linux基础服务的一个小综合应用

之前学习了一段时间红帽子，为了检验自己的学习成果，给自己布置了一个综合实验如下：

rhel1,2,3分别为三台虚拟机

rhel 1 

172.25.40.1

创建用户user1指定家目录到/share/user1下id号为800，创建用户user2指定家目录到/share/user2目录下，ID号为1000
nis server ，共享user3     

web server，搭建lamp论坛，https

raid 5 ，三块磁盘 2+2+2g ；在其基础上创建逻辑卷lvm1初始1g，扩展到2g   

磁盘配额：user3 ，500M

rhel 2 

172.25.40.4

dns server

nisclient

crontab：一小时提醒休息   

rhel 3

172.25.40.3

dhcp server

辅助dns   

接下来贴上我所有的配置过程和相关配置文档

先做dhcp分配地址，方便用crt终端操作

dhcp 

    mount /dev/sr0 /mnt

    vim /etc/yum.repos.d/rhel-source.repo 

    yum clean all

    yum install dhcp* -y

    vim /etc/dhcp/dhcpd.conf 

ddns-update-style interim;

ignore client-updates;

subnet 172.25.40.0 netmask 255.255.255.0 {

option routers 172.25.40.254;

option subnet-mask 255.255.255.0;

option domain-name-servers 172.25.40.4;

range dynamic-bootp 172.25.40.1 172.25.40.20;

default-lease-time 21600;

max-lease-time 43200;

}

   setenforce 0

   /etc/init.d/iptables stop

   /etc/init.d/dhcpd restart

lamp  

   mount /dev/sr0 /mnt

   vim /etc/yum.repos.d/rhel-source.repo 

   yum clean all

   yum install mysql-server httpd php php-mysql lrzsz -y

   setenforce 0

   /etc/init.d/iptables stop

   /etc/init.d/httpd start

   /etc/init.d/mysqld start

   mysqladmin -u root password redhat

   mysql -uroot -predhat
mysql> create database bbs;
mysql> quit

   rz

   mv Discuz_X2.5_SC_UTF8.zip /var/www/html/

   cd /var/www/html/ 

   unzip Discuz_X2.5_SC_UTF8.zip 

   rm -rf Discuz_X2.5_SC_UTF8.zip 

   cd upload/

   chmod 777 config/ data/ uc* -R

   mkdir /server

   vim /server/index.html

   chcon -t httpd_sys_content_t /server -R

   ll -Z /server/

   vim /var/www/html/index.html

   vim /etc/httpd/conf/httpd.conf 

NameVirtualHost 172.25.40.1:80

<VirtualHost 172.25.40.1:80>

    ServerAdmin webmaster@dummy-host.example.com

    DocumentRoot /var/www/html

    ServerName haha.arsenal.com

    ErrorLog logs/dummy-host.example.com-error_log

    CustomLog logs/dummy-host.example.com-access_log common

</VirtualHost>

<VirtualHost 172.25.40.1:80>

    ServerAdmin webmaster@dummy-host.example.com

    DocumentRoot /server

    ServerName heihei.arsenal.com

    ErrorLog logs/dummy-host.example.com-error_log

    CustomLog logs/dummy-host.example.com-access_log common

</VirtualHost>

<VirtualHost 172.25.40.1:80>

    ServerAdmin webmaster@dummy-host.example.com

    DocumentRoot /var/www/html/upload

    ServerName bbs.arseanl.com

    ErrorLog logs/dummy-host.example.com-error_log

    CustomLog logs/dummy-host.example.com-access_log common

</VirtualHost>

   /etc/init.d/httpd restart

dns

      mount /dev/sr0 /mnt

      vim /etc/yum.repos.d/rhel-source.repo 

      yum install bind* -y

      hostname bzo.arseanl.com

      vim /etc/hosts

      vim /etc/sysconfig/network

      hostname 

      vim /etc/named.conf 

options {

        listen-on port 53 { 172.25.40.4; };

        directory       "/var/named";

        dump-file       "/var/named/data/cache_dump.db";

        statistics-file "/var/named/data/named_stats.txt";

        memstatistics-file "/var/named/data/named_mem_stats.txt";

        allow-query     { any; };

        allow-query-cache     { any; };

        recursion yes;

};

logging {

        channel default_debug {

                file "data/named.run";

                severity dynamic;

        };

};

zone "." IN {

        type hint;

        file "named.ca";

};

zone "arsenal.com." IN {

        type master;

        file "arsenal.com.zone";

};

     vim /var/named/arsenal.com.zone

$TTL 100D

@               IN SOA bzo.arseanl.com. bzo.arsenal
4000
.com.(

                                        201407 ;

                                        5m     ;

                                        15m    ;

                                        1W     ;

                                        3H)    ;

@               IN NS  bzo.arseanl.com.

ns              IN A   172.25.40.4

bbs             IN A   172.25.40.1

haha            IN A   172.25.40.1

heihei          IN A   172.25.40.1

     vim /etc/resolv.conf 

     /etc/init.d/iptables stop

     setenforce 1

     chmod 755 /etc/named.conf 

     chmod 755 /var/named/arsenal.com.zone 

     /etc/init.d/named start

https

     yum install mod_ssl -y

     cd /etc/pki/tls/certs/

     make httpd.crt

     vim /etc/httpd/conf.d/ssl.conf 

SSLCertificateFile /etc/pki/tls/certs/httpd.crt

SSLCertificateKeyFile /etc/pki/tls/certs/httpd.key

     /etc/init.d/httpd restart

     chkconfig httpd on

     vim /etc/httpd/conf.d/ssl.conf 

SSLPassPhraseDialog  builtin

SSLPassPhraseDialog  exec:/etc/pass.sh

     vim /etc/pass.sh

     . /etc/pass.sh 

     chmod 755 /etc/pass.sh 

     chcon -t httpd_sys_content_t /etc/pass.sh

useradd

     mkdir /share

     useradd -d /share/user1 -u 800 user1

     useradd -d /share/user2 -u 1000 user2

nisserver

     yum install ypserv -y

     mkdir /nishome

     useradd -d /nishome/user3 -u 1200 user3

     passwd user3

     vim /etc/sysconfig/network

NISDOMIAN=nis.com

     nisdomainname nis.com

     nisdomainname

     echo "/bin/nisdomainname nis.com" >> /etc/rc.local 

     /etc/init.d/ypserv start

     /usr/lib64/yp/ypinit -m

     /etc/init.d/ypserv restart

     chkconfig ypserv on

     vim /etc/exports 

/nishome *(rw)

     /etc/init.d/nfs start

     chkconfig nfs on

nisclient

     setenforce 0

     /etc/init.d/iptables stop

     /etc/init.d/rpcbind restart

     /etc/init.d/ypbind restart

     vim /etc/auto.master 

/nishome   /etc/auto.nishome

     vim /etc/auto.nishome

*       -fstype=nfs     172.25.40.1:/nishome/&

user1   -fstype=nfs     172.25.40.1:/nishome/user1

     /etc/init.d/autofs restart

     su - user3

raid5

    fdisk /dev/sdb

    fdisk /dev/sdc

    fdisk /dev/sdd

    mknod /dev/md1 b 9 1

    mdadm -C /dev/md1 -l 5 -n 3 /dev/sdb1 /dev/sdc1 /dev/sdd1

    mdadm -D /dev/md1

    mkfs.ext4 /dev/md1

    mkdir /raid

    mount /dev/md1 /raid

    mdadm -Ds

    vim /etc/mdadm.conf

ARRAY /dev/md1 metadata=1.2 name=localhost.localdomain:1 UUID=187512d4:e197e682:98853ad6:e18ae7a6

    vim /etc/fstab 

/dev/md1                /raid                   ext4    defaults        0 0

lvm

    fdisk /dev/md1

    partx -a /dev/md1

    mdadm -D /dev/md1p1

    umount /dev/md1

    pvcreate /dev/md1p1

    vgcreate vg1 /dev/md1p1

    lvcreate -L 1G vg1 -n lvm1

    mkfs.ext4 /dev/vg1/lvm1 

    mkdir /mnt/lvm1

    mount /dev/vg1/lvm1 /mnt/lvm1

    pvdisplay 

    vgdisplay 

    lvdisplay 

    df -h

    umount /mnt/lvm1

    e2fsck -f /dev/vg1/lvm1 

    lvextend -L 2G /dev/vg1/lvm1 

    resize2fs /dev/vg1/lvm1 

    mount /dev/vg1/lvm1 /mnt/lvm1

磁盘配额

    mount -o remount,usrquota,grpquota /dev/vg1/lvm1 

    mount

    setenforce 0

    quotacheck -cumg /dev/vg1/lvm1 

    quotaon /dev/vg1/lvm1 

    edquota user3

    chmod 777 /mnt/lvm1

    su - user3

[user3@localhost ~]$ cd /mnt/lvm1

[user3@localhost lvm1]$ dd if=/dev/zero of=file bs=1M count=450

提醒
crontab -e
* */1 * * * wall "you'd better take a rest."

     crontab -l

     /etc/init.d/crond restart

辅助dns

     vim /etc/named.conf 

zone "arsenal.com." IN {

        type master;

        file "arsenal.com.zone";

        allow-transfer { 172.25.40.3; };

    allow-update { 172.25.40.3; };
};

     vim /etc/resolv.conf 

search arsenal.com

nameserver 172.25.40.4

nameserver 172.25.40.3

     /etc/init.d/named restart

辅助dns配置

     yum install bind* -y

     vim /etc/named.conf 

options {

        listen-on port 53 { 172.25.40.3; };

        directory       "/var/named";

        dump-file       "/var/named/data/cache_dump.db";

        statistics-file "/var/named/data/named_stats.txt";

        memstatistics-file "/var/named/data/named_mem_stats.txt";

        allow-query     { any; };

        allow-query-cache    { any; };

        recursion yes;

};

logging {

        channel default_debug {

                file "data/named.run";

                severity dynamic;

        };

};

zone "." IN {

        type hint;

        file "named.ca";

};

zone "arsenal.com." IN {

        type slave;

        file "arsenal.com.zone";

        masters { 172.25.40.4; };

};

     touch /var/named/arsenal.com.zone

     setenforce 0

     /etc/init.d/iptables stop

     vim /etc/resolv.conf 

nameserver 172.25.40.4

nameserver 172.25.40.3

     /etc/init.d/named restart

     dig haha.arsenal.com