一、机器配置
yum install vim
1.1、Linux最大进程以及打开文件数
ulimit -n和-u可以查看linux的最大进程数和最大文件打开数。
ulimit -a 展示所有
临时方法:
为了优化linux性能,可能需要修改这个最大值。临时修改的话ulimit -n 204800就可以了,重启后失效。
永久生效的方法:
修改vim /etc/security/limits.conf文件
在文件末尾添加:
* soft nofile 65535
* hard nofile 65535
* soft nproc 65535
* hard nproc 65535
按键盘esc后,键盘 :后,wq 重启查看校验
* 代表针对所有用户
noproc 是代表最大进程数
nofile 是代表最大文件打开数
然后查看即可
如遇有修改不成功linux系统
可以尝试修改:/etc/security/limits.d/90-nproc.conf文件尾添加
* soft nproc 204800
* hard nproc 204800
/etc/security/limits.d/def.conf文件尾添加
* soft nofile 204800
* hard nofile 204800
这两个文件的设置将会覆盖前面的设置。重启后生效
1.2、创建用户
useradd admin 不指定的话,会默认创建同名组(默认就行)
mkdir -p /export/servers
二、Web软件安装配置
下载放置:/export/servers/下,安装位置均在此目录
2.1、tomcat 8.0.30 下载
下载放置:/export/servers/下
wget https://archive.apache.org/dist/tomcat/tomcat-8/v8.0.30/bin/apache-tomcat-8.0.30.tar.gz
tar -zvxf apache-tomcat-8.0.30.tar.gz
mv apache-tomcat-8.0.30 tomcat8.0.30
使用地址:/export/Instances/domain/server1
2.2、jdk下载【本地上传】
scp /Users/lihongxu6/tmp/jdk-8u111-linux-x64.tar.gz root@domainip:/export/servers/jdk-8u111-linux-x64.tar.gz
tar -zvxf jdk-8u111-linux-x64.tar.gz
配置环境变量
vim /etc/profile
JAVA_HOME=/export/servers/jdk1.8.0_111
JRE_HOME=$JAVA_HOME/jre
CLASS_PATH=.:$JAVA_HOME/lib/dt.jar:$JAVA_HOME/lib/tools.jar:$JRE_HOME/lib
PATH=$PATH:$JAVA_HOME/bin:$JRE_HOME/bin
export JAVA_HOME JRE_HOME CLASS_PATH PATH
2.3、nginx安装
2.3.1、准备gcc、pcre、openssl
nginx的编译需要c++,同时prce(重定向支持)和openssl(https支持)也需要安装。
yum install gcc-c++
yum -y install pcre*
yum -y install openssl*
2.3.2、nginx下载解压
# 下载
wget http://nginx.org/download/nginx-1.15.12.tar.gz
# 解压:
tar -zvxf nginx-1.15.12.tar.gz
cd nginx-1.15.12
# 指定目录安装
./configure --prefix=/export/servers/nginx
make
make install
1、配置修改【扩展自定义】
创建
mkdir -p /export/servers/nginx/run
修改权限
chown -R admin:admin /export
chmod -R 777 /export/servers
2、启动权限修改,因为非root用户只能使用 1024 以上。原因是:默认情况下Linux的1024以下端口是只有root用户才有权限占用
方法一:
cd /export/servers/nginx/sbin
所有用户都可以运行(因为是755权限,文件所有者:root,组所有者:root)
chown root.root nginx
chmod 755 nginx
chmod u+s nginx
方法二:
仅 root 用户和 lhx 用户可以运行(因为是750权限,文件所有者:root,组所有者:admin)
chown root.www nginx
chmod 750 nginx
chmod u+s nginx
3、修改conf 下的nginx.conf
vim /export/servers/nginx/conf/nginx.conf
清空:在命令模式下,首先执行 gg 这里是跳至文件首行 再执行:dG 这样就清空了整个文件
user admin admin;
worker_processes 8;
#worker_cpu_affinity 00000001 00000010 00000100 00001000 00010000 00100000 01000000 10000000;
error_log /export/servers/nginx/logs/nginx_error.log warn;
pid /export/servers/nginx/run/nginx.pid;
worker_rlimit_nofile 65535;
events
{
use epoll;
worker_connections 65535;
}
http
{
include mime.types;
default_type application/octet-stream;
server_tokens on;
log_format main '$remote_addr - $remote_user [$time_local] '
'"$request" $status $bytes_sent '
'"$http_referer" "$http_user_agent" '
'"$gzip_ratio"';
#charset utf-8;
server_names_hash_bucket_size 128;
client_header_buffer_size 32k;
large_client_header_buffers 4 32k;
client_max_body_size 300m;
sendfile on;
tcp_nopush on;
keepalive_timeout 0;
tcp_nodelay on;
client_body_buffer_size 512k;
fastcgi_intercept_errors on;
proxy_connect_timeout 90;
proxy_read_timeout 180;
proxy_send_timeout 180;
proxy_buffer_size 256k;
proxy_buffers 4 256k;
proxy_busy_buffers_size 256k;
proxy_temp_file_write_size 256k;
proxy_intercept_errors on;
server_name_in_redirect off;
proxy_hide_header X-Powered-By;
gzip on;
gzip_min_length 100;
gzip_buffers 4 16k;
gzip_http_version 1.0;
gzip_comp_level 9;
gzip_types text/plain application/x-javascript text/css application/xml;
gzip_vary on;
error_page 400 401 402 403 404 405 408 410 412 413 414 415 500 501 502 503 506 = http://www.jd.com/error2.aspx;
include domains/*;
########default,deny ip access#####
server
{
listen 80 default_server;
server_name localhost;
location / {
rewrite ^/(.*) http://www.jd.com permanent;
}
}
###########status#########
# server
# {
# listen 80;
# server_name status.360buy.com;
# location / {
# stub_status on;
# access_log off;
# }
# }
}
View Code
2.3.3、启动
进入安装目录sbin,后 ./nginx 即可
查看进程:ps -ef | grep nginx
重启:./nginx -s reload
2.3.4、开机启动【不用对接,通过control脚本控制】
在/etc/init.d/目录下创建nginx文件
vim /etc/init.d/nginx
#!/bin/sh
#
# nginx - this script starts and stops the nginx daemon
#
# chkconfig: - 85 15
# description: NGINX is an HTTP(S) server, HTTP(S) reverse \
# proxy and IMAP/POP3 proxy server
# processname: nginx
# config: /etc/nginx/nginx.conf
# config: /etc/sysconfig/nginx
# pidfile: /var/run/nginx.pid
# Source function library.
. /etc/rc.d/init.d/functions
# Source networking configuration.
. /etc/sysconfig/network
# Check that networking is up.
[ "$NETWORKING" = "no" ] && exit 0
# 指定nginx执行文件路径
# nginx="/usr/local/nginx/sbin/nginx"
nginx="/export/servers/nginx/sbin/nginx"
prog=$(basename $nginx)
# 指定nginx配置文件路径
#NGINX_CONF_FILE="/usr/local/nginx/conf/nginx.conf"
NGINX_CONF_FILE="/export/servers/nginx/conf/nginx.conf"
[ -f /etc/sysconfig/nginx ] && . /etc/sysconfig/nginx
lockfile=/var/lock/subsys/nginx
make_dirs() {
# make required directories
user=`$nginx -V 2>&1 | grep "configure arguments:" | sed 's/[^*]*--user=\([^ ]*\).*/\1/g' -`
if [ -z "`grep $user /etc/passwd`" ]; then
useradd -M -s /bin/nologin $user
fi
options=`$nginx -V 2>&1 | grep 'configure arguments:'`
for opt in $options; do
if [ `echo $opt | grep '.*-temp-path'` ]; then
value=`echo $opt | cut -d "=" -f 2`
if [ ! -d "$value" ]; then
# echo "creating" $value
mkdir -p $value && chown -R $user $value
fi
fi
done
}
start() {
[ -x $nginx ] || exit 5
[ -f $NGINX_CONF_FILE ] || exit 6
make_dirs
echo -n $"Starting $prog: "
daemon $nginx -c $NGINX_CONF_FILE
retval=$?
echo
[ $retval -eq 0 ] && touch $lockfile
return $retval
}
stop() {
echo -n $"Stopping $prog: "
killproc $prog -QUIT
retval=$?
echo
[ $retval -eq 0 ] && rm -f $lockfile
return $retval
}
restart() {
configtest || return $?
stop
sleep 1
start
}
reload() {
configtest || return $?
echo -n $"Reloading $prog: "
killproc $nginx -HUP
RETVAL=$?
echo
}
force_reload() {
restart
}
configtest() {
$nginx -t -c $NGINX_CONF_FILE
}
rh_status() {
status $prog
}
rh_status_q() {
rh_status >/dev/null 2>&1
}
case "$1" in
start)
rh_status_q && exit 0
$1
;;
stop)
rh_status_q || exit 0
$1
;;
restart|configtest)
$1
;;
reload)
rh_status_q || exit 7
$1
;;
force-reload)
force_reload
;;
status)
rh_status
;;
condrestart|try-restart)
rh_status_q || exit 0
;;
*)
echo $"Usage: $0 {start|stop|status|restart|condrestart|try-restart|reload|force-reload|configtest}"
exit 2
esac
View Code
设置/etc/init.d/nginx 执行权限
chmod 777 /etc/init.d/nginx
设置开机默认启动
chkconfig --add nginx //添加系统服务
chkconfig --level 345 nginx on //设置开机启动,启动级别
chkconfig --list nginx //查看开机启动配置信息
nginx 控制命令
service nginx start #开启
service nginx stop #停止
service nginx restart #重启
service nginx reload #重新加载
三、使用devops部署安装代理
参看:https://docs.jdcloud.com/cn/devops/install-agent
#华北-北京
wget -c http://devops-hb.s3.cn-north-1.jcloudcs.com/ifrit/ifrit-agent-external-v0.01.448.0742c84.20190327191802.bin -O installer && sh installer -- -a zero-agent,hawkeye-agent,log-agent,ark-query /usr/local/share/jcloud/ifrit && rm -f installer
使用命令查看安装情况
ps -ef|grep agent