阿里云 ECS 服务器系统重置实践

[root@instance-h9cwbr8m ~]# yum install -y yum-utilsLoaded plugins: langpacks, versionlockExcluding 1 update due to versionlock (use "yum versionlock status" to show it)Package yum-utils-1.1.31-54.el7_8.noarch already installed and latest versionNothing to do[root@instance-h9cwbr8m ~]# 
--设置镜像仓库 yum-config-manager \  --add-repo \   http://mirrors.aliyun.com/docker-ce/linux/centos/docker-ce.repo
--先更新yum软件包索引 	yum makecache fase 
--docker社区、ee企业版 ce为社区版 官方推荐使用ce版，默认安装最新的docker版本，也可以指定版本安装  yum install docker-ce docker-ce-cli containerd.io
--启动systemctl  start  dockerdocker version
--查看镜像docker  images
--创建网络docker network create ele
--常用命令-- 查看容器docker psdocker ps -a-- 启动docker start 容器iddocket restart 容器id-- 停止docker stop 容器id

/usr/local/developtar -zxvf jdk-7u60-linux-x64.gz -C /usr/local/develop
vi /etc/profile-- 追加PATH=$PATH:/usr/local/nginx/sbinexport JAVA_HOME=/usr/local/develop/jdk1.8.0_391export PATH=$JAVA_HOME/bin:$PATHexport CLASSPATH=.:$JAVA_HOME/lib/dt.jar:$JAVA_HOME/lib/tools.jarexport JRE_HOME=$JAVA_HOME/jreexport PATH
-- 生效source /etc/profile
-- 查看版本java -version

地址：https://github.com/alibaba/nacos解压：/usr/local/develop修改application.xml修改Connect URL of DB
--启动sh startup.sh -m standalone -p 8848

spring:  application:    name: gateway  profiles:    default: prod  cloud:    nacos:      discovery:        server-addr: ${REGISTER_HOST:}:${REGISTER_PORT:}        group: prod        namespace: ele-server      config:        server-addr: ${spring.cloud.nacos.discovery.server-addr}        file-extension: yml        namespace: ele-server        group: ele-gateway        extension-configs:          - data-id: gateway.yml            group: ele-gateway            refresh: true      username:       password:    gateway:      routes:        - id: ele-data          uri: lb://ele-data          predicates:            - Path=/api/data/**          filters:            - StripPrefix=1        - id: ele-wechat          uri: lb://ele-wechat          predicates:            - Path=/api/wechat/**          filters:            - StripPrefix=1        - id: ele-cms          uri: lb://ele-cms          predicates:            - Path=/api/cms/**          filters:            - StripPrefix=1

@Configuration@Slf4jpublic class CorsConfig {    @Bean    public CorsWebFilter corsFilter(){        UrlBasedCorsConfigurationSource source = new UrlBasedCorsConfigurationSource(new PathPatternParser());        source.registerCorsConfiguration("/**", buildConfig());        return new CorsWebFilter(source);    }
    private CorsConfiguration buildConfig(){        CorsConfiguration corsConfiguration = new CorsConfiguration();        //在生产环境上最好指定域名，以免产生跨域安全问题        corsConfiguration.addAllowedOriginPattern("*");        corsConfiguration.addAllowedHeader("*");        corsConfiguration.addAllowedMethod("*");        corsConfiguration.setAllowCredentials(true);        return corsConfiguration;    }}

sudo yum updatesudo yum install epel-releasesudo yum install nginxsudo systemctl start nginx
cd  /etc/nginx/nginx.confsudo /usr/sbin/nginx -s reload
一个https配置server {        listen 80;        server_name 域名;        rewrite ^(.*)$ https://${server_name}$1 permanent;        error_log   /home/ele/nginx_log/mini/error.log;        access_log  /home/ele/nginx_log/mini/access.log;}

server {        listen 443 ssl;        server_name 域名;
        ssl_certificate   cert/*.pem;  --自行修改        ssl_certificate_key  cert/*.key; --自行修改        ssl_session_timeout  5m;        ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;        ssl_protocols TLSv1 TLSv1.1 TLSv1.2;        ssl_prefer_server_ciphers  on;
        location / {		       root /home/admin/application/cms/dist;		       index index.html;        }}

-- 下载docker pull xuxueli/xxl-job-admin:2.3.0
-- 启动docker run -d \-e PARAMS="--spring.datasource.url=jdbc:mysql://数据库地址?useUnicode=true&characterEncoding=UTF-8&autoReconnect=true&serverTimezone=UTC \--spring.datasource.username= \--spring.datasource.password= \--spring.datasource.driver-class-name=com.mysql.jdbc.Driver" \-p  8080:8080 \-v /application/datas/xxjob/applogs:/data/applogs \--name ele-xxl-job-admin-2.3.0  \-d xuxueli/xxl-job-admin:2.3.0

docker search rabbitmqdocker pull rabbitmqdocker run -d --name rabbitmq -p 15672:15672 -p 5672:5672 rabbitmq:management
-d 后台运行容器；--name 指定容器名；-p 指定服务运行的端口（5672：应用访问端口；15672：控制台Web端口号）；-v 映射目录或文件；--hostname  主机名（RabbitMQ的一个重要注意事项是它根据所谓的 “节点名称” 存储数据，默认为主机名）；-e 指定环境变量；（RABBITMQ_DEFAULT_VHOST：默认虚拟机名；RABBITMQ_DEFAULT_USER：默认的用户名；RABBITMQ_DEFAULT_PASS：默认用户名的密码）
--延迟插件安装rabbitmq_delayed_message_exchange这个插件可以到 https://www.rabbitmq.com/community-plugins.html 下载
--copy插件docker cp rabbitmq_delayed_message_exchange-3.12.0.ez 容器id:/opt/rabbitmq/plugins--进入容器内docker exec -it 容器id /bin/bash--启动插件rabbitmq-plugins enable rabbitmq_delayed_message_exchange

-- 添加sudo账号sudo groupadd 组名sudo useradd -m -g 组名 -s /bin/bash 用户名sudo passwd 用户名提示输入秘密
sudo usermod -aG 组名 用户名
su root
vi /etc/sudoers 中找到root权限，添加用户名    ALL=(ALL)       ALL

docker日志清理，设置容器日志大小sudo vim /etc/docker/daemon.json{"log-driver":"json-file","log-opts": {"max-size":"500m", "max-file":"3"}}
--添加脚本/usr/local/script/cut_log.shcd 日志路径 && find . -type f ( -name ".log" -o -name ".zip" ) -mtime +6 | xargs rm -f;cd 日志路径 && find . -type f ( -name ".log" -o -name ".zip" ) -mtime +6 | xargs rm -f;
--设置1天清理一次crontab -e0 1 * * * sh /usr/local/script/cut_log.sh >/dev/null 2>&1