All Posts - Mulinux | Linux & DevOps Notes

MySQL 常用排障与救火速查 (Runbook)

Mon, 17 Oct 2022 13:57:34 +0800

🚨 使用指南： 这是一份专为生产环境数据库宕机、卡顿、爆满设计的救火急诊室指南。越致命的状况对应的代码越靠前，日常业务代码被折叠至附录。在此页面所抄写的每一行指令，都应该怀揣对生产环境的敬畏。

nginx logrotate日志回滚

Tue, 09 Aug 2022 10:04:22 +0800

logrotate配置

vi /etc/logrotate.d/nginx
/var/log/nginx/*.log {
    rotate 7
    size 5k
    dateext
    dateformat -%Y-%m-%d-%s
    missingok
#    compress
    sharedscripts
    postrotate
        test -r /run/nginx.pid && kill -USR1 `cat /run/nginx.pid`
    endscript
}

日志回滚命令

logrotate -v -f /etc/logrotate.d/nginx

定时任务

crontab -e
*/5 * * * * /usr/sbin/logrotate -v -f /etc/logrotate.d/nginx

CDH中Kafka实现多端口监听

Mon, 07 Mar 2022 14:45:11 +0800

节点分布

名称	集群IP	业务IP
AIOPS01CALC	192.168.1.1	10.10.1.1
AIOPS02CALC	192.168.1.2	10.10.1.2
AIOPS03CALC	192.168.1.3	10.10.1.3

需求描述

集群内部通过192.168.1.X网段通信，对外通过10.10.1.X网段通信，可使用如下参数配置实现多网段不同端口监听访问。

logstash使用示例

Sun, 12 Dec 2021 10:04:22 +0800

es2csv

input {
 elasticsearch {
    hosts => "localhost:9200"
    index => "kibana_sample_data_ecommerce"
	user => "elastic"
	password => "password"
    query => '{  # query可不填写
    "query": {
      "match_all": {}
      }
    }'
  }
}
 
output {
  csv {
    fields => ["@message"]
    path => "/tmp/csv-export.csv"
  }
}

es2file

input {
 elasticsearch {
    hosts => "localhost:9200"
    index => "kibana_sample_data_ecommerce"
	user => "elastic"
	password => "password"
    query => '{  
    "query": {
      "match_all": {}
      }
    }'
  }
}
 
output {
  file {
    path => "/tmp/csv-export.txt"
	codec => line { format => "%{@message}" }
  }
}

启动命令

/app/logstash/bin/logstash -f /app/logstash/config/esTocsv.conf

Redis 生产环境主从架构配置参考

Mon, 08 Feb 2021 15:59:42 +0800

prod xxxx redis

这是一份基于生产环境的主从 Redis 配置脱敏留档。供部署搭建时参考。

Windows Find Software

Fri, 05 Feb 2021 14:11:42 +0800

查找windows是否安装某个软件

通过服务查找

powershell

Get-WmiObject -class Win32_Product |Select-Object -Property name,version

批处理

reg query HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\|find /i "sogou input"

通过路径名称匹配

Get-ChildItem C:\ProgramData\Microsoft\Windows\\'Start Menu\'\Programs\ -Filter *Premium*"
Get-ChildItem C:\\'Program Files\' -Filter *Premium*"
Get-ChildItem C:\\'Program Files (x86)\' -Filter *Premium*"

Zabbix监控断线，proxy日志提示Connection Restored

Thu, 14 Jan 2021 11:14:03 +0800

问题说明

zabbix监控数据出现断线

容器化部署Wordpress

Wed, 23 Dec 2020 13:30:28 +0800

Install docker and docker-compose

wget http://mirrors.aliyun.com/docker-ce/linux/centos/docker-ce.repo -O /etc/yum.repos.d/docker-ce.repo
yum install docker-ce -y
systemctl start docker
systemctl enable docker
curl -L "https://github.com/docker/compose/releases/download/1.27.4/docker-compose-$(uname -s)-$(uname -m)" -o /usr/local/bin/docker-compose
ln -s /usr/local/bin/docker-compose /usr/bin/docker-compose

Deploy wordpress using official examples

Create wordpress directory

mkdir wordpress
cd wordpress/

Create docker-compose file

vi docker-compose.yml

Kvm Windows时间异常问题

Wed, 16 Dec 2020 11:23:23 +0800

KVM xml配置

<clock offset='localtime'>
  <timer name='rtc' tickpolicy='catchup' track='guest'/>
  <timer name='pit' tickpolicy='delay'/>
  <timer name='hpet' present='no'/>
</clock>

or

<clock offset='timezone' timezone='Asia/Shanghai'/>

Windows服务器配置

bcdedit /set USEPLATFORMCLOCK on #设置
bcdedit /enum #查看是否生效
bcdedit / deletevalue useplatformclock #取消配置

Nginx 代理示例

Tue, 24 Nov 2020 10:22:53 +0800

stream代理

本地80代理到192.168.0.111:8081

驱动

Mon, 23 Nov 2020 15:12:53 +0800

人生的道路都是由心来描绘的，所以，无论自己处于多么严酷的境遇之中，心头都不应为悲观的思想所萦绕。

三环理论

Python使用Libvirt Api

Mon, 23 Nov 2020 10:27:02 +0800

libvirt api文档

libvrit文档：https://libvirt.org/html/libvirt-libvirt-domain.html#virDomainGetBlockInfo

技术文章推荐

Wed, 18 Nov 2020 09:38:29 +0800

邮箱

邮箱服务器IP被屏蔽：https://docs.ksyun.com/documents/1484 http://www.openrbl.org

2万英尺职责范围

Tue, 17 Nov 2020 14:42:33 +0800

2万英尺职责范围

Devops思维导图

Tue, 17 Nov 2020 14:41:24 +0800

devops-keep-leaning

Frp 内网穿透配置

Mon, 16 Nov 2020 13:31:36 +0800

frpserver.conf

https://github.com/fatedier/frp/blob/master/conf/frps_full.ini

Github+Jsdelivr+Picgo实现图床

Mon, 16 Nov 2020 11:21:04 +0800

Github

创建一个public项目
生成token（repo权限）

PicGo + jsDelivr配置

仓库名格式：用户名/仓库名

Github+Netlify+Coding+Hugo搭建blog

Mon, 09 Nov 2020 20:48:38 +0800

静态站双线配置

参考：

Grafana Dashboard Backup for Api

Mon, 24 Aug 2020 13:36:39 +0800

脚本

使用方法：bash /mds/grafanaback/grafana_bashboard_bak.sh http://192.168.1.199:9999 TOKEN

Kvm QGA(Qemu Guest Agent)部署

Tue, 11 Aug 2020 09:33:46 +0800

解决问题

重置KVM虚拟机密码

CentOS7 LVM扩容

Mon, 27 Jul 2020 13:08:59 +0800

创建基于分区的LV

fdisk /dev/vda
n
p
1
t
8e
w

创建基于分区的物理卷

pvcreate /dev/vda3

创建卷组

vgcreate soft /dev/sdb1	# 此次操作为扩容，不需创建

将新的物理卷添加到现有卷组

vgextend centos /dev/vda3 
vgs
lvs
lvextend -L 299.49G /dev/mapper/centos-root 
xfs_growfs /dev/mapper/centos-root

参考：https://www.cnblogs.com/zhaojingyu/p/11647706.html

通过进程恢复kvm qcow2文件

Mon, 15 Jun 2020 09:51:09 +0800

删除镜像与配置文件

virsh undefine TEST
rm -f /home/images/TEST.qcow2

查找进程并记录进程号、uuid、mac

ps aux |grep TEST.qcow2

KVM-libvirt编译升级后回退问题记录('LIBVIRT_PRIVATE_0.10.2' not found)

Sun, 26 Apr 2020 09:51:09 +0800

问题说明

物理机libvirt版本编译升级至高版本，回退到旧版本后出现报错，如下图

使用FPM制作ARM平台ZabbixAgent RPM包

Fri, 17 Apr 2020 10:20:41 +0800

安装fpm/rpm-build

yum install ruby ruby-devel rubygems rpm-build
https://gems.ruby-china.com/
gem sources --remove http://rubygems.org/
gem sources --add https://gems.ruby-china.com/
gem sources -l
gem install fpm
yum install -y rpm-build

制作RPM包

ZabbixAgent

https://cdn.zabbix.com/zabbix/sources/oldstable/4.2/
yum install -y rpm-build
tar zxf zabbix-4.2.8.tar.gz
cd zabbix-4.2.8
vi misc/init.d/tru64/zabbix_agentd
变更1：在#!/bin/sh下面添加两行
    #chkconfig: 345 95 95
    #description: Zabbix_Agent
变更2：修改启动位置
将DAEMON=/usr/local/sbin/zabbix_agentd改为DAEMON=/usr/local/zabbix-agent/sbin/zabbix_agentd
./configure --prefix=/usr/local/zabbix-agent --enable-agent
make
make install
cp misc/init.d/tru64/zabbix_agentd /usr/local/zabbix-agent/zabbix-agent

vi /home/mds/after-install.sh
#!/bin/bash
source /etc/rc.d/init.d/functions
groupadd zabbix
useradd -M -g zabbix zabbix -s /sbin/nologin
mv /usr/local/zabbix-agent/zabbix-agent /etc/init.d/
chmod +x /etc/init.d/zabbix-agent
mkdir -p /var/log/zabbix
chmod -R 755 /var/log/zabbix/
chown -R zabbix. /var/log/zabbix/
chmod -R 755 /usr/local/zabbix-agent/
chown -R zabbix. /usr/local/zabbix-agent/
chkconfig --add zabbix-agent

exit $?


vi /home/mds/after-remove.sh
#!/bin/bash
source /etc/rc.d/init.d/functions
rm -rf /usr/local/zabbix-agent/
rm -f /etc/init.d/zabbix-agent
userdel zabbix
exit $?

fpm -s dir -t rpm --vendor CentOS7.7 -n zabbix-agent -v 4.2.8 -d 'pcre,pcre-devel' -C /usr/local/zabbix-agent/ --prefix /usr/local/zabbix-agent/ --after-install /home/mds/after-install.sh --after-remove /home/mds/after-remove.sh

ZabbixProxy

dnf install mysql5-server mysql5-devel mysql5 net-snmp-devel libevent-devel curl-devel
./configure --prefix=/usr/local/zabbix-proxy --enable-proxy --with-mysql --with-net-snmp --with-libcurl --with-libxml2


# cat /home/mds/after-install.sh
#!/bin/bash
source /etc/rc.d/init.d/functions
groupadd zabbix
useradd -M -g zabbix zabbix -s /sbin/nologin
mv /usr/local/zabbix-proxy/zabbix-proxy /etc/init.d/
chmod +x /etc/init.d/zabbix-proxy
mkdir -p /var/log/zabbix
chmod -R 755 /var/log/zabbix/
chown -R zabbix. /var/log/zabbix/
chmod -R 755 /usr/local/zabbix-proxy/
chown -R zabbix. /usr/local/zabbix-proxy/
chkconfig --add zabbix-proxy
exit $?


# cat /home/mds/after-remove.sh
#!/bin/bash
source /etc/rc.d/init.d/functions
rm -rf /usr/local/zabbix-proxy/
rm -f /etc/init.d/zabbix-proxy
userdel zabbix
exit $?


fpm -s dir -t rpm --vendor openEuler20.03 -n zabbix-proxy -v 4.2.8 -d 'net-snmp-devel,libevent-devel,curl-devel' -C /usr/local/zabbix-proxy/ --prefix /usr/local/zabbix-proxy/ --after-install /home/mds/after-install.sh --after-remove /home/mds/after-remove.sh

create database zabbixproxy character set utf8 collate utf8_bin;
grant all privileges on zabbixproxy.* to zabbixproxy@'127.0.0.1' identified by 'zabbixproxy';
set names utf8;
use zabbixproxy;
source /root/zabbix-4.2.8/database/mysql/schema.sql

Linux服务器修改MTU值

Tue, 03 Mar 2020 10:16:59 +0800

执行并添加到/etc/rc.local

echo “1460”>/sys/class/net/eth1/mtu

Use Kvm

Mon, 23 Dec 2019 11:26:11 +0800

CentOS6部署kvm

安装

yum install -y qemu-kvm.x86_64 qemu-kvm-tools.x86_64 python-virtinst.noarch qemu-img.x86_64 bridge-utils.x86_64 libvirt virt-manager yum -y groupinstall "desktop"

桥接网卡

[root@KVM-PM ~]# cat /etc/sysconfig/network-scripts/ifcfg-eth0 
DEVICE=eth0
#HWADDR=52:54:00:57:40:40
TYPE=Ethernet
#UUID=fe15211b-a8fd-4497-9359-d57c792ff8e2
ONBOOT=yes
NM_CONTROLLED=no
BOOTPROTO=static
IPADDR=172.16.1.11
NETMASK=255.255.0.0
BRIDGE="br0"
[root@KVM-PM ~]# cat /etc/sysconfig/network-scripts/ifcfg-br0 
DEVICE=br0
TYPE=Bridge
ONBOOT=yes
NM_CONTROLLED=no
BOOTPROTO=static
IPADDR=192.168.168.110
NETMASK=255.255.255.0
GATEWAY=192.168.168.1

CentOS7部署KVM

yum groupinstall "fonts" "compat-libraries" "core" "development" "guest-agents" "virtualization-client" "virtualization-platform" "virtualization-tools"
yum install qemu-kvm python-virtinst virt-manager virt-top virt-viewer libvirt libvirt-client libvirt-python libguestfs-tools virt-install qemu-kvm-tools bridge-utils wget net-tools dejavu-lgc-sans-fonts xorg-x11-xauth xorg-x11-xinit xorg-x11-server-utils xorg-x11-font-utils xorg-x11-drv-ati-firmware
yum install virt-manager
yum install libvirt
yum info libvirtd
yum info libvirt
yum install qemu-kvm
yum install qemu-kvm-tools
service libvirtd start
systemctl start  libvirtd.service
systemctl enable  libvirtd.service
yum install xorg-x11-xauth
yum install xorg-x11-xauth xorg-x11-xinit xorg-x11-server-utils xorg-x11-font-utils xorg-x11-drv-ati-firmware
virt-manager
yum install dejavu-lgc-sans-fonts
yum install qemu-kvm libvirt virt-install bridge-utils
lsmod|grep kvm
brctl show
route
ip addr
yum install -y wget
yum install -y net-tools
cd /usr/local/src/
wget https://fedorapeople.org/groups/virt/virtio-win/virtio-win.repo -O /etc/yum.repos.d/virtio-win.repo
yum install -y virtio-win
virt-manager

桥接网卡

[root@a43sv ~]# cat /etc/sysconfig/network-scripts/ifcfg-enp5s0 
TYPE=Ethernet
BOOTPROTO=static
DEFROUTE=yes
PEERDNS=yes
PEERROUTES=yes
IPV4_FAILURE_FATAL=no
IPV6INIT=yes
IPV6_AUTOCONF=yes
IPV6_DEFROUTE=yes
IPV6_PEERDNS=yes
IPV6_PEERROUTES=yes
IPV6_FAILURE_FATAL=no
NAME=enp5s0
UUID=557dfc61-71cf-4d38-86b3-2f135f862e54
DEVICE=enp5s0
ONBOOT=yes
BRIDGE=br0
[root@a43sv ~]# cat /etc/sysconfig/network-scripts/ifcfg-br0 
DEVICE=br0
TYPE="Bridge"
BOOTPROTO="static"
ONBOOT="yes"
DELAY="0"
STP="yes"
IPADDR=192.168.168.76
NETMASK=255.255.255.0
GATEWAY=192.168.168.1
DNS1=114.114.114.114
DNS2=129.29.29.29
NM_CONTROLLED=no

命令行创建windows2016

virt-install \
--name w2k16 \
--os-type=windows \
--ram=2048 --vcpus=2 \
--disk /home/images/w2k16.qcow2,bus=virtio,size=50 \
--disk /home/images/virtio-win-0.1.171_amd64.vfd,device=floppy \
--cdrom=/home/images/cn_windows_server_2016_x64_dvd_9718765.iso \
--network bridge=br0,model=virtio \
--virt-type kvm

收缩镜像

qemu-img convert -c -O qcow2 test.qcow2 test2.qcow2 # test2.qcow2是目标镜像
qemu-img convert -O qcow2 windows.qcow2 windows_new.qcow2
virt-sparsify --compress /tmp/centos.qcow2 centos-new.qcow2

清除网络相关硬件生成信息

virt-sysprep -d centos7

Go学习图谱

Tue, 30 Jul 2019 14:45:11 +0800

Go语言基础知识

Ubuntu Jupyter Notebook配置golang和python

Tue, 23 Jul 2019 14:37:58 +0800

Jupyter配置golang和python

sudo apt install golang
go env
jupyter kernelspec list
python --version
conda create -n py27 python=2.7
conda create -n py27 python=2.7 ipykernel
conda install --prefix=/home/mulinux/anaconda3/envs/py27 ipykernel
sudo apt-get install python2-pip
wget http://bootstrap.pypa.io/get-pip.py
sudo python2.7 get-pip.py
sudo pip2 install ipykernel
/root/anaconda3/envs/py27/bin/pip install backports.functools_lru_cache
/root/anaconda3/envs/py27/bin/pip install tornado==4.5.3
python2.7 -m ipykernel install --user
sudo apt-get install libzmq3-dev
sudo apt-get install pkg-config
go get -u github.com/gopherdata/gophernotes
mkdir -p ~/.local/share/jupyter/kernels/gophernotes
cp /home/mulinux/go/src/github.com/gopherdata/gophernotes/kernel/* ~/.local/share/jupyter/kernels/gophernotes
cd ~/.local/share/jupyter/kernels/gophernotes
chmod +w kernel.json
sudo ln -s $HOME/go/bin/gophernotes /usr/bin/gophernotes
gophernotes

sudo apt-get remove golang libzmq3-dev
清理系统：
sudo apt-get autoclean
sudo apt-get clean
sudo apt-get autoremove
sudo rm -rf /usr/lib/go-1.10
sudo rm -rf /home/mulinux/go
wget https://dl.google.com/go/go1.12.7.linux-amd64.tar.gz
tar -C /usr/local -xzf go$VERSION.$OS-$ARCH.tar.gz
export PATH=$PATH:/usr/local/go/bin

备注

jupyter notebook下不支持 package main和main函数的写法，会报runtime error: index out of range

Windows OOBE应答文件制作

Fri, 12 Jul 2019 10:53:29 +0800

系统映像管理器下载并安装

安装包下载链接

https://www.microsoft.com/en-us/download/details.aspx?id=39982

powershell执行update-help报错

Fri, 12 Jul 2019 09:23:07 +0800

报错信息

Update-Help : 无法更新带有 UI 区域性 {zh-CN} 的模块“WindowsUpdateProvider”帮助: 在 HelpInfo XML 文件中检索不到 UI 区域性 zh-CN。确保模块清单中的 HelpInfoUri 属性有效或检查网络连接是否正常，然后重试该命令。
所在位置 行:1 字符: 1
+ Update-Help -Force
+ ~~~~~~~~~~~~~~~~~~
    + CategoryInfo : ResourceUnavailable: (:) [Update-Help], Exception
    + FullyQualifiedErrorId : UnableToRetrieveHelpInfoXml,Microsoft.PowerShell.Commands.UpdateHelpCommand

解决办法

Update-Help -ErrorAction SilentlyContinue

CentOS7重新部署ixgbe驱动

Mon, 15 Apr 2019 08:54:48 +0800

下载并安装

yum install gcc make
微软官网下载ixgbe
tar -xvf ixgbe-5.3.7.tar.gz
cd ixgbe-5.3.7/src
make
modinfo ./ixgbe.ko
rmmod ixgbe.ko
modinfo ./ixgbe.ko | grep depend
modprobe dca
insmod ./ixgbe.ko
insmod ./ixgbe.ko FdirPballoc=3 RSS=16
dmesg
make install
modprobe ixgbe
modinfo ixgbe

参考

https://blog.csdn.net/u011846257/article/details/52350369 https://www.linuxidc.com/Linux/2015-06/118300.htm https://blog.csdn.net/zhang_danf/article/details/17758669

护眼背景色

Sun, 17 Mar 2019 08:48:58 +0800

护眼背景色

c7edcc
002b35

CentOS7部署httpd2.4.8(需支持perl)

Thu, 24 Jan 2019 10:42:04 +0800

依赖包安装

yum -y install  gcc gcc-c++ make zlib zlib-devel openssl expat-devel  openssl-devel pcre pcre-devel
相关包下载地址：https://mirrors.tuna.tsinghua.edu.cn/apache/
apr-1.6.5.tar.gz
apr-util-1.6.1.tar.gz
httpd-2.4.37.tar.gz

安装

./configure --prefix=/usr/local/apr
#rm如果报错，修改configure文件，RM='$RM' 修改为RM='$RM -f'
make && make install
安装apr-util
./configure --prefix=/usr/local/apr-util --with-apr=/usr/local/apr/
make && make install
安装httpd
./configure \
--prefix=/usr/local/apache/ \
--with-apr=/usr/local/apr/ \
--with-apr-util=/usr/local/apr-util/ \
--enable-so \
--enable-ssl\
--enable-alib\
--with-ssl\
--with--pcre\
--enable-deflate=shared \
--enable-expires=shared \
--enable-rewrite=shared \
--enable-static-support
make && make install

mod_perl支持

otrs系统原本使用的是centos yum安装的httpd2.4.6版本，因安全基线要求，编译了2.4.38至/usr/local/apache目录下，因程序是perl，所以需要添加mod_perl支持 cp /usr/lib64/httpd/modules/mod_perl.so /usr/local/apache/modules/

Python 开发环境

Sat, 19 Jan 2019 14:53:12 +0800

python开发环境

git clone https://github.com/pyenv/pyenv-virtualenv.git $(pyenv root)/plugins/pyenv-virtualenv
echo 'eval "$(pyenv virtualenv-init -)"' >> ~/.bash_profile
echo 'eval "$(pyenv virtualenv-init -)"' >> ~/.zshenv
exec "$SHELL"
pyenv virtualenv 3.6.9 ops-drf-env-3.6.9
pyenv activate ops-drf-env-3.6.9
pip install Django==1.11
pip install MySQLdb

齐治堡垒机Shterm Api Python调用示例

Fri, 11 Jan 2019 13:47:09 +0800

通过接口管理shterm

以下是示例代码，可根据接口文档进行编写自己的管理代码。

魔方网表api记录

Wed, 28 Nov 2018 14:12:28 +0800

魔方网表API接口记录

/s/json/{spaceId}/forms/{formId}?selector={selector} 　　　　##label就是名字，name就是字段id 
/s/json/{spaceId}/forms/{formId}/records/feed和/s/json/{spaceId}/forms/{formId}/records/feed?{query}　　　　##是记录列表的JSON接口
/s/json/{spaceId}/forms/{formId}/records/{recordId}　　　　　　##单条记录的JSON接口

Pycharm Set

Thu, 22 Nov 2018 11:39:23 +0800

文件信息配置

打开pycharm，选择File-Settings
选择Editor–Color&Style–File and Templates–Python-Script

##!/usr/bin/python3
# -*- coding: utf-8 -*-
# @Time    : ${DATE} ${TIME}
# @Author  : lin.chen
# @Email   : it@mulinux.com
# @File    : ${NAME}.py
# @Software: ${PRODUCT_NAME}

Deepin安装使用KVM

Wed, 21 Nov 2018 11:20:19 +0800

安装

sudo apt-get install kvm qtemu ##安装kvm和qt前端
apt install qemu-kvm libvirt-clients qemu-utils libvirt-daemon-system    # deepin 15.8
sudo apt-get install qemu-system    #deepin 15.8

卸载

sudo apt-get remove kvm qtemu ##卸载kvm和qt前端
apt-get install libvirt-bin virt-manager ##工作常用工具

ovf to qcow2

sudo apt-get install qemu-utils
qemu-img convert -O qcow2 input.vmdk output.qcow2

Docker Image Management

Tue, 16 Oct 2018 17:39:00 +0800

Install Docker

Centos6.6_x64
[root@web1 ~]# uname -a
Linux web1.mulinux.com 2.6.32-504.el6.x86_64 #1 SMP Wed Oct 15 04:27:16 UTC 2014 x86_64 x86_64 x86_64 GNU/Linux
[root@web1 ~]# yum install -y epel-release
[root@web1 ~]# yum install -y docker-io
[root@web1 ~]# /etc/init.d/docker start
[root@web1 ~]# ps aux | grep docker
root 1591 1.0 1.4 287656 14224 pts/0 Sl 18:30 0:00 /usr/bin/docker -d
root 1709 0.0 0.0 103244 864 pts/0 S+ 18:31 0:00 grep docker

Image Management

[root@web1 ~]# docker pull centos
latest: Pulling from centos
47d44cb6f252: Pull complete 
6fdebd7b0eb5: Pull complete 
a63aae4d216f: Pull complete 
bb3d629a7cbc: Pull complete 
Digest: sha256:381f21e4c7b3724c6f420b2bcfa6e13e47ed155192869a2a04fa10f944c78476
Status: Downloaded newer image for centos:latest
[root@web1 ~]# docker images
REPOSITORY TAG IMAGE ID CREATED VIRTUAL SIZE
centos latest bb3d629a7cbc 2 weeks ago 196.6 MB
[root@web1 ~]# docker tag centos mulinux123
[root@web1 ~]# docker images
REPOSITORY TAG IMAGE ID CREATED VIRTUAL SIZE
centos latest bb3d629a7cbc 2 weeks ago 196.6 MB
mulinux123 latest bb3d629a7cbc 2 weeks ago 196.6 MB  
[root@web1 ~]# docker run -it centos /bin/bash #start a container from image
[root@32c67b2b18e0 /]# w
 12:30:01 up 2:09, 0 users, load average: 0.06, 0.01, 0.00
USER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT
[root@32c67b2b18e0 /]# exit
exit
[root@web1 ~]# docker ps #list running containers
[root@web1 ~]# docker ps -a #list all containers including stopped
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
32c67b2b18e0 centos "/bin/bash" 2 minutes ago Exited (0) About a minute ago modest_kowalevski 
[root@web1 ~]# docker images
REPOSITORY TAG IMAGE ID CREATED VIRTUAL SIZE
centos latest bb3d629a7cbc 2 weeks ago 196.6 MB
mulinux123 latest bb3d629a7cbc 2 weeks ago 196.6 MB
[root@web1 ~]# docker rmi bb3d629a7cbc #deleting by ID removes all images with same ID
[root@web1 ~]# docker rmi mulinux123
Untagged: mulinux123:latest
[root@web1 ~]# docker images
REPOSITORY TAG IMAGE ID CREATED VIRTUAL SIZE
centos latest bb3d629a7cbc 2 weeks ago 196.6 MB
[root@web1 ~]# docker tag centos centos:mulinux
[root@web1 ~]# docker images
REPOSITORY TAG IMAGE ID CREATED VIRTUAL SIZE
centos latest bb3d629a7cbc 2 weeks ago 196.6 MB
centos mulinux bb3d629a7cbc 2 weeks ago 196.6 MB
[root@web1 ~]# docker rmi centos:mulinux
Untagged: centos:mulinux
[root@web1 ~]# docker images
REPOSITORY TAG IMAGE ID CREATED VIRTUAL SIZE
centos latest bb3d629a7cbc 2 weeks ago 196.6 MB

Apache主机使用.htaccess文件实现301跳转

Wed, 10 Oct 2018 11:18:12 +0800

PHP主机301设置：

将以下规则添加到.htaccess文件

Typecho Blog 环境配置

Sun, 07 Oct 2018 14:58:55 +0800

MariaDB 10 安装

MariaDB repo

cat /etc/yum.repos.d/MariaDB10.repo
# MariaDB 10.0 CentOS repository list - created 2014-09-28 09:10 UTC
# http://mariadb.org/mariadb/repositories/
[mariadb]
name = MariaDB
baseurl = http://yum.mariadb.org/10.0/centos7-amd64
gpgkey=https://yum.mariadb.org/RPM-GPG-KEY-MariaDB
gpgcheck=1

yum & config

yum install mysql-server mysql-client
vi /etc/my.cnf.d/server.cnf
[mysqld]
character_set_server=utf8
init_connect='SET NAMES utf8'

mysqladmin -u root password "123456";
mysql -uroot -p123456 -e "create database mulinux;
grant all privileges on mulinux.* to mulinux@localhost identified by '123456';
flush privileges;
quit"

PHP7 安装

下载并安装依赖

rpm -Uvh https://mirror.webtatic.com/yum/el7/webtatic-release.rpm
yum install php71w
php下载地址：https://link.jianshu.com/?t=http://cn2.php.net/downloads.php
wget -O php7.tar.gz url/get/from/last/step
tar -xvf php7.tar.gz
yum install libxml2 libxml2-devel openssl openssl-devel bzip2 bzip2-devel libcurl libcurl-devel libjpeg libjpeg-devel libpng libpng-devel freetype freetype-devel gmp gmp-devel libmcrypt libmcrypt-devel readline readline-devel libxslt libxslt-devel

编译

cd php-7.1.22
./configure \
--prefix=/usr/local/php \
--with-config-file-path=/etc \
--enable-fpm \
--with-fpm-user=nginx \
--with-fpm-group=nginx \
--enable-inline-optimization \
--disable-debug \
--disable-rpath \
--enable-shared \
--enable-soap \
--with-libxml-dir \
--with-xmlrpc \
--with-openssl \
--with-mcrypt \
--with-mhash \
--with-pcre-regex \
--with-sqlite3 \
--with-zlib \
--enable-bcmath \
--with-iconv \
--with-bz2 \
--enable-calendar \
--with-curl \
--with-cdb \
--enable-dom \
--enable-exif \
--enable-fileinfo \
--enable-filter \
--with-pcre-dir \
--enable-ftp \
--with-gd \
--with-openssl-dir \
--with-jpeg-dir \
--with-png-dir \
--with-zlib-dir \
--with-freetype-dir \
--enable-gd-native-ttf \
--enable-gd-jis-conv \
--with-gettext \
--with-gmp \
--with-mhash \
--enable-json \
--enable-mbstring \
--enable-mbregex \
--enable-mbregex-backtrack \
--with-libmbfl \
--with-onig \
--enable-pdo \
--with-mysqli=mysqlnd \
--with-pdo-mysql=mysqlnd \
--with-zlib-dir \
--with-pdo-sqlite \
--with-readline \
--enable-session \
--enable-shmop \
--enable-simplexml \
--enable-sockets \
--enable-sysvmsg \
--enable-sysvsem \
--enable-sysvshm \
--enable-wddx \
--with-libxml-dir \
--with-xsl \
--enable-zip \
--enable-mysqlnd-compression-support \
--with-pear \
--enable-opcache

make && make install

php env

vi /etc/profile
PATH=$PATH:/usr/local/php/bin
export PATH
source /etc/profile

config php-fpm

cp php.ini-production /etc/php.ini
sed -i '/;date.timezone =$/a\date.timezone = "Asia\/Chongqing"' /etc/php.ini
cp /usr/local/php/etc/php-fpm.conf.default /usr/local/php/etc/php-fpm.conf
cp /usr/local/php/etc/php-fpm.d/www.conf.default /usr/local/php/etc/php-fpm.d/www.conf
cp sapi/fpm/init.d.php-fpm /etc/init.d/php-fpm
chmod +x /etc/init.d/php-fpm
/etc/init.d/php-fpm start
php -v
which php

useradd -M -s /sbin/nologin php-fpm
编辑www.conf，将user和group改成php-fpm

phpfpm.conf

[global]
pid = /usr/local/php/var/run/php-fpm.pid
error_log = /usr/local/php/var/log/php-fpm.log
[www]
listen = /tmp/php-fcgi.sock
user = php-fpm
group = php-fpm
listen.mode = 0666
pm = dynamic
pm.max_children = 50
pm.start_servers = 20
pm.min_spare_servers = 5
pm.max_spare_servers = 35
pm.max_requests = 500
rlimit_files = 1024

Nginx

wget http://nginx.org/download/nginx-1.10.0.tar.gz
tar -zxvf nginx-1.10.0.tar.gz
cd nginx-1.10.0/
yum -y install zlib zlib-devel
yum -y install pcre pcre-devel
./configure --with-http_ssl_module
make
make install
/usr/local/nginx/sbin/nginx

nginx.conf

user nobody nobody;
worker_processes 2;
error_log /usr/local/nginx/logs/nginx_error.log crit;
pid /usr/local/nginx/logs/nginx.pid;
worker_rlimit_nofile 51200;

events
{
    use epoll;
    worker_connections 6000;
}

http
{
    include mime.types;
    default_type application/octet-stream;
    server_names_hash_bucket_size 3526;
    server_names_hash_max_size 4096;
    log_format combined_realip '$remote_addr $http_x_forwarded_for [$time_local]'
    '$host "$request_uri" $status'
    '"$http_referer" "$http_user_agent"';
    sendfile on;
    tcp_nopush on;
    keepalive_timeout 30;
    client_header_timeout 3m;
    client_body_timeout 3m;
    send_timeout 3m;
    connection_pool_size 256;
    client_header_buffer_size 1k;
    large_client_header_buffers 8 4k;
    request_pool_size 4k;
    output_buffers 4 32k;
    postpone_output 1460;
    client_max_body_size 10m;
    client_body_buffer_size 256k;
    client_body_temp_path /usr/local/nginx/client_body_temp;
    proxy_temp_path /usr/local/nginx/proxy_temp;
    fastcgi_temp_path /usr/local/nginx/fastcgi_temp;
    fastcgi_intercept_errors on;
    tcp_nodelay on;
    gzip on;
    gzip_min_length 1k;
    gzip_buffers 4 8k;
    gzip_comp_level 5;
    gzip_http_version 1.1;
    gzip_types text/plain application/x-javascript text/css text/htm application/xml;

server
{
    listen 80;
    server_name localhost;
    index index.html index.htm index.php;
    root /usr/local/nginx/html;

    location ~ \.php$ {
        include fastcgi_params;
        fastcgi_pass unix:/tmp/php-fcgi.sock;
        fastcgi_index index.php;
        fastcgi_param SCRIPT_FILENAME /usr/local/nginx/html$fastcgi_script_name;
    }

}

}

nginx_init

#!/bin/bash
# chkconfig: - 30 21
# description: http service.
# Source Function Library
. /etc/init.d/functions
# Nginx Settings

NGINX_SBIN="/usr/local/nginx/sbin/nginx"
NGINX_CONF="/usr/local/nginx/conf/nginx.conf"
NGINX_PID="/usr/local/nginx/logs/nginx.pid"
RETVAL=0
prog="Nginx"

start() {
        echo -n $"Starting $prog: "
        mkdir -p /dev/shm/nginx_temp
        daemon $NGINX_SBIN -c $NGINX_CONF
        RETVAL=$?
        echo
        return $RETVAL
}

stop() {
        echo -n $"Stopping $prog: "
        killproc -p $NGINX_PID $NGINX_SBIN -TERM
        rm -rf /dev/shm/nginx_temp
        RETVAL=$?
        echo
        return $RETVAL
}

reload(){
        echo -n $"Reloading $prog: "
        killproc -p $NGINX_PID $NGINX_SBIN -HUP
        RETVAL=$?
        echo
        return $RETVAL
}

restart(){
        stop
        start
}

configtest(){
    $NGINX_SBIN -c $NGINX_CONF -t
    return 0
}

case "$1" in
  start)
        start
        ;;
  stop)
        stop
        ;;
  reload)
        reload
        ;;
  restart)
        restart
        ;;
  configtest)
        configtest
        ;;
  *)
        echo $"Usage: $0 {start|stop|reload|restart|configtest}"
        RETVAL=1
esac

exit $RETVAL

nginx 配置访问项目目录并支持 PHP 的 pathinfo 模式配置（实践时未使用）

server {
        listen 80;
        server_name xxx.xxxx.com; # 你的域名
 location / {
     root /var/www/xxx项目目录/;
     index index.php;
 }
        location ~ ^(.+\.php)(.*)$ {
     root /var/www/xxx项目目录/;
     fastcgi_pass 127.0.0.1:9000;
     fastcgi_index index.php;
     fastcgi_split_path_info ^(.+\.php)(.*)$;
     fastcgi_param PATH_INFO $fastcgi_path_info;
     if (!-e $document_root$fastcgi_script_name) {
         return 404;
     }
     fastcgi_param SCRIPT_FILENAME$document_root$fastcgi_script_name;
     include fastcgi_params;
         }
    }

certbot ssl Let’s Encrypt

ln -s /usr/local/nginx/sbin/nginx /usr/bin/nginx
ln -s /usr/local/nginx/conf/ /etc/nginx
yum -y install yum-utils
yum-config-manager --enable rhui-REGION-rhel-server-extras rhui-REGION-rhel-server-optional
yum install python2-certbot-nginx
certbot --nginx

#### 添加更新的计划任务
0 0,12 * * * python -c 'import random; import time; time.sleep(random.random() * 3600)' && certbot renew 

#### 参考
https://github.com/jaywcjlove/handbook/blob/master/CentOS/%E4%BD%BF%E7%94%A8%E5%85%8D%E8%B4%B9SSL%E8%AF%81%E4%B9%A6%E8%AE%A9%E7%BD%91%E7%AB%99%E6%94%AF%E6%8C%81HTTPS%E8%AE%BF%E9%97%AE.md#nginx%E5%BA%94%E7%94%A8%E8%AF%A5%E8%AF%81%E4%B9%A6%E7%9A%84%E4%BE%8B%E5%AD%90

添加typecho 伪静态配置

参考文章：http://docs.typecho.org/servers

CentOS6/7开启nested嵌套虚拟化

Sat, 06 Oct 2018 14:25:16 +0800

启用nested

CentOS6

升级系统内核到Linux 3.X版本 rpm -ivh kernel-ml-3.18.3-1.el6.elrepo.x86_64.rpm 修改grub.conf vi /etc/grub.conf 将default=1改为default=0；且在 kernel 那一行的末端加上 “kvm-intel.nested=1”

Use Lvs

Mon, 17 Sep 2018 13:32:33 +0800

参考

http://kb.linuxvirtualserver.org/images/c/c8/LVS%E6%93%8D%E4%BD%9C%E6%89%8B%E5%86%8C.zip http://github.com/alibaba/LVS

HPGen9做万兆网卡直通时报错

Sat, 18 Aug 2018 12:41:34 +0800

vi /etc/grub2.cnf

在内核那一行添加”intel_iommu=on“
重启后检查：cat /proc/cmdline | grep iommu

dmesg|grep -e DMAR -e IOMMU

报错：vfio-pci 0000:04:00.3: Device is ineligible for IOMMU domain attach due to platform RMRR requirement. Contact your platform vendor.

根据报错在hp论坛查找到该错误信息

https://support.hpe.com/hpsc/doc/public/display?sp4ts.oid=7271259&docId=emr_na-c04781229&docLocale=en_US

https://community.hpe.com/t5/ProLiant-Servers-ML-DL-SL/Device-is-ineligible-for-IOMMU-domain-attach-due-to-platform/td-p/6751904

通过lspci -vvv | grep Ethernet可以查看到网卡的具体型号

解决方案：

Hadoop2.6集群部署

Sun, 15 Jul 2018 14:10:49 +0800

上传hadoop和jdk安装包并解压

下载地址：

http://mirror.bit.edu.cn/apache/hadoop/common
http://www.oracle.com/technetwork/java/javase/downloads/

下载并解压

wget http://archive.apache.org/dist/hadoop/common/hadoop-2.6.0/hadoop-2.6.1.tar.gz
tar zxf jdk-8u172-linux-x64.tar.gz
mv jdk1.8.0_172 /usr/local/
tar zxf hadoop-2.6.0.tar.gz
mv hadoop-2.6.0 /usr/local/

添加环境变量

vi ~/.bashrc

2008r2用户自动登录

Sun, 15 Jul 2018 13:54:51 +0800

control userpasswords2

设置用户"要使用本机，用户必须输入用户名和密码"

Otrs Api配置&&Curl测试

Fri, 01 Jun 2018 13:27:46 +0800

CMDB字段参考

{
    "ConfigItem": [
        {
            "CurInciState": "Operational", 
            "ConfigItemID": "1", 
            "InciStateType": "operational", 
            "CurInciStateType": "operational", 
            "Number": "4722000001", 
            "CreateBy": "1", 
            "CurDeplState": "Production", 
            "LastVersionID": "5", 
            "DeplState": "Production", 
            "CreateTime": "2018-06-01 02:53:44", 
            "DefinitionID": "1", 
            "VersionID": "5", 
            "DeplStateType": "productive", 
            "CIXMLData": {
                "SerialNumber": "ABC513VEFG", 
                "Ram": "16G", 
                "WarrantyExpirationDate": "2018-05-31", 
                "Vendor": "", 
                "CPU": [
                    "6核", 
                    ""
                ], 
                "Model": "ProLiant DL380 Gen9", 
                "Owner": "", 
                "NIC": {
                    "NIC": "10.0.0.1", 
                    "IPoverDHCP": "No"
                }, 
                "Type": "", 
                "HardDisk": {
                    "HardDisk": "200G", 
                    "Capacity": ""
                }, 
                "GraphicAdapter": "", 
                "FQDN": "", 
                "OperatingSystem": "", 
                "Description": ""
            }, 
            "Class": "Computer", 
            "InciState": "Operational", 
            "CurDeplStateType": "productive", 
            "Name": "yz-o12-10.0.0.1"
        }
    ]
}

工单字段参考

{
    "Ticket": [
        {
            "Age": 17572057, 
            "PriorityID": "3", 
            "ServiceID": "", 
            "Type": "Unclassified", 
            "Responsible": "root@localhost", 
            "StateID": "1", 
            "ResponsibleID": "1", 
            "ChangeBy": "1", 
            "EscalationTime": "0", 
            "Changed": "2018-05-31 23:33:25", 
            "OwnerID": "1", 
            "RealTillTimeNotUsed": "0", 
            "GroupID": "2", 
            "Owner": "root@localhost", 
            "CustomerID": "", 
            "TypeID": "1", 
            "Created": "2017-11-09 15:08:10", 
            "Priority": "3 normal", 
            "UntilTime": 0, 
            "EscalationUpdateTime": "0", 
            "Queue": "Raw", 
            "QueueID": "2", 
            "State": "new", 
            "Title": "testtest", 
            "CreateBy": "1", 
            "TicketID": "3", 
            "StateType": "new", 
            "UnlockTimeout": "0", 
            "EscalationResponseTime": "0", 
            "EscalationSolutionTime": "0", 
            "LockID": "1", 
            "ArchiveFlag": "n", 
            "TicketNumber": "2017110947000013", 
            "CreateTimeUnix": "1510211290", 
            "Lock": "unlock", 
            "SLAID": "", 
            "CustomerUserID": "it@mulinux.com"
        }
    ]
}

工单查询json参考

{
    "Ticket": {
        "Queues": "Postmaster"
    }
}

搜索扩展信息json参考

{
  "UserLogin": "root@localhost",
  "Password": "123456",
  "ConfigItem": {
		"Class":"应用",
		"CIXMLData":{
			"CODE":"226"
		}
	} 	
}

操作工单API

获取工单详细信息

curl "http://localhost/otrs/nph-genericinterface.pl/Webservice/GenericTicketConnectorREST/Ticket/3?UserLogin=root@localhost&Password=123456"

创建工单

curl "http://localhost/otrs/nph-genericinterface.pl/Webservice/GenericTicketConnectorREST/Ticket?UserLogin=root@localhost&Password=123456" -H "Content-Type: application/json" -d "{\"Ticket\":{\"Title\":\"REST Create Test\", \"Type\": \"Unclassified\", \"Queue\":\"Raw\",\"State\":\"open\",\"Priority\":\"3 normal\",\"CustomerUser\":\"customer\"},\"Article\":{\"Subject\":\"Rest Create Test\",\"Body\":\"This is only a test\",\"ContentType\":\"text/plain; charset=utf8\"}}"  -X POST

更新工单

curl "http://localhost/otrs/nph-genericinterface.pl/Webservice/GenericTicketConnectorREST/Ticket/3?UserLogin=root@localhost&Password=123456" -H "Content-Type: application/json" -d "{\"Ticket\":{\"Queue\":\"Postmaster\"}}"  -X PATCH

搜索工单

curl "http://localhost/otrs/nph-genericinterface.pl/Webservice/GenericTicketConnectorREST/Ticket?UserLogin=root@localhost&Password=123456&Queue=PostMaster"

操作CMDB API

获取CMDB详细信息

curl "http://localhost/otrs/nph-genericinterface.pl/Webservice/GenericTicketConnectorREST/ConfigItem/1?UserLogin=root@localhost&Password=123456"
curl "http://localhost/otrs/nph-genericinterface.pl/Webservice/GenericTicketConnectorREST/ConfigItem/1" -H "Content-Type: application/json" -d "{\"UserLogin\":\"root@localhost\",\"Password\":\"123456\"}" -X GET

创建CMDB

curl "http://localhost/otrs/nph-genericinterface.pl/Webservice/GenericTicketConnectorREST/ConfigItem" -H "Content-Type: application/json" -d "{\"UserLogin\":\"root@localhost\",\"Password\":\"123456\",\"ConfigItem\":{\"Class\":\"Computer\",\"DeplState\":\"Production\",\"InciState\":\"Operational\",\"Name\":\"SH-TG-C4-FB13\",\"CIXMLData\":{\"SerialNumber\":\"6CU513VRKQ\",\"Ram\":\"16G\",\"Model\":\"ProLiant DL380 Gen9\",\"NIC\":{\"NIC\":\"192.168.1.1\",\"IPoverDHCP\":\"No\"}}}}"  -X POST

更新CMDB

curl "http://localhost/otrs/nph-genericinterface.pl/Webservice/GenericTicketConnectorREST/ConfigItem/1" -H "Content-Type: application/json" -d "{\"UserLogin\":\"root@localhost\",\"Password\":\"123456\",\"ConfigItem\":{\"Class\":\"Computer\",\"DeplState\":\"Production\",\"InciState\":\"Operational\",\"Name\":\"SH-TG-C4-FB18\"}}"  -X PATCH

搜索CMDB

curl "http://localhost/otrs/nph-genericinterface.pl/Webservice/GenericTicketConnectorREST/ConfigItem" -H "Content-Type: application/json" -d "{\"UserLogin\":\"root@localhost\",\"Password\":\"123456\",\"ConfigItem\":{\"Class\":\"Computer\"}}" -X GET

Grafana 插件

Fri, 18 May 2018 14:17:39 +0800

Hexo+Coding Ide+Next6搭建blog

Thu, 03 May 2018 10:41:42 +0800

windows安装hexo

git config --global core.autocrlf false
ssh -T git@git.coding.net `输入yes`
mkdir hexoblog
cd hexoblog/
npm install hexo -g
hexo -v
hexo init
vi _config.yml
cat /c/Users/80283/.ssh/id_rsa.pub
hexo clean && hexo generate && hexo deployer
hexo server
npm install hexo-server
npm install hexo-deployer-git --save
hexo clean
hexo generate
hexo deploy
vi _config.yml
npm install hexo-deployer-git --save
hexo clean && hexo g && hexo d
hexo clean && hexo g && hexo deploy
vi _config.yml
hexo deploy

添加模板

mkdir themes/next
ls themes/next/
git clone https://github.com/iissnan/hexo-theme-next es/next
hexo new page "tags"
hexo new page "categories"
hexo g && hexo d
hexo clean && hexo g && hexo d

多台电脑同步hexo

将本地hexo同步到远程uname hexo分支

telegraf监控ceph需要使用root启动服务

Sat, 14 Apr 2018 09:25:18 +0800

需root启动telegraf

vi /usr/lib/systemd/system/telegraf.service	将user=telegraf改为user=root
systemctl daemon-reload
systemctl resstart telegraf

grafana5 dashboard备份与恢复

Mon, 12 Mar 2018 13:48:46 +0800

参考资料

https://blog.dictvm.org/export-all-grafana-graphs/
https://github.com/m110/grafcli#usage
https://gist.github.com/jaimegago/11229750
https://utkarshcmu.github.io/wizzy-site/home/

安装grafcli

pip3 install grafcli

阅读-关键20小时快速学会任何技能

Fri, 09 Mar 2018 08:59:22 +0800

《关键20小时快速学会任何技能》

读书笔记

快速习得技能

学习备忘录
选择方向
集中精力
制定目标
分解技能
获得工具
扫除障碍
腾出时间
及时反馈
计时训练
数量速度

尝试在heroku上开始ruby

远程执行windows上的计划任务

Thu, 08 Feb 2018 14:02:04 +0800

结束计划任务

schtasks /end /tn "计划任务的名字" /s "机器名或IP" /u "用户名" /p "密码"

ESXi ssacli安装及使用

Fri, 05 Jan 2018 13:42:21 +0800

安装包（vib）

https://support.hpe.com/hpsc/swd/public/detail?swItemId=MTX_499c1fbb1d1043f5bbedb98a41#tab2

阅读-我的情绪为何总被他人左右

Thu, 28 Dec 2017 09:12:26 +0800

《我的情绪为何总被他人左右》

读书笔记

ABC‘S

A'S-->B'S-->C'S
事件诱因-->对诱因事件的信条-->感受和行为

我们常常自然而然地对挫败我们的人或事反应过度——而我们考量它们的方式则是雪上加霜。

OpenVZ虚机Centos6.5安装gitlab报错

Sat, 23 Dec 2017 18:05:39 +0800

执行gitlab-ctl reconfigure后报错：

[execute] cat: error: permission denied on key 'net.bridge.bridge-nf-call-ip6tables'
              error: permission denied on key 'net.bridge.bridge-nf-call-iptables'
              error: permission denied on key 'net.bridge.bridge-nf-call-arptables'
              /etc/sysctl.d/*.conf: No such file or directory
              net.ipv4.ip_forward = 0
              net.ipv4.tcp_syncookies = 1
    
    ================================================================================
    Error executing action `run` on resource 'execute[load sysctl conf]'
    ================================================================================

解决方法

rm -f /sbin/modprobe  
ln -s /bin/true /sbin/modprobe

rm -f /sbin/sysctl  
ln -s /bin/true /sbin/sysctl 
/sbin/sysctl -p    #不用执行

linux下screen使用

Mon, 28 Aug 2017 14:34:47 +0800

安装

yum install -y screen

typecho更换域名

Wed, 16 Aug 2017 17:52:46 +0800

改成使用二级域名blog.mulinux.com

UPDATE `qdm123767534_db`.`typecho_options` SET `value` = 'http://blog.mulinux.com' WHERE `typecho_options`.`name` = 'siteUrl' AND `typecho_options`.`user` =0;
UPDATE `typecho_contents` SET text = REPLACE(text, 'http://www.mulinux.com', 'http://blog.mulinux.com') WHERE INSTR(text,'http://www.mulinux.com') > 0;
UPDATE `typecho_contents` SET text = REPLACE(text, 'www.mulinux.com', 'blog.mulinux.com') WHERE INSTR(text,'www.mulinux.com') > 0;

iptables

Sun, 16 Jul 2017 15:29:11 +0800

通过nat表映射实现共享上网

开启共享上网

（1）把 /etc/sysctl.conf 中的net.ipv4.ip_forward = 1 ，改成等于1 （2）执行 iptables -t nat -A POSTROUTING -s 192.168.1.0/24 -o eth0 -j MASQUERADE

Esxcli常用命令

Fri, 16 Jun 2017 17:35:24 +0800

常用命令

esxcli network nic list 查看网卡信息
esxcli network ip route ipv4 list 查看路由(ipv4)
esxcli network ip dns server list 查看 dns
esxcli network ip interface ipv4 get 查看ip配置(ipv4)
esxcfg-route 查看默认路由
esxcfg-nics 等价 esxcli network nic list
esxcli vm process list # 只显示开机的虚拟机列表
vim-cmd vmsvc/power.getstate <vmid> #获取电源状态
vim-cmd vmsvc/getallvms | grep <vmip> #查找ip对应的vps
vim-cmd vmsvc/power.on <vmid> #启动该id的vps power.on power.off power.reset
esxcli system time set --hour 23 --min 32 --sec 30 #设置esxi系统的时间

参考：http://blog.csdn.net/xiaoxinyu316/article/details/45172771

ELK5部署文档

Thu, 15 Jun 2017 15:07:49 +0800

elasticsearch

elasticsearch-5.5.1-1.noarch

Centos使用parted大容量超2T硬盘分区

Wed, 17 May 2017 13:21:00 +0800

由于MBR分区有大小限制2.1T，所以采用了GPT分区格式。

在安装CENTOS时，在常规情况下超过2T的空间将不能被划分。在使用超过2T的硬盘时，我们需要将MBR分区改为GPT分区。

Centos7安装jupyter并配置多个Python版本

Mon, 17 Apr 2017 11:43:24 +0800

安装python

useradd mds
passwd mds
vi /etc/ssh/sshd_config 
systemctl sshd restart
systemctl restart sshd
vi /etc/ssh/sshd_config 
systemctl restart sshd
passwd root
systemctl status firewalld
systemctl disable firewalld
vi /etc/selinux/config 
yum install epel-release
yum install python-pip python-devel vim openssl-devel readline-devel
pip install jupyter
pip install --upgrade pip
pip install -y setuptools
pip install setuptools
wget https://www.python.org/ftp/python/3.6.1/Python-3.6.1.tgz
rm -f Python-3.6.1.tgz 
cd /usr/local/src/
mv /home/mds/Python-3.6.1.tgz .
tar xf Python-3.6.1.tgz 
cd Python-3.6.1
./configure --prefix=/usr/local/python-3.6.1
echo $?
make && make install
ln -sf /usr/local/python-3.6.1/bin/python3 /usr/bin/python3
ln -sf /usr/local/python-3.6.1/bin/pip3 /usr/bin/pip3 
mkdir /var/notebook
su mds

jupyter 配置

jupyter notebook --generate-config
openssl req -x509 -nodes -days 365 -newkey rsa:1024 -keyout notebook_cert.key -out notebook_cert.pem
python -c "import IPython;print(IPython.lib.passwd())"
vim .jupyter/jupyter_notebook_config.py
mkdir /var/notebook
su -
jupyter-kernelspec list
pip3 install ipykernel
python3 -m ipykernel install --name python3 --display-name "Python3.6.1"
jupyter notebook

配置jupyter_notebook_config.py

c.NotebookApp.ip = '0.0.0.0'
c.NotebookApp.notebook_dir = u'/var/notebook'
c = get_config()
c.NotebookApp.certfile = u'/root/.jupyter/notebook_cert.pem'
c.NotebookApp.keyfile = u'/root/.jupyter/notebook_cert.key'
c.NotebookApp.password = u'sha1:510190c22a9d:c0586d6c41af93a939bd23f3d4cb06de6ec8df9f'
c.NotebookApp.ip = '*'
c.NotebookApp.port = 8080
c.NotebookApp.open_browser = False

启动jupyter

jupyter-notebook --ip=0.0.0.0 --allow-root

rsync server/client配置

Sun, 05 Mar 2017 23:00:08 +0800

服务端

mkdir /etc/rsyncd

vi /etc/rsyncd/rsyncd.conf

uid = root
gid = root
hosts allow = *
use chroot = yes
max connections = 10
pid file = /var/run/rsyncd.pid
lock file = /var/run/rsync.lock
logf ile = /var/log/rsyncd.log
timeout = 600
port = 873

[sh1]
path = /data1
read only = yes
comment = Rsync File
write only = no
list = no
auth users = rsync
secrets file = /etc/.rsyncd.secrets

[sz1]
path = /data2
read only = yes
comment = Rsync File
write only = no
list = no
auth users = rsync
secrets file = /etc/.rsyncd.secrets
　　

vi /etc/.rsyncd.secrets

rsync:passwd
　　

cat /etc/xinetd.d/rsync

# default: off
# description: The rsync server is a good addition to an ftp server, as it \
#	allows crc checksumming etc.
service rsync
{
 disable	= no
 flags	= IPv6
 socket_type = stream
 wait = no
 user = root
 #server = /usr/local/bin/rsync
 server = /usr/bin/rsync
 server_args = --daemon --config=/etc/rsyncd/rsyncd.conf
 log_on_failure += USERID
}
　

/etc/init.d/xinetd restart

客户端

密码

cat /etc/.rsyncd.secrets
passwd

上传

rsync -vzrtopg --delete --progress test.sh rsync@192.168.2.221::sh1 --password-file=/etc/.rsyncd.secrets

Centos7.1+openstack liberty部署

Mon, 20 Feb 2017 18:10:20 +0800

环境准备

准备两台虚拟机：网卡两块，网卡1host-only（192.168.33.11/12），网卡2nat（dhcp），2G内存，1内核，20G

Java Web Keytool Ssl

Thu, 16 Feb 2017 14:04:36 +0800

keytool导入/移除证书

导入：keytool -import -keystore "C:\Program Files (x86)\Java\jre6\lib\security\cacerts"  -storepass changeit -keypass changeit -alias emailcert -file test.cer
移除：keytool -delete -alias emailcert -keystore "C:\Program Files (x86)\Java\jre6\lib\security\cacerts" -storepass changeit

keytool -import -alias cacerts -keystore cacerts -file /etc/pki/tls/certs/sha256.cer -trustcacerts
keytool -import -alias otrskey -file otrs/server.crt

keytool -import -alias otrscert -keystore cacerts -file /etc/pki/tls/certs/server.crt -trustcacerts

Linux Python2.6 Upgrade Python2

Thu, 26 Jan 2017 22:47:30 +0800

下载并编译

python-V
wget http://python.org/ftp/python/2.7.3/Python-2.7.3.tar.bz2
rm-rfPython-2.7.3.tar.bz2 
tar jxfPython-2.7.3.tar.bz2 
cdPython-2.7.3
./configure 
make all
make install
make clean
make distclean
/usr/local/bin/python2.7-V
mv/usr/bin/python/usr/bin/python2.6.6
ln-s/usr/local/bin/python2.7/usr/bin/python
python-V

Expect批量添加ssh免密登录

Sun, 25 Dec 2016 23:04:52 +0800

编写脚本deploy_ssh_key.exp

#!/usr/bin/expect -f

set timeout 2
set ipaddress [lindex $argv 0]
set passwd "password"

spawn ssh-copy-id "-p2522 mds@$ipaddress"

expect {
"yes/no" { send "yes\r";exp_continue }
"password:" { send "$passwd\r" }
}
expect "#"

批量执行

for x in cat ip.txt | awk ‘{print $1}’;do ./deploy_ssh_key.exp $x;done

使用Mock制作Rpm包

Sun, 11 Dec 2016 13:53:54 +0800

安装mock

yum install -y mock

OTRS-5安装配置

Thu, 24 Nov 2016 22:51:34 +0800

准备工作

官方地址： www.otrs.com 社区：http://ask.otrs.org.cn/；http://www.otrs-china.cn/forum.php

Linux mount 挂载

Thu, 27 Oct 2016 10:27:46 +0800

挂载新磁盘

fdisk /dev/hdb   
n(增加新分区)-p（建立扩展分区）-1(建立1个扩展分区)-回车-回车-p（检查分区是不是已经建立）-w（保存）
mkfs.ext3 /dev/hdb1　格式化hdb1 
mkdir /www 建立WWW目录
vi /etc/fstab　更改分区表n
增加/dev/hdb1 /www ext3 defaults 1 1
mount -a 重新装载所有的点

Linux挂载存储

mount -t nfs ip:/test /test
/bin/mount -t cifs -o username=user,password="password",nounix,noserverino  //192.168.1.188/test /mulinux/test

windows 挂载nfs

/mnt/work/ 目录权限为777或者属主为nfs用户
cat /etc/exports
/mnt/work/ 192.168.8.199/32(ro,sync)

net use /persistent:yes
mount 192.168.1.5:/mulinux/History X:

fstab 保存失败

mount /dev/sdc1 /www
mount -o remout,rw /      mount -o remount,rw /www
mount -a

卸载

umount -l 强制卸载

Vsftp 部署及使用

Sun, 16 Oct 2016 14:11:42 +0800

安装vsftp db4-utils

yum install -y vsftpd db4-utils    #生成口令库需要db4
/etc/init.d/vsftpd restart

配置vsftp

vsftp默认情况下可以用系统用户登录

vi /etc/vsftpd/vsftpd.conf
chroot_local_user=YES  取消注释

useradd virftp -s /sbin/nologin      #建立虚拟账号相关联的系统账号

vi  /etc/vsftpd/vsftpd_user    #建立虚拟账户相关的文件，在里面填写用户名和账号，第一行账号，第二行密码，依次类推

    test1
    123456
    test2
    abcdef

chmod 600 /etc/vsftpd/vsftpd_user

db_load -T -t hash -f /etc/vsftpd/vsftpd_user /etc/vsftpd/vsftpd_user.db    # 建立访问者的口令库文件

建立虚拟账号及目录

mkdir  /etc/vsftpd/vsftpd_user_conf    #建立虚拟账号相关的目录
cd   /etc/vsftpd/vsftpd_user_conf    
vi test1    #创建和用户对应的配置文件
local_root=/home/virftp/test1
anonymous_enable=NO
write_enable=YES
local_umask=022
anon_upload_enable=NO
anon_mkdir_write_enable=NO
idle_session_timeout=600
data_connection_timeout=120
max_clients=10
max_per_ip=5
local_max_rate=50000

mkdir /home/virftp/test1    #创建FTP用户test1访问的目录
chown -R virftp:virftp /home/virftp

进入/etc/pam.d/编辑配置

vi /etc/pam.d/vsftpd    #在最开头添加两行
auth sufficient /lib/security/pam_userdb.so db=/etc/vsftpd/vsftpd_user   
#如果是64位系统，则改为/lib64/security/pam_userdb.so 
account sufficient /lib/security/pam_userdb.so db=/etc/vsftpd/vsftpd_user   
#如果是64位系统，则改为/lib64/security/pam_userdb.so

vi /etc/vsftpd/vsftpd.conf
anonymous_enable=YES改为anonymous_enable=NO
#anon_upload_enable=YES 改为 anon_upload_enable=NO
#anon_mkdir_write_enable=YES 改为 anon_mkdir_write_enable=NO

再添加如下内容
chroot_local_user=YES
guest_enable=YES    #启用虚拟用户
guest_username=virftp    #虚拟用户映射到的系统账号
virtual_use_local_privs=YES
user_config_dir=/etc/vsftpd/vsftpd_user_conf    #虚拟用户配置文件存放目录

grep -v "^#" /etc/vsftpd/vsftpd.conf >vsftpd.bak    #备份配置

重启服务

/etc/init.d/vsftpd start

使用ftp

Linux

wget --ftp-user=user --ftp-password=password ftp://ip/test/test.rar
wget  ftp://"uesr:password"@ip:port/test/test.rar

Windows

filezilla

常用工具

Sat, 15 Oct 2016 09:10:49 +0800

Windows

无界鼠标：mouse with borders
多桌面工具：dexpot
终端神器：MobaXterm Personal Edition
终端工具：mRemoteNG/finalshell/ZOC
安卓模拟器：bluestacks/雷电
文件搜索：everything
文件管理：total commander
磁盘大小分析工具：treesize
快启工具：rolan/wox
密码管理工具：keepass
限速工具：NetLimiter
端口扫描工具：ScanPort
文件解锁工具：unlock
视频播放器：PortPlayer
MarkDown编辑器：Typora
比对工具：Beyond Compare
api调试工具：Postman
时间同步工具：nettime
显示亮度调节：flux
检验工具：Hash
虚拟磁盘工具：imdisk
注册表快照：regsnap
ftp客户端：Filezilla
PDF合并: PDFMate Free PDF Merger
按键精灵: autohotkey
数据库工具：Navicat,DBeaver

markdown

typora

清单

滴答清单
Microsoft to do
todo清单

离线手册

zeal docset
dash（MAC）

安卓

Linux终端神器: JuiceSSH

IOS

RDP终端神器：RD client

思维导图

xmind
processon
mindmaster
亿图图示
迅捷画图
wps
wookteam

原型图/UML

Axure RP
Mockplus

OTP

yubikey
fido2
1password
google authenticator
freeotp
google authenticator
Bitwarden

端口转发

rinetd

git管理

sourcetree

Gitlab 部署及升级

Wed, 12 Oct 2016 10:37:55 +0800

gitlab部署

使用yum安装

# yum install curl policycoreutils openssh-server openssh-clients
# systemctl enable sshd
# systemctl start sshd
# yum install postfix
# systemctl enable postfix
# systemctl start postfix
# firewall-cmd --permanent --add-service=http
# systemctl reload firewalld
# vi /etc/yum.repos.d/gitlab-ce.repo
[gitlab-ce]
name=gitlab-ce
baseurl=http://mirrors.tuna.tsinghua.edu.cn/gitlab-ce/yum/el7
repo_gpgcheck=0
gpgcheck=0
enabled=1
gpgkey=https://packages.gitlab.com/gpg.key
# yum makecache
# yum install gitlab-ce
# gitlab-ctl reconfigure
# vi /var/opt/gitlab/gitlab-rails/etc/gitlab.yml
# vi /var/opt/gitlab/nginx/conf/gitlab-http.conf
# vi /opt/gitlab/embedded/conf/nginx.conf
# vi /var/opt/gitlab/gitlab-rails/etc/gitlab.yml
# vi /etc/gitlab/gitlab.rb
# git clone https://gitlab.com/xhang/gitlab.git
# cat /opt/gitlab/embedded/service/gitlab-rails/VERSION
# git diff origin/8-8-stable origin/8-8-zh > /tmp/8.8.diff
# gitlab-ctl stop
# cd /opt/gitlab/embedded/service/gitlab-rails
# git apply /tmp/8.8.diff
# gitlab-ctl start
# /opt/gitlab/embedded/service/gitlab-rails/config/gitlab.yml	#将host改为192.168.2.169

gitlab升级

# wget https://packages.gitlab.com/gitlab/gitlab-ce/packages/ol/6/gitlab-ce-8.15.1-ce.0.el6.x86_64.rpm/download
# rpm -Uvh gitlab-ce-8.15.1-ce.0.el6.x86_64.rpm 
# gitlab-ctl reconfigure
# gitlab-ctl restart

Linux Mail

Sat, 01 Oct 2016 11:40:59 +0800

安装mailx

先查询一下有没有安装过
#rpm -qa |grep mailx

没安装的话执行安装
#yum install mailx
#rpm -qa |grep mailx
mailx-12.4-8.el6_6.x86_64

配置发件账户

编辑/etc/mail.rc ,加入如下语句：
set from=user@tom.com smtp=smtp.tom.com
set smtp-auth-user=your_E-mail_address smtp-auth-password=your_password
set smtp-auth=login

说明：
from                   就是发送者的邮件地址，就是你自己的一个可用的邮件地址。
smtp                   是指提供邮件服务的主机，比如smtp.tom.com; smtp.126.com等
smtp-auth-user       是指你在服务主机上的邮箱用户名
smtp-auth-password 当然是你在smtp主机上的密码
smtp-auth              验证方式了

因为配置中提供的密码是明文的，所以最好 chmod 600 .mailrc，以免泄密。

发邮件测试

发送格式：
mailx -s subject user@xxx.com < message_file
subject表示邮件主题；user@xxx.com是收件人，<mes_file是需要发送的邮件内容。

如：

mailx -s "test mail" zdd@163.com &lt; msg
或者
cat msg | mailx -s "test mail" zdd@163.com

多个收件人之间用逗号分隔
cat msg | mailx -s "test mail" zdd@163.com,zdd2@163.com,zdd2@163.com

也可以直接从命令行输入邮件内容：
mailx -s "test mail" zdd@163.com

上面这条命令会进入命令行输入状态，此时可以输入内容，按Ctrl+d键来结束输入。

其他选项

-r 指定发件人

编程知识思维导图

Thu, 19 May 2016 09:54:37 +0800

编程知识思维导图

Emlog自动给文章内的站外超链接添加nofollow

Thu, 07 Apr 2016 09:38:21 +0800

添加rel=“external nofollow”

这是SEO优化站点文章常用方式之一。

Linux Sendmail

Mon, 28 Mar 2016 11:40:16 +0800

安装sendemail

# wget http://caspian.dotconf.net/menu/Software/SendEmail/sendEmail-v1.56.tar.gz //下载1.56版本
# tar -xzvf sendEmail-v1.56.tar.gz
# mv sendEmail /usr/local/bin/

发送邮件

#  /usr/local/bin/sendEmail -f mulinux@163.com -t mulinux@qq.com \    -s smtp.163.com -u "我是邮件主题" -o message-content-type=html \    -o message-charset=utf8 -xu mulinux@163.com -xp 123456 -m "我是邮件内容"

命令说明

/usr/local/bin/sendEmail 命令主程序
-f mulinux@163.com  发件人邮箱
-s smtp.163.com       发件人邮箱的smtp服务器
-u "我是邮件主题"     邮件的标题
-o message-content-type=html   邮件内容的格式,html表示它是html格式
-o message-charset=utf8        邮件内容编码
-xu mulinux@163.com          发件人邮箱的用户名
-xp 123456               发件人邮箱密码
-m "我是邮件内容"        邮件的具体内容
发送成功之后会有如下提示：Email was sent successfully!

查看帮助：sendEmail --help

注：需提交开启发件账号的pop3/smtp，163或者qq邮箱的密码使用授权码即可。

参考：http://www.ttlsa.com/linux/use-sendemail/

Use Saltstack

Wed, 02 Mar 2016 11:35:08 +0800

准备

Centos6.6 192.168.99.234 web1.mulinux.com 192.168.99.235 web2.mulinux.com

禁止root登录，su&sudo用户身份切换到user1登录

Wed, 17 Feb 2016 10:17:30 +0800

禁止root登录

vim /etc/ssh/sshd_config 加入一行：
PermitRootLogin no

切换到user1登录

su - 用来初始化环境变量 $PATH $HOME等
sudo su到root需要输入root的密码不安全
visudo 编辑/etc/sudoers 配置文件 没有命令需安装 yum install -y sudo
格式： user host=(as_user) commands
比如： user1 ALL=(ALL) NOPASSWD: SU //它的意思是，让user1这个普通用户，拥有root的权限

Linux 常用命令

Tue, 09 Feb 2016 22:39:28 +0800

find

find . -size +100M -exec du -sh {} \; #查找当前目录下大于100M的文件
find  . -maxdepth  2  -name 201507*   -exec  rm -rf {} \; #清理备份命令
find / -type f -name "test.txt" | xargs rm -f  #查找并删除
find / -type f -name "test.txt" -exec rm -rf {} \; #查找并删除
find / -type f -name "*.log" -mtime +5|xargs rm -f  #删除五天前的log文件  -type d 查找文件夹 -type f 查找文件
find / -type f -name 'test.txt' | xargs sed -i s#test#newtest#g    查找内容并替换
find / -type f -name '*.txt' | xargs cat  批量查看
find /mds -xdev -printf '%h\n' |sort|uniq -c|sort -k 1 -n # 查看Linux目录的inode数量

ls

ls -l --time-style=long-iso # 显示成年月日格式

cut

-d ：后面跟分隔字符，分隔字符要用单引号括起来
-c ：后面接的是第几个字符
-f ：后面接的是第几个区块
cut -d ':' -f 2 /etc/passwd
cut -d ':' -f 1-3 /etc/passwd
cut -d ':' -f 1,3 /etc/passwd
cut -c 2-5 /etc/passwd

sort

-t 分隔符 ：作用跟cut的-d一个意思
-n ：使用纯数字排序
-r ：反向排序
-u ：去重复
-kn1,n2 ：由n1区间排序到n2区间，可以只写-kn1，即对n1字段排序
sort -t ':' -k3 /etc/passwd
sort -t ':' -k3 -n /etc/passwd |cut -d ':' -f 3
cut -d ':' -f 3 /etc/passwd  | sort -n  常用
cut -d ':' -f 3 1.txt | sort -nr|uniq -c

awk

以冒号为分隔符取出IP
ifconfig eth0 | awk -F: '/inet addr/ {print $2}'| awk '{print $1}'

以一个或者多个空格和单个冒号作为分隔符取出ip
ifconfig eth0 | grep 'inet addr'|awk -F ' +|:' '{print $4}'

以一个或者多个空格和一个或者多个空格冒号作为分隔符取出ip
ifconfig eth0 | grep 'inet addr'|awk -F '[ :]+' '{print $4}'

过滤出404URL
cat access.log  |awk '$9~/404/' 

过滤出IP和url
grep -Ev  '(HTTP|GET)' access.log|awk '{print $1,$7}' access.log|sort | uniq -c |sort -n -k 1 -r

压缩解压

tar打包当前目录到tarname.tar
tar cvf tarname.tar ./*.* #tar zcvf tarname.tar.gz ./*.*

tar解压到当前目录
tar xvf tarname.tar #tar zxvf tarname.tar

zip压缩
zip -r data.zip data

zip解压
unzip data.zip -d databak

rar解压
rar -x data.rar

nslookup

cmd-->nslookup -qt=mx mulinux.com #查看域名mx记录
cmd-->nslookup-->set q=mx-->mulinux.com #查看域名的mx记录
cmd-->nslookup-->set q=any-->mulinux.com #查看mulinux.com的解析服务情况
nslookup -qa=ptr  （ip） #检测反向解析

tracert

windows：tracert -d mulinux.com    
linux：traceroute -d www.baidu.com

DD

整盘数据备份与恢复

备份：
dd if=/dev/hdx of=/dev/hdy
将本地的/dev/hdx整盘备份到/dev/hdy

dd if=/dev/hdx of=/path/to/image
将/dev/hdx全盘数据备份到指定路径的image文件

dd if=/dev/hdx | gzip >/path/to/image.gz
备份/dev/hdx全盘数据，并利用gzip工具进行压缩，保存到指定路径

恢复：
dd if=/path/to/image of=/dev/hdx
将备份文件恢复到指定盘

gzip -dc /path/to/image.gz | dd of=/dev/hdx
将压缩的备份文件恢复到指定盘

利用netcat远程备份

dd if=/dev/hda bs=16065b | netcat < targethost-IP > 1234
在源主机上执行此命令备份/dev/hda

netcat -l -p 1234 | dd of=/dev/hdc bs=16065b
在目的主机上执行此命令来接收数据并写入/dev/hdc

netcat -l -p 1234 | bzip2 > partition.img
netcat -l -p 1234 | gzip > partition.img
以上两条指令是目的主机指令的变化分别采用bzip2 gzip对数据进行压缩，并将备份文件保存在当前目录。

备份MBR

备份：
dd if=/dev/hdx of=/path/to/image count=1 bs=512
备份磁盘开始的512Byte大小的MBR信息到指定文件

恢复：
dd if=/path/to/image of=/dev/hdx
将备份的MBR信息写到磁盘开始部分

备份软盘

dd if=/dev/fd0 of=disk.img count=1 bs=1440k
将软驱数据备份到当前目录的disk.img文件

拷贝内存资料到硬盘

dd if=/dev/mem of=/root/mem.bin bs=1024
将内存里的数据拷贝到root目录下的mem.bin文件

从光盘拷贝iso镜像

dd if=/dev/cdrom of=/root/cd.iso
拷贝光盘数据到root文件夹下，并保存为cd.iso文件

增加Swap分区文件大小

dd if=/dev/zero of=/swapfile bs=1024 count=262144
创建一个足够大的文件（此处为256M）

mkswap /swapfile
把这个文件变成swap文件

swapon /swapfile
启用这个swap文件

/swapfile swap swap defaults 0 0
在每次开机的时候自动加载swap文件,需要在 /etc/fstab文件中增加一行

销毁磁盘数据

dd if=/dev/urandom of=/dev/hda1
利用随机的数据填充硬盘，在某些必要的场合可以用来销毁数据。执行此操作以后，/dev/hda1将无法挂载，创建和拷贝操作无法执行。

得到最恰当的block size

dd if=/dev/zero bs=1024 count=1000000 of=/root/1Gb.file
dd if=/dev/zero bs=2048 count=500000 of=/root/1Gb.file
dd if=/dev/zero bs=4096 count=250000 of=/root/1Gb.file     
dd if=/dev/zero bs=8192 count=125000 of=/root/1Gb.file
通过比较dd指令输出中所显示的命令执行时间，即可确定系统最佳的block size大小

测试硬盘读写速度

dd if=/root/1Gb.file bs=64k | dd of=/dev/null
dd if=/dev/zero of=/root/1Gb.file bs=1024 count=1000000
通过上两个命令输出的执行时间，可以计算出测试硬盘的读／写速度

修复硬盘

dd if=/dev/sda of=/dev/sda
当硬盘较长时间（比如1，2年）放置不使用后，磁盘上会产生magnetic flux point。当磁头读到这些区域时会遇到困难，并可能导致I/O错误。当这种情况影响到硬盘的第一个扇区时，可能导致硬盘报废。上边的命令有可能使这些数据起死回生。且这个过程是安全，高效的。

测试硬盘读写

dd if=/dev/zero of=test.dbf bs=8k count=200000 conv=fdatasync

参考文档：http://elf8848.iteye.com/blog/2089055

测试方式：使用dd指令，对磁盘进行连续写入，不使用内存缓冲区，每次写入8k的数据，总共写入20万次，产生1.6G大小的文件。

测试指令：dd if=/dev/zero of=/data01/test.dbf bs=8k count=200000 conv=fdatasync

正确的使用dd进行磁盘读写速度测试

dd是Linux/UNIX 下的一个非常有用的命令，作用是用指定大小的块拷贝一个文件，并在拷贝的同时进行指定的转换，所以可以用来测试硬盘的顺序读写能力。可以写文件，可以写裸设备。

Sqlserver计算机重名问题

Sun, 17 Jan 2016 11:20:48 +0800

查看已经存在服务器列表：

select * from master.sys.servers

Use Puppet

Sat, 02 Jan 2016 11:32:42 +0800

安装准备

两台centos6.6_x64机器

5k路由器刷华硕n14u

Tue, 22 Dec 2015 17:44:04 +0800

设备：5k路由器（MT7620A、16M+64M）

登录原厂固件里WEB 192.168.5.1

刷高科固件 Q306升级包v2.20 20140722 .bin
5K路由器wifi密码是5Kwifi,注意K是大写的
刷高科固件，管理帐号密码：admin gaoke

登陆WEB 192.168.8.1

刷SDK固件 firmware sdk.bin
刷完后路由IP变为 192.168.8.1
帐号密码：admin gaoke

刷不死 Breed

在 SDK 管理WEB, administration–upload firmware–update bootloader
192.168.8.1，选择不死Breed breed-mt7620-reset12.bin
注：reset键重启不放拔电源后再接上电源，路由器信号灯连闪四次算成功

进入breed的web界面

更新固件RT-N14U-GPIO-12-5K-64M_3.4.3.9-099.trx，等待路由器自动重启后即可。

默认账号密码admin

Dell_Raid阵列卡驱动

Fri, 11 Dec 2015 11:23:20 +0800

http://zh.community.dell.com/support_forums/poweredge/f/279/t/9581 http://zh.community.dell.com/support_forums/poweredge/f/279/p/9588/29512#29512 http://zh.community.dell.com/support_forums/poweredge/f/279

CentOS补家目录方法

Fri, 11 Dec 2015 10:04:22 +0800

创建不带家目录的用户

useradd -u 508 -g group2 -M user4 #-M不创建家目录

LANMP一键安装脚本

Sun, 29 Nov 2015 10:13:33 +0800

Centos6 ，不区分32位，64位，要求机器可以上外网。支持lamp 和 lnmp， mysql支持5.1和5.6两个版本，php支持5.3和5.6两个版本，apache2.2，nginx1.8

pureftp部署和优化

Sun, 22 Nov 2015 10:08:31 +0800

安装

cd /usr/local/src/
wget http://download.pureftpd.org/pub/pure-ftpd/releases/pure-ftpd-1.0.42.tar.bz2
tar jxf pure-ftpd-1.0.42.tar.bz2
cd pure-ftpd-1.0.42
./configure \
--prefix=/usr/local/pureftpd \
--without-inetd \
--with-altlog \
--with-puredb \
--with-throttling \
--with-peruserlimits  \
--with-tls
make && make install

配置

cd configuration-file
mkdir -p /usr/local/pureftpd/etc/
cp pure-ftpd.conf    /usr/local/pureftpd/etc/pure-ftpd.conf
cp pure-config.pl    /usr/local/pureftpd/sbin/pure-config.pl
chmod 755    /usr/local/pureftpd/sbin/pure-config.pl
vi /usr/local/pureftpd/etc/pure-ftpd.conf
ChrootEveryone              yes
BrokenClientsCompatibility  no
MaxClientsNumber            50
Daemonize                   yes
MaxClientsPerIP             8
VerboseLog                  no
DisplayDotFiles             yes
AnonymousOnly               no
NoAnonymous                 no
SyslogFacility              ftp
DontResolve                 yes
MaxIdleTime                 15
PureDB                        /usr/local/pureftpd/etc/pureftpd.pdb
LimitRecursion              3136 8
AnonymousCanCreateDirs      no
MaxLoad                     4
AntiWarez                   yes
Umask                       133:022
MinUID                      100
AllowUserFXP                no
AllowAnonymousFXP           no
ProhibitDotFilesWrite       no
ProhibitDotFilesRead        no
AutoRename                  no
AnonymousCantUpload         no
PIDFile                     /usr/local/pureftpd/var/run/pure-ftpd.pid
MaxDiskUsage               99
CustomerProof              yes

建立用户

mkdir /data/www/
useradd www
chown -R www:www /data/www/
/usr/local/pureftpd/bin/pure-pw useradd ftp_user1  -uwww -d /data/www/
/usr/local/pureftpd/bin/pure-pw mkdb  创建用户信息数据库文件
/usr/local/pureftpd/bin/pure-pw list
/usr/local/pureftpd/bin/pure-pw  userdel ftp_user2 删除账号
/usr/local/pureftpd/bin/pure-pw  useradd ftp_user2 -uwww -d /tmp  删除账号, 再创建一个账号
/usr/local/pureftpd/bin/pure-pw mkdb 创建后要执行一下

ps aux | grep pureftp

安装lftp测试ftp情况

yum install -y lftp
lftp ftp_user1@127.0.0.1
touch /data/www/123.txt
tail /var/log/messages 查看ftp账号是否正常登录并创建文件

get 1.txt  下载文件   在用户目录下
put 1.txt  上传文件    同get

直接用FTP命令来测试

Pxe Kicstart for Centos

Sat, 17 Oct 2015 15:15:39 +0800

环境准备

Linux-pxe服务器：192.168.216.20，Centos6.6_X64；网关和dns地址都为192.168.216.2。

Lanmp+nginxproxy+discuz+wordpress+phpmyadmin

Thu, 03 Sep 2015 14:00:40 +0800

搭建LAMP，安装Nginx，作为代理，将MySQL安装在单独的机器，apache负责动态，nginx负责静态

实验环境

1、VMware Workstation 9

Windows使用Diskpart扩容磁盘

Sun, 16 Aug 2015 18:21:15 +0800

扩容命令

diskpart   
list volume    
select volume 1   
extend

Zabbix2.4.7 yum部署

Thu, 13 Aug 2015 14:19:29 +0800

服务端

先添加一个zabbix的官方yum源

[root@localhost ~]# rpm -ivh http://repo.zabbix.com/zabbix/2.4/rhel/6/x86_64/zabbix-release-2.4-1.el6.noarch.rpm

[root@localhost ~]# setenforce 0
[root@localhost ~]# sed -i "s#SELINUX=enforcing#SELINUX=disabled#g" /etc/selinux/config

安装组件包（会把LAMP环境和ZABBIX组件一起装好）

[root@localhost ~]# yum -y install iksemel libssh2 zabbix-server-mysql zabbix-web-mysql mysql-server zabbix-agent net-snmp-devel net-snmp-libs net-snmp-perl net-snmp-utils net-snmp
[root@localhost ~]# /etc/init.d/mysqld start
[root@localhost ~]# mysqladmin -uroot password zabbix

配置MYSQL数据库(这里默认是安装的MYSQL 5.1)

[root@localhost ~]# mysql -p
mysql> create database zabbix character set utf8;
mysql> grant all privileges on zabbix.* to zabbix@localhost identified by 'zabbix';
mysql> flush privileges;
mysql> source /usr/share/doc/zabbix-server-mysql-2.4.7/create/schema.sql;
mysql> source /usr/share/doc/zabbix-server-mysql-2.4.7/create/images.sql;
mysql> source /usr/share/doc/zabbix-server-mysql-2.4.7/create/data.sql;

编辑zabbix的配置文件

vi  /etc/zabbix/zabbix_server.conf

依次找到DBHost  DBName  DBUser DBPassword 四个关键字,

修改成你自己上面定义的内容:

DBHost=localhost    #指的是访问本机数据库
DBName=zabbixdb    #zabbix的数据库名字
DBUser=zabbixuser    #访问数据库的用户名
DBPassword=zabbixpass    #访问数据库的密码

编辑PHP环境配置文件

vi  /etc/httpd/conf.d/zabbix.conf

对应修改内容如下

php_value max_execution_time 300
php_value memory_limit 128M
php_value post_max_size 16M
php_value upload_max_filesize 2M
php_value max_input_time 300
php_value date.timezone Asia/Shanghai
其实zabbix都设置好了,只有最后一项需要你改动下,去掉前面的#号

时区设置成Asia/Shanghai

iptables防火墙设置

iptables -A INPUT -m state --state NEW -m tcp -p tcp --dport 80 -j ACCEPT
iptables -A INPUT -m state --state NEW -m tcp -p tcp --dport 10050 -j ACCEPT
iptables -A INPUT -m state --state NEW -m udp -p udp --dport 10050 -j ACCEPT
iptables -A INPUT -m state --state NEW -m tcp -p tcp --dport 10051 -j ACCEPT
iptables -A INPUT -m state --state NEW -m udp -p udp --dport 10051 -j ACCEPT

设置所需服务自动启动:(httpd,mysqld,snmpd,snmptrapd,zabbix-agent,zabbix-server)

chkconfig httpd on ; service httpd start
chkconfig mysqld on ; service mysqld start
chkconfig snmpd on ; service snmpd start
chkconfig snmptrapd on ; service snmptrapd start
chkconfig zabbix-agent on ; service zabbix-agent start
chkconfig zabbix-server on  ; service zabbix-server start

浏览器访问安装：http://192.168.0.109/zabbix/

客户端

[root@localhost ~]# rpm -ivh http://repo.zabbix.com/zabbix/2.4/rhel/6/x86_64/zabbix-release-2.4-1.el6.noarch.rpm
[root@localhost ~]# yum install -y zabbix-agent
[root@localhost ~]# vi /etc/zabbix/zabbix_agentd.conf
Server=127.0.0.1                     #改为zabbix服务器IP，被动模式。
ServerActive=127.0.0.1               #改为zabbix服务器IP，主动模式。
Hostname=Zabbix server               #主机名，尽量和主机名一致。
[root@localhost ~]# /etc/init.d/zabbix-agent start

使用UltraISO制作U盘启动盘

Tue, 11 Aug 2015 11:38:23 +0800

1、鼠标右键“以管理员身份运行”UltraISO图标

2、打开UltraISO的窗口后依次点击左上角的“文件”-“打开”

3、浏览到存放镜像文件的目录，选中该目标文件，点击“打开”按钮

Centos6搭建本地YUM源

Fri, 17 Jul 2015 13:28:21 +0800

使用光盘或者iso（一般用于没有通外网时）

挂载光盘

mount -t iso9660 -o loop /dev/cdrom /media/cdrom    #光盘插入光驱后操作
mount -o loop /CentOS_6.4_Final.iso /media/cdrom    #挂载本地iso到cdrom

删除/etc/yum.repos.d目录所有的repo文件

rm -rf /etc/yum.repos.d/*

iisapp通过pid查找对应的网站

Thu, 18 Jun 2015 13:17:02 +0800

先在任务管理器查看哪个pid占用资源过大，找出pid

iisapp /p pid #查询对应的网站

查找到后再进行下一步的操作。继续查找问题或者关闭该站点以免影响其他站点。

建站常用

Mon, 25 May 2015 09:56:06 +0800

环境部署

OneinStack: www.luanzun.com/oneinstack.com
BaoTa: www.bt.cn

采集器

火车头

movie

maccms
maccms-wiki https://github.com/magicblack/maccms10/wiki
模板：https://www.mytheme.cn/maccms/52.html
海洋CMS

统计

不蒜子：http://ibruce.info/

PHP+IIS6的配置.md

Tue, 12 May 2015 10:22:57 +0800

安装

1、下载php vc6或者vc9的NTS版本，无需安装，解压即可。

LAMP环境下PHP上传文件大小限制解决方法

Fri, 08 May 2015 09:32:03 +0800

在php.ini里面调整如下行

upload_max_filesize = 20M 
post_max_size = 10M 
memory_limit = 20M

确认上传的

Lamp Linux+apache+mysql+php

Sat, 11 Apr 2015 14:27:47 +0800

系统及软件版本：linux 6.5_x64 apache2.2.31 php5.3.28 mysql5.1.73

Mysql安装-请参考文档：Mysql5.1二进制免编译安装

Apache安装

[root@lamp mysql]# cd /usr/local/src/
[root@lamp src]# wget http://mirrors.sohu.com/apache/httpd-2.2.31.tar.gz
[root@lamp src]# tar zxvf httpd-2.2.31.tar.gz
[root@lamp httpd-2.2.31]# yum install -y gcc pcre pcre-devel apr apr-devel zlib-devel
[root@lamp httpd-2.2.31]# ./configure --prefix=/usr/local/apache2 --with-included-apr --enable-so --enable-deflate=shared --enable-expires=shared --enable-rewrite=shared --with-pcre
[root@lamp httpd-2.2.31]# /usr/local/apache2/bin/apachectl start
[root@lamp httpd-2.2.31]# ps aux | grep httpd
[root@lamp httpd-2.2.31]# netstat -lnp | grep 80
[root@lamp httpd-2.2.31]# /usr/local/apache2/bin/apachectl graceful #重新加载服务

安装php

[root@lamp src]# wget http://cn2.php.net/distributions/php-5.3.28.tar.gz [root@lamp src]# tar zxvf php-5.3.28.tar.gz [root@lamp php-5.3.28]# yum install -y epel-release [root@lamp php-5.3.28]# yum install -y perl libjpeg-devel libxml2-devel openssl openssl-devel bzip2 bzip2-devel libpng libpng-devel freetype freetype-devel libmcrypt-devel [root@lamp php-5.3.28]# ./configure –prefix=/usr/local/php –with-apxs2=/usr/local/apache2/bin/apxs –with-config-file-path=/usr/local/php/etc –with-mysql=/usr/local/mysql –with-libxml-dir –with-gd –with-jpeg-dir –with-png-dir –with-freetype-dir –with-iconv-dir –with-zlib-dir –with-bz2 –with-openssl –with-mcrypt –enable-soap –enable-gd-native-ttf –enable-mbstring –enable-sockets –enable-exif –disable-ipv6 [root@lamp php-5.3.28]# make && make install [root@lamp php-5.3.28]# cp php.ini-production /usr/local/php/etc/php.ini [root@lamp php-5.3.28]# ls /usr/local/apache2/modules/libphp5.so

Lnmp Linux+nginx+mysql+php

Sun, 29 Mar 2015 14:24:26 +0800

系统及软件版本：linux 6.5_x64 nginx1.6.2 php5.4.37 mysql5.1.73

首先安装Mysql-请参考文档：Mysql5.1二进制免编译安装

安装PHP5.4.37

[root@lnmp mysql]# cd /usr/local/src/
[root@lnmp src]# wget http://cn2.php.net/distributions/php-5.4.37.tar.bz2
[root@lnmp src]# tar jxf php-5.4.37.tar.bz2
[root@lnmp src]# useradd -s /sbin/nologin php-fpm
[root@lnmp php-5.4.37]# cd php-5.4.37
[root@lnmp php-5.4.37]# yum install -y epel-release
[root@lnmp php-5.4.37]# yum install -y gcc libxml2-devel curl-devel libjpeg-devel libpng libpng-devel freetype freetype-devel libmcrypt-devel
[root@lnmp php-5.4.37]# ./configure --prefix=/usr/local/php   --with-config-file-path=/usr/local/php/etc  --enable-fpm   --with-fpm-user=php-fpm  --with-fpm-group=php-fpm   --with-mysql=/usr/local/mysql  --with-mysql-sock=/tmp/mysql.sock  --with-libxml-dir  --with-gd   --with-jpeg-dir   --with-png-dir   --with-freetype-dir  --with-iconv-dir   --with-zlib-dir   --with-mcrypt   --enable-soap   --enable-gd-native-ttf   --enable-ftp  --enable-mbstring  --enable-exif    --disable-ipv6     --with-curl
[root@lnmp php-5.4.37]# make && make install
[root@lnmp php-5.4.37]# cp php.ini-production /usr/local/php/etc/php.ini
[root@lnmp php-5.4.37]# cp /usr/local/src/php-5.4.37/sapi/fpm/init.d.php-fpm /etc/init.d/php-fpm
[root@lnmp php-5.4.37]# cp /usr/local/php/etc/php-fpm.conf.default /usr/local/php/etc/php-fpm.conf
[root@lnmp php-5.4.37]# chmod 755 /etc/init.d/php-fpm
[root@lnmp php-5.4.37]# chkconfig --add php-fpm
[root@lnmp php-5.4.37]# service php-fpm start
[root@lnmp php-5.4.37]# chkconfig php-fpm on
[root@lnmp php-5.4.37]# ps aux | grep php-fpm
[root@lnmp php-5.4.37]# netstat -lnp | grep 9000

安装Nginx

[root@lnmp php-5.4.37]# cd /usr/local/src/
[root@lnmp src]# wget http://nginx.org/download/nginx-1.6.2.tar.gz
[root@lnmp src]# tar zxvf nginx-1.6.2.tar.gz
[root@lnmp nginx-1.6.2]# cd nginx-1.6.2
[root@lnmp nginx-1.6.2]# yum install -y pcre-devel
[root@lnmp nginx-1.6.2]# ./configure   --prefix=/usr/local/nginx   --with-pcre
[root@lnmp nginx-1.6.2]# make && make install
[root@lnmp nginx-1.6.2]# /usr/local/nginx/sbin/nginx
[root@lnmp nginx-1.6.2]# ps aux | grep nginx
[root@lnmp nginx-1.6.2]# vi /usr/local/nginx/conf/nginx.conf	#把下面的配置，前面的#删除
        location ~ \.php$ {
            root           html;
            fastcgi_pass   127.0.0.1:9000;
            fastcgi_index  index.php;
            fastcgi_param  SCRIPT_FILENAME  /usr/local/nginx/html$fastcgi_script_name;	#修改网站根目录为/usr/local/nginx/html
            include        fastcgi_params;
        }
[root@lnmp nginx-1.6.2]# /usr/local/nginx/sbin/nginx -t
[root@lnmp nginx-1.6.2]# /usr/local/nginx/sbin/nginx -s reload
[root@lnmp nginx-1.6.2]# cat /usr/local/nginx/html/info.php
<?php
phpinfo();
?>

Mysql5.1二进制免编译安装

Fri, 17 Oct 2014 13:57:34 +0800

安装记录

cd /usr/local/src/
wget http://mirrors.sohu.com/mysql/MySQL-5.1/mysql-5.1.73-linux-x86_64-glibc23.tar.gz
yum install -y wget
wget http://mirrors.sohu.com/mysql/MySQL-5.1/mysql-5.1.73-linux-x86_64-glibc23.tar.gz
tar zxvf /usr/local/src/mysql-5.1.73-linux-x86_64-glibc23.tar.gz
mv mysql-5.1.73-linux-x86_64-glibc23 /usr/local/mysql
useradd -s /sbin/nologin -M mysql
cd /usr/local/mysql/
mkdir -p /data/mysql
chown -R mysql:mysql /data/mysql
./scripts/mysql_install_db --user=mysql --datadir=/data/mysql
出现两个ok说明初始化成功，也可以echo $?确认一下。
cp support-files/my-large.cnf /etc/my.cnf
cp support-files/mysql.server /etc/init.d/mysqld
chmod 755 /etc/init.d/mysqld
vi /etc/init.d/mysqld	#datadir=/data/mysql basedir=/usr/local/mysql
basedir=/usr/local/mysql
datadir=/data/mysql
chkconfig --add mysqld
chkconfig mysqld on
service mysqld start

设置密码：mysqladmin -uroot password 'yourpass'
更改密码：mysqladmin -uroot password 'newpass'

交换机重启后导致centos路由丢失

Tue, 20 May 2014 13:25:35 +0800

编辑/etc/sysconfig/static-routes

没有static-routes的话就手动建立一个这样的文件

H3C S2100 S3100网络配置

Sat, 08 Feb 2014 12:32:55 +0800

初始配置，还原交换机出厂设置命令：reset saved-configuration

设置交换机名称

<H3C>
 Auto-Configuration has finished!
<H3C>sys
System View: return to User View with Ctrl+Z.
[H3C]
[H3C]sysname Sh-A1-192.168.0.109 # 设置交换机名称
[Sh-A1-192.168.0.109]

配置交换机的管理ip和网关

Sh-A1-192.168.0.109]int vlan 1
[Sh-A1-192.168.0.109-Vlan-interface1]ip ad
[Sh-A1-192.168.0.109-Vlan-interface1]ip address 192.168.0.109 255.255.255.192
[Sh-A1-192.168.0.109-Vlan-interface1]q
[Sh-A1-192.168.0.109]ip route-static 0.0.0.0 0.0.0.0 192.168.0.109
[Sh-A1-192.168.0.109]

配置登陆用户，密码，管理级别

[Sh-A1-192.168.0.109]local-user edong
New local user added.
[Sh-A1-192.168.0.109-luser-edong]password cipher <密码串>
[Sh-A1-192.168.0.109-luser-edong]service-type telnet ssh level 3

[Sh-A1-192.168.0.109]user-interface vty 0 4
[Sh-A1-192.168.0.109-ui-vty0-4]authentication-mode scheme
[Sh-A1-192.168.0.109-ui-vty0-4]protocol inbound telnet

SNMP 团体号设置，该设置用于监控流量

[Sh-A1-192.168.0.109]snmp-agent community read SnmpSwitchUser #后面的团体号可以任意设置，这个地方统一设置为EDSnmpSwitchUser
[Sh-A1-192.168.0.109]snmp-agent sys-info version all #加所有版本

Wordpress Wp Super Cache

Sun, 19 May 2013 13:50:40 +0800

首先进入后台—>插件—->安装插件—->在搜索框里输入wp super cache，找到第一个安装并启用。

高级里的设置开启Gzip。
开启预缓存

WordPress建站初期注意的几个点

Sat, 18 May 2013 13:43:46 +0800

固定链接的选择

首先进入后台

Wordpress后台访问限制

Fri, 17 May 2013 13:41:17 +0800

wordpress的后台安全问题解决方法有很多，如果是购买vps或者云服务器自已搭建环境的朋友，可以通过apache或者nginx针对目录做访问上的限制。这里介绍一下以前自己用WP时在网上查找并实践出来的一些经验。