系统工程师实战

dnf install -y epel-release
dnf install -y systemd-timesyncd
systemctl enable systemd-timesyncd --now
rpm -Uvh https://download.ceph.com/rpm-18.1.3/el9/noarch/ceph-release-1-1.el9.noarch.rpm
dnf install -y cephadm podman
dnf install -y centos-release-ceph-pacific

cephadm bootstrap --mon-ip 192.168.122.60

https://192.168.122.60:8443/
User: admin
Password: 65eoa3cblm

cephadm shell
cephadm add-repo --release quincy
dnf install ceph-common

cephadm install ceph-common

vim  /etc/yum.repos.d/ceph.repo

ceph -v
ceph status

ceph cephadm get-pub-key > ~/ceph.pub
ssh-copy-id -f -i ~/ceph.pub root@ceph1
ssh-copy-id -f -i ~/ceph.pub root@ceph2
ssh-copy-id -f -i ~/ceph.pub root@ceph3

cephadm shell -- ceph orch host add ceph1 192.168.122.60
cephadm shell -- ceph orch host add ceph2 192.168.122.61
cephadm shell -- ceph orch host add ceph3 192.168.122.62

cephadm shell -- ceph orch host label add ceph1 mon
cephadm shell -- ceph orch host label add ceph2 mon
cephadm shell -- ceph orch host label add ceph3 mon

cephadm shell -- ceph orch daemon add osd ceph1:/dev/vdb
cephadm shell -- ceph orch daemon add osd ceph2:/dev/vdb
cephadm shell -- ceph orch daemon add osd ceph3:/dev/vdb

ceph fs volume create geek_cephfs  --placement=3
ceph fs ls
ceph fs volume info geek_cephfs
ceph mds stat
ceph orch apply mds geek_cephfs --placement=3

[root@ceph1 ~]#

  cluster:
    id:     de382350-3221-11ee-bc03-525400b83c9a
    health: HEALTH_OK

  services:
    mon: 3 daemons, quorum stream960,stream961,stream962 (age 9m)
    mgr: stream960.vperxy(active, since 52m), standbys: stream961.ldsnmd
    mds: 1/1 daemons up, 2 standby
    osd: 3 osds: 3 up (since 8m), 3 in (since 9m)

  data:
    volumes: 1/1 healthy
    pools:   3 pools, 49 pgs
    objects: 24 objects, 451 KiB
    usage:   81 MiB used, 90 GiB / 90 GiB avail
    pgs:     49 active+clean

# [root@stream960 ~]# cat /etc/cat /etc/ceph/ceph.client.admin.keyringceph/ceph.client.admin.keyring
# [client.admin]
# 	key = AQCZ4ctks3nnHxAAgGpIFheYkpdCoBERg98x3g==
# 	caps mds = "allow *"
# 	caps mgr = "allow *"
# 	caps mon = "allow *"
# 	caps osd = "allow *"

mkdir -p /mnt/ceph
mount -t ceph 192.168.122.60:6789,192.168.122.61:6789,192.168.122.62:6789:/ /mnt/ceph -o name=admin,secret=AQCZ4ctks3nnHxAAgGpIFheYkpdCoBERg98x3g==

sudo yum install -y ceph-radosgw

#添加gitlab仓库
curl -s https://packages.gitlab.com/install/repositories/gitlab/gitlab-ce/script.rpm.sh | sudo bash


#安装
EXTERNAL_URL="http://gitlab.czh.com"
sudo yum install gitlab-ce-16.9.6-ce.0.el9.x86_64

 Running scriptlet: gitlab-ce-16.9.6-ce.0.el9.x86_64                                                           217/221
  Installing       : gitlab-ce-16.9.6-ce.0.el9.x86_64                                                           217/221
  Running scriptlet: gitlab-ce-16.9.6-ce.0.el9.x86_64                                                           217/221
  Cleanup          : glibc-2.34-88.el9.x86_64                                                                   218/221
  Cleanup          : glibc-langpack-en-2.34-88.el9.x86_64                                                       219/221
  Cleanup          : glibc-gconv-extra-2.34-88.el9.x86_64                                                       220/221
  Running scriptlet: glibc-gconv-extra-2.34-88.el9.x86_64                                                       220/221
  Cleanup          : glibc-common-2.34-88.el9.x86_64                                                            221/221
  Running scriptlet: gitlab-ce-16.9.6-ce.0.el9.x86_64                                                           221/221
It looks like GitLab has not been configured yet; skipping the upgrade script.

       *.                  *.
      ***                 ***
     *****               *****
    .******             *******
    ********            ********
   ,,,,,,,,,***********,,,,,,,,,
  ,,,,,,,,,,,*********,,,,,,,,,,,
  .,,,,,,,,,,,*******,,,,,,,,,,,,
      ,,,,,,,,,*****,,,,,,,,,.
         ,,,,,,,****,,,,,,
            .,,,***,,,,
                ,*,.



     _______ __  __          __
    / ____(_) /_/ /   ____ _/ /_
   / / __/ / __/ /   / __ `/ __ \
  / /_/ / / /_/ /___/ /_/ / /_/ /
  \____/_/\__/_____/\__,_/_.___/


Thank you for installing GitLab!
GitLab was unable to detect a valid hostname for your instance.
Please configure a URL for your GitLab instance by setting `external_url`
configuration in /etc/gitlab/gitlab.rb file.
Then, you can start your GitLab instance by running the following command:
  sudo gitlab-ctl reconfigure

For a comprehensive list of configuration options please see the Omnibus GitLab readme
https://gitlab.com/gitlab-org/omnibus-gitlab/blob/master/README.md

Help us improve the installation experience, let us know how we did with a 1 minute survey:
https://gitlab.fra1.qualtrics.com/jfe/form/SV_6kVqZANThUQ1bZb?installation=omnibus&release=16-9
...
...
 python3-setuptools-53.0.0-12.el9.noarch                     qt5-srpm-macros-5.15.9-1.el9.noarch
  redhat-rpm-config-207-1.el9.noarch                          rust-srpm-macros-17-4.el9.noarch
  sombok-2.4.0-16.el9.x86_64                                  systemtap-sdt-devel-5.0-4.el9.x86_64
  zip-3.0-35.el9.x86_64

Complete!

vim /etc/hosts

安装gitlab的主机IP  gitlab.czh.com

cat /etc/gitlab/initial_root_password | egrep '^Password'

Password: OhnSC43bG/FivMIySa/rF1tweMHi8RxbgMdZd0QDn84=

YOURPORT=8080
PERM="--permanent"
SERV="$PERM --service=jenkins"

firewall-cmd $PERM --new-service=jenkins
firewall-cmd $SERV --set-short="Jenkins ports"
firewall-cmd $SERV --set-description="Jenkins port exceptions"
firewall-cmd $SERV --add-port=$YOURPORT/tcp
firewall-cmd $PERM --add-service=jenkins
firewall-cmd --zone=public --add-service=http --permanent

firewall-cmd --reload

mkdir -p ~/.ssh
#一路回车直到生成
ssh-keygen -t rsa -b 4096 -C "chengzenghuan2018@gmail.com" -f ~/.ssh/keyname

cat <<EOF >> ~/.ssh/config
Host github.com
    HostName github.com
    User git
    IdentityFile ~/.ssh/keyname
    IdentitiesOnly yes
EOF


#测试是否成功添加
ssh -T git@github.com

Hi xxxxx! You've successfully authenticated, but GitHub does not provide shell access.

# SSH连接时，服务端会将客户端IP反向解析为域名，导致登录过程缓慢
sed -i "s/#UseDNS yes/UseDNS no/" /etc/ssh/sshd_config
sed -i "s/GSSAPIAuthentication yes/GSSAPIAuthentication no/" /etc/ssh/sshd_config
sed -i "s/GSSAPICleanupCredentials yes/GSSAPICleanupCredentials no/" /etc/ssh/sshd_config
# 登录失败最大尝试次数
sed -i "s/#MaxAuthTries 6/MaxAuthTries 10/" /etc/ssh/sshd_config
# 连接保持：服务端每隔N秒发送一次请求给客户端，客户端响应后完成一次连接保持检查
sed -i "s/#ClientAliveInterval 0/ClientAliveInterval 30/" /etc/ssh/sshd_config
# 连接保持最大重试次数：服务端发出请求后，超过N次没有收到客户端响应，服务端则断开客户端连接
sed -i "s/#ClientAliveCountMax 3/ClientAliveCountMax 10/" /etc/ssh/sshd_config

systemctl reload sshd

cd ~
wget https://github.com/prometheus/prometheus/releases/download/v2.49.1/prometheus-2.49.1.linux-amd64.tar.gz
tar -zxvf prometheus-2.49.1.linux-amd64.tar.gz -C /opt/
cd /opt/prometheus-*

./prometheus --help

cat << EOF > prometheus.yml
global:
  scrape_interval:     15s # By default, scrape targets every 15 seconds.

  # Attach these labels to any time series or alerts when communicating with
  # external systems (federation, remote storage, Alertmanager).
  external_labels:
    monitor: 'codelab-monitor'

# A scrape configuration containing exactly one endpoint to scrape:
# Here it's Prometheus itself.
scrape_configs:
  # The job name is added as a label 'job=<job_name>' to any timeseries scraped from this config.
  - job_name: 'prometheus'

    # Override the global default and scrape targets from this job every 5 seconds.
    scrape_interval: 5s

    static_configs:
      - targets: ['localhost:9090']
EOF

./prometheus --config.file=prometheus.yml

prometheus_target_interval_length_seconds

#重载prometheus配置文件
kill -s SIGHUP `pgrep -f prometheus`

#关闭prometheus
kill -s SIGTERM `pgrep -f prometheus`

cat <<EOF >/usr/lib/systemd/system/prometheus.service
[Unit]
Description = Prometheus server daemon

[Service]
Type = simple
WorkingDirectory = /opt/prometheus-2.49.1.linux-amd64
ExecStart = /opt/prometheus-2.49.1.linux-amd64/prometheus --config.file=/opt/prometheus-2.49.1.linux-amd64/prometheus.yml
ExecStop = /bin/kill -s SIGTERM  \$MAINPID
ExecReload = /bin/kill -s SIGHUP  \$MAINPID

[Install]
WantedBy=multi-user.target
EOF

# 重载systemd管理器配置
sudo systemctl daemon-reload
sudo systemctl start prometheus.service
sudo systemctl enable prometheus.service
sudo systemctl reload prometheus.service

cd ~
wget https://github.com/prometheus/node_exporter/releases/download/v1.7.0/node_exporter-1.7.0.linux-amd64.tar.gz
tar -xzvf node_exporter-*.*.tar.gz -C /opt/
cd /opt/node_exporter-*.*

cd /opt/node_exporter-*.*
./node_exporter

......
......
ts=2024-01-31T09:01:28.677Z caller=node_exporter.go:117 level=info collector=xfs
ts=2024-01-31T09:01:28.677Z caller=node_exporter.go:117 level=info collector=zfs
ts=2024-01-31T09:01:28.677Z caller=tls_config.go:274 level=info msg="Listening on" address=127.0.0.1:9101
ts=2024-01-31T09:01:28.677Z caller=tls_config.go:310 level=info msg="TLS is enabled." http2=true address=127.0.0.1:9100

cat << EOF > /usr/lib/systemd/system/node_exporter.service
[Unit]
Description = node_exporter server daemon

[Service]
Type = simple
ExecStart = /opt/node_exporter-1.7.0.linux-amd64/node_exporter

[Install]
WantedBy=multi-user.target
EOF

# 重载systemd管理器配置
sudo systemctl daemon-reload

sudo systemctl start node_exporter
sudo systemctl enable node_exporter
sudo systemctl status node_exporter

cat <<EOF >>/etc/hosts
xxx.xxx.xxx.xxx node_exporter1
EOF

cat <<EOF> /opt/prometheus-2.49.1.linux-amd64/prometheus.yml
global:
  scrape_interval:     15s # By default, scrape targets every 15 seconds.

  # Attach these labels to any time series or alerts when communicating with
  # external systems (federation, remote storage, Alertmanager).
  external_labels:
    monitor: 'codelab-monitor'

# A scrape configuration containing exactly one endpoint to scrape:
# Here it's Prometheus itself.
scrape_configs:
  # The job name is added as a label 'job=<job_name>' to any timeseries scraped from this config.
  - job_name: 'prometheus'

    # Override the global default and scrape targets from this job every 5 seconds.
    scrape_interval: 5s

    static_configs:
      - targets: ['localhost:9090']

  - job_name: 'node_exporter'
    static_configs:
    - targets: ['node_exporter1:9100']

EOF

sudo systemctl reload prometheus.service

#cpu使用率
(1 - sum(rate(node_cpu_seconds_total{mode="idle"}[1m])) by (instance) / sum(rate(node_cpu_seconds_total[1m])) by (instance) ) * 100

#内存占用大小
node_memory_MemTotal_bytes{instance="node_exporter1:9100", job="node_exporter"} - node_memory_MemFree_bytes{instance="node_exporter1:9100", job="node_exporter"} - node_memory_Cached_bytes{instance="node_exporter1:9100", job="node_exporter"} - node_memory_Buffers_bytes{instance="node_exporter1:9100", job="node_exporter"}

#硬盘占用情况
node_filesystem_size_bytes{instance="node_exporter1:9100", job="node_exporter", device!~"vmhgfs-fuse"} - node_filesystem_avail_bytes{instance="node_exporter1:9100", job="node_exporter"}

wget https://github.com/prometheus/mysqld_exporter/releases/download/v0.15.0/mysqld_exporter-0.15.0.linux-amd64.tar.gz
tar xvfz mysqld_exporter-0.15.0.linux-amd64.tar.gz

[pr@zabbix Download]$ ls
mysqld_exporter-0.15.0.linux-amd64         prometheus-2.46.0.linux-amd64
mysqld_exporter-0.15.0.linux-amd64.tar.gz  prometheus-2.46.0.linux-amd64.tar.gz

cd mysqld_exporter-0.15.0.linux-amd64

mysql -uroot -ppassword

#更改密码策略，否则简单密码password不可用
mysql>SET GLOBAL validate_password.policy = 0;
mysql>CREATE USER 'exporter'@'localhost' IDENTIFIED BY 'password' WITH MAX_USER_CONNECTIONS 3;
mysql>GRANT PROCESS, REPLICATION CLIENT, SELECT ON *.* TO 'exporter'@'localhost';
mysql>quit;

echo << EOF > .my.cnf
[client]
user=exporter
password=password
EOF

cd prometheus-2.46.0.linux-amd64/

echo << EOF >> prometheus.yml
  - job_name: "mysqld"
    static_configs:
    - targets: ["localhost:9104"]
EOF
./mysqld_exporter --config.my-cnf=.my.cnf

cd ~
#通过链接安装Grafana
sudo yum install -y https://dl.grafana.com/enterprise/release/grafana-enterprise-10.3.1-1.x86_64.rpm
#或使用下载好的安装包安装Grafana
sudo yum install -y grafana-enterprise-10.3.1-1.x86_64.rpm
sudo systemctl daemon-reload
sudo systemctl start grafana-server
sudo systemctl status grafana-server
sudo systemctl enable grafana-server.service

vim /etc/yum.repos.d/epel.repo

[epel]
...
excludepkgs=zabbix*

rpm -Uvh https://repo.zabbix.com/zabbix/6.4/rhel/9/x86_64/zabbix-release-6.4-1.el9.noarch.rpm
dnf clean all

dnf install zabbix-server-mysql zabbix-web-mysql zabbix-apache-conf zabbix-sql-scripts zabbix-selinux-policy zabbix-agent

mysql -uroot -p
password
mysql> SET GLOBAL validate_password.policy = 0;
mysql> create database zabbix character set utf8mb4 collate utf8mb4_bin;
mysql> create user zabbix@localhost identified by 'password';
mysql> grant all privileges on zabbix.* to zabbix@localhost;
mysql> set global log_bin_trust_function_creators = 1;
mysql> quit;

zcat /usr/share/zabbix-sql-scripts/mysql/server.sql.gz | mysql --default-character-set=utf8mb4 -uzabbix -p zabbix

mysql -uroot -p
password
mysql> set global log_bin_trust_function_creators = 0;
mysql> quit;

vim /etc/zabbix/zabbix_server.conf

DBPassword=password

systemctl restart zabbix-server zabbix-agent httpd php-fpm
systemctl enable zabbix-server zabbix-agent httpd php-fpm

cd /home/czh/workspace/github
git clone ssh://git@git.cdgeekcamp.com:4295/zhiyanmodule/zhiyan-mod-letsencrypt.git
cd zhiyan-mod-letsencrypt
pycharm .

dry_run = no

dry_run = yes

language_file=/opt/gc/zy/etc/language/zh_CN/letsencrypt.json

language_file=/home/czh/workspace/github/zhiyan-mod-letsencrypt/language/zh_CN/letsencrypt.json

level = INFO

level = TRACE

mkdir -p /var/log/letsencrypt/
scp root@8.210.45.121:/var/log/letsencrypt/letsencrypt.log /var/log/letsencrypt/

scp -r root@8.210.45.121:/etc/letsencrypt /etc/letsencrypt

cd /home/czh/workspace/github
git clone ssh://git@git.cdgeekcamp.com:4295/zhiyan/libzygrpc.git
git clone ssh://git@git.cdgeekcamp.com:4295/zhiyan/libzymod-python.git

cd /home/czh/workspace/github/libzymod-python/
git checkout dev
git pull origin dev
sh build.sh
cd dist/
pip install zymod-0.0.2.3-py3-none-any.whl

pip install grpcio==1.57.0
pip install grpcio-tools==1.57.0
pip install protobuf==4.21.12
pip install setuptool==68.0.0

cd /home/czh/workspace/github/libzygrpc/
git checkout dev
git pull origin dev
cd python/
sh build.sh
cd dist/
pip install zygrpc-0.0.1.15-py3-none-any.whl

cd /home/czh/workspace/github/zhiyan-mod-letsencrypt
python zymod_letsencrypt.py -c /home/czh/workspace/github/zhiyan-mod-letsencrypt/conf/letsencrypt.conf

[czh@archlinux zhiyan-mod-letsencrypt]$ python zymod_letsencrypt.py -c /home/czh/workspace/github/zhiyan-mod-letsencrypt/conf/letsencrypt.conf
2023-08-28 19:55:45 26872 [INFO] 未启用日志配置文件，加载默认设置
2023-08-28 19:55:45 26872 [INFO] 日志配置文件 '/home/czh/workspace/github/zhiyan-mod-letsencrypt/conf/letsencrypt.conf' 加载成功
2023-08-28 19:55:45 26872 [INFO] 查找自动续签定时任务设置：当前模式->systemd
2023-08-28 19:55:45 26872 [TRACE] Enter function: get_timer_prop
2023-08-28 19:55:45 26872 [TRACE] Enter function: __calc_next_elapse
2023-08-28 19:55:45 26872 [TRACE] input->now_ts=1693223745.7171829
2023-08-28 19:55:45 26872 [TRACE] input->now_monotonic_ts=39455.986456076
2023-08-28 19:55:45 26872 [TRACE] input->next_usec=1693238400000000
2023-08-28 19:55:45 26872 [TRACE] input->next_monotonic_usec=0
2023-08-28 19:55:45 26872 [TRACE] var->next_ts=1693238400.0
2023-08-28 19:55:45 26872 [TRACE] var->next_monotonic_ts=0.0
2023-08-28 19:55:45 26872 [TRACE] output->result=1693238400.0
2023-08-28 19:55:45 26872 [TRACE] Exit function: __calc_next_elapse
2023-08-28 19:55:45 26872 [TRACE] output->result=ZySystemdTimerProp(timer_name='letsencrypt.timer', unit_name='letsencrypt.service', timers_calendar=[('OnCalendar', '*-*-* 00:00:00')], next_elapse=datetime.datetime(2023, 8, 29, 0, 0), last_trigger=datetime.datetime(1970, 1, 1, 8, 0), result='success', persistent=True, wake_system=False)
2023-08-28 19:55:45 26872 [TRACE] Exit function: get_timer_prop
2023-08-28 19:55:45 26872 [TRACE] Enter function: get_last_result_from_log
2023-08-28 19:55:45 26872 [TRACE] input->log_file=/var/log/letsencrypt/letsencrypt.log
2023-08-28 19:55:45 26872 [TRACE] var->_log_file=/var/log/letsencrypt/letsencrypt.log
2023-08-28 19:55:45 26872 [TRACE] var->result=(True, datetime.datetime(2023, 8, 25, 9, 33, 19))
2023-08-28 19:55:45 26872 [TRACE] output->result=(True, datetime.datetime(2023, 8, 25, 9, 33, 19), '/var/log/letsencrypt/letsencrypt.log')
2023-08-28 19:55:45 26872 [TRACE] Exit function: get_last_result_from_log
2023-08-28 19:55:45 26872 [TRACE] var->last_run=1970-01-01 08:00:00
2023-08-28 19:55:45 26872 [TRACE] var->next_running=2023-08-29 00:00:00
2023-08-28 19:55:45 26872 [TRACE] Enter function: mod_send_request_grpc
2023-08-28 19:55:45 26872 [TRACE] var->name=letsencrypt
2023-08-28 19:55:45 26872 [TRACE] var->datetime=2023-08-28 11:55:45.724902+00:00
2023-08-28 19:55:45 26872 [DEBUG] content=
{
    "Certificates": [
        {
            "Certificate": {
                "Issued By": {
                    "Common Name": "R3",
                    "Organization": "Let's Encrypt",
                    "Organization Unit": "<未包含在证书中>"
                },
                "Issued To": {
                    "Common Name": "*.chengzenghuan.asia",
                    "Organization": "<未包含在证书中>",
                    "Organization Unit": "<未包含在证书中>"
                },
                "Subject Alternative Name": {
                    "DNS Names": [
                        "*.chengzenghuan.asia"
                    ]
                },
                "Validity Period": {
                    "Expires On": "2023-11-23 05:26:20",
                    "Issued On": "2023-08-25 05:26:21",
                    "Time Left": "86天17时30分34秒"
                }
            },
            "Certificate Path": "/etc/letsencrypt/live/chengzenghuan.asia/fullchain.pem",
            "Domain": "*.chengzenghuan.asia",
            "Private Key Path": "/etc/letsencrypt/live/chengzenghuan.asia/privkey.pem",
            "Private Key Type": "ECDSA",
            "Root Certificate Path": "/etc/letsencrypt/live/chengzenghuan.asia/chain.pem"
        }
    ],
    "CertificatesTitleColName": "Domain",
    "RenewalTimerState": {
        "Activate": "letsencrypt.service",
        "LastRan": "1970-01-01 08:00:00",
        "LastRanResult": true,
        "Left": "4 h, 4 min, 14 sec",
        "NextRunning": "2023-08-29 00:00:00",
        "Passed": "19597 days, 11 h, 55 min, 45 sec",
        "RenewalLogFile": "/var/log/letsencrypt/letsencrypt.log",
        "RenewalResult": true,
        "RenewalTime": "2023-08-25 09:33:19",
        "SystemTime": "2023-08-28 19:55:45",
        "TimerName": "letsencrypt.timer"
    }
}
2023-08-28 19:55:45 26872 [INFO] zymod：试运行中，不进行注册.....
2023-08-28 19:55:45 26872 [TRACE] Exit function: mod_send_request_grpc

cd /home/czh/workspace/github/ZhiYanModule
git clone ssh://git@git.cdgeekcamp.com:4295/zhiyanmodule/zhiyan-mod-php-fpm.git
cd zhiyan-mod-php-fpm
git checkout dev
git pull origin dev

cd /home/czh/workspace/github/ZhiYan
git clone ssh://git@git.cdgeekcamp.com:4295/zhiyan/libzymod-rust.git
cd libzymod-rust
git checkout dev
git pull origin dev

git clone ssh://git@git.cdgeekcamp.com:4295/zhiyan/libzygrpc.git
cd libzygrpc
git checkout dev
git pull origin dev

cd /home/czh/workspace/github/ZhiYan/libzygrpc/rust
p cargo build

cd /home/czh/workspace/github/ZhiYan/libzymod-rust
p cargo build

cd /home/czh/workspace/github/ZhiYanModule/zhiyan-mod-php-fpm
p cargo build

cd /home/czh/workspace/github/ZhiYanModule/zhiyan-mod-php-fpm
cargo run

warning: `zhiyan-mod-php-fpm` (bin "zhiyan-mod-php-fpm") generated 1 warning
    Finished dev [unoptimized + debuginfo] target(s) in 0.08s
     Running `/home/czh/workspace/github/ZhiYanModule/target/debug/zhiyan-mod-php-fpm`
2023-08-29 19:29:08 30984 [WARN] 检测到日志配置文件'/opt/gc/zy/etc/php-fpm_log.yaml'不存在,将加载默认设置(Level：Debug)
2023-08-29 19:29:08 30984 [ERROR] 检测到智眼模块配置文件'/opt/gc/zy/etc/php-fpm.conf'不存在

/home/czh/workspace/github/ZhiYanModule/target/debug/zhiyan-mod-php-fpm

/home/czh/workspace/github/ZhiYanModule/target/debug/zhiyan-mod-php-fpm --help

cd /home/czh/workspace/github/ZhiYanModule/zhiyan-mod-php-fpm/conf
mv php-fpm.conf.sample php-fpm.conf
mv php-fpm.log.yaml.sample php-fpm.log.yaml

vim php-fpm.conf

将
language_file=/opt/gc/zy/etc/language/zh_CN/php-fpm.json
改为
language_file=/home/czh/workspace/github/ZhiYanModule/zhiyan-mod-php-fpm/language/zh_CN/php-fpm.json

vim php-fpm.log.yaml

mkdir -p /var/log/php
touch /var/log/php/errors.log
chown -R czh:czh /var/log/php/errors.log

cd /home/czh/workspace/github/ZhiYanModule/zhiyan-mod-php-fpm
mkdir var/log
touch var/log/php-fpm.log/php-fpm.log

/home/czh/workspace/github/ZhiYanModule/target/debug/zhiyan-mod-php-fpm -c  /home/czh/workspace/github/ZhiYanModule/zhiyan-mod-php-fpm/conf/php-fpm.conf -l /home/czh/workspace/github/ZhiYanModule/zhiyan-mod-php-fpm/conf/php-fpm.log.yaml

[czh@archlinux php-fpm.d]$ /home/czh/workspace/github/ZhiYanModule/target/debug/zhiyan-mod-php-fpm -c  /home/czh/workspace/github/ZhiYanModule/zhiyan-mod-php-fpm/conf/php-fpm.conf -l /home/czh/workspace/github/ZhiYanModule/zhiyan-mod-php-fpm/conf/php-fpm.log.yaml
log4rs: error deserializing appender file: Permission denied (os error 13)
log4rs: Reference to nonexistent appender: `file`
2023-08-29 19:57:48 32333 [INFO] 日志配置文件'/home/czh/workspace/github/ZhiYanModule/zhiyan-mod-php-fpm/conf/php-fpm.log.yaml'加载成功。
2023-08-29 19:57:48 32333 [INFO] Code:"1",Messages:"phpfpm模块注册失败，Agent连接失败,十秒后进行下一次尝试,Error Message:transport error"
2023-08-29 19:57:58 32333 [INFO] Code:"1",Messages:"phpfpm模块注册失败，Agent连接失败,十秒后进行下一次尝试,Error Message:transport error"

sudo pacman -Syy
sudo pacman -S  extra/php-fpm
systemctl enable php-fpm.service
systemctl start php-fpm.service
systemctl status php-fpm.service

vim /etc/php/php-fpm.d/www.conf

255 ;       anything, but it may not be a good idea to use the .php extension or it
256 ;       may conflict with a real PHP file.
257 ; Default Value: not set
258 ;pm.status_path = /status
259
260 ; The address on which to accept FastCGI status request. This creates a new
261 ; invisible pool that can handle requests independently. This is useful

systemctl restart php-fpm.service

vim /etc/nginx/nginx.conf

    server {
    listen       8023;
    server_name  _;
    root         /usr/share/nginx/html;
    location ~ ^/status$ {
        fastcgi_pass unix://run/php-fpm/php-fpm.sock;
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
        include fastcgi_params;
        allow 127.0.0.1;
        deny all;
    }
}

su root
python -m pip install --upgrade pip
pip install python-iptables --break-system-packages

python
>>> import iptc
>>> iptc.easy.dump_chain('filter', 'OUTPUT', ipv6=False)

[{'target': 'LIBVIRT_OUT', 'counters': (100462, 12548250)}]

>>> iptc.easy.dump_table('nat', ipv6=False)

>>> iptc.easy.dump_table('nat', ipv6=False)
{'PREROUTING': [{'addrtype': {'dst-type': 'LOCAL'}, 'target':
.....
.....
.....
.....
.....
.....
24', 'target': 'MASQUERADE', 'counters': (0, 0)}]}

pacman -S flutter

cd /home/czh/workspace/github/ZhiYanModule
git clone ssh://git@git.cdgeekcamp.com:4295/zhiyan/zhiyan-web-flutter.git
cd zhiyan-web-flutter
git checkout dev
git pull origin dev

flutter build web --release --web-renderer html

Font asset "CupertinoIcons.ttf" was tree-shaken, reducing it from 283452 to 1272 bytes (99.6% reduction). Tree-shaking can be disabled
by providing the --no-tree-shake-icons flag when building your app.
Font asset "MaterialIcons-Regular.otf" was tree-shaken, reducing it from 1645184 to 10028 bytes (99.4% reduction). Tree-shaking can be
disabled by providing the --no-tree-shake-icons flag when building your app.
Compiling lib/main.dart for the Web...                             26.4s

cd build/web
python -m http.server

Serving HTTP on 0.0.0.0 port 8000 (http://0.0.0.0:8000/) ...

cd /home/czh/workspace/github/ZhiYanModule
git clone ssh://git@git.cdgeekcamp.com:4295/zhiyan/zhiyan-web-server.git
cd zhiyan-web-server
cp src/main/resources/application.properties.sample src/main/resources/application.properties
vim src/main/resources/application.properties

spring.datasource.url=jdbc:postgresql://127.0.0.1:5432/zhiyan
spring.datasource.username=zy
spring.datasource.password=geek

logging.config=/home/czh/workspace/temp/zhiyan-web-server/src/main/resources/logback.xml

# 用户头像保存目录
application.config.user-photo-save-dir=/home/czh/workspace/temp/zhiyan-web-server/var/images/avatar

cp src/main/resources/logback.xml.sample src/main/resources/logback.xml
vim src/main/resources/logback.xml

<file>/home/czh/workspace/temp/zhiyan-web-server/var/log/web-server.log</file>

mvn spring-boot:run

cd /home/czh/workspace/github/ZhiYan
cat << EOF > Cargo.toml
[workspace]
members = ["libzymod-rust"]
exclude = ["libzygrpc", "nginx-access-log-parser", "nginx-error-log-parser"]

[patch]
[patch.crates-io]
[patch.crates-io.libzymod-rust]
path = "/home/czh/workspace/github/ZhiYan/libzymod-rust"

[patch.crates-io.libzygrpc]
path = "/home/czh/workspace/github/ZhiYan/libzygrpc/rust"
EOF

cd /home/czh/workspace/github/ZhiYanModule
cat << EOF >Cargo.toml
[workspace]

members = [
    "zhiyan-mod-php-fpm",
]

[patch.crates-io]
libzymod-rust = { path = '/home/czh/workspace/github/ZhiYan/libzymod-rust' }
libzygrpc = { path = '/home/czh/workspace/github/ZhiYan/libzygrpc/rust' }
EOF

cd /home/czh/workspace/github/ZhiYanModule
git clone ssh://git@git.cdgeekcamp.com:4295/zhiyan/zhiyan-agent.git
cd zhiyan-agent
git checkout dev
git pull origin dev

cp conf/agent.conf.sample conf/agent.conf
vim conf/agent.conf

agent_host=192.168.2.134
server_host=192.168.2.134
host=192.168.2.134
token=YmY0MD********************MGQ2OGI3MTEyODNiYjAyZGJjMA==

cp conf/agent.log.yaml.sample conf/agent.log.yaml
cargo build --release

cd ../target/release/
./zhiyan-agent -c /home/czh/workspace/github/ZhiYanModule/zhiyan-agent/conf/agent.conf -l /home/czh/workspace/github/ZhiYanModule/zhiyan-agent/conf/agent.log.yaml

cd /home/czh/workspace/github/ZhiYanModule
git clone ssh://git@git.cdgeekcamp.com:4295/zhiyan/zhiyan-server.git
cd zhiyan-server
git checkout dev
git pull origin dev

cp conf/server.conf.sample conf/server.conf
vim conf/server.conf

postgresql_username=zy
postgresql_password=geek
postgresql_host=localhost
postgresql_port=5432
postgresql_database=zhiyan

cp conf/server.log.yaml.sample conf/server.log.yaml
cargo build --release

cd ../target/release/

./zhiyan-server -c /home/czh/workspace/github/ZhiYanModule/zhiyan-server/conf/server.conf -l /home/czh/workspace/github/ZhiYanModule/zhiyan-server/conf/server.log.yaml

#查看当前电脑上有多少个版本的python
[root@192 workspace]# ls /usr/bin/python*

#建立软链接更改使用的python
[root@192 workspace]# ln -s /usr/bin/python3.9 python
#或者
[root@192 workspace]# ln -s /usr/bin/python311 python

更改pip安装库的位置
[root@192 workspace]# which pip
/usr/bin/pip
[root@192 workspace]# realpath  /usr/local/bin/gpip
/usr/local/python-3.11.5/bin/pip3

#建立软链接更改使用的python
[root@192 workspace]# ln -s /usr/local/python-3.11.5/bin/pip3 /usr/bin/pip

[czh@minikube python_hello]$ pip
bash: pip: command not found

sudo pacman -S check
cd /home/czh/workspace/github
git clone  git@github.com:fifilyu/zsr.git
cd zsr
cmake .
make
make install
cd bin
./zsr -c 5 --cpu

cpu=0.00,0.00,0.00;
cpu=98.98,1.02,0.00;
cpu=98.71,1.29,0.00;
cpu=99.11,0.89,0.03;

echo 'export PATH=$PATH:~/workspace/github/zsr/bin' >> ~/.bashrc
source ~/.bashrc

zsr -c 5 --cpu

cpu=0.00,0.00,0.00;
cpu=98.98,1.02,0.00;
cpu=98.71,1.29,0.00;
cpu=99.11,0.89,0.03;

pip install paho-mqtt

yum install mosquitto
systemctl status mosquitto.service

cat <<EOF >>/etc/mosquitto/mosquitto.conf
allow_anonymous
listener 1883 0.0.0.0
EOF

systemctl restart mosquitto.service

mosquitto_sub -t 'test/topic' -v

mosquitto_pub -t 'test/topic' -m 'hello world'

[root@master ~]# mosquitto_sub -t 'test/topic' -v
test/topic hello world

# python3.6

import random

from paho.mqtt import client as mqtt_client


#broker = 'broker.emqx.io'
broker = '192.168.122.254'
port = 1883
topic = "python/mqtt"
# Generate a Client ID with the subscribe prefix.
client_id = f'subscribe-{random.randint(0, 100)}'
# username = 'emqx'
# password = 'public'


def connect_mqtt() -> mqtt_client:
    def on_connect(client, userdata, flags, rc):
        if rc == 0:
            print("Connected to MQTT Broker!")
        else:
            print("Failed to connect, return code %d\n", rc)

    client = mqtt_client.Client(client_id)
    # client.username_pw_set(username, password)
    client.on_connect = on_connect
    client.connect(broker, port)
    return client


def subscribe(client: mqtt_client):
    def on_message(client, userdata, msg):
        print(f"Received `{msg.payload.decode()}` from `{msg.topic}` topic")

    client.subscribe(topic)
    client.on_message = on_message


def run():
    client = connect_mqtt()
    subscribe(client)
    client.loop_forever()



if __name__ == '__main__':
    run()

# python 3.6

import random
import time

from paho.mqtt import client as mqtt_client

#broker = 'broker.emqx.io'
broker = '192.168.122.254'
port = 1883
topic = "python/mqtt"
# Generate a Client ID with the publish prefix.
client_id = f'publish-{random.randint(0, 1000)}'
# username = 'emqx'
# password = 'public'

def connect_mqtt():
    def on_connect(client, userdata, flags, rc):
        if rc == 0:
            print("Connected to MQTT Broker!")
        else:
            print("Failed to connect, return code %d\n", rc)

    client = mqtt_client.Client(client_id)
    # client.username_pw_set(username, password)
    client.on_connect = on_connect
    client.connect(broker, port)
    return client


def publish(client):
    msg_count = 1
    while True:
        time.sleep(1)
        msg = f"messages: {msg_count}"
        result = client.publish(topic, msg)
        # result: [0, 1]
        status = result[0]
        if status == 0:
            print(f"Send `{msg}` to topic `{topic}`")
        else:
            print(f"Failed to send message to topic {topic}")
        msg_count += 1
        if msg_count > 5:
            break


def run():
    client = connect_mqtt()
    client.loop_start()
    publish(client)
    client.loop_stop()


if __name__ == '__main__':
    run()

journalctl --update-catalog

rm -rf /tmp/mongodb-27017.sock

sudo pacman -S sof-firmware
sudo pacman -S alsa-ucm-conf
reboot

virsh managedsave-remove win7

sshd -t

sudo pacman -Sy jre-openjdk

vmhgfs-fuse /mnt/hgfs

BUG: soft lockup - CPU#6 stuck for 73s! [flush-253:0:1207]
BUG: soft lockup - CPU#7 stuck for 74s! [processname:15706]
BUG: soft lockup - CPU#5 stuck for 63s! [processname:25582]
BUG: soft lockup - CPU#0 stuck for 64s! [proceessname:15789]

--or--

<time> <hostname> kernel: NMI watchdog: BUG: soft lockup - CPU#6 stuck for 25s! [ksoftirqd/6:38]
<time> <hostname> kernel: NMI watchdog: BUG: soft lockup - CPU#7 stuck for 22s! [ksoftirqd/7:43]
<time> <hostname> kernel: NMI watchdog: BUG: soft lockup - CPU#7 stuck for 24s! [NetworkManager:945]
<time> <hostname> kernel: NMI watchdog: BUG: soft lockup - CPU#7 stuck for 22s! [watchdog/7:41]

sysctl kernel.softlockup_panic

echo "kernel.softlockup_panic=0" >> /etc/sysctl.conf
sysctl -p

echo kernel.watchdog_thresh=30 >> /etc/sysctl.conf
sysctl -p

mongo-py
├── common.py
├── file.json
├── main.py
├── mongo_tool
│   ├── delete.py
│   ├── insert.py
│   ├── query.py
│   └── update.py
├── pyproject.toml
├── README.md

[tool.poetry]
name = "czh-mongo-py"
version = "0.0.1.0"
description = ""
authors = ["xiangyouzhuan <xiangyouzhuan2018@gmail.com>"]
readme = "README.md"

packages = [
    { include = "common.py" },  #包含所需的文件
    { include = "main.py" },
    { include = "mongo_tool" }
]

[tool.poetry.dependencies]
python = ">=3.8.5 <4.0.0"

[tool.poetry.scripts]
czhmongopy = "main:main"  #此处‘czhmongopy’是使用软件时的命令，等同于python main.py
                          #"main:main"指main.py下的main()函数

[build-system]
requires = ["poetry-core"]
build-backend = "poetry.core.masonry.api"

cd mongo-py
poetry build -f wheel

pip install -U --user dist/xxxxx.whl

pip show czh-mongo-py -f

python -c "import site; print('%s/bin/czhmongopy' % site.USER_BASE)"

~/.local/bin/czhmongopy

~/.local/bin/czhmongopy

命令行参数错误，请查看使用说明
usage: mongo_tool [-i file] [-d filter] [-u filter json] [-q filter]

mongo工具

options:
  -h, --help            show this help message and exit
  -i file, --insert file
                        将js文件内容写入数据库
  -u filter json, --update filter json
                        更改满足filter的数据
  -q filter, --query filter
                        查询满足filter的数据
  -d filter, --delete filter
                        删除所有满足条件的document
  -v, --version         显示版本信息

twine upload --repository testpypi dist/*

twine upload dist/*

Uploading distributions to https://test.pypi.org/legacy/
Enter your username: __token__
Uploading czh-mongo-py-0.0.1-py3-none-any.whl
100% ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 8.2/8.2 kB • 00:01 • ?
Uploading czh-mongo-py-0.0.1.tar.gz
100% ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 6.8/6.8 kB • 00:00 • ?

pip install --index-url https://test.pypi.org/simple/ --no-deps czh-mongo-py

export mongoship=192.168.122.52
export mongoshport=27017

czhmongpy

命令行参数错误，请查看使用说明
usage: mongo_tool [-i file] [-d filter] [-u filter json] [-q filter]

mongo工具

options:
  -h, --help            show this help message and exit
  -i file, --insert file
                        将js文件内容写入数据库
  -u filter json, --update filter json
                        更改满足filter的数据
  -q filter, --query filter
                        查询满足filter的数据
  -d filter, --delete filter
                        删除所有满足条件的document
  -v, --version         显示版本信息

## primary RabbitMQ signing key
rpm --import 'https://github.com/rabbitmq/signing-keys/releases/download/3.0/rabbitmq-release-signing-key.asc'
## modern Erlang repository
rpm --import 'https://github.com/rabbitmq/signing-keys/releases/download/3.0/cloudsmith.rabbitmq-erlang.E495BB49CC4BBE5B.key'
## RabbitMQ server repository
rpm --import 'https://github.com/rabbitmq/signing-keys/releases/download/3.0/cloudsmith.rabbitmq-server.9F4587F226208342.key'

cat <<EOF >/etc/yum.repos.d/rabbitmq.repo
# In /etc/yum.repos.d/rabbitmq.repo

##
## Zero dependency Erlang RPM
##

[modern-erlang]
name=modern-erlang-el9
# uses a Cloudsmith mirror @ yum.novemberain.com.
# Unlike Cloudsmith, it does not have any traffic quotas
baseurl=https://yum1.novemberain.com/erlang/el/9/$basearch
        https://yum2.novemberain.com/erlang/el/9/$basearch
        https://dl.cloudsmith.io/public/rabbitmq/rabbitmq-erlang/rpm/el/9/$basearch
repo_gpgcheck=1
enabled=1
gpgkey=https://github.com/rabbitmq/signing-keys/releases/download/3.0/cloudsmith.rabbitmq-erlang.E495BB49CC4BBE5B.key
gpgcheck=1
sslverify=1
sslcacert=/etc/pki/tls/certs/ca-bundle.crt
metadata_expire=300
pkg_gpgcheck=1
autorefresh=1
type=rpm-md

[modern-erlang-noarch]
name=modern-erlang-el9-noarch
# uses a Cloudsmith mirror @ yum.novemberain.com.
# Unlike Cloudsmith, it does not have any traffic quotas
baseurl=https://yum1.novemberain.com/erlang/el/9/noarch
        https://yum2.novemberain.com/erlang/el/9/noarch
        https://dl.cloudsmith.io/public/rabbitmq/rabbitmq-erlang/rpm/el/9/noarch
repo_gpgcheck=1
enabled=1
gpgkey=https://github.com/rabbitmq/signing-keys/releases/download/3.0/cloudsmith.rabbitmq-erlang.E495BB49CC4BBE5B.key
       https://github.com/rabbitmq/signing-keys/releases/download/3.0/rabbitmq-release-signing-key.asc
gpgcheck=1
sslverify=1
sslcacert=/etc/pki/tls/certs/ca-bundle.crt
metadata_expire=300
pkg_gpgcheck=1
autorefresh=1
type=rpm-md

[modern-erlang-source]
name=modern-erlang-el9-source
# uses a Cloudsmith mirror @ yum.novemberain.com.
# Unlike Cloudsmith, it does not have any traffic quotas
baseurl=https://yum1.novemberain.com/erlang/el/9/SRPMS
        https://yum2.novemberain.com/erlang/el/9/SRPMS
        https://dl.cloudsmith.io/public/rabbitmq/rabbitmq-erlang/rpm/el/9/SRPMS
repo_gpgcheck=1
enabled=1
gpgkey=https://github.com/rabbitmq/signing-keys/releases/download/3.0/cloudsmith.rabbitmq-erlang.E495BB49CC4BBE5B.key
       https://github.com/rabbitmq/signing-keys/releases/download/3.0/rabbitmq-release-signing-key.asc
gpgcheck=1
sslverify=1
sslcacert=/etc/pki/tls/certs/ca-bundle.crt
metadata_expire=300
pkg_gpgcheck=1
autorefresh=1


##
## RabbitMQ Server
##

[rabbitmq-el9]
name=rabbitmq-el9
baseurl=https://yum2.novemberain.com/rabbitmq/el/9/$basearch
        https://yum1.novemberain.com/rabbitmq/el/9/$basearch
        https://dl.cloudsmith.io/public/rabbitmq/rabbitmq-server/rpm/el/9/$basearch
repo_gpgcheck=1
enabled=1
# Cloudsmith's repository key and RabbitMQ package signing key
gpgkey=https://github.com/rabbitmq/signing-keys/releases/download/3.0/cloudsmith.rabbitmq-server.9F4587F226208342.key
       https://github.com/rabbitmq/signing-keys/releases/download/3.0/rabbitmq-release-signing-key.asc
gpgcheck=1
sslverify=1
sslcacert=/etc/pki/tls/certs/ca-bundle.crt
metadata_expire=300
pkg_gpgcheck=1
autorefresh=1
type=rpm-md

[rabbitmq-el9-noarch]
name=rabbitmq-el9-noarch
baseurl=https://yum2.novemberain.com/rabbitmq/el/9/noarch
        https://yum1.novemberain.com/rabbitmq/el/9/noarch
        https://dl.cloudsmith.io/public/rabbitmq/rabbitmq-server/rpm/el/9/noarch
repo_gpgcheck=1
enabled=1
# Cloudsmith's repository key and RabbitMQ package signing key
gpgkey=https://github.com/rabbitmq/signing-keys/releases/download/3.0/cloudsmith.rabbitmq-server.9F4587F226208342.key
       https://github.com/rabbitmq/signing-keys/releases/download/3.0/rabbitmq-release-signing-key.asc
gpgcheck=1
sslverify=1
sslcacert=/etc/pki/tls/certs/ca-bundle.crt
metadata_expire=300
pkg_gpgcheck=1
autorefresh=1
type=rpm-md

[rabbitmq-el9-source]
name=rabbitmq-el9-source
baseurl=https://yum2.novemberain.com/rabbitmq/el/9/SRPMS
        https://yum1.novemberain.com/rabbitmq/el/9/SRPMS
        https://dl.cloudsmith.io/public/rabbitmq/rabbitmq-server/rpm/el/9/SRPMS
repo_gpgcheck=1
enabled=1
gpgkey=https://github.com/rabbitmq/signing-keys/releases/download/3.0/cloudsmith.rabbitmq-server.9F4587F226208342.key
gpgcheck=0
sslverify=1
sslcacert=/etc/pki/tls/certs/ca-bundle.crt
metadata_expire=300
pkg_gpgcheck=1
autorefresh=1
type=rpm-md
EOF

dnf update -y

dnf install -y socat logrotate

dnf install -y erlang rabbitmq-server

systemctl enable rabbitmq-server

systemctl start rabbitmq-server

systemctl status  rabbitmq-server

#添加用户并设置密码
rabbitmqctl add_user 'myuser' '2a55f70a841f18b97c3a7db939b7adc9e34a0f1b'

#列出所有的用户
rabbitmqctl list_users

#添加虚拟主机qa1
rabbitmqctl add_vhost qa1

#向用户授权
#第一个 .* 表示对于每个实体，都授予配置权限。
#第二个 .* 表示对于每个实体，都授予写入权限。
#第三个 .* 表示对于每个实体，都授予读取权限。
rabbitmqctl set_permissions -p "qa1" "myuser" ".*" ".*" ".*"

#设置系统最大文件句柄
echo "*               soft   nofile            65535" >> /etc/security/limits.conf
echo "*               hard   nofile            65535" >> /etc/security/limits.conf

#重启生效
reboot

#查看文件句柄最大值
ulimit -n

#设置RabbitMQ最大文件句柄
sed -i "s|# LimitNOFILE=65536|LimitNOFILE=65536|" /usr/lib/systemd/system/rabbitmq-server.service
sed -i "s|LimitNOFILE=32768|#LimitNOFILE=32768|" /usr/lib/systemd/system/rabbitmq-server.service

#重启服务
systemctl daemon-reload
systemctl restart rabbitmq-server

mv /etc/yum.repos.d/CentOS-Base.repo /etc/yum.repos.d/CentOS-Base.repo.backup
wget -O /etc/yum.repos.d/CentOS-Base.repo http://mirrors.aliyun.com/repo/Centos-7.repo

yum clean all
yum makecache
yum update

mv /etc/yum.repos.d/centos.repo /etc/yum.repos.d/centos.repo.backup
touch /etc/yum.repos.d/centos.repo

# CentOS-Base.repo
#
# The mirror system uses the connecting IP address of the client and the
# update status of each mirror to pick mirrors that are updated to and
# geographically close to the client.  You should use this for CentOS updates
# unless you are manually picking other mirrors.
#
# If the mirrorlist= does not work for you, as a fall back you can try the
# remarked out baseurl= line instead.
#
#

[base]
name=CentOS-$releasever - Base - mirrors.aliyun.com
#failovermethod=priority
baseurl=https://mirrors.aliyun.com/centos-stream/$stream/BaseOS/$basearch/os/
        http://mirrors.aliyuncs.com/centos-stream/$stream/BaseOS/$basearch/os/
        http://mirrors.cloud.aliyuncs.com/centos-stream/$stream/BaseOS/$basearch/os/
gpgcheck=1
gpgkey=https://mirrors.aliyun.com/centos-stream/RPM-GPG-KEY-CentOS-Official

#additional packages that may be useful
#[extras]
#name=CentOS-$releasever - Extras - mirrors.aliyun.com
#failovermethod=priority
#baseurl=https://mirrors.aliyun.com/centos-stream/$stream/extras/$basearch/os/
#        http://mirrors.aliyuncs.com/centos-stream/$stream/extras/$basearch/os/
#        http://mirrors.cloud.aliyuncs.com/centos-stream/$stream/extras/$basearch/os/
#gpgcheck=1
#gpgkey=https://mirrors.aliyun.com/centos-stream/RPM-GPG-KEY-CentOS-Official

#additional packages that extend functionality of existing packages
[centosplus]
name=CentOS-$releasever - Plus - mirrors.aliyun.com
#failovermethod=priority
baseurl=https://mirrors.aliyun.com/centos-stream/$stream/centosplus/$basearch/os/
        http://mirrors.aliyuncs.com/centos-stream/$stream/centosplus/$basearch/os/
        http://mirrors.cloud.aliyuncs.com/centos-stream/$stream/centosplus/$basearch/os/
gpgcheck=1
enabled=0
gpgkey=https://mirrors.aliyun.com/centos-stream/RPM-GPG-KEY-CentOS-Official

[PowerTools]
name=CentOS-$releasever - PowerTools - mirrors.aliyun.com
#failovermethod=priority
baseurl=https://mirrors.aliyun.com/centos-stream/$stream/PowerTools/$basearch/os/
        http://mirrors.aliyuncs.com/centos-stream/$stream/PowerTools/$basearch/os/
        http://mirrors.cloud.aliyuncs.com/centos-stream/$stream/PowerTools/$basearch/os/
gpgcheck=1
enabled=0
gpgkey=https://mirrors.aliyun.com/centos-stream/RPM-GPG-KEY-CentOS-Official


[AppStream]
name=CentOS-$releasever - AppStream - mirrors.aliyun.com
#failovermethod=priority
baseurl=https://mirrors.aliyun.com/centos-stream/$stream/AppStream/$basearch/os/
        http://mirrors.aliyuncs.com/centos-stream/$stream/AppStream/$basearch/os/
        http://mirrors.cloud.aliyuncs.com/centos-stream/$stream/AppStream/$basearch/os/
gpgcheck=1
gpgkey=https://mirrors.aliyun.com/centos-stream/RPM-GPG-KEY-CentOS-Official

yum makecache && yum update

#通过命令查找该命令由什么软件提供
yum whatprovides 命令

yum install -y epel-release
yum install -y proxychains-ng.x86_64

sed -E -i 's/socks4\s+127.0.0.1 9050/socks5 192.168.2.8 1080/' /etc/proxychains.conf
sed -i 's/#quiet_mode/quiet_mode/g' /etc/proxychains.conf

echo 'alias p="/usr/bin/proxychains4"' >> ~/.bashrc
# 不重启终端生效环境配置
source ~/.bashrc

# 测试访问
p curl -I www.youtube.com

yum install -y nginx

cat << EOF > /etc/nginx/nginx.conf
# For more information on configuration, see:
#   * Official English Documentation: http://nginx.org/en/docs/
#   * Official Russian Documentation: http://nginx.org/ru/docs/

user nginx;
worker_processes auto;
error_log  /var/log/nginx/error.log warn;
pid        /var/run/nginx.pid;

worker_rlimit_nofile 65535;

events {
    worker_connections 65535;
}

http {
    include             /etc/nginx/mime.types;
    default_type        application/octet-stream;

    log_format  main  '\$host \$server_port \$remote_addr - \$remote_user [\$time_local] "\$request" '
                      '\$status \$request_time \$body_bytes_sent "\$http_referer" '
                      '"\$http_user_agent" "\$http_x_forwarded_for"';

    access_log  /var/log/nginx/access.log  main;

    sendfile            on;
    tcp_nopush          on;
    tcp_nodelay         on;
    keepalive_timeout   65;
    types_hash_max_size 2048;

    server_names_hash_bucket_size 128;
    server_name_in_redirect off;
    client_header_buffer_size 32k;
    large_client_header_buffers 4 32k;

    client_header_timeout  3m;
    client_body_timeout    3m;
    client_max_body_size 50m;
    client_body_buffer_size 256k;
    send_timeout           3m;

    gzip  on;
    gzip_min_length  1k;
    gzip_buffers     4 16k;
    gzip_http_version 1.0;
    gzip_comp_level 2;
    gzip_types image/svg+xml application/x-font-wof text/plain text/xml text/css application/xml application/xhtml+xml application/rss+xml application/javascript application/x-javascript text/javascript;
    gzip_vary on;

    proxy_redirect off;
    proxy_set_header Host \$host;
    proxy_set_header X-Real-IP \$remote_addr;
    proxy_set_header REMOTE-HOST \$remote_addr;
    proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for;
    proxy_connect_timeout 60;
    proxy_send_timeout 60;
    proxy_read_timeout 60;
    proxy_buffer_size 256k;
    proxy_buffers 4 256k;
    proxy_busy_buffers_size 256k;
    proxy_temp_file_write_size 256k;
    proxy_next_upstream error timeout invalid_header http_500 http_503 http_404;
    proxy_max_temp_file_size 128m;
    #让代理服务端不要主动关闭客户端的连接，协助处理499返回代码问题
    proxy_ignore_client_abort on;

    fastcgi_buffer_size 64k;
    fastcgi_buffers 4 64k;
    fastcgi_busy_buffers_size 128k;

    index index.html index.htm index.php default.html default.htm default.php;

    # Load modular configuration files from the /etc/nginx/conf.d directory.
    # See http://nginx.org/en/docs/ngx_core_module.html#include
    # for more information.
    include /etc/nginx/conf.d/*.conf;
}
EOF

mkdir -p /etc/nginx/conf.d

test -f /etc/nginx/conf.d/default.conf && (test -f /etc/nginx/conf.d/default.conf.init || cp /etc/nginx/conf.d/default.conf /etc/nginx/conf.d/default.conf.init)

cat << EOF > /etc/nginx/conf.d/default.conf
server {
    listen       80 default_server;
    listen       [::]:80 default_server;
    server_name  _;
    root         /usr/share/nginx/html;

    # Load configuration files for the default server block.
    include /etc/nginx/default.d/*.conf;

    location / {
    }

    error_page 404 /404.html;
        location = /40x.html {
    }

    error_page 500 502 503 504 /50x.html;
        location = /50x.html {
    }
}
EOF

nginx -t && (test -s /var/run/nginx.pid || rm -f /var/run/nginx.pid)

开机启动
systemctl enable nginx
systemctl start nginx
systemctl status nginx

● nginx.service - nginx - high performance web server
   Loaded: loaded (/usr/lib/systemd/system/nginx.service; disabled; vendor preset: disabled)
   Active: active (running) since Thu 2023-01-19 00:00:23 CST; 3s ago
     Docs: http://nginx.org/en/docs/
  Process: 9617 ExecStart=/usr/sbin/nginx -c /etc/nginx/nginx.conf (code=exited, status=0/SUCCESS)
 Main PID: 9618 (nginx)
   CGroup: /system.slice/nginx.service
           ├─9618 nginx: master process /usr/sbin/nginx -c /etc/nginx/nginx.conf
           ├─9619 nginx: worker process
           ├─9620 nginx: worker process
           ├─9621 nginx: worker process
           └─9622 nginx: worker process

Jan 19 00:00:23 lan_server systemd[1]: Starting nginx - high performance web server...
Jan 19 00:00:23 lan_server systemd[1]: Started nginx - high performance web server.

yum install -y  php php-bcmath php-fpm php-gd php-intl php-mbstring php-mysqlnd php-opcache php-pdo php-pecl-apcu     php-devel

echo "<?php phpinfo(); ?>" >> /usr/share/nginx/html/index.php

#重启 Nginx 服务
systemctl restart nginx

cat << EOF > /etc/nginx/conf.d/test.drupal.com.conf
server {
    listen       80;

    server_name  test.drupal.com;
    root         /data/web/test.drupal.com;
    error_log /var/log/nginx/test.drupal.com_error.log;
    access_log /var/log/nginx/test.drupal.com_access.log  main;

    location / {
        try_files \$uri /index.php\$is_args\$query_string;
    }

    location ~ \.php\$ {
        try_files \$uri \$uri/ 404;

        fastcgi_pass unix:/run/php-fpm/www.sock;
        fastcgi_param SCRIPT_FILENAME \$document_root\$fastcgi_script_name;
        include fastcgi_params;
    }
}
EOF

nginx -t && nginx -s reload

nginx: the configuration file /etc/nginx/nginx.conf syntax is ok
nginx: configuration file /etc/nginx/nginx.conf test is successful

mkdir -p /data/web/test.drupal.com

# 使用 -O 参数指定保存文件名，会强制覆盖已经存在的文件
wget https://ftp.drupal.org/files/projects/drupal-9.5.11.tar.gz -O drupal-9.5.11.tar.gz
tar xf drupal-9.5.11.tar.gz

mv drupal-9.5.11/* /data/web/test.drupal.com
rm -rf drupal-9.5.11
chown -R apache:nginx /data/web/test.drupal.com
chmod -R 755 /data/web/test.drupal.com

echo '127.0.0.1 test.drupal.com' >> /etc/hosts
最后，访问 http://test.drupal.com 完成安装。

systemctl stop firewalld.service
systemctl disable firewalld.service

cat << EOF >> /etc/hosts
192.168.122.25 bigdata1
192.168.122.146 bigdata2
192.168.122.219 bigdata3
EOF

yum update -y
yum install -y java-11-openjdk java-11-openjdk-devel
yum install -y rsync

cat << EOF >> ~/.bashrc
export JAVA_HOME=/usr/lib/jvm/java-11-openjdk-11.0.18.0.10-3.el9.x86_64
export PATH=$PATH:$JAVA_HOME/bin
export HADOOP_HOME=/opt/module/hadoop-3.3.6
export PATH=$PATH:$HADOOP_HOME/bin
export PATH=$PATH:$HADOOP_HOME/sbin
EOF


source ~/.bashrc

useradd hadoop
passwd hadoop

mkdir /opt/module
chown -R hadoop:hadoop /opt/module

su hadoop
ssh-keygen -t rsa

ssh-copy-id bigdata1
ssh-copy-id bigdata2
ssh-copy-id bigdata3

cd /opt/module
wget https://dlcdn.apache.org/hadoop/common/hadoop-3.3.6/hadoop-3.3.6.tar.gz

tar xf hadoop-3.3.6.tar.gz

hadoop version

rsync -rvl /opt/module/ hadoop@bigdata2:/opt/module
rsync -rvl /opt/module/ hadoop@bigdata3:/opt/module

cd /opt/module/hadoop-3.3.6/etc/hadoop

vi core-site.xml

<property>
    <name>fs.defaultFS</name>
    <value>hdfs://bigdata1:9000</value>
</property>
<property>
    <name>hadoop.tmp.dir</name>
    <value>/opt/module/hadoop-3.3.6/data/tmp</value>
</property>

vi hadoop-env.sh

export JAVA_HOME=/usr/lib/jvm/java-11-openjdk-11.0.18.0.10-3.el9.x86_64/

vi hdfs-site.xml

<property>
    <name>dfs.replication</name>
    <value>3</value>
</property>
<property>
    <name>dfs.namenode.secondary.http-address</name>
    <value>bigdata3:50090</value>
</property>

vi yarn-env.sh

export JAVA_HOME=/usr/lib/jvm/java-11-openjdk-11.0.18.0.10-3.el9.x86_64/

vi yarn-site.xml

<property>
    <name>yarn.nodemanager.aux-services</name>
    <value>mapreduce_shuffle</value>
</property>
<property>
    <name>yarn.resourcemanager.hostname</name>
    <value>bigdata2</value>
</property>

vi mapred-env.sh

export JAVA_HOME=/usr/lib/jvm/java-11-openjdk-11.0.18.0.10-3.el9.x86_64/

vi mapred-site.xml

<property>
    <name>mapreduce.framework.name</name>
    <value>yarn</value>
</property>

vi workers

bigdata1
bigdata2
bigdata3

rsync -rvl /opt/module/hadoop-3.3.6/ hadoop@bigdata2:/opt/module/hadoop-3.3.6
rsync -rvl /opt/module/hadoop-3.3.6/ hadoop@bigdata3:/opt/module/hadoop-3.3.6

#对NameNode 进行格式化
cd /opt/module/hadoop-3.3.6
bin/hdfsnamenode-format

#启动 hdfs
sbin/start-dfs.sh

#启动 yarn
sbin/start-yarn.sh

#安装mariadb
yum install -y mariadb mariadb-server

#开启mariadb服务并设置开机自启动
systemctl start mariadb
systemctl enable mariadb

#查看服务状态
systemctl status mariadb

#进入 MariaDB
mysql

#创建数据库与用户
CREATE DATABASE wordpress;
CREATE USER 'user'@'localhost' IDENTIFIED BY '123456';
GRANT ALL PRIVILEGES ON wordpress.* TO 'user'@'localhost';
ALTER USER root@localhost IDENTIFIED VIA mysql_native_password USING PASSWORD('输入您的密码');
FLUSH PRIVILEGES;


#退出数据库
\q

cd /usr/share/nginx/html
wget https://cn.wordpress.org/wordpress-6.3.2-zh_CN.tar.gz
tar xf wordpress-6.3.2-zh_CN.tar.gz
cd /usr/share/nginx/html/wordpress
cp wp-config-sample.php wp-config.php

vim wp-config.php

 // ** MySQL settings - You can get this info from your web host ** //
 /** The name of the database for WordPress */
 define('DB_NAME', 'wordpress');

 /** MySQL database username */
 define('DB_USER', 'user');

 /** MySQL database password */
 define('DB_PASSWORD', '123456');

 /** MySQL hostname */
 define('DB_HOST', 'localhost');

#下载并安装公共签名密钥:
rpm --import https://artifacts.elastic.co/GPG-KEY-elasticsearch

#添加仓库
cat << EOF >/etc/yum.repos.d/elasticsearch.repo
[elasticsearch]
name=Elasticsearch repository for 8.x packages
baseurl=https://artifacts.elastic.co/packages/8.x/yum
gpgcheck=1
gpgkey=https://artifacts.elastic.co/GPG-KEY-elasticsearch
enabled=0
autorefresh=1
type=rpm-md
EOF

#安装elasticsearch
sudo yum install -y --enablerepo=elasticsearch elasticsearch

#例：假设密码是vjT4*xK-Q_o__oXMWRY9则执行
export ELASTIC_PASSWORD="vjT4*xK-Q_o__oXMWRY9"

vim /etc/elasticsearch/elasticsearch.yml
#将相关内容更改为以下值
xpack.security.enabled: false

xpack.security.enrollment.enabled: false

xpack.security.http.ssl:
  enabled: false

xpack.security.transport.ssl:
  enabled: false

#重新加载systemd管理配置
sudo /bin/systemctl daemon-reload
#设置开机自启动
sudo /bin/systemctl enable elasticsearch.service
#开启服务
sudo systemctl start elasticsearch.service
#查看服务状态
sudo systemctl status elasticsearch.service

curl  -u elastic:$ELASTIC_PASSWORD http://localhost:9200

{
  "name" : "Cp8oag6",
  "cluster_name" : "elasticsearch",
  "cluster_uuid" : "AT69_T_DTp-1qgIJlatQqA",
  "version" : {
    "number" : "8.10.4",
    "build_type" : "tar",
    "build_hash" : "f27399d",
    "build_flavor" : "default",
    "build_date" : "2016-03-30T09:51:41.449Z",
    "build_snapshot" : false,
    "lucene_version" : "9.7.0",
    "minimum_wire_compatibility_version" : "1.2.3",
    "minimum_index_compatibility_version" : "1.2.3"
  },
  "tagline" : "You Know, for Search"
}

#添加kibana仓库
cat << EOF >/etc/yum.repos.d/kibana.repo
[kibana-8.x]
name=Kibana repository for 8.x packages
baseurl=https://artifacts.elastic.co/packages/8.x/yum
gpgcheck=1
gpgkey=https://artifacts.elastic.co/GPG-KEY-elasticsearch
enabled=1
autorefresh=1
type=rpm-md
EOF

#安装kibana
sudo yum install -y kibana

vim /etc/kibana/kibana.yml
#更改对应配置为以下值
server.port: 5601
server.host: "0.0.0.0"

#启动kibana
sudo /bin/systemctl daemon-reload
sudo /bin/systemctl enable kibana
sudo systemctl start kibana

curl -I  http://localhost:5601

HTTP/1.1 200 OK
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
permissions-policy: camera=(), display-capture=(), fullscreen=(self), geolocation=(), microphone=(), web-share=()
cross-origin-opener-policy: same-origin
content-security-policy: script-src 'self'; worker-src blob: 'self'; style-src 'unsafe-inline' 'self'
kbn-name: es3
content-type: text/html; charset=utf-8
cache-control: private, no-cache, no-store, must-revalidate
content-length: 90867
vary: accept-encoding
Date: Wed, 01 Nov 2023 12:04:55 GMT
Connection: keep-alive
Keep-Alive: timeout=120

mkdir downloads
cd downloads/
curl -L -O https://artifacts.elastic.co/downloads/beats/filebeat/filebeat-8.10.4-x86_64.rpm
sudo rpm -vi filebeat-8.10.4-x86_64.rpm

vim /etc/filebeat/filebeat.yml

#找到以下配置更改并更改对应的值
output.elasticsearch:
  hosts: ["http://安装ElasticSearch主机的ip:9200"]
  username: "elastic"
  password: "vjT4*xK-Q_o__oXMWRY9"

#列出filebeat可用模块
filebeat modules list

#启用nginx模块配置
filebeat modules enable nginx

#更改nginx模块配置
#var.paths为nginx的access.log路径
vim /etc/filebeat/modules.d/nginx.yml
- module: nginx
  access:
    enabled: true
    var.paths: ["/var/log/nginx/access.log*"]

#Filebeat 提供了预定义的数据解析、索引和可视化资源。
#加载这些资源
filebeat setup -e

#启动filebeat
systemctl enable filebeat
systemctl start filebeat
systemctl status filebeat

yum install -y nginx
systemctl enable nginx
systemctl start nginx
systemctl status nginx

#用于请求nginx默认界面的脚本
cat << EOF >filebeat.sh
#!/bin/bash
while true;
do
    curl -I http://nginx主机的ip:80
    sleep 1
done
EOF

sh filebeat.sh

mkdir /root/downloads
cd /root/downloads
curl -LO https://storage.googleapis.com/minikube/releases/latest/minikube-latest.x86_64.rpm
sudo rpm -Uvh minikube-latest.x86_64.rpm

adduser czh
passwd czh
echo 'czh   ALL=(ALL) ALL' >> /etc/sudoers
su czh
sudo usermod -aG docker $USER && newgrp docker

export HTTP_PROXY=http://10.88.33.166:6666
export HTTPS_PROXY=http://10.88.33.166:6668
export NO_PROXY=localhost,127.0.0.1,10.96.0.0/12,192.168.59.0/24,192.168.49.0/24,192.168.39.0/24

export http_proxy=http://10.88.33.166:6666
export https_proxy=http://10.88.33.166:6668
export no_proxy=localhost,127.0.0.1,10.96.0.0/12,192.168.59.0/24,192.168.49.0/24,192.168.39.0/24

minikube start --driver=docker

[czh@K8S-1 root]$ minikube start --driver=docker
😄  minikube v1.31.2 on Centos 9 (kvm/amd64)
✨  Using the docker driver based on user configuration
📌  Using Docker driver with root privileges
👍  Starting control plane node minikube in cluster minikube
🚜  Pulling base image ...
💾  Downloading Kubernetes v1.27.4 preload ...
    > preloaded-images-k8s-v18-v1...:  393.21 MiB / 393.21 MiB  100.00% 25.86 M
    > index.docker.io/kicbase/sta...:  447.62 MiB / 447.62 MiB  100.00% 3.98 Mi
❗  minikube was unable to download gcr.io/k8s-minikube/kicbase:v0.0.40, but successfully downloaded docker.io/kicbase/stable:v0.0.40 as a fallback image
🔥  Creating docker container (CPUs=2, Memory=2200MB) ...
🐳  Preparing Kubernetes v1.27.4 on Docker 24.0.4 ...
    ▪ Generating certificates and keys ...
    ▪ Booting up control plane ...
    ▪ Configuring RBAC rules ...
🔗  Configuring bridge CNI (Container Networking Interface) ...
🔎  Verifying Kubernetes components...
    ▪ Using image gcr.io/k8s-minikube/storage-provisioner:v5
🌟  Enabled addons: storage-provisioner, default-storageclass
💡  kubectl not found. If you need it, try: 'minikube kubectl -- get pods -A'
🏄  Done! kubectl is now configured to use "minikube" cluster and "default" namespace by default

minikube config set driver docker

minikube ssh

"proxies":{
    "http-proxy": "http://10.88.33.166:6666",
    "https-proxy": "http://10.88.33.166:6668",
    "no-proxy": "localhost,127.0.0.1,10.96.0.0/12,192.168.59.0/24,192.168.49.0/24,192.168.39.0/24"}

sudo systemctl restart docker

ctrl+d

#添加kubectl仓库
cat <<EOF | sudo tee /etc/yum.repos.d/kubernetes.repo
[kubernetes]
name=Kubernetes
baseurl=https://pkgs.k8s.io/core:/stable:/v1.28/rpm/
enabled=1
gpgcheck=1
gpgkey=https://pkgs.k8s.io/core:/stable:/v1.28/rpm/repodata/repomd.xml.key
EOF

#安装kubectl
sudo yum install -y kubectl

#拉取镜像，并将镜像load进minikube
#这一步针对国内不能正常下载k8s镜像的场景，如果网络可以正常访问dockerhub或者配置了代理，可以跳过这一步
docker pull kicbase/echo-server:1.0
minikube image load kicbase/echo-server:1.0

kubectl cluster-info

[czh@localhost ~]$ kubectl cluster-info
Kubernetes control plane is running at https://192.168.49.2:8443
CoreDNS is running at https://192.168.49.2:8443/api/v1/namespaces/kube-system/services/kube-dns:dns/proxy

To further debug and diagnose cluster problems, use 'kubectl cluster-info dump'.

kubectl get pods

kubectl create deployment hello-minikube --image=kicbase/echo-server:1.0
kubectl expose deployment hello-minikube --type=NodePort --port=8080

kubectl get services hello-minikube

kubectl port-forward service/hello-minikube 7080:8080 --address 0.0.0.0

Forwarding from 0.0.0.0:7080 -> 8080
Handling connection for 7080
Handling connection for 7080
Handling connection for 7080

curl -I http://localhost:7080/

HTTP/1.1 200 OK
Content-Type: text/plain
Date: Thu, 02 Nov 2023 09:18:38 GMT
Content-Length: 131

sudo yum install -y yum-utils

sudo yum-config-manager --add-repo https://download.docker.com/linux/centos/docker-ce.repo

sudo yum-config-manager --add-repo https://mirrors.aliyun.com/docker-ce/linux/centos/docker-ce.repo

sudo yum install -y docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin

#启动docker,并设置开机自启动docker
sudo systemctl enable docker
sudo systemctl start docker

cat << EOF >/etc/docker/daemon.json
{
  "proxies": {
    "http-proxy": "http://10.88.33.166:6666",
    "https-proxy": "http://10.88.33.166:6668",
    "no-proxy": "127.0.0.1,localhost"
  }
}
EOF

sudo tee /etc/docker/daemon.json <<EOF
{
    "registry-mirrors": [
        "https://docker.m.daocloud.io"
    ]
}
EOF

#重载配置
sudo systemctl daemon-reload
#重启docker
sudo systemctl restart docker
#运行hello-world image测试是否已经正确安装docker
sudo docker run hello-world

Hello from Docker!
This message shows that your installation appears to be working correctly.

To generate this message, Docker took the following steps:
 1. The Docker client contacted the Docker daemon.
 2. The Docker daemon pulled the "hello-world" image from the Docker Hub.
    (amd64)
 3. The Docker daemon created a new container from that image which runs the
    executable that produces the output you are currently reading.
 4. The Docker daemon streamed that output to the Docker client, which sent it
    to your terminal.

To try something more ambitious, you can run an Ubuntu container with:
 $ docker run -it ubuntu bash

Share images, automate workflows, and more with a free Docker ID:
 https://hub.docker.com/

For more examples and ideas, visit:
 https://docs.docker.com/get-started/

#构建镜像并指定镜像名称和标签
docker build -t testdemo:v1 .

#创建容器
docker run -d --privileged -p 8000(宿主机端口):8080(容器内端口) --name testdemo testdemo:v1

#进入容器
docker exec -it [containerID/containerNAME] /bin/bash

#查看日志
docker logs [containerID/containerNAME]

#日志持续输出到控制台
docker logs -f [containerID/containerNAME]

#输出日志末尾3行
docker logs --tail 3 [containerID/containerNAME]

#导出镜像
docker save -o hello-world.tar hello-world:latest

#载入镜像
docker load -i hello-world.tar

#docker load命令不会自动为导入的镜像创建标签,所以使用docker tag命令为镜像添加标签
docker tag <导入的镜像ID> hello-world:latest

cat <<EOF >> /etc/hosts
127.0.0.1 test.testdemo.com
EOF

vim /etc/nginx/nginx.conf

#添加一个server模块测试
server {
        listen      80;
        server_name test.testdemo.com;

        # 转发请求到 http://www.example.com
        location / {
            proxy_pass http://www.baidu.com;
        }
    }

nginx -t && nginx -s reload

cat <<EOF >> /etc/hosts
127.0.0.1 test.testdemo.com
EOF

vim /etc/nginx/nginx.conf

#添加一个server模块测试
server {
        location /images/ {
            root /data;
            try_files $uri  $uri/  /images/index.html;
        }
    }

nginx -t && nginx -s reload

cat <<EOF >> /etc/hosts
127.0.0.1 test.testdemo.com
EOF

vim /etc/nginx/nginx.conf

#添加一个server模块 测试
server {
        location / {
            rewrite ^/(.*) http://www.baidu.com;
        }
    }

nginx -t && nginx -s reload

cat <<EOF >> /etc/hosts
127.0.0.1 test.testdemo.com
EOF

vim /etc/nginx/nginx.conf

#添加一个server模块测试
server {
        location / {
            root /data/images/;
            return 200;
        }
    }

nginx -t && nginx -s reload

[root@dlp ~]# alternatives --config java

There are 3 programs which provide 'java'.

  Selection    Command
-----------------------------------------------
   1           java-1.8.0-openjdk.x86_64 (/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.332.b09-1.el9.x86_64/jre/bin/java)
*+ 2           java-11-openjdk.x86_64 (/usr/lib/jvm/java-11-openjdk-11.0.15.0.10-1.el9.x86_64/bin/java)
   3           java-17-openjdk.x86_64 (/usr/lib/jvm/java-17-openjdk-17.0.3.0.7-1.el9.x86_64/bin/java)

Enter to keep the current selection[+], or type selection number: 3

[root@dlp ~]# alternatives --config javac

There are 3 programs which provide 'javac'.

  Selection    Command
-----------------------------------------------
   1           java-1.8.0-openjdk.x86_64 (/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.332.b09-1.el9.x86_64/bin/javac)
*+ 2           java-11-openjdk.x86_64 (/usr/lib/jvm/java-11-openjdk-11.0.15.0.10-1.el9.x86_64/bin/javac)
   3           java-17-openjdk.x86_64 (/usr/lib/jvm/java-17-openjdk-17.0.3.0.7-1.el9.x86_64/bin/javac)

Enter to keep the current selection[+], or type selection number: 3

[root@dlp ~]# java --version
openjdk 17.0.3 2022-04-19 LTS
OpenJDK Runtime Environment 21.9 (build 17.0.3+7-LTS)
OpenJDK 64-Bit Server VM 21.9 (build 17.0.3+7-LTS, mixed mode, sharing)
[root@dlp ~]# javac --version
javac 17.0.3

./gradlew bootRun

.\gradlew.bat bootRun

Downloading https://mirrors.aliyun.com/macports/distfiles/gradle/gradle-7.4.2-bin.zip
...........10%...........20%...........30%...........40%...........50%...........60%...........70%...........80%...........90%...........100%
Starting a Gradle Daemon, 1 busy and 1 stopped Daemons could not be reused, use --status for details...........
.....
.....

lsusb

Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
Bus 002 Device 001: ID 1d6b:0003 Linux Foundation 3.0 root hub
Bus 003 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
Bus 003 Device 002: ID 30fa:0400  USB OPTICAL MOUSE
Bus 003 Device 003: ID 30c9:0069 Luxvisions Innotech Limited HP Wide Vision HD Camera
Bus 003 Device 004: ID 8087:0033 Intel Corp. AX211 Bluetooth
Bus 004 Device 001: ID 03f0:1617 Linux Foundation 3.0 root hub

<hostdev mode='subsystem' type='usb'>
  <source startupPolicy='optional'>
    <vendor id='0x03f0'/>
    <product id='0x1617'/>
  </source>
</hostdev>

virsh undefine 虚拟机名字
virsh define 虚拟机.xml

#添加执行权限
chmod +x /etc/rc.d/rc.local

#测试脚本auto_run_script.sh：在家目录下写入日期
cat <<EOF > /root/auto_run_script.sh
#!/bin/bash
date >> /root/test.txt
EOF

#赋予可执行权限：
chmod +x /root/auto_run_script.sh

#将auto_run_script.sh追加到/etc/rc.d/rc.local
cat <<EOF >> /etc/rc.d/rc.local
/root/auto_run_script.sh
EOF

接下来，我们就可以试试效果了。直接重启系统就可以了：

$ sudo reboot

cat /root/test.txt

crontab -e

#输入需要执行的脚本位置
@reboot /root/auto_run_script.sh

cd ~
wget https://github.com/go-gost/gost/releases/download/v3.0.0-rc6/gost_3.0.0-rc6_linux_amd64v3.tar.gz -O gost_3.0.0-rc6_linux_amd64v3.tar.gz
tar xf gost_3.0.0-rc6_linux_amd64v3.tar.gz -C /usr/local/bin
ls -l /usr/local/bin/gost

gost -h

cat << EOF > /etc/gost.yaml
services:
- name: gost-relay-service
  addr: :35462
  handler:
    type: relay
    auth:
      username:
      password: eethi6ohjuuQueen3omu
  listener:
    type: tls

log:
  level: info
  format: text
  output: /var/log/gost/error.log
  rotation:
    maxSize: 100
    maxAge: 4
    maxBackups: 3
    localTime: true
    compress: true
EOF

cat << EOF > /usr/lib/systemd/system/gost.service
[Unit]
Description=GO Simple Tunnel
After=network.target remote-fs.target nss-lookup.target

[Service]
Type=simple
ExecStart=/usr/local/bin/gost -C /etc/gost.yaml

[Install]
WantedBy=multi-user.target
EOF

systemctl enable gost
systemctl start gost
systemctl status gost

cd ~
scp root@47.242.55.180:~/gost_3.0.0-rc6_linux_amd64v3.tar.gz .
tar xf gost_3.0.0-rc6_linux_amd64v3.tar.gz -C /usr/local/bin
ls -l /usr/local/bin/gost

gost -h

#下面ip:47.242.55.180仅适用本例,自己配置时应改为自己国外服务器的ip
cat << EOF > /usr/lib/systemd/system/gost.service
[Unit]
Description=GO Simple Tunnel
After=network.target remote-fs.target nss-lookup.target

[Service]
Type=simple
ExecStart=/usr/local/bin/gost -L=socks5://:1080 -F=relay+tls://:eethi6ohjuuQueen3omu@47.242.55.180:35462

[Install]
WantedBy=multi-user.target
EOF

systemctl stop firewalld
systemctl disable firewalld
systemctl status firewalld

systemctl enable gost
systemctl start gost
systemctl status gost

#启用DHCP
nmcli connection modify "ens160" ipv4.method auto
#启用配置文件
nmcli connection up "ens160"

nmcli connection show

# nmcli connection show
NAME                UUID                                  TYPE      DEVICE
ens160  a5eb6490-cc20-3668-81f8-0314a27f3f75  ethernet  enp1s0

nmcli connection modify "ens160" ipv4.method manual ipv4.addresses 192.168.182.10/24 ipv4.gateway 192.168.182.2 ipv4.dns 61.139.2.69

nmcli connection up "ens160"

#查找所用正在使用的端口
netstat -ano

#查看被占用端口对应的 PID
netstat -aon|findstr "8081"

#查看指定 PID 的进程
tasklist|findstr "9088"

#强制（/F参数）杀死 pid 为 9088 的所有进程包括子进程（/T参数）
taskkill /T /F /PID 9088

lsof -i :80

#安装chrony
yum install -y chrony

#启动chrony服务
systemctl start chronyd

#设置开机自启
systemctl enable chronyd

#查看chrony服务状态
systemctl status chronyd

sudo yum install google-authenticator

google-authenticator

sudo yum install pam-devel

cp /etc/pam.d/sshd /etc/pam.d/sshd.bak
cp /etc/ssh/sshd_config /etc/ssh/sshd_config.bak

auth required pam_google_authenticator.so

sudo systemctl restart sshd

ChallengeResponseAuthentication yes
UsePAM yes

cat /etc/passwd
#或者
getent passwd

cat /etc/shadow

#将一个用户添加到指定组中
usermod -aG groupA user1

cat /etc/group
#或者
getent group

gpasswd -d user1 groupA

yum install -y rsync

rsync -av /source/directory /destination/directory

rsync -avz /source/directory user@remotehost:/destination/directory

rsync -av --exclude='filepattern' /source/directory /destination/directory

rsync -av --delete /source/directory /destination/directory

grep [OPTION...] PATTERNS [FILE...]

lscpu
#或
cat /proc/cpuinfo

free -h
#或
cat /proc/meminfo

lsblk、df -h、fdisk -l
#或
parted -l

ip a
ifconfig
lspci | grep -i net
#或
ethtool

dmidecode | grep -A 9 "System Information"
#或
dmidecode | grep -A 26 "BIOS Information"

uname -a
lsb_release -a
cat /etc/os-release

rpm -qa

systemctl list-units --type=service
#或
ps aux

export WIN_IP=$(cat /etc/resolv.conf | grep nameserver | awk '{print $2}')
echo $WIN_IP

export http_proxy="http://$WIN_IP:6666"
export https_proxy="http://$WIN_IP:6668"

export all_proxy="socks5://$WIN_IP:6667"

curl -I https://www.google.com