loginctl 命令 #

loginctl [选项...] 命令 [参数...]

loginctl list-sessions

loginctl session-status 3

loginctl show-session 3

loginctl activate 1

loginctl lock-session 1

loginctl unlock-session 1

loginctl terminate-session 3

loginctl kill-session 3 --signal=SIGTERM

loginctl list-users

loginctl user-status user1

loginctl show-user user1

loginctl enable-linger user1

loginctl disable-linger user1

loginctl terminate-user user1

loginctl kill-user user1 --signal=SIGTERM

loginctl list-seats

loginctl seat-status seat0

loginctl show-seat seat0

loginctl attach seat0 /sys/devices/pci0000:00/0000:00:1f.3/sound/card1

loginctl terminate-seat seat0

loginctl show-session 3 -p Type -p TTY

loginctl show-user user1 -p Linger

systemctl status "session-$(loginctl list-sessions --no-legend | awk '{print $1}' | head -n1).scope"

loginctl --host=user@remote-server list-sessions

loginctl --machine=container_name list-users

loginctl session-status 3 --no-pager

loginctl enable-linger username

loginctl disable-linger username

loginctl show-user username -p Linger

#!/bin/bash
# 生成用户会话报告

echo "Active Sessions Report - $(date)"
echo "================================"

# 获取所有活动会话
SESSIONS=$(loginctl list-sessions --no-legend)

# 遍历每个会话
while read -r session_info; do
    # 提取会话ID和用户名
    SESSION_ID=$(echo "$session_info" | awk '{print $1}')
    USER=$(echo "$session_info" | awk '{print $3}')

    # 获取会话详细信息
    SESSION_TYPE=$(loginctl show-session "$SESSION_ID" -p Type --value)
    SESSION_TTY=$(loginctl show-session "$SESSION_ID" -p TTY --value)
    SESSION_REMOTE=$(loginctl show-session "$SESSION_ID" -p Remote --value)
    SESSION_TIMESTAMP=$(loginctl show-session "$SESSION_ID" -p Timestamp --value)

    echo "Session ID: $SESSION_ID"
    echo "User: $USER"
    echo "Type: $SESSION_TYPE"
    echo "TTY: $SESSION_TTY"
    echo "Remote: $SESSION_REMOTE"
    echo "Started: $SESSION_TIMESTAMP"
    echo "--------------------------------"
done <<< "$SESSIONS"

#!/bin/bash
# 监控远程登录并发送通知

# 获取远程会话
REMOTE_SESSIONS=$(loginctl list-sessions --no-legend | while read -r session_info; do
    SESSION_ID=$(echo "$session_info" | awk '{print $1}')
    REMOTE=$(loginctl show-session "$SESSION_ID" -p Remote --value)

    if [ "$REMOTE" = "yes" ]; then
        USER=$(echo "$session_info" | awk '{print $3}')
        REMOTE_HOST=$(loginctl show-session "$SESSION_ID" -p RemoteHost --value)
        echo "User $USER logged in from $REMOTE_HOST (Session $SESSION_ID)"
    fi
done)

# 如果有远程会话，发送通知
if [ -n "$REMOTE_SESSIONS" ]; then
    echo "Remote login detected at $(date)" > /tmp/remote_login.log
    echo "$REMOTE_SESSIONS" >> /tmp/remote_login.log

    # 发送邮件通知
    mail -s "Remote Login Alert" [email protected] < /tmp/remote_login.log
fi

#!/bin/bash
# 自动锁定闲置会话

# 获取图形会话
GRAPHICAL_SESSIONS=$(loginctl list-sessions --no-legend | while read -r session_info; do
    SESSION_ID=$(echo "$session_info" | awk '{print $1}')
    TYPE=$(loginctl show-session "$SESSION_ID" -p Type --value)

    if [ "$TYPE" = "x11" ] || [ "$TYPE" = "wayland" ]; then
        IDLE_HINT=$(loginctl show-session "$SESSION_ID" -p IdleHint --value)

        if [ "$IDLE_HINT" = "yes" ]; then
            echo "$SESSION_ID"
        fi
    fi
done)

# 锁定闲置的图形会话
for SESSION_ID in $GRAPHICAL_SESSIONS; do
    echo "Locking idle session $SESSION_ID"
    loginctl lock-session "$SESSION_ID"
done

#!/bin/bash
# 为用户设置资源限制

USER=$1
MEMORY_LIMIT=$2  # 例如：2G

if [ -z "$USER" ] || [ -z "$MEMORY_LIMIT" ]; then
    echo "Usage: $0 username memory_limit"
    echo "Example: $0 user1 2G"
    exit 1
fi

# 创建用户特定的systemd配置目录
mkdir -p /etc/systemd/system/user-$USER.slice.d/

# 创建资源限制配置
cat > /etc/systemd/system/user-$USER.slice.d/memory.conf << EOF
[Slice]
MemoryMax=$MEMORY_LIMIT
EOF

# 重新加载systemd配置
systemctl daemon-reload

echo "Memory limit for user $USER set to $MEMORY_LIMIT"

#!/bin/bash
# 为用户启用服务自动启动

USER=$1
SERVICE=$2  # 例如：myapp.service

if [ -z "$USER" ] || [ -z "$SERVICE" ]; then
    echo "Usage: $0 username service_name"
    echo "Example: $0 user1 myapp.service"
    exit 1
fi

# 启用用户留存
loginctl enable-linger $USER

# 为用户启用服务
sudo -u $USER systemctl --user enable $SERVICE

echo "Service $SERVICE enabled for user $USER with linger"

sudo loginctl enable-linger username

# 确认会话ID
loginctl list-sessions

# 使用sudo
sudo loginctl terminate-session session_id

# 如果仍然失败，尝试向会话发送SIGKILL信号
sudo loginctl kill-session session_id --signal=SIGKILL

# 检查systemd版本
systemctl --version

# 确认留存目录存在
ls -la /var/lib/systemd/linger/

# 手动创建留存标记
sudo mkdir -p /var/lib/systemd/linger/
sudo touch /var/lib/systemd/linger/username

# 在容器主机上使用
sudo loginctl --machine=container_name list-sessions

# 或者在容器内使用nsenter
nsenter -t 1 -m -p loginctl list-sessions