3[37m-3[0m" * 130)

    for each in range(0,len(play)):
      runcmd = play[each] + " > /dev/null 2>&1 && echo $?"
      print("3[30m [>] 派发命令: {0:100} \t 状态: {1:5} 3[0m".format(
        runcmd.replace(" > /dev/null 2>&1 && echo $?", ""),"正在派发"))

      os_ref = batchcmd(address, username, password, port, runcmd)
      if(os_ref == "0\n"):
        print("3[34m [√] 运行命令: {0:100} \t 状态: {1:5} 3[0m".format(
          runcmd.replace(" > /dev/null 2>&1 && echo $?",""),"派发完成"))
      else:
        print("3[31m [×] 运行命令: {0:100} \t 状态: {1:5} 3[0m".format(
          runcmd.replace(" > /dev/null 2>&1 && echo $?",""),"派发失败"))
        # 既然失败了,就把剩下的也打出来吧,按照失败处理
        for x in range(each+1,len(play)):
          print("3[31m [×] 运行命令: {0:100} \t 状态: {1:5} 3[0m".format(
            play[x].replace(" > /dev/null 2>&1 && echo $?", ""), "终止执行"))
        break
  else:
    return 0

# 批量: 传入主机组不同主机执行不同剧本
def runplaybook(hostlist,playbook):
  count = len(hostlist)
  error = []
  success = []
  for each in range(0,count):
    ref = runrule(hostlist[each][0],hostlist[each][1],hostlist[each][2],hostlist[each][3],playbook)
    if ref == 0:
      error.append(hostlist[each][0])
    else:
      success.append(hostlist[each][0])
  print("\n\n")
  print("-" * 130)
  print("执行清单")
  print("-" * 130)
  for each in success:
    print("成功主机: {}".format(each))
  for each in error:
    print("失败主机: {}".format(each))

# 运行测试
def playbookrun():
  playbook = \
    {
      "linux\n":
        [
          "ifconfig",
          "vmstat",
          "ls",
          "netstat -an",
          "ifconfis",
          "cat /etc/passwd | grep 'root' | awk '{print $2}'"
        ]
    }

  addr_list = \
    [
      ["192.168.1.127", "root", "1233", "22"],
      ["192.168.1.126", "root", "1203", "22"]
    ]

  # 指定addr_list这几台机器执行playbook剧本
  runplaybook(addr_list,playbook)

过程化实现文件上传下载: 文件传输功能 put上传 get下载

def batchsftp(address,username,password,port,soruce,target,flag):
  transport = paramiko.transport((address, int(port)))
  transport.connect(username=username, password=password)
  sftp = paramiko.sftpclient.from_transport(transport)
  if flag == "put":
    try:
      ret = sftp.put(soruce, target)
      if ret !="":
        transport.close()
        return 1
      else:
        transport.close()
        return 0
      transport.close()
    except exception:
      transport.close()
      return 0
  elif flag == "get":
    try:
      target = str(address + "_" + target)
      os.chdir("./recv_file")
      ret = sftp.get(soruce, target)
      if ret != "":
        transport.close()
        return 1
      else:
        transport.close()
        return 0
      transport.close()
    except exception:
      transport.close()
      return 0

# 批量将本地文件 source 上传到目标 target 中
def putremotefile(source,target):
  with open("db.json", "r", encoding="utf-8") as fp:
    load_json = fp.read()
    js = json.loads(load_json)
    base = js.get("base")

    print("-" * 130)
    print("接收主机 \t\t 登录用户 \t 登录密码 \t 登录端口 \t 本地文件 \t\t 传输到 \t\t\t 传输状态")
    print("-" * 130)

    for each in range(0,len(base)):
      # 先判断主机是否可通信
      ref = batchcmd(base[each][1], base[each][2], base[each][3], base[each][4],"uname")
      if ref == none:
        print("3[31m{0:15} \t {1:6} \t {2:10} \t {3:3} \t {4:10} \t {5:10} \t 未连通3[0m".format(
          base[each][1],base[each][2],base[each][3],base[each][4],source,target))
        continue

      ref = batchsftp(base[each][1],base[each][2],base[each][3],base[each][4],source,target,"put")
      if(ref == 1):
        print("3[34m{0:15} \t {1:6} \t {2:10} \t {3:3} \t {4:10} \t {5:10} \t 传输成功3[0m".format(
          base[each][1],base[each][2],base[each][3],base[each][4],source,target))
      else:
        print("3[31m{0:15} \t {1:6} \t {2:10} \t {3:3} \t {4:10} \t {5:10} \t 传输失败3[0m".format(
          base[each][1], base[each][2], base[each][3], base[each][4], source, target))

# 批量将目标文件拉取到本地特定目录(存在缺陷)
def getremotefile(source,target):
  with open("db.json", "r", encoding="utf-8") as fp:
    load_json = fp.read()
    js = json.loads(load_json)
    base = js.get("base")

    print("-" * 130)
    print("发送主机 \t\t 登录用户 \t 登录密码 \t 登录端口 \t\t 远程文件 \t\t 拉取到 \t\t\t 传输状态")
    print("-" * 130)

    for each in range(0,len(base)):
      ref = batchcmd(base[each][1], base[each][2], base[each][3], base[each][4], "uname")
      if ref == none:
        print("3[31m{0:15} \t {1:6} \t {2:10} \t {3:3} \t {4:10} \t {5:10} \t 未连通3[0m".format(
          base[each][1], base[each][2], base[each][3], base[each][4], source, target))
        continue

      ref = batchsftp(base[each][1],base[each][2],base[each][3],base[each][4],source,target,"get")
      if(ref == 1):
        print("3[34m{0:15} \t {1:6} \t {2:10} \t {3:3} \t {4:10} \t {5:10} \t 传输成功3[0m".format(
          base[each][1],base[each][2],base[each][3],base[each][4],source,target))
      else:
        print("3[31m{0:15} \t {1:6} \t {2:10} \t {3:3} \t {4:10} \t {5:10} \t 传输失败3[0m".format(
          base[each][1], base[each][2], base[each][3], base[each][4], source, target))

另一种命令执行方法:

import paramiko

ssh = paramiko.sshclient()
ssh.set_missing_host_key_policy(paramiko.autoaddpolicy())
def batchcmd(address,username,password,port,command):
  try:
    ssh.connect(hostname=address,username=username,password=password,port=port,timeout=2)
    stdin , stdout , stderr = ssh.exec_command(command)
    result = stdout.read()
    if len(result) != 0:
      return result
    else:
      return -1
  except exception:
    return -1

# 通过获取主机ping状态
def getping():
  fp = open("unix_base.db", "r", encoding="utf-8")
  count = len(open("unix_base.db", "r", encoding="utf-8").readlines())
  print("-" * 100)
  print("{0:20} \t {1:10} \t {2:13} \t {3:5} \t {4:9} \t {5:40}".format("ip地址","机器系统","设备sn","机房位置","存活状态","主机作用"))
  print("-" * 100)
  for each in range(count):
    ref = eval(fp.readline())
    ret = batchcmd(ref[0],ref[5],ref[6],22,"pwd | echo $?")
    if(int(ret)==0):
      print("{0:20} \t {1:10} \t {2:11} \t {3:5} \t {4:9} \t {5:40}".
         format(ref[0],ref[1],ref[2],ref[3],"正常",ref[4]))
    else:
      print("{0:20} \t {1:10} \t {2:13} \t {3:5} \t {4:9} \t {5:40}".
         format(ref[0],ref[1],ref[2],ref[3],"异常",ref[4]))
  fp.close()

# ps aux | grep "usbcfgdev" | grep -v "grep" | awk {'print $2'}
def getprocessstatus():
  fp = open("unix_process.db", "r", encoding="utf-8")
  count = len(open("unix_process.db", "r", encoding="utf-8").readlines())
  for each in range(count):
    proc = eval(fp.readline())
    proc_len = len(proc)
    print("-" * 70)
    print("---> 巡检地址: {0:10} \t 登录用户: {1:7} \t 登录密码: {2:10}".format(proc[0],proc[1],proc[2]))
    print("-" * 70)
    for process in range(3, proc_len):
      command = "ps aux | grep \'{}\' | grep -v \'grep\' | awk '{}' | head -1".format(proc[process],"{print $2}")
      try:
        ref = batchcmd(proc[0],proc[1],proc[2],22,command)
        if(int(ref)!=-1):
          print("进程: {0:18} \t pid: {1:10} \t 状态: {2}".format(proc[process], int(ref),"√"))
        else:
          print("进程: {0:18} \t pid:{1:10} \t 状态: {2}".format(proc[process], 0,"×"))
      except exception:
        print("进程: {0:18} \t pid:{1:10} \t 状态: {2}".format(proc[process], 0,"×"))
    print()
  fp.close()


def getdiskstatus():
  fp = open("unix_disk.db", "r", encoding="utf-8")
  count = len(open("unix_disk.db", "r", encoding="utf-8").readlines())
  for each in range(count):
    proc = eval(fp.readline())
    proc_len = len(proc)
    print("-" * 100)
    print("---> 巡检地址: {0:10} \t 登录系统: {1:7} \t 登录账号: {2:10} 登录密码: {3:10}".
       format(proc[0],proc[1],proc[2],proc[3]))
    print("-" * 100)
    try:
      ref = batchcmd(proc[0], proc[2], proc[3], 22, "df | grep -v 'filesystem'")
      st = str(ref).replace("\\n", "\n")
      print(st.replace("b'", "").replace("'", ""))
    except exception:
      pass
    print()
  fp.close()

# 运行命令
def runcmd(command,system):
  fp = open("unix_disk.db", "r", encoding="utf-8")
  count = len(open("unix_disk.db", "r", encoding="utf-8").readlines())
  for each in range(count):
    proc = eval(fp.readline())
    proc_len = len(proc)

    if proc[1] == system:
      print("-" * 100)
      print("---> 巡检地址: {0:10} \t 登录系统: {1:7} \t 登录账号: {2:10} 登录密码: {3:10}".
         format(proc[0],proc[1],proc[2],proc[3]))
      print("-" * 100)
      try:
        ref = batchcmd(proc[0], proc[2], proc[3], 22, command)
        st = str(ref).replace("\\n", "\n")
        print(st.replace("b'", "").replace("'", ""))
      except exception:
        pass
  fp.close()

面向对象的封装方法: 使用面向对象封装,可极大的提高复用性。

import paramiko

class myssh:
  def __init__(self,address,username,password,default_port = 22):
    self.address = address
    self.default_port = default_port
    self.username = username
    self.password = password

    self.obj = paramiko.sshclient()
    self.obj.set_missing_host_key_policy(paramiko.autoaddpolicy())
    self.obj.connect(self.address,self.default_port,self.username,self.password)
    self.objsftp = self.obj.open_sftp()

  def batchcmd(self,command):
    stdin , stdout , stderr = self.obj.exec_command(command)
    result = stdout.read()
    if len(result) != 0:
      result = str(result).replace("\\n", "\n")
      result = result.replace("b'", "").replace("'", "")
      return result
    else:
      return none

  def getremotefile(self,remotepath,localpath):
    self.objsftp.get(remotepath,localpath)

  def putlocalfile(self,localpath,remotepath):
    self.objsftp.put(localpath,remotepath)


  def getfilesize(self,file_path):
    ref = self.batchcmd("du -s " + file_path + " | awk '{print $1}'")
    return ref

  def closessh(self):
    self.objsftp.close()
    self.obj.close()

if __name__ == '__main__':
  ssh = myssh('192.168.191.3','root','1233',22)

  ref = ssh.batchcmd("ifconfig")
  print(ref)

  sz = ssh.getfilesize("/etc/passwd")
  print(sz)
  ssh.closessh()
第二次封装完善。

import paramiko,os,json,re

class myssh:
  def __init__(self,address,username,password,default_port = 22):
    self.address = address
    self.default_port = default_port
    self.username = username
    self.password = password
    try:
      self.obj = paramiko.sshclient()
      self.obj.set_missing_host_key_policy(paramiko.autoaddpolicy())

      self.obj.connect(self.address,self.default_port,self.username,self.password,timeout=3,allow_agent=false,look_for_keys=false)
      self.objsftp = self.obj.open_sftp()
    except exception:
      pass

  def batchcmd(self,command):
    try:
      stdin , stdout , stderr = self.obj.exec_command(command,timeout=3)
      result = stdout.read()
      if len(result) != 0:
        result = str(result).replace("\\n", "\n")
        result = result.replace("b'", "").replace("'", "")
        return result
      else:
        return none
    except exception:
      return none

  def getremotefile(self,remote_path,local_path):
    try:
      self.objsftp.get(remote_path,local_path)
      return true
    except exception:
      return false

  def putlocalfile(self,localpath,remotepath):
    try:
      self.objsftp.put(localpath,remotepath)
      return true
    except exception:
      return false

  def closessh(self):
    self.objsftp.close()
    self.obj.close()

  # 获取文件大小
  def getfilesize(self,file_path):
    ref = self.batchcmd("du -s " + file_path + " | awk '{print $1}'")
    return ref.replace("\n","")
  # 判断文件是否存在
  def isfile(self,file_path):
    return self.batchcmd("[ -e {} ] && echo 'true' || echo 'false'".format(file_path))

通过eval函数解析执行: 自定义语法规则与函数,通过eval函数实现解析执行. 没写完,仅供参考。

import json,os,sys,math
import argparse,time,re
import paramiko

ssh = paramiko.sshclient()
ssh.set_missing_host_key_policy(paramiko.autoaddpolicy())

def batchcmd(address,username,password,port,command):
  try:
    ssh.connect(hostname=address,username=username,password=password,port=port,timeout=2)
    stdin , stdout , stderr = ssh.exec_command(command)
    result = stdout.read()
    if len(result) != 0:
      result = str(result).replace("\\n", "\n")
      result = result.replace("b'", "").replace("'", "")
      return result
    else:
      return none
  except exception:
    return none


# ------------------------------------------------------------------------
# 内置解析方法

def getdisk(x):
  return str(x)

def getcpuload():
  return str(10)

# 句式解析器,解析句子并执行
def judge(string):
  # 如果匹配到if则执行判断条件解析
  if re.findall(r'if{ (.*?) }', string, re.m) != []:
    # 则继续提取出他的表达式
    ptr = re.compile(r'if[{] (.*?) [}]',re.s)
    subject = re.findall(ptr,string)[0]
    subject_list = subject.split(" ")
    # 拼接语句并执行
    sentence = eval(subject_list[0]) + subject_list[1] + subject_list[2]
    # 组合后执行,返回结果
    if eval(sentence):
      return "if"
    else:
      return false

  # 如果匹配到put则执行上传解析
  elif re.findall(r'put{ (.*?) }', string, re.m) != []:
    print("put")
  return false

# 获取特定目录下所有的剧本
def getallrule():
  rootdir = os.getcwd() + "\\rule\\"
  all_files = [f for f in os.listdir(rootdir)]
  print("-" * 90)
  print("{0:15} \t {1:10} \t {2:10} \t {3:5} \t {4:5}".format("剧本名称","应用平台","应用端口","执行主机数","命令条数"))
  print("-" * 90)
  for switch in all_files:
    # 首先判断文件结尾是否为json
    if( switch.endswith(".json") == true):
      all_switch_dir = rootdir + switch
      try:
        # 判断文件内部是否符合json规范
        with open(all_switch_dir , "r" ,encoding="utf-8") as read_file:
          # 判断是否存在指定字段来识别规范
          load = json.loads(read_file.read())
          if load.get("framework") != none and load.get("task_sequence") != none:
            run_addr_count = len(load.get("address_list"))
            command_count = len(load.get("task_sequence"))
            print("{0:15} \t {1:10} {2:10} \t\t {3:5} \t\t {4:5}".
               format(switch,load.get("framework"),load.get("default_port"),run_addr_count,command_count))
      except valueerror:
        pass

# 指定一个剧本并运行
def runplaybook(rule_name):
  rootdir = os.getcwd() + "\\rule\\"
  all_files = [f for f in os.listdir(rootdir)]
  for switch in all_files:
    if( switch.endswith(".json") == true):
      all_switch_dir = rootdir + switch
      # 寻找到需要加载的剧本地址
      if( switch == rule_name):
        with open(all_switch_dir , "r" ,encoding="utf-8") as read_file:
          data = json.loads(read_file.read())
          address_list = data.get("address_list")
          # 循环每个主机任务
          for each in address_list:
            # 得到剧本内容
            task_sequence = data.get("task_sequence")
            default_port = data.get("default_port")
            print("-" * 90)
            print("地址: {0:15} 用户名: {1:10} 密码: {2:10}".format(each[0],each[1],each[2]))
            print("-" * 90)
            for task in task_sequence:
              flag = judge(task[0])
              if flag == "if":
                ref = batchcmd(each[0],each[1],each[2],default_port,task[1])
                print(ref)
              elif flag == false:
                ref = batchcmd(each[0],each[1],each[2],default_port,task[0])
                print(ref)

if __name__ == "__main__":
  runplaybook("get_log.json")

定义剧本规范如下。

{
 "framework": "centos",
 "version": "7.0",
 "address_list":
 [
  ["192.168.191.3","root","1233"]
 ],
 "default_port": "22",
 "task_sequence":
 [
  ["ifconfig"],
  ["if{ getlastcmdflag() == true }","uname"]
 ]
}

词法分析: 词法分析解析剧本内容。

# 获取特定目录下所有的剧本
def getallrule():
  rootdir = os.getcwd() + "\\rule\\"
  all_files = [f for f in os.listdir(rootdir)]
  print("-" * 90)
  print("{0:15} \t {1:10} \t {2:10} \t {3:5} \t {4:5}".format("剧本名称","应用平台","应用端口","执行主机数","命令条数"))
  print("-" * 90)
  for switch in all_files:
    # 首先判断文件结尾是否为json
    if( switch.endswith(".json") == true):
      all_switch_dir = rootdir + switch
      try:
        # 判断文件内部是否符合json规范
        with open(all_switch_dir , "r" ,encoding="utf-8") as read_file:
          # 判断是否存在指定字段来识别规范
          load = json.loads(read_file.read())
          if load.get("framework") != none and load.get("task_sequence") != none:
            run_addr_count = len(load.get("address_list"))
            command_count = len(load.get("task_sequence"))
            print("{0:15} \t {1:10} {2:10} \t\t {3:5} \t\t {4:5}".
               format(switch,load.get("framework"),load.get("default_port"),run_addr_count,command_count))
      except valueerror:
        pass

# 句式解析器,解析句子并执行
def judge(string):
  # 如果匹配到if则执行判断条件解析
  if re.findall(r'if{ (.*?) }', string, re.m) != []:
    # 则继续提取出他的表达式
    ptr = re.compile(r'if[{] (.*?) [}]',re.s)
    subject = re.findall(ptr,string)[0]
    subject_list = subject.split(" ")

    # 公开接口,执行命令
    ssh = myssh("192.168.191.3","root","1233","22")

    # 组合命令并执行
    sentence = str(eval(subject_list[0]) + subject_list[1] + subject_list[2])
    if eval(sentence):
      return "if",ssh
    else:
      return false

  # 如果匹配到put则执行上传解析
  elif re.findall(r'put{ (.*?) }', string, re.m) != []:
    print("put")
  return false

# 指定一个剧本并运行
def runplaybook(rule_name):
  rootdir = os.getcwd() + "\\rule\\"
  all_files = [f for f in os.listdir(rootdir)]
  for switch in all_files:
    if( switch.endswith(".json") == true):
      all_switch_dir = rootdir + switch
      # 寻找到需要加载的剧本地址
      if( switch == rule_name):
        with open(all_switch_dir , "r" ,encoding="utf-8") as read_file:
          data = json.loads(read_file.read())
          address_list = data.get("address_list")
          # 循环每个主机任务
          for each in address_list:
            # 得到剧本内容
            task_sequence = data.get("task_sequence")
            default_port = data.get("default_port")
            print("-" * 90)
            print("地址: {0:15} 用户名: {1:10} 密码: {2:10}".format(each[0],each[1],each[2]))
            print("-" * 90)
            for task in task_sequence:

              flag,obj = judge(task[0])

              if flag == "if":
                ret = obj.batchcmd(task[1])
                print(ret)
if __name__ == '__main__':
  ret = judge("if{ ssh.getfilesize('/etc/passwd') >= 4 }")
  print(ret)

myssh类最终封装: 通过面向对象对其进行封装,实现了查询cpu,负载,内存利用率,磁盘容量,等通用数据的获取。

import paramiko, math,json

class myssh:
  def __init__(self, address, username, password, default_port):
    self.address = address
    self.default_port = default_port
    self.username = username
    self.password = password
  # 初始化,远程模块
  def init(self):
    try:
      self.ssh_obj = paramiko.sshclient()
      self.ssh_obj.set_missing_host_key_policy(paramiko.autoaddpolicy())
      self.ssh_obj.connect(self.address, self.default_port, self.username, self.password, timeout=3,
                 allow_agent=false, look_for_keys=false)
      self.sftp_obj = self.ssh_obj.open_sftp()
    except exception:
      return false
  # 执行非交互命令
  def batchcmd(self, command):
    try:
      stdin, stdout, stderr = self.ssh_obj.exec_command(command, timeout=3)
      result = stdout.read()
      if len(result) != 0:
        result = str(result).replace("\\n", "\n")
        result = result.replace("b'", "").replace("'", "")
        return result
      else:
        return none
    except exception:
      return none
  # 将远程文件下载到本地
  def getremotefile(self, remote_path, local_path):
    try:
      self.sftp_obj.get(remote_path, local_path)
      return true
    except exception:
      return false
  # 将本地文件上传到远程
  def putlocalfile(self, localpath, remotepath):
    try:
      self.sftp_obj.put(localpath, remotepath)
      return true
    except exception:
      return false
  # 关闭接口
  def closessh(self):
    try:
      self.sftp_obj.close()
      self.ssh_obj.close()
    except exception:
      pass
  # 获取文件大小
  def getfilesize(self, file_path):
    ref = self.batchcmd("du -s " + file_path + " | awk '{print $1}'")
    return ref.replace("\n", "")
  # 判断文件是否存在
  def isfile(self, file_path):
    return self.batchcmd("[ -e {} ] && echo 'true' || echo 'false'".format(file_path))
  # 获取系统型号
  def getsystemversion(self):
    return self.batchcmd("uname")
  # 检测目标主机存活状态
  def getping(self):
    try:
      if self.getsystemversion() != none:
        return true
      else:
        return false
    except exception:
      return false
  # 获取文件列表,并得到大小
  def getfilelist(self, path):
    try:
      ref_list = []
      self.sftp_obj.chdir(path)
      file_list = self.sftp_obj.listdir("./")
      for sub_path in file_list:
        dict = {}
        file_size = self.getfilesize(path + sub_path)
        dict[path + sub_path] = file_size
        ref_list.append(dict)
      return ref_list
    except exception:
      return false
  # 将远程文件全部打包后拉取到本地
  def gettarpackageall(self, path):
    try:
      file_list = self.sftp_obj.listdir(path)
      self.sftp_obj.chdir(path)
      for packagename in file_list:
        self.ssh_obj.exec_command("tar -czf /tmp/{0}.tar.gz {0}".format(packagename))
        self.sftp_obj.get("/tmp/{}.tar.gz".format(packagename), "./file/{}.tar.gz".format(packagename))
        self.sftp_obj.remove("/tmp/{}.tar.gz".format(packagename))
        return true
    except exception:
      return true
  # 获取磁盘空间并返回字典
  def getalldiskspace(self):
    ref_dict = {}
    cmd_dict = {"linux\n": "df | grep -v 'filesystem' | awk '{print $5 \":\" $6}'",
          "aix\n": "df | grep -v 'filesystem' | awk '{print $4 \":\" $7}'"
          }
    try:
      os_version = self.getsystemversion()
      for version, run_cmd in cmd_dict.items():
        if (version == os_version):
          # 根据不同版本选择不同的命令
          os_ref = self.batchcmd(run_cmd)
          ref_list = os_ref.split("\n")
          # 循环将其转换为字典
          for each in ref_list:
            # 判断最后是否为空,过滤最后一项
            if each != "":
              ref_dict[str(each.split(":")[1])] = str(each.split(":")[0])
      return ref_dict
    except exception:
      return false
  # 获取系统内存利用率
  def getallmemspace(self):
    cmd_dict = {"linux\n": "cat /proc/meminfo | head -n 2 | awk '{print $2}' | xargs | awk '{print $1 \":\" $2}'",
          "aix\n": "svmon -g | grep -v 'virtual' | head -n 1 | awk '{print $2 \":\" $4}'"
          }
    try:
      os_version = self.getsystemversion()
      for version, run_cmd in cmd_dict.items():
        if (version == os_version):
          # 根据不同版本选择不同的命令
          os_ref = self.batchcmd(run_cmd)
          # 首先现将kb转化为mb
          mem_total = math.ceil(int(os_ref.split(":")[0].replace("\n", "")) / 1024)
          mem_free = math.ceil(int(os_ref.split(":")[1].replace("\n", "")) / 1024)

          # 计算占用空间百分比
          percentage = 100 - int(mem_free / int(mem_total / 100))
          # 拼接字典数据
          return {"total": str(mem_total), "free": str(mem_free), "percentage": str(percentage)}
    except exception:
      return false
  # 获取系统进程信息,并返回字典格式
  def getallprocessspace(self):
    ref_dict = {}
    cmd_dict = {"linux\n": "ps aux | grep -v 'user' | awk '{print $2 \":\" $11}' | uniq",
          "aix\n": "ps aux | grep -v 'user' | awk '{print $2 \":\" $12}' | uniq"
          }
    try:
      os_version = self.getsystemversion()
      for version, run_cmd in cmd_dict.items():
        if (version == os_version):
          os_ref = self.batchcmd(run_cmd)
          ref_list = os_ref.split("\n")
          for each in ref_list:
            if each != "":
              ref_dict[str(each.split(":")[0])] = str(each.split(":")[1])
      return ref_dict
    except exception:
      return false
  # 获取cpu利用率
  def getcpupercentage(self):
    ref_dict = {}
    cmd_dict = {"linux\n": "vmstat | tail -n 1 | awk '{print $13 \":\" $14 \":\" $15}'",
          "aix\n": "vmstat | tail -n 1 | awk '{print $14 \":\" $15 \":\" $16}'"
          }
    try:
      os_version = self.getsystemversion()
      for version, run_cmd in cmd_dict.items():
        if (version == os_version):
          os_ref = self.batchcmd(run_cmd)
          ref_list = os_ref.split("\n")
          for each in ref_list:
            if each != "":
              each = each.split(":")
              ref_dict = {"us": each[0],"sys":each[1],"idea":each[2]}
      return ref_dict
    except exception:
      return false
  # 获取机器的负载情况
  def getloadavg(self):
    ref_dict = {}
    cmd_dict = {"linux\n": "uptime | awk '{print $10 \":\" $11 \":\" $12}'",
          "aix\n": "uptime | awk '{print $10 \":\" $11 \":\" $12}'"
          }
    try:
      os_version = self.getsystemversion()
      for version, run_cmd in cmd_dict.items():
        if (version == os_version):
          os_ref = self.batchcmd(run_cmd)
          ref_list = os_ref.split("\n")
          for each in ref_list:
            if each != "":
              each = each.replace(",","").split(":")
              ref_dict = {"1avg": each[0],"5avg": each[1],"15avg": each[2]}
              return ref_dict
      return false
    except exception:
      return false
  # 修改当前用户密码
  def setpasswd(self,username,password):
    try:
      os_id = self.batchcmd("id | awk {'print $1'}")
      print(os_id)
      if(os_id == "uid=0(root)\n"):
        self.batchcmd("echo '{}' | passwd --stdin '{}' > /dev/null".format(password,username))
        return true
    except exception:
      return false

# 定义超类,集成基类myssh
class superssh(myssh):
  def __init__(self,address, username, password, default_port):
    super(superssh, self).__init__(address, username, password, default_port)

我们继续为上面的代码加上命令行,让其可以直接使用,这里需要遵循一定的格式规范,我们使用json解析数据,json格式如下.

{
 "aix":
 [
  ["192.168.1.1","root","123123"],
  ["192.168.1.1","root","2019"],
 ],
 "suse":
 [
  ["192.168.1.1","root","123123"],
 ],
 "centos":
  [
  ["192.168.1.1","root","123123"],
  ]
}

接着是主程序代码,如下所示.

# -*- coding: utf-8 -*-
from myssh import myssh
import json,os,sys,argparse

class initjson():
  def __init__(self,db):
    self.db_name = db
  def getplatform(self,plat):
    with open(self.db_name, "r", encoding="utf-8") as read_pointer:
      load_json = json.loads(read_pointer.read())
      for k,v in load_json.items():
        try:
          if k == plat:
            return v
        except exception:
          return none
    return none

if __name__ == "__main__":
  ptr = initjson("database.json")
  parser = argparse.argumentparser()

  parser.add_argument("-g","--group",dest="group",help="指定主机组")
  parser.add_argument("-c","--cmd",dest="cmd",help="指定cmd命令")
  parser.add_argument("--get",dest="get",help="指定获取数据类型<ping>")
  parser.add_argument("--dst", dest="dst_file",help="目标位置")
  parser.add_argument("--src",dest="src_file",help="原文件路径")
  args = parser.parse_args()

  # 批量cmd --group=aix --cmd=ls
  if args.group and args.cmd:
    platform = ptr.getplatform(args.group)
    success,error = [],[]
    for each in platform:
      ssh = myssh(each[0], each[1], each[2], 22)
      if ssh.init() != false:
        print("-" * 140)
        print("主机: {0:15} \t 账号: {1:10} \t 密码: {2:10} \t 命令: {3:30}".
           format(each[0], each[1], each[2], args.cmd))
        print("-" * 140)
        print(ssh.batchcmd(args.cmd))
        ssh.closessh()
        success.append(each[0])
      else:
        error.append(each[0])
        ssh.closessh()
    print("\n\n","-" * 140,
       "\n 执行报告 \n",
       "-" * 140,
       "\n失败主机: {}\n".format(error),
       "-" * 140)

  # 批量获取主机其他数据 --group=centos --get=ping
  if args.group and args.get:
      platform = ptr.getplatform(args.group)
      success, error = [], []
      for each in platform:
        ssh = myssh(each[0], each[1], each[2], 22)
        # 判断是否为ping
        if ssh.init() != false:
          if args.get == "ping":
            ret = ssh.getping()
            if ret == true:
              print("[*] 主机: {} 存活中.".format(each[0]))

          # 收集磁盘数据
          elif args.get == "disk":
            print("-" * 140)
            print("主机: {0:15} \t 账号: {1:10} \t 密码: {2:10}".
               format(each[0], each[1], each[2]))
            print("-" * 140)

            ret = ssh.getalldiskspace()
            for k, v in ret.items():
              if (v.split("%")[0] != "-"):
                space_ret = int(v.split("%")[0])
                if space_ret >= 70:
                  print("磁盘分区: {0:30} \t 磁盘占用: {1:5} -> [警告]".format(k, v))
                  continue
                if space_ret >= 50:
                  print("磁盘分区: {0:30} \t 磁盘占用: {1:5} -> [警惕]".format(k, v))
                  continue
                else:
                  print("磁盘分区: {0:30} \t 磁盘占用: {1:5}".format(k, v))
                  continue
            print()
        else:
          error.append(each[0])
          ssh.closessh()
      print("\n\n", "-" * 140,
         "\n 执行报告 \n",
         "-" * 140,
         "\n失败主机: {}\n".format(error),
         "-" * 140)

  # 实现文件上传过程 --group=centos --src=./a.txt --dst=/tmp/test.txt
  if args.group and args.src_file and args.dst_file:
    platform = ptr.getplatform(args.group)
    success, error = [], []
    for each in platform:
      ssh = myssh(each[0], each[1], each[2], 22)
      if ssh.init() != false:
        ret = ssh.putlocalfile(args.src_file,args.dst_file)
        if ret == true:
          print("主机: {} \t 本地文件: {} \t ---> 传到: {}".format(each[0], args.src_file,args.dst_file))
      else:
        error.append(each[0])
        ssh.closessh()
    print("\n\n", "-" * 140,
       "\n 执行报告 \n",
       "-" * 140,
       "\n失败主机: {}\n".format(error),
       "-" * 140)

简单的使用命令:

远程cmd: python main.py –group=centos –cmd=”free -h | grep -v ‘total'”

判断存活: python main.py –group=centos –get=”ping”

拉取磁盘:python main.py –group=suse –get=”disk”

批量上传文件: python main.py –group=suse –src=”./aaa” –dst=”/tmp/bbb.txt”

由于我的设备少,所以没开多线程,担心开多线程对目标造成过大压力,也没啥必要。

番外: 另外我研究了一个主机分组的小工具,加上命令执行代码量才800行,实现了一个分组数据库,在这里记下使用方法。

默认运行进入一个交互式shell环境。

init = 初始化json文件,showhostlist=显示所有主机,showgroup=显示所有组,showallgroup=显示所有主机包括组。

添加修改与删除记录,命令如下。

添加删除主机组。

通过uuid向主机组中添加或删除主机记录。

测试主机组连通性。

以上就是python如何实现paramiko的二次封装的详细内容,更多关于python实现paramiko的二次封装的资料请关注www.887551.com其它相关文章!