highlight: androidstudio
theme: fancy
103和104
安装包 go apt install haproxy keepalived -y
103 配置文件 ```go cat /etc/haproxy/haproxy.cfg
内容如下
global maxconn 100000
编译装
chroot /usr/local/haproxy
uid 99 gid 99 daemon nbproc 1 pidfile /run/haproxy.pid
socket文件
stats socket /var/lib/haproxy/haproxy.sock mode 600 level admin
log 127.0.0.1 local3 info
defaults option http-keep-alive option forwardfor maxconn 100000 mode http timeout connect 300000ms timeout client 300000ms timeout server 300000ms
listen stats mode http bind 0.0.0.0:9999 stats enable log global stats uri /haproxy-status #登录账号:密码 stats auth haadmin:q1w2e3r4t5 启动
go systemctl restart haproxy systemctl enable haproxy 查看端口是否启动
go ss -ntlp| grep 9999 ```
```go
搜索
find / -name keepalived.conf
拷贝
cp /usr/share/doc/keepalived/samples/keepalived.conf.vrrp /etc/keepalived/keepalived.conf
配置
cat /etc/keepalived/keepalived.conf ! Configuration File for keepalived
globaldefs { notificationemail { acassen } notificationemailfrom Alexandre.Cassen@firewall.loc smtpserver 192.168.200.1 smtpconnecttimeout 30 routerid LVS_DEVEL }
vrrpinstance VI1 { state MASTER interface eth0 garpmasterdelay 10 smtpalert virtualrouterid 51 priority 100 advertint 1 authentication { authtype PASS authpass 1111 } virtual_ipaddress { 192.168.37.240 dev eth0 label eth0:0 } } ```
```go
重启服务
systemctl restart keepalived systemctl enable keepalived 网卡信息
go ifconfig eth0:0 eth0:0: flags=4163
mtu 1500 inet 192.168.37.240 netmask 255.255.255.255 broadcast 0.0.0.0 ether 00:0c:29:f1:73:8f txqueuelen 1000 (Ethernet)
拷贝
go scp /etc/keepalived/keepalived.conf 192.168.37.104:/etc/keepalived/
**104**
go
修改下面两项
vim /etc/keepalived/keepalived.conf state BACKUP priority 80
重启服务
systemctl restart keepalived systemctl enable keepalived ``` 103
```go
内容如下
cat /etc/haproxy/haproxy.cfg
global maxconn 100000
编译装
chroot /usr/local/haproxy
uid 99 gid 99 daemon nbproc 1 pidfile /run/haproxy.pid
socket文件
stats socket /var/lib/haproxy/haproxy.sock mode 600 level admin log 127.0.0.1 local3 info
defaults option http-keep-alive option forwardfor maxconn 100000 mode http timeout connect 300000ms timeout client 300000ms timeout server 300000ms
listen stats mode http bind 0.0.0.0:9999 stats enable log global stats uri /haproxy-status
登录账号:密码
stats auth haadmin:q1w2e3r4t5
监听端口
listen web_port bind 0.0.0.0:80 mode http log global server 192.168.37.105 192.168.37.105:8080 check inter 3000 fall 2 rise 5 server 192.168.37.106 192.168.37.106:8080 check inter 3000 fall 2 rise 5 拷贝、创建目录、重启服务
scp /etc/haproxy/haproxy.cfg 192.168.37.104:/etc/haproxy/ mkdir -p /var/lib/haproxy systemctl restart haproxy ``` 103和104
开启路由转发、监听地址必须打开
vim /etc/sysctl.conf net.ipv4.ip_forward = 1 net.ipv4.ip_nonlocal_bind = 1
生效
sysctl -p
104
重启服务
systemctl restart haproxy systemctl enable haproxy
服务状态页面
105和106
配置JAVA环境
上传JAVA包 cd /usr/local/src tar xvf jdk-8u351-linux-x64.tar.gz
软链接 ln -sv /usr/local/src/jdk1.8.0_351 /usr/local/jdk
JAVA环境 ```
结尾添加
vim /etc/profile ... export JAVAHOME=/usr/local/jdk export PATH=$JAVAHOME/bin:$JAVAHOME/jre/bin:$PATH export CLASSPATH=.$CLASSPATH:$JAVAHOME/lib:$JAVAHOME/jre/lib:$JAVAHOME/lib/tools.jar 使JAVA环境变量生效
source /etc/profile 查看JAVA版本
java -version 创建目录,在里面部署TOMCAT
mkdir /apps 上传[TOMCAT软件包](https://share.weiyun.com/BSxZcgg4)
cd /apps/ tar xvf apache-tomcat-8.5.42.tar.gz 软链接
ln -sv /apps/apache-tomcat-8.5.42 /apps/tomcat 创建压缩包目录
mkdir /data/tomcat/tomcatappdir -p 创建解压后目录
mkdir /data/tomcat/tomcatwebdir 放置tomcat应用程序目录
mkdir /data/tomcat/tomcat_webapps 修改此项的目录指向信息
vim /apps/tomcat/conf/server.xml
```
cd /data/tomcat/ mkdir tomcat_webdir/app
105 ```
创建页面
vim tomcat_webdir/app/index.html web1 app 192.168.37.105 <-- **106**
创建页面
vim tomcat_webdir/app/index.html web1 app 192.168.37.106 <-- ``` 105和106
启动tomcat服务 /apps/tomcat/bin/catalina.sh start
ln -sv /data/tomcat/tomcat_webdir/app /data/tomcat/tomcat_webapps/
``` cd tomcat_webdir/
创建时间戳目录
mkdir app$(date +"%Y%m%d%H%M%S") **105**
cp app/index.html app20230215155640/
版本升级
vim app20230215155640/index.html web1 app 192.168.37.105 v2 <-- 停止tomcat
/apps/tomcat/bin/catalina.sh stop 删除软链接
rm -rf /data/tomcat/tomcatwebapps/app 软链接、连接到新版本
ln -sv /data/tomcat/tomcatwebdir/app20230215155640 /data/tomcat/tomcat_webapps/app 启动tomcat
/apps/tomcat/bin/catalina.sh start ``` 再次访问、信息变了
105和106
创建启动账号 ``` groupadd -g 2000 tomcat useradd -m -u 2000 -s /bin/bash -g tomcat tomcat
id tomcat uid=2000(tomcat) gid=2000(tomcat) groups=2000(tomcat) 给tomcat设置密码、此处与后面`免密钥认证`一致
passwd tomcat Enter new UNIX password: <--密码:1234.com Retype new UNIX password: <--密码:1234.com passwd: password updated successfully 停止tomcat
/apps/tomcat/bin/catalina.sh stop 递归修改属主属组权限
chown tomcat.tomcat /apps/* /data/tomcat/* -R ``` 上传脚本
添加权限 chmod a+x tomcat cp tomcat /etc/init.d/
切换到tomcat用户 su - tomcat
启动服务 /etc/init.d/tomcat start
103和104 systemctl restart haproxy
102
免密钥认证 ```
拷贝密钥到'tomcat'用户、密码:1234.com
ssh-copy-id tomcat@192.168.37.105 ssh-copy-id tomcat@192.168.37.106 此时可直接远程命令到105、106
ssh tomcat@192.168.37.106 "/etc/init.d/tomcat restart" ```
手动代码升级
102 ``` cd /opt/web1/
修改页面信息
vim index.html
Linux01 web1 v3
<--打包
tar -czvf app.tar.gz index.html
拷到后端服务器
scp app.tar.gz 192.168.37.105:/data/tomcat/tomcat_appdir ```
105
```
查看目录相关属性
ll /data/tomcat/tomcat_appdir
递归修改属主属组
chown tomcat.tomcat /data/tomcat/ -R
切换用户
su - tomcat cd /data/tomcat/tomcat_appdir/
mkdir /data/tomcat/tomcatwebdir/app$(date +"%Y%m%d_%H%M%S")
解压缩到指定文件
tar xvf app.tar.gz -C /data/tomcat/tomcatwebdir/app时间戳
停服务
/etc/init.d/tomcat stop
删除旧的软链接
rm -rf /data/tomcat/tomcat_webapps/app
连接新的软链接
ln -sv /data/tomcat/tomcatwebdir/app时间戳 /data/tomcat/tomcat_webapps/app
启动服务
/etc/init.d/tomcat start `` 浏览器访问
页面发生变化`、192.168.37.240/app