ssh root@123.207.79.43
错误信息
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@ WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
Someone could be eavesdropping on you right now (man-in-the-middle attack)!
It is also possible that a host key has just been changed.
The fingerprint for the ECDSA key sent by the remote host is
SHA256:Hl/dKTFzL4lOlF8DIG5itaV4OAsZunC2AWlFGLjLfsg.
Please contact your system administrator.
Add correct host key in /c/Users/\347\224\250\346\210\267/.ssh/known_hosts to get rid of this message.
Offending ECDSA key in /c/Users/\347\224\250\346\210\267/.ssh/known_hosts:1
ECDSA host key for 123.207.79.43 has changed and you have requested strict checking.
Host key verification failed.
清除认证
$ rm -rf.ssh/known_hosts
首先更新系统软件 yum update
安装nginx
yum install nginx
nginx 常用命令
启动 #systemctl start nginx.service
自动启动 #systemctl enable nginx.service
平滑启动 nginx -s reload
重启 nginx -s reload
重启 systemctl reload nginx.service
重启 service nginx restart
MySQL 安装 qiuyang 个人多次使用正常
下载mysql的repo源
$ wget http://repo.mysql.com/mysql-community-release-el7-5.noarch.rpm
安装mysql-community-release-el7-5.noarch.rpm包
$ rpm -ivh mysql-community-release-el7-5.noarch.rpm
安装这个包后,会获得两个mysql的yum repo源:
/etc/yum.repos.d/mysql-community.repo和/etc/yum.repos.d/mysql-community-source.repo。
安装mysql
安装yum install mysql-server
设置开机自启动 chkconfig mysqld on
重启service mysqld restart 或 systemctl restart mysqld.service 或 service mysqld start
安装 PHP
#yum install php-fpm php-mysql
#systemctl start php-fpm # 启动php-fpm
#systemctl enable php-fpm # 设置开机启动
#mkdir /usr/www
#chown -R apache:apache /usr/www
安装依赖包 yum install php-mysql php-gd libjpeg* php-ldap php-odbc php-pear php-xml php-xmlrpcphp-mbstring php-bcmath php-mhash
修改Nginx配置文件
打开/etc/nginx下的nginx.conf,其中server部分修改如下:
server {
listen 80 default_server;
listen [::]:80 default_server;
server_name ffflipped.cn;
root /usr/www;
# Load configuration files for the default server block.
include /etc/nginx/default.d/*.conf;
location / {
index index.php;
try_files $uri $uri/ /index.php?$args;
}
rewrite /wp-admin$ $scheme://$host$uri/ permanent;
location ~* ^.+\.(ogg|ogv|svg|svgz|eot|otf|woff|mp4|ttf|rss|atom|jpg|jpeg|gif|png|ico|zip|tgz|gz|rar|bz2|doc|xls|exe|ppt|tar|mid|midi|wav|bmp|rtf)$ {
access_log off; log_not_found off; expires max;
}
location ~ \.php$ {
try_files $uri =404;
fastcgi_split_path_info ^(.+\.php)(/.+)$;
fastcgi_pass 127.0.0.1:9000;
fastcgi_index index.php;
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
include fastcgi_params;
}
}
保存后重载
nginx #systemctl reload nginx
在/usr/WWW目录中创建index.php
测试:123.206.57.252 或者解析好的域名http://ffflipped.cn 可以看到 hello world !
安装防火墙
yum install iptables-services -y
编辑ipatbles的规则
vim /etc/sysconfig/iptables
重启iptables服务
service iptables restart
添加可以访问的端口
编辑 vim /etc/sysconfig/iptables
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -p icmp -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 22 -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 80 -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 8080 -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 3306 -j ACCEPT
-A INPUT -j REJECT --reject-with icmp-host-prohibited
-A FORWARD -j REJECT --reject-with icmp-host-prohibite