0x0 安裝階段配置
1. 網(wǎng)絡(luò)配置
- 網(wǎng)卡地址ipv4
- 子網(wǎng)掩碼
- 網(wǎng)關(guān)地址
- DNS服務(wù)器
- hostname
2. 用戶配置
- 配置密碼
0x1 基礎(chǔ)環(huán)境
1. 網(wǎng)絡(luò)配置
修改ifcfg配置文件/etc/sysconfig/network-scripts/ifcfg-*
2. 用戶配置
- 創(chuàng)建用戶
[root@data ~]# adduser messiah 會有自動生成目錄
[root@data ~]# useradd datag 不會生成目錄
- 創(chuàng)建用戶組
[root@data ~]# groupadd docker
- 修改密碼
[root@data ~]# passwd messiah
- 修改sudoers權(quán)限
echo 'messiah ALL=(ALL) NOPASSWD: ALL' >> /etc/sudoers
cat /etc/sudoers | grep -Evn "^$|#"
- 常用命令
- 刪除用戶
[root@data ~]# deluser datag 不會刪除目錄 [root@data ~]# userdel datag 不會刪除目錄
- 刪除用戶組
[root@data ~]# groupdel docker
- 看看linux內(nèi)核
[root@data ~]# uname -a [root@data ~]# cat /etc/issue修改開機(jī)歡迎
加日期? ~ cat /etc/issue \S Kernel \r on an \m \t \d加banner
? ~ sudo cat /etc/ssh/sshd_config | grep banner # no default banner path Banner /etc/ssh/banner ? ~ cat /etc/ssh/banner Welcome to Lefit Data加字符圖
? ~ cat /etc/motd // // .::::. // .::::::::. // ::::::::::: // ..:::::::::::' // '::::::::::::' // .:::::::::: // '::::::::::::::.. // ..::::::::::::. // ``:::::::::::::::: // ::::``:::::::::' .:::. // ::::' ':::::' .::::::::. // .::::' :::: .:::::::'::::. // .:::' ::::: .:::::::::' ':::::. // .::' :::::.:::::::::' ':::::. // .::' ::::::::::::::' ``::::. // ...::: ::::::::::::' ``::. // ```` ':. ':::::::::' ::::.. // '.:::::' ':'````.. 歡迎光臨Lefit Data開機(jī)自啟動
? ~ sudo chmod u+x /etc/rc.d/rc.local ? ~ sudo chmod u+x /etc/rc.local ? ~ sudo chmod +x /home/messiah/documents/scripts/sh/start_int.sh ? ~ cat documents/scripts/sh/start_int.sh | grep -Ev "^$|#" ? sudo rsync /var/spool/cron/messiah /home/messiah/documents/git/databack/sys/messiah su messiah cd ~ source .zshrc docker start me_mysql docker start me_zabbixs nohup jupyter notebook --config .jupyter/me.py --allow-root 2>&1 >> logs/me.log & nohup jupyter notebook --config .jupyter/datag.py --allow-root 2>&1 >> logs/datag.log & ? ~ cat /etc/rc.d/rc.local | grep -Ev "^$|#" touch /var/lock/subsys/local su messiah -c "/home/messiah/documents/scripts/sh/start_int.sh" ? ~ cat /etc/ssh/banner Welcome to Lefit Data[root@data ~]# cat /proc/version
[root@data ~]# lsb_release -a- 殺session ```shell [root@data ~]# pkill -kill -t pts/1
- du : 顯示每個(gè)文件和目錄的磁盤使用空間~~~文件的大小。
[root@data ~]# du -sh *
- df：顯示磁盤分區(qū)上可以使用的磁盤空間
[root@data ~]# df -h
- free 可以顯示Linux系統(tǒng)中空閑的削茁、已用的物理內(nèi)存及swap內(nèi)存,及被內(nèi)核使用的buffer昧狮。
[root@data ~]# free
- fdisk磁盤操作
[root@data ~]# fdisk -l
- 查看端口占用
[root@data ~]# netstat -tunlp
- ps命令——查看靜態(tài)的進(jìn)程統(tǒng)計(jì)信息（Processes Statistic）
[root@data ~]# ps aux [root@data ~]# ps elf
- 查看啟動項(xiàng)
[root@data ~]# systemctl list-unit-files
- 遠(yuǎn)程scp復(fù)制文件
[root@data ~]# scp me.zip messiah@172.16.150.163:~
3. 初始化腳本
#!/bin/bash
#
echo 配置就緒
function pubkey(){
echo 配置ssh免密登陸不用root;
mkdir -vpm 700 $HOME/.ssh ;
echo "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+7OCqPFwJ560E8JdfQEV6MDqBM6yITXzHJbRQMPG/yy59t+Eb3A8lsxnJ8BMlfmvkJJMtPYJrnuoCeBnVwQlpTA3OT+MK7p0GR2BxKKdaygqumucaAdaFZgBEyQhD4zZJ+zAv6myb4ePlqkms6dq1wnf+Jn5uvD3X1JV9+i/C+L9nRfGIZXSY5viCofktXN9imOtPeQ01XbbFdjx0ShvHgGeMXtqumtLRs8wgGnymH+brDSi+62Cid6KkwjhH2DL6qAFpUD47kW8yRqGAG/bH6ny47lwWuVcuMYtOcOatfezhWcS5Uhw5PtfODXrYEC/Gj4T1rG5f5ocKjvyxIzQ/ messiah@messiah.local"\
>> $HOME/.ssh/authorized_keys && chmod 600 $HOME/.ssh/authorized_keys;
}
function iniinstall(){
echo 安裝基礎(chǔ)依賴需要root;
yum -y install git readline* openssl* sqlite* sudo bzip2* gcc-c++ gcc zlib-devel openssh* ntp ntpdate net-tools psmisc bash-completion lsb_release;
yum -y install redhat-lsb policycoreutils-python nmap glibc-common pciutils usbutils hdparm crontabs wget vim curl lynx tree lsof unixODBC zip unzip sendmail sendmail-cf m4;
yum -y install glibc e2fsprogs krb5-libs unixODBC unixODBC-devel python-devel python-pip python-wheel libffi-devel libsasl2-devel openldap-devel;
yum remove -y docker docker-common docker-selinux docker-engine;
rm -rf /var/lib/docker;
yum install -y yum-utils device-mapper-persistent-data lvm2;
yum-config-manager --add-repo https://download.docker.com/linux/centos/docker-ce.repo;
yum install -y docker go;
yum update -y && yum -y install zsh;
}
function test(){
echo test function;
}
if [ "$1" == "rootinit" ]
then
iniinstall
elif [ "$1" == "pubkey" ]
then
pubkey
elif [ "$1" == "test" ]
then
test
fi
- 配置ssh免密登陸
[messiah@data ~]$ sh init.sh pubkey
- 安裝基礎(chǔ)依賴
[messiah@data ~]$ sudo sh init.sh rootinit
4. 常用軟件
- 安裝zsh
[messiah@data ~]$ sh -c "$(curl -fsSL https://raw.github.com/robbyrussell/oh-my-zsh/master/tools/install.sh)"
? ~ echo 'export PATH="'$HOME'/.pyenv/bin:$PATH"
eval "$(pyenv init -)"
eval "$(pyenv virtualenv-init -)"' >> $HOME/.zshrc
? ~ curl -L https://raw.githubusercontent.com/pyenv/pyenv-installer/master/bin/pyenv-installer | bash;
0x2 開發(fā)環(huán)境
1. py環(huán)境配置
? ~ pyenv install 3.8.2
? ~ pyenv rehash
? ~ pyenv global 3.8.2
- 常用命令
? ~ pyenv install --list # 列出可安裝版本
? ~ pyenv install <version> # 安裝對應(yīng)版本
? ~ pyenv install -v <version> # 安裝對應(yīng)版本怀酷，若發(fā)生錯(cuò)誤浅妆，可以顯示詳細(xì)的錯(cuò)誤信息
? ~ pyenv versions # 顯示當(dāng)前使用的python版本
? ~ pyenv which python # 顯示當(dāng)前python安裝路徑
? ~ pyenv global <version> # 設(shè)置默認(rèn)Python版本
? ~ pyenv local <version> # 當(dāng)前路徑創(chuàng)建一個(gè).python-version, 以后進(jìn)入這個(gè)目錄自動切換為該版本
? ~ pyenv shell <version> # 當(dāng)前shell的session中啟用某版本，優(yōu)先級高于global 及 local
? ~ pyenv uninstall 3.8.2 # 卸載特定版本
? ~ pyenv rehash # 刷新shims
? ~ pyenv virtualenv 2.7.13 myenv # 創(chuàng)建虛擬環(huán)境
? ~ pyenv virtualenvs # 創(chuàng)建虛擬環(huán)境
? ~ pyenv uninstall myenv # 刪除虛擬環(huán)境
? ~ pyenv activate myenv # 切換到虛擬環(huán)境
? ~ source deactivate # 退出虛擬環(huán)境
- 從requirements.txt安裝依賴庫
? ~ pip install --upgrade pip
? ~ pip install -r requirements.txt
- 生成pip依賴庫文件
? ~ pip freeze > requirements.txt
- 配置jupyter
# jupyter靜態(tài)文件目錄
? ~ ./.pyenv/versions/3.6.7/lib/python3.6/site-packages/notebook/static/base/images/
? ~ jupyter notebook --generate-config
? ~ cat datag.py
c.NotebookApp.allow_remote_access = True
c.NotebookApp.ip = '*'
c.NotebookApp.open_browser = False
c.NotebookApp.notebook_dir = u'/home/messiah'
c.NotebookApp.password = u'sha1:2847ace67da3:bd0565fac7836f2419855b40e84f6e38ecd27085'
c.NotebookApp.port = 18888
? ~ nohup jupyter notebook --config .jupyter/datag.py --allow-root 2>&1 > logs/datag.log &
? ~ sudo firewall-cmd --zone=public --add-port=18888/tcp --permanent
? ~ sudo firewall-cmd --reload
- python 3.6.x 常用依賴庫
aliyun-log-cli==0.1.15.2
aliyun-log-python-sdk==0.6.42
aliyun-python-sdk-core==2.13.1
aliyun-python-sdk-core-v3==2.13.3
aliyun-python-sdk-ecs==4.16.1
aliyun-python-sdk-kms==2.6.0
appnope==0.1.0
asn1crypto==0.22.0
attrs==17.2.0
Automat==0.6.0
backcall==0.1.0
bleach==3.1.0
certifi==2018.8.24
cffi==1.10.0
chardet==3.0.4
Click==7.0
constantly==15.1.0
crcmod==1.7
cryptography==1.9
cssselect==1.0.1
cycler==0.10.0
cypari==2.3.1
Cython==0.29.3
dateparser==0.7.0
decorator==4.3.0
defusedxml==0.5.0
docopt==0.6.2
elasticsearch==6.3.1
entrypoints==0.3
fake-useragent==0.1.11
Flask==1.1.1
future==0.18.2
FXrays==1.3.3
graphviz==0.10.1
greenlet==0.4.15
hdfs3==0.3.0
hyperlink==17.2.1
idna==2.5
imageio==2.5.0
incremental==17.5.0
ipykernel==5.1.0
ipython==6.2.1
ipython-genutils==0.2.0
ipywidgets==7.4.2
itsdangerous==1.1.0
jedi==0.13.2
Jinja2==2.10.1
jmespath==0.9.3
jsoncsv==2.0.9
jsonschema==2.6.0
jupyter==1.0.0
jupyter-client==5.2.4
jupyter-console==6.0.0
jupyter-core==4.4.0
kiwisolver==1.0.1
lxml==3.8.0
MarkupSafe==1.1.0
matplotlib==3.0.2
mistune==0.8.4
MyQR==2.3.1
nbconvert==5.4.0
nbformat==4.4.0
networkx==2.4
notebook==5.7.4
numpy==1.14.2
oss2==2.6.1
pandas==0.23.4
pandocfilters==1.4.2
parsel==1.2.0
parso==0.3.1
pexpect==4.6.0
pickleshare==0.7.5
Pillow==6.1.0
plink==2.3
prometheus-client==0.5.0
prompt-toolkit==1.0.15
protobuf==3.6.1
ptyprocess==0.6.0
pyasn1==0.2.3
pyasn1-modules==0.0.9
pycparser==2.17
pycryptodome==3.8.1
PyDispatcher==2.0.5
Pygments==2.3.1
pymongo==3.7.2
pymssql==2.1.4
PyMySQL==0.7.11
pyodbc==4.0.24
pyodps==0.7.19
pyOpenSSL==17.0.0
pyparsing==2.3.1
pypng==0.0.20
python-dateutil==2.7.5
pytz==2018.9
pyzmq==17.1.2
qrcode==6.1
qtconsole==4.4.3
queuelib==1.4.2
regex==2019.1.24
requests==2.19.1
Scrapy==1.4.0
Send2Trash==1.5.0
service-identity==17.0.0
simplegeneric==0.8.1
six==1.10.0
snappy==2.7
snappy-manifolds==1.1
spherogram==1.8.2
SQLAlchemy==1.2.11
terminado==0.8.1
testpath==0.4.2
tornado==5.1.1
tqdm==4.43.0
traitlets==4.3.2
Twisted==17.5.0
tzlocal==1.5.1
urllib3==1.23
w3lib==1.17.0
wcwidth==0.1.7
webencodings==0.5.1
Werkzeug==0.16.0
widgetsnbextension==3.4.2
XlsxWriter==1.1.0
xlwt==1.3.0
zope.interface==4.4.2
2. docker服務(wù)
初始化安裝已經(jīng)在init腳本中完成
- 添加docker用戶組
? ~ sudo groupadd docker
? ~ sudo gpasswd -a ${USER} docker # 將docker添加到用戶組管理取消sudo操作
? ~ sudo usermod -aG docker $USER # 將docker追加到用戶組
? ~ newgrp - docker # 切換用戶組
? ~ export DOCHOME="/home/messiah/documents/docker" 設(shè)置doc快捷變量
- 禁用內(nèi)核selinux
? ~ sudo vim /etc/sysconfig/docker
? ~ cat /etc/sysconfig/docker | grep -Ev "^$|#"
OPTIONS='--selinux-enabled=false --log-driver=journald --signature-verification=false'
if [ -z "${DOCKER_CERT_PATH}" ]; then
DOCKER_CERT_PATH=/etc/docker
fi
- 修改鏡像源（換源后需要重啟）
? ~ sudo vim /etc/docker/daemon.json
? ~ cat /etc/docker/daemon.json
{"registry-mirrors": [
"https://dockerhub.azk8s.cn",
"https://registry.docker-cn.com",
"http://hub-mirror.c.163.com",
"https://docker.mirrors.ustc.edu.cn",
"https://reg-mirror.qiniu.com"
]}
? ~ sudo systemctl daemon-reload
? ~ sudo systemctl restart docker
- 啟動docker服務(wù)
? ~ sudo systemctl start docker
? ~ sudo systemctl enable docker
? ~ sudo systemctl status -l docker.service
- 常用命令
? ~ docker version # 列出可安裝版本
? ~ docker info # 安裝對應(yīng)版本
? ~ docker search mysql # 從查找docker鏡像
? ~ docker pull mysql:5.7.29 從源拉取鏡像
? ~ docker images -a
? ~ docker run -p 13306:3306 --name me_mysql -v $DOCHOME/mysql_latest/conf:/etc/mysql/conf.d -v $DOCHOME/mysql_latest/logs:/logs -v $DOCHOME/mysql_latest/data:/var/lib/mysql -e MYSQL_ROOT_PASSWORD=123456 -d mysql:latest
? ~ docker ps -a
? ~ docker container ls -a
? ~ docker container kill [containID]
? ~ docker exec -it me_mysql /bin/bash
3. zabbix服務(wù)
? ~ docker pull j90w/zabbix-server:zabbix-server
? ~ mkdir -p $DOCHOME/me_zabbixs/mysql $DOCHOME/me_zabbixs/vhosts/www.me_zabbixs.com
? ~ docker run -d -p 10053:10050 -p 10054:10051 -p 18022:22 -p 13316:3306 \
-e PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin \
-e container=container -e VIRTUAL_HOST=www.me_zabbixs.com -e USERNAME=messiah \
-e SFTP_PORT=18000 -e MYSQL_PORT=13316 -e ADMIN_EMAIL=zhangmengxin@leoao.com \
--name me_zabbixs --publish-all -v $DOCHOME/me_zabbixs -v $DOCHOME/me_zabbixs/mysql:/var/lib/mysql \
-v $DOCHOME/me_zabbixs/vhosts/www.me_zabbixs.com:/var/www/html --hostname=www.me_zabbixs.com \
--privileged j90w/zabbix-server:zabbix-server '/usr/sbin/init'
? ~ docker exec -it -u 0 me_zabbixs /bin/bash
訪問：http://172.16.150.163:32768/ 基礎(chǔ)配置
3. hexo日志服務(wù)
? ?? ~ docker pull spurin/hexo
? ?? ~ docker run -d -p 14000:4000 -p 14022:22 -e HEXO_SERVER_PORT=4000 \
-e ROOT=TRUE -e USER=messiah -e PASSWORD=123456 \
--name me_hexo -v /home/messiah/documents/docker/me_hexo:/home/$USER/hexo \
-e USERID=$UID spurin/hexo
? ?? ~ sudo docker exec -it me_hexo bash
root@2171eb438e35:~# npm install hexo-symbols-count-time
root@2171eb438e35:~# cp -r _config.yml source themes ../home/messiah/hexo/
root@2171eb438e35:~# ln -s /home/messiah/hexo/_config.yml _config.yml
root@2171eb438e35:~# ln -s /home/messiah/hexo/source source
root@2171eb438e35:~# ln -s /home/messiah/hexo/themes themes
? ?? me_hexo git clone https://github.com/theme-next/hexo-theme-next themes/next
? ?? me_hexo git clone https://github.com/iissnan/hexo-theme-next themes/iissnan_next
root@2171eb438e35:~# hexo clean && hexo g && hexo
? ?? me_hexo vim themes/next/layout/_partials/footer.swig
? ?? md git:(master) ? rsync -a /home/messiah/documents/docker/me_hexo/source/ /home/messiah/documents/git/databack/md
? ?? md git:(master) ? git status
? ?? md git:(master) ? git add -A :/
? ?? md git:(master) ? git commit -am "添加hexo目錄等"
? ?? md git:(master) git push -u origin master
