通过Shell方式上传文件到阿里云OSS

 首先使用阿里云函数计算进行签名，避免Aliyun AccessId/AccessKey 暴露在外面，造成安全风险。

使用者上传文件的逻辑是：
1. 先获取上传oss的 policy 及签名
2. 然后根据拿到签名直接上传到aliyun OSS

阿里云签名代码：

<?php
use RingCentralPsr7Response;

function gmt_iso8601($time) {
    $dtStr = date("c", $time);
    $mydatetime = new DateTime($dtStr);
    $expiration = $mydatetime->format(DateTime::ISO8601);
    $pos = strpos($expiration, '+');
    $expiration = substr($expiration, 0, $pos);
    return $expiration."Z";
}

function oss_fun($auth){
   /*
    这里是鉴权，校验失败直接返回401，不做分享
    return json_encode(['status'=>401]);
　　*/
　　//阿里云官方提供的秘钥
    $id= 'aliyun accessid';
    $key= 'aliyun accesskey';
    $host = 'http://oss-host.domain.com';
    //$host = 'https://oss-host.oss-cn-hangzhou.aliyuncs.com';
    $rand_str = rand_str();

    $dir = 'public-dir-7day-delete/'.date("Ymd-His",time()).'_'.$rand_str.'/';

    $now = time();
    $expire = 180; //设置该policy超时时间是180s. 即这个policy过了这个有效时间，将不能访问
    $end = $now + $expire;
    $expiration = gmt_iso8601($end);

    //最大文件大小.当前50MB与web页面相同
    $condition = array(0=>'content-length-range', 1=>0, 2=>1024*1024*50);
    $conditions[] = $condition;

    //表示用户上传的数据,必须是以$dir开始, 不然上传会失败,这一步不是必须项,只是为了安全起见,防止用户通过policy上传到别人的目录
    $start = array(0=>'starts-with', 1=>'$key', 2=>$dir);
    $conditions[] = $start;

    $arr = array('expiration'=>$expiration,'conditions'=>$conditions);
    $policy = json_encode($arr);
    $base64_policy = base64_encode($policy);
    $string_to_sign = $base64_policy;
    $signature = base64_encode(hash_hmac('sha1', $string_to_sign, $key, true));

    $response = array();
    $response['accessid'] = $id;
    $response['host'] = $host;
    $response['policy'] = $base64_policy;
    $response['signature'] = $signature;
    $response['expire'] = $end;
    //这个参数是设置用户上传指定的前缀
    $response['dir'] = $dir;
    $response['id'] = $rand_str;

    return json_encode(['status'=>200,'data'=>$response]);
}


function rand_str( $length = 32 ){
    $str='ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz1234567890';
    $randStr = str_shuffle($str);//打乱字符串
    $rands= substr($randStr,0,$length);//substr(string,start,length);返回字符串的一部分
    return $rands;
}
function handler($request, $context): Response{

    $body       = $request->getBody()->getContents();
    $queries    = $request->getQueryParams();
    $method     = $request->getMethod();
    $headers    = $request->getHeaders();
    $path       = $request->getAttribute('path');
    $requestURI = $request->getAttribute('requestURI');
    $clientIP   = $request->getAttribute('clientIP');

    $auth = isset($headers['Authorization']) ? $headers['Authorization'][0]:null;
    return new Response(
        200,
        array(
            'Content-Type' => 'application/json; charset=utf-8',
        ),
        oss_fun($auth)
    );
}

编写 shell ，用于快速上传到阿里云oss平台：

#!/bin/bash

# jq -h >/dev/null 2>&1 ; if [ $? -ne 0 ]; then echo "Need jq";exit; fi
jq -h >/dev/null 2>&1 || { echo "Need jq";exit; }

function upload_file(){

    #oss=$(curl -s http://root:password@fc.domain.com/upload2oss)#鉴权
    oss=$(curl -s http://fc.domain.com/upload2oss) #获取签名的json
    #echo $oss | python -m json.tool
    startTime_s=`date +%s.%N`
    dir=`echo $oss | jq .data.dir | sed s/"//g`
    host=`echo $oss | jq .data.host | sed s/"//g`
    policy=`echo $oss | jq .data.policy | sed s/"//g`
    accessid=`echo $oss | jq .data.accessid | sed s/"//g`
    signature=`echo $oss | jq .data.signature | sed s/"//g`

    curl -XPOST -sk ${host} 
        -F "policy=${policy}" 
        -F "Signature=${signature}" 
        -F "success_action_status=200" 
        -F "OSSAccessKeyId=${accessid}" 
        -F "x-oss-object-acl=public-read" 
        -F "key=${dir}${1}" 
        -F "file=@${2}" 

    endTime_s=`date +%s.%N`
    runTime=`echo $endTime_s $startTime_s | awk '{print $1-$2}'`
    status=`curl -sI "${host}/${dir}${1}" | awk 'NR==1{print $2}'`

    if [ "${status}"x == "200"x ]; then
        echo -e "${2} 	 ${host}/${dir}${1} 	 ${runTime}s"
    else
        echo "Upload failed:  ${status}"
    fi
}

for i in $*; do   
    if [ ! -f ${i} ]; then
        echo "${i} no file"; continue;
    else
        upload_file ${i##*/} ${i}
    fi
done 

 效果如下：

[litry@HK ~]# ./oss.sh oss.sh docker.sh 
oss.sh      http://oss-host.domain.com/public-dir-7day-delete/20201009-150007_lQGImxc7dtrkXqCh/oss.sh      1.91704s
docker.sh      http://oss-host.domain.com/public-dir-7day-delete/20201009-150009_QBg0W5JFbelL26GN/docker.sh      0.498585s
[litry@HK ~]#