refactor: 优化计算节点自测与评分脚本的提示信息

This commit is contained in:
seahi committed 2026-10-09 14:50:39 +08:00
1 parent b91d121a42
commit 711a933355
1 file changed
+34 -36
+34 -36
View File
@@ -34,7 +34,7 @@ banner() {
}
section() {
TASK_CNT=$((TASK_CNT+1))
printf '%b[➜] %d. 检查任务:%s%b\n' "$BLUE" "$TASK_CNT" "$1" "$NC"
printf '%b[➜] %d. %s%b\n' "$BLUE" "$TASK_CNT" "$1" "$NC"
}
error() {
printf '%b[✘ 失败] %s%b\n' "$RED" "$1" "$NC"
@@ -47,28 +47,26 @@ check() {
TOTAL=$((TOTAL+points))
if "$@" >/dev/null 2>&1; then
SCORE=$((SCORE+points)); PASS_CNT=$((PASS_CNT+1))
printf '%b[✔ 通过] %s(得 %d 分)%b\n' "$GREEN" "$success_message" "$points" "$NC"
printf '%b[✔ 通过] %s%b\n' "$GREEN" "$success_message" "$NC"
else
FAIL_CNT=$((FAIL_CNT+1))
printf '%b[✘ 失败] %s(扣 %d 分)%b\n' "$RED" "$failure_message" "$points" "$NC"
printf '%b[✘ 失败] %s%b\n' "$RED" "$failure_message" "$NC"
fi
}
finish() {
printf '\n'
separator
printf '实验自测检查完毕!通过项: %b%d%b,失败项: %b%d%b\n' "$GREEN" "$PASS_CNT" "$NC" "$RED" "$FAIL_CNT" "$NC"
printf '%b总成绩:%d/100 分%b\n' "$YELLOW" "$SCORE" "$NC"
printf '%b总成绩:%d/100 分%b | 通过: %b%d%b | 失败: %b%d%b\n' "$YELLOW" "$SCORE" "$NC" "$GREEN" "$PASS_CNT" "$NC" "$RED" "$FAIL_CNT" "$NC"
if [ "$TOTAL" -ne 100 ]; then
error "评分项总分异常:$TOTAL,请联系教师检查脚本。"
separator
exit 2
fi
if [ "$FAIL_CNT" -eq 0 ]; then
printf '%b所有检查项均已通过,实验自测完成!%b\n' "$GREEN" "$NC"
separator
exit 0
fi
printf '%b你有 %d 处检查未通过,请根据上方红字提示核对实验步骤并修正!%b\n' "$RED" "$FAIL_CNT" "$NC"
printf '%b请按红字提示修正。%b\n' "$RED" "$NC"
separator
exit 1
}
@@ -115,7 +113,7 @@ ini_value() {
enabled_service() { [ "$(timeout 10 systemctl is-enabled "$1" 2>/dev/null)" = enabled ]; }
active_service() { timeout 10 systemctl is-active --quiet "$1"; }
banner 'OpenStack 计算节点实验自测与自动化评分脚本'
banner 'OpenStack 计算节点评分'
preflight
CONF=/etc/nova/nova.conf
# 自动检测失败(例如 hosts 冲突)仍继续评分,让解析项正常扣分。
@@ -130,7 +128,7 @@ if ! valid_ipv4 "$CONTROLLER_IP"; then error '控制节点 IP 参数或 hosts
if [ -n "${CHECK_COMPUTE_IP:-}" ] && ! valid_ipv4 "$CHECK_COMPUTE_IP"; then error 'CHECK_COMPUTE_IP 无效。未评分。'; exit 2; fi
case "$REPO_BASE" in http://*|https://*) ;; *) error '软件源根 URL 必须使用 http(s)。未评分。'; exit 2;; esac
section '基础安全设置(8分)'
section '安全设置(8分)'
firewall_stopped() { [ "$(timeout 10 systemctl is-active firewalld 2>/dev/null)" = inactive ]; }
firewall_disabled() {
local state
@@ -144,12 +142,12 @@ selinux_persistent() {
v=$0; sub(/^[^=]*=/,"",v); sub(/[[:space:]]*#.*/,"",v); gsub(/[[:space:]"\047]/,"",v)
} END {exit (v!="disabled")}' /etc/selinux/config
}
check 2 'firewalld 防火墙已停止' 'firewalld 应停止,查询失败也不得分' firewall_stopped
check 2 'firewalld 防火墙已禁止开机启动' 'firewalld 应禁止开机启动' firewall_disabled
check 2 'SELinux 当前为 Disabled 或 Permissive' 'SELinux 当前应为 Disabled 或 Permissive' selinux_runtime
check 2 'SELinux 持久配置为 disabled' '/etc/selinux/config 应设置 SELINUX=disabled' selinux_persistent
check 2 'firewalld 已停止' 'firewalld 未停止或查询失败' firewall_stopped
check 2 'firewalld 自启已禁用' 'firewalld 自启未禁用' firewall_disabled
check 2 'SELinux 非强制模式' 'SELinux 仍强制执行或查询失败' selinux_runtime
check 2 'SELinux 永久禁用' 'SELinux 未永久禁用' selinux_persistent
section '主机名、解析与网络(12分)'
section '主机与网络(12分)'
hostname_ok() { [ "$(hostname)" = compute ] && [ "$(tr -d '[:space:]' < /etc/hostname)" = compute ]; }
controller_mapping() { [ "$(hosts_ip controller)" = "$CONTROLLER_IP" ]; }
compute_mapping() {
@@ -159,14 +157,14 @@ compute_mapping() {
}
both_resolve() { resolved_as controller "$CONTROLLER_IP" && resolved_as compute "$COMPUTE_IP"; }
localhost_preserved() { awk '{sub(/#.*/,""); if($1=="127.0.0.1")for(i=2;i<=NF;i++)if($i=="localhost")found=1} END{exit !found}' /etc/hosts; }
check 2 '运行中及持久主机名均为 compute' '运行中及持久主机名都应为 compute' hostname_ok
check 2 'controller 的 hosts 映射唯一,控制节点 IP 配置正确' '/etc/hosts 中 controller 应唯一映射到控制节点 IP' controller_mapping
check 2 'compute 的 hosts 映射唯一,且指向本机管理 IPv4' '/etc/hosts 中 compute 应唯一映射到本机管理 IPv4' compute_mapping
check 2 'controller 和 compute 的系统解析与 hosts 配置一致' 'controller/compute 的系统解析应与 hosts 一致' both_resolve
check 2 'hosts 中保留了 localhost 的 IPv4 映射' '新增 hosts 条目时应保留 localhost 的 IPv4 映射' localhost_preserved
check 2 '可通过主机名 ping 通 controller' '应能通过主机名 ping 通 controller' timeout 8 ping -4 -c 2 -W 2 controller
check 2 '主机名 compute' '主机名应为 compute' hostname_ok
check 2 'controller hosts 映射' 'controller hosts 映射缺失或冲突' controller_mapping
check 2 'compute hosts 映射' 'compute hosts 应指向本机管理 IP' compute_mapping
check 2 '主机名解析' '主机名解析与 hosts 不一致' both_resolve
check 2 'localhost 映射保留' 'localhost 映射缺失' localhost_preserved
check 2 'ping controller' 'ping controller 不通' timeout 8 ping -4 -c 2 -W 2 controller
section '软件源配置、连通性与缓存(15分)'
section '软件源(15分)'
# 每个仓库分别评价配置、repomd 索引、已有缓存,各1分。
shopt -s nullglob
REPOS=(/etc/yum.repos.d/*.repo)
@@ -213,9 +211,9 @@ repo_cache() {
}
while IFS='|' read -r file id path; do
url="$REPO_BASE/$path"
check 1 "[$id] 软件源配置正确,定义唯一,且未遗留其他启用源" "[$id] 配置缺失、重复或遗留其他启用源(Rocky 还需 exclude=sip,PyQt4)" repo_ok "/etc/yum.repos.d/$file" "$id" "$url"
check 1 "[$id] 仓库索引可正常访问:$url" "[$id] 仓库索引不可访问:$url" repo_online "$url"
check 1 "[$id] 已有 YUM 缓存可正常读取" "[$id] 已有 YUM 缓存不可读取,请检查 yum makecache 结果" repo_cache "$id"
check 1 "[$id] 配置" "[$id] 配置异常,检查重复项、启用源和 exclude" repo_ok "/etc/yum.repos.d/$file" "$id" "$url"
check 1 "[$id] 连通" "[$id] 索引不可访问" repo_online "$url"
check 1 "[$id] 缓存" "[$id] 缓存异常,执行 yum makecache" repo_cache "$id"
done <<'REPOLIST'
CentOS-Base.repo|local-base|vault-base
CentOS-Base.repo|local-updates|vault-updates
@@ -224,7 +222,7 @@ CentOS-QEMU-EV.repo|local-qemu-ev|vault-centos-qemu-ev
CentOS-OpenStack-rocky.repo|local-openstack-rocky|vault-centos-openstack-rocky
REPOLIST
section 'NTP 时间同步(15分)'
section '时间同步(15分)'
chrony_config() {
awk '{sub(/[#!;].*/,"")}
$1=="server" && $2=="controller" {n++; for(i=3;i<=NF;i++)if($i=="iburst")good++}
@@ -239,14 +237,14 @@ chrony_synced() {
$1 ~ /^[\^=]/ && $2!=ip {bad=1}
END{exit !(found && !bad)}'
}
check 2 'chrony 时间同步软件包已安装' 'chrony 软件包未安装' rpm -q chrony
check 4 'chrony 仅启用了 server controller iburst,默认外网源已注释' 'chrony 应仅启用 server controller iburst,并注释默认外网源' chrony_config
check 2 'chronyd 时间同步服务正在运行' 'chronyd 未运行' active_service chronyd
check 2 'chronyd 时间同步服务已设置持久开机自启' 'chronyd 未持久设置开机自启' enabled_service chronyd
check 5 'chronyd 已选中控制节点为同步源(^*),且未加载其他服务器源' 'chronyd 当前应选中控制节点为同步源(^*),且没有其他服务器源' chrony_synced
check 2 'chrony 已安装' 'chrony 未安装' rpm -q chrony
check 4 'chrony 时间源配置' 'chrony 应仅启用 server controller iburst' chrony_config
check 2 'chronyd 运行' 'chronyd 未运行' active_service chronyd
check 2 'chronyd 自启' 'chronyd 未设置自启' enabled_service chronyd
check 5 '时间已同步到 controller' '时间源未选中 controller 或有其他源' chrony_synced
section 'Nova 软件包(5分)'
check 5 'openstack-nova-compute 软件包已安装' 'openstack-nova-compute 未安装' rpm -q openstack-nova-compute
check 5 'nova-compute 已安装' 'nova-compute 未安装' rpm -q openstack-nova-compute
section 'Nova 配置(30分)'
# 配置按小组评分;组内错误键附在失败提示中,不输出实际值或口令。
@@ -275,7 +273,7 @@ config_group() {
done
# my_ip 必须同时属于本机;即便 hosts 未完成,也不接受示例中的远端 IP。
if [ "$group" = DEFAULT ] && ! compute_mapping >/dev/null 2>&1; then bad="$bad my_ip/hosts/本机地址"; fi
check "$points" "[$group] Nova 配置符合实验要求" "[$group] 错误或缺失的配置键:${bad:-文件不可读};请检查 $CONF" test -z "$bad"
check "$points" "Nova [$group]" "Nova [$group] 错误键:${bad:-文件不可读}" test -z "$bad"
}
config_group 6 DEFAULT enabled_apis 'osapi_compute,metadata' transport_url 'rabbit://openstack:openstack@controller' my_ip "$COMPUTE_IP" use_neutron true firewall_driver nova.virt.firewall.NoopFirewallDriver
config_group 2 api auth_strategy keystone
@@ -296,11 +294,11 @@ virtualization_ok() {
fi
[ "$type" = qemu ]
}
check 5 'Nova 虚拟化类型与 CPU 硬件虚拟化能力匹配' '无 vmx/svm 时必须设置 [libvirt] virt_type=qemu;有扩展时允许默认 kvm 或 qemu' virtualization_ok
check 5 '虚拟化类型' '虚拟化类型不匹配;无 vmx/svm 时需用 qemu' virtualization_ok
section '计算服务运行与开机自启(10分)'
section '服务状态(10分)'
for service in libvirtd openstack-nova-compute; do
check 3 "$service 服务正在运行" "$service 未运行" active_service "$service"
check 2 "$service 服务已设置持久开机自启" "$service 未持久设置开机自启" enabled_service "$service"
check 3 "$service 运行" "$service 未运行" active_service "$service"
check 2 "$service 自启" "$service 未设置自启" enabled_service "$service"
done
finish