xxm
c68f987653
- archive/hermes-dead-tools-20260820/: hermes独有不在cron不被import的111个一次性排查/测试工具 - archive/hermes-dead-tools-20260820/: 4个废弃scanner(btd1_v3/market_scanner/market_thermometer已废弃/s2v2) - archive/legacy-cleanup-20260820/: MoFin根2旧版(mo_models/technical_analysis)+/home/hmo/scripts无引用旧项目+MoFin/scripts重复prepare_report_data - 删除MoFin根mo_models.py(根旧版,deploy/profile-scripts权威保留) - 保留: mofin_db.py/mo_data.py硬链接(server.py多层sys.path需各目录访问同一inode,非冗余) - fix_gateway.py保留(Gateway看门狗fix_gateway_port.py的活跃依赖,勿误删) - 验证: cron所有脚本引用无缺失, key模块import正常 - hermes独有从116收敛到5核心(alert_logger/market_screener/prepare_report_data/self_todo_executor_v2/xmpp_zhiwei_bot)
46 lines
2.1 KiB
Python
46 lines
2.1 KiB
Python
#!/usr/bin/env python3
|
||
"""audit_runtime.py — 运行中的进程/服务/cron 审计"""
|
||
import subprocess, json, os
|
||
|
||
def sh(cmd, timeout=10):
|
||
try:
|
||
r = subprocess.run(cmd, shell=True, capture_output=True, text=True, timeout=timeout)
|
||
return r.stdout.strip()
|
||
except Exception as e:
|
||
return f"ERR: {e}"
|
||
|
||
print("=== 1. 长期运行的 Python 进程（>1天）===")
|
||
out = sh("ps -eo pid,etime,user,args --sort=-etime | grep -E 'python|node' | grep -v grep | head -25")
|
||
print(out)
|
||
|
||
print("\n=== 2. systemd 服务状态（全部 mofin/hermes/xmpp/ejabberd 相关）===")
|
||
out = sh("systemctl list-units --all --type=service 2>/dev/null | grep -iE 'mofin|hermes|xmpp|ejabberd|wechat|gitea|kanban|wiki|stock|xiaoguo|zhiwei|mohe' | head -25")
|
||
print(out)
|
||
print("\n--- user services ---")
|
||
out = sh("systemctl --user list-units --all --type=service 2>/dev/null | grep -iE 'hermes|xmpp|mofin|wiki' | head -10")
|
||
print(out)
|
||
|
||
print("\n=== 3. DISABLED cron jobs（hermes 两个 profile）===")
|
||
for jf, prof in [('/home/hmo/.hermes/profiles/position-analyst/cron/jobs.json', 'position-analyst'),
|
||
('/home/hmo/.hermes/cron/jobs.json', 'default')]:
|
||
try:
|
||
d = json.load(open(jf))
|
||
jobs = d if isinstance(d, list) else d.get('jobs', [])
|
||
for j in jobs:
|
||
if not j.get('enabled', True):
|
||
lr = str(j.get('last_run_at') or '?')[:10]
|
||
print(f" [{prof}] {j.get('name')} | script={j.get('script')} | last={lr} | paused_reason={j.get('paused_reason')}")
|
||
except Exception as e:
|
||
print(f" {prof}: {e}")
|
||
|
||
print("\n=== 4. 系统 crontab 全文（非注释行）===")
|
||
out = sh("crontab -l | grep -vE '^\\s*#' | grep -vE '^\\s*$'")
|
||
print(out)
|
||
|
||
print("\n=== 5. 僵尸/异常进程（root跑的python、很老的进程）===")
|
||
out = sh("ps -eo pid,etime,user,args | grep -E '^\\s*\\S+\\s+\\S+\\s+root' | grep python | grep -v grep")
|
||
print(out if out else "(none)")
|
||
|
||
print("\n=== 6. 监听端口清单 ===")
|
||
out = sh("ss -tlnp 2>/dev/null | grep -E '8642|8643|8645|8646|8899|5801|5802|5803|5804|5805|5807|5808|5810|9090|9580|5222|5443|5280|19088|19099|9877|9878' | awk '{print $4, $6}'")
|
||
print(out) |