0609 화요일 가상머신3개 nfs, db구성 실습

 

cccr3guro.iptime.org (강사님이 올려주는 실습파일)

 

web -> index.html (rhcsa)     rhcsa라는 내용을 가진 html구성 db -> mysql_secure_installation     mariadb나 mysql 사용해서 DB내용물 구성_ DB이름이 cccr이고 테이블이 guro인거       -> DB: cccr       -> Table: guro (id[Primary],name,email)

 

---

답

[storage]

1)

fdisk -> +3기가

 

mkdir -p /exports/web

vi /etc/fstab

mount -a

vi /etc/exports -> /exports/web 192.168.123.0/24 (rw,sync,no_root_squash) //이 출발지 주소만 이 디렉토리 접근을 허용한다는 것*********** no

 

exportfs -r (export테이블 리로드)

firewall nfs

 

<3)web 설정이후 curl 192.168.122.11 확인해보면 rhcsa 출력>

 

-----------------------

[web]

2)

mkdir -p /var/www

 

vi /etc/fstab 192.168.123.10:/exports/web /var/www nfs rw,sync 0 0

 

 

mount -a

df -Th

// 마운트는 위에 올리는 것을 의미, 기존 디렉토리를 덮는것, 우리가 사용할 파일 시스템으로 덮는다는 것

 

yum install httpd

 

ls -l /var/www/ (permision denied) 뜨면 -> 권한문제 해결해줘야한다. storage의 no_root_sqash ****

//권한문제해결한 후에

umount /var/www

mount /var/www

firewall 해주기 http

systemctl 해주기 http

 

----------------------------

[db구성]

mkdir -p /var/lib/mysql

 

fdisk /dev/vdb // +5기가 t->8e /// 논리볼륨 기능 활용을 위해 지정해주기

partprobe

pvcreate

vgcreate db_vg /dev/vdb1/ ??

lvcreate -L 3G -n db_lv

 

mkfs.xfs /dev/db_vg/db_lv

vi /etc/fstab 마운트

mount -a

df -Th로확인

 

 

(maria db 구성)

maria db설치

systemctl start mariadb

mysql_secure)installation

루트패스워드 설정 toor

show databases;

 

------------------------------

 

[스토리지 히스토리  // 틀린것도 있음,,,, 최종적으로는 성공]

1  id user
    2  yum -y install bash-completion
    3  vim
    4  yum -y install vim
    5  ls
    6  source /etc/bashrc 
    7  ip a s
    8  source /etc/bash_completion.d/*
    9  bash
   10  nmcli connection 
   11  ip a s 
   12  poweroff 
   13  fdisk /dev/vdb
   14  lsblk -f
   15  partprobe
   16  mkfs.xfs /dev/vdb1
   17  lsblk -f
   18  mount /dev/vdb1/ /etc/exports /web
   19  vi /etc/fstab
   20  lsblk -f
   21  vi /etc/fstab
   22  vi /etc/fstab
   23  cd /etc/
   24  cd exports
   25  ls
   26  cd exports
   27  vi /etc/fstab
   28  yum install httpd
   29  ls
   30  mkdir exports
   31  rm exports
   32  cd 
   33  mkdir exports
   34  ls
   35  cd exports
   36  mkdir web
   37  ls
   38  vi /etc/fstab
   39  lsblk -f
   40  mount /dev/vdb1 /exports/web
   41  vi /etc/fstab
   42  mount /dev/vdb1 /exports/web
   43  mount /dev/vdb1 /exports/web/
   44  ls
   45  mount /dev/vdb1 /exports/web/
   46  mount /dev/vdb1 /root/exports/web/
   47  vi /etc/fstab
   48  lsblk -f
   49  cd
   50  systectl enable httpd
   51  systemctl enable httpd
   52  systemctl start httpd
   53  systemctl status httpd
   54  firewall-cmd --permanent --add-service=http
   55  firewall-cmd --reload
   56  cd /root/exports/web/
   57  ls
   58  echo "rhcsa" > /root/exports/web/inex.html
   59  ls
   60  cat inex.html 
   61  rm -r inex.html 
   62  echo "rhcsa" > /root/exports/web/index.html
   63  ls
   64  cat index.html 
   65  /var/www/
   66  /var/www
   67  cd /var/www/
   68  ls
   69  cd /root/exports/web/
   70  ls
   71  rm -rf index.html 
   72  vi /etc/resolv.conf
   73  systemctl restart httpd.service 
   74  sudo yum install curl
   75  yum install -y nfs-utils.x86_64 
   76  yum install rpcbind.x86_64
   77  yum install rpcbind
   78  yum install bind*
   79  vi /etc/exports
   80  cd /etc/exports/
   81  vi /etc/exports.d/
   82  cd /etc/exports.d/
   83  ls
   84  cd /exports/
   85  cd
   86  ls
   87  cd /
   88  ls
   89  cd
   90  cd /root
   91  ls
   92  vi /exports/web
   93  vi /etc/exports
   94  cd /nfs
   95  cd /etc/
   96  ls
   97  cat /etc/exports
   98  cd /mnt/
   99  ls
  100  cd /root/exports/web
  101  chmod 777 /root/exports/web/
  102  mount -o rw,senc,sec=sys 192.168.122.
  103  cd /etc/exports
  104  cd
  105  cd /etc
  106  ls
  107  cd /exports
  108  vi /etc/exports
  109  chmod 777 /etc/exports/web/
  110  chmod 777 /etc/exports/
  111  cd /root/exports/web/
  112  systemctl start rpcbind
  113  systemctl start nfs-server
  114  systemctl enable rpcbind
  115  systemctl enable nfs-server
  116  firewallcmd --permanent --add-service=nfs
  117  firewall-cmd --permanent --add-service=nfs
  118  firewall-cmd --permanent --add-service=rpc-bind
  119  firewall-cmd --permanent --add-service=mountd
  120  firewall-cmd --reload
  121  cat /etc/exports
  122  mount | grep nfs4
  123  cd
  124  mount | grep nfs4
  125  cd /etc/exports
  126  vi /etc/exports
  127  mount -a
  128  cd /root/
  129  ls
  130  mkdir -rf exports
  131  rm -rf exports
  132  cd root
  133  cd /root
  134  ls
  135  cd exports/
  136  ls
  137  rm -r web/
  138  cd web/
  139  ls
  140  cd ..
  141  ls
  142  rm -rf exports/*
  143  lsblk -f
  144  vi /etc/fstab 
  145  lsblk -f
  146  reboot
  147  chmod 777 /etc/exports
  148  vi /etc/exports
  149  systemctl start rpcbind
  150  systemctl start nfs-server
  151  systemctl enable rpcbind
  152  systemctl enable nfs-server
  153  exportfs -v
  154  firewall-cmd --reload
  155  vi /etc/fstab
  156  vi /etc/exports
  157  systemctl start rpcbind
  158  systemctl start nfs-server
  159  systmectl restart
  160  systmectl restart rpcbind
  161  systemctl restart rpcbind
  162  systemctl restart nfs-server
  163  firewall-cmd --list-all
  164  vi /etc/fstab
  165  chmod -R 777 /exports/web
  166  lsblk -f
  167  vi /etc/fstab
  168  umount -a
  169  mount -a
  170  lsblk -f
  171  vi /etc/fstab
  172  reboot
  173  chmod -R 777 /exports/web
  174  systemctl restart rpcbind
  175  systemctl restart nfs-server
  176  exportfs -v
  177  history

 

[web 히스토리]
  1  id user
    2  yum -y install bash-completion
    3  vim
    4  yum -y install vim
    5  ls
    6  source /etc/bashrc 
    7  ip a s
    8  source /etc/bash_completion.d/*
    9  bash
   10  nmcli connection 
   11  ip a s 
   12  poweroff 
   13  yum install -y httpd
   14  lsblk -f
   15  df -Th
   16  setenforce 0
   17  cd /var/www/
   18  ls
   19  "rhcsa" > /var/www/html/
   20  echo "rhcsa" > /var/www/html/
   21  echo "rhcsa" > /var/www/html/index.html
   22  ls
   23  cd html/
   24  ls
   25  cat index.html 
   26  vi /etc/httpd/conf/httpd.conf 
   27  systemctl restart httpd
   28  ip a
   29  yum install httpd
   30  yum install http
   31  systemctl start httpd
   32  systemctl status httpd
   33  systemctl enable httpd
   34  setenforce 0
   35  ip a
   36  cat /var/www/html/
   37  cat /var/www/html/index.html 
   38  sudo cat /etc/passwd | grep "apache"
   39  ps -df | grep httpd
   40  yum install -y rpcbind
   41  yum install -y nfs-utils.x86_64 
   42  systemctl start rpcbind
   43  showmount -e 192.168.122.10
   44  cd /mnt
   45  ls
   46  mkdir nfs
   47  mount -o rw,sync,sec=sys 192.168.123.10:/exports/web /var/www/
   48  vi etc/fstab
   49  showmount -e 192.168.122.10
   50  vi /etc/fstab
   51  mount | grep nfs4
   52  showmount -e 192.168.122.10
   53  vi etc/fstab
   54  mount -o rw,sync,sec=sys 192.168.123.10:/exports/web /var/www
   55  mount -o rw,sync,sec=sys 192.168.123.10:/exports/web /var/www/
   56  yum install httpd
   57  systemctl start httpd
   58  firewall-cmd --permanent --add-service=httpd
   59  firewall-cmd --permanent --add-service=http
   60  firewall-cmd --reload
   61  mount -o rw,sync,sec=sys 192.168.123.10:/exports/web /var/www/
   62  cd /var/www
   63  systemctl status rpcbind
   64  mount -o rw,sync,sec=sys 192.168.123.10:/exports/web /var/www/
   65  showmount -e 192.168.123.10
   66  mount -o rw,sync,sec=sys 192.168.123.10:/exports/web /var/www/
   67  yum install nfs-utils rpcbind
   68  yum install httpd
   69  firewall-cmd --list-all
   70  systemctl start rpcbind
   71  systemctl start httpd
   72  cd /
   73  mount -o rw,sync,sec=sys 192.168.123.10:/exports/web /var/www/
   74  mount -o rw,sync,sec=sys 192.168.123.10:/exports/web/ /var/www/
   75  systemctl status rpcbind
   76  mount -o rw,sync,sec=sys 192.168.122.10:/exports/web /var/www/
   77  lsblk -f
   78  mount -o rw,sync,sec=sys 192.168.122.10:/exports/web /var/www/
   79  systemctl start rpcbind
   80  systemctl enable rpcbind
   81  systemctl start httpd
   82  systemctl enable httpd
   83  systemctl restart httpd
   84  systemctl restart rpcbind
   85  mount -o rw,sync,sec=sys 192.168.122.10:/exports/web /var/www/
   86  firewall-cmd --list-all
   87  mount -o rw,sync,sec=sys 192.168.123.10:/exports/web /var/www/
   88  vi /etc/fstab
   89  ls
   90  cd /var/www/
   91  ls
   92  mkdir html
   93  ls
   94  cd html
   95  ls
   96  echo "rhcsa" > /var/www/html/index.html
   97  history

[db히스토리]

1  id user
    2  yum -y install bash-completion
    3  vim
    4  yum -y install vim
    5  ls
    6  source /etc/bashrc 
    7  ip a s
    8  source /etc/bash_completion.d/*
    9  bash
   10  nmcli connection 
   11  ip a s 
   12  poweroff 
   13  fdisk /dev/vdb1
   14  fdisk /dev/vdb
   15  lsblk -f
   16  fdisk /dev/vdb1
   17  fdisk /dev/vdb
   18  setenforce 0
   19  getenforce
   20  lsblk -f
   21  pvcreate /dev/vdb1
   22  vgcreate vg0 /dev/vdb1
   23  lvcreate vg0 -n lv0 -L +3G
   24  lsblk -f
   25  lvscan
   26  mkfs.xfs /dev/vg0
   27  mkfs.xfs /dev/vg0/lv0
   28  lsblk -f
   29  mount /dev/vg0/lv0 /var/lib/mysql
   30  yum install mariadb-server.x86_64 
   31  systemctl start mariadb
   32  systemctl enable mariadb
   33  mount /dev/vg0/lv0 /var/lib/mysql
   34  lsblk -f
   35  mount /dev/vg0/lv0 /var/lib/mysql
   36  lsblk -f
   37  cat /etc/fstab
   38  df -Th
   39  umount -a
   40  df -Th
   41  mount -a
   42  df -Th
   43  vi /etc/fstab
   44  cd /var/lib
   45  ls
   46  lsblk -f
   47  reboot
   48  yum -y install mysql-community-server
   49  systemctl start mysqld
   50  systemctl enable mysqld
   51  mysql -u root -p
   52  vi /etc/my.conf
   53  vi /etc/my.cnf
   54  mysql -u root -p
   55  vi /etc/my.cnf
   56  mysql -u root -p
   57  vi /etc/my.cnf
   58  mysql -u root -p
   59  vi /etc/my.cnf
   60  mysql -u root -p
   61  reboot
   62  mysql -u root -p
   63  yum -y install mariadb-server
   64  systemctl start mariadb
   65  yum -y install mariadb-server
   66  systemctl start mariadb
   67  yum -y install mariadb-server
   68  yum -y install mariadb
   69  systemctl start mariadb
   70  systemctl enable mariadb
   71  mysql -u root -p
   72  mysql_secure_installation
   73  yum install https://dl.fedoraproject.org/pub/epel/epel-release-latest-7.noarch.rpm
   74  yum install yum-utils
   75  yum install http://rpms.remirepo.net/enterprise/remi-release-7.rpm
   76  yum-config-manager --enable remi-php72
   77  yum install php72 php72-php-fpm php72-php-mysqlnd php72-php-opcache php72-php-xml php72-php-xmlrpc php72-php-gd php72-php-mbstring php72-php-json
   78  http://cccr3guro.iptime.org/source.php
   79  http://cccr3guro.iptime.org/practive_web_db.txt
   80  history

 

 

 

번외.

web서비스는 읽기를 위해 존재

// 웹서버 두 개를 가지고 (서버 운영시 오류 사태에 똑같은 두 서버중 오류가 안나는 서버를 활용)

1.NFS conf , 2.NFS contents

설정파일 등을 공유스토리지에 넣고

Froxy 나 로드밸런스 방법을 활용해서 수평적으로  분산시켜 사용한다.

 

 

 

----------------------------------------------------

추가실습

<?php
    $conn=mysql_connect('192.168.122.12', 'devops', 'dkagh1.'); //db 연결부분

    $db=mysql_select_db("cccr", $conn);

    $sql="select * from guro;";
    $sql_result=mysql_query($sql, $conn);
    $count=mysql_num_rows($sql_result);          


    for($i=0; $i<$count; $i++)
    {
        $result_array=mysql_fetch_array($sql_result);
        echo "$result_array[id] : $result_array[name] <br>";
    }

?>

 

 

 

 

 

 

 

 

 

 

PHP 마지막 수빈언니 history

(db 환경구성부터 섞여있음)

13 nmcli con show
14 nmcli con add con-name eth0 ifname eth0 type ethernet
15 nmcli con mod eth0 ipv4.addresses 192.168.122.12/24
16 nmcli con mod eth0 ipv4.gateway 192.168.122.1
17 nmcli con mod eth0 ipv4.dns 8.8.8.8
18 nmcli con mod eth0 ipv4.method manual
19 nmcli con add con-name eth1 ifname eth1 type ethernet
20 nmcli con mod eth1 ipv4.addresses 192.168.123.12/24
21 nmcli con mod eth1 ipv4.method manual
22 nmcli con up eth0
23 nmcli con up eth1
24 nmlci con show
25 nmcli con show
26 ping 8.8.8.8
27 ifconfig
28 hostnamectl set-hostname db.cccr.co.kr
29 yum install -y net-tools
30 root
31 toor
32 ifconfig
33 ping 192.168.122.1
34 lsblk -f
35 fdisk /dev/vdb
36 lsblk -f
37 pvcreate /dev/vdb1
38 vgcreate db_vg /dev/vdb1
39 lvcreate -n db_lv -L 3G
40 lvcreate -L 3G -n db_lv db_vg
41 lsblk -f
42 mkfs.xfs db_vg-db_lv
43 mkdir -p /var/lib/mysql
44 lsblk -f
45 mount db_vg-db_lv /var/lib/mysql
46 mkfs.xfs /dev/
47 mkfs.xfs /dev/db_vg/db_lv
48 mount /dev/db_vg/db_lv /var/lib/mysql
49 lsblk -f
50 vi /etc/fstab
51 sunc
52 sync
53 df -Th
54 systemctl reboot
55 df -Th
56 yum install -y mysqld
57 yum install -y mysql
58 mysql -u root -p
59 mysqladmin -u root password 0
60 yum install -y mysql-server
61 mysql_secure_installation
62 yum install -y mysql*
63 mysql_secure_installation
64 sudo mysql_secure_installation
65 yum install mariadb -y
66 yum install mariadb-server -y
67 mysql_secure_installation
68 vi /var/lib/mysql/mysql.sock
69 mysql_secure_installation
70 setenforce 0
71 getenforce
72 Enter current password for root (enter for none):
73 ERROR 2002 (HY000): Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
74 mysql_secure_installation
75 systemctl start mysqld
76 systemctl status mysqld
77 systemctl status mysqld.service
78 yum install -y mysql-server
79 systemctl start mysql-server
80 systemctl start mysql
81 systemctl start mysqld
82 firewall-cmd --add-service=mysqld
83 firewall-cmd --add-service=mysql
84 firewall-cmd --add-service=mysql --permanent
85 firewall-cmd --reload
86 mysql_secure_installation
87 yum update
88 yum install mariadb*
89 systemctl start mysqld
90 yum install -y mysqld
91 yum install -y mysql*
92 systemctl start mysql
93 systemctl start mysqld
94 yum repolis
95 yum repolist
96 yum install -y mysql-community-server
97 vi /etc/my.cnf
98 mysql_secure_installation
99 yum install -y wget\
100 yum install -y wget
101 mysql_install_db --user=cccr
102 systemctl start mariadb.service
103 systemctl status mariadb.service
104 mysql_secure_installation
105 firewall-cmd --add-service=mariadb
106 systemctl enable mariadb
107 mysql -u root -p
108 lvscan
109 df
110 mysql -u root -p
111 setenforce 0
112 mysql -u root -p
113 e
114 systemctl restart mariadb
115 mysql -u root -p
116 systemctl restart mariadb
117 mysql -u root -p
118 systemctl restart mariadb
119 systemctl enable mariadb
120 ifconfig
121 mysql -u root -p
122 systemctl enable mariadb
123 systemctl restart mariadb
124 mysql -u root -p
125 df -Th
126 vi /etc/fstab
127 mysql -u root -p
128 history

 

 

 

 

 

 

12.168.123.11/index.php

 

[db]

mysql grqnt 구글링 -> GRANT 권한종류 ON 대상 TO 계정명 IDENTIFIED BY 암호

 

 

[root@db user]# mysql -u root -p

Enter password:

MariaDB [(none)]> select *from cccr.guro;

 

GRANT select ON cccr.* TO cccr@'%' IDENTIFED BY 암호

 

GRANT select ON cccr.* TO cccr@'192.168.123.' IDENTIFED BY 암호 // ''안의 대역을 사용한다.

 

flush prievilages

mysql -u devops -p

 

 

 

외부에서 아파치 서비스가 db로 접근

selinux 꺼주기

 

firewall-cmd --permanent --add-service=mysql -> db서비스를 아파치가 접근할 수 있도록 방화벽과 포트 열어주기

 

 

[웹]

yum install php (뭐깔앗는지,,,,,)?

ls /etc/httpd/conf.d -> php.conf 확인가능

 

yum -y install php-mysql 설치

 

재시작 후