linux培訓(xùn)-基礎(chǔ)篇

一.systemctl

目前創(chuàng)新互聯(lián)公司已為1000多家的企業(yè)提供了網(wǎng)站建設(shè)、域名、網(wǎng)絡(luò)空間、網(wǎng)站托管維護(hù)、企業(yè)網(wǎng)站設(shè)計(jì)、雨花臺(tái)網(wǎng)站維護(hù)等服務(wù)，公司將堅(jiān)持客戶導(dǎo)向、應(yīng)用為本的策略，正道將秉承"和諧、參與、激情"的文化，與客戶和合作伙伴齊心協(xié)力一起成長(zhǎng)，共同發(fā)展。

1.服務(wù)器啟動(dòng)過(guò)程

redhat 7以前啟動(dòng)方式，init: 按順序啟動(dòng) 1 2 3 4。啟動(dòng)慢

redhat 7 systemd：并行化啟動(dòng) 按依賴關(guān)系啟動(dòng)。 1 2 3 4（network） 5 6 7 依賴于4則直接不啟動(dòng)。啟動(dòng)快

運(yùn)行等級(jí)

init 0 關(guān)機(jī)

1 單用戶模式

2 無(wú)網(wǎng)絡(luò)模式

3 無(wú)圖形化模式

4 用戶自定義模式

5 GUI

6 reboot

2.systemctl 使用說(shuō)明

-啟動(dòng)服務(wù)

old: service xxxx start

new: systemctl start xxx.service

systemctl restart xxx.service 服務(wù)會(huì)瞬斷

systemctl reload xxx.service 服務(wù)不會(huì)中斷

-設(shè)置開機(jī)啟動(dòng)

old：chkconfig xxx on

new：systemctl enable xxx.service

-顯示當(dāng)前的運(yùn)行等級(jí)

# systemctl get-default

graphical.target

切換運(yùn)行等級(jí)

systemctl isolate multi-user.target/emergency.target/graphical.target

-總結(jié)

linux 培訓(xùn)-基礎(chǔ)篇

二. SSH

1.SSH概念

shell 每一個(gè)用戶都有一個(gè)自己的殼包含權(quán)限，個(gè)性化設(shè)置，環(huán)境變量等

用戶需要通過(guò)shell 才能跟內(nèi)核交互

SSH 就是secure Shell

用戶必須要通過(guò)shell來(lái)與os內(nèi)核交互

user

-----

shell

-----

kernel

-----

hardware

2.SSH種類

(1).ssh user@ip

不信任方式，服務(wù)器將自己的公鑰給客戶端

(2).配置基于秘鑰/公鑰的身份驗(yàn)證方式

加密方式：

-對(duì)稱加密 same key

-非對(duì)稱加密公鑰加密，私鑰解密

信任的方式：客戶端將自己的公鑰發(fā)送給服務(wù)器，客戶端的公鑰是受信任的則不需要密碼

(3).配置過(guò)程

linux

-ssh-keygens

生成客戶端自己的公鑰和私鑰

-ssh-copy-id -i 指定公鑰 user/hostname --將客戶端公鑰上傳給服務(wù)器端

將客戶端公鑰上傳至服務(wù)器端

windows

-secureCRT 在客戶端生成公鑰/秘鑰

tool -> create public key

-將公鑰上傳到目標(biāo)服務(wù)器，cat 公鑰 >> ~/.ssh/authorized_keys

3.自定義SSH服務(wù)配置

vi /etc/ssh/sshd_config

#LoginGraceTime 2m。 --2分鐘不操作斷開ssh連接

#PermitRootLogin yes --是否允許root登陸

#StrictModes yes

#MaxAuthTries 6 --允許嘗試登陸的次數(shù)

#MaxSessions 10

#PasswordAuthentication yes --允許密碼登陸

三.Linux日志系統(tǒng)

1.常規(guī)系統(tǒng)日志結(jié)構(gòu)

cd /var/log

messages --通用日志

secure --和安全及身份驗(yàn)證相關(guān)

maillog --和郵件相關(guān)

cron --計(jì)劃任務(wù)相關(guān)

boot.log --系統(tǒng)啟動(dòng)log

2.常規(guī)日志服務(wù)配置

(1).日志配置文件

vim /etc/rsyslog.conf

*.info;mail.none;authpriv.none;cron.none /var/log/messages

*.info 所有類別的info等級(jí)以上的日志記錄在messages中。

mail.none mail 類別的日志不記錄

mail.* -/var/log/maillog 異步

(2).日志優(yōu)先集

linux 培訓(xùn)-基礎(chǔ)篇

3.分析一個(gè)日志條目

linux 培訓(xùn)-基礎(chǔ)篇

4.系統(tǒng)審查日志systemd journal

(1)

systemd journal 默認(rèn)情況下存儲(chǔ)在/run/log，系統(tǒng)重新啟動(dòng)后內(nèi)容會(huì)被清除。要求轉(zhuǎn)換角色為rootq進(jìn)行查看。

-a 所有

-n 5 最后5行

-p 優(yōu)先級(jí)（err，info）

-b 啟動(dòng)消息

-f 監(jiān)控

--since “2014-02-10 20:30:00” --until “2014-02-10 21:30:00” 指定范圍

--since today 顯示今天

-o 更改日志的輸出模式

(2).常用命令

# journalctl --priority err

# journalctl _UID=1000 -n 5

# journalctl --since 13:00:00 --until 14:00:00 _SYSTEMD_UNIT="sshd.service"

(3).永久保存journal日志

[root@rh2 ~]# mkdir -p /var/log/journal

[root@rh2 ~]# chown root:systemd-journal /var/log/journal

[root@rh2 ~]# chmod 2755 /var/log/journal

[root@rh2 ~]# systemctl restart systemd-journald.service

日志將永久保存在/var/log/journal

四.時(shí)間

1.時(shí)間命令

# timedatectl

Local time: Mon 2018-07-30 14:22:32 CST

Universal time: Mon 2018-07-30 06:22:32 UTC

RTC time: Mon 2018-07-30 06:22:32

Time zone: Asia/Shanghai (CST, +0800)

NTP enabled: no

NTP synchronized: yes

RTC in local TZ: no

DST active: n/a

timedatectl set-time 15:00:00 設(shè)置本地時(shí)間

2.ntp

(1).安裝包c(diǎn)hrony.x86_64

yum -install -y chrony.x86_64

(2).開啟ntp服務(wù)器支持

timedatectl set-ntp true

(3).配置ntp服務(wù)器

vi /etc/chrony.conf
server ntp1.aliyun.com iburst
server ntp2.aliyun.com iburst
server ntp3.aliyun.com iburst

(4).重啟服務(wù)

systemctl restart chronyd
systemctl enable chronyd
# timedatectl
      Local time: Mon 2018-07-30 14:49:16 CST
  Universal time: Mon 2018-07-30 06:49:16 UTC
        RTC time: Mon 2018-07-30 06:49:16
       Time zone: Asia/Shanghai (CST, +0800)
     NTP enabled: yes
NTP synchronized: yes
 RTC in local TZ: no
      DST active: n/a

(5).查看ntp時(shí)間狀態(tài)

# chronyc sources -v
210 Number of sources = 2
  .-- Source mode  '^' = server, '=' = peer, '#' = local clock.
 / .- Source state '*' = current synced, '+' = combined , '-' = not combined,
| /   '?' = unreachable, 'x' = time may be in error, '~' = time too variable.
||                                                 .- xxxx [ yyyy ] +/- zzzz
||      Reachability register (octal) -.           |  xxxx = adjusted offset,
||      Log2(Polling interval) --.      |          |  yyyy = measured offset,
||                                \     |          |  zzzz = estimated error.
||                                 |    |           \
MS Name/IP address         Stratum Poll Reach LastRx Last sample               
===============================================================================
^+ 120.25.115.20                 2  10   377   643  +4362us[+4362us] +/-   50ms
^* 203.107.6.88                  2  10   377   704    -27ms[  -29ms] +/-   68ms

五.網(wǎng)絡(luò)

1.常規(guī)網(wǎng)絡(luò)配置

RHEL6 ： network service network restart 管理的是設(shè)備名 ifcfg-設(shè)備名

RHEL7 ： NetworkManager --> nmcli 管理的是連接名 ifcfg-連接名

相關(guān)服務(wù)：systemctl start NetworkManager

網(wǎng)卡的配置文件： /etc/sysconfig/network-scripts/ifcfg-xxxx

2.nmcli

(1).顯示鏈接名和設(shè)備名

# nmcli connection show 
NAME       UUID                                  TYPE            DEVICE 
Profile 1  105c22e6-d4be-4a1b-978d-a53b81b60d33  802-3-ethernet  ens38  
ens33      e11de05d-64d8-421e-97f5-bd9cfbc9f647  802-3-ethernet  ens33  
virbr0     3728e459-2ed5-405b-8f2c-f56c9c22a16d  bridge          virbr0 
eth0       bd139d4f-d603-47a1-8ee6-95f883cddcf2  802-3-ethernet  --

(2).查看連接名信息

# nmcli connection show Profile\ 1
connection.id:                          Profile 1
connection.uuid:                        105c22e6-d4be-4a1b-978d-a53b81b60d33
connection.stable-id:                   --
connection.interface-name:              --
connection.type:                        802-3-ethernet
connection.autoconnect:                 yes
connection.autoconnect-priority:        0
connection.autoconnect-retries:         -1 (default)
connection.timestamp:                   1532948503
connection.read-only:                   no
connection.permissions:                 --
connection.zone:                        --
connection.master:                      --
connection.slave-type:                  --
connection.autoconnect-slaves:          -1 (default)
connection.secondaries:                 --
connection.gateway-ping-timeout:        0
connection.metered:                     unknown
connection.lldp:                        -1 (default)
802-3-ethernet.port:                    --
802-3-ethernet.speed:                   0
802-3-ethernet.duplex:                  --
802-3-ethernet.auto-negotiate:          no
802-3-ethernet.mac-address:             --
802-3-ethernet.cloned-mac-address:      --
802-3-ethernet.generate-mac-address-mask:--
802-3-ethernet.mac-address-blacklist:   --
802-3-ethernet.mtu:                     auto
802-3-ethernet.s390-subchannels:        --
802-3-ethernet.s390-nettype:            --
802-3-ethernet.s390-options:            --
802-3-ethernet.wake-on-lan:             1 (default)
802-3-ethernet.wake-on-lan-password:    --
ipv4.method:                            manual
ipv4.DNS:                               114.114.114.114
ipv4.dns-search:                        --
ipv4.dns-options:                       (default)
ipv4.dns-priority:                      0
ipv4.addresses:                         192.168.1.100/24, 1.1.1.1/8
ipv4.gateway:                           192.168.1.1
ipv4.routes:                            --
ipv4.route-metric:                      -1
ipv4.ignore-auto-routes:                no
ipv4.ignore-auto-dns:                   no
ipv4.dhcp-client-id:                    --
ipv4.dhcp-timeout:                      0
ipv4.dhcp-send-hostname:                yes
ipv4.dhcp-hostname:                     --
ipv4.dhcp-fqdn:                         --
ipv4.never-default:                     no
ipv4.may-fail:                          yes
ipv4.dad-timeout:                       -1 (default)
ipv6.method:                            auto
ipv6.dns:                               --
ipv6.dns-search:                        --
ipv6.dns-options:                       (default)
ipv6.dns-priority:                      0
ipv6.addresses:                         --
ipv6.gateway:                           --
ipv6.routes:                            --
ipv6.route-metric:                      -1
ipv6.ignore-auto-routes:                no
ipv6.ignore-auto-dns:                   no
ipv6.never-default:                     no
ipv6.may-fail:                          yes
ipv6.ip6-privacy:                       -1 (unknown)
ipv6.addr-gen-mode:                     stable-privacy
ipv6.dhcp-send-hostname:                yes
ipv6.dhcp-hostname:                     --
ipv6.token:                             --
proxy.method:                           none
proxy.browser-only:                     no
proxy.pac-url:                          --
proxy.pac-script:                       --
GENERAL.NAME:                           Profile 1
GENERAL.UUID:                           105c22e6-d4be-4a1b-978d-a53b81b60d33
GENERAL.DEVICES:                        ens38
GENERAL.STATE:                          activated
GENERAL.DEFAULT:                        no
GENERAL.DEFAULT6:                       no
GENERAL.VPN:                            no
GENERAL.ZONE:                           --
GENERAL.DBUS-PATH:                      /org/freedesktop/NetworkManager/ActiveConnection/224
GENERAL.CON-PATH:                       /org/freedesktop/NetworkManager/Settings/2
GENERAL.SPEC-OBJECT:                    --
GENERAL.MASTER-PATH:                    --
IP4.ADDRESS[1]:                         1.1.1.1/8
IP4.ADDRESS[2]:                         192.168.1.100/24
IP4.GATEWAY:                            192.168.1.1
IP4.DNS[1]:                             114.114.114.114
IP6.ADDRESS[1]:                         fe80::f434:5dd6:8419:fc87/64
IP6.GATEWAY:                            --

(3).創(chuàng)建網(wǎng)絡(luò)連接

# nmcli connection modify ens33 ipv4.addresses 192.168.1.100/24 ipv4.gateway xxx ipv4.dns xxx ipv4.method manual connection.autoconnect yes

rhel 7.0 ： # nmcli connection modify ens33 ipv4.addresses “192.168.1.100/24 192.168.1.1” ipv4.dns xxx ipv4.method manual connection.autoconnect yes ifname eth0 type ethernet

說(shuō)明：

ipv4.addresses ip地址

ipv4.gateway 網(wǎng)關(guān)

ipv4.dns dns地址

ipv4.method 靜態(tài)/動(dòng)態(tài)ip

connection.autoconnect 系統(tǒng)啟動(dòng)自動(dòng)連接

ifname 指定硬件設(shè)備名稱

type 網(wǎng)絡(luò)類型

(4).激活連接

# nmcli connection up Profile\ 1

(5).刪除連接

# nmcli connection delete ens33

(6).配置多個(gè)ip地址條件

- 第一個(gè)ip必須為靜態(tài)ip

- nmcli connection modify Profile\ 1 +ipv4.addresses 1.1.1.1/8

# ip addr

1: lo: mtu 65536 qdisc noqueue state UNKNOWN qlen 1

link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00

inet 127.0.0.1/8 scope host lo