必要設置
Aliyun ECS 系統初始化
- Operating System: CentOS Linux 7 (Core)
- Kernel: Linux 3.10.0-693.17.1.el7.x86_64
- Architecture: x86-64
設置主機名稱 hostname
# get hostname info
hostnamectl status
# set hostname
hostnamectl set-hostname your-name
解決語言區域問題 locale
# 查看當前系統的語言區域設置，報警如下：
# locale: Cannot set LC_CTYPE to default locale: No such file or directory
# locale: Cannot set LC_ALL to default locale: No such file or directory
locale
# 查看系統設置語言
cat /etc/locale.conf
# 查看系統能夠支持的語言, 先確保語言列表中包含上面的語言設置
locale -a
# 修復問題，將無法set的參數在下面的配置中新增
vim /etc/locale.conf
LC_CTYPE="en_US.UTF-8"
LC_ALL="en_US.UTF-8"
# 確認問題解決
locale
- 問題參考方案 Fix locale error
設置SSH登陸歡迎信息 welcome message
一般ssh默認的歡迎界面包括以下幾個部分
- greetings
###############################
# 自定義greetings
vim /etc/ssh/ssh_greetings.txt
> ###############################
> # #
> # This is greeting msg #
> # #
> ###############################
# 修改ssh配置
vim /etc/ssh/sshd_config
> Banner /etc/ssh/ssh_greetings.txt
# 重新加載配置
systemctl reload sshd
- motd (message of the day)
###############################
# 修改方式1：靜態motd信息
vim /etc/motd
# 重新加載配置
systemctl reload sshd
# 修改方式2：自定義motd
vim /etc/profile.d/motd.sh
> #!/bin/bash
> # 注: 登陸系統時會自動執行/etc/profile
> # 其中會遍歷/etc/profile.d/下的所有.sh可執行文件
> echo -e "
> ##################################
> #
> # Welcome to `hostname`
> # This system is running `cat /etc/redhat-release`
> # kernel is `uname -r`
> # You are logged in as `whoami`
> #
> # GOD BLESS OUR SERVER !!!
> # -- DevOps Group
> #
> ##################################
> "
# 增加文件可執行權限
chmod +x /etc/profile.d/motd.sh
# 修改ssh配置
vim /etc/ssh/sshd_config
> PrintMotd no # 關閉默認的motd打印
# 重新加載配置
systemctl reload sshd
- last login informations
- 參考資料
創建運維賬戶devops
- Issue the useradd command to create a locked user account:
useradd devops
# or you can use "adduser <username>"
- Unlock the account by issuing the passwd command to assign a password and set password aging guidelines:
passwd devops
- Use the usermod command to add the user to the wheel group.
# By default, on CentOS, members of the wheel group have sudo privileges.
usermod -aG wheel devops
# BTW，為用戶添加sudo權限,還可以直接編輯sudoer文件"vim /etc/sudoers"
# get user | group info
id devops
groups devops
- gen ssh key
# 切換賬戶
su - devops
# 生成ssh key
ssh-keygen
- 設置用戶的ssh公鑰登錄
vim /home/devops/.ssh/authorized_keys
SSH安全設置
## 編輯ssh配置
sudo vim /etc/ssh/sshd_config
PermitRootLogin no ## 禁用服務器root用戶的ssh登陸
PasswordAuthentication no ## 禁用ssh用戶密碼登陸，僅能使用ssh pub key
## 重啟sshd ，或者可以使用命令
systemctl restart sshd
初始化運維工作區 work space
## 應用工程
mkdir -p /opt/apps
## 數據目錄
mkdir -p /opt/data/tmp
## 軟件目錄
mkdir -p /opt/software
## 自定義軟件安裝位置
mkdir -p /opt/tools
通用工具
- git
sudo yum install git - vim plugin manager
## 下載vim-plug工具
curl -fLo ~/.vim/autoload/plug.vim --create-dirs \
https://raw.githubusercontent.com/junegunn/vim-plug/master/plug.vim
系統升級
# Install Extra Packages for Enterprise Linux
yum install epel-release
# Update yum
yum update
可選設置
安裝進程守護 Supervisor
- Install supervisor
# 安裝
easy_install supervisor
# 配置啟動項 Configs programs
echo_supervisord_conf > /etc/supervisord.conf
vim /etc/supervisord.conf
> [program:foo_test]
> command=/bin/cat
# 啟動supervisor
supervisord -c /etc/supervisord.conf -n
# 其它命令
supervisorctl
help
supervisorctl stop all
supervisorctl status all
- 通過systemd管理supervisor（進程守護＋開機啟動）
## systemd常用命令
systemctl status
systemctl # same as "systemctl list-units"
systemctl --failed
systemctl start[|stop|restart|reload|status|help] unit
systemctl reboot # Shut down and reboot the system:
systemctl poweroff # Shut down
## 在systemd中配置supervisor
vim /etc/systemd/system/supervisor.service
# supervisord service for systemd (CentOS 7.0+)
[Unit]
Description=Supervisor daemon
[Service]
Type=forking
ExecStart=/usr/bin/supervisord
ExecStop=/usr/bin/supervisorctl $OPTIONS shutdown
ExecReload=/usr/bin/supervisorctl $OPTIONS reload
KillMode=process
Restart=on-failure
RestartSec=42s
## 加載supervisor服務
systemctl daemon-reload
systemctl status supervisor
systemctl start supervisor
systemctl is-enabled supervisor
systemctl enable supervisor
## 開機啟動
ln -s '/etc/systemd/system/supervisor.service' '/etc/systemd/system/multi-user.target.wants/supervisor.service'
# 測試
reboot
systemctl reboot
- 參考文檔
- Supervisor is based on four components: supervisord、supervisorctl、a web server、an XML-RPC Interface
- How To Create a systemd Service in Linux
- Supervisor/initscripts
安裝Java開發環境 JDK Setup
- 下載 JDK 1.8 rpm包
- 安裝JDK
# Check which specific RPM package provides the java.
rpm -q --whatprovides java
# Uninstall any earlier installations of the JDK packages.
rpm -e package_name
# Install the package.
rpm -ivh jdk-8uversion-linux-x64.rpm
java -version
javac -version
