创建FTP或SFTP脚本

#!/bin/bash

#菜单
menu(){
cat </dev/null 2>&1
sed -i 's/SELINUX=enforcing/SELINUX=disabled/g' /etc/selinux/config

check_os=`cat /etc/redhat-release|sed -r 's/.* ([0-9]+)\..*/\1/' |grep -iv base`
[[ $UID -ne 0 ]] && red "请用root用户执行该脚本"  && exit 1

info "正在关闭iptables或firewalld"
if [[ $check_os == 6 ]];then
    service iptables stop
    chkconfig iptables off
else
    systemctl stop firewalld.service
    systemctl disable firewalld.service
fi

check_pkg() {
    rpm -qa | grep -i vsftpd > /dev/null 2>&1
        if [[ $? -ne 0 ]];then
            red "请先安装vsftpd服务端包  yum install vsftpd -y"
            exit 1
        fi

    rpm -qa | grep -w ftp  > /dev/null 2>&1
    if [[ $? -ne 0 ]];then
        red "请先安装ftp客户端包  yum install ftp -y"
        exit 1
    fi
}


check_sshversion() {
min_ssh_version=4.8
ssh_version=$(ssh -V 2>&1 | awk -F \_ '{print $2}'|awk -F p '{print $1}')
if [ $(expr $ssh_version \> $min_ssh_version) -eq 0 ];then
    red "请先升级ssh版本大于4.8"
    exit 1
fi
}

check_user() {
                if cat /etc/passwd | awk -F':' '{print$1}'  | grep -w $user >/dev/null
                then
                    red "系统中已经存在此账号，请重新设置"
                    exit 1
                fi
}


#配置ftp
creat_ftp() {
    useradd -d $home_dir/$dir -s /sbin/nologin $user
    chmod 755 -R $home_dir/$dir
    echo $pass | passwd $user --stdin > /dev/null 2>&1
    touch /etc/vsftpd/chroot_list
    cat /dev/null > /etc/vsftpd/chroot_list
    sed -i 's/^[^#].*pam_shells.so*/#&/g'   /etc/pam.d/vsftpd
    yes | cp -p /etc/vsftpd/vsftpd.conf  /tmp/vsftpd.conf_${time}
    bak_name=`ls -lt /tmp/ |grep -iv total |grep -v 总|grep vsftp| head -n 1 |awk '{print $9}'`
    info "旧的vsftpd配置文件已经备份,备份路径为 /tmp/$bak_name"

cat > /etc/vsftpd/vsftpd.conf < /dev/null 2>&1 || groupadd sftp 
useradd -g sftp -s /bin/false $user
echo $pass | passwd $user --stdin > /dev/null 2>&1

mkdir -p $home_dir/sftp/$user
usermod -d $home_dir/sftp/$user $user
sed -i 's/^[^#].*sftp-server*/#&/g' /etc/ssh/sshd_config

sed -i '/Subsystem/d' /etc/ssh/sshd_config
sed -i '/Match/d' /etc/ssh/sshd_config
sed -i '/ChrootDirectory/d' /etc/ssh/sshd_config
sed -i '/ForceCommand/d' /etc/ssh/sshd_config

echo "Subsystem sftp internal-sftp" >> /etc/ssh/sshd_config
echo "Match Group sftp" >> /etc/ssh/sshd_config
echo "ChrootDirectory $home_dir/sftp/%u" >> /etc/ssh/sshd_config
echo "ForceCommand internal-sftp" >> /etc/ssh/sshd_config

chown root:sftp $home_dir/sftp/$user
chmod 755 $home_dir/sftp/$user
mkdir $home_dir/sftp/$user/upload
chown $user:sftp $home_dir/sftp/$user/upload
chmod 755 $home_dir/sftp/$user/upload
}

check_expect_pkg () {
        rpm -qa | grep -w expect  > /dev/null 2>&1
        if [[ $? -ne 0 ]];then
                red "请先安装expect包,  yum install expect -y"
                exit 1
        fi

        rpm -qa|grep -w tcl  > /dev/null 2>&1
        if [[ $? -ne 0 ]];then
                red "请先安装tcl依赖包 yum install tcl -y"
                exit 1
        fi
}

check_sftp_upload () {
dd if=/dev/zero of=/home/sftp_upload_test_file.txt bs=10M count=1

sftp_port=22
sftp_ip=127.0.0.1

expect <<- EOF
spawn sftp -oPort=${sftp_port} ${sftp_user}@${sftp_ip}
expect  {
    "yes/no" { send "yes\r"; exp_continue }
    "password:" { send "${sftp_pass}\r" }
}
expect "sftp> "
send "cd upload\r"
expect "sftp> "
send "put /home/sftp_upload_test_file.txt\r"
expect "sftp> "
send "ls\r"
expect "sftp> "
send "exit\r"
EOF

if [ ! -f "/home/sftp/${sftp_user}/upload/sftp_upload_test_file.txt" ];then
        red "sftp模拟上传失败,请检查 !!!"
else
        green "sftp上传成功文件测试成功"
    rm -f /home/sftp/${sftp_user}/upload/sftp_upload_test_file.txt
fi

rm -f /home/sftp_upload_test_file.txt

#清理expect进程
ps -aux | grep "expect" | grep -v "grep" | awk '{print $2}' | while read line;
do
    kill -9 $line
done
}


clear
menu
        read -p "请选择菜单编号 1 或 2 或 3 或 4 : " -t 20 num
if [[ $num == 1 ]];
then
        info "您选择了 1 ，正在新建ftp..."
    check_pkg
            read -p "请指定FTP数据存储一级挂载目录 例如 /home 或 /data 或 /data1: " -t 30 home_dir
    check_home_dir
    check_home_dir_null
        read -p "请配置要创建的FTP账号: " -t 30 user
    check_user_null
    check_user
        read -p "请配置FTP账号的密码: " -t 30 pass
    check_pass_null
        read -p "请配置FTP在 $home_dir 下的目录名 例如 ftp_upload: " -t 30 dir
    check_dir_null
    check_dir
    check_old_dir
    creat_ftp
    start_ftp
        test_ftp_upload
        info "FTP账号： $user"
        info "FTP密码： $pass"
        info "FTP本机目录 $home_dir/$dir"
        info "FTP家目录： /"
        echo ""
        info "如果你想开启本机防火墙，请放开 21端口和 50000-60000 连续端口"
        info "如果你不想锁定 $user 的FTP家目录，请将 $user 添加到 /etc/vsftpd/chroot_list 文件中并重启ftp服务"
        echo ""

elif [[ $num == 2 ]];then
        info "您选择了 2 ，正在新建sftp..."
    check_sshversion
                read -p "请配置SFTP数据存储一级目录 例如 /home 或 /data 或 /data1: " -t 30 home_dir
    check_home_dir_null
        check_home_dir
        read -p "请配置要创建的SFTP账号: " -t 30 user
    check_user_null
    check_user

    if [ $user == "sftp" ];then
        red "用户名请不要设置为sftp,脚本退出,请重新设置"
        exit  1
    fi
    
        read -p "请配置SFTP账号密码: " -t 30 pass
    check_pass_null
    
    creat_sftp
    start_sftp
        info "SFTP账号： $user"
        info "SFTP密码： $pass"
        info "SFTP本机目录： $home_dir/sftp/$user/upload"
        info "SFTP家目录：/upload"

elif [[ $num == 3 ]];then
    info "您选择了 3，正在测试SFTP上传功能..."
    check_expect_pkg
    read -p "请输入需要测试的sftp账号: " -t 30 sftp_user
    read -p "请输入需要测试的sftp账号密码: " -t 30 sftp_pass
    check_sftp_upload

elif [[ $num == 4 ]];then
    info "您选择了 4 ，脚本退出"
    exit 1;

else
    red "输入错误或超时，脚本退出"
    exit 1;
fi