Eli's Blog

1. Ubuntu

1.1 修改IP

Ubuntu 16, 18:

1
2
3
4
5
6
7
8
9
10
sudo vi /etc/network/interfaces
auto ens33
iface ens33 inet static
address 192.168.80.20
netmask 255.255.255.0
gateway 192.168.80.2
dns-nameservers 8.8.8.8

sudo ip addr flush ens33
sudo systemctl restart networking

Ubuntu 20:

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
sudo vi /etc/netplan/00-installer-config.yaml
network:
  ethernets:
    ens33:
      addresses:
      - 192.168.80.121/24
      gateway4: 192.168.80.2
      nameservers:
        addresses:
        - 8.8.8.8
        search:
        - 8.8.8.8
  version: 2

sudo netplan apply

1.2 防火墙

1
2
3
4
5
6
7
sudo ufw status
suod ufw enable/disable

sudo ufw allow/deny 22/tcp

sudo ufw allow from 192.168.80.1
sudo ufw delete allow from 192.168.80.1

1.3 sshd

1
2
3
4
5
sudo apt-get update

sudo apt-get install openssh-server

sudo ps -ef | grep ssh

1.4 Docker

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
# 可能缺少的公共命令
sudo apt-get install software-properties-common -y

# 证书
sudo curl -fsSL http://mirrors.aliyun.com/docker-ce/linux/ubuntu/gpg | sudo apt-key add -

# 仓库信息
sudo add-apt-repository "deb [arch=amd64] http://mirrors.aliyun.com/docker-ce/linux/ubuntu $(lsb_release -cs) stable"

# 更新 cache
sudo apt-get update

# 可用版本查询
sudo apt-cache policy docker-ce
sudo apt-cache madison docker

# 安装 docker 19.03.15~3-0~ubuntu-xenial
sudo apt-get install docker-ce=5:19.03.15~3-0~ubuntu-xenial -y

sudo docker version

# 不需要 sudo， 重新登录
sudo usermod -aG docker $USER
sudo systemctl restart docker

1.5 Python 多版本

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
# 增加 deadsnakes PPA 源
sudo add-apt-repository ppa:deadsnakes/ppa

# 安装 python 3.9
sudo apt-get update
sudo apt-get install python3.9

# python 默认版本切换成 3.9
sudo update-alternatives --install /usr/bin/python3 python3 /usr/bin/python3.9 1

sudo update-alternatives --install /usr/bin/python3 python3 /usr/bin/python3.8 2

sudo update-alternatives --config python3
There are 2 choices for the alternative python3 (providing /usr/bin/python3).

  Selection    Path                Priority   Status
------------------------------------------------------------
* 0            /usr/bin/python3.8   2         auto mode
  1            /usr/bin/python3.8   2         manual mode
  2            /usr/bin/python3.9   1         manual mode

Press <enter> to keep the current choice[*], or type selection number: 2

sudo apt install python3-pip python3.9-venv

python3 -m venv /home/ubuntu/python/venv

1.6 防火墙

1
2
3
sudo ufw allow ssh

sudo ufw allow 6379/tcp

1.7 阿里源

ubuntu16:

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
sudo -i

echo "nameserver 8.8.8.8" >> /etc/resolv.conf

mv /etc/apt/sources.list /etc/apt/sources.list.bak

cat > /etc/apt/sources.list <<EOF
# deb cdrom:[Ubuntu 16.04 LTS _Xenial Xerus_ - Release amd64 (20160420.1)]/ xenial main restricted
deb-src http://archive.ubuntu.com/ubuntu xenial main restricted #Added by software-properties
deb http://mirrors.aliyun.com/ubuntu/ xenial main restricted
deb-src http://mirrors.aliyun.com/ubuntu/ xenial main restricted multiverse universe #Added by software-properties
deb http://mirrors.aliyun.com/ubuntu/ xenial-updates main restricted
deb-src http://mirrors.aliyun.com/ubuntu/ xenial-updates main restricted multiverse universe #Added by software-properties
deb http://mirrors.aliyun.com/ubuntu/ xenial universe
deb http://mirrors.aliyun.com/ubuntu/ xenial-updates universe
deb http://mirrors.aliyun.com/ubuntu/ xenial multiverse
deb http://mirrors.aliyun.com/ubuntu/ xenial-updates multiverse
deb http://mirrors.aliyun.com/ubuntu/ xenial-backports main restricted universe multiverse
deb-src http://mirrors.aliyun.com/ubuntu/ xenial-backports main restricted universe multiverse #Added by software-properties
deb http://archive.canonical.com/ubuntu xenial partner
deb-src http://archive.canonical.com/ubuntu xenial partner
deb http://mirrors.aliyun.com/ubuntu/ xenial-security main restricted
deb-src http://mirrors.aliyun.com/ubuntu/ xenial-security main restricted multiverse universe #Added by software-properties
deb http://mirrors.aliyun.com/ubuntu/ xenial-security universe
deb http://mirrors.aliyun.com/ubuntu/ xenial-security multiverse
EOF

apt-get update

ubuntu20:

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
mv /etc/apt/sources.list /etc/apt/sources.list.bak

cat > /etc/apt/sources.list <<EOF
deb http://mirrors.aliyun.com/ubuntu/ focal main restricted universe multiverse
deb-src http://mirrors.aliyun.com/ubuntu/ focal main restricted universe multiverse

deb http://mirrors.aliyun.com/ubuntu/ focal-security main restricted universe multiverse
deb-src http://mirrors.aliyun.com/ubuntu/ focal-security main restricted universe multiverse

deb http://mirrors.aliyun.com/ubuntu/ focal-updates main restricted universe multiverse
deb-src http://mirrors.aliyun.com/ubuntu/ focal-updates main restricted universe multiverse

deb http://mirrors.aliyun.com/ubuntu/ focal-proposed main restricted universe multiverse
deb-src http://mirrors.aliyun.com/ubuntu/ focal-proposed main restricted universe multiverse

deb http://mirrors.aliyun.com/ubuntu/ focal-backports main restricted universe multiverse
deb-src http://mirrors.aliyun.com/ubuntu/ focal-backports main restricted universe multiverse
EOF

apt update

1.8 时区

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
ln -sf /usr/share/zoneinfo/Asia/Shanghai /etc/localtime

# alternative
timedatectl set-timezone "Asia/Shanghai"
timedatectl status

# alternative 2
vi /etc/profile
TZ='Asia/Shanghai'
export TZ

# 时间更新
date -s "2019-06-04 11:06:30"  # 修改为一个正确的时间
hwclock -w

crontab -e
* */1 * * * ntpdate 0.asia.pool.ntp.org

1.9 k8s

1
2
3
4
5
6
7
8
9
10
11
apt-get update && apt-get install -y apt-transport-https

curl https://mirrors.aliyun.com/kubernetes/apt/doc/apt-key.gpg | apt-key add - 

# ubuntu16
cat >/etc/apt/sources.list.d/kubernetes.list <<EOF
deb https://mirrors.aliyun.com/kubernetes/apt/ kubernetes-xenial main
EOF

apt-get update
apt-get install -y kubelet kubeadm kubectl

2. CentOS

2.1 寻找命令所在包

1
yum whatprovides */lspci

2.2 获取磁盘的 uuid

1
2
3
4
blkid

/dev/sr0: UUID="2020-04-22-00-51-40-00" LABEL="CentOS 7 x86_64" TYPE="iso9660" PTTYPE="dos" 
/dev/sda1: UUID="8447e521-4bb8-4fb7-853e-cd6661dd98b4" TYPE="xfs"

2.3. 换yum源

1
2
3
4
5
6
mv /etc/yum.repos.d/CentOS-Base.repo /etc/yum.repos.d/CentOS-Base.repo.backup

curl -o /etc/yum.repos.d/CentOS-Base.repo http://mirrors.aliyun.com/repo/Centos-7.repo
wget -O

yum makecache

2.4 防火墙

1
2
3
4
5
iptables -A INPUT -p tcp -s 0/0 --dport 80 -j ACCEPT 

iptables -A OUTPUT -p tcp --sport 80 -m state --state ESTABLISHED -j ACCEPT 

service iptables save

3. 公共部分

3.1 进程 & 线程

1
2
3
4
5
6
7
8
9
10
11
12
13
14
# 线程
top -H 

# 需要ncurses， 更友好
htop

# 进程的关联子进程
ps -T -p 959
    PID    SPID TTY          TIME CMD
    959     959 ?        00:00:27 redis-server
    959     960 ?        00:00:00 redis-server
    959     961 ?        00:00:00 redis-server
    959     962 ?        00:00:00 redis-server

3.2 路由

1
2
3
4
5
6
7
8
9
10
11
# 删除默认设置
route delete 0.0.0.0

# 外网路由，全走无线
route add 0.0.0.0 mask 0.0.0.0 192.168.33.1 –p

# 公司内网全部在10.40.*.*网段
route add 10.40.0.0 mask 255.255.0.0 10.40.254.1 -p

# 路由追踪
tracert -d google.com

3.3 tcpdump

1
2
3
4
5
6
7
8
tcpdump -i ens33 port 8080 -w http.cap


tcpdump src port 1025
tcpdump portrange 21-23

tcpdump -vvAls0 | grep 'User-Agent:'
tcpdump -vvAls0 | grep 'Set-Cookie|Host:|Cookie:'

3.4 支持密码登录

1
2
3
4
vi /etc/ssh/sshd_config
PasswordAuthentication no => yes

systemctl restart sshd

3.5 远程端口检查

3.5.1 telnet

1
telnet baidu.com 80

3.5.2 nc (NetCat)

1
nc -v baidu.com 80

3.5.3 nmap

1
nmap baidu.com -p 80

3.6 sudo

3.6.1 语法条目

1
who host=(runas)  TAG:command

3.6.2. 配置

1
2
3
4
5
6
7
8
9
visudo

oracle ALL=(root) NOPASSWD:/sbin/useradd, PASSWD:/sbin/userdel

%admin ALL=(root) NOPASSWD:/sbin/shutdown

web ALL=(operator) /etc/webhook/mytest.sh

test ALL=(ALL) /bin/cat /var/log/secure*, !/bin/cat /var/log/secure* *

3.6.3. 执行sudo

1
2
3
4
5
su - oracle
sudo /sbin/useradd test123

su - web
sudo -u operator /etc/webhook/mytest.sh

4. 软件

4.1 Redis

1
2
3
4
wget http://download.redis.io/releases/redis-5.0.12.tar.gz 
tar zxvf redis-5.0.12.tar.gz 
cd redis-5.0.12
make

4.2 k8s

1
2
3
4
5
6
7
8
9
10
11
12
13
cat > /etc/yum.repos.d/kubernetes.repo <<EOF
[kubernetes]
name=Kubernetes
baseurl=https://mirrors.aliyun.com/kubernetes/yum/repos/kubernetes-el7-x86_64/
enabled=1
gpgcheck=1
repo_gpgcheck=1
gpgkey=https://mirrors.aliyun.com/kubernetes/yum/doc/yum-key.gpg https://mirrors.aliyun.com/kubernetes/yum/doc/rpm-package-key.gpg
EOF

setenforce 0
yum install -y kubelet kubeadm kubectl
systemctl enable kubelet && systemctl start kubelet

 上一页