如品之茗

完整脚本

# ESXi主机配置备份脚本
# 描述：连接vCenter备份所有ESXi主机配置，并自动清理历史备份

# 定义备份基础路径
$basePath = "C:\ESXi-Config-Backups"

# 创建日志记录函数（需在调用前定义）
function Write-Log {
    param (
        [string]$Message,
        [string]$LogPath = $script:logFilePath
    )
    $timestamp = Get-Date -Format "yyyy-MM-dd HH:mm:ss"
    $logMessage = "[$timestamp] $Message"
    
    # 输出到控制台
    Write-Output $logMessage
    
    # 追加到日志文件
    if ($LogPath) {
        $logMessage | Out-File -FilePath $LogPath -Append -Encoding UTF8
    }
}

# 检查基础路径是否存在，不存在则创建
if (-not (Test-Path -Path $basePath)) {
    try {
        New-Item -ItemType Directory -Path $basePath -Force | Out-Null
        Write-Log "已创建基础备份路径: $basePath"
    }
    catch {
        throw "无法创建基础备份路径: $basePath. 错误: $_"
    }
}

# 获取当前时间（用于文件夹命名）
$currentDateTime = Get-Date -Format "yyyy-MM-dd_HH-mm-ss"
$backupFolderPath = Join-Path -Path $basePath -ChildPath $currentDateTime

# 创建本次备份文件夹
try {
    New-Item -ItemType Directory -Path $backupFolderPath -Force | Out-Null
    Write-Log "已创建备份文件夹: $backupFolderPath"
}
catch {
    throw "无法创建备份文件夹: $backupFolderPath. 错误: $_"
}

# 创建日志文件路径
$logFilePath = Join-Path -Path $backupFolderPath -ChildPath "BackupLog.txt"

# 记录脚本开始
Write-Log "===== ESXi配置备份脚本开始执行 =====" -LogPath $logFilePath

try {
    # 1. 临时禁用SSL证书验证
    Write-Log "正在临时禁用SSL证书验证..." -LogPath $logFilePath
    Set-PowerCLIConfiguration -InvalidCertificateAction Ignore -Confirm:$false -Scope Session | Out-Null
    Write-Log "SSL证书验证已临时禁用" -LogPath $logFilePath

    # 2. 断开所有现有vCenter连接
    $existingConnections = @(Get-VIServer -ErrorAction SilentlyContinue)
    if ($existingConnections.Count -gt 0) {
        Write-Log "发现现有连接，正在断开..." -LogPath $logFilePath
        Disconnect-VIServer -Server * -Force -Confirm:$false -ErrorAction SilentlyContinue | Out-Null
        Write-Log "已断开所有现有vCenter连接" -LogPath $logFilePath
    }

    # 3. 定义vCenter连接凭据（建议从安全存储或加密文件读取）
    $vcUsername = "<service-account>"
    $vcPassword = "<password>"
    $vcServer = "<vCenter-fqdn>"
    
    # 创建安全凭据对象
    $securePassword = ConvertTo-SecureString $vcPassword -AsPlainText -Force
    $vcCredential = New-Object System.Management.Automation.PSCredential ($vcUsername, $securePassword)

    # 4. 连接到vCenter服务器
    Write-Log "正在连接到vCenter服务器: $vcServer" -LogPath $logFilePath
    try {
        $connection = Connect-VIServer -Server $vcServer -Credential $vcCredential -ErrorAction Stop
        Write-Log "成功连接到vCenter: $($connection.Name)" -LogPath $logFilePath
    }
    catch {
        throw "连接vCenter失败: $_"
    }

    # 5. 获取所有ESXi主机
    Write-Log "正在获取ESXi主机列表..." -LogPath $logFilePath
    try {
        $esxiHosts = Get-VMHost -ErrorAction Stop
        Write-Log "找到 $($esxiHosts.Count) 台ESXi主机" -LogPath $logFilePath
    }
    catch {
        throw "获取ESXi主机列表失败: $_"
    }

    # 6. 遍历每台主机执行备份
    $successCount = 0
    $failedCount = 0
    
    foreach ($esxiHost in $esxiHosts) {
        $hostName = $esxiHost.Name
        Write-Log "正在备份主机: $hostName" -LogPath $logFilePath
        
        try {
            # 执行固件配置备份
            $backupResult = Get-VMHostFirmware -VMHost $esxiHost -BackupConfiguration -DestinationPath $backupFolderPath -ErrorAction Stop
            $successCount++
            Write-Log "✓ 主机 $hostName 备份完成" -LogPath $logFilePath
        }
        catch {
            $failedCount++
            Write-Log "✗ 主机 $hostName 备份失败: $_" -LogPath $logFilePath
            continue
        }
    }

    # 7. 备份完成统计
    Write-Log "备份完成统计: 成功 $successCount 台, 失败 $failedCount 台" -LogPath $logFilePath

    # 8. 清理旧备份（保留30天内的备份）
    $retentionDays = 30
    Write-Log "正在清理 $retentionDays 天前的旧备份..." -LogPath $logFilePath
    
    $oldFolders = Get-ChildItem -Path $basePath -Directory | 
                  Where-Object { $_.LastWriteTime -lt (Get-Date).AddDays(-$retentionDays) }
    
    if ($oldFolders.Count -gt 0) {
        $deletedCount = 0
        foreach ($folder in $oldFolders) {
            try {
                Remove-Item -Path $folder.FullName -Recurse -Force -ErrorAction Stop
                $deletedCount++
                Write-Log "已删除旧备份文件夹: $($folder.Name)" -LogPath $logFilePath
            }
            catch {
                Write-Log "删除文件夹失败: $($folder.Name). 错误: $_" -LogPath $logFilePath
            }
        }
        Write-Log "已清理 $deletedCount 个旧备份文件夹" -LogPath $logFilePath
    }
    else {
        Write-Log "没有需要清理的旧备份文件夹" -LogPath $logFilePath
    }

    # 9. 断开vCenter连接
    Write-Log "正在断开vCenter连接..." -LogPath $logFilePath
    Disconnect-VIServer -Server $vcServer -Confirm:$false -ErrorAction SilentlyContinue
    Write-Log "已断开vCenter连接" -LogPath $logFilePath

    # 10. 恢复SSL证书验证设置
    Write-Log "正在恢复SSL证书验证设置..." -LogPath $logFilePath
    Set-PowerCLIConfiguration -InvalidCertificateAction Prompt -Confirm:$false -Scope Session | Out-Null
    Write-Log "SSL证书验证设置已恢复" -LogPath $logFilePath

    # 最终总结
    Write-Log "所有备份操作已完成" -LogPath $logFilePath
    Write-Log "备份文件保存在: $backupFolderPath" -LogPath $logFilePath
    Write-Log "日志文件位置: $logFilePath" -LogPath $logFilePath
    Write-Log "===== 脚本执行完成 =====" -LogPath $logFilePath

}
catch {
    # 异常处理
    $errorMessage = "脚本执行失败: $_"
    Write-Log $errorMessage -LogPath $logFilePath
    Write-Error $errorMessage
    
    # 尝试恢复SSL设置
    try {
        Set-PowerCLIConfiguration -InvalidCertificateAction Prompt -Confirm:$false -Scope Session | Out-Null
        Write-Log "已恢复SSL证书验证设置" -LogPath $logFilePath
    }
    catch {
        Write-Log "恢复SSL设置失败: $_" -LogPath $logFilePath
    }
    
    throw $errorMessage
}

执行脚本后将得到一个像这样的文件夹