SFTP到远程机器，切换到root并在远程机器上执行命令

Question

我需要更新 10 多台远程主机上的文件。我们系统的设计方式是我们有一个用户说 $user which ssh into any remote hosts with password say $passwd, post successful login, $user can only 运行远程主机上的一个命令是 sudo su - root（这是在 /etc/sudoers 中定义的）

我的问题是，我无法从我的脚本中 sudo su - root，下面是我的代码

（注意 - 我已经尝试过 invoke_shell() 和 get_transport()。）

import paramiko, re, os 
ssh_client = paramiko.SSHClient()
ssh_client.set_missing_host_key_policy(paramiko.AutoAddPolicy())
action_item = int(input("Welcome on-board ...\nPlease choose from following \n1 - Global Update\n2 - Specific Update\n Please input as 1 or 2 :"))
if action_item == 2:
    hostName = input("Please provide 'IPADDRESS' of Specific Remote Client :")
    os.system('touch /tmp/hosts_file_specific && umask 113 /tmp/hosts_file_specific')
    os.system('hostName='+hostName+' && echo "$hostName" >> /tmp/hosts_file_specific')
    hosts_file = r'/tmp/hosts_file_specific'
elif action_item == 1:
    hosts_file = r'/etc/hosts'
else:
    print("Invalid input, shutting down the application")
with open(hosts_file) as file:
    for line in file:
        line = re.findall( r'[0-9]+(?:\.[0-9]+){3}',line)
        if len(line) > 0:
            line = line[0]
        else:
            line = '127.0.0.1'
        if line == '127.0.0.1':
            pass
        else:
            print("Trying to connect - "+line)
            try:

                ssh_client.connect(hostname=line,username=$user,password=$passwd)
                stdin,stdout,stderr=ssh_client.exec_command("pgrep mttrapd")
                outData = stdout.readlines();
                outData = re.findall(r'[0-9]+',outData[0])
                outData = int(outData[0])
                print("[Probe = nco_p_mttrapd] and PID = ",outData)
            except TimeoutError:
                outData = -1
                pass
            if outData > 0:
                ftp_client = ssh_client.open_sftp()
                localfilepath1 = r"/tmp/Python_361/rules.tar"
                remotefilepath1 = r"/tmp/rules.tar"
                ftp_client.put(localfilepath1,remotefilepath1)
                ftp_client.close()
                stdin, stdout, stderr = ssh_client.exec_command('sudo su - root')
                stdin.write("\n")
                stdin.flush()
                stdin, stdout, stderr = ssh_client.exec_command("whoami")
                print(stdout.readlines())
          elif outData == -1:
                print("Host is unreachable - Please contact your network administrtor, nothing to do")
          else:
                print("mttrapd probe is not running on this host, nothing to do")

    file.close()

我收到的输出如下

Welcome on-board ...
Please choose from following
1 - Global Update
2 - Specific Update
 Please input as 1 or 2 :2
Please provide 'IPADDRESS' of Specific Remote Client :x.x.x.x
Trying to connect - x.x.x.x
[Probe = nco_p_mttrapd] and PID =  12345
['$user\n']
Trying to connect - x.x.x.x
[Probe = nco_p_mttrapd] and PID =  12345
**['$user\n'] #--------> I need this to be ['root\n']**

Answer 1

这行不通：

stdin, stdout, stderr = ssh_client.exec_command('sudo su - root')
stdin, stdout, stderr = ssh_client.exec_command("whoami")

与以下命令基本相同：

[local-host] # ssh user@host sudo su - root
[local-host] # ssh user@host whoami

你应该这样写：

stdin, stdout, stderr = ssh_client.exec_command('sudo su - root')
stdin.write('whoami\n')
# Here stdout.readlines() would not work as it would keep reading
# until EOF (which means the `sudo` comamnd has exited).
print(stdout.channel.recv(1024) )

SFTP到远程机器，切换到root并在远程机器上执行命令

SFTP to remote machines, switch to root and execute commands on remote machine

python

linux

shell

paramiko

python-3.x