/
搜索到
51
篇与
的结果
-
Tacport堡垒机安装 Tacport堡垒机安装操作系统：RockyLinux 9.4堡垒机：tacport-server-4.0.6-preview.tar.gz数据库：mysql-5.7.44-1.el9.x86_64.rpm一、安装数据库：rpm -ivh mysql-5.7.44-1.el9.x86_64.rpm source /etc/profile.d/mysql.sh # 数据库初始密码为空 ### 直接回车 mysql -uroot -p二、创建Tacport数据库# 配置数据库root密码 mysql> grant all on *.* to 'root'@'localhost' identified by 'root@123'; Query OK, 0 rows affected, 2 warnings (0.00 sec) # 创建tacport数据库 mysql> create database tacport character set utf8 collate utf8_general_ci; Query OK, 1 row affected (0.00 sec) # 创建用户和密码并授权 mysql> grant all on tacport.* to 'tacport'@'127.0.0.1' identified by 'tacport'; Query OK, 0 rows affected, 1 warning (0.00 sec) # 刷新授权 mysql> flush privileges; Query OK, 0 rows affected (0.00 sec) mysql> select user,host from mysql.user; +---------------+-----------+ | user | host | +---------------+-----------+ | tacport | 127.0.0.1 | | mysql.session | localhost | | mysql.sys | localhost | | root | localhost | +---------------+-----------+ 4 rows in set (0.00 sec)三、安装redisdnf install -y redis四、安装 Tacporttar zxf tacport-server-4.0.6-preview.tar.gz cd tacport-server-4.0.6-preview # 执行install.sh bash install.sh五、配置文件编辑[root@rocky etc]# cat config.yaml # # TacPort Configuration / TacPort 配置文件 # # ======================================================================= # Important!!! Please change all value marked as "PLEASE-CHANGE-THIS" # 非常重要！！请修改所有标记为“PLEASE-CHANGE-THIS”的配置项！ # ======================================================================= # node_id: # an integer greater than 0, when deploying multiple nodes, ensure that the node_id are not duplicated, default to 1. # 一个大于0的整数，表明节点ID。部署多个节点是要确保各节点ID不重复。默认为 1。 # #node_id: 1 # node_addr: # address (IP or Domain) which user can access outside. # 此节点的外部访问地址(IP或域名) # node_addr: "192.168.10.4" # ======================================================================= # global settings / 全局设置 # ======================================================================= # mode: [test|release] # running mode, default to release. # 运行模式，默认为 release。 # #mode: "release" # log_level: [debug|verbose|info|warn|error] # log level, default to info. # 日志等级，默认为 info。 # #log_level: "info" # log_to_file: [yes|no] # save log into log-file or not, default to yes. # 是否要将日志输出到日志文件，默认为 yes。 # #log_to_file: yes # data_path: # path to save data, default to "{%EXEC_PATH%}/data". # 数据存储路径，默认为"{%EXEC_PATH%}/data"，其中 {%EXEC_PATH%} 为服务主程序所在路径 # #data_path: "{%EXEC_PATH%}/data" # log_path: # default to "{%DATA_PATH%}/log" # 日志文件存储路径，默认为"{%DATA_PATH%}/log"，其中，{%DATA_PATH%} 为数据存储路径 # #log_path: "{%DATA_PATH%}/log" # record_path: # default to "{%DATA_PATH%}/record" # 录像文件存储路径，默认为"{%DATA_PATH%}/record" # #record_path: "{%DATA_PATH%}/record" # default_language: [zh-Hans|zh-Hant|en-US] # use default language while no language specified, default to zh-Hans. # 默认语言，当未能根据环境检测到语言时，将使用此默认语言。默认为 zh-Hans。 # zh-Hans 简体中文 # zh-Hant 繁体中文--尚不支持 # en-US English # default_language: "zh-Hans" #------------------------------------------------------ # database configuration / 数据库配置 # MySQL/MariaDB/TiDB/... #------------------------------------------------------ # db_addr: # address of database, default to "127.0.0.1:3306" . # 数据库地址，默认为 "127.0.0.1:3306"。 db_addr: "127.0.0.1:3306" # db_user: database user / 数据库用户名 # db_user: "tacport" # db_name: database name / 数据库的库名 # db_name: "tacport" # db_pass: password of database / 数据库密码 # db_pass: "tacport" # secret_key: # key of encryption for secret data when save to database, no default value. # notice: you should write this secret_key down at a safe place. # if you lose this secret_key, your TacPort service can not use/migration/recover anymore. # 私密数据加密存放到数据库时所用的密钥，无默认值。 # 注意：您应当将此密钥记下来，并存放到一处安全所在。 # 如果您丢失了此密钥，您的 TacPort 服务将无法使用/迁移/恢复。 # secret_key: "root@123" # log_sql: [yes|no] # log every SQL statement or not, default to no. # be careful, turn this to yes could save private information into console or log file, use at your own risk. # on "release" mode, log_sql is disabled and always be "no". # 是否记录每一条SQL语句到日志中，默认为 no。 # 小心，SQL中可能包含私密信息，设置此配置项为 yes 可能会将私密信息输出到控制台或写入日志文件，请斟酌其中的风险. # 出于风险考虑，在"release"模式下，"log_sql"总是会被禁用。 # #log_sql: no #------------------------------------------------------ # redis configuration / redis 配置 #------------------------------------------------------ # redis_mode: [standalone|sentinel|cluster] # deployment mode of redis, default to standalone. # redis的部署模式，默认为 standalone。 # redis_mode: standalone # redis_master: # master name of redis instance group, for redis-sentinel mode only. # redis实例组的主节点名称，仅用于redis哨兵模式。 #redis_master: "" # redis_addr: # address of redis, should be one address, or multiple address split by commas. default to "127.0.0.1:6379" # redis地址，可以为单独地址，或者多个用逗号分割的redis地址。默认为 "127.0.0.1:6379" # e.g. / 示例 # standalone/单机模式: "127.0.0.1:6379" # sentinel/cluster/哨兵模式/集群模式: "192.168.0.2:6379, 192.168.0.3:6379, 192.168.0.4:6379" # redis_addr: "127.0.0.1:6379" # redis_pass: redis password / redis访问密码 # #redis_pass: "" # redis_index: # redis database index(0~15), ignored in redis-cluster mode, default to 0. # redis数据库编号(0~15)，在集群模式下此配置项被忽略。默认为0. # #redis_index: 0 # ================================================== # node services settings / 节点业务服务设置 # ================================================== # service: (api,ssh,rdp,vnc,telnet,...) # services available on this node, one or more of `api/ssh/rdp/vnc/telnet/...`, default to ["api"]. # 此节点承载的服务，可以为 `api/ssh/rdp/vnc/telnet/...` 之中的一个或多个，默认为 ["api"] 。 # # api: API service(including WEB-UI front-end) / API服务(含前端WEB-UI) # ssh: SSH/SFTP Proxy / SSH/SFTP转发服务 # rdp: Remote Desktop Protocol Proxy(under development) / 远程桌面RDP协议的转发服务(开发中) # vnc: Virtual Network Console Proxy(under development) / 虚拟远程控制台VNC协议的转发服务(开发中) # telnet: Telnet Proxy(under development) / Telnet远程协议转发服务(开发中) # service: [ "api" ] # -------------------------------------------------- # API services settings / API服务配置 # -------------------------------------------------- # api_instance: [1~16] # how many process to serve api, default to 1. # 运行api服务的实例数量，默认为 1。 # api_instance: 1 # api_listen_port: # user visit such port to access API service, default to 52100. # 监听端口，用户通过此端口访问api服务，默认为 52100。 # api_listen_port: 52100 # api_mapping_port: # used for containerized deployment, specifies the host port mapped to this api service port. default to 0 if the # host port is the same as the service listening port. # 映射端口，用于容器化部署时，指明映射到此api服务端口的宿主机端口。默认为0，表示宿主机端口与服务监听端口一致。 # #api_mapping_port: 0 # api_log_level: # log level, should be one of inherit/debug/verbose/info/warn/error, default to inherit. # inherit means use global log_level setting. # 日志等级，可以为 inherit/debug/verbose/info/warn/error 之一，默认为 inherit。 # inherit 表示继承全局设置中的日志等级。 # api_log_level: inherit # api_log_http: [yes|no] # log every HTTP request or not, default to no. # 是否记录每一个HTTP请求，默认为 no。 # api_log_http: no # api_use_builtin_web: [yes|no] # provide web-ui front-end by this API service or not, default to yes. # 是否使用内建的前端WEB-UI服务，默认为 yes。 # api_use_builtin_web: yes # api_web_path: # only available when api_use_builtin_web set, specify the path to the front-end files, default to "{%EXEC_PATH%}/web". # 仅当设置了 api_use_builtin_web 时有效，指定前端文件的路径，默认为 "{%EXEC_PATH%}/web"。 # api_web_path: "{%EXEC_PATH%}/web" # -------------------------------------------------- # SSH proxy settings / SSH协议转发服务配置 # -------------------------------------------------- # ssh_instance: [1~16] # how many process to serve ssh proxy, default to 1. # 运行SSH协议转发服务的实例数量，默认为 1。 # #ssh_instance: 1 # ssh_listen_port: # user visit such port to access ssh proxy service, default to 52101. # 监听端口，用户通过此端口访问ssh协议转发服务，默认为 52101。 # #ssh_listen_port: 52101 # ssh_mapping_port: # used for containerized deployment, specifies the host port mapped to this ssh proxy service port. default to 0 if the # host port is the same as the service listening port. # 映射端口，用于容器化部署时，指明映射到此ssh协议转发服务端口的宿主机端口。默认为0，表示宿主机端口与服务监听端口一致。 # #ssh_mapping_port: 0 # # #ssh_log_level: inherit六、访问web界面http://ip:52100/ -
PostgreSQL 17.0 编译安装 PostgreSQL 17.0 编译安装OS: CentOS 7DB: PostgreSQL 17.01. 关闭默认防火墙 firewallsystemctl stop firewalld.service #停止firewall systemctl disable firewalld.service #禁止firewall开机启动 systemctl mask firewalld systemctl stop firewalld dnf remove firewalld2.安装iptables防火墙yum install -y iptables-services3.编辑iptables配置文件vim /etc/sysconfig/iptables # sample configuration for iptables service # you can edit this manually or use system-config-firewall # please do not ask us to add additional ports/services to this default configuration *filter :INPUT ACCEPT [0:0] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT [0:0] -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT -A INPUT -p icmp -j ACCEPT -A INPUT -i lo -j ACCEPT -A INPUT -p tcp -m state --state NEW -m tcp --dport 22 -j ACCEPT -A INPUT -p tcp -m state --state NEW -m tcp --dport 5432 -j ACCEPT -A INPUT -j REJECT --reject-with icmp-host-prohibited -A FORWARD -j REJECT --reject-with icmp-host-prohibited COMMIT #最后重启防火墙使配置生效 systemctl restart iptables.service #设置防火墙开机启动 systemctl enable iptables.service #重启防火墙 /usr/libexec/iptables/iptables.init restart 4.关闭SELINUXvim /etc/selinux/config SELINUX=disabled # 使配置生效 setenforce 05.安装依赖包yum install -y uuid uuid-devel libuuid libuuid-devel python3 python3-develyum install -y tcl tcl-devel perl-ExtUtils-Embed readline-devel zlib-devel pam-devel libxml2-devel libxslt-devel openldap-devel python-devel gcc-c++ openssl-devel cmake gcc* readline-devel icu libicu-devel6. 编译PostgreSQL# 创建目录 mkdir -p /usr/local/pgsql mkdir -p /usr/local/pgsql/data mkdir -p /usr/local/pgsql/log #解压postgreSQL 17.0 tar zxf postgresql-17.0.tar.gz #编译 cd postgresql-17.0 ./configure --prefix=/usr/local/pgsql --with-openssl --with-pgport=5432 --with-tcl --with-perl --with-python --with-libxml --with-libxslt --with-ossp-uuid --with-pam --with-ldap make -j 8 && make install7.创建用户组groupadd postgres useradd -g postgres postgres8.配置权限chown -R postgres:postgres /usr/local/pgsql chown -R postgres:postgres /usr/local/pgsql/data chown -R postgres:postgres /usr/local/pgsql/log chmod -R 700 /usr/local/pgsql/log9.配置环境变量cat >> ~/.bash_profile <<"EOF" export LANG=en_US.UTF-8 export PS1="[\u@\h \W]\$ " export PGPORT=5432 export PGDATA=/usr/local/pgsql/data export PGHOME=/usr/local/pgsql export LD_LIBRARY_PATH=$PGHOME/lib:/lib64:/usr/lib64:/usr/local/lib64:/lib:/usr/lib:/usr/local/lib:$LD_LIBRARY_PATH export PATH=$PGHOME/bin:$PATH:. export DATE=`date +"%Y%m%d%H%M"` export MANPATH=$PGHOME/share/man:$MANPATH export PGHOST=$PGDATA export PGUSER=postgres export PGDATABASE=postgres EOFsource ~/.bash_profile10.初始化数据库# 切换到postgres用户 su - postgres #初始化数据库 /usr/local/pgsql/bin/initdb -D /usr/local/pgsql/data --encoding=UTF8 --lc-collate=en_US.UTF-8 --lc-ctype=en_US.UTF-811.启动数据库#启动 /usr/local/pgsql/bin/pg_ctl -D /usr/local/pgsql/data -l logfile start #停止 /usr/local/pgsql/bin/pg_ctl -D /usr/local/pgsql/data -l logfile stop #重启 /usr/local/pgsql/bin/pg_ctl -D /usr/local/pgsql/data -l logfile restart #查看状态 /usr/local/pgsql/bin/pg_ctl -D /usr/local/pgsql/data -l logfile status
-
openEuler 24.03 LTS SP1安装XFCE图形界面 openEuler 24.03 LTS SP1安装XFCE图形界面XFCE是一款轻量级 Linux 桌面，当前版本已经将所有部件从 GTK2 更新到 GTK3，从D-Dbus Glib更新到GDBus，大部分组件支持GObject Introspection（简称 GI，用于产生与解析 C 程序库 API 元信息，以便于动态语言（或托管语言）绑定基于 C + GObject 的程序库）。优化用户体验，加入新特性，并修补大量BUG。与其它UI界面（GNOME、KDE）相比，XFCE占用的内存和CPU使用量非常小，给用户带来亲切和高效的使用体验。XFCE支持x86_64和aarch64两种架构。安装时，建议新建一个管理员用户。1.下载openEuler ISO镜像并安装系统，更新软件源（需要配置Everything源，以及EPOL源，下面命令是在最小化安装系统的情况下安装XFCE）sudo dnf update2.安装字库sudo dnf install dejavu-fonts liberation-fonts gnu-*-fonts google-*-fonts3.安装Xorgsudo dnf install xorg-*4.安装XFCE及组件sudo dnf install xfwm4 xfdesktop xfce4-* xfce4-*-plugin network-manager-applet5.安装登录管理器sudo dnf install lightdm lightdm-gtk6.设置默认桌面为XFCE 通过root权限用户设置echo 'user-session=xfce' >> /etc/lightdm/lightdm.conf.d/60-lightdm-gtk-greeter.conf7.使用登录管理器登录XFCEsudo systemctl start lightdm登录管理器启动后，在右上角左侧选择"xfce-session" 输入用户名、密码登录8.设置开机自启动图形界面sudo systemctl enable lightdm sudo systemctl set-default graphical.target9.如果默认安装了gdm，建议停用gdmsystemctl disable gdm10.重启验证sudo reboot避坑在安装过程中，提示找不到以下：xfwm4 xfdesktop xfce4-* 软件包。如果忽略继续安装，重启系统进入登录界面时会提示session错误原因是：在官方镜像源中以上软件包缺失。解决方法：修改镜像源为：#generic-repos is licensed under the Mulan PSL v2. #You can use this software according to the terms and conditions of the Mulan PSL v2. #You may obtain a copy of Mulan PSL v2 at: # http://license.coscl.org.cn/MulanPSL2 #THIS SOFTWARE IS PROVIDED ON AN "AS IS" BASIS, WITHOUT WARRANTIES OF ANY KIND, EITHER EXPRESS OR #IMPLIED, INCLUDING BUT NOT LIMITED TO NON-INFRINGEMENT, MERCHANTABILITY OR FIT FOR A PARTICULAR #PURPOSE. #See the Mulan PSL v2 for more details. [OS] name=OS baseurl=https://mirrors.ustc.edu.cn/openeuler/openEuler-24.03-LTS-SP1/OS/$basearch/ metalink=https://mirrors.ustc.edu.cn/openeuler/metalink?repo=$releasever/OS&arch=$basearch metadata_expire=1h enabled=1 gpgcheck=1 gpgkey=https://mirrors.ustc.edu.cn/openeuler/openEuler-24.03-LTS-SP1/OS/$basearch/RPM-GPG-KEY-openEuler [everything] name=everything baseurl=https://mirrors.ustc.edu.cn/openeuler/openEuler-24.03-LTS-SP1/everything/$basearch/ metalink=https://mirrors.ustc.edu.cn/openeuler/metalink?repo=$releasever/everything&arch=$basearch metadata_expire=1h enabled=1 gpgcheck=1 gpgkey=https://mirrors.ustc.edu.cn/openeuler/openEuler-24.03-LTS-SP1/everything/$basearch/RPM-GPG-KEY-openEuler [EPOL] name=EPOL baseurl=https://mirrors.ustc.edu.cn/openeuler/openEuler-24.03-LTS/EPOL/main/$basearch/ metalink=https://mirrors.ustc.edu.cn/openeuler/metalink?repo=$releasever/EPOL/main&arch=$basearch metadata_expire=1h enabled=1 gpgcheck=1 gpgkey=https://mirrors.ustc.edu.cn/openeuler/openEuler-24.03-LTS/OS/$basearch/RPM-GPG-KEY-openEuler [debuginfo] name=debuginfo baseurl=https://mirrors.ustc.edu.cn/openeuler/openEuler-24.03-LTS-SP1/debuginfo/$basearch/ metalink=https://mirrors.ustc.edu.cn/openeuler/metalink?repo=$releasever/debuginfo&arch=$basearch metadata_expire=1h enabled=1 gpgcheck=1 gpgkey=https://mirrors.ustc.edu.cn/openeuler/openEuler-24.03-LTS-SP1/debuginfo/$basearch/RPM-GPG-KEY-openEuler [source] name=source baseurl=https://mirrors.ustc.edu.cn/openeuler/openEuler-24.03-LTS-SP1/source/ metalink=https://mirrors.ustc.edu.cn/openeuler/metalink?repo=$releasever&arch=source metadata_expire=1h enabled=1 gpgcheck=1 gpgkey=https://mirrors.ustc.edu.cn/openeuler/openEuler-24.03-LTS-SP1/source/RPM-GPG-KEY-openEuler [update] name=update baseurl=https://mirrors.ustc.edu.cn/openeuler/openEuler-24.03-LTS-SP1/update/$basearch/ metalink=https://mirrors.ustc.edu.cn/openeuler/metalink?repo=$releasever/update&arch=$basearch metadata_expire=1h enabled=1 gpgcheck=1 gpgkey=https://mirrors.ustc.edu.cn/openeuler/openEuler-24.03-LTS-SP1/OS/$basearch/RPM-GPG-KEY-openEuler [update-source] name=update-source baseurl=https://mirrors.ustc.edu.cn/openeuler/openEuler-24.03-LTS-SP1/update/source/ metalink=https://mirrors.ustc.edu.cn/openeuler/metalink?repo=$releasever/update&arch=source metadata_expire=1h enabled=1 gpgcheck=1 gpgkey=https://mirrors.ustc.edu.cn/openeuler/openEuler-24.03-LTS-SP1/source/RPM-GPG-KEY-openEuler
-
欧拉系统openEuler 25.03安装Zabbix7.2.7 欧拉系统openEuler 25.03安装Zabbix7.2.71. 安装依赖dnf -y install telnet net-tools python-paramiko dejavu-sans-fonts python-setuptools sendmail mailx net-snmp net-snmp-devel net-snmp-utils freetype-devel libpng-devel perl unbound OpenIPMI unixODBC libevent-devel mysql-devel libxml2-devel libssh2-devel OpenIPMI-devel openldap-devel curl-devel unixODBC-devel wget gcc gcc-c++ go2. 添加用户groupadd --system zabbix useradd --system -g zabbix -s /sbin/nologin -c "Zabbix Monitoring System" zabbix3. 导入数据mysql -uzabbix -pzabbix zabbix < schema.sql mysql -uzabbix -pzabbix zabbix < images.sql mysql -uzabbix -pzabbix zabbix < data.sql4. 编译安装 7.x./configure prefix=/usr/local/zabbix --enable-server --enable-agent --with-mysql --enable-ipv6 --with-net-snmp --with-libcurl --with-libxml2 --with-openipmi --with-ares5. 配置启动脚本cp misc/init.d/fedora/core/zabbix_server /etc/rc.d/init.d/ cp misc/init.d/fedora/core/zabbix_agentd /etc/rc.d/init.d/ chmod +x /etc/rc.d/init.d/zabbix_server chmod +x /etc/rc.d/init.d/zabbix_agentd6. 配置web界面复制到WEB服务器cp -R /root/zabbix-7.2.7/ui/* /var/html/zabbix/输入访问地址安装zabbixhttp://ip:port/zabbix/默认账号: Admin 密码 zabbix
-
欧拉系统openEuler 25.03安装Oracle 19c 欧拉系统openEuler 25.03安装Oracle 19c数据库：oracle-database-ee-19c-1.0-1.x86_64.rpm oracle-database-preinstall-19c-1.0-1.el7.x86_64 compat-libcap1-1.10-1.x86_64.rpm compat-libstdc++-33-3.2.3-61.x86_64安装依赖dnf install -y bc binutils elfutils-libelf elfutils-libelf-devel glibc glibc-devel ksh libaio libaio-devel libXrender libX11 libXau libXi libXtst libgcc libnsl librdmacm libstdc++ libstdc++-devel libxcb libibverbs make policycoreutils policycoreutils-python-utils smartmontools sysstat psmisc lsof libnsl libnsl2 vim net-tools openssl-devel rpm -vih compat-libcap1-1.10-7.el7.x86_64.rpm compat-libstdc++-33-3.2.3-72.el7.x86_64.rpm rm -rf compat-libcap1-1.10-7.el7.x86_64.rpm compat-libstdc++-33-3.2.3-72.el7.x86_64.rpm创建用户组groupadd oinstall groupadd dba groupadd oper useradd -g oinstall -G dba,oper oracle配置系统参数/etc/sysctl.conffs.aio-max-nr = 1048576 fs.file-max = 6815744 kernel.shmall = 2097152 kernel.shmmax = 536870912 kernel.shmmni = 4096 kernel.sem = 250 32000 100 128 net.ipv4.ip_local_port_range = 9000 65500 net.core.rmem_default = 262144 net.core.rmem_max = 4194304 net.core.wmem_default = 262144 net.core.wmem_max = 1048576 配置系统限制参数 /etc/security/limits.conforacle soft nproc 2047 oracle hard nproc 16384 oracle soft nofile 1024 oracle hard nofile 65536 oracle soft stack 10240 oracle soft core unlimited oracle hard core unlimited oracle soft memlock 50000000 oracle hard memlock 50000000安装Oracle数据库rpm -ivh --nodeps oracle-database-preinstall-19c-1.0-1.el7.x86_64.rpm rpm -ivh oracle-database-ee-19c-1.0-1.x86_64.rpm 初始化实例/etc/init.d/oracledb_ORCLCDB-19c configure配置环境变量export TMP=/tmp export TMPDIR=$TMP export ORACLE_SID=ORCLCDB export ORACLE_BASE=/opt/oracle export ORACLE_HOME=$ORACLE_BASE/product/19c/dbhome_1 export INVENTORY_LOCATION=/opt/oracle/oraInventory export TNS_ADMIN=$ORACLE_HOME/network/admin export LD_LIBRARY_PATH=$ORACLE_HOME/lib #export NLS_LANG="SIMPLIFIED CHINESE_CHINA.ZHS16GBK" export NLS_DATE_FORMAT="YYYY-MM-DD HH24:MI:SS" export PATH=$ORACLE_HOME/bin:/bin:/usr/bin:/usr/sbin:/usr/local/bin:/usr/X11R6/bin:$PATH:$HOME/binsqlplus连接数据库sqlplus / as sysdba # 修改密码 alter user sys identified by oracle;Navicat连接数据库
