更新 scripts/keepalived.sh
This commit is contained in:
parent
b03b1a0dda
commit
b6b74903d9
|
|
@ -1,7 +1,21 @@
|
|||
#!/bin/bash
|
||||
set -euo pipefail
|
||||
|
||||
# 初始化变量
|
||||
# ========================== 全局配置 ==========================
|
||||
# 颜色定义
|
||||
RED='\033[0;31m'
|
||||
GREEN='\033[0;32m'
|
||||
YELLOW='\033[1;33m'
|
||||
BLUE='\033[0;34m'
|
||||
NC='\033[0m'
|
||||
|
||||
# 打印工具函数
|
||||
info() { echo -e "${YELLOW}[INFO]${NC} $1"; }
|
||||
success() { echo -e "${GREEN}[SUCCESS]${NC} $1"; }
|
||||
error() { echo -e "${RED}[ERROR]${NC} $1"; exit 1; }
|
||||
step() { echo -e "\n${BLUE}>> $1${NC}"; }
|
||||
|
||||
# 配置参数
|
||||
ACTION=""
|
||||
VIP=""
|
||||
PRIORITY=150
|
||||
|
|
@ -9,112 +23,86 @@ INTERFACE=""
|
|||
KEEPALIVED_CONF="/etc/keepalived/keepalived.conf"
|
||||
CHECK_SCRIPT="/usr/local/bin/check_haproxy.sh"
|
||||
|
||||
# 打印帮助信息
|
||||
|
||||
# ========================== 帮助信息 ==========================
|
||||
usage() {
|
||||
echo "用法: $0 [操作] [选项]"
|
||||
echo "操作:"
|
||||
echo " --install 安装并配置keepalived"
|
||||
echo " --uninstall 卸载keepalived并清理配置"
|
||||
echo "安装选项:"
|
||||
echo " --vip <VIP> 必选，虚拟IP（格式:192.168.1.100/24）"
|
||||
echo " --priority <数值> 可选，优先级（默认150，主节点设高）"
|
||||
echo "示例:"
|
||||
echo " 安装主节点: $0 --install --vip 192.168.1.100/24 --priority 150"
|
||||
echo " 安装备节点: $0 --install --vip 192.168.1.100/24 --priority 140"
|
||||
echo " 卸载: $0 --uninstall"
|
||||
cat << EOF
|
||||
Keepalived 高可用配置脚本（适配K8s VIP管理）
|
||||
功能：安装/卸载Keepalived，配置虚拟IP(VIP)及HAProxy健康检查
|
||||
|
||||
用法: $0 [操作] [选项]
|
||||
|
||||
操作:
|
||||
--install 安装并配置Keepalived
|
||||
--uninstall 卸载Keepalived及清理配置
|
||||
|
||||
安装选项:
|
||||
--vip <VIP> 必选，虚拟IP（格式：192.168.1.100/24）
|
||||
--priority <数值> 可选，节点优先级（默认150，主节点建议150+，备节点140-）
|
||||
|
||||
示例:
|
||||
主节点安装: $0 --install --vip 192.168.61.200/24 --priority 150
|
||||
备节点安装: $0 --install --vip 192.168.61.200/24 --priority 140
|
||||
卸载: $0 --uninstall
|
||||
EOF
|
||||
exit 1
|
||||
}
|
||||
|
||||
# 解析参数
|
||||
while [[ $# -gt 0 ]]; do
|
||||
case "$1" in
|
||||
--install|--uninstall)
|
||||
ACTION="$1"
|
||||
shift
|
||||
;;
|
||||
--vip)
|
||||
VIP="$2"
|
||||
shift 2
|
||||
;;
|
||||
--priority)
|
||||
PRIORITY="$2"
|
||||
shift 2
|
||||
;;
|
||||
*)
|
||||
echo "错误：未知参数 $1"
|
||||
usage
|
||||
;;
|
||||
esac
|
||||
done
|
||||
|
||||
# 校验操作参数
|
||||
if [[ -z "$ACTION" ]]; then
|
||||
echo "错误：必须指定 --install 或 --uninstall"
|
||||
usage
|
||||
fi
|
||||
|
||||
# 检查root权限
|
||||
if [[ $EUID -ne 0 ]]; then
|
||||
echo "错误：脚本必须以root权限运行（使用sudo）"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
# 获取默认网卡
|
||||
# ========================== 工具函数 ==========================
|
||||
# 获取默认网卡（非回环，第一个激活的网卡）
|
||||
get_default_interface() {
|
||||
INTERFACE=$(ip -br link show | grep -v LOOPBACK | awk '{print $1}' | head -n 1)
|
||||
if [[ -z "$INTERFACE" ]]; then
|
||||
echo "错误：无法获取默认网卡，请手动检查网络接口"
|
||||
exit 1
|
||||
fi
|
||||
echo "使用默认网卡：$INTERFACE"
|
||||
INTERFACE=$(ip -br link show up | grep -v LOOPBACK | awk '{print $1}' | head -n1)
|
||||
[[ -z "$INTERFACE" ]] && error "无法获取有效网卡，请检查网络接口状态"
|
||||
info "自动获取网卡：$INTERFACE"
|
||||
}
|
||||
|
||||
# 安装keepalived
|
||||
install_keepalived() {
|
||||
# 校验安装参数
|
||||
if [[ -z "$VIP" ]]; then
|
||||
echo "错误：安装必须指定 --vip（格式:IP/子网掩码）"
|
||||
usage
|
||||
fi
|
||||
if ! [[ "$VIP" =~ ^[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+/[0-9]+$ ]]; then
|
||||
echo "错误：VIP格式无效（正确格式：192.168.1.100/24）"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
# ========================== 安装逻辑 ==========================
|
||||
install_keepalived() {
|
||||
# 参数校验
|
||||
[[ -z "$VIP" ]] && error "必须通过--vip指定虚拟IP（格式：IP/子网掩码，如192.168.61.200/24）"
|
||||
[[ ! "$VIP" =~ ^[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+/[0-9]+$ ]] && error "VIP格式无效，正确格式：192.168.61.200/24"
|
||||
[[ ! "$PRIORITY" =~ ^[0-9]+$ ]] && error "优先级必须是整数（如150）"
|
||||
|
||||
step "开始安装Keepalived"
|
||||
|
||||
# 获取网卡
|
||||
get_default_interface
|
||||
|
||||
# 安装软件
|
||||
echo "===== 开始安装keepalived ====="
|
||||
apt update >/dev/null
|
||||
apt install -y keepalived >/dev/null || { echo "keepalived安装失败"; exit 1; }
|
||||
# 安装软件（静默模式，去除apt警告）
|
||||
info "安装Keepalived软件包..."
|
||||
apt update -qq >/dev/null 2>&1
|
||||
apt install -y -qq keepalived >/dev/null 2>&1 || error "Keepalived安装失败"
|
||||
success "Keepalived软件包安装完成"
|
||||
|
||||
# 备份原有配置（若存在）
|
||||
# 备份原有配置
|
||||
if [[ -f "$KEEPALIVED_CONF" ]]; then
|
||||
mv "$KEEPALIVED_CONF" "${KEEPALIVED_CONF}.bak.$(date +%F_%H%M%S)"
|
||||
echo "已备份原有配置文件"
|
||||
local backup="${KEEPALIVED_CONF}.bak.$(date +%F_%H%M%S)"
|
||||
mv "$KEEPALIVED_CONF" "$backup"
|
||||
info "原有配置已备份至：$backup"
|
||||
fi
|
||||
|
||||
# 创建健康检查脚本
|
||||
echo "创建健康检查脚本..."
|
||||
# 创建健康检查脚本（监控HAProxy状态）
|
||||
info "创建HAProxy健康检查脚本..."
|
||||
cat > "$CHECK_SCRIPT" << 'EOF'
|
||||
#!/bin/bash
|
||||
if ! pgrep -x "haproxy" >/dev/null; then
|
||||
systemctl stop keepalived
|
||||
exit 1
|
||||
else
|
||||
exit 0
|
||||
fi
|
||||
pgrep -x "haproxy" >/dev/null 2>&1 || { systemctl stop keepalived; exit 1; }
|
||||
exit 0
|
||||
EOF
|
||||
chmod +x "$CHECK_SCRIPT"
|
||||
chmod +x "$CHECK_SCRIPT" || error "健康检查脚本权限设置失败"
|
||||
success "健康检查脚本已创建：$CHECK_SCRIPT"
|
||||
|
||||
# 生成配置文件
|
||||
echo "生成keepalived配置..."
|
||||
info "生成Keepalived配置..."
|
||||
local state="BACKUP"
|
||||
[[ "$PRIORITY" -ge 150 ]] && state="MASTER" # 优先级≥150默认为主节点
|
||||
|
||||
cat > "$KEEPALIVED_CONF" << EOF
|
||||
global_defs {
|
||||
router_id LVS_K8S_$(hostname)
|
||||
script_security 2
|
||||
enable_script_security
|
||||
enable_script_security
|
||||
}
|
||||
|
||||
vrrp_script check_haproxy {
|
||||
|
|
@ -124,7 +112,7 @@ vrrp_script check_haproxy {
|
|||
}
|
||||
|
||||
vrrp_instance VI_1 {
|
||||
state $(if [[ $PRIORITY -ge 150 ]]; then echo "MASTER"; else echo "BACKUP"; fi)
|
||||
state $state
|
||||
interface $INTERFACE
|
||||
virtual_router_id 51
|
||||
priority $PRIORITY
|
||||
|
|
@ -141,64 +129,88 @@ vrrp_instance VI_1 {
|
|||
}
|
||||
}
|
||||
EOF
|
||||
[[ -f "$KEEPALIVED_CONF" ]] || error "配置文件生成失败"
|
||||
success "配置文件已生成：$KEEPALIVED_CONF"
|
||||
|
||||
# 启动服务
|
||||
systemctl enable keepalived
|
||||
systemctl start keepalived
|
||||
if systemctl is-active --quiet keepalived; then
|
||||
echo "===== keepalived安装完成 ====="
|
||||
echo "VIP：$VIP"
|
||||
echo "优先级：$PRIORITY"
|
||||
echo "网卡：$INTERFACE"
|
||||
else
|
||||
echo "错误：keepalived启动失败，请查看日志 journalctl -u keepalived"
|
||||
exit 1
|
||||
fi
|
||||
info "启动并设置开机自启..."
|
||||
systemctl enable --now keepalived >/dev/null 2>&1 || error "Keepalived启动失败（日志：journalctl -u keepalived）"
|
||||
[[ "$(systemctl is-active keepalived)" == "active" ]] || error "Keepalived启动后状态异常"
|
||||
|
||||
# 安装完成汇总
|
||||
echo -e "\n${GREEN}===== 安装完成 =====${NC}"
|
||||
echo " VIP: $VIP"
|
||||
echo " 节点角色: $state（优先级: $PRIORITY）"
|
||||
echo " 绑定网卡: $INTERFACE"
|
||||
echo " 健康检查: $CHECK_SCRIPT"
|
||||
echo " 服务状态: 运行中"
|
||||
}
|
||||
|
||||
# 卸载keepalived
|
||||
|
||||
# ========================== 卸载逻辑 ==========================
|
||||
uninstall_keepalived() {
|
||||
echo "===== 开始卸载keepalived ====="
|
||||
step "开始卸载Keepalived"
|
||||
|
||||
# 停止服务
|
||||
if systemctl is-active --quiet keepalived; then
|
||||
systemctl stop keepalived
|
||||
echo "已停止keepalived服务"
|
||||
info "停止Keepalived服务..."
|
||||
systemctl stop keepalived >/dev/null 2>&1 || info "服务停止失败，继续卸载"
|
||||
success "服务已停止"
|
||||
else
|
||||
info "Keepalived未运行，跳过停止步骤"
|
||||
fi
|
||||
|
||||
# 卸载软件
|
||||
if dpkg -l keepalived &>/dev/null; then
|
||||
apt purge -y keepalived >/dev/null
|
||||
apt autoremove -y >/dev/null
|
||||
echo "已卸载keepalived软件包"
|
||||
info "卸载软件包..."
|
||||
apt purge -y -qq keepalived >/dev/null 2>&1 || error "软件包卸载失败"
|
||||
apt autoremove -y -qq >/dev/null 2>&1
|
||||
success "软件包已卸载"
|
||||
else
|
||||
echo "keepalived未安装，跳过卸载"
|
||||
info "Keepalived未安装，跳过卸载"
|
||||
fi
|
||||
|
||||
# 清理配置文件（保留备份提示）
|
||||
# 清理配置
|
||||
if [[ -d /etc/keepalived/ ]]; then
|
||||
mv /etc/keepalived/ "/etc/keepalived.bak.$(date +%F_%H%M%S)"
|
||||
echo "配置文件已备份至 /etc/keepalived.bak.xxx"
|
||||
local backup="/etc/keepalived.bak.$(date +%F_%H%M%S)"
|
||||
mv /etc/keepalived/ "$backup"
|
||||
success "配置目录已备份至：$backup"
|
||||
fi
|
||||
|
||||
# 清理健康检查脚本
|
||||
if [[ -f "$CHECK_SCRIPT" ]]; then
|
||||
rm -f "$CHECK_SCRIPT"
|
||||
echo "已删除健康检查脚本"
|
||||
success "健康检查脚本已删除：$CHECK_SCRIPT"
|
||||
fi
|
||||
|
||||
echo "===== keepalived卸载完成 ====="
|
||||
# 卸载完成
|
||||
echo -e "\n${GREEN}===== 卸载完成 =====${NC}"
|
||||
}
|
||||
|
||||
# 执行操作
|
||||
case "$ACTION" in
|
||||
--install)
|
||||
install_keepalived
|
||||
;;
|
||||
--uninstall)
|
||||
uninstall_keepalived
|
||||
;;
|
||||
*)
|
||||
usage
|
||||
;;
|
||||
esac
|
||||
|
||||
# ========================== 主逻辑 ==========================
|
||||
main() {
|
||||
# 解析参数
|
||||
while [[ $# -gt 0 ]]; do
|
||||
case "$1" in
|
||||
--install|--uninstall) ACTION="$1"; shift ;;
|
||||
--vip) [[ $# -lt 2 ]] && error "--vip需指定IP/子网掩码"; VIP="$2"; shift 2 ;;
|
||||
--priority) [[ $# -lt 2 ]] && error "--priority需指定数值"; PRIORITY="$2"; shift 2 ;;
|
||||
*) error "未知参数：$1" ;;
|
||||
esac
|
||||
done
|
||||
|
||||
# 校验操作
|
||||
[[ -z "$ACTION" ]] && error "必须指定--install（安装）或--uninstall（卸载）"
|
||||
|
||||
# 检查root权限
|
||||
[[ $EUID -ne 0 ]] && error "请使用root权限运行（sudo $0 ...）"
|
||||
|
||||
# 执行操作
|
||||
case "$ACTION" in
|
||||
--install) install_keepalived ;;
|
||||
--uninstall) uninstall_keepalived ;;
|
||||
esac
|
||||
}
|
||||
|
||||
main "$@"
|
||||
|
|
|
|||
Loading…
Reference in New Issue