linux基础服务的一个小综合应用

之前学习了一段时间红帽子，为了检验自己的学习成果，给自己布置了一个综合实验如下：

rhel1,2,3分别为三台虚拟机

rhel 1 

172.25.40.1

创建用户user1指定家目录到/share/user1下id号为800，创建用户user2指定家目录到/share/user2目录下，ID号为1000
nis server ，共享user3     

web server，搭建lamp论坛，https

raid 5 ，三块磁盘 2+2+2g ；在其基础上创建逻辑卷lvm1初始1g，扩展到2g   

磁盘配额：user3 ，500M

rhel 2 

172.25.40.4

dns server

nisclient

crontab：一小时提醒休息   

rhel 3

172.25.40.3

dhcp server

辅助dns   

接下来贴上我所有的配置过程和相关配置文档

先做dhcp分配地址，方便用crt终端操作

dhcp 


    mount /dev/sr0 /mnt
    vim /etc/yum.repos.d/rhel-source.repo 
    yum clean all
    yum install dhcp* -y
    vim /etc/dhcp/dhcpd.conf 


ddns-update-style interim;
ignore client-updates;
subnet 172.25.40.0 netmask 255.255.255.0 {
option routers 172.25.40.254;
option subnet-mask 255.255.255.0;
option domain-name-servers 172.25.40.4;
range dynamic-bootp 172.25.40.1 172.25.40.20;
default-lease-time 21600;
max-lease-time 43200;
}


   setenforce 0
   /etc/init.d/iptables stop
   /etc/init.d/dhcpd restart




lamp  


   mount /dev/sr0 /mnt
   vim /etc/yum.repos.d/rhel-source.repo 
   yum clean all
   yum install mysql-server httpd php php-mysql lrzsz -y
   setenforce 0
   /etc/init.d/iptables stop
   /etc/init.d/httpd start
   /etc/init.d/mysqld start
   mysqladmin -u root password redhat
   mysql -uroot -predhat
mysql> create database bbs;
mysql> quit
   rz
   mv Discuz_X2.5_SC_UTF8.zip /var/www/html/
   cd /var/www/html/ 
   unzip Discuz_X2.5_SC_UTF8.zip 
   rm -rf Discuz_X2.5_SC_UTF8.zip 
   cd upload/
   chmod 777 config/ data/ uc* -R
   mkdir /server
   vim /server/index.html
   chcon -t httpd_sys_content_t /server -R
   ll -Z /server/
   vim /var/www/html/index.html
   vim /etc/httpd/conf/httpd.conf 


NameVirtualHost 172.25.40.1:80


<VirtualHost 172.25.40.1:80>
    ServerAdmin [e-mail]
    DocumentRoot /var/www/html
    ServerName haha.arsenal.com
    ErrorLog logs/dummy-host.example.com-error_log
    CustomLog logs/dummy-host.example.com-access_log common
</VirtualHost>


<VirtualHost 172.25.40.1:80>
    ServerAdmin [e-mail]
    DocumentRoot /server
    ServerName heihei.arsenal.com
    ErrorLog logs/dummy-host.example.com-error_log
    CustomLog logs/dummy-host.example.com-access_log common
</VirtualHost>


<VirtualHost 172.25.40.1:80>
    ServerAdmin [e-mail]
    DocumentRoot /var/www/html/upload
    ServerName bbs.arseanl.com
    ErrorLog logs/dummy-host.example.com-error_log
    CustomLog logs/dummy-host.example.com-access_log common
</VirtualHost>


   /etc/init.d/httpd restart



dns


      mount /dev/sr0 /mnt
      vim /etc/yum.repos.d/rhel-source.repo 
      yum install bind* -y
      hostname bzo.arseanl.com
      vim /etc/hosts
      vim /etc/sysconfig/network
      hostname 
      vim /etc/named.conf 


options {
        listen-on port 53 { 172.25.40.4; };
        directory       "/var/named";
        dump-file       "/var/named/data/cache_dump.db";
        statistics-file "/var/named/data/named_stats.txt";
        memstatistics-file "/var/named/data/named_mem_stats.txt";
        allow-query     { any; };
        allow-query-cache     { any; };
        recursion yes;
};


logging {
        channel default_debug {
                file "data/named.run";
                severity dynamic;
        };
};


zone "." IN {
        type hint;
        file "named.ca";
};


zone "arsenal.com." IN {
        type master;
        file "arsenal.com.zone";
};


     vim /var/named/arsenal.com.zone


$TTL 100D
@               IN SOA bzo.arseanl.com. bzo.arsenal.com.(
                                        201407 ;
                                        5m     ;
                                        15m    ;
                                        1W     ;
                                        3H)    ;
@               IN NS  bzo.arseanl.com.
ns              IN A   172.25.40.4
bbs             IN A   172.25.40.1
haha            IN A   172.25.40.1
heihei          IN A   172.25.40.1


     vim /etc/resolv.conf 
     /etc/init.d/iptables stop
     setenforce 1
     chmod 755 /etc/named.conf 
     chmod 755 /var/named/arsenal.com.zone 
     /etc/init.d/named start





https


     yum install mod_ssl -y
     cd /etc/pki/tls/certs/
     make httpd.crt
     vim /etc/httpd/conf.d/ssl.conf 


SSLCertificateFile /etc/pki/tls/certs/httpd.crt
SSLCertificateKeyFile /etc/pki/tls/certs/httpd.key


     /etc/init.d/httpd restart
     chkconfig httpd on
     vim /etc/httpd/conf.d/ssl.conf 


SSLPassPhraseDialog  builtin
SSLPassPhraseDialog  exec:/etc/pass.sh


     vim /etc/pass.sh
     . /etc/pass.sh 
     chmod 755 /etc/pass.sh 
     chcon -t httpd_sys_content_t /etc/pass.sh





useradd


     mkdir /share
     useradd -d /share/user1 -u 800 user1
     useradd -d /share/user2 -u 1000 user2





nisserver


     yum install ypserv -y
     mkdir /nishome
     useradd -d /nishome/user3 -u 1200 user3
     passwd user3
     vim /etc/sysconfig/network


NISDOMIAN=nis.com


     nisdomainname nis.com
     nisdomainname
     echo "/bin/nisdomainname nis.com" >> /etc/rc.local 
     /etc/init.d/ypserv start
     /usr/lib64/yp/ypinit -m
     /etc/init.d/ypserv restart

     chkconfig ypserv on

     vim /etc/exports 

/nishome *(rw)


     /etc/init.d/nfs start
     chkconfig nfs on




nisclient


     setenforce 0
     /etc/init.d/iptables stop
     /etc/init.d/rpcbind restart
     /etc/init.d/ypbind restart
     vim /etc/auto.master 


/nishome   /etc/auto.nishome


     vim /etc/auto.nishome


*       -fstype=nfs     172.25.40.1:/nishome/&
user1   -fstype=nfs     172.25.40.1:/nishome/user1


     /etc/init.d/autofs restart
     su - user3





raid5


    fdisk /dev/sdb
    fdisk /dev/sdc
    fdisk /dev/sdd
    mknod /dev/md1 b 9 1
    mdadm -C /dev/md1 -l 5 -n 3 /dev/sdb1 /dev/sdc1 /dev/sdd1
    mdadm -D /dev/md1
    mkfs.ext4 /dev/md1
    mkdir /raid
    mount /dev/md1 /raid
    mdadm -Ds
    vim /etc/mdadm.conf


ARRAY /dev/md1 metadata=1.2 name=localhost.localdomain:1 UUID=187512d4:e197e682:98853ad6:e18ae7a6


    vim /etc/fstab 


/dev/md1                /raid                   ext4    defaults        0 0




lvm


    fdisk /dev/md1
    partx -a /dev/md1
    mdadm -D /dev/md1p1
    umount /dev/md1
    pvcreate /dev/md1p1
    vgcreate vg1 /dev/md1p1
    lvcreate -L 1G vg1 -n lvm1
    mkfs.ext4 /dev/vg1/lvm1 
    mkdir /mnt/lvm1
    mount /dev/vg1/lvm1 /mnt/lvm1
    pvdisplay 
    vgdisplay 
    lvdisplay 
    df -h
    umount /mnt/lvm1
    e2fsck -f /dev/vg1/lvm1 
    lvextend -L 2G /dev/vg1/lvm1 
    resize2fs /dev/vg1/lvm1 
    mount /dev/vg1/lvm1 /mnt/lvm1





磁盘配额


    mount -o remount,usrquota,grpquota /dev/vg1/lvm1 
    mount
    setenforce 0
    quotacheck -cumg /dev/vg1/lvm1 
    quotaon /dev/vg1/lvm1 
    edquota user3
    chmod 777 /mnt/lvm1
    su - user3


[user3@localhost ~]$ cd /mnt/lvm1
[user3@localhost lvm1]$ dd if=/dev/zero of=file bs=1M count=450





提醒
crontab -e
* */1 * * * wall "you'd better take a rest."
     crontab -l
     /etc/init.d/crond restart






辅助dns


     vim /etc/named.conf 


zone "arsenal.com." IN {
        type master;
        file "arsenal.com.zone";
        allow-transfer { 172.25.40.3; };
    allow-update { 172.25.40.3; };
};


     vim /etc/resolv.conf 


search arsenal.com
nameserver 172.25.40.4
nameserver 172.25.40.3




     /etc/init.d/named restart




辅助dns配置


     yum install bind* -y
     vim /etc/named.conf 


options {
        listen-on port 53 { 172.25.40.3; };
        directory       "/var/named";
        dump-file       "/var/named/data/cache_dump.db";
        statistics-file "/var/named/data/named_stats.txt";
        memstatistics-file "/var/named/data/named_mem_stats.txt";
        allow-query     { any; };
        allow-query-cache    { any; };
        recursion yes;
};


logging {
        channel default_debug {
                file "data/named.run";
                severity dynamic;
        };
};


zone "." IN {
        type hint;
        file "named.ca";
};




zone "arsenal.com." IN {
        type slave;
        file "arsenal.com.zone";
        masters { 172.25.40.4; };
};


     touch /var/named/arsenal.com.zone
     setenforce 0
     /etc/init.d/iptables stop
     vim /etc/resolv.conf 


nameserver 172.25.40.4
nameserver 172.25.40.3


     /etc/init.d/named restart
     dig haha.arsenal.com