干运维三年，攒了一堆脚本。

有些是网上抄的。有些是自己写的，反正能用就行。不过，

今天整理一享出来。

. 服务器巡检脚本

每天早上跑一遍，看看服务器有没有问题。

#!老实说，/bin/bash
# check.sh - 服务器巡检
RED='\033;n
echo -e "${RED}警告: 内存使用率 ${MEM_USAGE}% 超过80%${NC}"
fi
# . 磁盘
echo -e "
"
df -h | grep -E '^/dev/'
# 检查磁盘使用率
df -h | grep -E '^/dev/' | while read line;do
USAGE=$
MOUNT=$
if;n
echo -e "${RED}警告: $MOUNT 使用率 ${USAGE}% 超过80%${NC}"
fi
done
# . 网络连接数过高？netstat_check {
local conn_count=$(netstat --tcp --numeric-hosts --programs |
grep ESTABLISHED |
wc --lines)
if;n # 增加此项用于判断连接数异常时触发报警逻辑的阈值
echo "${RED} WARNING : Connection count is high ${NC}"
return 1;else # 若不超过阈值则不做处理并返回正确代码
return;fi，说起来，}
netstat_check && echo " Netstat connection is OK." || echo " Netstat connection is FAILED."
# . 进程状态异常？ps aux --sort=-%cpu|head -
ps aux --sort=-%mem|head -
for svc in nginx mysql redis docker;do
if systemctl is-active --quiet "$svc">/dev/null;n echo "$svc running...";按理说，else echo "$svc stopped!，!"，fi;done

. 日志清理脚本

日志不清理，磁盘早晚爆。

#!/bin/bash
# clean_logs.sh
LOG_DIRS=(
"/var/log/nginx"
"/var/log/app"
"/data/logs"
)
KEEP_DAYS=7
for dir in "${LOG_DIRS}";do
if，n mkdir-p "$dir";fi # 添加目录存在性检查及创建目录操作
done;for dir in "${LOG_DIRS}";do # 主循环开始处增加了目录存在性验证步骤,并新增了针对旧文件归档压缩操作
cd "$dir";find ./name"*.log*"-mtime +$KEEP_DAYS-exec gzip {} \;
done，不过，if command-v docker>/dev/null;n truncate-s /var/lib/docker/containers/*/*json.log>/dev/null;fi # 增加Docker日志清理功能
journalctl--vacuum-time=7days # 增加journalctl日志清理指令

. MySQL备份脚本

每天凌晨跑，备份到本地+远程。

#!/bin/bash
DB_HOST=""
DB_USER=""
DB_PASS=""
BACKUP_DIR="/backup/mysql"
DATE=$
mkdir-p BACKUP_DIR &>/dev/null || { exit;老实说，}
DATABASES=`mysql-u$DB_USER-p$DB_PASS-e"SHOW DATABASES;"|grep-v mysql|grep-v information_schema`
for db in DATABASES;do mysqldump-u$DB_USER-p$DB_PASS--routines--triggers$db|gzip>"$BACKUP_DIR"/"$db"_"$DATE".sql.gz;done，其实，REMOTE_HOST="" REMOTE_PORT="" REMOTE_USER="" REMOTE_PATH="/path/to/remote"
if rsync-avzP-e"ssh-p"$REMOTE_PORT""$BACKUP_DIR"/"$REMOTE_USER@REMOTE_HOST":"REMOTE_PATH";n rm-"rf"$BACKUP_DIR/*.sql.gz else exit fi;find BACKUP_DIR-name"*.sql.gz"-mtime +7-delete &>/dev/null || { exit;}

. 批量输入命令脚本

管理多台服务器，一个个登录太麻烦。

#!/bin/bash
SERVERS=(
""
""
)
PASSWORD_FILE="/path/to/password_file"
if ];n touch PASSWORD_FILE chmod PASSWORD_FILE fi;read-p "请输入命令:" CMD while IFS=$'
' read server_line do SERVER_IP=`awk'{print }'` SERVER_NAME=`awk'{print }'` SSH_PWD=`awk'{print }'` sshpass-s${SSH_PWD}"ssh-oStrictHostKeyChecking=no-oUserKnownHostsFile=/dev/nullroot@SERVER_IP-CMD>> output_$.log done 

. 一键部署脚本

新服务器装环境用。

#!/bin/bash set-e pipefail source /etc/profile.d/*.sh function install_packages { apt update apt install-y build-essential curl wget git tree net-tools iputils-ping telnet sshpass expect openssl nfs-common cmake libssl-dev libcurl4-openssl-dev pkg-config make unzip zip tar gzip rsync htop iotop iperf iperf python python-dev python-setuptools gcc gcc-multilib g++ flex bison libncurses5-dev libssl-dev libxml-parser-perl lrzsz libaio-devel screen vim tmux dnsutils jq bc netcat-openbsd socat tcpdump strace lsof mtr tcptraceroute sysstat p7zip-full locate mlocate logrotate lnav ncdu ipvsadm smartmontools psmisc ntpdate ntp openssh-server cron supervisor sudo ufw failfail failfail failfail failfail failfail failfail failfail failfail failfail failfail failsysvinit-core rsyslog postfix sysfsutils dnsmasq-base avahi-daemon haveged tzdata locales console-setup console-data keyboard-configuration kbd xfonts-base xfonts-utils fontconfig xorg-xrdp xrdpxkbsetxserver-xorg-input-allxserver-xorg-video-fbdexpatlibexpatxfonts-utilslibfontconfiglibfreetypexfce-terminalxfconfthunarthunar-volmanexo-thumbnailerlibfm-gtklxappearancelightdmlightdm-gtk-greeterunattended-upgradesupdate-notifier-commonapt-transport-httpsca-certificatesgnupgagentsoftware-properties-commonufwufwufwufwufwufwufwufwufwufwufwuftunattended-upgradesupdate-notifier-commonapt-transport-httpsca-certificatesgnupgagentsoftware-properties-commonsupervisorsudoautofsntpdntpdntpdntpdntpdntpdntpdntpdfailfailsafefailsafefailsafefailsafefailsafefailsafefailfailsafeautofsrsynchtophyperfineiperffirewall-cmdfirewalldsystemctlrestartfirewalldsystemctlstartfirewalldiptablesiptables-restoreniptables-restoreip6tablesip6tables-restorenftablesnftablesserviceiptables-saveiptablesservicenftablesserviceip6tablesserviceipsetservicesystemctlenablefirewalldsystemctlenableiptablessystemctlenableip6tablessystemctlenableipsetserviceiptablessavefirewalldserviceniptablessavenftablesserviceip6tablessaveipsetservicefirewall-dstartfirewall-denablehttpdhaproxynginxphp-fpmphp-redisredis-servermysqltcp_wrappersrpcbindsshdopenrcsysvinitopenrcsysvinitopenrcsysvinitopenrcsysvinitopenrcrebootrebootrebootrebootrebootrebootlocalectlstartNetworkManagernetworkmanagerservicenetworkmanagerrestartsystemctlrestartnetwork-manager.serviceuseraddaddusergroupaddnewgrpchgrppasswdusermodgroupmoddeluserdelgroupchownchgrppasswdusermodgroupmoddeluserdelgroupchownchgrppasswdusermodgroupmoddeluserdelgroupchownchgrppasswdusermodgroupmoddeluserdelgroupchownchgrp 

这些脚本都解决了哪些痛点？

• 监控告警疲劳：通过自动化巡检减少人工干预时间；
• 容量规划困难：实时了解资源利用情况以便提前扩容；话说回来，
• 安全风险：定期更新程序和补丁降低漏洞暴露风险；
• 故障排查效率低：集中式日志收集简化问题诊断流程；
• 业务中断风险高：快速恢复能力保障关键应用连续性。