24 lines
1.5 KiB
Bash
24 lines
1.5 KiB
Bash
#!/usr/bin/env bash
|
||
. "$(cd "$(dirname "$0")/.." && pwd)/config/load.sh"
|
||
# B1 步（在 47 上跑）：uid 保真校验 + 建 47→106 专用密钥并打印公钥
|
||
set -uo pipefail
|
||
KEY=/root/.ssh/dshworker_ed25519
|
||
|
||
echo "=== 1) uid 保真校验（PG 与 SQLite 必须一致 —— 否则 106 上文件属主全错） ==="
|
||
echo -n " PG : "; PGPASSWORD=dshs_cluster_2026 /usr/bin/psql -h 127.0.0.1 -p 15432 -U dshs -d dshs -tAc \
|
||
"select string_agg(username||'='||coalesce(uid::text,'NULL'), ' ' order by row_id) from users" 2>&1 | head -1
|
||
echo -n " SQLite : "; node -e 'const D=require("better-sqlite3");const db=new D("'"$DSHS_DATA_ROOT"'/dshs.db",{readonly:true});console.log(db.prepare("select username, uid from users order by rowid").all().map(u=>u.username+"="+u.uid).join(" "))'
|
||
echo " --- 磁盘目录属主（与 uid 对照；多出的 5 个是已删用户孤儿目录） ---"
|
||
for d in "$DSHS_DATA_ROOT"/users/*/; do printf " %-38s uid=%s\n" "$(basename "$d")" "$(stat -c %u "$d")"; done
|
||
|
||
echo "=== 2) 建 47→106 专用密钥（仅用于 rsync） ==="
|
||
[ -f "$KEY" ] || ssh-keygen -t ed25519 -N "" -C "dshs-rsync-47to106" -f "$KEY" >/dev/null 2>&1
|
||
echo " PUBKEY=$(cat "$KEY.pub")"
|
||
|
||
echo "=== 3) 试连通 106:22 ==="
|
||
if ssh -i "$KEY" -o BatchMode=yes -o StrictHostKeyChecking=accept-new -o ConnectTimeout=8 root@"$DSH_PEER_PUBLIC_IP" 'echo ok' 2>/dev/null | grep -q ok; then
|
||
echo " ✓ 已可连通（公钥已装）"
|
||
else
|
||
echo " ⏳ 尚不可连通 —— 需先把我本机把这个公钥装到 106"
|
||
fi
|