You can insert a table of contents using the marker [TOC]:
[TOC]
只允许特定流量通过，禁用其他流量
- permit ssh
1 | iptables -A INPUT -p tcp --dport 22 -j ACCEPT |
- permit DNS
1 | iptables -l INPUT 1 -p tcp --sport 53 -j ACCEPT |
- permit service
1 | iptables -l INPUT 1 -p tcp --dport 80 -j ACCEPT |
- forbid all others
1 | iptables -A INPUT -j DROP |
1 | [root@toad ~]# netstat -tn |
1 | #install aide |
Ubuntu: ubuntu-16.04-desktop-amd64
1 | # apt-get upgrade -y |
1 | root@stan-virtual-machine:~# file /sbin/init |
1 | root@stan-virtual-machine:~# java -version |
1 | root@stan-virtual-machine:~# apt-get purge openjdk-\* |
Go to link: http://www.oracle.com/technetwork/java/javase/downloads/jdk8-downloads-2133151.html
download http://download.oracle.com/otn-pub/java/jdk/8u101-b13/jdk-8u101-linux-x64.tar.gz
1 | root@stan-virtual-machine:/home/stan/Downloads# cp -r jdk-8u101-linux-x64.tar.gz /usr/local/java |
1 | root@stan-virtual-machine:/usr/local/java# java -version |
1 | [root@chatswood ~]# rpm -ivh http://mirrors.aliyun.com/epel/epel-release-latest-6.noarch.rpm |
1 | [root@chatswood ~]# sed -n 16p /etc/salt/minion |
On salt master side:
1 | [root@toad tomcat-formula]# cat /etc/hosts |
1 | [root@toad formulas]# cd /srv/formulas |
1 | [root@toad salt]# cat top.sls |
Restart the Salt Master.
1 | [root@toad formulas]# salt 'macadamina' state.highstate |
[root@toad salt]# salt '*' state.sls upload_data
salt-minion01:
Data failed to compile:
----------
Pillar failed to render with the following messages:
----------
Error encountered while render pillar top file.
macadamina:
Data failed to compile:
----------
Pillar failed to render with the following messages:
----------
Error encountered while render pillar top file.
[root@toad salt]# salt "*" saltutil.refresh_pillar
macadamina:
True
salt-minion01:
True
[root@toad salt]# tree
.
├── contab.sls
├── createdir.sls
├── createuser.sls
├── del_cron.sls
├── files
│ ├── hosts
│ ├── wgzy.sql
│ └── zfgtai.zip
├── host_file.sls
├── nginx_install.sls
├── top.sls
├── upload_data.sls
└── upload_mysql.sls
[root@toad salt]# cat upload_mysql.sls
/usr/share/tomcat/webapps/wgzy.sql:
file.managed:
- source: salt://files/wgzy.sql
- user: root
- group: root
- mode: 644
[root@toad salt]# salt '*' state.sls upload_mysql
salt-minion01:
----------
ID: /usr/share/tomcat/webapps/wgzy.sql
Function: file.managed
Result: True
Comment: File /usr/share/tomcat/webapps/wgzy.sql updated
Started: 17:11:02.739156
Duration: 298.114 ms
Changes:
----------
diff:
New file
mode:
0644
Summary
------------
Succeeded: 1 (changed=1)
Failed:0
------------
Total states run: 1
macadamina:
----------
ID: /usr/share/tomcat/webapps/wgzy.sql
Function: file.managed
Result: True
Comment: File /usr/share/tomcat/webapps/wgzy.sql updated
Started: 17:11:05.274496
Duration: 254.31 ms
Changes:
----------
diff:
New file
mode:
0644
Summary
------------
Succeeded: 1 (changed=1)
Failed:0
------------
Total states run: 1
Modify /etc/tomcat/server.xml
to
[root@toad salt]# cat modscript.sls
sed -i '125s#appBase=".*"# appBase="/deploy/source/aofa_pro"#' /etc/tomcat/server.xml:
cmd.run
[root@toad salt]# salt '*' state.sls modscript
macadamina:
----------
ID: sed -i '125s#appBase=".*"# appBase="/deploy/source/aofa_pro"#' /etc/tomcat/server.xml
Function: cmd.run
Result: True
Comment: Command "sed -i '125s#appBase=".*"# appBase="/deploy/source/aofa_pro"#' /etc/tomcat/server.xml" run
Started: 11:06:15.245454
Duration: 38.108 ms
Changes:
----------
pid:
38516
retcode:
0
stderr:
stdout:
Summary
------------
Succeeded: 1 (changed=1)
Failed:0
------------
Total states run: 1
salt-minion01:
----------
ID: sed -i '125s#appBase=".*"# appBase="/deploy/source/aofa_pro"#' /etc/tomcat/server.xml
Function: cmd.run
Result: True
Comment: Command "sed -i '125s#appBase=".*"# appBase="/deploy/source/aofa_pro"#' /etc/tomcat/server.xml" run
Started: 11:06:16.505044
Duration: 28.841 ms
Changes:
----------
pid:
37702
retcode:
0
stderr:
stdout:
Summary
------------
Succeeded: 1 (changed=1)
Failed:0
------------
Total states run: 1
check result:
[root@toad salt]# salt ‘*’ cmd.run ‘sed -n 125p /etc/tomcat/server.xml’
macadamina:
<Host name=”localhost” appBase=”/deploy/source/aofa_pro”
salt-minion01:
<Host name=”localhost” appBase=”/deploy/source/aofa_pro”
copy the file form master to minion:
[root@toad salt]# salt ‘macadamina’ cp.get_file salt://files/zfgtai.zip /deploy/source/aofa_pro/zfgtai.zip
macadamina:
/deploy/source/aofa_pro/zfgtai.zip
Append text into file:
[root@salt-minion01 ~]# sed -i '34 a<Valve className="com.orangefunction.tomcat.redissessions.RedisSessionHandlerValve" /> <Manager className="com.orangefunction.tomcat.redissessions.RedisSessionManager" host="localhost" port="6379" database="0" maxInactiveInterval="60" />' context.xml
1 | #yum install dnsmasq |
1 | # mv /etc/dnsmasq.conf /etc/dnsmasq.conf.backup |
interface – Interfaces that the server should listen and provide services.
bind-interfaces – Uncomment to bind only on this interface.
domain – Replace it with your domain name.
dhcp-range – Replace it with IP range defined by your network mask on this segment.
dhcp-boot – Replace the IP statement with your interface IP Address.
dhcp-option=3,192.168.0.1 – Replace the IP Address with your network segment Gateway.
dhcp-option=6,92.168.0.1 – Replace the IP Address with your DNS Server IP – several DNS IPs can be defined.
server=8.8.4.4 – Put your DNS forwarders IPs Addresses.
dhcp-option=28,192.168.0.255 – Replace the IP Address with network broadcast address –optionally.
dhcp-option=42,0.0.0.0 – Put your network time servers – optionally (0.0.0.0 Address is for self-reference).
pxe-prompt – Leave it as default – means to hit F8 key for entering menu 60 with seconds wait time..
pxe=service – Use x86PC for 32-bit/64-bit architectures and enter a menu description prompt under string quotes. Other values types can be: PC98, IA64EFI, Alpha, Arcx86, IntelLeanClient, IA32EFI, BCEFI, XscaleEFI and X86-64EFI.
enable-tftp – Enables the build-in TFTP server.
tftp-root – Use /var/lib/tftpboot – the location for all netbooting files.
read more dnsmasq manual
1 | # yum install syslinux |
1 | # yum install tftp-server |
Typically the PXE Server reads its configuration from a group of specific files (GUID files – first, MAC files – next, Default file – last) hosted in a folder called pxelinux.cfg, which must be located in the directory specified in tftp-root statement from DNSMASQ main configuration file.
1 | # mkdir /var/lib/tftpboot/pxelinux.cfg |
1 | # mount -o loop /root/CentOS-6.8-x86-bin-DVD1.iso /mnt |
1 | # yum install vsftpd |
Prepare local repo file
1 | # wget -O /var/ftp/pub/Centos-6.repo http://mirrors.aliyun.com/repo/Centos-6.repo |
1 | # vim /var/ftp/ks.cfg |
Read more about kickstart CentOS6
1 | #service dnsmasq start |
1 | #vim /var/ftp/pub/install_mysql |
1 | [root@rhel7 ~]# service firewalld stop |
1 | [root@rhel7 ~]# systemctl disable firewalld |
1 | [root@rhel7 ~]# hostnamectl |
1 | [root@ip-172-31-5-191 ~]# kill -l |
1 | [root@ip-172-31-5-191 ~]# sleep 10000 & |
1 | [root@ip-172-31-5-191 ~]# nohup sleep 1000 & |
Put variable into the file /etc/environment
Another very important rule is that a child process will never be able to change the parent’s environment variables, because the child and parent are independent from each other and the child only has a local copy of the parent’s environment:
1 | [root@ip-172-31-5-191 ~]# mkdir ~/scripts |
1 | [root@ip-172-31-5-191 ~]# say_hello() { |
1 | [root@ip-172-31-5-191 ~]# cat run.sh |
1 | [root@ip-172-31-5-191 ~]# PASSWORD="tt4321" |
1 | if [[ $EXIT -eq 0 ]] |
1 | if [[ -a $FILE ]] |
for read the bash manualman bash /CONDITIONAL EXPRESSIONS
1 | if [[ $EXIT -eq 0 ]] |
1 | if [[ $VALUE -gt 5 ]] |
1 | for count in 1 2 3 4 |
change multi file names
1 | mkdir ~/stuff |
1 | cat scripts/motd-commandlinefu-update.sh |
man bash /Commands for Moving
Ctrl + a – go to the start of the command line
Ctrl + e – go to the end of the command line
Ctrl + k – delete from cursor to the end of the command line
Ctrl + u – delete from cursor to the start of the command line
Ctrl + w – delete from cursor to start of word (i.e. delete backwards one word)
Ctrl + y – paste word or text that was cut using one of the deletion shortcuts (such as the one above) after the cursor
Ctrl + xx – move between start of command line and current cursor position (and back again)
Alt + b – move backward one word (or go to start of word the cursor is currently on)
Alt + f – move forward one word (or go to end of word the cursor is currently on)
Alt + d – delete to end of word starting at cursor (whole word if cursor is at the beginning of word)
Alt + c – capitalize to end of word starting at cursor (whole word if cursor is at the beginning of word)
Alt + u – make uppercase from cursor to end of word
Alt + l – make lowercase from cursor to end of word
Alt + t – swap current word with previous
Alt + . – print previous command’s argument
Ctrl + f – move forward one character
Ctrl + b – move backward one character
Ctrl + d – delete character under the cursor
Ctrl + h – delete character before the cursor
Ctrl + t – swap character under cursor with the previous one
Ctrl + r – search the history backwards
Ctrl + g – escape from history searching mode
Ctrl + p – previous command in history (i.e. walk back through the command history)
Ctrl + n – next command in history (i.e. walk forward through the command history)
Alt + . – use the last word of the previous command
Ctrl + l – clear the screen
Ctrl + s – stops the output to the screen (for long running verbose command)
Ctrl + q – allow output to the screen (if previously stopped using command above)
Ctrl + c – terminate the command
Ctrl + z – suspend/stop the command
Ctrl + Alt + e - $SHELL /bin/bash
Bash also has some handy features that use the ! (bang) to allow you to do some funky stuff with bash commands.
!! – run last command
!blah – run the most recent command that starts with ‘blah’ (e.g. !ls)
!blah:p – print out the command that !blah would run (also adds it as the latest command in the command history)
!$ – the last word of the previous command (same as Alt + .)
!$:p – print out the word that !$ would substitute
!* – the previous command except for the last word (e.g. if you type ‘_find somefile.txt /’, then !* would give you ‘_find somefile.txt’)
!*:p – print out what !* would substitute
tail -f log_file | egrep -v 'ELB|Pingdom|Health' – filter out stuff has certain keywords
Let’s cut to the chase
1 | [root@aofa-staging tools]# cat mysql_backup.sh |
Output:
1 | [root@aofa-staging backup]# tree mysql |
1 | [root@aofa-staging tools]# cat mysql_table.sh |
Output:
1 | [root@aofa-staging mysql02]# tree |
1 | # cat /root/.my.cnf |
1 | # vim /etc/backup/backupwk.sh |
Every Sun 3.30 run weekly backup script:
1 | # vim /etc/crontab |
# docker search centos
# docker pull centos
Download the Oracle JDK
wget --no-cookies --no-check-certificate --header "Cookie: gpw_e24=http%3A%2F%2Fwww.oracle.com%2F; oraclelicense=accept-securebackup-cookie" "http://download.oracle.com/otn-pub/java/jdk/7u72-b14/jdk-7u72-linux-x64.tar.gz"
Create a working folder and place both Tomcat tarball and Oracle JDK files in the same folder.
[root@docker centos6]# ls
apache-tomcat-7.0.70.tar.gz Dockerfile jdk-7u72-linux-x64.tar.gz
[root@docker centos6]# cat Dockerfile
FROM centos:latest
MAINTAINER lreeder
#Helpful utils, but only sudo is required
#RUN yum -y install tar
#RUN yum -y install vim
#RUN yum -y install nc
RUN yum -y install sudo
######## JDK7
#Note that ADD uncompresses this tarball automatically
ADD jdk-7u72-linux-x64.tar.gz /opt
WORKDIR /opt/jdk1.7.0_72
RUN alternatives --install /usr/bin/java java /opt/jdk1.7.0_72/bin/java 1
RUN alternatives --install /usr/bin/jar jar /opt/jdk1.7.0_72/bin/jar 1
RUN alternatives --install /usr/bin/javac javac /opt/jdk1.7.0_72/bin/javac 1
RUN echo "JAVA_HOME=/opt/jdk1.7.0_72" >> /etc/environment
######## TOMCAT
#Note that ADD uncompresses this tarball automatically
ADD apache-tomcat-7.0.70.tar.gz /usr/share
WORKDIR /usr/share/
RUN mv apache-tomcat-7.0.70 tomcat7
RUN echo "JAVA_HOME=/opt/jdk1.7.0_72/" >> /etc/default/tomcat7
RUN groupadd tomcat
RUN useradd -s /bin/bash -g tomcat tomcat
RUN chown -Rf tomcat.tomcat /usr/share/tomcat7
EXPOSE 8080
Build image
# docker build --rm=true -t centos6/tomcat7 .
Setup port forwarding and start tomcat
[root@docker centos6]# docker run -p 80:8080 --rm=true -t -i --name tomcat7 centos6/tomcat7 /usr/bin/sudo -u tomcat /usr/share/tomcat7/bin/catalina.sh run
Find out the IP address for the running container:
[root@docker centos6]# docker inspect --format '{{ .NetworkSettings.IPAddress }}' tomcat7
172.17.0.22
