清荷听雨 平淡的生活 2025-07-25T01:25:28.000Z https://kedaotech.com/ 清荷听雨 Hexo CentOS7 安装 Docker https://kedaotech.com/CentOS7%E5%AE%89%E8%A3%85docker.html 2025-07-22T13:18:10.000Z 2025-07-25T01:25:28.000Z Centos7配置国内yum源和epel源
1
2
3
4
5
6
7
8
9

cd /etc/yum.repos.d/ && mkdir repo_bak && mv *.repo repo_bak/

wget http://mirrors.aliyun.com/repo/Centos-7.repo 

wget http://mirrors.aliyun.com/repo/epel-7.repo 

yum clean all && yum makecache

CentOS7安装docker（参考官方文档）

官方地址： 传送门

1
2
3
4
5
6
7

yum install -y yum-utils && yum-config-manager --add-repo http://mirrors.aliyun.com/docker-ce/linux/centos/docker-ce.repo

yum install docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin -y

systemctl start docker  && systemctl enable docker

加速服务

1
2
3
4
5
6
7
8
9
10
11
12
13
# vim /etc/docker/daemon.json
{
  "data-root": "/data/dockerdata",
  "registry-mirrors": [
    "https://docker.1ms.run",
    "https://docker.1panel.live"
  ],
  "dns": [
    "8.8.8.8", 
    "114.114.114.114"
  ]
}

sudo systemctl daemon-reload
sudo systemctl restart docker

]]> <h2 id="Centos7配置国内yum源和epel源"><a href="#Centos7配置国内yum源和epel源" class="headerlink" title="Centos7配置国内yum源和epel源"></a>Centos7配置国内yum源和epel源</ MySQL备份 https://kedaotech.com/MySQL%E5%A4%87%E4%BB%BD.html 2025-02-13T09:26:58.000Z 2025-02-13T09:37:57.000Z 常规备份

执行编辑脚本 bash vim /opt/script/mysqlbak.sh 输入如下内容：

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
#!/bin/bash
bak_date=`date +%Y%m%d`
log_date=`date +'%Y年%m月%d日%k时%M分%S秒'`

mkdir -p /opt/mysql_bak/log /opt/mysql_bak/bak

echo  "$log_date:  开始备份..." >> /opt/mysql_bak/log/mysqlbak.log
echo  "$log_date:  正在生成备份文件.sql..." >> /opt/mysql_bak/log/mysqlbak.log

#全量备份文件生成 
mysqldump -u{用户名} -p{密码} --all-databases > /opt/mysql_bak/bak/mysqlbak.sql
size=`ls -l /opt/mysql_bak/bak/  | grep mysqlbak.sql | awk '{print int($5)}'`
#验证备份文件大小
m_bak_size=100000
m_tar_size=10
if [ "$size" -gt "$m_bak_size" ]; then

        echo  "$log_date:  备份文件生成成功！" >> /opt/mysql_bak/log/mysqlbak.log
        echo  "$log_date:  正在生成打包文件..." >> /opt/mysql_bak/log/mysqlbak.log
        #打包备份文件
        cd  /opt/mysql_bak/bak/
        tar -zcf mysqlbak$bak_date.tar.gz mysqlbak.sql
        tar_size=`ls -l /opt/mysql_bak/bak/ | grep mysqlbak$bak_date.tar.gz | awk '{print int($5)}'`
        #验证打包文件并删除原备份文件
        
        if [ "$tar_size" -gt "$m_tar_size" ]; then
                rm -rf /opt/mysql_bak/bak/mysqlbak.sql
                tar_status='已经完成备份！'
                echo "$log_date:  $tar_status" >> /opt/mysql_bak/log/mysqlbak.log
        else
                tar_status='备份打包失败！'
                echo "$log_date:  $tar_status" >> /opt/mysql_bak/log/mysqlbak.log
        fi
else     
         tar_status='备份生成失败！'
        echo "$log_date:  $tar_status" >> /opt/mysql_bak/log/mysqlbak.log
fi

# 删除180天前的备份文件
find /opt/mysql_bak/bak/ -mtime "+180"  -exec rm -f {} \;

利用docker备份

执行编辑脚本 bash vim /opt/script/mysqlbak_docker.sh 输入如下内容：

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
#!/bin/bash
bak_date=`date +%Y%m%d`
log_date=`date +'%Y年%m月%d日%k时%M分%S秒'`

mkdir -p /opt/mysql_bak/log /opt/mysql_bak/bak

echo  "$log_date:  开始备份..." >> /opt/mysql_bak/log/mysqlbak.log
echo  "$log_date:  正在生成备份文件.sql..." >> /opt/mysql_bak/log/mysqlbak.log

#全量备份文件生成 
docker exec {容器名称或容器ID}  mysqldump -u{用户名} -p{密码} --all-databases > /opt/mysql_bak/bak/mysqlbak.sql
size=`ls -l /opt/mysql_bak/bak/  | grep mysqlbak.sql | awk '{print int($5)}'`
#验证备份文件大小
m_bak_size=100000
m_tar_size=10
if [ "$size" -gt "$m_bak_size" ]; then

        echo  "$log_date:  备份文件生成成功！" >> /opt/mysql_bak/log/mysqlbak.log
        echo  "$log_date:  正在生成打包文件..." >> /opt/mysql_bak/log/mysqlbak.log
        #打包备份文件
        cd  /opt/mysql_bak/bak/
        tar -zcf mysqlbak$bak_date.tar.gz mysqlbak.sql
        tar_size=`ls -l /opt/mysql_bak/bak/ | grep mysqlbak$bak_date.tar.gz | awk '{print int($5)}'`
        #验证打包文件并删除原备份文件
        
        if [ "$tar_size" -gt "$m_tar_size" ]; then
                rm -rf /opt/mysql_bak/bak/mysqlbak.sql
                tar_status='已经完成备份！'
                echo "$log_date:  $tar_status" >> /opt/mysql_bak/log/mysqlbak.log
        else
                tar_status='备份打包失败！'
                echo "$log_date:  $tar_status" >> /opt/mysql_bak/log/mysqlbak.log
        fi
else     
         tar_status='备份生成失败！'
        echo "$log_date:  $tar_status" >> /opt/mysql_bak/log/mysqlbak.log
fi

# 删除180天前的备份文件
find /opt/mysql_bak/bak/ -mtime "+180"  -exec rm -f {} \;

利用操作系统的crontab进行定时备份

1
2
# 每天1点执行一次
0 1 * * * bash /opt/script/{备份脚本文件名}
]]> <h2 id="常规备份"><a href="#常规备份" class="headerlink" title="常规备份"></a>常规备份</h2><p>执行编辑脚本 <code>bash vim /opt/script/mysqlbak.sh </code> 输入如下内容：< debian dockerfile 更新国内源 https://kedaotech.com/debian-dockerfile-%E6%9B%B4%E6%96%B0%E5%9B%BD%E5%86%85%E6%BA%90.html 2024-09-07T13:14:50.000Z 2026-02-28T06:35:06.000Z 
1
2
3
4
5
6
7
8

RUN sed -i 's/deb.debian.org/mirrors.ustc.edu.cn/g' /etc/apt/sources.list
RUN sed -i 's/security.debian.org/mirrors.ustc.edu.cn/g' /etc/apt/sources.list

# 新版本采用如下 因为/etc/apt/sources.list已经不存在了
RUN sed -i 's|deb.debian.org|mirrors.aliyun.com|g' /etc/apt/sources.list.d/debian.sources
RUN sed -i 's|security.debian.org|mirrors.aliyun.com/debian-security|g' /etc/apt/sources.list.d/debian.sources

Debian 12 (bookworm) 安装方法及其国内软件源

参考网站

1
2
3
4
5

sudo apt-get update
sudo apt-get upgrade
# 把 /etc/apt/sources.list 里面的内容全部注释掉，增加以下 Debian 12 的软件源：

国内常见镜像站点

Debian全球镜像站列表：Debian全球镜像站

下面列出国内常用的镜像站点及 /etc/apt/sources.list 中的具体对应内容：

阿里云镜像站

1
2
3
4
5
6
7
8
deb https://mirrors.aliyun.com/debian/ bookworm main non-free non-free-firmware contrib
deb-src https://mirrors.aliyun.com/debian/ bookworm main non-free non-free-firmware contrib
deb https://mirrors.aliyun.com/debian-security/ bookworm-security main
deb-src https://mirrors.aliyun.com/debian-security/ bookworm-security main
deb https://mirrors.aliyun.com/debian/ bookworm-updates main non-free non-free-firmware contrib
deb-src https://mirrors.aliyun.com/debian/ bookworm-updates main non-free non-free-firmware contrib
deb https://mirrors.aliyun.com/debian/ bookworm-backports main non-free non-free-firmware contrib
deb-src https://mirrors.aliyun.com/debian/ bookworm-backports main non-free non-free-firmware contrib

腾讯云镜像站

1
2
3
4
5
6
7
8
deb https://mirrors.tencent.com/debian/ bookworm main non-free non-free-firmware contrib
deb-src https://mirrors.tencent.com/debian/ bookworm main non-free non-free-firmware contrib
deb https://mirrors.tencent.com/debian-security/ bookworm-security main
deb-src https://mirrors.tencent.com/debian-security/ bookworm-security main
deb https://mirrors.tencent.com/debian/ bookworm-updates main non-free non-free-firmware contrib
deb-src https://mirrors.tencent.com/debian/ bookworm-updates main non-free non-free-firmware contrib
deb https://mirrors.tencent.com/debian/ bookworm-backports main non-free non-free-firmware contrib
deb-src https://mirrors.tencent.com/debian/ bookworm-backports main non-free non-free-firmware contrib

网易镜像站

1
2
3
4
5
6
7
8
deb https://mirrors.163.com/debian/ bookworm main non-free non-free-firmware contrib
deb-src https://mirrors.163.com/debian/ bookworm main non-free non-free-firmware contrib
deb https://mirrors.163.com/debian-security/ bookworm-security main
deb-src https://mirrors.163.com/debian-security/ bookworm-security main
deb https://mirrors.163.com/debian/ bookworm-updates main non-free non-free-firmware contrib
deb-src https://mirrors.163.com/debian/ bookworm-updates main non-free non-free-firmware contrib
deb https://mirrors.163.com/debian/ bookworm-backports main non-free non-free-firmware contrib
deb-src https://mirrors.163.com/debian/ bookworm-backports main non-free non-free-firmware contrib

华为镜像站

1
2
3
4
5
6
7
8
deb https://mirrors.huaweicloud.com/debian/ bookworm main non-free non-free-firmware contrib
deb-src https://mirrors.huaweicloud.com/debian/ bookworm main non-free non-free-firmware contrib
deb https://mirrors.huaweicloud.com/debian-security/ bookworm-security main
deb-src https://mirrors.huaweicloud.com/debian-security/ bookworm-security main
deb https://mirrors.huaweicloud.com/debian/ bookworm-updates main non-free non-free-firmware contrib
deb-src https://mirrors.huaweicloud.com/debian/ bookworm-updates main non-free non-free-firmware contrib
deb https://mirrors.huaweicloud.com/debian/ bookworm-backports main non-free non-free-firmware contrib
deb-src https://mirrors.huaweicloud.com/debian/ bookworm-backports main non-free non-free-firmware contrib

清华大学镜像站

1
2
3
4
5
6
7
8
deb https://mirrors.tuna.tsinghua.edu.cn/debian/ bookworm main contrib non-free non-free-firmware
deb-src https://mirrors.tuna.tsinghua.edu.cn/debian/ bookworm main contrib non-free non-free-firmware
deb https://mirrors.tuna.tsinghua.edu.cn/debian/ bookworm-updates main contrib non-free non-free-firmware
deb-src https://mirrors.tuna.tsinghua.edu.cn/debian/ bookworm-updates main contrib non-free non-free-firmware
deb https://mirrors.tuna.tsinghua.edu.cn/debian/ bookworm-backports main contrib non-free non-free-firmware
deb-src https://mirrors.tuna.tsinghua.edu.cn/debian/ bookworm-backports main contrib non-free non-free-firmware
deb https://mirrors.tuna.tsinghua.edu.cn/debian-security bookworm-security main contrib non-free non-free-firmware
deb-src https://mirrors.tuna.tsinghua.edu.cn/debian-security bookworm-security main contrib non-free non-free-firmware

中科大镜像站

1
2
3
4
5
6
7
8
deb https://mirrors.ustc.edu.cn/debian/ bookworm main contrib non-free non-free-firmware
deb-src https://mirrors.ustc.edu.cn/debian/ bookworm main contrib non-free non-free-firmware
deb https://mirrors.ustc.edu.cn/debian/ bookworm-updates main contrib non-free non-free-firmware
deb-src https://mirrors.ustc.edu.cn/debian/ bookworm-updates main contrib non-free non-free-firmware
deb https://mirrors.ustc.edu.cn/debian/ bookworm-backports main contrib non-free non-free-firmware
deb-src https://mirrors.ustc.edu.cn/debian/ bookworm-backports main contrib non-free non-free-firmware
deb https://mirrors.ustc.edu.cn/debian-security/ bookworm-security main contrib non-free non-free-firmware
deb-src https://mirrors.ustc.edu.cn/debian-security/ bookworm-security main contrib non-free non-free-firmware
]]> <figure class="highlight bash"><table><tr><td class="gutter"><pre><span class="line">1</span><br><span class="line">2</span><br><span class= HEXO 升级 https://kedaotech.com/HEXO-%E5%8D%87%E7%BA%A7.html 2024-08-02T07:12:00.000Z 2024-08-02T07:36:16.000Z 对于HEXO的升级，可以参考以下步骤：

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
# 查看当前版本
hexo version

# 全局升级hexo命令
npm i hexo-cli -g

# 安装npm-check
npm install -g npm-check

# 检查插件是否需要升级
npm-check

# 安装npm-upgrade
npm install -g npm-upgrade

# 更新package.json
npm-upgrade

]]> <p>对于HEXO的升级，可以参考以下步骤：</p> <figure class="highlight bash"><table><tr><td class="gutter"><pre><span class="line">1</span><br><span class="lin code-server手册 https://kedaotech.com/code-server%E6%89%8B%E5%86%8C.html 2024-07-26T06:48:10.000Z 2024-07-27T03:51:12.000Z 启动
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
# docker-compose.yml
version: "3"
services:
  code-server:
    image: lscr.io/linuxserver/code-server:latest
    container_name: code-server
    environment:
      - PUID=1000
      - PGID=1000
      - TZ=Etc/UTC
      - PASSWORD=这里是密码 #optional
      - SUDO_PASSWORD=这里是密码 #optional
      - DEFAULT_WORKSPACE=/config/workspace #optional
    volumes: # 配置在外部 方便更新软件
      - /share/data_docker/code_server_data:/config
    networks:
      - network_default
    ports:
      - 443:8443
    restart: unless-stopped
networks:
  network_default:
    external: true
    name: network_default

配置

常见插件

  • Eclipse快捷键: eclipse keymap
  • 中文简体: zh-cn
  • JAVA开发: spring-boot-devtools
  • Markdown:
    • markdown-all-in-one
    • markdown preview enhaanced
    • markdownlint
  • 通义灵码: tongyi lingma

安装依赖

1
2
3
4
# code-server 使用的是 Ubuntu22.04
apt-get update -y
apt-get install -y openjdk-21-jdk
apt-get install -y npm

安装node

1
2
3
4
5
6
7
8
9
10
# 安装node
apt-get install node
# 安装n
sudo npm install -g n
# 安装node最新stable版本
n stable
# 切换node版本
sudo rm /usr/bin/node 
sudo ln -s /usr/local/bin/node /usr/bin/node
npm install -g npm

其他

  • node 所在路径: /app/code-server/lib
]]> <h2 id="启动"><a href="#启动" class="headerlink" title="启动"></a>启动</h2><figure class="highlight yaml"><table><tr><td class="gutter"><pre><span c 申请免费的通配SSL证书 https://kedaotech.com/%E7%94%B3%E8%AF%B7%E5%85%8D%E8%B4%B9%E7%9A%84%E9%80%9A%E9%85%8DSSL%E8%AF%81%E4%B9%A6.html 2024-04-08T02:24:56.000Z 2024-06-17T10:00:54.000Z 环境
  • 系统：CentOS 7.9
  • 域名：*.example.com

步骤

安装Certbot

  1. 安装Snap
    Snap
  2. 安装Certbot
    Certbot文档

申请证书

1
2
3
4
5
6
7
8
# 因为申请通配证书需要手动验证，所以需要使用dns-01验证方式
certbot certonly -d "*.xx.com" -d xx.com --manual --preferred-challenges dns-01
# 按照提示进行验证 在dns解析中添加txt记录 
# 在提示信息中给到的类似https://toolbox.googleapps.com/apps/dig/#TXT/的站点验证txt记录后 再进行下一步

# 最后会生成证书 保存目录会在日志中打印出来
# 证书有效期为90天 需要手动续签  同时还有邮件的，非常方便

]]> <h2 id="环境"><a href="#环境" class="headerlink" title="环境"></a>环境</h2><ul> <li>系统：CentOS 7.9</li> <li>域名：*.example.com</li> </ul> <h2 id="步骤">< docker compose 常见配置 https://kedaotech.com/docker-compose.html 2024-01-30T11:54:15.000Z 2024-07-27T03:54:38.000Z 配置代理
1
2
3
4
5
6
# docker-compose.yaml
build:
  context: .
  args:
    - http_proxy=http://proxy.exaple.com
    - https_proxy=http://proxy.exaple.com
]]> <h2 id="配置代理"><a href="#配置代理" class="headerlink" title="配置代理"></a>配置代理</h2><figure class="highlight yaml"><table><tr><td class="gutter"><pre github_hosts https://kedaotech.com/github-hosts.html 2024-01-28T13:22:35.000Z 2024-01-28T13:29:33.000Z github_hosts

说明

github_hosts是一个用于配置github加速的hosts文件。

使用方法

将github_hosts文件中的内容复制到你的hosts文件中，并保存。

仓库地址

镜像链接

]]> <h1 id="github-hosts"><a href="#github-hosts" class="headerlink" title="github_hosts"></a>github_hosts</h1><h2 id="说明"><a href="#说明" class=" Spring Tool Suite https://kedaotech.com/Spring-Tool-Suite.html 2023-09-24T01:34:49.000Z 2023-09-24T08:20:09.000Z Spring Tool Suite 设置Tab键为4个空格

  • 在Spring Tool Suite -> window -> Preference -> General -> Editors，选择Insert spaces for tabs，若要展示空格可勾选Show whitespace characters
    preferences.jpg

  • 然后展开Java -> Code Style -> Formatter，点击New按钮，在New Profile窗口中，填写Profile name之后，点击OK
    formatter.jpg

  • 在弹出的窗口中，展开Indentation，设置Tab policy的值为 Spaces only

  • profile.jpg

]]> <h2 id="Spring-Tool-Suite-设置Tab键为4个空格"><a href="#Spring-Tool-Suite-设置Tab键为4个空格" class="headerlink" title="Spring Tool Suite 设置Tab键为4个空格"></a springboot with docker https://kedaotech.com/springboot-with-docker.html 2023-08-03T01:54:09.000Z 2023-08-18T07:29:03.000Z 常用的springboot项目中的Dockerfile示例

Dockerfile：利用容器打包并缓存maven

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
# 拉取编译环境
FROM maven:3.8.3-openjdk-17 as builder
# 创建项目目录
RUN mkdir /project

# 使用项目配置的文件
COPY settings.xml /usr/share/maven/conf/settings.xml

# 拷贝源码到固定的目录，注意前面有个 '.'
COPY ./pom.xml /project/pom.xml

# 切换到源码目录
WORKDIR /project

# 安装依赖
RUN mvn dependency:go-offline

# 复制源代码
COPY ./src /project/src

# 使用maven进行编译
RUN mvn clean package -Dmaven.test.skip=true

# 拉取运行环境，这个镜像打包出的镜像比较小，如需要可换成oracle的jre
FROM openjdk:17

# 从编译好的镜像中将jar拷贝到运行时容器
COPY --from=builder /project/target/xxxx.jar /

# 容器启动时执行的命令，这里可加jvm参数
ENTRYPOINT ["java","-jar","/xxxx.jar"]

# 开放端口，根据自己的配置进行开放
EXPOSE 8080

配套deploy.sh脚本

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
#!/bin/bash
start=$(date +%s)
cd /data/java_project_dir #切换到java项目所在目录 
echo "切换目录"
git pull 
echo "更新代码 完成"
docker build . --tag tts 
echo "打包镜像 完成"
docker stop tts
echo "停止服务 完成" 
docker rm tts
echo "删除容器 完成" 
docker run -itd --name=tts -p 28085:8080 tts
echo "启动服务 完成" 
docker image prune -f
echo "删除无tag镜像"
end=$(date +%s)
take=$(( end - start ))
echo 操作完成 本次用时：${take}s

安装dnf命令

正常情况下openjdk:17的镜像中是不带有yum或者dnf命令，如果要用上这个命令那就需要安装一下

  • 启动与openjdk:17 对应相同版本的 oracleLinux (查询镜像内的cat /etc/os-release)

    1
    docker run -itd --name=oraclelinux85 oraclelinux:8.5

  • 进入容器

    1
    docker exec -it oraclelinux85 /bin/bash

  • 安装基础包

    1
    yum -y install yum-utils

  • 下载dnf所有程序包（包括依赖），程序会下载所有文件在当前目录下

    1
    repotrack dnf

  • 退出容器 oraclelinux85 ，并复制文件到宿主机

    1
    docker cp oraclelinux85:/root/* ./tmp

  • 复制文件从宿主机到目标容器

    1
    docker cp ./tmp  targetContainer:/root/

  • 进入目标容器安装程序

    1
    2
    3
    4
    docker exec -it targetContainer /bin/bah
    cd /root/
    rpm -Uvh --force --nodeps *.rpm
    rm -rf *.rpm

    最后，愉快的使用dnf命令吧

]]> <h1 id="常用的springboot项目中的Dockerfile示例"><a href="#常用的springboot项目中的Dockerfile示例" class="headerlink" title="常用的springboot项目中的Dockerfile示例"></a docker 字体切割 https://kedaotech.com/docker-%E5%AD%97%E4%BD%93%E5%88%87%E5%89%B2.html 2023-03-26T12:05:40.000Z 2023-03-26T13:54:10.000Z 体验地址

https://fonts.kedaotech.com/font

]]> docker、字体切割 PaddleRec https://kedaotech.com/PaddleRec.html 2022-12-20T03:42:12.000Z 2023-04-12T05:49:04.000Z 从Docker中的Ubuntu16.04
1
2
3
4
5
6
7
8
# 拉取镜像
docker pull ubuntu:16.04

# 绑定8888端口并启动
docker run -p 8888:8888 -itd --name ubuntu ubuntu:16.04

# 进入容器内部
docker exec -it ubuntu /bin/bash

在更新容器内的操作系统

1
2
3
4
5
# 更新源
apt update

# 更新操作系统
apt upgrade

安装依赖

1
apt-get install -y make build-essential libssl-dev zlib1g-dev libbz2-dev libreadline-dev libsqlite3-dev wget curl llvm libncurses5-dev libncursesw5-dev xz-utils tk-dev libffi-dev liblzma-dev python-openssl vim zip unzip wget

更新openssl版本至1.1.1c

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31

# 切换到主目录
cd ~

# 下载源代码
wget https://www.openssl.org/source/openssl-1.1.1c.tar.gz

# 解压源代码
tar -zxf openssl-1.1.1c.tar.gz

# 进入源代码目录
cd openssl-1.1.1c

# 执行编译安装
./config
make
make install

# 链接库文件
ln -s /usr/local/lib/libcrypto.so.1.1 /usr/lib/x86_64-linux-gnu/libcrypto.so.1.1
ln -s /usr/local/lib/libssl.so.1.1 /usr/lib/x86_64-linux-gnu/libssl.so.1.1

# 备份openssl
mv /usr/bin/openssl /root/

# 链接目录
ln -s /usr/local/bin/openssl /usr/bin/openssl

# 查看当前openssl版本
openssl version

安装Git

1
apt-get install git -y

安装 pyenv 方便安装Python3.7.4

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
curl https://pyenv.run | bash

#添加 对应文件到 .bashrc


#安装 python3.7.4
pyenv install 3.7.4

#全局使用
pyenv global 3.7.4

# 更新pip
python -m pip install --upgrade pip 

#安装飞桨1.8.4
python -m pip install paddlepaddle==1.8.4 -i https://mirror.baidu.com/pypi/simple

# 降低飞桨默认安装最新版本的protobuf
pip install protobuf==3.20.1

安装 Jupyter lab

1
2
3
pip install jupyterlab
pip install jupyterlab-language-pack-zh-CN
jupyter lab --allow-root
]]> <h2 id="从Docker中的Ubuntu16-04"><a href="#从Docker中的Ubuntu16-04" class="headerlink" title="从Docker中的Ubuntu16.04"></a>从Docker中的Ubuntu16.04</h2>< Rocky https://kedaotech.com/Rocky.html 2022-12-19T09:22:25.000Z 2023-04-12T05:49:04.000Z Rocky下安装Python3.7.4
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
# 更新操作系统
dnf check-update -y
dnf update -y
dnf install gcc openssl-devel bzip2-devel libffi-devel zlib-devel wget make -y

# 下载源代码
wget https://www.python.org/ftp/python/3.7.4/Python-3.7.4.tar.xz
# 解压
tar -xf Python-3.7.4.tar.xz
# 目录切换
cd Python-3.7.4
# 进行编译
./configure --enable-optimizations

make -j 6
nproc
make altinstall

# 版本
python3.7 --version

# 更新pip
python3.7 -m pip install --upgrade pip

飞桨安装

1
2
python3 -m pip install paddlepaddle==1.8.4 -i https://mirror.baidu.com/pypi/simple

]]> <h2 id="Rocky下安装Python3-7-4"><a href="#Rocky下安装Python3-7-4" class="headerlink" title="Rocky下安装Python3.7.4"></a>Rocky下安装Python3.7.4</h2><figu 初始化Node.js项目 https://kedaotech.com/init-project.html 2022-08-11T14:55:21.000Z 2022-08-11T17:00:05.000Z 创建项目
1
mkdir projectname && npm init

安装依赖

1
2
3
4
5
6
7
8
9
10
# 使用d3
npm i d3

# 使用rollup打包
npm install rollup --global 
rollup -c

#添加压缩
npm install rollup-plugin-terser

]]> <h2 id="创建项目"><a href="#创建项目" class="headerlink" title="创建项目"></a>创建项目</h2><figure class="highlight bash"><table><tr><td class="gutter"><pre MySQL安全 https://kedaotech.com/MySQL%E5%AE%89%E5%85%A8.html 2021-09-09T23:12:55.000Z 2021-09-10T03:32:52.000Z MySQL 安全

SSL启用

1
2
3
4
参考文档：[https://www.cnblogs.com/mysql-dba/p/7061300.html](https://www.cnblogs.com/mysql-dba/p/7061300.html)
JDBC：[https://www.codenong.com/cs106646667/](https://www.codenong.com/cs106646667/)
JDBC: [https://www.huaweicloud.com/articles/b6f3c64228a6089ad415b4cb085af5d4.html](https://www.huaweicloud.com/articles/b6f3c64228a6089ad415b4cb085af5d4.html)

审计

第三方插件：第三方插件

漏洞升级

1
2
3
4
5
6
yum list| grep mysql
yum update mysql-server
yum update mysqld mysql-devel
systemctl restart mysqld

# 主从情况下，全部停机，先启主再启从

登录限制

官方文档传送门: https://dev.mysql.com/doc/refman/5.7/en/connection-control-installation.html

中文文档：https://www.docs4dev.com/docs/zh/mysql/5.7/reference/connection-control-installation.html

网友文档：https://blog.csdn.net/leonpenn/article/details/104790469

]]> <h2 id="MySQL-安全"><a href="#MySQL-安全" class="headerlink" title="MySQL 安全"></a>MySQL 安全</h2><h3 id="SSL启用"><a href="#SSL启用" class="headerlink CentOS7 openssl升级 https://kedaotech.com/openssl%E5%8D%87%E7%BA%A7.html 2021-08-30T06:44:14.000Z 2021-08-30T17:00:04.000Z openssl升级

下载

1
2
3
4
5
6

# openssl 路径： 
wget https://www.openssl.org/source/openssl-1.1.1l.tar.gz 

#openssh 路径： 
wget https://cdn.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-8.7p1.tar.gz

安装工具与依赖

1
2
3
yum install gcc gcc-c++ glibc make autoconf openssl openssl-devel pcre-devel  pam-deve

yum install  -y pam* zlib*

安装 openssl

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
# 备份原来的openssl

mv /usr/bin/openssl /usr/bin/openssl_bak

mv /usr/include/openssl /usr/include/openssl_bak

# 安装
tar -xzf openssl-1.1.1l.tar.gz && cd openssl-1.1.1l && ./config --prefix=/usr/local/openssl --shared && make && make install

ln -s /usr/local/openssl/bin/openssl /usr/bin/openssl

ln -s /usr/local/openssl/include/openssl /usr/include/openssl

`echo "/usr/local/openssl/lib" >>/etc/ld.so.conf`

ln -s /usr/local/lib64/libssl.so.1.1 /usr/lib64/libssl.so.1.1

ln -s /usr/local/lib64/libcrypto.so.1.1 /usr/lib64/libcrypto.so.1.1

ldconfig

openssl version

# OpenSSL 1.1.1h 22 Sep 2020

安装openssh

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
#安装openssh前 将openssl 安装到/usr/local/openssl

# 备份原来的 ssh配置


tar -xzf openssh-8.7p1.tar.gz 

cd /etc/ssh && mkdir –p /root/sshbak && mv ./* /root/sshbak

cd /data/openssh-8.7p1

./configure --prefix=/usr/local/openssh --sysconfdir=/etc/ssh --with-openssl-includes=/usr/local/openssl/include --with-ssl-dir=/usr/local/openssl --with-zlib --with-md5-passwords --with-pam

make && make install

mv /usr/bin/ssh /usr/bin/ssh-bak20210830

ln -s /usr/local/openssh/bin/ssh /usr/bin/ssh

cp -a contrib/redhat/sshd.init /etc/init.d/sshd

cp -a contrib/redhat/sshd.pam /etc/pam.d/sshd.pam

chmod +x /etc/init.d/sshd

chkconfig --add sshd && systemctl enable sshd

mv  /usr/lib/systemd/system/sshd.service  /data/

chkconfig sshd on

ssh -V

# OpenSSH_8.4p1, OpenSSL 1.1.1h 22 Sep 2020
1
2
3
vim /etc/ssh/sshd_config
# 设置 usePAM = yes
systemctl restart sshd
]]> <h2 id="openssl升级"><a href="#openssl升级" class="headerlink" title="openssl升级"></a>openssl升级</h2><h3 id="下载"><a href="#下载" class="headerlink" CentOS7-swap https://kedaotech.com/CentOS7-swap.html 2021-07-09T07:09:43.000Z 2021-07-09T07:30:07.000Z 调整Swap分区大小

查看磁盘使用情况

1
df -h

添加swap文件并设置其大小为2G

1
2
3
4
5
6
# if 表示infile
# of 表示outfile
# bs=1MB 代表增加的模块大小
# count=2048 代表2048个模块，也就是2G空间，
# 将目的文件设置为swap分区文件
dd if=/dev/zero of=/tmp/swap bs=1MB count=2048

使用mkswap命令创建swap空间

1
mkswap /tmp/swap

启用新的swap

1
swapon /tmp/swap

查看swap是否生效

1
free -h

永久生效该分区，需要修改 /etc/fstab 文件，在文件最后增加以下内容：

1
/tmp/swap swap swap defaults 0 0

清除不再需要的swap分区

1
swapoff /tmp/swap
]]> <h2 id="调整Swap分区大小"><a href="#调整Swap分区大小" class="headerlink" title="调整Swap分区大小"></a>调整Swap分区大小</h2><h3 id="查看磁盘使用情况"><a href="#查看磁盘使用情况" cla CentOS7-显卡 https://kedaotech.com/CentOS7-%E6%98%BE%E5%8D%A1.html 2021-04-06T02:32:20.000Z 2021-07-01T09:59:39.000Z 安装所需要的驱动

从NVIDIA官网上下载所需要的驱动文件(.run)。 https://www.nvidia.cn/Download/index.aspx?lang=cn

具体的选择是：Quadro Series -> K4000 -> Linux 64bit -> English(US)。

安装依赖关系

三个依赖：gcc，kernel-devel，dkms。要注意kernel-devel要与当前内核版本一致，检查方式如下：

1
2
uname -r # 检查当前内核版本
rpm -aq | grep kernel-devel # 检查安装的kernel-devel版本

我的检查结果是源码有多个版本共存，但后面安装过程正常，应该没什么问题。

屏蔽系统的nouveau

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20

# <方法一> 修改/lib下的dist-blacklist.conf文件：
$ sudo vi /lib/modprobe.d/dist-blacklist.conf

#把"nvidiafb"注释掉：

# blacklist nvidiafb

#添加语句：

blacklist nouveau
options nouveau modeset=0

# 重新建立initramfs image文件
$ sudo mv /boot/initramfs-$(uname -r).img /boot/initramfs-$(uname -r).img.bak

$ sudo dracut /boot/initramfs-$(uname -r).img $(uname -r)

# 重启
$ reboot

安装驱动

先修改.run文件的权限为可执行

$ chmod +x NVIDIA-Linux-x86_64-xxxxxx.run

然后执行！

$ sudo ./NVIDIA-Linux-x86_64-xxxxxx.run

在这过程中遇到的选择：
1： “XXXXXX” 大体意思是现在没有完全退出X Windows

A：退出驱动安装，确认系统完全退出图形界面。比如：

$ init 5                 # 进入图形界面

$ systemctl set-default multi-user.target        # 准备进入文本模式

$ reboot              # 重启后自动进入文本模式，之后再重新run

2：Install NVIDIA‘s 32-bit compatibility libraries?

A：选择NO继续。

3：Would you like to run the nvidia-xconfigutility to automatically update your x configuration so that the NVIDIA x driver will be used when you restart x? Any pre-existing x confile will be backed up.

A：选择YES继续。

安装完成！

]]> <h2 id="安装所需要的驱动"><a href="#安装所需要的驱动" class="headerlink" title="安装所需要的驱动"></a>安装所需要的驱动</h2><p>从NVIDIA官网上下载所需要的驱动文件(.run)。 <a href="https://w CentOS7 更新 make https://kedaotech.com/CentOS7-make.html 2021-03-21T12:56:25.000Z 2021-07-01T09:59:39.000Z 安装过程
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
# 官方地址
https://ftp.gnu.org/gnu/make/

# 解压
tar -zxvf make-4.2.1.tar.gz

# 安装
cd make-4.2.1
# 建立编译目录
mkdir build
cd build
# 执行
../configure --prefix=/usr

# 执行完，这里需要编译，会生成build.sh文件，然后执行这个文件
sh build.sh
# 然后安装
make install

# 然后就安装完成了，查看版本
make -v
GNU Make 4.2.1

安装bison

1
yum install -y bison
]]> <h2 id="安装过程"><a href="#安装过程" class="headerlink" title="安装过程"></a>安装过程</h2><figure class="highlight bash"><table><tr><td class="gutter"><pre CentOS7 更新 gcc https://kedaotech.com/CentOS7-gcc.html 2021-03-21T12:55:42.000Z 2021-07-01T09:59:39.000Z 前置条件：建议更新make
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46

yum -y install wget bzip2 gcc gcc-c++ glibc-headers

# 下载gcc包到自己的目录，-P后面的下载目录自己指定
# 下载这个文件可以直接去官网下，反而更快一些，
# 下载地址：https://mirrors.tuna.tsinghua.edu.cn/gnu/gcc（自己选择版本）
wget -c -P /opt/software/ https://mirrors.tuna.tsinghua.edu.cn/gnu/gcc/gcc-8.2.0/gcc-8.2.0.tar.gz

# 解压
cd /opt/software/
tar -zxvf gcc-8.2.0.tar.gz
# 解压要好久，可以喝杯茶放松一下

cd gcc-8.2.0
./contrib/download_prerequisites    #下载gmp mpfr mpc等供编译需求的依赖项

# 不能在source目录下configure，必须在上一层的目录下
mkdir build

cd bulid

../configure --prefix=/usr/local/gcc-8.2.0 --enable-bootstrap --enable-checking=release --enable-languages=c,c++ --disable-multilib

# 启用cpu 12个线程进行编译
make  -j12 
# 结果：

# 接下来安装它
make install

# 写配置文件
echo -e '\nexport PATH=/usr/local/gcc-8.2.0/bin:$PATH\n' >> /etc/profile.d/gcc.sh && source /etc/profile.d/gcc.sh

# 导出头文件
ln -sv /usr/local/gcc-9.2.0/include/ /usr/include/gcc

#配置生效
ldconfig -v    
# 结果：

# 导出验证
ldconfig -p |grep gcc
# 结果：

# 查看版本
gcc -v
]]> <h2 id="前置条件：建议更新make"><a href="#前置条件：建议更新make" class="headerlink" title="前置条件：建议更新make"></a>前置条件：建议更新make</h2><figure class="highlight bash