### 说明
linux 需要关闭 selinux
```
sed -i 's/SELINUX=enforcing/SELINUX=disabled/g' /etc/selinux/config
```

安装配置工具 及samba
```
yum -y install ntsysv setuptool system-config-firewall system-config-network* setuptool system-config-network* vim-enhanced vixie-cron samba samba-client samba-common cifs-utils
```

#去掉注释行
```
mv /etc/samba/smb.conf /etc/samba/smb.conf.bak
grep -v "^#" /etc/samba/smb.conf.bak |grep -v "^;" > /etc/samba/smb.conf
```
# 代码放在开发机上面
SAMBA配置
不通的用户访问不同的文件夹 USER换成具体用户
添加用户
```
useradd USER
passwd USER
```
添加samba用户
```
smbpasswd -a USER
```
修改smb.conf
```
[global]
workgroup = MYGROUP
server string = Samba Server Version %v
log file = /var/log/samba/log.%m
max log size = 50
security = user
passdb backend = tdbsam
dns proxy = no
load printers = no
printing = bsd
printcap name = /dev/null
disable spoolss = yes

writeable = yes
browseable = yes
create mask = 0777
directory mask = 0777
[USER]
path = /home/USER/web
valid users=@USER
```

### 代码放在 客户端
开启区别文件大小写

在“添加删除程序”--->"启用或关闭windows功能"开启“适用于linux的windows子系统”
```
fsutil.exe file setCaseSensitiveInfo "需要区别大小写的目录" enable
```
## window
打开控制面板-->程序和功能-->启动SMB 1.0/CIFS文件共享支持
设置共享文件夹

开发机上挂在文件
```
mount -t cifs -o username=admin,password=123,uid=48,gid=48 //192.168.3.10/code /home/dawnco
```

```
yum install dhcp
vim /etc/dhcp/dhcpd.conf
```

输入
```
#
# DHCP Server Configuration file.
# see /usr/share/doc/dhcp*/dhcpd.conf.example
# see dhcpd.conf(5) man page
#

default-lease-time 600;
max-lease-time 7200;

subnet 192.168.0.0 netmask 255.255.255.0 {
#option routers 192.168.0.1;
#option domain-name-servers 192.168.0.11;
range 192.168.0.50 192.168.0.80;
}
~
```
指定监听网卡
```
vim /usr/lib/systemd/system/dhcpd.service
```
在
```
ExecStart=/usr/sbin/dhcpd -f -cf /etc/dhcp/dhcpd.conf -user dh
cpd -group dhcpd --no-pid enp1s0
```
在最后添加上 enp1s0

重启
```
systemctl daemon-reload
systemctl restart dhcp
```

分配的网段需要和 网卡上的地址在同一个网段

参考

https://access.redhat.com/documentation/zh-cn/red_hat_enterprise_linux/7/html/networking_guide/sec-dhcp-configuring-server

https://blog.csdn.net/lyn_00/article/details/80798323

查看 每个 php-fpm 进程占用的平均内存
```
ps --no-headers -o "rss,cmd" -C php-fpm | awk '{ sum+=$1 } END { printf ("%d%s\n", sum/NR/1024,"M") }'
```
案例
```
[root@localhost web]# ps --no-headers -o "rss,cmd" -C php-fpm | awk '{ sum+=$1 } END { printf ("%d%s\n", sum/NR/1024,"M") }'
8M
```

清除登录日志
Linux系统有三个标准的显示用户最近登录信息的命令： last, lastb,和lastlog。
Continue reading →

yum 安装十分简单, 如果安装有mariadb 需要先移除, 并删除掉 repo文件
```
yum remove MariaDB MariaDB-server
rm /etc/yum.repos.d/MariaDB.repo
rm -rf /var/lib/mysql
rm -rf /etc/my.conf
rm -rf /etc/my.conf.d
```
安装
```
rpm -ivh https://repo.mysql.com//mysql80-community-release-el7-3.noarch.rpm
yum install -y mysql mysql-server
```

初始化, 需要先删除 rm -rf /var/lib/mysql
```
mysqld --initialize --console
```

mysql8.0安装后会自动生成密码, 找到默认密码
```
[root@localhost ~]# grep 'temporary password' /var/log/mysqld.log
2019-06-29T01:35:29.486721Z 5 [Note] [MY-010454] [Server] A temporary password is generated for root@localhost: Q,Fflgfye6w.
[root@localhost ~]#
```

初始化
```
mysql_secure_installation
```

开启远程登陆
```
CREATE USER 'root'@'%' IDENTIFIED BY 'Q,Fflgfye6w.';
GRANT ALL ON *.* TO 'root'@'%';
ALTER USER 'root'@'%' IDENTIFIED WITH mysql_native_password BY 'Q,Fflgfye6w.';
FLUSH PRIVILEGES;

# 修改本地
ALTER USER 'root'@'localhost' IDENTIFIED WITH mysql_native_password BY 'Q,Fflgfye6w.';

```
开启可以设置简单密码
```
set global validate_password.policy=0;
set global validate_password.length=4;
```

忘记密码

修改 my.cnf
```
echo 'skip-grant-tables' >> /etc/my.cnf
systemctl restart mysqld
```
清空密码
```
[root@izbp13d8lkv9kzxvm67ax5z conf.d]# mysql
mysql> use mysql;
mysql> update user set authentication_string = '' where user = 'root';

```

针对1G 服务器配置
```

#慢日志
long_query_time = 1
slow_query_log = ON
slow_query_log_file = /var/log/mysql-slow.log
log_queries_not_using_indexes = ON

performance_schema=Off
table_definition_cache=300
table_open_cache=300
performance_schema_max_table_instances=100
innodb_buffer_pool_size=8M
innodb_log_file_size=8M
innodb_flush_log_at_trx_commit=0
innodb_log_buffer_size=2M
innodb_thread_concurrency=1
key_buffer_size=8M
tmp_table_size=32M
read_buffer_size=2M
read_rnd_buffer_size=2M
sort_buffer_size=8M
max_connections=100

# 忽略大小写
lower_case_table_names=1

# 开启独享表空间，并指定ibdata1大小为128M 可以修改为1G，ibdata2大小64M，自动扩张。
innodb_data_home_dir = /var/lib/mysql
innodb_data_file_path = ibdata1:128M;ibdata2:64M:autoextend
innodb_file_per_table=1

```

参考
https://dev.mysql.com/downloads/repo/yum/

https://dev.mysql.com/doc/refman/5.7/en/linux-installation-yum-repo.html#yum-repo-setup

https://dev.mysql.com/doc/refman/5.7/en/replace-third-party-yum.html

检查是否支持PPTP
```
[root@iZt4newzwl5axiunurprquZ ~]# modprobe ppp-compress-18 && echo ok
ok
```

## 安装
```
rpm -ivh http://dl.fedoraproject.org/pub/epel/epel-release-latest-7.noarch.rpm
yum install ppp pptpd iptables
```
## 配置
1. 分配IP
```
vim /etc/pptpd.conf
```
最后增加
```
#客户端ip分配范围
localip 192.168.16.1
remoteip 192.168.16.10-15
```
2. 账号
```
vim /etc/ppp/chap-secrets
```
修改成如下
```
# client server secret IP addresses
"dawnco" pptpd "qaz" "*"
#用户名 类型 密码 分配的ip * 表示随即分配
```
3. DNS
```
vim /etc/ppp/options.pptpd
```
新增/修改
```
ms-dns 8.8.8.8
ms-dns 8.8.4.4
```
4. 开启转发
```
vim /etc/sysctl.conf
```
新增
```
net.ipv4.ip_forward=1
```
运行下面命令使内核修改生效：
```
sysctl -p
```
5. 设置防火墙
```
vim /usr/lib/firewalld/services/pptpd.xml
```
```


pptpd
PPTP
```
5. 设置转发规则
```
firewall-cmd --permanent --zone=public --add-port=80/tcp
firewall-cmd --permanent --zone=public --add-port=8388/tcp
firewall-cmd --permanent --zone=public --add-port=443/tcp
firewall-cmd --permanent --zone=public --add-port=22/tcp
firewall-cmd --permanent --zone=public --add-port=21/tcp
firewall-cmd --permanent --zone=public --add-port=47/tcp
firewall-cmd --permanent --zone=public --add-port=1723/tcp
#
firewall-cmd --permanent --zone=public --add-service=pptpd
firewall-cmd --add-masquerade
firewall-cmd --permanent --direct --add-rule ipv4 filter INPUT 0 -p gre -j ACCEPT
firewall-cmd --permanent --direct --add-rule ipv4 filter OUTPUT 0 -p gre -j ACCEPT
firewall-cmd --permanent --direct --add-rule ipv4 filter FORWARD 0 -i ppp+ -o eth0 -j ACCEPT
firewall-cmd --permanent --direct --add-rule ipv4 filter FORWARD 0 -i eth0 -o ppp+ -j ACCEPT
firewall-cmd --permanent --direct --passthrough ipv4 -t nat -I POSTROUTING -o eth0 -j MASQUERADE -s 192.168.16.0/24
```
重启并开机启动
```
firewall-cmd --reload
systemctl restart pptpd
systemctl enable pptpd.service
systemctl enable firewalld
```

### 问题处理
1. 问题1
```
Jun 25 10:41:49 AliYun pptpd[13835]: GRE: read(fd=6,buffer=55d87eb67480,len=8196) from PTY f
ailed: status = -1 error = Input/output error, usually caused by unexpected termination of p
ppd, check option syntax and pppd logs
Jun 25 10:41:49 AliYun pptpd[13835]: CTRL: PTY read or GRE write failed (pty,gre)=(6,7)
Jun 25 10:41:49 AliYun pptpd[13835]: CTRL: Client x.x.x.x control connection finished
Jun 25 10:42:10 AliYun pptpd[13730]: CTRL: Couldn't write packet to client.
Jun 25 10:42:10 AliYun pptpd[13730]: CTRL: Error sending GRE, aborting call
```
修改
```
vim /etc/ppp/options.pptpd
```
去掉 debug 和 dump 前的 #

2. 日志显示
```
Jul 2 08:39:53 iZj6ca3h0xhsuadr9za60eZ pppd[20902]: Cannot determine ethernet address for prox
y ARP
```
可能 firewalld 没启动 启动
```
systemctl start firewalld
```

安装 nodejs12
```
yum install -y gcc-c++ make
curl -sL https://rpm.nodesource.com/setup_12.x | sudo -E bash -
```
安装
```
yum install -y nodejs
```
查看版本
```
node -v
```

参考

How To Install Latest Nodejs on CentOS/RHEL 7/6

https://nodejs.org/zh-cn/download/package-manager/#debian-and-ubuntu-based-linux-distributions-enterprise-linux-fedora-and-snap-packages

安装
```
yum install supervisor
```

配置
```
vim /etc/supervisord.d/mchregister.ini
```

```
[program:mch-register]
process_name=%(program_name)s_%(process_num)02d
command=/usr/local/php/bin/php /data/wwwroot/platform/mch/artisan queue:work --quiet --queue=register --delay=3 --sleep=3
autostart=true ; 在supervisord启动的时候也自动启动
autorestart=true ; 在supervisord启动的时候也自动启动
user=apache ; 用哪个用户启动进程
numprocs=5 ; 开启几个进程
redirect_stderr=true ; 把stderr重定向到stdout，默认false

[program:mch-project]
process_name=%(program_name)s_%(process_num)02d
command=/usr/local/php/bin/php /data/wwwroot/platform/mch/artisan queue:work --quiet --queue=project --delay=3 --sleep=3
autostart=true
autorestart=true
user=apache
numprocs=8
redirect_stderr=true

[program:mch-settled]
process_name=%(program_name)s_%(process_num)02d
command=/usr/local/php/bin/php /data/wwwroot/platform/mch/artisan queue:work --quiet --queue=project_settled --delay=3 --sleep=3
autostart=true
autorestart=true
user=apache
numprocs=8
redirect_stderr=true
```

启动
```
supervisord -c /etc/supervisord.conf
```
开机运行
```
systemctl enable supervisord
```
运行
```
supervisorctl reread
supervisorctl update
supervisorctl start mch-register:*
supervisorctl start mch-project:*
supervisorctl start mch-settled:*
```

文档
http://supervisord.org/introduction.html

参考
https://www.cnblogs.com/xuezhigu/p/7660203.html

本文介绍几款Linux运维比较实用的工具，希望对Linux管理员有所帮助。

Continue reading →