inotify-tools 依赖包
[root@VM-24-3-centos ~]# yum install inotify-tools Loaded plugins: fastestmirror, langpacks Repository epel is listed more than once in the configuration Determining fastest mirrors ...... ...... ...... Resolving Dependencies --> Running transaction check ---> Package inotify-tools.x86_64 0:3.14-9.el7 will be installed --> Finished Dependency Resolution Dependencies Resolved ======================================================================================================================================= Package Arch Version Repository Size ======================================================================================================================================= Installing: inotify-tools x86_64 3.14-9.el7 epel 51 k Transaction Summary ======================================================================================================================================= Install 1 Package Total download size: 51 k Installed size: 111 k Is this ok [y/d/N]: y Downloading packages: inotify-tools-3.14-9.el7.x86_64.rpm | 51 kB 00:00:00 Running transaction check Running transaction test Transaction test succeeded Running transaction Installing : inotify-tools-3.14-9.el7.x86_64 1/1 Verifying : inotify-tools-3.14-9.el7.x86_64 1/1 Installed: inotify-tools.x86_64 0:3.14-9.el7 Complete! [root@VM-24-3-centos ~]#
使用
[root@VM-24-3-centos ~]# inotifywait --help inotifywait 3.14 Wait for a particular event on a file or set of files. Usage: inotifywait [ options ] file1 [ file2 ] [ file3 ] [ ... ] Options: -h|--help Show this help text. @<file> Exclude the specified file from being watched. --exclude <pattern> Exclude all events on files matching the extended regular expression <pattern>. --excludei <pattern> Like --exclude but case insensitive. -m|--monitor Keep listening for events forever. Without this option, inotifywait will exit after one event is received. -d|--daemon Same as --monitor, except run in the background logging events to a file specified by --outfile. Implies --syslog. -r|--recursive Watch directories recursively. --fromfile <file> Read files to watch from <file> or `-' for stdin. -o|--outfile <file> Print events to <file> rather than stdout. -s|--syslog Send errors to syslog rather than stderr. -q|--quiet Print less (only print events). -qq Print nothing (not even events). --format <fmt> Print using a specified printf-like format string; read the man page for more details. --timefmt <fmt> strftime-compatible format string for use with %T in --format string. -c|--csv Print events in CSV format. -t|--timeout <seconds> When listening for a single event, time out after waiting for an event for <seconds> seconds. If <seconds> is 0, inotifywait will never time out. -e|--event <event1> [ -e|--event <event2> ... ] Listen for specific event(s). If omitted, all events are listened for. Exit status: 0 - An event you asked to watch for was received. 1 - An event you did not ask to watch for was received (usually delete_self or unmount), or some error occurred. 2 - The --timeout option was given and no events occurred in the specified interval of time. Events: access file or directory contents were read modify file or directory contents were written attrib file or directory attributes changed close_write file or directory closed, after being opened in writeable mode close_nowrite file or directory closed, after being opened in read-only mode close file or directory closed, regardless of read/write mode open file or directory opened moved_to file or directory moved to watched directory moved_from file or directory moved from watched directory move file or directory moved to or from watched directory create file or directory created within watched directory delete file or directory deleted within watched directory delete_self file or directory was deleted unmount file system containing file or directory unmounted [root@VM-24-3-centos ~]#
常用选项包括：
-m：以持续监视模式运行，即持续监视文件并输出事件。
-r：递归监视指定目录及其子目录中的文件。
-e <event>：指定要监视的特定事件类型。可以使用多个 -e 选项来指定多个事件类型。
-q：静默模式，只输出事件信息。
-s <seconds>：设置事件之间的最小时间间隔。
使用 inotifywait 命令时，它会持续监视指定的文件或目录，并在事件发生时输出相关信息。可以根据需要处理输出，例如执行其他命令或触发脚本。
示例
监视单个文件的事件：
[root@VM-24-3-centos ~]# inotifywait -e modify -e create a1.txt Setting up watches. Watches established.
以上命令将监视 myfile.txt 文件的修改和创建事件。
监视单个目录的事件：
[root@VM-24-3-centos ~]# inotifywait -e modify -e create /root Setting up watches. Watches established.
以上命令将监视 mydir/ 目录中文件的修改和创建事件。
监视多个文件或目录的事件：
[root@VM-24-3-centos ~]# touch a1.txt [root@VM-24-3-centos ~]# touch a2.txt [root@VM-24-3-centos ~]# inotifywait -e modify -e create a1.txt a2.txt /root Setting up watches. Watches established. ^C
以上命令将同时监视 a1.txt、a2.txt 和 mydir/ 中的文件的修改和创建事件。
如果监视的是目录，则 inotifywait 命令也会观察该目录中的子目录。可以使用 -r 选项来递归地监视目录及其子目录中的文件。
#!/bin/bash # 指定监控目录 directory="/root" # 监控目录下的文件变更 while inotifywait -r -m -e create,modify $directory; do # 处理文件变更事件 echo "File event: $?" inotifywait -r -e create,modify $directory | while read line; do # 输出事件详细信息 echo "$line" done done
