/
搜索到
51
篇与
的结果
-
MySQL 5.7.44 二进制包安装 一、MySQL 5.7.44 二进制包安装可用于部署泛微Ecology9.0OS: Rocky Linux 9.1Database: mysql-5.7.44-linux-glibc2.12-x86_64.tar.gzQQ: 22193771351.0 解压缩tar zxf mysql-5.7.44-linux-glibc2.12-x86_64.tar.gz1.1 创建软链接ln -sf /usr/local/mysql-5.7.44-linux-glibc2.12-x86_64/ /usr/localmysql1.2 创建MySQL用户组groupadd mysql useradd -r -g mysql -s /sbin/nologin mysql1.3 创建数据目录、日志目录，配置文件目录mkdir /usr/local/mysql/data mkdir /usr/local/mysql/etc mkdir /usr/local/mysql/log chown -R mysql:mysql /usr/local/mysql/1.4 编辑MySQL配置文件[client] port=3306 socket=/tmp/mysql.sock [mysqld] port=3306 user = mysql socket=/tmp/mysql.sock tmpdir = /tmp key_buffer_size=256M max_allowed_packet=128M open_files_limit = 60000 explicit_defaults_for_timestamp server-id = 1 character-set-server = utf8 federated max_connections = 1000 group_concat_max_len = 102400 max_connect_errors = 100000 table_open_cache = 4096 event_scheduler = ON skip-name-resolve lower_case_table_names = 1 interactive_timeout = 86400 wait_timeout = 86400 sync_binlog=0 back_log=100 default-storage-engine = InnoDB log_slave_updates = 1 binlog_cache_size = 32M max_heap_table_size = 256M read_rnd_buffer_size = 64M sort_buffer_size = 256M join_buffer_size = 512M thread_cache_size = 300 log_bin_trust_function_creators = 1 read_buffer_size = 32M read_rnd_buffer_size = 128M bulk_insert_buffer_size = 512M sql_mode='NO_ENGINE_SUBSTITUTION,STRICT_TRANS_TABLES,NO_ZERO_DATE,NO_ZERO_IN_DATE,NO_AUTO_CREATE_USER,ERROR_FOR_DIVISION_BY_ZERO' transaction_isolation = READ-COMMITTED tmp_table_size = 512M log-bin=mysql-bin binlog_format=mixed expire_logs_days = 15 slow_query_log = 1 slow_query_log_file = /usr/local/mysql/log/slow.log long_query_time = 5 innodb_buffer_pool_size = 512M innodb_thread_concurrency = 16 innodb_flush_log_at_trx_commit = 2 innodb_log_buffer_size = 32M innodb_log_file_size = 1024M innodb_log_files_in_group = 4 innodb_max_dirty_pages_pct = 90 innodb_lock_wait_timeout = 120 [mysqldump] quick max_allowed_packet = 64M [client] # The following password will be sent to all standard MySQL clients password="my password" [mysqladmin] force [mysql] no-auto-rehash [myisamchk] key_buffer = 16M sort_buffer_size = 16M read_buffer = 8M write_buffer = 8M [mysqlhotcopy] interactive-timeout [mysqld_safe] open-files-limit = 65535 log-error=/usr/local/mysql/log/mysqld.log pid-file=/usr/local/mysql/etc/mysqld.pid1.5 初始化数据库cd /usr/local/mysql ./bin/mysqld --initialize --user=mysql --basedir=/usr/local/mysql --datadir=/usr/local/mysql/data输出结果：......... 2024-01-15T11:16:44.157258Z 1 [System] [MY-013576] [InnoDB] InnoDB initialization has started. 2024-01-15T11:16:50.486157Z 1 [System] [MY-013577] [InnoDB] InnoDB initialization has ended. 2024-01-15T11:16:55.164521Z 6 [Note] [MY-010454] [Server] A temporary password is generated for root@localhost: qyNLr69t%fo* #临时密码1.6 配置环境变量vim /etc/profile.d/mysql.sh export PATH=$PATH:/usr/local/mysql/bin source /etc/profile.d/mysql.sh1.7 配置开机启动 使用systemd管理mysql服务[root@dxm system]# vim /usr/lib/systemd/system/mysqld.service [Unit] Description=MySQL Server After=network.service [Service] User=mysql Group=mysql Type=forking TimeoutSec=0 PermissionsStartOnly=true ExecStart=/usr/local/mysql/bin/mysqld --defaults-file=/usr/local/mysql/etc/my.cnf --user=mysql --daemonize ExecStop=/usr/local/mysql/bin/mysql stop LimitNOFILE = 65535 Restart=on-failure RestartSec=10 RestartPreventExitStatus=1 PrivateTmp=false [Install] WantedBy=multi-user.targetsystemctl daemon-reload systemctl enable mysqld systemctl start mysqld systemctl status mysqld1.8 登录MySQL 使用临时密码mysql -uroot -pqyNLr69t%fo*1.9 登录MySQL报错：mysql: error while loading shared libraries: libncurses.so.5: cannot open shared object file: No such file or directory mysql: error while loading shared libraries: libtinfo.so.5: cannot open shared object file: No such file or directory # 解决方法： find / -name 'libncurses*' cd /usr/lib64 ln -sf libncurses.so.6.2 libncurses.so.5 ln -sf libtinfo.so.6.2 libtinfo.so.51.10 修改密码#修改密码 ALTER USER 'root'@'localhost' IDENTIFIED BY '123456' PASSWORD EXPIRE NEVER; #NAVER永不过期 #刷新授权表 flush privileges;1.10 创建ecology数据库CREATE DATABASE ecology; CREATE USER ecology IDENTIFIED WITH mysql_native_password BY 'ecology123'; GRANT ALL PRIVILEGES ON ecology.* to 'ecology'@'%'; FLUSH PRIVILEGES; -
PostgreSQL 16.1 编译安装 一、PostgreSQL 16.1 编译安装可用于部署泛微Ecology9OS: RockyLinux 9.1DB: PostgreSQL 16.1QQ: 22193771351. 关闭默认防火墙 firewallsystemctl stop firewalld.service #停止firewall systemctl disable firewalld.service #禁止firewall开机启动 systemctl mask firewalld systemctl stop firewalld dnf remove firewalld2.安装iptables防火墙dnf install -y iptables-services3.编辑iptables配置文件vim /etc/sysconfig/iptables # sample configuration for iptables service # you can edit this manually or use system-config-firewall # please do not ask us to add additional ports/services to this default configuration *filter :INPUT ACCEPT [0:0] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT [0:0] -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT -A INPUT -p icmp -j ACCEPT -A INPUT -i lo -j ACCEPT -A INPUT -p tcp -m state --state NEW -m tcp --dport 22 -j ACCEPT -A INPUT -p tcp -m state --state NEW -m tcp --dport 5432 -j ACCEPT -A INPUT -j REJECT --reject-with icmp-host-prohibited -A FORWARD -j REJECT --reject-with icmp-host-prohibited COMMIT #最后重启防火墙使配置生效 systemctl restart iptables.service #设置防火墙开机启动 systemctl enable iptables.service #重启防火墙 /usr/libexec/iptables/iptables.init restart 4.关闭SELINUXvim /etc/selinux/config SELINUX=disabled # 使配置生效 setenforce 05.安装依赖包dnf install -y uuid uuid-devel libuuid libuuid-devel dnf install -y tcl tcl-devel perl-ExtUtils-Embed readline-devel zlib-devel pam-devel libxml2-devel libxslt-devel openldap-devel python-devel gcc-c++ openssl-devel cmake gcc* readline-devel icu libicu-devel6. 编译PostgreSQL# 创建目录 mkdir -p /usr/local/pgsql mkdir -p /usr/local/pgsql/data mkdir -p /usr/local/pgsql/log #解压postgreSQL 16.1 tar zxf postgresql-16.1.tar.gz #编译 cd postgresql-16.1 ./configure --prefix=/usr/local/pgsql --with-openssl --with-pgport=5432 --with-tcl --with-perl --with-python --with-libxml --with-libxslt --with-ossp-uuid --with-pam --with-ldap #gmake 含第三方插件全部编译 gmake world #gmake 含第三方插件全部安装 gmake install-world 7.创建用户组groupadd postgres useradd -g postgres postgres8.配置权限chown -R postgres:postgres /usr/local/pgsql chown -R postgres:postgres /usr/local/pgsql/data chown -R postgres:postgres /usr/local/pgsql/log chmod -R 700 /usr/local/pgsql/log9.配置环境变量vim /etc/profile.d/pgsql.sh export PGHOME=/usr/local/pgsql export PGDATA=/usr/local/pgsql/data export PATH=$PATH:$PGHOME/bin export LD_LIBRARY_PATH=$PGHOME/lib:$LD_LIBRARY_PATH source /etc/profile.d/pgsql.sh10.初始化数据库# 切换到postgres用户 su - postgres #初始化数据库 /usr/local/pgsql/bin/initdb -D /usr/local/pgsql/data --encoding=UTF8 --lc-collate=en_US.UTF-8 --lc-ctype=en_US.UTF-811.启动数据库#启动 /usr/local/pgsql/bin/pg_ctl -D /usr/local/pgsql/data -l logfile start #停止 /usr/local/pgsql/bin/pg_ctl -D /usr/local/pgsql/data -l logfile stop #重启 /usr/local/pgsql/bin/pg_ctl -D /usr/local/pgsql/data -l logfile restart #查看状态 /usr/local/pgsql/bin/pg_ctl -D /usr/local/pgsql/data -l logfile status 12.配置init启动#切换到root su - root #复制启动文件 cp /usr/local/src/postgresql-14.3/contrib/start-scripts/linux /etc/init.d/postgresql #设置运行权限 chmod +x /etc/init.d/postgresql #编辑修改 vi /etc/init.d/postgresql prefix=/usr/local/pgsql PGDATA="/usr/local/pgsql/data" PGUSER=postgres service postgresql start service postgresql restart service postgresql stop chkconfig postgresql on13.配置systemd启动vi /usr/lib/systemd/system/postgresql.service [Unit] Description=PostgreSQL Database Server After=syslog.target After=network.target [Service] Type=forking User=postgres Group=postgres ExecStart=/usr/local/pgsql/bin/pg_ctl start -D /usr/local/pgsql/data ExecStop=/usr/local/pgsql/bin/pg_ctl stop ExecReload=/usr/local/pgsql/bin/pg_ctl reload -D /usr/local/pgsql/data TimeoutSec=300 [Install] WantedBy=multi-user.targetsystemctl daemon-reload systemctl start postgresql systemctl enable postgresql systemctl restart postgresql systemctl status postgresql14.配置密码#切换到postgres用户 su - postgres #连接数据库 psql -U postgres -d postgres -hlocalhost -p5432 #参数：-U指定用户，-d指定数据库，-h指定服务器，-p指定端口 # 修改数据库用户postgres的密码为postgres ALTER USER postgres WITH PASSWORD 'postgres' #退出控制台 postgres=#\q 15.修改配置参数vi /usr/local/pgsql/data/postgresql.conf port = 5432 max_connections = 1000 listen_addresses = '*' log_destination = 'csvlog' logging_collector = on log_directory = 'log' log_filename = 'postgresql-%d.log' log_file_mode = 0600 log_rotation_age = 1d log_rotation_size = 1024MB log_truncate_on_rotation = on log_lock_waits = off log_statement = 'none' log_duration = on log_min_duration_statement = 0 log_connections = off log_disconnections = off log_line_prefix = '%m [%p] %u %d %r' log_timezone = 'Asia/Shanghai' 16.配置数据库访问权限vi /usr/local/pgsql/data/pg_hba.conf # TYPE DATABASE USER ADDRESS METHOD # IPv4 local connections: host all all 127.0.0.1/32 trust host all all 0.0.0.0/0 md5 systemctl restart postgresql17. 创建数据库CREATE USER ecology WITH PASSWORD 'ecology123'; CREATE DATABASE ecology OWNER ecology; GRANT ALL PRIVILEGES ON DATABASE ecology to ecology; GRANT ALL PRIVILEGES ON ALL TABLES IN SCHEMA public TO ecology;
-
Oracle VPS 保活脚本 甲骨文官现在要收回闲置实例资源，使用率不高的免费实例可能会被清理。如果七天内符合以下条件，则 Oracle 会将免费实例视为空闲，并被回收。95%时间CPU利用率低于10%网络利用率低于10%内存利用率低于 10% （仅适用于A1 形状）（ARM实例）1.1 计算圆周率占用CPU保活nohup echo "scale=99999999;4*a(1)" | bc -lq > /dev/null & nohup cpulimit -l 30 -p 22489 >/dev/null & scale那个代表小数点后的位数，数越大计算时间越长 -l 那里可以控制cpu使用率0-200 -p 那里写程序的PID，通过top命令查找， 或者 ps -aux | grep bc 运行以上指令后，执行 exit 命令， 再关闭窗口退出 xshell，后台命令不会终止 或者直接 Shell 死循环： nohup cpulimit -l 30 bash -c "while :;do a=1;done" > /dev/null 2>&1 & 如果报错，安装一下bc apt install bc -y && apt install cpulimit -y1.2 NeverIdle项目地址：https://github.com/layou233/NeverIdle服务器安装 wget screenyum install -y wget screen下载编译后的可执行文件AMD服务器wget https://github.com/layou233/NeverIdle/releases/download/0.1/NeverIdle-linux-amd64 -O NeverIdleARMwget https://github.com/layou233/NeverIdle/releases/download/0.1/NeverIdle-linux-arm64 -O NeverIdle修改文件权限chmod 777 NeverIdle使用screen运行程序screen -S neverIdle启动程序./NeverIdle -c 2h -m 2 -n 4h挂起screen 按 Ctrl + A + D再次进入screenscreen -R neverIdle命令参数：./NeverIdle -c 2h -m 2 -n 4h选项：-c 指启用 CPU 定期浪费，后面跟随每次浪费的间隔时间。如每12小时23分钟34秒浪费一次，则为 12h23m34s。按照格式填。-m 指启用浪费的内存量，后面是一个数字，单位为GiB。启动后会占用对应量的内存，并且保持不会释放，直到手动杀死进程。-n 指启用网络定期浪费，后面跟随每次浪费的间隔时间。格式同 CPU。会定期执行一次 Ookla Speed Test（还会输出结果哦！）1.3 SHELL脚本#!/bin/bash echo "欢迎使用甲骨文保活脚本" echo "1.AMD" echo "2.ARM" read -p "请选择" choice if (($choice == 1)); then mkdir -p ~/keep_oracle cat <<EOF >~/keep_oracle/crontab.sh #!/bin/bash for (( i = 0; i < 5; i+=1)); do wget --limit-rate=10m http://cachefly.cachefly.net/100mb.test -O /tmp/100mb.test sleep 10 dd if=/dev/zero of=/tmp/test bs=1M count=128 done exit 0 EOF chmod +x ~/keep_oracle/crontab.sh crontab -l > conf echo "* * * * * ~/keep_oracle/crontab.sh" >> conf crontab conf rm -f conf crontab -l echo "脚本结束，如果新增了一条crontab即为运行成功" elif (($choice == 2)); then mkdir -p ~/keep_oracle cat <<EOF >~/keep_oracle/crontab.sh #!/bin/bash for (( i = 0; i < 5; i+=1)); do wget --limit-rate=10m http://cachefly.cachefly.net/100mb.test -O /tmp/100mb.test sleep 10 dd if=/dev/zero of=/tmp/test bs=1M count=128 done exit 0 EOF dd if=/dev/zero of=/dev/shm/keep_oracle bs=1K count=`cat /proc/meminfo |grep 'MemTotal' |awk -F : '{print $2}' |sed 's/^[ \t]*//g'|sed 's/ kB//'|sed 's/.$//g'` chmod +x ~/keep_oracle/crontab.sh crontab -l > conf echo "* * * * * ~/keep_oracle/crontab.sh" >> conf echo "@reboot dd if=/dev/zero of=/dev/shm/keep_oracle bs=1K count=`cat /proc/meminfo |grep 'MemTotal' |awk -F : '{print $2}' |sed 's/^[ \t]*//g'|sed 's/ kB//'|sed 's/.$//g'`" >> conf crontab conf rm -f conf crontab -l echo "脚本结束，如果新增了两条crontab即为运行成功" fi
-
Linux系统巡检脚本 1.Linux巡检脚本支持CentOS & RockyLinux#!/bin/bash dnf install bc iotop 2&>/dev/null && yum install bc iotop 2&>/dev/null && apt install bc iotop 2&>/dev/null function RED(){ echo -e "\033[31m$@\033[0m" } function YEL(){ echo -e "\033[33m$@\033[0m" } function GRE(){ echo -e "\033[32m$@\033[0m" } function PINK(){ echo -e "\033[35m$@\033[0m" } function OS_INFO(){ #系统 local OS_NAME=`cat /etc/os-release|awk -F'"' '{if(NR==1) print $2}'` #版本 local OS_VERSION=`cat /etc/os-release|awk -F'"' '{if(NR==2) print $2}'` #内核 local OS_KERNEL=`uname -r` #语言 local OS_LANG=`echo $LANG` #日期 local OS_DATE=`date +"%Y-%m-%d %H:%M:%S"` #运行时间 local OS_UPTIME=`uptime | awk -F',' '{sub(/.*up /,"",$1);print $1'}` #最近一次重启时间 local OS_REBOOT=`last reboot|head -1|awk '{print $5,$6,$7,$8,$10}'` #最近一次关机时间 local OS_SHUTDOWN=`last -x|grep shutdown|head -1|awk '{print $5,$6,$7,$8,$10}'` YEL "" YEL "######################系统信息######################" YEL "系统：$OS_NAME" YEL "版本：$OS_VERSION" YEL "内核：$OS_KERNEL" YEL "语言：$OS_LANG" YEL "日期：$OS_DATE" YEL "运行时间：$OS_UPTIME" YEL "最近一次重启时间：$OS_REBOOT" YEL "最近一次关机时间：$OS_SHUTDOWN" YEL "" } function OS_HARDWARE(){ #CPU架构 local CPU_ARCH=`uname -m` #CPU型号 local CPU_TYPE=`cat /proc/cpuinfo |grep "model name"|uniq|awk -F':' '{sub(/ /,"",$2);print $2}'` #CPU个数 local CPU_NUM=`cat /proc/cpuinfo |grep 'physical id'|sort|uniq| wc -l` #CPU核数 local CPU_CORE=`cat /proc/cpuinfo |grep cores|uniq|awk -F ':' '{sub(/ /,"",$2);print $2}'` #CPU频率 local CPU_MHZ=`cat /proc/cpuinfo |grep "cpu MHz"|uniq|awk -F ':' '{sub(/ /,"",$2);printf "%s MHz\n",$2}'` #内存容量 local MEM_SIZE=$(echo "scale=2;`cat /proc/meminfo | grep 'MemTotal:' | awk '{print $2}'`/1024/1024"|bc) #空闲内存 local MEM_FREE=$(echo "scale=2;`cat /proc/meminfo | grep 'MemFree:' | awk '{print $2}'`/1048576"|bc) #可用内存 local MEM_FREEE=$(echo "scale=2;`cat /proc/meminfo | grep 'MemAvailable:' | awk '{print $2}'`/1048576" | bc) #内存使用率 local MEM_USE=$(awk 'BEGIN{printf "%.1f%\n",('$MEM_SIZE'-'$MEM_FREEE')/'$MEM_SIZE'*100}') #SWAP大小 local MEM_SWAP_SIZE=$(echo "scale=2;`cat /proc/meminfo | grep 'SwapTotal:' | awk '{print $2}'`/1048576"|bc) #SWAP可用 local MEM_SWAP_FREE=$(echo "scale=2;`cat /proc/meminfo | grep 'SwapFree:' | awk '{print $2}'`/1048576"|bc) #SWAP使用率 local MEM_SWAP_USE=$(awk 'BEGIN{printf "%.1f%\n",('$MEM_SWAP_SIZE'-'$MEM_SWAP_FREE')/'$MEM_SWAP_SIZE'*100}') #Buffer大小 local MEM_BUF=$(cat /proc/meminfo | grep 'Buffers:' | awk '{printf "%s KB",$2}') #内存Cache大小 local MEM_CACHE=$(cat /proc/meminfo | grep '^Cached:' | awk '{printf "%s KB",$2}') #网卡 local NET_DEV=`cat /proc/net/dev | awk 'NR>2 && $1 !~/lo/ {sub(/:/,"");print $1}'|grep -E '^eth|^ens'` RED "######################硬件信息######################" RED "CPU架构：$CPU_ARCH" RED "CPU型号：$CPU_TYPE" RED "CPU个数：$CPU_NUM" RED "CPU核数：$CPU_CORE" RED "CPU频率：$CPU_MHZ" RED "内存容量：$MEM_SIZE GB" RED "空闲内存：$MEM_FREE GB" RED "可用内存：$MEM_FREEE GB" RED "内存使用率：$MEM_USE" RED "SWAP大小：$MEM_SWAP_SIZE GB" RED "SWAP可用：$MEM_SWAP_FREE GB" RED "SWAP使用率：$MEM_SWAP_USE" RED "Buffer大小：$MEM_BUF" RED "内存Cache大小：$MEM_CACHE" RED "网卡：$NET_DEV" for i in ${NET_DEV[@]} do if [ `ip link show $i|awk 'NR==1 {print $9}'` == 'UP' ];then RED "网卡：$i 状态：$(ip link show $i|awk 'NR==1 {print $9}') RX:$(ethtool -g $i|grep "RX:"|tail -1|awk '{print $2}') TX:$(ethtool -g $i|grep "TX:"|tail -1|awk '{print $2}') " else echo $i &>/dev/null fi done RED "" } function OS_NETWORK(){ #主机名 local OS_HOSTNAME=`hostname` #IP地址 local OS_IPADD=`hostname -I|awk '{print $1}'` #网关地址 local OS_GATEWAY=`ip route|grep default &>/dev/null && ip route|grep default|awk '{print $3}'|| echo "未配置网关"` #DNS地址 local OS_DNS=`cat /etc/resolv.conf |grep nameserver|uniq|awk '{printf "%s ",$2}'` PINK "######################网络信息######################" PINK "主机名：$OS_HOSTNAME" PINK "IP地址：$OS_IPADD" PINK "网关地址：$OS_GATEWAY" PINK "DNS地址：$OS_DNS" PINK "网关[$OS_GATEWAY]" PINK "连接情况: $(ping -t 1 -i 1 -c 5 -W 1 $OS_GATEWAY &>/dev/null && echo '正常通信' || echo '无法通信')" PINK "" } function OS_RESOURCE(){ #系统磁盘列表 local DISK_LIST=(`lsblk | egrep "^[a-z].*" | grep -v "^sr" | awk '{print $1}'`) #系统磁盘使用率情况 local DISK_PER=(`df -h | awk 'NR>1 && $1 !~/sr/ {gsub(/%/,"",$5);print $5}'`) #CPU空闲率 local CPU_FREE=$(top -d 1 -n 1 -b | awk 'NR==3{print $8}') # CPU使用率 local CPU_USE=$(awk 'BEGIN{printf "%.1f%\n",100-'$CPU_FREE'}') #CPU_TOP_TEN local CPU_TOP_TEN=$(top -d 1 -n 1 -b | column -t | awk 'NR>=7 && NR<=15') #当前进程数 local CPU_PROCESSORS=$(top -d 1 -n 1 -b | awk 'NR==2{print $2}') #当前正在运行进程数 local CPU_RUN_PROCESSORS=$(top -d 1 -n 1 -b | awk 'NR==2{print $4}') #当前正在休眠进程数 local CPU_SL_PROCESSORS=$(top -d 1 -n 1 -b | awk 'NR==2{print $6}') #当前停止运行进程数 local CPU_STOP_PROCESSORS=$(top -d 1 -n 1 -b | awk 'NR==2{print 8}') #当前僵尸进程数 local CPU_ZOM_PROCESSORS=$(top -d 1 -n 1 -b | awk 'NR==2{print $10}') GRE "######################系统资源######################" GRE "CPU使用率：$CPU_USE" GRE "CPU使用率前十进程信息:" GRE "$(ps -eo user,pid,pcpu,pmem,args --sort=-pcpu | head -n 10)" GRE "\n内存使用率前十进程信息:" GRE "$(ps -eo user,pid,pcpu,pmem,args --sort=-pmem | head -n 10)" GRE "\n磁盘IO信息:$(iotop -bon 1 &>/dev/null || echo 'iotop 未安装信息获取失败')" GRE "$(iotop -bon 1 &>/dev/null && iotop -bon 1 | head -n 13)" GRE "\n磁盘分区使用率是否正常：正常" for i in ${DISK_LIST[@]} do if [[ -z "$(lsblk --nodeps -no serial /dev/$i)" ]]; then GRE "磁盘：$i 磁盘序列号：获取信息失败" else GRE "磁盘：$i 磁盘序列号：$(lsblk --nodeps -no serial /dev/$i)" fi done for i in ${DISK_PER[@]} do if [ $i -gt 80 ]; then RED "某分区磁盘使用率为：$i% > 80% 请及时扩容" fi done GRE "\n系统磁盘分区inode使用情况：" GRE "$(df -Thi)" GRE "\n系统当前进程数：$CPU_PROCESSORS" GRE "系统当前进程运行数：$CPU_RUN_PROCESSORS" GRE "系统当前休眠进程数：$CPU_SL_PROCESSORS" GRE "系统当前停止进程数：$CPU_STOP_PROCESSORS" GRE "系统当前僵尸进程数：$CPU_ZOM_PROCESSORS" GRE "\n系统当前允许最大fd数量：$(cat /proc/sys/fs/file-nr | awk '{print $3}')" GRE "系统当前已打开fd数量：$(cat /proc/sys/fs/file-nr | awk '{print $1}')" GRE "系统单个进程运行打开fd数量：$(ulimit -n)" GRE "\n系统当前socket连接数：$(netstat -anp &>/dev/null && netstat -anp | wc -l || echo 'net-tools 未安装,获取信息失败')" GRE "系统 established socket数量: $(netstat -anp &>/dev/null && netstat -anp | grep "ESTABLISHED" | wc -l || echo 'net-tools 未安装,获取信息失败')" GRE "系统 sync socket数量：$(netstat -anp &>/dev/null && netstat -anp | grep "SYN" | wc -l || echo 'net-tools 未安装,获取信息失败')" GRE "系统当前已建立socket如下:" GRE "$(netstat -anp &>/dev/null && netstat -anp | grep ESTABLISHED | awk '{printf " 本地:%-20s <=> 外部:%-22s\n",$4,$5}' || echo '')" GRE "" } function OS_SECURITY(){ #系统所有能登录的用户 local OS_USER=(`cat /etc/passwd | awk -F':' '$NF !~/nologin|sync|shutdown|halt/ {print $1}'`) #Selinux local OS_SELINUX=`getenforce` # 防火墙状态 local OS_FIREWALLD=`service firewalld status &>/dev/null | grep "running" && echo on || echo off` RED "################################# [ 系统安全巡检区 ] ######################################" GRE "防火墙状态: $OS_FIREWALLD" GRE "Selinux状态：${OS_SELINUX}\n" GRE "系统可登录用户数：$(cat /etc/passwd | awk -F':' '$NF !~/nologin|sync|shutdown|halt/ {print $1}' | wc -l)" GRE "系统可登录用户：${OS_USER[@]}" for i in ${OS_USER[@]} do GRE "用户 $i 最后1次登录信息: $(lastlog -u $i | awk 'NR==2')" done GRE "系统当前登录用户：" GRE "$(who | sed 's#[()]##g' | awk '{printf " 用户: %10s 终端: %7s 登录时间: %7s %7s 登录IP: %7s\n",$1,$2,$3,$4,$5}')" } function OS_SERVICE(){ RED "################################# [ 系统服务巡检区 ] ######################################" GRE "自行添加" } if [ $(id -u -n) != "root" ]; then ERROR "请以ROOT用户运行这个脚本" fi OS_INFO OS_HARDWARE OS_NETWORK OS_RESOURCE OS_SECURITY2.输出[root@localhost ~]# ./check_linux.sh ######################系统信息###################### 系统：CentOS Linux 版本：7 (Core) 内核：3.10.0-1160.66.1.el7.x86_64 语言：en_US.UTF-8 日期：2023-05-17 15:57:11 运行时间：139 days 最近一次重启时间：Thu Dec 29 10:36 15:57 最近一次关机时间：Thu Nov 17 16:53 16:54 ######################硬件信息###################### CPU架构：x86_64 CPU型号：Intel(R) Core(TM)2 Duo CPU T7700 @ 2.40GHz CPU个数：1 CPU核数：8 CPU频率：2095.082 MHz 内存容量：15.65 GB 空闲内存：8.26 GB 可用内存：8.26 GB 内存使用率：47.2% SWAP大小：7.87 GB SWAP可用：3.39 GB SWAP使用率：56.9% Buffer大小：0 KB 内存Cache大小：225948 KB 网卡：eth0 网卡：eth0 状态：UP RX:4096 TX:4096 ######################网络信息###################### 主机名：localhost IP地址：192.168.1.250 网关地址：192.168.1.254 DNS地址：223.5.5.5 114.114.114.114 网关[192.168.1.254] 连接情况: 正常通信 ######################系统资源###################### CPU使用率：6.2% CPU使用率前十进程信息: USER PID %CPU %MEM COMMAND root 806 1.6 0.0 /bin/bash /usr/local/VMOptimizationTools/sangfor_guest_datareport root 807 1.3 0.0 /bin/bash /usr/local/VMOptimizationTools/sangfor_sfping root 1117 1.3 0.0 /bin/bash /usr/local/VMOptimizationTools/sangfor_update_ipc_callback root 1433 1.3 0.0 /bin/bash /usr/local/VMOptimizationTools/sangfor_vmconfig_ipc_callback root 2300 1.1 30.6 /home/monitor/tomcat/jdk/jre/bin/java -Djava.util.logging.config.file=/home/monitor/tom cat/conf/logging.properties -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager -Djdk.tls.ephemeral DHKeySize=2048 -Djava.protocol.handler.pkgs=org.apache.catalina.webresources -Dorg.apache.catalina.security.Secur ityListener.UMASK=0027 -Djava.awt.headless=true -Dignore.endorsed.dirs= -classpath /home/monitor/tomcat/bin/boots trap.jar:/home/monitor/tomcat/bin/tomcat-juli.jar -Dcatalina.base=/home/monitor/tomcat -Dcatalina.home=/home/moni tor/tomcat -Djava.io.tmpdir=/home/monitor/tomcat/temp org.apache.catalina.startup.Bootstrap start root 1003 1.0 0.0 /bin/bash /usr/local/VMOptimizationTools/sangfor_vm_proxyd_w root 803 0.7 0.0 /bin/bash /usr/local/VMOptimizationTools/sangfor_vm_proxyd root 85148 0.6 3.0 java -Dfile.encoding=utf-8 -Xmx2048m -XX:MaxPermSize=1024m -Xss5m -XX:+UseParallelGC -X X:GCTimeRatio=4 -XX:AdaptiveSizePolicyWeight=90 -XX:MinHeapFreeRatio=20 -XX:MaxHeapFreeRatio=40 -XX:+ExitOnOutOfM emoryError -cp . -jar /opt/apps/backend-1.18.6.jar root 1189 0.5 0.0 /bin/bash /usr/local/VMOptimizationTools/sangfor_watchdog 内存使用率前十进程信息: USER PID %CPU %MEM COMMAND root 2300 1.1 30.6 /home/monitor/tomcat/jdk/jre/bin/java -Djava.util.logging.config.file=/home/monitor/tom cat/conf/logging.properties -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager -Djdk.tls.ephemeral DHKeySize=2048 -Djava.protocol.handler.pkgs=org.apache.catalina.webresources -Dorg.apache.catalina.security.Secur ityListener.UMASK=0027 -Djava.awt.headless=true -Dignore.endorsed.dirs= -classpath /home/monitor/tomcat/bin/boots trap.jar:/home/monitor/tomcat/bin/tomcat-juli.jar -Dcatalina.base=/home/monitor/tomcat -Dcatalina.home=/home/moni tor/tomcat -Djava.io.tmpdir=/home/monitor/tomcat/temp org.apache.catalina.startup.Bootstrap start root 29042 0.1 3.6 /usr/local/tcat/jdk/jre/bin/java -Djava.util.logging.config.file=/usr/local/tcat/conf/l ogging.properties -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager -javaagent:/usr/local/tcat/bi n/FineCrack.jar -javaagent:/usr/local/tcat/bin/FineCrack.jar -javaagent:/usr/local/tcat/bin/FineCrack.jar -javaag ent:/usr/local/tcat/webapps/webroot/WEB-INF/lib/FineCrack.jar -javaagent:/usr/local/tcat/webapps/webroot/WEB-INF/ lib/FineCrack.jar -Djdk.tls.ephemeralDHKeySize=2048 -Djava.protocol.handler.pkgs=org.apache.catalina.webresources -Dorg.apache.catalina.security.SecurityListener.UMASK=0027 -Djava.awt.headless=true -Dignore.endorsed.dirs= -cla sspath /usr/local/tcat/bin/bootstrap.jar:/usr/local/tcat/bin/tomcat-juli.jar -Dcatalina.base=/usr/local/tcat -Dca talina.home=/usr/local/tcat -Djava.io.tmpdir=/usr/local/tcat/temp org.apache.catalina.startup.Bootstrap start root 85148 0.6 3.0 java -Dfile.encoding=utf-8 -Xmx2048m -XX:MaxPermSize=1024m -Xss5m -XX:+UseParallelGC -X X:GCTimeRatio=4 -XX:AdaptiveSizePolicyWeight=90 -XX:MinHeapFreeRatio=20 -XX:MaxHeapFreeRatio=40 -XX:+ExitOnOutOfM emoryError -cp . -jar /opt/apps/backend-1.18.6.jar polkitd 86022 0.2 2.5 mysqld root 532 0.0 0.3 /usr/lib/systemd/systemd-journald root 25128 0.1 0.2 /usr/local/tcat/jdk/jre/bin/java -Djava.util.logging.config.file=/usr/local/tcat/conf/l ogging.properties -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager -javaagent:/usr/local/tcat/bi n/FineCrack.jar -javaagent:/usr/local/tcat/bin/FineCrack.jar -javaagent:/usr/local/tcat/webapps/webroot/WEB-INF/l ib/FineCrack.jar -javaagent:/usr/local/tcat/webapps/webroot/WEB-INF/lib/FineCrack.jar -Djdk.tls.ephemeralDHKeySiz e=2048 -Djava.protocol.handler.pkgs=org.apache.catalina.webresources -Dorg.apache.catalina.security.SecurityListe ner.UMASK=0027 -Djava.awt.headless=true -Dignore.endorsed.dirs= -classpath /usr/local/tcat/bin/bootstrap.jar:/usr /local/tcat/bin/tomcat-juli.jar -Dcatalina.base=/usr/local/tcat -Dcatalina.home=/usr/local/tcat -Djava.io.tmpdir= /usr/local/tcat/temp org.apache.catalina.startup.Bootstrap start root 2210 0.3 0.2 /usr/bin/dockerd-current --add-runtime docker-runc=/usr/libexec/docker/docker-runc-curr ent --default-runtime=docker-runc --exec-opt native.cgroupdriver=systemd --userland-proxy-path=/usr/libexec/docke r/docker-proxy-current --init-path=/usr/libexec/docker/docker-init-current --seccomp-profile=/etc/docker/seccomp. json --selinux-enabled --log-driver=journald --signature-verification=false --storage-driver overlay2 root 2257 0.0 0.2 /usr/sbin/rsyslogd -n root 2543 0.2 0.0 /usr/bin/docker-containerd-current -l unix:///var/run/docker/libcontainerd/docker-conta inerd.sock --metrics-interval=0 --start-timeout 2m --state-dir /var/run/docker/libcontainerd/containerd --shim do cker-containerd-shim --runtime docker-runc --runtime-args --systemd-cgroup=true 磁盘IO信息:iotop 未安装信息获取失败 磁盘分区使用率是否正常：正常 磁盘：vda 磁盘序列号：获取信息失败 系统磁盘分区inode使用情况： Filesystem Type Inodes IUsed IFree IUse% Mounted on devtmpfs devtmpfs 2.0M 417 2.0M 1% /dev tmpfs tmpfs 2.0M 1 2.0M 1% /dev/shm tmpfs tmpfs 2.0M 906 2.0M 1% /run tmpfs tmpfs 2.0M 16 2.0M 1% /sys/fs/cgroup /dev/mapper/centos-root xfs 25M 340K 25M 2% / /dev/vda1 xfs 512K 333 512K 1% /boot /dev/mapper/centos-home xfs 221M 168K 221M 1% /home tmpfs tmpfs 2.0M 1 2.0M 1% /run/user/0 overlay overlay 25M 340K 25M 2% /var/lib/docker/overlay2/6e38effcd4011512f280644f2f0aac 6fc2058dff40ede9997c5a587d00bf32b7/merged overlay overlay 25M 340K 25M 2% /var/lib/docker/overlay2/7d98deda88ac959c420b3d6ad50a08 3504a7bc60fe9e6992a74fd0538a5289a2/merged shm tmpfs 2.0M 1 2.0M 1% /var/lib/docker/containers/ce22850fc84b867a3455a3652932 cd4cccfd9af4a9537c199c272c88d94dbe27/shm shm tmpfs 2.0M 1 2.0M 1% /var/lib/docker/containers/925ff26df98f4813f00173cea966 72187452870153f6667166ce512bc582ec74/shm 系统当前进程数：219 系统当前进程运行数：1 系统当前休眠进程数：218 系统当前停止进程数：8 系统当前僵尸进程数：0 系统当前允许最大fd数量：65535 系统当前已打开fd数量：2432 系统单个进程运行打开fd数量：65535 系统当前socket连接数：102 系统 established socket数量: 2 系统 sync socket数量：0 系统当前已建立socket如下: 本地:192.168.1.250:22 <=> 外部:192.168.1.10:61497 本地:192.168.1.250:22 <=> 外部:192.168.1.10:61499 ################################# [ 系统安全巡检区 ] ###################################### 防火墙状态: off Selinux状态：Disabled 系统可登录用户数：2 系统可登录用户：root monitor 用户 root 最后1次登录信息: root pts/0 192.168.1.10 Wed May 17 11:42:49 +0800 2023 用户 monitor 最后1次登录信息: monitor pts/0 192.168.1.10 Wed Aug 31 15:54:20 +0800 2022 系统当前登录用户： 用户: root 终端: pts/0 登录时间: 2023-05-17 11:42 登录IP: 192.168.1.10
-
CentOS 启用BBR CentOS 开启 BBR 加速一. 升级CentOS 内核1.1 导入公钥rpm --import https://www.elrepo.org/RPM-GPG-KEY-elrepo.org1.2 安装elrepo源1.2.1 RHEL-7rpm -Uvh http://www.elrepo.org/elrepo-release-7.0-2.el7.elrepo.noarch.rpm1.2.2 RHEL-8yum install https://www.elrepo.org/elrepo-release-8.el8.elrepo.noarch.rpm1.2.3 RHEL-9yum install https://www.elrepo.org/elrepo-release-9.el9.elrepo.noarch.rpm1.3 安装内核 5.10以上yum --enablerepo=elrepo-kernel install kernel-ml -y1.4 确认是否安装成功rpm -qa | grep kernel输出：kernel-3.10.0-1160.71.1.el7.x86_64kernel-tools-3.10.0-1160.71.1.el7.x86_64kernel-ml-5.18.12-1.el7.elrepo.x86_64kernel-headers-3.10.0-1160.71.1.el7.x86_64kernel-3.10.0-1062.el7.x86_64kernel-devel-3.10.0-1062.el7.x86_64kernel-tools-libs-3.10.0-1160.71.1.el7.x86_64kernel-devel-3.10.0-1160.71.1.el7.x86_641.5 查看可用启动项egrep ^menuentry /etc/grub2.cfg | cut -f 2 -d \'[root@ ~]# egrep ^menuentry /etc/grub2.cfg | cut -f 2 -d \'CentOS Linux (5.18.12-1.el7.elrepo.x86_64) 7 (Core)CentOS Linux (3.10.0-1160.71.1.el7.x86_64) 7 (Core)CentOS Linux (3.10.0-1062.el7.x86_64) 7 (Core)CentOS Linux (0-rescue-d93e9d7030a14fe786947b2903d7a446) 7 (Core)1.5.1 设置引导项顺序，使用新安装内核来引导启动:顺序从0开始grub2-set-default 01.5.2 重启系统reboot二. 配置BBR2.1 修改sysctl 启用 BBRecho "net.core.default_qdisc=fq" >> /etc/sysctl.confecho "net.ipv4.tcp_congestion_control=bbr" >> /etc/sysctl.conf2.2 执行sysctl -p输出[root@ ~]# sysctl -pnet.core.rmem_default = 33554432net.core.rmem_max = 33554432net.ipv4.ip_forward = 1net.core.default_qdisc = fqnet.ipv4.tcp_congestion_control = bbrlsmod |grep bbr输出[root@ ~]# lsmod |grep bbrtcp_bbr 20480 9
