Question

需要将文件上传到最终服务器，并且需要使用该文件作为输入运行命令。

以下是完成整个行动的步骤（但我坚持第3步）：

1 - 将文件从localhost传输到jumpserver（使用scp）

2 - ssh to jumpserver

3 - 将文件从jumpserver传输到finalserver（使用scp）

4 - ssh到finalserver

5 - 在finalserver上运行命令（文件作为输入）

try:
    cmd_str = "scp " + file_path + " " + user + "@" + jumpbox + ":/tmp/"
    print "---------local to jumpbox initiated:"
    #print cmd_str

    child = pexpect.spawn(cmd_str) #-------------------------------------------------------step 1
    child.expect("password:")
    #pwd = raw_input("please enter password along with yubikey:")
    pwd = getpass.getpass("Enter password along with yubikey:")
    child.sendline(pwd)
    i = child.expect(['Permission denied', filename])
    if i==0:
        print "Permission denied on host. Can't login"
        pwd = getpass.getpass("Enter password along with yubikey:")
        child.sendline(pwd)
        #child.kill(0)
    elif i==1:
        print "file successfully transferred to jumpbox"

        #----SSHing into jumpbox
        ssh_jump_cmd = "ssh " + user + "@" + jumpbox 
        print ssh_jump_cmd
        ssh_child = pexpect.spawn(ssh_jump_cmd) #-------------------------------------------------------step 2
        ssh_child.expect("password:")
        pwd2 = getpass.getpass("Enter password along with yubikey:")
        ssh_child.sendline(pwd2)
        i2 = ssh_child.expect(['Permission denied', '[#\$]'])
        if i2 == 0:
            print "Permission denied on host. Can't login. Try again"
            pwd2 = getpass.getpass("Enter password along with yubikey:")
            ssh_child.sendline(pwd2)
        elif i2 == 1:
            print "--------------Inside Jumpbox:"

            #sending file from jumpbox to finalserver
            ba_cmd = "scp /tmp/"+ filename + " " + cmd_var + ":/tmp/"
            print ba_cmd
            ba_child = pexpect.spawn(ba_cmd) #-------------------------------------------------------step 3
            ba_child.expect("Enter passphrase for key:")
            phrase = getpass.getpass("Enter passphrase: ")
            ba_child.sendline(phrase)
            print "Password should be asked:"
            i3 = ba_child.expect(['Enter passphrase for key', 'Permission denied', filename])
            if i3 == 0: 
                phrase = getpass.getpass("Enter passphrase: ")
                ba_child.sendline(phrase)
            elif i3 == 1:
                print "Lost connection:"
                ba_child.kill(0)
            elif i3 == 2: 
                ssh_ba_cmd = "ssh " + smba
                ba_ssh_child = pexpect.spawn(ssh_ba_cmd) #-------------------------------------------------------step 4
                ba_ssh_child.expect("Enter passphrase for key: ")
                phrase = getpass.getpass("Enter passphrase: ")
                ba_ssh_child.sendline(phrase)
                i4 = ba_ssh_child.expect(['Permission denied', '[#\$]'])
                if i4 == 0:
                    print "Passphrase incorrect. Exiting"
                    ba_ssh_child.kill(0)

                elif i4 == 1:
                    final_cmd = "ls -l" + filename #- just an example for this question
                    final_child = pexpect.spawn(final_cmd)
                    print "********************"
                    print sys.stdout

我使用Python Pexpect生成了孩子并且成功直到SSH连接到jumpserver。当脚本从jumpserver尝试SCP到finalserver时，会产生以下错误：

scp /tmp/filename finalserver:/tmp/
End Of File (EOF). Exception style platform.
<pexpect.spawn object at 0x7efddfdad650>
version: 3.1
command: /usr/bin/scp
args: ['/usr/bin/scp', 'filename', 'finalserver:/tmp/']
searcher: <pexpect.searcher_re object at 0x7efddfdad5d0>
buffer (last 100 chars): ''
before (last 100 chars): 'ssh: Could not resolve hostname finalserver: Name or service not known\r\r\nlost connection\r\n'
after: <class 'pexpect.EOF'>
match: None
match_index: None
exitstatus: 1
flag_eof: True
pid: 7244
child_fd: 5
closed: False
timeout: 30
delimiter: <class 'pexpect.EOF'>
logfile: None
logfile_read: None
logfile_send: None
maxread: 2000
ignorecase: False
searchwindowsize: None
delaybeforesend: 0.05
delayafterclose: 0.1
delayafterterminate: 0.1

我经历了http://stackoverflow.com/questions/17913540/python-ssh-in-to-a-jumpserver-and-then-ssh-in-to-a-host-from-the-jumpserver-to-e，但仍然需要帮助。

TIA。

Answer 1

>    ba_child = pexpect.spawn(ba_cmd)

您正在产生一个新的当地孩子。您应该将scp命令发送到在跳转服务器上运行shell的ssh_child。

这里的语法不稳定，但像

ssh_child.sendline(ba_cmd)

Answer 2

我建议用paramiko在服务器和执行命令之间传输文件，只看例子

import paramiko 
local_path = "foo/bar"
remote_path = "bar/foo"
ssh = paramiko.SSHClient()
ssh.set_missing_host_key_policy(paramiko.AutoAddPolicy())
ssh.connect("remote_url", username='username')
sftp = ssh.open_sftp()
ssh.exec_command('mkdir -p '+ remote_path)
sftp.put(local_path, remote_path)

使用localhost

2 个答案: