45 lines
1.2 KiB
Bash
45 lines
1.2 KiB
Bash
#!/bin/sh
|
||
set -e
|
||
|
||
# ======================================================
|
||
# 飞牛 NAS 安装公钥 & 修复权限 & 添加 sudo NOPASSWD（避免重复）
|
||
# ======================================================
|
||
|
||
USER_NAME="$1"
|
||
PUB_KEY_PATH="$2"
|
||
|
||
if [ -z "$USER_NAME" ] || [ -z "$PUB_KEY_PATH" ]; then
|
||
echo "用法: $0 <用户名> <公钥文件路径>"
|
||
exit 1
|
||
fi
|
||
|
||
HOME_DIR="/home/$USER_NAME"
|
||
SSH_DIR="$HOME_DIR/.ssh"
|
||
AUTH_KEYS="$SSH_DIR/authorized_keys"
|
||
|
||
# ===== 安装公钥 =====
|
||
mkdir -p "$SSH_DIR"
|
||
cp -f "$PUB_KEY_PATH" "$AUTH_KEYS"
|
||
|
||
# 修复权限
|
||
chown "$USER_NAME" "$HOME_DIR" "$SSH_DIR" "$AUTH_KEYS"
|
||
chmod 700 "$SSH_DIR"
|
||
chmod 600 "$AUTH_KEYS"
|
||
|
||
echo "✅ 公钥已安装并权限修复完成"
|
||
|
||
# ===== 配置 sudoers NOPASSWD =====
|
||
SUDO_FILE="/etc/sudoers.d/${USER_NAME}_poweroff"
|
||
SUDO_RULE="$USER_NAME ALL=(root) NOPASSWD:/usr/bin/systemctl poweroff"
|
||
|
||
# 如果文件不存在或者文件内容不同，则写入
|
||
if [ ! -f "$SUDO_FILE" ] || ! grep -Fxq "$SUDO_RULE" "$SUDO_FILE"; then
|
||
echo "$SUDO_RULE" > "$SUDO_FILE"
|
||
chmod 440 "$SUDO_FILE"
|
||
echo "✅ sudoers 已添加 NOPASSWD 规则 ($SUDO_FILE)"
|
||
else
|
||
echo "⚠️ sudoers NOPASSWD 规则已存在，无需重复添加"
|
||
fi
|
||
|
||
echo "可以测试: ssh $USER_NAME@NAS_IP 'sudo -n /usr/bin/systemctl poweroff'"
|