밝은숲

1. selinux 비활성화

[setenforce 0 &  vi /etc/selinux/config]

2. nexus3 설치 및 실행

[root@test-deploy ~]# docker pull sonatype/nexus3

[root@test-deploy ~]# mkdir -p data/nexus-data && chown -R 200 data/nexus-data/

[root@test-deploy ~]# docker run -d -p 8081:8081 -p 5000:5000 --name nexus -v /root/data/nexus-data:/nexus-data sonatype/nexus3

3. url 접속 및 계정 초기화

4. Blob Store 생성

4-1. docker-hosted 생성

4-2 docker-hub 생성

5. Repository 생성

5-1. docker-hosted 생성 (hosted)

5-2. docker-hub 생성 (proxy)

6. Realms 설정

- Docker Bearer Token Realm 오른쪽으로 이동.

7. insecure-registries 설정 추가

8. 서비스 재시작

[root@test-deploy ~]# service docker restart
[root@test-deploy ~]# docker restart nexus

9. docker login
[root@test-deploy data]# docker login 20.21.0.10:5000
Username: admin
Password:
Login Succeeded

10. 이미지 다운로드

[root@test-deploy ~]# docker pull busybox
Using default tag: latest
Trying to pull repository docker.io/library/busybox ...
latest: Pulling from docker.io/library/busybox
92f8b3f0730f: Pull complete
Digest: sha256:b5fc1d7b2e4ea86a06b0cf88de915a2c43a99a00b6b3c0af731e5f4c07ae8eff
Status: Downloaded newer image for docker.io/busybox:latest

11. 이미지 tag 변경

[root@test-deploy ~]# docker tag docker.io/busybox:latest 20.21.0.10:5000/busybox:latest

12. nexus3 local repository에 업로드

[root@test-deploy ~]# docker push 20.21.0.10:5000/busybox
The push refers to a repository [20.21.0.10:5000/busybox]
d0d0905d7be4: Pushed

13. nexus3 docker registry에 있는 이미지 리스트 확인

[root@test-deploy nexus-data]# curl 20.21.0.10:5000/v2/_catalog | jq
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100    36  100    36    0     0   2253      0 --:--:-- --:--:-- --:--:--  2400
{
  "repositories": [
    "busybox",
    "httpd"
  ]
}

참고.

http://teddykwon.com/2017/01/12/docker-nexus-docker-registry.html

CentOS Linux release 7.9.2009 (Core)

1. 웹서버 설치

[root@test-deploy ~]# yum install httpd

[root@test-deploy ~]# yum install epel-release

 *epel-release : extra packages for enterprise linux, 커뮤니티 기반 저장소

*DocumentRoot 변경[root@test-deploy conf]# vi /etc/httpd/conf/httpd.conf==> DocumentRoot "/var/www/repos"

2.  패키지 설치

[root@test-deploy ~]# yum install createrepo yum-utils

3. repository 디렉터리 생성

[root@test-deploy html]# mkdir -p /var/www/repos/{base,centosplus,extras,updates}

4. Synchronize repositories

4-1 CentOS

# reposync -nlm --repoid=base --download-metadata --download_path=/var/www/repos/
# reposync -nlm --repoid=extras --download-metadata --download_path=/var/www/repos/
# reposync -nlm --repoid=updates --download-metadata --download_path=/var/www/repos/

4-2 epel

# reposync -nlm --repoid=epel --download-metadata --download_path=/var/www/repos/

4-3 docker-ce

# yum-config-manager --add-repo https://download.docker.com/linux/centos/docker-ce.repo

# reposync -lm --repoid=docker-ce-stable --download-metadata --download_path=/var/www/repos/

*docker 이전버전이 필요해서 n 옵션을 안씀

reposync 옵션
  -n, --newest-only     Download only newest packages per-repo
  -l, --plugins         enable yum plugin support
  -m, --downloadcomps   also download comps.xml

5. createrepo
createrepo -v /var/www/repos/base -o /var/www/repos/base
createrepo -v /var/www/repos/extras -o /var/www/repos/extras
createrepo -v /var/www//repos/updates -o /var/www/repos/updates
createrepo -v /var/www/repos/epel -o /var/www/repos/epel
createrepo -v /var/www/repos/docker-ce-stable -o /var/www/repos/docker-ce-stable

6. client 서버에서 repo 파일 변경

# mkdir /etc/yum.repos.d_back

# mv /etc/yum.repos.d/* /etc/yum.repos.d_back

# cat /etc/yum.repos.d/test-local.repo

[base]
name=CentOS Base
baseurl=http://20.21.0.10/base
gpgcheck=0
enabled=1

[updates]
name=CentOS Updates
baseurl=http://20.21.0.10/updates
gpgcheck=0
enabled=1

[extras]
name=CentOS Extras
baseurl=http://20.21.0.10/extras
gpgcheck=0
enabled=1

[epel]
name=CentOS Epel
baseurl=http://20.21.0.10/epel
gpgcheck=0
enabled=1

[docker-ce-stable]
name=docker-ce-stable
baseurl=http://20.21.0.10/docker-ce-stable
gpgcheck=0
enabled=1

7. client 서버에서 repo 확인

[root@test-master001 ~]# yum clean all
Loaded plugins: fastestmirror
Cleaning repos: base docker-ce-stable epel extras updates
Cleaning up list of fastest mirrors
[root@test-master001 ~]# yum repolist
Loaded plugins: fastestmirror
Determining fastest mirrors
base                                                                  | 2.9 kB  00:00:00
docker-ce-stable                                                  | 2.9 kB  00:00:00
epel                                                                  | 2.9 kB  00:00:00
extras                                                                | 2.9 kB  00:00:00
updates                                                             | 2.9 kB  00:00:00
(1/5): docker-ce-stable/primary_db                            | 5.8 kB  00:00:00
(2/5): extras/primary_db                                          | 135 kB  00:00:00
(3/5): base/primary_db                                            | 6.1 MB  00:00:00
(4/5): epel/primary_db                                            | 6.8 MB  00:00:00
(5/5): updates/primary_db                                       | 1.8 MB  00:00:00
repo id                            repo name                                    status
base                               CentOS Base                                  10,072
docker-ce-stable               docker-ce-stable                                    6
epel                                CentOS Epel                                  13,595
extras                              CentOS Extras                                    274
updates                           CentOS Updates                               1,341
repolist: 25,288

ssh 접속기록을 확인해야 하는 경우.

1. 설정파일

[root@brightforest /]# vi /etc/ssh/sshd_config

# Logging
SyslogFacility AUTH
#syslog 데몬에 의한 로그 facility를 지정. 기본값은 AUTH 그외 설정(DAEMON,USER,LOCAL0~7
LogLevel INFO
# 기타 로그레벨 [QUIET(기록하지않음) , FATAL(치명적오류) , ERROR,VERBOSE,DEBUGS]

2. 관련 로그 경로

[root@brightforest /]# vi /var/log/secure

#password 틀렸을 경우
May  3 11:25:24 sllee sshd[2793]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.77.xx.xx

May  3 11:25:24 sllee sshd[2793]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"

#로그인 성공
May  3 11:25:50 sllee sshd[2793]: Accepted password for root from 10.77.xx.xx  port 50086 ssh2

May  3 11:25:50 sllee sshd[2793]: pam_unix(sshd:session): session opened for user root by (uid=0)
#세션 끊긴 경우
May  3 11:26:09 sllee sshd[2793]: pam_systemd(sshd:session): Failed to release session: Interrupted system call
May  3 11:26:09 sllee sshd[2793]: pam_unix(sshd:session): session closed for user root

config 옵션 설명은 잘 설명된 블로그가 많음..

webdir.tistory.com/119

1. default gateway

 - default gateway를 잘 못 설정하면 네트워크가 안 될 수 있음

 - 확인 방법

    # netstat -rn

    # route

    # ip route

2. 임시적용

# route add default gw [게이트웨이주소] [장치명]

 -> route add default gw 192.168.56.1 eth1

3. 영구적용

# echo 'GATEWAY=게이트웨이주소' >> /etc/sysconfig/network

# service network restart

* 설정이 안 먹을 경우 ~/ifcfg-eth0 등에 METRIC 설정을 해주면 된다고 함

http://initium2017.blogspot.com/2017/03/centos-default-gateway.html

1. CPU 코어 전체 개수 확인

grep -c processor /proc/cpuinfo

2. 물리 CPU 개수 확인

grep ^processor /proc/cpuinfo | wc -l

3. CPU당 물리 코어 수 확인

grep 'cpu cores' /proc/cpuinfo | tail -l