零基础学习云计算及大数据DBA集群架构师【企业级运维技术及实践项目2015年1月25日周一】

实验环境配置
{
servera{
    (1)主机名修改为 servera
    (2)将 selinux 模式改为 disabled
    (3)将时区设置为亚洲/上海
    (4)打开内核关于路由转发的相关参数,并使之立即生效
    (5)防火墙的相关配置
        1>清空原有防火墙规则
        2>设置端口转发,将访问 servera 机器的外网接口的 22011-22019 端口转到 serverb-serverj 的
内网 ip 的 22 端口(serverb-serverj 的外网接口关掉)
        3>将来自于 192.168.15.0/24(即 serverb-serverj 的内网 ip)的数据包的源地址的转换为 servera 的
外网 ip
        4>保存防火墙配置
    (6)重启机器让所有配置生效
    (7)每次重启完成后,将防火墙策略重新导入
}
serverb-serverj{
    (1)主机名修改为 servera
    (2)将 selinux 模式改为 disabled (rhel7 /etc/selinux/config rhel6 /etc/sysconfig/selinux)
    (3)将时区设置为亚洲/上海
    (4)网络配置
        1>将 NetworkManager 服务永久关闭
        2>将外网网卡停掉,serverb-serverj 只保留内网网卡
        3>将内网网卡的网关设置为 servera 的内网网卡
        4>添加 hosts 文件解析
    (5)重启使配置生效
    
}
}


实验环境配置详细{
#!/bin/bash
#(1)主机名修改为 servera
hostname > /etc/hostname
#(2)将 selinux 模式改为 disabled
sed -i '/SELINUX/s/enforcing/disabled/' /etc/selinux/config
#(3)将时区设置为亚洲/上海
timedatectl set-timezone Asia/Shanghai
#(4)打开内核关于路由转发的相关参数,并使之立即生效
echo "net.ipv4.ip_forward = 1" >> /etc/sysctl.conf
sysctl -p
#(5)防火墙的相关配置
#    1>清空原有防火墙规则
iptables -F

#    2>设置端口转发,将访问 servera 机器的外网接口的 22011-22019 端口转到 serverb-serverj 的内网 ip 的 22 端口(serverb-serverj 的外网接口关掉)
iptables -t nat -A PREROUTING -d 172.25.15.10 -i eth0 -p tcp --dport 22011 -j DNAT --to-destination 192.168.1.11:22
iptables -t nat -A PREROUTING -d 172.25.15.10 -i eth0 -p tcp --dport 22012 -j DNAT --to-destination 192.168.1.12:22
iptables -t nat -A PREROUTING -d 172.25.15.10 -i eth0 -p tcp --dport 22013 -j DNAT --to-destination 192.168.1.13:22
iptables -t nat -A PREROUTING -d 172.25.15.10 -i eth0 -p tcp --dport 22014 -j DNAT --to-destination 192.168.1.14:22
iptables -t nat -A PREROUTING -d 172.25.15.10 -i eth0 -p tcp --dport 22015 -j DNAT --to-destination 192.168.1.15:22
iptables -t nat -A PREROUTING -d 172.25.15.10 -i eth0 -p tcp --dport 22016 -j DNAT --to-destination 192.168.1.16:22
iptables -t nat -A PREROUTING -d 172.25.15.10 -i eth0 -p tcp --dport 22017 -j DNAT --to-destination 192.168.1.17:22
iptables -t nat -A PREROUTING -d 172.25.15.10 -i eth0 -p tcp --dport 22018 -j DNAT --to-destination 192.168.1.18:22
iptables -t nat -A PREROUTING -d 172.25.15.10 -i eth0 -p tcp --dport 22019 -j DNAT --to-destination 192.168.1.19:22

#    3>将来自于 192.168.15.0/24(即 serverb-serverj 的内网 ip)的数据包的源地址的转换为 servera 的外网 ip
iptables -t nat -A POSTROUTING -s 192.168.1.0/24 -o eth0 -j SNAT --to-source 172.25.15.10
#    4>保存防火墙配置
iptables-save > /etc/sysconfig/iptables
#(6)重启机器让所有配置生效
#reboot
#(7)每次重启完成后,将防火墙策略重新导入
#iptables-restore < /etc/sysconfig/iptables
}

serverb-j
{
#!/bin/bash
    
#(1)主机名修改为 serverb
hostname > /etc/hostname

#(2)将 selinux 模式改为 disabled
sed -i '/SELINUX/s/enforcing/disabled/' /etc/selinux/config
#(3)将时区设置为亚洲/上海
timedatectl set-timezone Asia/Shanghai
#(4)网络配置
#    1>将 NetworkManager 服务永久关闭
systemctl stop NetworkManager
systemctl disable NetworkManager
#    2>将外网网卡停掉,serverb-serverj 只保留内网网卡
sed -i 's/ONBOOT=yes/ONBOOT=no/' /etc/sysconfig/network-scripts/ifcfg-eth0
#    3>将内网网卡的网关设置为 servera 的内网网卡
echo "GATEWAY=192.168.1.10" >> /etc/sysconfig/network-scripts/ifcfg-eth2
#    4>添加 hosts 文件解析
cat >> /etc/hosts << ENDF
192.168.1.10 servera.pod15.example.com servera
192.168.1.11 serverb.pod15.example.com serverb
192.168.1.12 serverc.pod15.example.com serverc
192.168.1.13 serverd.pod15.example.com serverd
192.168.1.14 servere.pod15.example.com servere
192.168.1.15 serverf.pod15.example.com serverf
192.168.1.16 serverg.pod15.example.com serverg
192.168.1.17 serverh.pod15.example.com serverh
192.168.1.18 serveri.pod15.example.com serveri
192.168.1.19 serverj.pod15.example.com serverj
ENDF
sed -i '/172.25.105.83/d' /etc/hosts
sed -i '/172.25.15\.[0-9]*/d' /etc/hosts
#(5)重启使配置生效
#reboot
}


LAPM 项目搭建
{
    项目框架        # Linux_____WEB_____PHP_____DB
            # rhel7_____apache__-(libphp5.so)-__php__-(php-mysql)-__mariadb-server
            
    安装软件包    # WEB 程序    httpd
            # apache模块    libphp5.so
            # php 程序    php
            # 数据库程序    mariadb-server
            # php-db驱动     php-mysql  
    配置httpd    # /etc/httpd/conf.d/ 
    配置mariadb-server
    创建数据文件    # 成品的php网站
    测试
}
LAMP操作流程{

[root@serverb ~]# yum install httpd php php-mysql mariadb-server -y
[root@serverb ~]# systemctl httpd start
[root@serverb ~]# systemctl start mariadb
[root@serverb ~]# wget http://classroom.example.com/content/item/php/Discuz_X3.2_SC_UTF8.zip
[root@serverb ~]# cd /var/www/html 
[root@serverb html]# unzip Discuz_X3.2_SC_UTF8.zip 
[root@serverb html]# ls
Discuz_X3.2_SC_UTF8.zip  index.html  readme  upload  utility
[root@serverb html]# chmod 777 upload
[root@serverb ~]# mysqladmin -u root password 'uplooking'
[root@serverb ~]# mysql -u root -p
Enter password: 
Welcome to the MariaDB monitor.  Commands end with ; or \g.
Your MariaDB connection id is 6
Server version: 5.5.41-MariaDB MariaDB Server

Copyright (c) 2000, 2014, Oracle, MariaDB Corporation Ab and others.

Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.

MariaDB [(none)]> show databases;
+--------------------+
| Database           |
+--------------------+
| information_schema |
| mysql              |
| performance_schema |
| test               |
+--------------------+
4 rows in set (0.00 sec)
MariaDB [(none)]> create database phpdb;
Query OK, 1 row affected (0.00 sec)

MariaDB [(none)]> show databases;
+--------------------+
| Database           |
+--------------------+
| information_schema |
| mysql              |
| performance_schema |
| phpdb              |
| test               |
+--------------------+
5 rows in set (0.00 sec)



[root@servera ~]# iptables -t nat -A PREROUTING -d 172.25.15.10 -i eth0 -p tcp --dport 80 -j DNAT --to-destination 192.168.1.11:80

[root@workstation ~]# echo "172.25.15.10 www.discuz.com" >> /etc/hosts

}