Rocky、Centos linux常用操作

修改Rocky服务器ip地址cd /etc/NetworkManager/system-connections/修改文件中的ipsystemctl restart NetworkManager查看本机公网ip地址curl http://cip.cccurl http://ipinfo.io查看防火墙白名单firewall-cmd --list-all查看防火墙状态firewall-cmd --statefirewall 添加和删除白名单firewall-cmd --permanent --add-rich-rulerule familyipv4 source address需要访问后台的ip port protocoltcp port8080 acceptfirewall-cmd --reload添加端口firewall-cmd --permanent --add-port443/tcpfirewall-cmd --permanent --add-rich-rulerule familyipv4 source address172.28.6.0/24 port protocoltcp port3306 acceptfirewall-cmd --reload3删除可访问的ipfirewall-cmd --permanent --remove-rich-rulerule familyipv4 source address要删除的ip port protocoltcp port3306 acceptfirewall-cmd --reloadfirewall-cmd --permanent --remove-rich-rulerule familyipv4 source address172.28.6.0/24 port protocoltcp port3306 acceptsed 命令修改文件内容sed -i s/pam_deny.so/pam_deny.so onerrfail deny5 unlock_time600 root_unlock_time600/ /etc/pam.d/password-authsed -i s/#ClientAliveInterval 0/ClientAliveInterval 600/ /etc/ssh/sshd_configsed -i s/local_users_only/local_users_only minlen8 lcredit-1 ucredit-1 dcredit-1 ocredit-1 difok5 enforce_for_root/ /etc/pam.d/system-authsystemctl restart sshd查看8080端口占用进行netstat -tulnp | grep :8080查看cpu、系统版等lscpuuname -acat /etc/os-releaseCentos8更换国内yum源# 1. 备份当前的YUM源配置文件sudo cp -a /etc/yum.repos.d /etc/yum.repos.d.bak# 2. 删除/移除当前的YUM源配置文件sudo rm -f /etc/yum.repos.d/*.repo# 3. 下载阿里云的CentOS 8 YUM源配置文件sudo curl -o /etc/yum.repos.d/CentOS-Base.repo http://mirrors.aliyun.com/repo/Centos-8.repo# 4. 重新加载YUM源sudo yum clean allsudo yum makecacheumount 挂载目录出现“device is busy”错误时可以用命令umount -fl 目录解决。当前日期输出为字符串echo $(date %Y%m%d%H%M)ssh 连不上另一台linux服务器时:echo AllowUsers *172.16.7.13 /etc/ssh/sshd_configsystemctl restart sshdminio文件服务器搭建文档单节点单硬盘部署MinIO — MinIO中文文档 | MinIO Linux中文文档linux定时执行crontab -e30 1 * * 6 sh /root/fullBackup-244.sh 21 /root/mariadbBackup/log_$(date \%Y-\%m-\%d-\%H-\%M)30 1 * * 0-5 sh /root/increBackup-244.sh 21 /root/mariadbBackup/log_incre_$(date \%Y-\%m-\%d-\%H-\%M)docker代理设置vim /etc/docker/daemon.json{registry-mirrors:[https://docker.1ms.run],dns: [8.8.8.8, 114.114.114.114],data-root: /home/docker}安全加固useradd -m -s /bin/bash jiajiepasswd jiajievim /etc/ssh/sshd_configPermitRootLogin nossh连接空闲最大时长断开配置vim /etc/ssh/sshd_configClientAliveInterval 300ClientAliveCountMax 2LoginGraceTime 60systemctl restart sshdvim /etc/profileexport HISTFILE/dev/nullexport HISTSIZE0export HISTFILESIZE0unset HISTFILETMOUT300密码复杂度控制vim /etc/pam.d/system-authvim /etc/pam.d/password-authpassword requisite pam_pwquality.so dcredit-1 ucredit-1 ocredit-1 lcredit-1 minlen12 maxrepeat3 reject_username enforce_for_root用户密码最大修改时间设置vim /etc/login.defsPASS_MAX_DAYS 90 # 密码最长使用 90 天到期必须修改PASS_WARN_AGE 7 # 过期前 7 天每日提醒chage -M 90 -W 7 jiajiechage -l jiajie