0610 실습 9일차 가상머신 3개 세팅 , php + 10일차 워드프로세스 php

0610 워드프로세스 출력 실습 총 정리

1.[환경설정] web,storage,db 네트워크설정 (생략)

 

2.[ storage]

[storage]

fdisk /dev/vdb

mkfs.xfs /dev/vdb1

mkdir -p /exports/web

mount /dev/vdb1 /exports/web/

vi /etc/fstab

UUID=b3452dbd-0f2d-4e1c-a220-46c3458faf5b /exports/web xfs defaults 0 0

vi /etc/exports

/exports/web 192.168.123.0/24(rw,sync,sec=sys)

lsblk -f

NAME FSTYPE LABEL UUID MOUNTPOINT

vda

├─vda1 xfs 923745de-1bfd-4c7e-89a1-5895651ee0ec /boot

└─vda2 LVM2_member pwT7km-pGGa-6O1Y-k5UD-cg74-aZiV-oZ5b2J

├─centos-root xfs 1801dee2-e598-4d71-a398-9fb9f069df97 /

└─centos-swap swap 10362ce3-2c62-483b-8e06-18dad666a9b0 [SWAP]

vdb

└─vdb1 xfs b3452dbd-0f2d-4e1c-a220-46c3458faf5b /exports/web


vi /etc/selinux/config

(nfs구성)

2 yum install -y rpcbind

3 yum install -y nfs-utils.x86_64

5 systemctl start rpcbind

6 systemctl start nfs

7 systemctl restart nfs-server

8 firewall-cmd --permanent --add-service=nfs

9 firewall-cmd --permanent --add-service=mountd

10 firewall-cmd --list-all

12 history

14 chmod 777 /exports/web/

18 systemctl restart nfs

19 systemctl restart nfs-server

20 systemctl restart rpcbind

21 systemctl restart rpc-statd

11 exportfs -v

3. [web]

13 mkdir -p /var/www/

14 cd /var/www/

15 ls

yum install -y nfs-utils

systemctl start nfs

systemctl start nfs.service
systemctl start nfs-server

firewall-cmd --permanent –add-service=nfs

firewall-cmd –reload


16 yum install -y httpd

17 yum install -y rpcbind

18 systemctl start httpd

19 systemctl enable httpd

20 firewall-cmd --permanent --add-service=http

21 systemctl start rpcbind

22 systemctl enable rpcbind

23 vi /etc/selinux/config

24 df -Th

25 firewall-cmd --reload

26 firewall-cmd --list-all


28 vi /etc/fstab#

# /etc/fstab

# Created by anaconda on Fri May 22 14:34:12 2020

#

# Accessible filesystems, by reference, are maintained under '/dev/disk'

# See man pages fstab(5), findfs(8), mount(8) and/or blkid(8) for more info

#

/dev/mapper/centos-root / xfs defaults 0 0

UUID=923745de-1bfd-4c7e-89a1-5895651ee0ec /boot xfs defaults 0 0

/dev/mapper/centos-swap swap swap defaults 0 0

192.168.123.10:/exports/web /var/www nfs rw,sync 0 0


mount -a

df -Th

4. [db]

mkdir -p /var/lib/mysql


14 lsblk -f

15 fdisk /dev/vdb

partprobe

14 lsblk -f

15 fdisk /dev/vdb

pvcreate /dev/vdb1

vgcreate db_vg /dev/vdb1

3 lvcreate db_vg -n db_lv -L 3G

4 lsblk -f

5 mkfs.xfs /dev/db_vg/db_lv

6 lsblk -f


vi /etc/fstab

UUID=ff6eef54-23f2-4e0d-abcd-b8c17de759ec /var/lib/mysql xfs defaults 0 0

mount -a



5. [web]

1 yum install -y https://dl.fedoraproject.org/pub/epel/epel-release-latest-7.noarch.rpm

2 yum install -y https://rpms.remirepo.net/enterprise/remi-release-7.rpm

3 yum install -y yum-utils

4 yum-config-manager --enable remi-php74

5 um install -y php php-mysql

6 yum install -y php php-mysql

7 systemctl restart httpd

9 journalctl -xe

12 cd /var/www/

14 ls

(storage 서버에서 exports/web 에 권한 777 주고 nfs랑 rpcbind재시작하고 오기)

15 mkdir html

16 systemctl restart httpd


curl -o latest.tar.gz https://wordpress.org/latest.tar.g

tar xzf latest.tar.gz


6 cp -r wordpress/* /var/www/html/

7 ls

8 cd /var/www/ht

9 cd /var/www/html/

10 ls

11 setfacl -Rm u:apache:rwX /var/www/html

12 chmod 777 /var/www/html/     acl권한문제 해결해주려면 해줘야한다 (밑에 setacl)

13 setfacl -Rm u:apache:rwX /var/www/html

14 systemctl restart httpd

---

 

12.168.123.11/index.php

 

[db]

mysql grqnt 구글링 -> GRANT 권한종류 ON 대상 TO 계정명 IDENTIFIED BY 암호

 

 

[root@db user]# mysql -u root -p

Enter password:

MariaDB [(none)]> select *from cccr.guro;

 

GRANT select ON cccr.* TO cccr@'%' IDENTIFED BY 암호

 

GRANT select ON cccr.* TO cccr@'192.168.123.' IDENTIFED BY 암호 // ''안의 대역을 사용한다.

 

flush prievilages

mysql -u devops -p

 

 

 

외부에서 아파치 서비스가 db로 접근

selinux 꺼주기

 

firewall-cmd --permanent --add-service=mysql -> db서비스를 아파치가 접근할 수 있도록 방화벽과 포트 열어주기

 

 

[웹]

yum install php (뭐깔앗는지,,,,,)?

ls /etc/httpd/conf.d -> php.conf 확인가능

 

yum -y install php-mysql 설치

 

재시작 후

 

웹 스냅샷 찍고 나서 ㅅ클론,

 

 

MariaDB [(none)]> CREATE DATABASE wordpress;

MariaDB [(none)]> GRANT ALL PRIVILEGES ON wordpress.* TOwordpress@'192.168.123.%' IDENTIFIED BY 'dkagh1.'; //워드프로세스는 모든권한 줘야해서 privileges

 

 

<web>

curl -o wp.tar.gz http:~~~~

 

192.168.122.11/wp-admin/install.php

1. db name wordpress

username wordpress

dkagh1.

192.168.123.12 (localhost x) -> submit

 

 

 

cccr

dkagh1.

confirm use passwd 체크

 

 

 

 

<db > mysql -u root -p 192.168.123.12

**네트워크는 용도에따라 분류해서 사용해야한다.** 기억

 

웹과 db는 내부망으로 연결 웹은 인터넷연결

즉 db는 nat와 연결되지 않도록 (internal)

 

 

ha proxy