ansaurus

Question

Shell scripting noob -- how scriptable is this task?

Answer 1

A:

It's doable but doing automated ssh/sftp is tricky (lots trickier than rsh/rcp used to be)

DVK 2010-02-18 18:00:27

Answer 2

+2 A:

Takes some fiddling. SSH and SCP can be used to do such a thing, but then you need to configure keys, etc.

Quotidian 2010-02-18 18:01:45

Answer 3

+1 A:

Just setup passwordless authentication and run this

scp localfile user@remotehost:location/          # step 1: copy the file
ssh user@remotehost bin/remote_script.sh         # step 2: run remote script

Otto Allmendinger 2010-02-18 18:07:37

Answer 4

+1 A:

"yes, that's easy, and just the sort of thing shell scripts are for"

The one caveat is that you'll want to set up some SSH authentication method that doesn't require a password to be typed into the console. (As a quick example of what I'm referring to, see http://www.eng.cam.ac.uk/help/jpmg/ssh/authorized_keys_howto.html.)

Here's a rough, untested bash script to do what you want:

#!/bin/bash
SERVER_ACCOUNT="username"
SERVER_A="servera.domain.com"
SERVER_B="serverb.domain.com"
TARGET_PATH="/path/to/destination/on/server"
WARFILE="myApp.war"
scp $WARFILE $SERVER_ACCOUNT@$SERVER_A:$TARGET_PATH
ssh $SERVER_A "scp $TARGET_PATH/$WARFILE $SERVER_ACCOUNT@SERVER_B:$TARGET_PATH"
ssh $SERVER_B "jar xvf $TARGET_PATH/$WARFILE"

RTBarnard 2010-02-18 18:08:14

Awesome. Thanks very much.

morgancodes 2010-02-18 18:09:30

Actually, seems a little uncomfortable for me to set up these keys. As I understand it, if I set it up this way, anyone who gets access to my computer will also be able to log in to these sites without a password. Is it not possible to pass the passwords as arguments to the script?

morgancodes 2010-02-18 18:22:04

Maybe I can make another, higher-security user, and create the keys and run this script by doing su myHighSecurityUser

morgancodes 2010-02-18 18:27:42

Two options: 1. Simply generate the keys but DO NOT load them into your keystore. ssh takes an argument to tell it where to find the key it should use to connect with.2. Get the application called sshpass. This will require your shell script to have the password in plaintext.

Freiheit 2010-02-18 18:29:16

You are correct that setting up passwordless authentication can potentially be a security risk, and no, it isn't possible to provide the password as an argument. However, note that when you set up the authorized keys file, by default it only applies to the user who generated the key, so if you have proper permissions on the files in your .ssh folder and other people aren't likely to be logging in with your account, the risk is significantly mitigated.If those assumptions are not true, then your idea of another account for the script is probably the easiest route to accomplishing your goal.

RTBarnard 2010-02-18 18:34:38

Answer 5

A:

If you're not against some ruby instead of shell, you could use Capistrano, specifically done for this kind of tasks.

Valentin Rocher 2010-02-18 18:09:44

ansaurus

tags:

views:

answers:

Shell scripting noob -- how scriptable is this task?

related questions