一键式服务器环境安装

脚本

#!/bin/bash

#Author: wanggw 
#Script for Hp install!

function stdoutlog()
{
  echo "$1" 1>&2
  echo "$1"
}

exec 1>install.log


stdoutlog " _          _ _         "
stdoutlog "| |__   ___| | | ___    "
stdoutlog "| '_ \ / _ \ | |/ _ \   "
stdoutlog "| | | |  __/ | | (_) |  "
stdoutlog "|_| |_|\___|_|_|\___/   "
stdoutlog "                        "
stdoutlog "*  Checking system environment,please wait."




# 2.check network
ping -c 2 www.baidu.com 2>&1
if [ $? -ne 0 ]
then
  stdoutlog "[Error] Your server cannot access Internet,please check this "
  exit 1
fi

set -e

# 3.get ip address
yum install -y -q net-tools


# 4.check docker-engine version
dockerstat=`rpm -qa | grep "docker-engine" | wc -l`
sieracdockerstat=`rpm -qa | grep "docker-engine-1.13.0-1.el7.centos.x86_64" | wc -l`

if [ $dockerstat -ne 0 ] && [ $sieracdockerstat -ne 1 ]
then
  stdoutlog "[Error] You have installed docker-engine and this is not the version we need.You must uninstall this docker first "
  exit 1
fi


# 6.set parameter for sierac docker registry 
sierac_registry="registry.cn-hangzhou.aliyuncs.com"
harbor_user=223519600@qq.com
harbor_password=wang2834557@.

# 7.set host
#hoststat=`cat /etc/hosts | grep localhost |wc -l`
#hoststat2=`cat /etc/hosts | grep reg.sierac.net |wc -l`
#if [ $hoststat -eq 0 ]
#then
#        echo "127.0.0.1   localhost">> /etc/hosts
#        echo "192.168.1.228   reg.sierac.net">> /etc/hosts
#elif [ $hoststat2 -eq 0 ]
#then
#        echo "192.168.1.228   reg.sierac.net">> /etc/hosts
#fi

# 8.set DNS
#echo "nameserver 114.114.114.114">> /etc/resolv.conf

# 9.set yum repos
stdoutlog "Starting installration, there will be two parts, the speed depends on your network..."
stdoutlog "+ Configure system environment"
stdoutlog " - set yum repos"
stdoutlog "install huawei yum"
wget -O /etc/yum.repos.d/docker-ce.repo https://repo.huaweicloud.com/docker-ce/linux/centos/docker-ce.repo
sudo sed -i 's+download.docker.com+repo.huaweicloud.com/docker-ce+' /etc/yum.repos.d/docker-ce.repo
sudo yum makecache fast

# 10.install ntp and set ntp
stdoutlog " - yum install ntp"
yum install -y ntp 2>&1

cat > /etc/ntp.conf << EOF
driftfile /var/lib/ntp/drift
restrict 127.0.0.1
restrict -6 ::1
server 202.120.2.101
includefile /etc/ntp/crypto/pw
keys /etc/ntp/keys
EOF

stdoutlog " - restart ntpd"
systemctl restart ntpd

# 7.set firewall and install iptables
#stdoutlog " - stop firewall"
#sed -i "s/SELINUX=enforcing/SELINUX=disabled/" /etc/selinux/config
#systemctl stop firewalld.service
#systemctl disable firewalld.service 2>&1

#stdoutlog " - yum install iptables"
#yum install -y iptables-services

#cat > /etc/sysconfig/iptables << EOF
# Firewall configuration written by system-config-firewall
# Manual customization of this file is not recommended.
#*filter
#:INPUT ACCEPT [0:0]
#:FORWARD ACCEPT [0:0]
#:OUTPUT ACCEPT [0:0]
#-A INPUT -m state --state ESTABLISHED,RELATED,UNTRACKED -j ACCEPT
#-A INPUT -p icmp -j ACCEPT
#-A INPUT -i lo -j ACCEPT
#-A INPUT -m state --state NEW -m tcp -p tcp --dport 22 -j ACCEPT
#-A INPUT -m state --state NEW -m tcp -p tcp --dport 80 -j ACCEPT
#-A INPUT -m state --state NEW -m tcp -p tcp --dport 2375 -j ACCEPT
#-A INPUT -m state --state NEW -m tcp -p tcp --dport 8082 -j ACCEPT
#-A INPUT -m state --state NEW -m tcp -p tcp --dport 8081 -j ACCEPT
#-A INPUT -m state --state NEW -m tcp -p tcp --dport 3306 -j ACCEPT
#-A INPUT -j REJECT --reject-with icmp-host-prohibited
#-A FORWARD -j REJECT --reject-with icmp-host-prohibited
#COMMIT
#EOF

#stdoutlog " - restart iptables"
#systemctl restart iptables

# 8.set timezone
stdoutlog " - set timezone"
timedatectl set-timezone Asia/Shanghai

# 9.optimize system
stdoutlog " - optimize system"
soft_nofile_temp=`cat /etc/security/limits.conf | grep "soft nofile" | wc -l`
hard_nofile_temp=`cat /etc/security/limits.conf | grep "hard nofile" | wc -l`

if [ $soft_nofile_temp -eq 0 ]
then
 echo "* soft nofile 65535" >> /etc/security/limits.conf
fi

if [ $hard_nofile_temp -eq 0 ]
then
 echo "* hard nofile 65535" >> /etc/security/limits.conf
fi

search_file="/etc/sysctl.conf"
arr_search_strings=(net.ipv4.tcp_max_tw_buckets net.ipv4.tcp_tw_recycle net.ipv4.tcp_tw_reuse net.core.somaxconn net.ipv4.ip_local_port_range net.ipv4.tcp_timestamps)
arr_search_values=(6000 1 1 512 "32768 65000" 0)

for ((i=0;i<${#arr_search_strings[*]};++i))
do
  search_str=${arr_search_strings[$i]}
  search_temp=`cat $search_file | grep "$search_str" | wc -l`

  if [ $search_temp -eq 0 ]
  then
    echo "$search_str = ${arr_search_values[$i]}" >> $search_file
  fi
done

sysctl -p

# 10.install docker engine and set docker
stdoutlog " - yum install docker-engine"
yum install docker-ce-17.12.1.ce-1.el7.centos -y

if [ ! -d /etc/systemd/system/docker.service.d ]
then
  mkdir -p /etc/systemd/system/docker.service.d
fi

if [ ! -d /data/paas/docker/data ]
then
  mkdir -p /data/paas/docker/data
fi

cat > /etc/systemd/system/docker.service.d/env.conf << EOF
[Unit]
Description=Docker Application Container Engine
Documentation=http://docs.docker.com
After=network.target
Wants=docker-storage-setup.service
[Service]
EnvironmentFile=-/etc/sysconfig/docker
EnvironmentFile=-/etc/sysconfig/docker-storage
EnvironmentFile=-/etc/sysconfig/docker-network
ExecStart=
ExecStart=/usr/bin/dockerd \$OPTIONS \\
          \$DOCKER_STORAGE_OPTIONS \\
          \$DOCKER_NETWORK_OPTIONS \\
          \$BLOCK_REGISTRY \\
          \$INSECURE_REGISTRY
LimitNOFILE=1048576
LimitNPROC=1048576
LimitCORE=infinity
MountFlags=slave
TimeoutStartSec=1min

[Install]
WantedBy=multi-user.target
EOF

cat > /etc/sysconfig/docker << EOF
OPTIONS='-g /data/paas/docker/data -H tcp://0.0.0.0:2375 -H unix:///var/run/docker.sock --storage-driver=overlay2 --storage-opt overlay2.override_kernel_check=1 --label dev=app --insecure-registry $sierac_registry'
EOF

stdoutlog " - restart docker.service"
systemctl daemon-reload
systemctl enable docker.service 2>&1
systemctl restart docker.service 2>&1


# 11.login docker register
stdoutlog " - login docker register"
docker login $sierac_registry -u $harbor_user -p $harbor_password

# 12.install sierac-rproxy 
rproxystat=`docker ps -a|grep rproxy|wc -l`

if [ $rproxystat -ge 1 ]
then
  stdoutlog " - stop and remove existing rproxy"
  docker stop rproxy && docker rm rproxy && rm -rf /data/wang/logs/rproxy && rm -rf /etc/nginx/conf.d/conf
fi

# 12.1 init install nginx configration
stdoutlog " - init nginx configration"
mkdir -p /data/wang/conf
touch /data/wang/conf/base.conf
cat > /data/wang/conf/base.conf << EOF
server {
    listen   81;
    server_name http://hlsjp.hao18.xyz;

    error_log  /data/nginx/logs/base.error.log warn;
    access_log  /data/nginx/logs/base.access.log  main;

    include conf.d/include/proxy.conf;
    include conf.d/include/error_page.conf;

    location / {
        root /data/nginx/html/custom/h5-hlqr;
        index index.html;
    }

    location ~* /upms/?(.*)$ {
      proxy_pass http://127.0.0.1:8081;
    }

    location ~* /dcms/?(.*)$ {
      proxy_pass http://127.0.0.1:8082;
    }
    location ~* /hlqr-api/?(.*)$ {
      proxy_pass http://127.0.0.1:8083;
    }
}
EOF
stdoutlog " - install rproxy"
docker pull $sierac_registry/wanggw/nginx:base
docker run --name=rproxy -d --log-driver none --net=host --privileged -p 80:80 -v /data/wang/nginx/html/custom/:/data/nginx/html/custom/ -v /data/wang/logs/rproxy/:/data/nginx/logs/ -v /data/wang/conf/:/etc/nginx/conf.d/conf/ --restart=unless-stopped -t $sierac_registry/wanggw/nginx:base

# 13.install mysql
mysqlstat=`docker ps -a|grep mysql|wc -l`

if [ $mysqlstat -ge 1 ]
then
  stdoutlog " - stop and remove existing mysql"
  docker stop mysql && docker rm mysql 
fi

stdoutlog " - install mysql"
docker pull registry.cn-hangzhou.aliyuncs.com/wanggw/mysql:8.0
docker run --name mysql8 -d --restart=unless-stopped --log-driver json-file --log-opt max-size=1000 --log-opt max-file=1 -p 3307:3306 -e MYSQL_ROOT_PASSWORD=hpjy1q2w3e -e TZ="Asia/Shanghai" -v /data/wang/mysql/data/:/var/lib/mysql registry.cn-hangzhou.aliyuncs.com/wanggw/mysql:8.0  --character-set-server=utf8 --collation-server=utf8_general_ci



stdoutlog ""
stdoutlog ""
stdoutlog "  *installed successfully"
stdoutlog "  ____                 _   ____              "
stdoutlog " / ___| ___   ___   __| | | __ ) _   _  ___  "
stdoutlog "| |  _ / _ \ / _ \ / _' | |  _ \| | | |/ _ \ "
stdoutlog "| |_| | (_) | (_) | (_| | | |_) | |_| |  __/ "
stdoutlog " \____|\___/ \___/ \__,_| |____/ \__, |\___| "
stdoutlog "                                 |___/       "