虚拟机基础优化

1.虚拟机基础优化

1. 安装操作系统
2. 关闭selinux

[root@localhost ~]# sed -i '7c SELINUX=disabled' /etc/selinux/config
[root@localhost ~]# setenforce 0

3. 关闭防火墙

[root@localhost ~]# systemctl stop firewalld
[root@localhost ~]# systemctl disable firewalld

4. 修改yum源

[root@localhost ~]# curl -o /etc/yum.repos.d/CentOS-Base.repo http://mirrors.aliyun.com/repo/Centos-7.repo
[root@localhost ~]# curl -o /etc/yum.repos.d/epel.repo http://mirrors.aliyun.com/repo/epel-7.repo

5. 修改文件最大描述符

[root@localhost ~]# vi /etc/security/limits.conf

6. 安装常用的软件

[root@localhost ~]# yum -y install net-tools vim tree lrzsz  wget unzip telnet bash-completion bash-completion-extra

7. 关闭neteorkmanger

[root@localhost ~]# systemctl stop NetworkManager
[root@localhost ~]# systemctl disabled NetworkManager

8. 添加一张网卡

[root@localhost ~]# cp /etc/sysconfig/network-scripts/ifcfg-eth0 /etc/sysconfig/network-scripts/ifcfg-eth1

9. 修改网卡配置

[root@localhost ~]# vim /etc/sysconfig/network-scripts/ifcfg-eth0
[root@localhost ~]# vim /etc/sysconfig/network-scripts/ifcfg-eth1

---

2.backup服务器优化

1. 安装rsync

[root@backup ~]# yum -y install rsync

2. 配置

[root@backup ~]# vim  /etc/rsyncd.conf
uid = www
gid = www
port = 873
fake super = yes
use chroot = no
max connections = 200
timeout = 600
ignore errors
read only = false
list = false
auth users = rsync_backup
secrets file = /etc/rsync.passwd

[backup]        
path = /backup
[data]
path = /data

3. 创建虚拟用户

[root@backup ~]# groupadd -g666 www
[root@backup ~]# useradd -u666 -g666 -M -s /sbin/nologin www
[root@backup ~]# id www
uid=666(www) gid=666(www) groups=666(www)

4. 创建密码文件

[root@backup ~]# cat /etc/rsync.passwd
rsync_backup:123456

5. 修改密码文件权限位600

[root@backup ~]# chmod 600 /etc/rsync.passwd

6. 创建backup目录,授权属主属组为www

[root@backup ~]# mkdir /backup
[root@backup ~]# mkdir /data
[root@backup ~]# chown -R www.www /backup
[root@backup ~]# chown -R www.www /data

7. 启动rsync服务

[root@backup ~]# systemctl start rsyncd
[root@backup ~]# systemctl enable rsyncd

---

3.nfs服务器的优化

1. 安装rsync服务
2. 创建虚拟用户
3. 创建密码文件
4. 修改密码文件权限位600
5. 安装nfs服务

[root@nfs ~]# yum -y install nfs-utils

6. 配置NFS服务

[root@nfs ~]# cat /etc/exports
/data 172.16.1.0/24(rw,sync,all_squash,anonuid=666,anongid=666)

7. 创建data目录,并授权位属组属主为666的虚拟用户

[root@nfs ~]# groupadd -g666 www
[root@nfs ~]# useradd -u666 -g666 -M -s /sbin/nologin www
[root@nfs ~]# id www
uid=666(www) gid=666(www) groups=666(www)
[root@nfs ~]# mkdir /data
[root@nfs ~]# chown -R www.www /data

8. 启动nfs服务

[root@nfs ~]# systemctl start nfs
[root@nfs ~]# systemctl enable nfs

9. 启动nfs服务后,检查配置文件中是否有内容

[root@nfs ~]# cat /var/lib/nfs/etab 
/data	172.16.1.0/24(rw,sync,wdelay,hide,nocrossmnt,secure,root_squash,all_squash,no_subtree_check,secure_locks,acl,no_pnfs,anonuid=666,anongid=666,sec=sys,rw,secure,root_squash

web01客户端配置

1. 安装nfs服务,不运行
2. 查看服务端共享的目录

[root@web01 ~]# showmount -e 172.16.1.31
Export list for 172.16.1.31:
/data 172.16.1.0/24

3. 安装httpd php

 [root@web01 ~]# yum -y install httpd php

4. 启动httpd服务

[root@web01 ~]# systemctl start httpd

5. 检查端口 默认为80端口

[root@web01 ~]# netstat -tnulp

6. 挂载

[root@web01 ~]#mount -t nfs 172.16.1.31:/data /var/www/html

7. 上传代码到/var/www/html下

---

3.sersync实时复制同步数据

1.作用:==实现对服务器实时复制,实时同步数据=

• 1.下载sersync
• 2.解压到/usr/local
• 3.修改配置文件

[root@nfs ~]#vim /usr/local/serync/confxml.xml 

• 4)修改为以下

<sersync>
        <localpath watch="/data">
            <remote ip="172.16.1.41" name="data"/>
<rsync>
            <commonParams params="-az"/>
            <auth start="true" users="rsync_backup" passwordfile="/etc/rsync.passwd"/>

• 4)启动服务

/usr/local/sersync/sersync2 -dro /usr/local/sersync/confxml.xml

1.如果NFS服务挂掉,重新记载到backup服务器的/data目录

• 1)在backup服务器上安装nfs服务

[root@backup ~]#yum -y install nfs-utils

• 2)修改配置文件

[root@backup ~]#vim /etc/exports
/data 172.16.1.0/24(rw,sync,all_squash,anonuid=666,anongid=666)

• 3)检查

[root@backup ~]#cat /var/lib/nfs/etab
/data	172.16.1.0/24(rw,sync,wdelay,hide,nocrossmnt,secure,root_squash,all_squash,no_subtree_check,secure_locks,acl,no_pnfs,anonuid=666,anongid=666,sec=sys,rw,secure,root_squash,all_squash

• 4)客户端测试

[root@web01 ~]#showmount -e 172.16.1.41
Export list for 172.16.1.41:
/data 172.16.1.0/24

• 5)挂载

[root@web01 ~]#mount -t nfs 172.16.1.41:/data /mnt