host_name=`hostname | grep -i .mandic.net.br > /dev/null ; echo $?`

if [ $host_name -eq 0 ]; then

echo "Hostname já no padrão FQDN"

hostnamectl set-hostname $(echo -e $(hostname | cut -d '-' -f1,7).mandic.net.br)

systemctl restart systemd.hostname

hostname >>

echo "# .bashrc

fi" > /root/.bashrc

source /root/.bashrc

echo '#!/bin/bash

PS1="$Normal$Azul[$Branco(\t) $Verde\u$Vermelho@$Amarelo\h$Verde $Ciano\w$Azul]$Branco\\$ $Normal"' > /etc/profile.d/mandic_bashrc.sh

source /etc/profile.d/mandic_bashrc.sh

echo '# .bash_profile

export PATH' > /root/.bash_profile

source /root/.bash_profile

}

instalacao_pacotes_essenciais(){

wget -q -O - http://www.atomicorp.com/installers/atomic | sh

wget https://dl.fedoraproject.org/pub/epel/7/x86_64/e/epel-release-7-9.noarch.rpm

rpm -ivh epel-release-7-9.noarch.rpm

yum update -y

yum install vim mlocate ipvsadm perl-Net-IP perl-IO-Socket-INET6 perl-Socket6 perl-Authen-Radius perl-MailTools perl-Net-DNS perl-Net-IMAP-Simple perl-Net-IMAP-Simple-SSL perl-POP3Client perl-libwww-perl perl-Net-SSLeay perl-Crypt-SSLeay.x86_64 perl-LWP-Authen-Negotiate.noarch perl-Test-Mock-LWP.noarch openssh-clients.x86_64 rsync.x86_64 wget.x86_64 vim-X11.x86_64 vim-enhanced.x86_64 mlocate.x86_64 nc.x86_64 tcpdump telnet heartbeat nc.x86_64 pwgen.x86_64 screen lsof setroubleshoot setools -y -y

}

chaves(){

VALIDA_PACOTE1=`rpm -qa | grep -i sshpass > /dev/null; echo $?`

if [ $VALIDA_PACOTE1 -ne 1 ] ;then

echo "NÃO FAZER" > /dev/null

rpm -ivh ftp://ftp.pbone.net/mirror/ftp5.gwdg.de/pub/opensuse/repositories/home:/KGronlund/CentOS_7/x86_64/sshpass-1.05-7.1.x86_64.rpm

VALIDA_PACOTE2=`rpm -qa | grep -i openssh > /dev/null; echo $?`

if [ $VALIDA_PACOTE1 -ne 1 ] ;then

echo "NÃO FAZER" > /dev/null

yum install openssh-clients.x86_64 wget -y

if [ -e /root/.ssh/id_rsa ];then

echo "Já tem chave RSA" > /dev/null

ssh-keygen -t rsa -f /root/.ssh/id_rsa -P ""

}

confg_nos(){

echo ""

echo "###############################################"

echo "# Configuração dos NODES dentro do CLUSTER #"

echo "###############################################"

echo ""

echo ""

echo -e "\\033[1;39m \\033[1;32mInforme a quantidade de Servidores CLUSTER: \\033[1;39m \\033[1;0m"

echo ""

read NUM_SERVERS

COUNT=0

CONT=$(( $COUNT + 1 ))

if [ -e config_cluster.tmp ];then

rm -rf config_cluster.tmp

else

echo "Arquivo não existe" > /dev/null

while [[ $NUM_SERVERS -ge $CONT ]] ; do

echo ""

echo -e "\\033[1;39m \\033[1;32mInforme o IP do Server $CONT:\\033[1;39m \\033[1;0m"

echo ""

read SERVER

if [[ $CONT -ne $NUM_SERVERS+1 ]] ;then

echo "$SERVER" >> config_cluster.tmp

else

echo "FIM" > /dev/null

fi

CONT=$(( $CONT + 1 ))

echo -e "\\033[1;39m \\033[1;32mInforme a senha padrão dos servidores: \\033[1;39m \\033[1;0m\n"

read SENHASSH

export SENHASSH

echo '#!/bin/bash' > config_rel_conf.sh

cat config_cluster.tmp | while read TROCACHAVE; do echo 'sshpass -p' "$SENHASSH" 'ssh-copy-id -i /root/.ssh/id_rsa.pub' "$TROCACHAVE" '&& sleep 1' >> config_rel_conf.sh; done

echo 'StrictHostKeyChecking no

#serKnownHostsFile=/dev/null'> ~/.ssh/config

sh +x config_rel_conf.sh && sleep 1

rm -rf config_rel_conf.sh

cat config_cluster.tmp | while read COPIACHAVE; do scp /root/.ssh/id_rsa.pub $COPIACHAVE:/root/.ssh/id_rsa.pub; done

}

pacemaker_install(){

echo 'yum -y install pacemaker pcs fence-agents-all

echo -e "$new\n$new" | passwd hacluster' > /root/pcs_install.sh

cat config_cluster.tmp | while read PCSINSTALL; do spc /root/pcs_install.sh $PCSINSTALL:/root/pcs_install.sh && ssh $PCSINSTALL "sh +x pcs_install.sh"; done

}

pacemaker_configure(){

echo ""

echo "####################################################"

echo "# Configuração dos VIPs dentro do CLUSTER de FW #"

echo "####################################################"

echo ""

echo ""

echo -e "\\033[1;39m \\033[1;32mInforme a quantidade de VIPs:\\033[1;39m \\033[1;0m"

echo ""

read NUM_VIP

COUNT=0

CONT=$(( $COUNT + 1 ))

if [ -e config_cluster.tmp ];then

rm -rf config_cluster.tmp

else

echo "Arquivo não existe" > /dev/null

while [[ $NUM_VIP -ge $CONT ]] ; do

echo ""

echo -e "\\033[1;39m \\033[1;32mInforme o IP do Server $CONT:\\033[1;39m \\033[1;0m"

echo ""

read VIP

export VIP

echo ""

echo -e "\\033[1;39m \\033[1;32mInforme a MASCARA do Server $CONT:\\033[1;39m \\033[1;0m"

echo ""

read MASCARA_REDE

export MASCARA_REDE

echo ""

echo -e "\\033[1;39m \\033[1;32mInforme a INTERFACE do Server $CONT:\\033[1;39m \\033[1;0m"

echo ""

read INTERFACE

export INTERFACE

if [[ $CONT -ne $NUM_VIP+1 ]] ;then

pcs resource create ClusterIP ocf:heartbeat:IPaddr2 ip=$VIP cidr_netmask=$MASCARA_REDE nic=eth0:$INTERFACE op monitor interval=10s

pcs resource create PingIP ocf:pacemaker:ping dampen=5s multiplier=1000 host_list=$VIP --clone

else

echo "FIM" > /dev/null

CONT=$(( $CONT + 1 ))

pcs resource create Firewall systemd:firewall op monitor interval=5 --clone

pcs constraint colocation add ClusterIP INFINITY

pcs resource defaults failure-timeout=30

pcs resource defaults migration-threshold=1

}

firewall_service(){

systemctl stop firewalld.service

systemctl mask firewalld.service

echo '[Unit]

WantedBy=basic.target' > /usr/lib/systemd/system/firewall.service

cat config_cluster.tmp | while read FWS; do ssh $FWS "systemctl stop firewalld.service" && ssh $FWS "systemctl mask firewalld.service" && scp /usr/lib/systemd/system/firewall.service $FWS:/usr/lib/systemd/system/firewall.service; done

}

firewall_init(){

mkdir -p /usr/libexec/firewall/

echo '#!/bin/bash

esac' > /usr/libexec/firewall/firewall.init

chmod +x /usr/libexec/firewall/firewall.init

systemctl start firewall.service

cat config_cluster.tmp | while read FWI; do ssh $FWI "mkdir -p /usr/libexec/firewall/" && scp /usr/libexec/firewall/firewall.init $FWI:/usr/libexec/firewall/firewall.init && ssh $FWI "systemctl start firewall.service"; done

}

padrao

chave

confg_nos

pacemaker_install

firewall_service

firewall_init

pacemaker_configure