Linux Shell Web超级终端工具shellinabox
Shell是Linux内核应用程序，是指“为使用者提供操作界面”的软件，也是命令解析器，它类似于Windows操作系统DOS下的cmd.exe应用程序。它接收用户命令，然后调用相应的应用程序，用户一般管理Linux服务器都是习惯用putty、Xshell、SecureCRT、secure shell等客户端端工具，但是使用这些客户端都是需要在本地安装后才能使用，如果换其它电脑也是需要重新安装，这样非常使用起来非常麻烦，所以，我们今天就来介绍一块非常方便的shell客户端工具，使用系统自带的浏览器来管理Linux服务终端，是一款能随时在任何终端上面管理，这一款运行在linux下面的工具 shellinabox，只需要在Linux服务器上面安装并配置好shellinabox。
shellinabox是由Markus Gutschke创建的基于Web的终端模拟器。它具有内置的Shell Web服务端，在指定端口上作为基于Web的SSH客户端运行，并提示您使用任何支持AJAX/JavaScript和CSS的浏览器远程访问和控制Linux Server SSH Shell，而无需任何其他浏览器插件，使用非常方便，不过安装和配置是需要有点点Linux基础，如果觉得自己完全不懂Linux，可以建议去购买《Linux就该这么学》这本教程，非常适合初学者入门，或者去此教程的官网查看详细的资料，直接在百度输入此书名就可以直接进入官网。
shellinbox是一款在Linux服务器下有一个内建的web server作为基本的web ssh client，允许你通过指定的端口访问linux服务器的ssh shell，只要你的浏览器支持AJAX/JS/CSS就可以访问，不过现在主流的操作系统自带的浏览器都支持，shellinabox是一款开源的轻量级软件，在安装shellinabox之前要确定Linux服务端是否安装了openssl库；debian和ubuntu官方还提供有deb安装包，而centos也有rpm包，也可以通过yum源安装，安装及配置也比较简单，下面我们来详细的安装和配置shellinabox。
一、在RHEL、 CentOS系统上面安装及配置步骤如下
# yum install openssl shellinabox
Loaded plugins: fastestmirror
Determining fastest mirrors
epel/x86_64/metalink | 9.2 kB 00:00:00
* base: mirrors.aliyun.com
* epel: mirrors.aliyun.com
* extras: mirrors.aliyun.com
* updates: mirrors.aliyun.com
base | 3.6 kB 00:00:00
epel | 3.2 kB 00:00:00
extras | 3.4 kB 00:00:00
updates | 3.4 kB 00:00:00
(1/6): extras/7/x86_64/primary_db | 156 kB 00:00:00
(2/6): base/7/x86_64/group_gz | 166 kB 00:00:01
(3/6): epel/x86_64/updateinfo | 940 kB 00:00:08
(4/6): updates/7/x86_64/primary_db | 1.3 MB 00:00:10
(5/6): epel/x86_64/primary | 3.6 MB 00:00:21
(6/6): base/7/x86_64/primary_db | 6.0 MB 00:00:26
epel 12745/12745
Resolving Dependencies
–> Running transaction check
—> Package openssl.x86_64 1:1.0.2k-12.el7 will be updated
—> Package openssl.x86_64 1:1.0.2k-16.el7 will be an update
–> Processing Dependency: openssl-libs(x86-64) = 1:1.0.2k-16.el7 for package: 1:openssl-1.0.2k-16.el7.x86_64
—> Package shellinabox.x86_64 0:2.20-5.el7 will be installed
–> Running transaction check
—> Package openssl-libs.x86_64 1:1.0.2k-12.el7 will be updated
–> Processing Dependency: openssl-libs(x86-64) = 1:1.0.2k-12.el7 for package: 1:openssl-devel-1.0.2k-12.el7.x86_64
—> Package openssl-libs.x86_64 1:1.0.2k-16.el7 will be an update
–> Running transaction check
—> Package openssl-devel.x86_64 1:1.0.2k-12.el7 will be updated
—> Package openssl-devel.x86_64 1:1.0.2k-16.el7 will be an update
–> Finished Dependency Resolution
Dependencies Resolved
======================================================================================
Package Arch Version Repository Size
======================================================================================
Installing:
shellinabox x86_64 2.20-5.el7 epel 136 k
Updating:
openssl x86_64 1:1.0.2k-16.el7 base 493 k
Updating for dependencies:
openssl-devel x86_64 1:1.0.2k-16.el7 base 1.5 M
openssl-libs x86_64 1:1.0.2k-16.el7 base 1.2 M
Transaction Summary
======================================================================================
Install 1 Package
Upgrade 1 Package (+2 Dependent packages)
Total download size: 3.3 M
Is this ok [y/d/N]:y
Downloading packages:
No Presto metadata available for base
(1/4): openssl-1.0.2k-16.el7.x86_64.rpm | 493 kB 00:00:01
(2/4): shellinabox-2.20-5.el7.x86_64.rpm | 136 kB 00:00:01
(3/4): openssl-devel-1.0.2k-16.el7.x86_64.rpm | 1.5 MB 00:00:05
(4/4): openssl-libs-1.0.2k-16.el7.x86_64.rpm | 1.2 MB 00:00:05
———————————————————————————————————————–
Total 469 kB/s | 3.3 MB 00:00:07
Running transaction check
Running transaction test
Transaction test succeeded
Running transaction
Updating : 1:openssl-libs-1.0.2k-16.el7.x86_64 1/7
Updating : 1:openssl-1.0.2k-16.el7.x86_64 2/7
Installing : shellinabox-2.20-5.el7.x86_64 3/7
Updating : 1:openssl-devel-1.0.2k-16.el7.x86_64 4/7
Cleanup : 1:openssl-devel-1.0.2k-12.el7.x86_64 5/7
Cleanup : 1:openssl-1.0.2k-12.el7.x86_64 6/7
Cleanup : 1:openssl-libs-1.0.2k-12.el7.x86_64 7/7
Verifying : 1:openssl-libs-1.0.2k-16.el7.x86_64 1/7
Verifying : 1:openssl-devel-1.0.2k-16.el7.x86_64 2/7
Verifying : shellinabox-2.20-5.el7.x86_64 3/7
Verifying : 1:openssl-1.0.2k-16.el7.x86_64 4/7
Verifying : 1:openssl-devel-1.0.2k-12.el7.x86_64 5/7
Verifying : 1:openssl-1.0.2k-12.el7.x86_64 6/7
Verifying : 1:openssl-libs-1.0.2k-12.el7.x86_64 7/7
Installed:
shellinabox.x86_64 0:2.20-5.el7
Updated:
openssl.x86_64 1:1.0.2k-16.el7
Dependency Updated:
openssl-devel.x86_64 1:1.0.2k-16.el7 openssl-libs.x86_64 1:1.0.2k-16.el7
Complete!
二、配置shellinaboxd
192.168.3.160是SSH服务器IP地址，
# vim /etc/sysconfig/shellinaboxd
# TCP port that shellinboxd’s webserver listens on
PORT=6175
# specify the IP address of a destination SSH server
OPTS=”-s /:SSH:192.168.3.160″ #(https协议)
#OPTS=”-t -s /:SSH:192.168.3.160″ #(http协议)
# if you want to restrict access to shellinaboxd from localhost only
#下面配置是仅主机访问，其它主机不能访问
#OPTS=”-s /:SSH:192.168.3.160 –localhost-only”
shellinaboxd默认端口是：4200,我这里修改为6175。
Shellinaboxd常用参数使用的帮助手册
# shellinaboxd –help
List of command line options:
-b, –background[=PIDFILE] run in background
-c, –cert=CERTDIR set certificate dir (default: $PWD)
–cert-fd=FD set certificate file from fd
–css=FILE attach contents to CSS style sheet
–cgi[=PORTMIN-PORTMAX] run as CGI
-d, –debug enable debug mode
-f, –static-file=URL:FILE serve static file from URL path
-g, –group=GID switch to this group (default: nobody)
-h, –help print this message
–linkify=[none|normal|aggressive] default is “normal”
–localhost-only only listen on 127.0.0.1
–no-beep suppress all audio output
-n, –numeric do not resolve hostnames
-m, –messages-origin=ORIGIN allow iframe message passing from origin
–pidfile=PIDFILE publish pid of daemon process
-p, –port=PORT select a port (default: 4200)
-s, –service=SERVICE define one or more services
-t, –disable-ssl disable transparent SSL support
–disable-ssl-menu disallow changing transport mode
–disable-utmp-logging disable logging to utmp and wtmp
-q, –quiet turn off all messages
–unixdomain-only=PATH:USER:GROUP:CHMOD listen on unix socket
-u, –user=UID switch to this user (default: nobody)
–user-css=STYLES defines user-selectable CSS options
-v, –verbose enable logging messages
–version prints version information
–disable-peer-check disable peer check on a session
三、启动、停止、自启动服务
Centos 6
# service shellinaboxd start //启动服务
# service shellinaboxd stop //停止服务
# service shellinaboxd restart //重启服务
# chkconfig shellinaboxd on //自启服务
Centos 7
# systemctl start shellinaboxd.service
# systemctl stop shellinaboxd.service
# systemctl restart shellinaboxd.service
# systemctl enable shellinaboxd.service
强制关闭 Shellinaboxd
查找到 Shellinaboxd 的进程 pid ，kill 即可
# ps -aux|grep shellinaboxd | grep -v grep | awk ‘{print $1}’
也可在启动时加上 -p 参数，将进程 pid 保存到指定的文件中，需要关闭时读取它并进行 kill
四、查看服务状态
# netstat -nap | grep shellinabox
tcp 0 0 0.0.0.0:6175 0.0.0.0:* LISTEN 118916/shellinaboxd
默认60s不登录自动断开
登录成功
退出web Shell终端：
