矿场自动化运维的实现
最近帮人管理矿场，由于矿机数量较多，于是编写了几个脚本，并借用ansible实现自动化运维。
一、搭建文件共享服务
$ sudo apt install apache2
$ sudo systemctl start apache2
$ sudo systemctl enable apache2
$ mkdir /var/www/html/app
将需要软件、脚本、配置文件拷贝到/var/ww/html/app，文件服务器搭建完成，并能顺利访问。
![矿场自动化运维的实现]()
二、开机进入系统操作
2.1 关闭自动锁屏
按客户要求关闭自动锁屏。
![矿场自动化运维的实现]()
![矿场自动化运维的实现]()
![矿场自动化运维的实现]()
2.2 配置root口令
worker@harv1-3:~$ sudo passwd root
二、系统初始化配置
2.1 更新soures.list并对系统进行初步设置
#!/bin/bash
#定义显示颜色
RED="\e[1;31m"
GREEN="\e[1;32m"
END="\e[0m"
#文件共享服务器地址
ip=192.168.1.##
#ubuntu系统启动后，软件会自动升级，因而锁住一些文件，为了后续操作顺利，先删掉锁
rm /var/cache/apt/archives/lock
rm /var/lib/dpkg/lock
#关闭系统自动升级
sed -i.bak s/"1"/"0"/ /etc/apt/apt.conf.d/10periodic
if [ $? -eq 0 ];then
echo -e "$GREEN The update is closed.$END"
else
echo -e "$RED The update can not be closed!!$END"
fi
#关闭防火墙，我所使用的ubuntu版本，默认关闭
systemctl close ufw &> /dev/null
if [ $? -eq 0 ];then
echo -e "$GREEN The ufw is closed.$END"
else
echo -e "$RED The ufw can not be closed!!$END"
fi
#禁止防火墙启动
systemctl disable ufw &> /dev/null
if [ $? -eq 0 ];then
echo -e "$GREEN The ufw is disabled.$END"
else
echo -e "$RED The ufw can not be closed!!$END"
fi
#将apt源指向国内，需要在文件服务器上事先准备好soures.list文件
cd /etc/apt
mv ./sources.list ./sources.list`date +%F_%H:%H`
wget -q http://$ip/app/sources.list
apt update
if [ $? -eq 0 ];then
echo -e "$GREEN The apt update is finished,You should reboot the system.$END"
else
echo -e "$RED Apt update is error!!$END"
fi
apt update之后，系统会锁住部分文件，尝试多次，无法手动解锁，最后简单粗暴重启系统，再安装软件！
2.2 软件安装脚本
#!/bin/bash
RED="\e[1;31m"
GREEN="\e[1;32m"
END="\e[0m"
ip=192.168.1.#
hchia=chia-blockchain_1.1.6_amd64.deb
#安装常用工具
apt install -y vim htop iotop nload gparted lrzsz net-tools openssh-server s-nail ethtool python2.7
#安装挖矿软件
cd /home/worker
wget http://$ip/app/$hchia
dpkg -i ./$hchia
if [ $? -eq 0 ];then
echo -e "$GREEN The chia-blockchain is installed.$END"
else
echo -e "$RED Can not install the chia-blickhain!!$END"
fi
#安装向日葵
cd /home/worker
wget http://$ip/app/sunloginclient-11.0.0.36662-amd64.deb
dpkg -i ./sunloginclient-11.0.0.36662-amd64.deb
if [ $? -eq 0 ];then
echo -e "$GREEN The sunloginclient is installed. $END"
else
echo -e "$RED Can not install the sunloginclient!!$END"
fi
#安装heirloom-mailx
cd /home/worker
wget http://$ip/app/heirloom-mailx_14.8.16-1_all.deb
dpkg -i ./heirloom-mailx_14.8.16-1_all.deb
if [ $? -eq 0 ];then
echo -e "$GREEN The mailx is installed. $END"
else
echo -e "$RED Can not install the mailx!!$END"
fi
#禁止ssh连接时提示用户输入yes
sed -i.bak s/"# StrictHostKeyChecking ask"/" StrictHostKeyChecking no"/ /etc/ssh/ssh_config
if [ $? -eq 0 ];then
echo -e "$GREEN The ssh_config is changed.$END"
else
echo -e "$RED The ssh_config can not be changed!!$END"
fi
#允许root ssh登录
sed -i.bak s/"#PermitRootLogin prohibit-password"/"PermitRootLogin yes"/ /etc/ssh/sshd_config
if [ $? -eq 0 ];then
echo -e "$GREEN The sshd_config is changed.$END"
else
echo -e "$RED The sshd_config can not be changed!!$END"
fi
#设置python
ln -s /usr/bin/python2.7 /usr/bin/python
#设置chia环境
echo "export PATH=$PATH:/usr/lib/chia-blockchain/resources/app.asar.unpacked/daemon/" > /etc/profile.d/chia.sh
echo "source /etc/profile.d/chia.sh" >> /home/worker/.bashrc
source /etc/profile.d/chia.sh
三、矿机文件系统自动扩展脚本
#!/bin/bash
RED="\e[1;31m"
GREEN="\e[1;32m"
END="\e[0m"
scan () {
for disk in `ls /sys/class/scsi_host`;do
# echo $disk;
echo '- - -' > /sys/class/scsi_host/$disk/scan;
done
}
while true
do
scan;
lsblk -f;
read -p "Please input the disk:" indisk
if [ $indisk = q ];then
exit;
fi
read -p "Please input the path:" inpath
if [ $inpath = q ];then
exit;
fi
parted /dev/"$indisk" mklabel gpt
parted /dev/"$indisk" mkpart primary 0 100%
mkfs.ext4 -F -O ^64bit /dev/"$indisk"
if [ $? -ne 0 ];then
echo -e "$REDCan not make filesystem /dev/"$indisk" on $inpath!!$END"
exit;
fi
lsblk -f | grep "$indisk";
echo -e "$GREEN The disk $indisk is parted!!$END"
ls $inpath &> /dev/null
if [ $? -eq 0 ];then
read -p "The $inpath is exit!! Are you sure continu?" con
fi
if [ "$con" = "q" ];then
exit;
fi
if [ "$con" = "n" ];then
exit;
fi
mkdir -p "$inpath"
if [ "$con" = "q" ];then
exit;
fi
mount /dev/"$indisk" "$inpath"
if [ $? -eq 0 ];then
echo -e "$GREEN The new filesystem $inpath is mount!!$END"
else
echo -e "$RED The new filesystem $inpath is not mount!!$END"
fi
fsta=`lsblk -f|grep "$indisk" |awk {'print $3'}`
echo "UUID="$fsta" $inpath ext4 defaults 0 0" >> /etc/fstab
mount -a &> /dev/null
if [ $? -eq 0 ];then
echo -e "$GREEN The /etc/fstab is correct!!!!$END"
else
echo -e "$RED The /etc/fstab is not edit correct!!$END"
fi
done
四、挂载有数据硬盘脚本
#!/bin/bash
RED="\e[1;31m"
GREEN="\e[1;32m"
END="\e[0m"
scan () {
for disk in `ls /sys/class/scsi_host`;do
echo '- - -' > /sys/class/scsi_host/$disk/scan;
done
}
while true
do
scan;
lsblk -f;
read -p "Please input the disk:" indisk
if [ $indisk = q ];then
exit;
fi
read -p "Please input the path:" inpath
if [ $inpath = q ];then
exit;
fi
ls $inpath &> /dev/null || mkdir -p "$inpath"
mount /dev/"$indisk" "$inpath"
if [ $? -eq 0 ];then
echo -e "$GREEN The $indisk is mount on $inpath.$END"
else
echo -e "$RED The $indisk is mount on $inpath.$END"
exit;
fi
fsta=`lsblk -f|grep "$indisk" |awk {'print $3'}`
echo "UUID="$fsta" $inpath ext4 defaults 0 0" >> /etc/fstab
mount -a &> /dev/null
if [ $? -eq 0 ];then
echo -e "$GREEN The fstab is correct.$END"
else
echo -e "$RED The fstab is not correct.$END"
exit;
fi
done
五、缓存区（SSD盘）清理脚本
#!/bin/bash
read -p "Please input the directory num:" max
cd /famer1
rm -r harv*
for i in $(seq 1 $max);do
mkdir harv$i;
done
cd /famer2
rm -r harv*
for i in $(seq 1 $max);do
mkdir harv$i;
done
chmod -R 777 /famer*
chmod -R 777 /data*
ls /famer1
ls /famer2
六、某币程序并行启动脚本
#!/bin/bash
gnome-terminal --tab -e 'bash -c "cd ~;source .bashrc;cd /home/worker/chia-plotter;./chia-plotter-linux-amd64 -action plotting -plotting-fpk 0xa1bc03290bdf9958520b906ca09564e83a9a9d327d007c8862f82f735502cd69515d8bd84466fcb17695570e8152cadf -plotting-ppk 0xa7f1e072ba0af9a2272daf3db375db81c3ae0449e983ce8fb3b502f2651c364c1d7b014d2beaa8d4a047f0430fdb3103 -plotting-n 100 -r 14 -b 9216 -d /data1 -t /famer1/harv1;exec bash"'
gnome-terminal --tab -e 'bash -c "cd ~;source .bashrc;cd /home/worker/chia-plotter;./chia-plotter-linux-amd64 -action plotting -plotting-fpk 0xa1bc03290bdf9958520b906ca09564e83a9a9d327d007c8862f82f735502cd69515d8bd84466fcb17695570e8152cadf -plotting-ppk 0xa7f1e072ba0af9a2272daf3db375db81c3ae0449e983ce8fb3b502f2651c364c1d7b014d2beaa8d4a047f0430fdb3103 -plotting-n 100 -r 14 -b 9216 -d /data2 -t /famer1/harv2;exec bash"'
脚本需要在worker用户下运行，并行多少个job，各参数大小如何确定，需要根据自己矿机的实际情况确定。
七、利用ansible监控矿机运行状态
7.1 安装ansible并配置参数
$ apt install ansible
#
$ vim /etc/ansible/ansible.cfg
host_key_checking = False
log_path = /var/log/ansible.log
module_name = shell
$ vim /etc/ansible/hosts
[group1]
192.168.1.112
192.168.1.100
192.168.1.110
192.168.1.117
192.168.1.114
7.2 ssh实现基于证书登录
在ansible控制端：
$ sudo apt install sshpass
$ ssh-keygen
Generating public/private rsa key pair.
Enter file in which to save the key (/home/worker/.ssh/id_rsa):
Enter passphrase (empty for no passphrase):
Enter same passphrase again:
Your identification has been saved in /home/worker/.ssh/id_rsa.
Your public key has been saved in /home/worker/.ssh/id_rsa.pub.
The key fingerprint is:
SHA256:9RDQQ9aRtx53zKICijZK6ZGUh8gZt4V4wjDyv7IMMmM worker@ubuntu
The key's randomart image is:
+---[RSA 2048]----+
|* . . .++..o |
|.B + . .o.o . |
|..Boo o. . + |
|.o+o. .. o + =|
| . +.. .S. .o +.|
| = +.. . . . |
|=E.+.. . |
|o=oo |
| o |
+----[SHA256]-----+
添加管理端证书被管理端脚本
#!/bin/bash
IPLIST="
192.168.1.xxx
192.168.1.xx
192.168.1.xx
192.168.1.xx"
export SSHPASS=xxxx
for IP in $IPLIST;do
sshpass -e ssh-copy-id -o StrictHostKeyChecking=no $IP
done
$ ./addlist.sh
$ ansible group1 -a hostname
[WARNING]: log file at /var/log/ansible.log is not writeable and we cannot create it, aborting
192.168.1.114 | SUCCESS | rc=0 >>
harv4-1
192.168.1.100 | SUCCESS | rc=0 >>
harv1-2
192.168.1.112 | SUCCESS | rc=0 >>
harv1-1
192.168.1.110 | SUCCESS | rc=0 >>
harv2-2
192.168.1.117 | SUCCESS | rc=0 >>
harv2-3
7.3 使用ansible监控矿机状态
ansible group1 -a 'ps aux |grep hpool-miner|wc -l'
ansible group1 -a 'ps aux |grep chia-plot|wc -l'
ansible group1 -a 'df -h | grep /famer'
ansible group1 -a 'df -h | grep /data'
