Linux Shell Web超级终端工具shellinabox

Linux Shell Web超级终端工具shellinabox
Shell是Linux内核应用程序，是指“为使用者提供操作界面”的软件，也是命令解析器，它类似于Windows操作系统DOS下的cmd.exe应用程序。它接收用户命令，然后调用相应的应用程序，用户一般管理Linux服务器都是习惯用putty、Xshell、SecureCRT、secure shell等客户端端工具，但是使用这些客户端都是需要在本地安装后才能使用，如果换其它电脑也是需要重新安装，这样非常使用起来非常麻烦，所以，我们今天就来介绍一块非常方便的shell客户端工具，使用系统自带的浏览器来管理Linux服务终端，是一款能随时在任何终端上面管理，这一款运行在linux下面的工具 shellinabox，只需要在Linux服务器上面安装并配置好shellinabox。


shellinabox是由Markus Gutschke创建的基于Web的终端模拟器。它具有内置的Shell Web服务端，在指定端口上作为基于Web的SSH客户端运行，并提示您使用任何支持AJAX/JavaScript和CSS的浏览器远程访问和控制Linux Server SSH Shell，而无需任何其他浏览器插件，使用非常方便，不过安装和配置是需要有点点Linux基础，如果觉得自己完全不懂Linux，可以建议去购买《Linux就该这么学》这本教程，非常适合初学者入门，或者去此教程的官网查看详细的资料，直接在百度输入此书名就可以直接进入官网。


shellinbox是一款在Linux服务器下有一个内建的web server作为基本的web ssh client，允许你通过指定的端口访问linux服务器的ssh shell，只要你的浏览器支持AJAX/JS/CSS就可以访问，不过现在主流的操作系统自带的浏览器都支持，shellinabox是一款开源的轻量级软件，在安装shellinabox之前要确定Linux服务端是否安装了openssl库；debian和ubuntu官方还提供有deb安装包，而centos也有rpm包，也可以通过yum源安装，安装及配置也比较简单，下面我们来详细的安装和配置shellinabox。


一、在RHEL、 CentOS系统上面安装及配置步骤如下


yum install openssl shellinabox
Loaded plugins: fastestmirror
Determining fastest mirrors
epel/x86_64/metalink | 9.2 kB 00:00:00


base: mirrors.aliyun.com
epel: mirrors.aliyun.com
extras: mirrors.aliyun.com
updates: mirrors.aliyun.com
base | 3.6 kB 00:00:00
epel | 3.2 kB 00:00:00
extras | 3.4 kB 00:00:00
updates | 3.4 kB 00:00:00
(1/6): extras/7/x86_64/primary_db | 156 kB 00:00:00
(2/6): base/7/x86_64/group_gz | 166 kB 00:00:01
(3/6): epel/x86_64/updateinfo | 940 kB 00:00:08
(4/6): updates/7/x86_64/primary_db | 1.3 MB 00:00:10
(5/6): epel/x86_64/primary | 3.6 MB 00:00:21
(6/6): base/7/x86_64/primary_db | 6.0 MB 00:00:26
epel 12745/12745
Resolving Dependencies
–> Running transaction check
—> Package openssl.x86_64 1:1.0.2k-12.el7 will be updated
—> Package openssl.x86_64 1:1.0.2k-16.el7 will be an update
–> Processing Dependency: openssl-libs(x86-64) = 1:1.0.2k-16.el7 for package: 1:openssl-1.0.2k-16.el7.x86_64
—> Package shellinabox.x86_64 0:2.20-5.el7 will be installed
–> Running transaction check
—> Package openssl-libs.x86_64 1:1.0.2k-12.el7 will be updated
–> Processing Dependency: openssl-libs(x86-64) = 1:1.0.2k-12.el7 for package: 1:openssl-devel-1.0.2k-12.el7.x86_64
—> Package openssl-libs.x86_64 1:1.0.2k-16.el7 will be an update
–> Running transaction check
—> Package openssl-devel.x86_64 1:1.0.2k-12.el7 will be updated
—> Package openssl-devel.x86_64 1:1.0.2k-16.el7 will be an update
–> Finished Dependency Resolution
Dependencies Resolved
======================================================================================
Package Arch Version Repository Size
======================================================================================
Installing:
shellinabox x86_64 2.20-5.el7 epel 136 k
Updating:
openssl x86_64 1:1.0.2k-16.el7 base 493 k
Updating for dependencies:
openssl-devel x86_64 1:1.0.2k-16.el7 base 1.5 M
openssl-libs x86_64 1:1.0.2k-16.el7 base 1.2 M
Transaction Summary
Install 1 Package
Upgrade 1 Package (+2 Dependent packages)


Total download size: 3.3 M
Is this ok [y/d/N]:y
Downloading packages:
No Presto metadata available for base
(1/4): openssl-1.0.2k-16.el7.x86_64.rpm | 493 kB 00:00:01
(2/4): shellinabox-2.20-5.el7.x86_64.rpm | 136 kB 00:00:01
(3/4): openssl-devel-1.0.2k-16.el7.x86_64.rpm | 1.5 MB 00:00:05
(4/4): openssl-libs-1.0.2k-16.el7.x86_64.rpm | 1.2 MB 00:00:05
Total 469 kB/s | 3.3 MB 00:00:07
Running transaction check
Running transaction test
Transaction test succeeded
Running transaction
Updating : 1:openssl-libs-1.0.2k-16.el7.x86_64 1/7
Updating : 1:openssl-1.0.2k-16.el7.x86_64 2/7
Installing : shellinabox-2.20-5.el7.x86_64 3/7
Updating : 1:openssl-devel-1.0.2k-16.el7.x86_64 4/7
Cleanup : 1:openssl-devel-1.0.2k-12.el7.x86_64 5/7
Cleanup : 1:openssl-1.0.2k-12.el7.x86_64 6/7
Cleanup : 1:openssl-libs-1.0.2k-12.el7.x86_64 7/7
Verifying : 1:openssl-libs-1.0.2k-16.el7.x86_64 1/7
Verifying : 1:openssl-devel-1.0.2k-16.el7.x86_64 2/7
Verifying : shellinabox-2.20-5.el7.x86_64 3/7
Verifying : 1:openssl-1.0.2k-16.el7.x86_64 4/7
Verifying : 1:openssl-devel-1.0.2k-12.el7.x86_64 5/7
Verifying : 1:openssl-1.0.2k-12.el7.x86_64 6/7
Verifying : 1:openssl-libs-1.0.2k-12.el7.x86_64 7/7
Installed:
shellinabox.x86_64 0:2.20-5.el7
Updated:
openssl.x86_64 1:1.0.2k-16.el7
Dependency Updated:
openssl-devel.x86_64 1:1.0.2k-16.el7 openssl-libs.x86_64 1:1.0.2k-16.el7
Complete!


二、配置shellinaboxd
192.168.3.160是SSH服务器IP地址，


vim /etc/sysconfig/shellinaboxd
TCP port that shellinboxd’s webserver listens on
PORT=6175


specify the IP address of a destination SSH server
OPTS="-s /:SSH:192.168.3.160" #(https协议)
#OPTS="-t -s /:SSH:192.168.3.160" #(http协议)


if you want to restrict access to shellinaboxd from localhost only
#下面配置是仅主机访问，其它主机不能访问
#OPTS="-s /:SSH:192.168.3.160 --localhost-only"


shellinaboxd默认端口是：4200,我这里修改为6175。


Shellinaboxd常用参数使用的帮助手册


shellinaboxd --help
List of command line options:
-b, --background[=PIDFILE] run in background
-c, --cert=CERTDIR set certificate dir (default: $PWD)
–cert-fd=FD set certificate file from fd
–css=FILE attach contents to CSS style sheet
–cgi[=PORTMIN-PORTMAX] run as CGI
-d, --debug enable debug mode
-f, --static-file=URL:FILE serve static file from URL path
-g, --group=GID switch to this group (default: nobody)
-h, --help print this message
–linkify=[none|normal|aggressive] default is “normal”
–localhost-only only listen on 127.0.0.1
–no-beep suppress all audio output
-n, --numeric do not resolve hostnames
-m, --messages-origin=ORIGIN allow iframe message passing from origin
–pidfile=PIDFILE publish pid of daemon process
-p, --port=PORT select a port (default: 4200)
-s, --service=SERVICE define one or more services
-t, --disable-ssl disable transparent SSL support
–disable-ssl-menu disallow changing transport mode
–disable-utmp-logging disable logging to utmp and wtmp
-q, --quiet turn off all messages
–unixdomain-only=PATH:USER:GROUP:CHMOD listen on unix socket
-u, --user=UID switch to this user (default: nobody)
–user-css=STYLES defines user-selectable CSS options
-v, --verbose enable logging messages
–version prints version information
–disable-peer-check disable peer check on a session


三、启动、停止、自启动服务
Centos 6


service shellinaboxd start    //启动服务
service shellinaboxd stop    //停止服务
service shellinaboxd restart    //重启服务
chkconfig shellinaboxd on    //自启服务
Centos 7


systemctl start shellinaboxd.service
systemctl stop shellinaboxd.service
systemctl restart shellinaboxd.service
systemctl enable shellinaboxd.service
强制关闭 Shellinaboxd
查找到 Shellinaboxd 的进程 pid ，kill 即可


ps -aux|grep shellinaboxd | grep -v grep | awk ‘{print $1}’
也可在启动时加上 -p 参数，将进程 pid 保存到指定的文件中，需要关闭时读取它并进行 kill


四、查看服务状态


netstat -nap | grep shellinabox
tcp 0 0 0.0.0.0:6175 0.0.0.0:* LISTEN 118916/shellinaboxd



默认60s不登录自动断开


登录成功


退出web Shell终端：