360 Secure SkillHub
360 安全技能中心

Config Rollback

核心功能:编辑配置前触发,自动备份目标配置,创建系统级5分钟定时恢复任务,若5分钟内未手动取消,将自动还原配置并重启对应服务;定时任务基于`at`命令,不依赖SSH连接,断连仍生效。典型场景:修改nginx、sshd、防火墙等各类服务配置,远程服务器操作防锁死。输入指令触发,输出定时任务ID,可凭ID取消任务。

2233admin
2233admin
热度 56.29
最近更新 2026-08-04 04:36:25
分类:自动化依赖:代码执行应用场景:DevOps / 自动化脚本 / 任务管理

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add config-rollback
Metadata
name
config-rollback
description
Auto-rollback protection for config changes. Backs up before edit, sets a 5-minute system timer to restore if things go wrong. Works with any service config, not just OpenClaw.

Config Rollback — 改配置再也不怕炸

Story

凌晨两点,你改了一行 nginx 配置,reload,网站挂了。SSH 连不上——因为你也改了 sshd_config。

你盯着黑屏,后悔没备份。

这个 skill 就是你的后悔药。

改配置前,它先备份,然后设一个 5 分钟的系统级定时炸弹。如果 5 分钟内你没说"没问题"——它自动把配置还原,重启服务。就算你把 SSH 搞断了,定时任务照样跑,因为它用的是 at 命令,不依赖你的连接。

How It Works

You: "自动回滚"

Agent:
1. cp config → config.bak
2. echo "restore" | at now + 5 minutes  (system-level, survives disconnect)
3. Returns job ID

You: [make changes, test]

Happy? → atrm <job-id>     (cancel the bomb)
Broken? → wait 5 min       (auto-restores)

Usage

Say "auto rollback" or "自动回滚" before editing any config:

# Backup + set 5-min restore timer
cp /etc/nginx/nginx.conf /etc/nginx/nginx.conf.bak
echo "cp /etc/nginx/nginx.conf.bak /etc/nginx/nginx.conf && systemctl reload nginx" | at now + 5 minutes

# Make your changes...
vim /etc/nginx/nginx.conf
systemctl reload nginx

# If everything works, cancel the timer:
atrm <job-id>

When to use

  • Editing nginx, sshd, firewall, or any service config
  • Changing API gateway routing rules
  • Updating DNS or proxy settings
  • Any change that could lock you out of a remote server

Key Principle

The restore timer is a system-level scheduled task (at / crontab). It does NOT depend on your shell session, SSH connection, or any application. Even if you brick the service, the timer still fires.