tag:blogger.com,1999:blog-35064192507915021552024-03-06T13:34:12.744+08:00MIB laboratoryMIB - Laboratory 一個關於黑手工程師的狂想國度!!!!Anonymoushttp://www.blogger.com/profile/02768237855233416154noreply@blogger.comBlogger258125tag:blogger.com,1999:blog-3506419250791502155.post-76483366060364107742017-09-26T17:40:00.001+08:002017-09-26T17:42:39.010+08:00CentOS 7.X 安裝 MYSQL<div class="MsoNormal">
<span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">前言:</span><span lang="EN-US">mysql</span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">官網上</span><span lang="EN-US">yum</span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">的位置</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">http://dev.mysql.com/downloads/repo/yum/ <o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US"><b><span style="font-size: large;"><br /></span></b></span></div>
<div class="MsoNormal">
<span style="font-size: large;"><span lang="EN-US">1.</span><span style="font-family: , serif;">檢查</span><span lang="EN-US">centos</span><span style="font-family: , serif;">系統中是否有</span><span lang="EN-US">mysql</span><span style="font-family: , serif;">的</span><span lang="EN-US">yum</span><span style="font-family: , serif;">安裝包</span></span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">[root@localhost src]# <b><span style="color: red;">yum list *mysql*</span></b><o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US"><br /></span></div>
<div class="MsoNormal">
<span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">已載入外掛程式:</span><span lang="EN-US">fastestmirror, langpacks<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">Loading mirror speeds from cached hostfile<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US"> *
base: centos.ustc.edu.cn<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US"> *
extras: centos.ustc.edu.cn<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US"> *
updates: centos.ustc.edu.cn<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US"><br /></span></div>
<div class="MsoNormal">
<span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">錯誤:沒有匹配的套裝軟體可以列出</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">[root@localhost src]# <o:p></o:p></span></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<span style="font-size: large;"><span lang="EN-US">2.</span><span style="font-family: , serif;">下載</span><span lang="EN-US">mysql</span><span style="font-family: , serif;">安裝包</span></span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">[root@localhost src]# <b><span style="color: red;">wget
https://dev.mysql.com/get/mysql57-community-release-el7-9.noarch.rpm</span></b><o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US"><b><span style="color: red;"><br /></span></b></span></div>
<div class="MsoNormal">
<span lang="EN-US">--2017-02-25 07:01:34-- https://dev.mysql.com/get/mysql57-community-release-el7-9.noarch.rpm<o:p></o:p></span></div>
<div class="MsoNormal">
<span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">正在解析主機</span><span lang="EN-US"> dev.mysql.com (dev.mysql.com)...
137.254.60.11<o:p></o:p></span></div>
<div class="MsoNormal">
<span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">正在連接</span><span lang="EN-US"> dev.mysql.com
(dev.mysql.com)|137.254.60.11|:443... </span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">已連接。</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoNormal">
<span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">已發出</span><span lang="EN-US"> HTTP </span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">請求,正在等待回應</span><span lang="EN-US">...
302 Found<o:p></o:p></span></div>
<div class="MsoNormal">
<span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">位置:</span><span lang="EN-US">https://repo.mysql.com//mysql57-community-release-el7-9.noarch.rpm
[</span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">跟隨至新的</span><span lang="EN-US"> URL]<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">--2017-02-25 07:01:36--
https://repo.mysql.com//mysql57-community-release-el7-9.noarch.rpm<o:p></o:p></span></div>
<div class="MsoNormal">
<span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">正在解析主機</span><span lang="EN-US"> repo.mysql.com (repo.mysql.com)...
104.88.152.154<o:p></o:p></span></div>
<div class="MsoNormal">
<span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">正在連接</span><span lang="EN-US"> repo.mysql.com
(repo.mysql.com)|104.88.152.154|:443... </span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">已連接。</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoNormal">
<span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">已發出</span><span lang="EN-US"> HTTP </span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">請求,正在等待回應</span><span lang="EN-US">...
200 OK<o:p></o:p></span></div>
<div class="MsoNormal">
<span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">長度:</span><span lang="EN-US">9224 (9.0K) [application/x-redhat-package-manager]<o:p></o:p></span></div>
<div class="MsoNormal">
<span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">正在保存至</span><span lang="EN-US">: </span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">“</span><span lang="EN-US">mysql57-community-release-el7-9.noarch.rpm</span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">”</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">100%[======================================>]
9,224 --.-K/s </span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">用時</span><span lang="EN-US"> 0s <o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">2017-02-25 07:01:36 (72.9 MB/s) - </span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">已保存</span> <span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">“</span><span lang="EN-US">mysql57-community-release-el7-9.noarch.rpm</span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">”</span><span lang="EN-US"> [9224/9224])<o:p></o:p></span></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<span style="font-size: large;"><span lang="EN-US">3.</span><span style="font-family: , serif;">用</span><span lang="EN-US">yum</span><span style="font-family: , serif;">命令安裝</span></span><span lang="EN-US"><span style="font-size: large;">mysql</span><o:p></o:p></span></div>
<div class="MsoNormal">
<span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">進入到包含有</span><span lang="EN-US">mysql</span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">安裝包的路徑</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">[root@localhost src]#<span style="background-color: white; color: red;"> <b>l</b><b>s</b></span><o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">mysql57-community-release-el7-9.noarch.rpm<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US"><br /></span></div>
<div class="MsoNormal">
<span lang="EN-US">[root@localhost src]# <span style="color: red;"><b>yum localinstall
mysql57-community-release-el7-9.noarch.rpm </b></span><o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US"><span style="color: red;"><b><br /></b></span></span></div>
<div class="MsoNormal">
<span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">已載入外掛程式:</span><span lang="EN-US">fastestmirror, langpacks<o:p></o:p></span></div>
<div class="MsoNormal">
<span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">正在檢查</span><span lang="EN-US"> mysql57-community-release-el7-9.noarch.rpm:
mysql57-community-release-el7-9.noarch<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">mysql57-community-release-el7-9.noarch.rpm </span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">將被安裝</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoNormal">
<span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">正在解決依賴關係</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">--> </span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">正在檢查事務</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">---> </span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">套裝軟體</span><span lang="EN-US">
mysql57-community-release.noarch.0.el7-9 </span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">將被</span> <span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">安裝</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">--> </span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">解決依賴關係完成</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">base/7/x86_64 | 3.6 kB 00:00
<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">extras/7/x86_64 | 3.4 kB 00:00
<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">extras/7/x86_64/primary_db | 122 kB 00:00
<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">updates/7/x86_64 | 3.4 kB 00:00
<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">updates/7/x86_64/primary_db | 2.9 MB 00:02
<o:p></o:p></span></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">依賴關係解決</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<span lang="EN-US">================================================================================<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US"> Package </span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">架構</span><span lang="EN-US"> </span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">版本</span><span lang="EN-US"> </span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">源</span><span lang="EN-US"> </span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">大小</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">================================================================================</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoNormal">
<span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">正在安裝</span><span lang="EN-US">:</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US"> mysql57-community-release<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US"> noarch el7-9
/mysql57-community-release-el7-9.noarch 8.6 k<o:p></o:p></span></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">事務概要</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">================================================================================</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoNormal">
<span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">安裝</span><span lang="EN-US">
1 </span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">套裝軟體</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">總計:</span><span lang="EN-US">8.6 k</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoNormal">
<span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">安裝大小:</span><span lang="EN-US">8.6 k<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">Is this ok [y/d/N]: y<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">Downloading packages:<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">Running transaction check<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">Running transaction test<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">Transaction test succeeded<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">Running transaction<o:p></o:p></span></div>
<div class="MsoNormal">
<span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">警告:</span><span lang="EN-US">RPM </span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">資料庫已被非</span><span lang="EN-US"> yum </span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">程式修改。</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">** </span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">發現</span><span lang="EN-US"> 7 </span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">個已存在的</span><span lang="EN-US"> RPM </span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">資料庫問題,</span><span lang="EN-US"> 'yum check' </span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">輸出如下:</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">icedtea-web-1.6.2-4.el7.x86_64 </span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">有缺少的需求</span><span lang="EN-US"> java-1.8.0-openjdk<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">ipa-client-4.4.0-12.el7.centos.x86_64 </span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">有已安裝衝突</span><span lang="EN-US"> freeipa-client: ipa-client-4.4.0-12.el7.centos.x86_64<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">ipa-client-common-4.4.0-12.el7.centos.noarch
</span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">有已安裝衝突</span><span lang="EN-US"> freeipa-client-common: ipa-client-common-4.4.0-12.el7.centos.noarch<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">ipa-common-4.4.0-12.el7.centos.noarch </span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">有已安裝衝突</span><span lang="EN-US"> freeipa-common: ipa-common-4.4.0-12.el7.centos.noarch<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">jline-1.0-8.el7.noarch </span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">有缺少的需求</span><span lang="EN-US"> java >= ('0', '1.5', None)<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">1:libreoffice-core-5.0.6.2-3.el7.x86_64 </span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">有缺少的需求</span><span lang="EN-US"> java-headless >= ('1', '1.6', None)<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">1:libreoffice-ure-5.0.6.2-3.el7.x86_64 </span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">有缺少的需求</span><span lang="EN-US"> libjvm.so()(64bit)<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US"> </span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">正在安裝</span><span lang="EN-US"> : mysql57-community-release-el7-9.noarch 1/1 <o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US"> </span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">驗證中</span><span lang="EN-US"> :
mysql57-community-release-el7-9.noarch
1/1 <o:p></o:p></span></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">已安裝</span><span lang="EN-US">:<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">
mysql57-community-release.noarch 0:el7-9 <o:p></o:p></span></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">完畢!</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<span style="font-size: large;"><span lang="EN-US">4 </span><span style="font-family: , serif;">檢查</span><span lang="EN-US">mysql</span><span style="font-family: , serif;">源是否安裝成功,如下截圖顯示</span><span lang="EN-US">mysql</span><span style="font-family: , serif;">源安裝成功</span></span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">[root@localhost src]# <span style="color: red;"><b>yum repolist enabled
|grep "mysql.*-community.*"</b></span><o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US"><span style="color: #134f5c;">mysql-connectors-community/x86_64 MySQL Connectors Community 3<o:p></o:p></span></span></div>
<div class="MsoNormal">
<span lang="EN-US"><span style="color: #134f5c;">mysql-tools-community/x86_64 MySQL Tools Community 4<o:p></o:p></span></span></div>
<div class="MsoNormal">
<span lang="EN-US"><span style="color: #134f5c;">mysql57-community/x86_64 MySQL 5.7 Community
Server 16</span><o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">[root@localhost src]# <o:p></o:p></span></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<span style="font-size: large;"><span lang="EN-US">5 </span><span style="font-family: , serif;">安裝</span></span><span lang="EN-US"><span style="font-size: large;">mysql</span><o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">[root@localhost src]# <span style="color: red;"><b>yum install
mysql-community-server</b></span><o:p></o:p></span></div>
<div class="MsoNormal">
<span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;"><br /></span></div>
<div class="MsoNormal">
<span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">已載入外掛程式:</span><span lang="EN-US">fastestmirror, langpacks<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">Loading mirror speeds from cached hostfile<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US"> *
base: centos.ustc.edu.cn<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US"> *
extras: centos.ustc.edu.cn<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US"> *
updates: centos.ustc.edu.cn<o:p></o:p></span></div>
<div class="MsoNormal">
<span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">正在解決依賴關係</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">--> </span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">正在檢查事務</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">---> </span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">套裝軟體</span><span lang="EN-US"> mysql-community-server.x86_64.0.5.7.17-1.el7
</span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">將被</span>
<span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">安裝</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">--> </span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">正在處理依賴關係</span><span lang="EN-US">
mysql-community-common(x86-64) = 5.7.17-1.el7</span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">,它被套裝軟體</span><span lang="EN-US">
mysql-community-server-5.7.17-1.el7.x86_64 </span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">需要</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">--> </span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">正在處理依賴關係</span><span lang="EN-US">
mysql-community-client(x86-64) >= 5.7.9</span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">,它被套裝軟體</span><span lang="EN-US">
mysql-community-server-5.7.17-1.el7.x86_64 </span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">需要</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">--> </span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">正在檢查事務</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">---> </span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">套裝軟體</span><span lang="EN-US">
mysql-community-client.x86_64.0.5.7.17-1.el7 </span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">將被</span> <span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">安裝</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">--> </span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">正在處理依賴關係</span><span lang="EN-US">
mysql-community-libs(x86-64) >= 5.7.9</span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">,它被套裝軟體</span><span lang="EN-US">
mysql-community-client-5.7.17-1.el7.x86_64 </span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">需要</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">---> </span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">套裝軟體</span><span lang="EN-US">
mysql-community-common.x86_64.0.5.7.17-1.el7 </span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">將被</span> <span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">安裝</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">--> </span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">正在檢查事務</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">---> </span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">套裝軟體</span><span lang="EN-US">
mariadb-libs.x86_64.1.5.5.52-1.el7 </span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">將被</span> <span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">取代</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">--> </span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">正在處理依賴關係</span><span lang="EN-US">
libmysqlclient.so.18()(64bit)</span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">,它被套裝軟體</span><span lang="EN-US"> 2:postfix-2.10.1-6.el7.x86_64
</span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">需要</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">--> </span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">正在處理依賴關係</span><span lang="EN-US">
libmysqlclient.so.18(libmysqlclient_18)(64bit)</span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">,它被套裝軟體</span><span lang="EN-US"> 2:postfix-2.10.1-6.el7.x86_64
</span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">需要</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">---> </span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">套裝軟體</span><span lang="EN-US">
mysql-community-libs.x86_64.0.5.7.17-1.el7 </span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">將被</span> <span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">捨棄</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">--> </span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">正在檢查事務</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">---> </span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">套裝軟體</span><span lang="EN-US">
mysql-community-libs-compat.x86_64.0.5.7.17-1.el7 </span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">將被</span> <span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">捨棄</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">--> </span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">解決依賴關係完成</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">依賴關係解決</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<span lang="EN-US">======================================================================================================================================================<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US"> Package </span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">架構</span><span lang="EN-US"> </span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">版本</span><span lang="EN-US"> </span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">源</span> <span lang="EN-US"> </span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">大小</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">======================================================================================================================================================<o:p></o:p></span></div>
<div class="MsoNormal">
<span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">正在安裝</span><span lang="EN-US">:<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US"> mysql-community-libs x86_64 5.7.17-1.el7 mysql57-community 2.1 M<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">
</span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">替換</span><span lang="EN-US"> mariadb-libs.x86_64 1:5.5.52-1.el7<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US"> mysql-community-libs-compat x86_64 5.7.17-1.el7 mysql57-community 2.0 M<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">
</span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">替換</span><span lang="EN-US"> mariadb-libs.x86_64
1:5.5.52-1.el7<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US"> mysql-community-server x86_64 5.7.17-1.el7 mysql57-community 162 M<o:p></o:p></span></div>
<div class="MsoNormal">
<span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">為依賴而安裝</span><span lang="EN-US">:<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US"> mysql-community-client x86_64 5.7.17-1.el7 mysql57-community 24 M<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US"> mysql-community-common x86_64 5.7.17-1.el7 mysql57-community 271 k<o:p></o:p></span></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">事務概要</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">======================================================================================================================================================<o:p></o:p></span></div>
<div class="MsoNormal">
<span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">安裝</span><span lang="EN-US">
3 </span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">套裝軟體</span><span lang="EN-US"> (+2 </span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">依賴套裝軟體</span><span lang="EN-US">)<o:p></o:p></span></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">總下載量:</span><span lang="EN-US">190 M<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">Is this ok [y/d/N]: y<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">Downloading packages:<o:p></o:p></span></div>
<div class="MsoNormal">
<span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">警告:</span><span lang="EN-US">/var/cache/yum/x86_64/7/mysql57-community/packages/mysql-community-common-5.7.17-1.el7.x86_64.rpm:
</span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">頭</span><span lang="EN-US">V3 DSA/SHA1 Signature, </span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">金鑰</span><span lang="EN-US"> ID 5072e1f5: NOKEY<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">mysql-community-common-5.7.17-1.el7.x86_64.rpm
</span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">的公開金鑰尚未安裝</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">(1/5):
mysql-community-common-5.7.17-1.el7.x86_64.rpm
|
271 kB 00:00:00 <o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">(2/5):
mysql-community-libs-5.7.17-1.el7.x86_64.rpm
| 2.1 MB 00:00:03 <o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">(3/5): mysql-community-libs-compat-5.7.17-1.el7.x86_64.rpm
| 2.0 MB 00:00:02 <o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">(4/5): mysql-community-client-5.7.17-1.el7.x86_64.rpm
| 24 MB
00:00:29 <o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">(5/5):
mysql-community-server-5.7.17-1.el7.x86_64.rpm
| 162 MB 00:01:23
<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">------------------------------------------------------------------------------------------------------------------------------------------------------<o:p></o:p></span></div>
<div class="MsoNormal">
<span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">總計</span><span lang="EN-US">
2.1
MB/s | 190 MB 00:01:29 <o:p></o:p></span></div>
<div class="MsoNormal">
<span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">從</span><span lang="EN-US"> file:///etc/pki/rpm-gpg/RPM-GPG-KEY-mysql
</span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">檢索金鑰</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoNormal">
<span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">導入</span><span lang="EN-US"> GPG key 0x5072E1F5:<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US"> </span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">用戶</span><span lang="EN-US">ID : "MySQL Release
Engineering <mysql-build@oss.oracle.com>"<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US"> </span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">指紋</span><span lang="EN-US"> : a4a9 4068 76fc bd3c
4567 70c8 8c71 8d3b 5072 e1f5<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US"> </span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">套裝軟體</span><span lang="EN-US"> :
mysql57-community-release-el7-9.noarch (installed)<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US"> </span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">來自</span><span lang="EN-US"> :
/etc/pki/rpm-gpg/RPM-GPG-KEY-mysql<o:p></o:p></span></div>
<div class="MsoNormal">
<span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">是否繼續?</span><span lang="EN-US">[y/N]</span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">:</span><span lang="EN-US">y<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">Running transaction check<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">Running transaction test<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">Transaction test succeeded<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">Running transaction<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US"> </span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">正在安裝</span><span lang="EN-US"> :
mysql-community-common-5.7.17-1.el7.x86_64 1/6
<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US"> </span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">正在安裝</span><span lang="EN-US"> :
mysql-community-libs-5.7.17-1.el7.x86_64
2/6 <o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US"> </span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">正在安裝</span><span lang="EN-US"> :
mysql-community-client-5.7.17-1.el7.x86_64
3/6 <o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US"> </span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">正在安裝</span><span lang="EN-US"> :
mysql-community-server-5.7.17-1.el7.x86_64 4/6
<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US"> </span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">正在安裝</span><span lang="EN-US"> : mysql-community-libs-compat-5.7.17-1.el7.x86_64
5/6 <o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US"> </span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">正在刪除</span><span lang="EN-US"> :
1:mariadb-libs-5.5.52-1.el7.x86_64
6/6 <o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US"> </span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">驗證中</span><span lang="EN-US"> :
mysql-community-common-5.7.17-1.el7.x86_64
1/6 <o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US"> </span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">驗證中</span><span lang="EN-US"> : mysql-community-server-5.7.17-1.el7.x86_64 2/6
<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US"> </span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">驗證中</span><span lang="EN-US"> :
mysql-community-libs-5.7.17-1.el7.x86_64
3/6 <o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US"> </span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">驗證中</span><span lang="EN-US"> :
mysql-community-libs-compat-5.7.17-1.el7.x86_64
4/6 <o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US"> </span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">驗證中</span><span lang="EN-US"> :
mysql-community-client-5.7.17-1.el7.x86_64 5/6
<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US"> </span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">驗證中</span><span lang="EN-US"> :
1:mariadb-libs-5.5.52-1.el7.x86_64
6/6 <o:p></o:p></span></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">已安裝</span><span lang="EN-US">:<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">
mysql-community-libs.x86_64 0:5.7.17-1.el7 mysql-community-libs-compat.x86_64
0:5.7.17-1.el7 mysql-community-server.x86_64
0:5.7.17-1.el7 <o:p></o:p></span></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">作為依賴被安裝</span><span lang="EN-US">:<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">
mysql-community-client.x86_64 0:5.7.17-1.el7
mysql-community-common.x86_64 0:5.7.17-1.el7 <o:p></o:p></span></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">替代</span><span lang="EN-US">:<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">
mariadb-libs.x86_64 1:5.5.52-1.el7
<o:p></o:p></span></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">完畢!</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">[root@localhost src]# <o:p></o:p></span></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<span style="font-size: large;"><span lang="EN-US">6 </span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">啟動</span><span lang="EN-US">mysql</span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">服務</span><span lang="EN-US">(</span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">這個命令有點慢,大概</span><span lang="EN-US">2-3</span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">分鐘的樣子。。。,啟動時候螢幕沒有提示資訊</span></span><span lang="EN-US"><span style="font-size: large;">)</span><o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">[root@localhost src]# <span style="color: red;"><b>systemctl start
mysqld</b></span><o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">[root@localhost src]# <o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US"><span style="font-size: large;"><br /></span></span></div>
<div class="MsoNormal">
<span style="font-size: large;"><span lang="EN-US">7 </span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">查看</span><span lang="EN-US">MySQL</span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">的啟動狀態(顯示下面的資訊,表示</span><span lang="EN-US">mysql</span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">啟動成功)</span></span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">[root@localhost src]# <span style="color: red;"><b>systemctl status
mysqld</b></span><o:p></o:p></span></div>
<div class="MsoNormal">
<span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;"><br /></span></div>
<div class="MsoNormal">
<span lang="EN-US"><span style="font-family: , serif;">◆</span>mysqld.service - MySQL Server<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">
Loaded: loaded (/usr/lib/systemd/system/mysqld.service; enabled; vendor
preset: disabled)<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">
Active: active (running) since </span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">六</span><span lang="EN-US"> 2017-02-25 08:01:43
CST; 1min 41s ago<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">
Docs: man:mysqld(8)<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">
http://dev.mysql.com/doc/refman/en/using-systemd.html<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">
Process: 6228 ExecStart=/usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
$MYSQLD_OPTS (code=exited, status=0/SUCCESS)<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">
Process: 6139 ExecStartPre=/usr/bin/mysqld_pre_systemd (code=exited,
status=0/SUCCESS)<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US"> Main
PID: 6230 (mysqld)<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">
CGroup: /system.slice/mysqld.service<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">
</span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">└─</span><span lang="EN-US">6230 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid<o:p></o:p></span></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<span lang="EN-US">2</span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">月</span><span lang="EN-US"> 25 08:01:12
localhost systemd[1]: Starting MySQL Server...<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">2</span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">月</span><span lang="EN-US"> 25 08:01:43
localhost systemd[1]: Started MySQL Server.<o:p></o:p></span></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<span style="font-size: large;"><span lang="EN-US">8 </span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">設置開機啟動</span></span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">shell> <span style="color: red;"><b>systemctl enable mysqld</b></span><o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">shell> <b><span style="color: red;">systemctl daemon-reload</span></b><o:p></o:p></span></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<span style="font-size: large;"><span lang="EN-US">9 </span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">修改</span><span lang="EN-US">root</span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">預設密碼</span></span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US"><b>9.1</b> mysql</span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">安裝完成之後,在</span><span lang="EN-US">/var/log/mysqld.log</span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">檔中給</span><span lang="EN-US">root</span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">生成了一個預設密碼。通過下面的方式找到</span><span lang="EN-US">root</span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">預設密碼,然後登錄</span><span lang="EN-US">mysql</span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">進行修改:</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">[root@localhost log]# <span style="color: red;"><b>grep 'temporary
password' /var/log/mysqld.log</b></span><o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US"><br /></span></div>
<div class="MsoNormal">
<span lang="EN-US">2017-02-25T00:01:29.530714Z 1 [Note] A
temporary password is generated for root@localhost: <span style="color: blue;">+Fx;UZHzy6MI</span><o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US"><b><br /></b></span></div>
<div class="MsoNormal">
<span lang="EN-US"><b>9.2</b> </span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">在下面的</span><span lang="EN-US">Enter password </span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">輸入上面那個自動生成的密碼</span><span lang="EN-US"> <span style="color: blue;">+Fx;UZHzy6MI</span></span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">,回車後出現</span><span lang="EN-US">mysql></span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">提示符號</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoNormal">
[root@localhost log]# <span style="color: blue;">mysql -uroot -p</span></div>
<div class="MsoNormal">
Enter password:</div>
<div class="MsoNormal">
<span lang="EN-US">Welcome to the MySQL monitor. Commands end with ; or \g.<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">Your MySQL connection id is 3<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">Server version: 5.7.17<o:p></o:p></span></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<span lang="EN-US">Copyright (c) 2000, 2016, Oracle and/or its
affiliates. All rights reserved.<o:p></o:p></span></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<span lang="EN-US">Oracle is a registered trademark of Oracle
Corporation and/or its<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">affiliates. Other names may be trademarks
of their respective<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">owners.<o:p></o:p></span></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<span lang="EN-US">Type 'help;' or '\h' for help. Type '\c' to
clear the current input statement.<o:p></o:p></span></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<span lang="EN-US">mysql> <o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US"><br /></span></div>
<div class="MsoNormal">
<span lang="EN-US"><b>9.3 </b></span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">在</span><span lang="EN-US">mysql</span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">提示符號下,輸入如下命令,修改</span><span lang="EN-US">mysql root</span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">使用者密碼</span><span lang="EN-US">,</span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">把密碼修改為</span><span lang="EN-US">Root123456!@
</span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">(預設密碼策略要求:字母,數位,特殊字元,字母必須把含有大寫的</span><span lang="EN-US">)<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US"><br /></span></div>
<div class="MsoNormal">
<span lang="EN-US"><span style="color: #7f6000;">mysql> ALTER USER 'root'@'localhost'
IDENTIFIED BY 'Root123456!@';</span><o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US"><br /></span></div>
<div class="MsoNormal">
<span lang="EN-US"><b>9.4 </b></span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">注意:</span><span lang="EN-US">mysql5.7</span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">預設安裝了密碼安全檢查外掛程式(</span><span lang="EN-US">validate_password</span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">),預設密碼檢查策略要求密碼必須包含:大小寫字母、數位和特殊符號,並且長度不能少於</span><span lang="EN-US">8</span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">位。否則會提示</span><span lang="EN-US">ERROR 1819 (HY000): Your password
does not satisfy the current policy requirements</span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">錯誤,如下圖所示:</span><span lang="EN-US"> <o:p></o:p></span></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<span style="color: #7f6000;">mysql> ALTER USER 'root'@'localhost'
IDENTIFIED BY '123456';</span></div>
<div class="MsoNormal">
<span lang="EN-US">ERROR 1819 (HY000): Your password does not
satisfy the current policy requirements<o:p></o:p></span></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<span lang="EN-US"><b>9.5</b> </span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">通過環境變數查看密碼策略資訊</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">validate_password_policy | MEDIUM </span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">表示為當前使用的是中級密碼策略</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">mysql> show variables like '%password%';<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">+---------------------------------------+--------+<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">| Variable_name | Value |<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">+---------------------------------------+--------+<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">| default_password_lifetime | 0 |<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">| disconnect_on_expired_password | ON
|<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">| log_builtin_as_identified_by_password |
OFF |<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">| mysql_native_password_proxy_users | OFF
|<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">| old_passwords | 0 |<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">| report_password | |<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">| sha256_password_proxy_users | OFF |<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">| validate_password_check_user_name | OFF
|<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">| validate_password_dictionary_file |
|<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">| validate_password_length | 8 |<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">| validate_password_mixed_case_count | 1
|<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">| validate_password_number_count | 1
|<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">| validate_password_policy | MEDIUM |<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">| validate_password_special_char_count | 1
|<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">+---------------------------------------+--------+<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">14 rows in set (0.01 sec)<o:p></o:p></span></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<span lang="EN-US">mysql> <o:p></o:p></span></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<span style="color: #20124d;"><span lang="EN-US">validate_password_policy</span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">:密碼策略,預設為</span><span lang="EN-US">MEDIUM</span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">策略</span><span lang="EN-US">
validate_password_dictionary_file</span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">:密碼策略檔,策略為</span><span lang="EN-US">STRONG</span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">才需要</span><span lang="EN-US"> validate_password_length</span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">:密碼最少長度</span><span lang="EN-US">
validate_password_mixed_case_count</span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">:大小寫字元長度,至少</span><span lang="EN-US">1</span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">個</span><span lang="EN-US">
validate_password_number_count </span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">:數字至少</span><span lang="EN-US">1</span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">個</span><span lang="EN-US">
validate_password_special_char_count</span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">:特殊字元至少</span><span lang="EN-US">1</span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">個</span><span lang="EN-US"> </span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">上述參數是預設策略</span><span lang="EN-US">MEDIUM</span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">的密碼檢查規則。</span></span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">共有以下幾種密碼策略:</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoNormal">
<span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">策略</span><span lang="EN-US">
</span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">檢查規則</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">0 or LOW
Length<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">1 or MEDIUM Length; numeric, lowercase/uppercase, and
special characters<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">2 or STRONG Length; numeric, lowercase/uppercase, and
special characters; dictionary file<o:p></o:p></span></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<span lang="EN-US">MySQL</span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">官網密碼策略詳細說明:</span><span lang="EN-US">http://dev.mysql.com/doc/refman/5.7/en/validate-password-options-variables.html#sysvar_validate_password_policy<o:p></o:p></span></div>
<div class="MsoNormal">
<span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">修改密碼策略</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">在</span><span lang="EN-US">/etc/my.cnf</span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">檔添加</span><span lang="EN-US"><span style="color: red;">validate_password_policy</span></span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">配置,指定密碼策略</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<span lang="EN-US"># </span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">選擇</span><span lang="EN-US">0</span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">(</span><span lang="EN-US">LOW</span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">),</span><span lang="EN-US">1</span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">(</span><span lang="EN-US">MEDIUM</span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">),</span><span lang="EN-US">2</span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">(</span><span lang="EN-US">STRONG</span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">)其中一種,選擇</span><span lang="EN-US">2</span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">需要提供密碼字典檔</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">validate_password_policy=0<o:p></o:p></span></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">如果不需要密碼策略,添加</span><span lang="EN-US">my.cnf</span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">檔中添加如下配置禁用即可:</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<span lang="EN-US"><span style="color: red;">validate_password = off</span><o:p></o:p></span></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">重新開機</span><span lang="EN-US">mysql</span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">服務使配置生效:</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<span lang="EN-US"><b><span style="color: red;">systemctl restart mysqld</span></b><o:p></o:p></span></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<span style="font-size: large;"><span lang="EN-US"><b>10</b> </span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">添加遠端登陸用戶</span></span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoNormal">
<span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">默認只允許</span><span lang="EN-US">root</span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">帳戶在本地登錄,如果要在其它機器上連接</span><span lang="EN-US">mysql</span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">,必須修改</span><span lang="EN-US">root</span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">允許遠端連接,或者添加一個允許遠端連接的帳戶,為了安全起見,我添加一個新的帳戶:</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoNormal">
<span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;"><br /></span></div>
<div class="MsoNormal">
<span lang="EN-US"><span style="color: #7f6000;">mysql> GRANT ALL PRIVILEGES ON *.* TO
'zhan'@'%' IDENTIFIED BY 'Zhan123456!@' WITH GRANT OPTION;</span><o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US"><br /></span></div>
<div class="MsoNormal">
<span lang="EN-US">Query OK, 0 rows affected, 1 warning (0.00
sec)<o:p></o:p></span></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<span lang="EN-US">mysql> <o:p></o:p></span></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<span style="font-size: large;"><span lang="EN-US"><b>11</b> </span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">配置預設編碼為</span></span><span lang="EN-US"><span style="font-size: large;">utf8</span><o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US"><b>11.1</b> </span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">首先退出</span><span lang="EN-US">mysql mysql> exit<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US"><b>11.2</b> </span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">修改</span><span lang="EN-US">/etc/my.cnf</span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">設定檔,在</span><span lang="EN-US">[mysqld]</span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">下添加編碼配置,如下所示:</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US"># For advice on how to change settings
please see<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">#
http://dev.mysql.com/doc/refman/5.7/en/server-configuration-defaults.html<o:p></o:p></span></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<span lang="EN-US">[mysqld]<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US" style="background-color: white;"><span style="color: red;">character_set_server=utf8<o:p></o:p></span></span></div>
<div class="MsoNormal">
<span lang="EN-US"><span style="background-color: white;"><span style="color: red;">init_connect='SET NAMES utf8'</span></span><o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">#<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US"># Remove leading # and set to the amount of
RAM for the most important data<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US"># cache in MySQL. Start at 70% of total RAM
for dedicated server, else 10%.<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US"># innodb_buffer_pool_size = 128M<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">#<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US"># Remove leading # to turn on a very
important data integrity option: logging<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US"># changes to the binary log between
backups.<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US"># log_bin<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">#<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US"># Remove leading # to set options mainly
useful for reporting servers.<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US"># The server defaults are faster for
transactions and fast SELECTs.<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US"># Adjust sizes as needed, experiment to
find the optimal values.<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US"># join_buffer_size = 128M<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US"># sort_buffer_size = 2M<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US"># read_rnd_buffer_size = 2M<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">datadir=/var/lib/mysql<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">socket=/var/lib/mysql/mysql.sock<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">"/etc/my.cnf" 29L, 1016C<o:p></o:p></span></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<span style="font-size: large;"><span lang="EN-US">12 </span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">重新開機</span><span lang="EN-US">mysql</span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">服務,讓</span><span lang="EN-US">11</span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">節設置的編碼生效</span></span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">[root@localhost log]# <span style="color: red;">systemctl restart
mysqld</span><o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">[root@localhost log]# <o:p></o:p></span></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<span lang="EN-US">13<span style="font-size: large;"> </span></span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;"><span style="font-size: large;">重新登陸</span></span><span lang="EN-US"><span style="font-size: large;">mysql</span><o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">[root@localhost log]# <span style="color: blue;">mysql -uroot -p</span><o:p></o:p></span></div>
<div class="MsoNormal">
Enter password:</div>
<div class="MsoNormal">
<span lang="EN-US">Welcome to the MySQL monitor. Commands end with ; or \g.<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">Your MySQL connection id is 3<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">Server version: 5.7.17 MySQL Community
Server (GPL)<o:p></o:p></span></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<span lang="EN-US">Copyright (c) 2000, 2016, Oracle and/or its
affiliates. All rights reserved.<o:p></o:p></span></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<span lang="EN-US">Oracle is a registered trademark of Oracle
Corporation and/or its<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">affiliates. Other names may be trademarks
of their respective<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">owners.<o:p></o:p></span></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<span lang="EN-US">Type 'help;' or '\h' for help. Type '\c' to
clear the current input statement.<o:p></o:p></span></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<span lang="EN-US">mysql></span><span lang="EN-US"> <o:p></o:p></span></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<span style="font-size: large;"><span lang="EN-US">14 </span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">查看</span><span lang="EN-US">mysql</span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">資料庫編碼</span></span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">mysql> show variables like '%character%'<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">
-> ;<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">+--------------------------+----------------------------+<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">| Variable_name | Value |<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">+--------------------------+----------------------------+<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">| character_set_client | utf8 |<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">| character_set_connection | utf8 |<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">| character_set_database | utf8 |<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">| character_set_filesystem | binary |<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">| character_set_results | utf8
|<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">| character_set_server | utf8 |<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">| character_set_system | utf8 |<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">| character_sets_dir | /usr/share/mysql/charsets/ |<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">+--------------------------+----------------------------+<o:p></o:p></span></div>
<div class="MsoNormal">
<span lang="EN-US">8 rows in set (0.01 sec)<o:p></o:p></span></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<span lang="EN-US">mysql> <o:p></o:p></span></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<span style="font-size: large;"><span lang="EN-US">15 mysql</span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">預設設定檔路徑</span></span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoNormal">
<span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">設定檔:</span><span lang="EN-US">/etc/my.cnf <o:p></o:p></span></div>
<div class="MsoNormal">
<span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">日誌檔:</span><span lang="EN-US">/var/log//var/log/mysqld.log <o:p></o:p></span></div>
<div class="MsoNormal">
<span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">服務啟動腳本:</span><span lang="EN-US">/usr/lib/systemd/system/mysqld.service <o:p></o:p></span></div>
<br />
<div class="MsoNormal">
<span lang="EN-US">socket</span><span style="font-family: "新細明體" , serif; mso-ascii-font-family: Calibri; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: 新細明體; mso-fareast-theme-font: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-font: minor-latin;">文件:</span><span lang="EN-US">/var/run/mysqld/mysqld.pid<o:p></o:p></span></div>
Anonymoushttp://www.blogger.com/profile/02768237855233416154noreply@blogger.com1tag:blogger.com,1999:blog-3506419250791502155.post-10416362288762342432017-09-26T17:23:00.001+08:002017-09-26T17:23:11.221+08:00CentOS 7 安裝與設定 Nginx + MariaDB + PHP + phpMyAdmin(LEMP)本篇文章將詳細解說如何在 CentOS 7 安裝與設定 Nginx、MariaDB 與 PHP(簡稱 LEMP)來架設 WEB 伺服器的環境,並使用 phpMyAdmin 這套資料庫管理工具,搭配 MariaDB 來管理資料庫。<br />
<span style="font-size: large;"><br /></span>
<span style="font-size: x-large;">Nginx</span><br />
<span style="color: blue; font-size: large;">安裝</span><br />
CentOS 7.1 中,Nginx 並未被正式收錄在 yum,因此無法安裝,可自行加入 Nginx 官方提供的 CentOS 7 yum repository,即可直接安裝。<br />
<br />
[root@www ~]#<span style="color: #45818e;"> </span>rpm -Uvh http://nginx.org/packages/centos/7/noarch/RPMS/nginx-release-centos-7-0.el7.ngx.noarch.rpm<br />
[root@www ~]# yum install nginx<br />
<span style="color: red;"><br /></span>
<span style="color: blue; font-size: large;">設定</span><br />
Nginx 相關檔案位置:<br />
<span style="color: #6aa84f;">所有設定檔:/etc/nginx/</span><br />
<span style="color: #6aa84f;">主要設定檔:/etc/nginx/nginx.conf</span><br />
<span style="color: #6aa84f;">預設設定檔:/etc/nginx/conf.d/default.conf</span><br />
<span style="color: #6aa84f;">程序設定檔:/usr/sbin/nginx</span><br />
<span style="color: #6aa84f;">log 檔:/var/log/nginx/</span><br />
<br />
<span style="color: red;">主要設定檔</span><br />
Nginx 服務的主要設定檔。<br />
[root@www ~]<b># vi /etc/nginx/nginx.conf</b><br />
<span style="font-size: x-small;"><br /></span>
<span style="font-size: x-small;"># 啟用 Nginx 的 Linux 帳戶</span><br />
<span style="font-size: x-small;">user nginx;</span><br />
<span style="font-size: x-small;"># 啟用的執行緒數量(建議搭配 CPU 核心數 * 2)</span><br />
<span style="font-size: x-small;">worker_processes 1;</span><br />
<span style="font-size: x-small;"><br /></span>
<span style="font-size: x-small;"># log 檔位置</span><br />
<span style="font-size: x-small;">error_log /var/log/nginx/error.log warn;</span><br />
<span style="font-size: x-small;">pid /var/run/nginx.pid;</span><br />
<span style="font-size: x-small;"><br /></span>
<span style="font-size: x-small;">events {</span><br />
<span style="font-size: x-small;"> # 允許同一時間連線的數量</span><br />
<span style="font-size: x-small;"> worker_connections 1024;</span><br />
<span style="font-size: x-small;">}</span><br />
<span style="font-size: x-small;"><br /></span>
<span style="font-size: x-small;">http {</span><br />
<span style="font-size: x-small;"> include /etc/nginx/mime.types;</span><br />
<span style="font-size: x-small;"> default_type application/octet-stream;</span><br />
<span style="font-size: x-small;"><br /></span>
<span style="font-size: x-small;"> # 預設 log 記錄的格式</span><br />
<span style="font-size: x-small;"> log_format main '$remote_addr - $remote_user [$time_local] "$request" '</span><br />
<span style="font-size: x-small;"> '$status $body_bytes_sent "$http_referer" '</span><br />
<span style="font-size: x-small;"> '"$http_user_agent" "$http_x_forwarded_for"';</span><br />
<span style="font-size: x-small;"><br /></span>
<span style="font-size: x-small;"> # access log 檔位置</span><br />
<span style="font-size: x-small;"> access_log /var/log/nginx/access.log main;</span><br />
<span style="font-size: x-small;"><br /></span>
<span style="font-size: x-small;"> sendfile on;</span><br />
<span style="font-size: x-small;"> #tcp_nopush on;</span><br />
<span style="font-size: x-small;"><br /></span>
<span style="font-size: x-small;"> keepalive_timeout 65;</span><br />
<span style="font-size: x-small;"><br /></span>
<span style="font-size: x-small;"> # 是否啟用 gaip 壓縮(預設為註解,不啟用)</span><br />
<span style="font-size: x-small;"> #gzip on;</span><br />
<span style="font-size: x-small;"><br /></span>
<span style="font-size: x-small;"> # 載入該路徑的所有設定檔,通常就是每個虛擬主機的配置</span><br />
<span style="font-size: x-small;"> include /etc/nginx/conf.d/*.conf;</span><br />
<span style="font-size: x-small;"><br /></span>
<span style="font-size: x-small;"> # 設定可上傳最大檔案容量(依需求設定)</span><br />
<span style="font-size: x-small;"> client_max_body_size 5m;</span><br />
<span style="font-size: x-small;">}</span><br />
<br />
<span style="color: red;">虛擬主機設定檔</span><br />
Nginx 預設的主機設定檔。<br />
[root@www ~]# <b>vi /etc/nginx/conf.d/default.conf</b><br />
<span style="font-size: x-small;"><br /></span>
<span style="font-size: x-small;">server {</span><br />
<span style="font-size: x-small;"> # 這個主機的 Port</span><br />
<span style="font-size: x-small;"> listen 80;</span><br />
<span style="font-size: x-small;"> # 這個主機的名稱</span><br />
<span style="font-size: x-small;"> server_name localhost;</span><br />
<span style="font-size: x-small;"><br /></span>
<span style="font-size: x-small;"> # 設定預設編碼,但通常都是由網頁 <meta> 來定義,因此預設註解</span><br />
<span style="font-size: x-small;"> #charset koi8-r;</span><br />
<span style="font-size: x-small;"> # 針對這個主機的 log 檔位置</span><br />
<span style="font-size: x-small;"> #access_log /var/log/nginx/log/host.access.log main;</span><br />
<span style="font-size: x-small;"><br /></span>
<span style="font-size: x-small;"> # html 檔</span><br />
<span style="font-size: x-small;"> location / {</span><br />
<span style="font-size: x-small;"> # 網站的根目錄位置</span><br />
<span style="font-size: x-small;"> root /usr/share/nginx/html;</span><br />
<span style="font-size: x-small;"> # 使用「瀏覽器」瀏覽根目錄時,未指定檔名時預設使用的檔案</span><br />
<span style="font-size: x-small;"> index index.html index.htm;</span><br />
<span style="font-size: x-small;"> }</span><br />
<span style="font-size: x-small;"><br /></span>
<span style="font-size: x-small;"> # 發生 404 指定導向哪個網頁</span><br />
<span style="font-size: x-small;"> #error_page 404 /404.html;</span><br />
<span style="font-size: x-small;"><br /></span>
<span style="font-size: x-small;"> # redirect server error pages to the static page /50x.html</span><br />
<span style="font-size: x-small;"> #</span><br />
<span style="font-size: x-small;"> error_page 500 502 503 504 /50x.html;</span><br />
<span style="font-size: x-small;"> location = /50x.html {</span><br />
<span style="font-size: x-small;"> root /usr/share/nginx/html;</span><br />
<span style="font-size: x-small;"> }</span><br />
<span style="color: #666666; font-size: x-small;"><br /></span>
<span style="color: #666666; font-size: x-small;"> # proxy the PHP scripts to Apache listening on 127.0.0.1:80</span><br />
<span style="color: #666666; font-size: x-small;"> #</span><br />
<span style="color: #666666; font-size: x-small;"> #location ~ \.php$ {</span><br />
<span style="color: #666666; font-size: x-small;"> # proxy_pass http://127.0.0.1;</span><br />
<span style="color: #666666; font-size: x-small;"> #}</span><br />
<span style="color: #666666; font-size: x-small;"><br /></span>
<span style="color: #666666; font-size: x-small;"> # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000</span><br />
<span style="color: #666666; font-size: x-small;"> #</span><br />
<span style="color: #666666; font-size: x-small;"> # php 檔</span><br />
<span style="color: #666666; font-size: x-small;"> #location ~ \.php$ {</span><br />
<span style="color: #666666; font-size: x-small;"> # root html;</span><br />
<span style="color: #666666; font-size: x-small;"> # fastcgi_pass 127.0.0.1:9000;</span><br />
<span style="color: #666666; font-size: x-small;"> # fastcgi_index index.php;</span><br />
<span style="color: #666666; font-size: x-small;"> # fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;</span><br />
<span style="color: #666666; font-size: x-small;"> # include fastcgi_params;</span><br />
<span style="color: #666666; font-size: x-small;"> #} </span><br />
<span style="color: #666666; font-size: x-small;"><br /></span>
<span style="color: #666666; font-size: x-small;"> # deny access to .htaccess files, if Apache's document root</span><br />
<span style="color: #666666; font-size: x-small;"> # concurs with nginx's one</span><br />
<span style="color: #666666; font-size: x-small;"> #</span><br />
<span style="color: #666666; font-size: x-small;"> #location ~ /\.ht {</span><br />
<span style="color: #666666; font-size: x-small;"> # deny all;</span><br />
<span style="color: #666666; font-size: x-small;"> #}</span><br />
<span style="font-size: x-small;">}</span><br />
<span style="color: red;"><br /></span>
<span style="color: blue; font-size: large;">服務設置</span><br />
啟用服務並開機自動啟用。<br />
<br />
[root@www ~]# s<b>ystemctl start nginx</b><br />
[root@www ~]# s<b>ystemctl enable nginx</b><br />
<br />
<span style="color: blue; font-size: large;">防火牆</span><br />
設定 firewall 允許 http(80 Port)、https(443 Port)封包通行。<br />
[root@www ~]# <b>firewall-cmd --permanent --zone=public --add-service=http</b><br />
[root@www ~]# f<b>irewall-cmd --permanent --zone=public --add-service=https</b><br />
[root@www ~]# <b>firewall-cmd --reload</b><br />
<span style="color: red;"><br /></span>
<span style="color: red;">檢設 firewall 的設定。</span><br />
[root@www ~]# <b>firewall-cmd --zone=public --list-all</b><br />
<br />
<span style="color: #674ea7;">public (default, active)</span><br />
<span style="color: #674ea7;"> interfaces: eth0 eth1</span><br />
<span style="color: #674ea7;"> sources:</span><br />
<span style="color: #674ea7;"> services: dhcpv6-client http https ssh</span><br />
<span style="color: #674ea7;"> ports:</span><br />
<span style="color: #674ea7;"> masquerade: no</span><br />
<span style="color: #674ea7;"> forward-ports:</span><br />
<span style="color: #674ea7;"> icmp-blocks:</span><br />
<span style="color: #674ea7;"> rich rules:</span><br />
<br />
<span style="color: blue; font-size: large;">測試</span><br />
打開瀏覽器輸入網址“http://YOUR_ IP”,沒有問題就會看到 Nginx 的歡迎頁面。<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjFM-iNisnANyIeRWdgVoAhOrjK-iBHPtD6RKbUCUKzPfm0UNtQ_ktM4RJEoLz8brGmG4ztIk8T_a5aUorVE5Cn_9xg7e0STBZsso9umF4J5uE-YKN8tiuMD5nCS5INOjOd8vqGCstXlQ_N/s1600/centos7-install-setup-nginx-mariadb-php-phpmyadmin-lemp_01.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="380" data-original-width="882" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjFM-iNisnANyIeRWdgVoAhOrjK-iBHPtD6RKbUCUKzPfm0UNtQ_ktM4RJEoLz8brGmG4ztIk8T_a5aUorVE5Cn_9xg7e0STBZsso9umF4J5uE-YKN8tiuMD5nCS5INOjOd8vqGCstXlQ_N/s1600/centos7-install-setup-nginx-mariadb-php-phpmyadmin-lemp_01.png" /></a></div>
<br />
<br />
<span style="color: blue; font-size: large;">問題</span><br />
<span style="color: red;">上傳檔案失敗</span><br />
<br />
「擁有者」與「權限」均設定無誤,但仍無法上傳,這是因為沒有設定 SELinux 的 httpd_sys_content_t 這個文件類型,查看網站根目錄文件類型。<br />
<br />
[root@www ~]# <b>ll -dZ /usr/share/nginx/html</b><br />
drwxrwxr-x. nginx nginx system_u:object_r:usr_t:s0 /usr/share/nginx/html<br />
<br />
使用遞迴來讓所有的目錄加入 SELinux 的 httpd_sys_content_t 文件類型。<br />
[root@www ~]#<b> chcon -R -t httpd_sys_rw_content_t /usr/share/nginx/html</b><br />
<br />
已正確設定 SELinux 的文件類型了。<br />
[root@www ~]# <b>ll -dZ /usr/share/nginx/html</b><br />
drwxr-xr-x. nginx nginx unconfined_u:object_r:<span style="color: red;">httpd_sys_rw_content_t:s0</span> /usr/share/nginx/html<br />
<br />
<span style="font-size: x-large;">PHP</span><br />
<span style="color: blue; font-size: large;">安裝</span><br />
安裝相關軟體:<br />
<br />
php:PHP 程式語言<br />
php-fpm:也就是 FastCGI,透過它來讓 Nginx 與 PHP 之間交互連動<br />
[root@www ~]# <b>yum install php php-fpm</b><br />
<br />
<span style="font-size: x-large;">PHP-FPM</span><br />
<span style="color: blue; font-size: large;">設定</span><br />
<br />
修改 php-fpm 的配置。<br />
[root@www ~]# <b>vi /etc/php-fpm.d/www.conf</b><br />
<br />
<span style="color: #666666;">;listen = 127.0.0.1:9000</span><br />
<span style="color: red;">listen = /var/run/php-fpm/php-fpm.sock</span><br />
<br />
<span style="color: #666666;">;user = apache</span><br />
<span style="color: red;">user = nginx</span><br />
<br />
<span style="color: #666666;">;group = apache</span><br />
<span style="color: red;">group = nginx</span><br />
<br />
<span style="color: #666666;">; 預設帳戶、群組,為正在運作的帳戶</span><br />
<span style="color: #666666;">;listen.owner = nobody</span><br />
<span style="color: #666666;">;listen.group = nobody</span><br />
<span style="color: #666666;"><br /></span>
<span style="color: #666666;">; 權限(預設為 0666)</span><br />
<span style="color: #666666;">;listen.mode = 0666</span><br />
<span style="color: #666666;"><br /></span>
<span style="color: #666666;">; session 的路徑</span><br />
php_value[session.save_path] = /var/lib/php/session<br />
<br />
修改 session 路徑的擁有者、群組為 nginx。<br />
[root@www ~]#<b> chown nginx:nginx /var/lib/php/session/</b><br />
<span style="color: red;"><br /></span>
<span style="color: #38761d;">Nginx 與 PHP 連動設定</span><br />
<span style="color: #38761d;">WordPress 固定網址 404 排除</span><br />
<br />
Nginx 針對 PHP 的設定,這樣才可透過 php-fpm 讓 Nginx 與 PHP 之間交互連動。<br />
<br />
[root@www ~]# <b>vi /etc/nginx/conf.d/default.conf</b><br />
<br />
<span style="font-size: x-small;">...(前面省略)...</span><br />
<span style="font-size: x-small;"><br /></span>
<span style="font-size: x-small;"> # html 檔</span><br />
<span style="font-size: x-small;"> location / {</span><br />
<span style="font-size: x-small;"> # 網站的根目錄位置</span><br />
<span style="font-size: x-small;"> root /usr/share/nginx/html;</span><br />
<span style="font-size: x-small;"> # 使用「瀏覽器」瀏覽根目錄時,未指定檔名時預設使用的檔案</span><br />
<span style="font-size: x-small;"> index <span style="color: red;"> index.php</span> index.html index.htm;</span><br />
<span style="font-size: x-small;"> # [須手動新增] 在瀏覽器呈現目錄樹為 on;反之 off,正試上線最好設成 off(預設值 off)</span><br />
<span style="font-size: x-small;"> <span style="color: red;">autoindex on;</span></span><br />
<span style="font-size: x-small;"> # [須手動新增] 啟用伺服端的 Rewrite 功能(WordPress 使用「固定網址設定」必須啟用)</span><br />
<span style="font-size: x-small;"> <span style="color: red;">try_files $uri $uri/ /index.php?$args;</span></span><br />
<span style="font-size: x-small;"> }</span><br />
<span style="font-size: x-small;"><br /></span>
<span style="font-size: x-small;"> # [須手動新增] 啟用伺服端的 Rewrite 功能(WordPress 使用「固定網址設定」必須啟用)</span><br />
<span style="font-size: x-small;"> <span style="color: red;"> rewrite /wp-admin$ $scheme://$host$uri/ permanent;</span></span><br />
<span style="font-size: x-small;"><br /></span>
<span style="font-size: x-small;"> # php 檔</span><br />
<span style="font-size: x-small;"> <span style="color: red;">location ~ \.php$ {</span></span><br />
<span style="font-size: x-small;"> # 網站的根目錄位置</span><br />
<span style="font-size: x-small;"> <span style="color: red;"> root /usr/share/nginx/html;</span></span><br />
<span style="font-size: x-small;"> # 要使用 FastCGI 解析的檔案位置</span><br />
<span style="font-size: x-small;"> <span style="color: red;">fastcgi_pass unix:/var/run/php-fpm/php-fpm.sock;</span></span><br />
<span style="font-size: x-small;"> # 使用「瀏覽器」瀏覽根目錄時,未指定檔名時預設使用的檔案</span><br />
<span style="font-size: x-small;"> <span style="color: red;"> fastcgi_index index.php;</span></span><br />
<span style="font-size: x-small;"><br /></span>
<span style="font-size: x-small;"> <span style="color: red;">try_files $uri =404;</span></span><br />
<span style="color: red; font-size: x-small;"> fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;</span><br />
<span style="color: red; font-size: x-small;"> include fastcgi_params;</span><br />
<span style="color: red; font-size: x-small;"> } </span><br />
<span style="font-size: x-small;"><br /></span>
<span style="font-size: x-small;">...(後面省略)...</span><br />
<br />
修改網站根目錄的擁有者、群組為 nginx。<br />
[root@www ~]# <b>chown -R nginx:nginx /usr/share/nginx/html/</b><br />
<br />
重啟 Nginx 服務。<br />
[root@www ~]# <b>systemctl restart nginx</b><br />
<br />
<span style="color: red;">服務設置</span><br />
啟用 PHP-FPM 服務並開機自動啟用。<br />
[root@www ~]#<b> systemctl start php-fpm</b><br />
[root@www ~]#<b> systemctl enable php-fpm</b><br />
<span style="color: blue; font-size: large;"><br /></span>
<span style="color: blue; font-size: large;">測試</span><br />
在網頁根目錄新增一個顯示 php 資訊的檔案。<br />
[root@www ~]# <b>vi /usr/share/nginx/html/index.php</b><br />
<span style="color: red;"><br /></span>
<span style="color: red;"><?php</span><br />
<span style="color: red;">phpinfo();</span><br />
<br />
打開瀏覽器輸入網址“http://YOUR_IP/index.php”,沒有問題就會看到 php 資訊。<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhAynF161oNjks6wtPhDERP5w08Fv6mlYw988DGv0VcQ8Gh1sZulVlENpY2V0I2rKcaMxFWwGa9SwHbz3vNLHTT421fPfkPwvOQ4uicDJ2Y5gEdxDryzDcdhES22mhjYVsEdbg8TChM9c13/s1600/centos7-install-setup-nginx-mariadb-php-phpmyadmin-lemp_02.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="380" data-original-width="882" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhAynF161oNjks6wtPhDERP5w08Fv6mlYw988DGv0VcQ8Gh1sZulVlENpY2V0I2rKcaMxFWwGa9SwHbz3vNLHTT421fPfkPwvOQ4uicDJ2Y5gEdxDryzDcdhES22mhjYVsEdbg8TChM9c13/s1600/centos7-install-setup-nginx-mariadb-php-phpmyadmin-lemp_02.png" /></a></div>
<br />
<span style="font-size: x-large;">MariaDB</span><br />
<span style="color: blue; font-size: large;">安裝</span><br />
安裝相關軟體。<br />
[root@www ~]# <b>yum install mariadb mariadb-server</b><br />
<br />
<span style="color: blue; font-size: large;">初始化設定</span><br />
須先<b>啟用服務</b>,才可進行初始化。<br />
[root@www ~]# <b>systemctl start mariadb</b><br />
<br />
進行初始化設定。<br />
[root@www ~]# <b>mysql_secure_installation</b><br />
<br />
<span style="color: #666666; font-size: x-small;">/usr/bin/mysql_secure_installation: line 379: find_mysql_client:命令找不到</span><br />
<span style="color: #666666; font-size: x-small;"><br /></span>
<span style="color: #666666; font-size: x-small;">NOTE: RUNNING ALL PARTS OF THIS SCRIPT IS RECOMMENDED FOR ALL MariaDB</span><br />
<span style="color: #666666; font-size: x-small;"> SERVERS IN PRODUCTION USE! PLEASE READ EACH STEP CAREFULLY!</span><br />
<span style="color: #666666; font-size: x-small;"><br /></span>
<span style="color: #666666; font-size: x-small;">In order to log into MariaDB to secure it, we'll need the current</span><br />
<span style="color: #666666; font-size: x-small;">password for the root user. If you've just installed MariaDB, and</span><br />
<span style="color: #666666; font-size: x-small;">you haven't set the root password yet, the password will be blank,</span><br />
<span style="color: #666666; font-size: x-small;">so you should just press enter here.</span><br />
<span style="color: #666666; font-size: x-small;"><br /></span>
<span style="color: #666666; font-size: x-small;">Enter current password for root (enter for none): # 輸入目前 MariaDB 的 root 密碼(第一次設定應該是空的,所以直接「ENTER」即可)</span><br />
<span style="color: #666666; font-size: x-small;">OK, successfully used password, moving on...</span><br />
<span style="color: #666666; font-size: x-small;"><br /></span>
<span style="color: #666666; font-size: x-small;">Setting the root password ensures that nobody can log into the MariaDB</span><br />
<span style="color: #666666; font-size: x-small;">root user without the proper authorisation.</span><br />
<span style="color: #666666; font-size: x-small;"><br /></span>
<span style="color: #666666; font-size: x-small;">Set root password? [Y/n] # 直接「ENTER」</span><br />
<span style="color: #666666; font-size: x-small;">New password: # 設定新的密碼</span><br />
<span style="color: #666666; font-size: x-small;">Re-enter new password: # 再次確認密碼</span><br />
<span style="color: #666666; font-size: x-small;">Password updated successfully!</span><br />
<span style="color: #666666; font-size: x-small;">Reloading privilege tables..</span><br />
<span style="color: #666666; font-size: x-small;"> ... Success!</span><br />
<span style="color: #666666; font-size: x-small;"><br /></span>
<span style="color: #666666; font-size: x-small;"><br /></span>
<span style="color: #666666; font-size: x-small;">By default, a MariaDB installation has an anonymous user, allowing anyone</span><br />
<span style="color: #666666; font-size: x-small;">to log into MariaDB without having to have a user account created for</span><br />
<span style="color: #666666; font-size: x-small;">them. This is intended only for testing, and to make the installation</span><br />
<span style="color: #666666; font-size: x-small;">go a bit smoother. You should remove them before moving into a</span><br />
<span style="color: #666666; font-size: x-small;">production environment.</span><br />
<span style="color: #666666; font-size: x-small;"><br /></span>
<span style="color: #666666; font-size: x-small;">Remove anonymous users? [Y/n] # 是否要移除 anonymous user 的資料,直接「ENTER」</span><br />
<span style="color: #666666; font-size: x-small;"> ... Success!</span><br />
<span style="color: #666666; font-size: x-small;"><br /></span>
<span style="color: #666666; font-size: x-small;">Normally, root should only be allowed to connect from 'localhost'. This</span><br />
<span style="color: #666666; font-size: x-small;">ensures that someone cannot guess at the root password from the network.</span><br />
<span style="color: #666666; font-size: x-small;"><br /></span>
<span style="color: #666666; font-size: x-small;">Disallow root login remotely? [Y/n] # 是否只允許讓 root 從 localhost 登入,無法從其他的網路登入,直接「ENTER」</span><br />
<span style="color: #666666; font-size: x-small;"> ... Success!</span><br />
<span style="color: #666666; font-size: x-small;"><br /></span>
<span style="color: #666666; font-size: x-small;">By default, MariaDB comes with a database named 'test' that anyone can</span><br />
<span style="color: #666666; font-size: x-small;">access. This is also intended only for testing, and should be removed</span><br />
<span style="color: #666666; font-size: x-small;">before moving into a production environment.</span><br />
<span style="color: #666666; font-size: x-small;"><br /></span>
<span style="color: #666666; font-size: x-small;">Remove test database and access to it? [Y/n] # 是否移除 test 的資料庫,直接「ENTER」</span><br />
<span style="color: #666666; font-size: x-small;"> - Dropping test database...</span><br />
<span style="color: #666666; font-size: x-small;"> ... Success!</span><br />
<span style="color: #666666; font-size: x-small;"> - Removing privileges on test database...</span><br />
<span style="color: #666666; font-size: x-small;"> ... Success!</span><br />
<span style="color: #666666; font-size: x-small;"><br /></span>
<span style="color: #666666; font-size: x-small;">Reloading the privilege tables will ensure that all changes made so far</span><br />
<span style="color: #666666; font-size: x-small;">will take effect immediately.</span><br />
<span style="color: #666666; font-size: x-small;"><br /></span>
<span style="color: #666666; font-size: x-small;">Reload privilege tables now? [Y/n] # 是否要重新載入權限的 table 資訊,直接「ENTER」</span><br />
<span style="color: #666666; font-size: x-small;"> ... Success!</span><br />
<span style="color: #666666; font-size: x-small;"><br /></span>
<span style="color: #666666; font-size: x-small;">Cleaning up...</span><br />
<span style="color: #666666; font-size: x-small;"><br /></span>
<span style="color: #666666; font-size: x-small;">All done! If you've completed all of the above steps, your MariaDB</span><br />
<span style="color: #666666; font-size: x-small;">installation should now be secure.</span><br />
<span style="color: #666666; font-size: x-small;"><br /></span>
<span style="color: #666666; font-size: x-small;">Thanks for using MariaDB!</span><br />
<br />
<span style="color: blue; font-size: large;">服務設置</span><br />
開機自動啟用服務。<br />
[root@www ~]# <b>systemctl enable mariadb</b><br />
<br />
<span style="font-size: x-large;">phpMyAdmin</span><br />
<span style="color: blue; font-size: large;">安裝</span><br />
目前 yum 套件資料庫中沒有 phpMyAdmin 的安裝資訊存在,因此須先更新 yum 套件資料庫。先到 EPEL 網頁,找到“The newest version of ‘epel-release’ for EL7”,復製 epel-release-7-5.noarch 的連結,將連結貼至下述指令後並執行,完成後即可安裝軟體。<br />
<br />
[root@www ~]# <b>rpm -ivh https://dl.fedoraproject.org/pub/epel/epel-release-latest-7.noarch.rpm</b><br />
[root@www ~]# <b>yum install phpmyadmin</b><br />
<span style="color: blue; font-size: large;"><br /></span>
<span style="color: blue; font-size: large;">設定</span><br />
設定 phpMyAdmin 連結到 Nginx 設置的網站根目錄下。<br />
[root@www ~]# <b>ln -s /usr/share/phpMyAdmin/ /usr/share/nginx/html/</b><br />
<br />
修改 phpMyAdmin 認證方式為 http(預設為 cookie),提高安全性。<br />
[root@www ~]# <b>vi /etc/phpMyAdmin/config.inc.php</b><br />
<span style="color: red;"><br /></span>
<span style="color: red;">$cfg['Servers'][$i]['auth_type'] = 'http';</span><br />
<br />
<span style="color: blue; font-size: large;">服務設置</span><br />
重啟 Nginx、MariaDB 與 PHP-FPM 服務。<br />
[root@www ~]# <b>systemctl restart nginx</b><br />
[root@www ~]# <b>systemctl restart mariadb</b><br />
[root@www ~]# <b>systemctl restart php-fpm</b><br />
<br />
<span style="color: blue; font-size: large;">測試</span><br />
打開瀏覽器輸入網址“http://YOUR_IP/phpMyAdmin/index.php”,沒有問題就會看到 phpMyAdmin 登入頁面。<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhu85NfIQdAOiaiiRdXIwmrzN8s7ZMqUHY4P29MWzg6l04tfwKnIZTmVYML6OcwqJ3A5A4NSgPe0I-5ZonDScF63cFOQrF4nB9nBrEgUG5-pnxBb50SsNr3IVKfcmtezkm18Fafz4p5s5CN/s1600/centos7-install-setup-nginx-mariadb-php-phpmyadmin-lemp_03.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="647" data-original-width="882" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhu85NfIQdAOiaiiRdXIwmrzN8s7ZMqUHY4P29MWzg6l04tfwKnIZTmVYML6OcwqJ3A5A4NSgPe0I-5ZonDScF63cFOQrF4nB9nBrEgUG5-pnxBb50SsNr3IVKfcmtezkm18Fafz4p5s5CN/s1600/centos7-install-setup-nginx-mariadb-php-phpmyadmin-lemp_03.png" /></a></div>
<br />Anonymoushttp://www.blogger.com/profile/02768237855233416154noreply@blogger.com0tag:blogger.com,1999:blog-3506419250791502155.post-40188689661091218402016-05-11T01:32:00.000+08:002016-05-11T01:37:22.241+08:00微軟黑名單申訴方法(550 SC-001) 解法 二微軟黑名單申訴方法(550 SC-001) 解法 二<br />
<br />
<br />
寄信至 Hotmail account,收到退信訊息<br />
<br />
<Example@hotmail.com>: host mx2.hotmail.com[207.46.8.167] said: 550 SC-001<br />
(BAY004-MC5F7) Unfortunately, messages from 1.2.3.4 weren't sent.<br />
Please contact your Internet service provider since part of their network<br />
is on our block list. You can also refer your provider to<br />
http://mail.live.com/mail/troubleshooting.aspx#errors. (in reply to MAIL<br />
FROM command) 』<br />
<br />
<br />
先確認 SMTP 主機是否有符合微軟的<a href="https://mail.live.com/mail/policies.aspx">安全性規範</a>?<br />
<br />
再確認<br />
<br />
電子郵件伺服器必須具備有效的反向 DNS 記錄。<br />
電子郵件伺服器必須具備有效的反向 DNS 記錄。<br />
電子郵件伺服器必須具備有效的反向 DNS 記錄。<br />
。<br />
。<br />
。<br />
很重要 要講 n 次<br />
<br />
最後 點<a href="https://support.microsoft.com/en-us/getsupport?oaspworkflow=start_1.0.0.0&wfname=capsub&productkey=edfsmsbl3&locale=en-us&ccsid=635984689581583016">這裡</a>去申訴,依表格需求逐項確實填妥,很快的就會有相關技術人員跟您聯繫並告知處理進度與注意事項。<br />
<br />
EXAMPLE:<br />
<br />
Dear MIB Laboratory<br />
<br />
We have completed reviewing the IP(s) you submitted. The following table contains the results of our investigation.<br />
<br />
These IP(s) have been unblocked,........<br />
..........Mitigation may take 24 - 48 hours to replicate completely throughout our system.<br />
<br />
If you feel your issue is not yet resolved, please reply to this email and one of our support team members will contact you for further investigation.<br />
<br />
當技術人員協助將SMTP 移除黑名單後,就可以正常寄信給 Hotmail。<br />
<br />
檢視 微軟黑名單申訴方法(550 SC-001) <a href="http://psy.pengsme.com/2016/05/550-sc-001.html">解法 一</a>Anonymoushttp://www.blogger.com/profile/02768237855233416154noreply@blogger.com0tag:blogger.com,1999:blog-3506419250791502155.post-9830162206129434282016-05-11T01:18:00.001+08:002016-05-11T01:49:37.450+08:00Blogger 切換自己的域名 (以BIND為例)Blogger 切換自己的域名 (以<a href="http://psy.pengsme.com/2016/05/how-to-install-bind-on-centos-7.html">BIND</a>為例)<br />
<br />
<br />
像把Blogger舊有的域名為<a href="http://fuglemanpeter.blogspot.tw/"> fuglemanpeter.blogspot.tw</a> 更為 新的域名 <a href="http://psy.pengsme.com/">psy.pengsme.com</a><br />
<br />
Google 的Blogger 可以免費轉換一組自訂義的域名。<br />
<br />
詳閱 <a href="https://support.google.com/blogger/troubleshooter/1233381?p=customdomain&hl=zh-Hant&rd=1">如何在網誌上使用自訂網域名稱</a>?<br />
<br />
在 NAME SERVER 下加入<br />
<br />
;GOOGLE;<br />
@ 3600 IN A 216.239.32.21<br />
@ 3600 IN A 216.239.34.21<br />
@ 3600 IN A 216.239.36.21<br />
@ 3600 IN A 216.239.38.21<br />
psy 3600 IN CNAME ghs.google.com.<br />
zsdsf4jr9ch4 3600 IN CNAME gv-czsgwq54qgh3csa.dv.googlehosted.com. (範例)<br />
<br />
設定好後,reload <a href="http://psy.pengsme.com/2016/05/how-to-install-bind-on-centos-7.html">NAME SERVER</a>。並等候域名同步(約24-48hr)。<br />
<br />
最後,一切都設置完成(包含 <a href="http://psy.pengsme.com/2016/05/how-to-install-bind-on-centos-7.html">NAME SERVER</a> 的同步),只要在網址列輸入新的域名 <a href="http://psy.pengsme.com/">psy.pengsme.com</a> 或是舊的域名 <a href="http://fuglemanpeter.blogspot.tw/">fuglemanpeter.blogspot.tw</a> 都可以了。Anonymoushttp://www.blogger.com/profile/02768237855233416154noreply@blogger.com0tag:blogger.com,1999:blog-3506419250791502155.post-30866095418254692042016-05-11T00:59:00.000+08:002016-05-11T01:38:19.331+08:00微軟黑名單申訴方法(550 SC-001) 解法 一微軟黑名單申訴方法(550 SC-001) 解法 一<br />
<br />
<br />
今天使用公司的郵件伺服器發送信件給客戶,結果被退信,退信內容如下:<br />
<br />
This is a return mail sent by system automatically, please do not reply this mail.<br />
Your mail can not be delivered successfully due to the reason below:<br />
<br />
Response Message :<br />
To: abc@hotmail.com<br />
Subject: 550 SC-001<br />
Remote host: 65.55.37.104<br />
<br />
Detail: 550 SC-001 (COL004-MC3F35) Unfortunately, messages from ***.***.***.*** weren't sent. Please contact your Internet service provider since part of their network is on our block list. You can also refer your provider to http://mail.live.com/mail/troubleshooting.aspx#errors.<br />
<br />
除了Hotmail外其他信箱接沒問題,遲遲無法排除,透過Google大神找了很久也沒具體的方法,終於讓我找到一個解決方式,在此提供給各位看官參考。<br />
<br />
1.將退信內容轉寄至delist@messaging.microsoft.com<br />
<br />
2.郵件內文前端補上以下範例:<br />
<br />
Please Help me out to solve the below issue.<br />
<br />
My Below IP Address are showing Blacklisted on belowdns address IP Address:IP *** . *** .*** .*** . Please Help me and remove my ipfrom black list<br />
<br />
Thank you!<br />
<br />
3.將上述***.***.***.***替換成您的外部IP再寄出等候消息,一般來說約10分鐘內會有郵件回覆,以下是收到回覆的內容:<br />
<br />
Hello ,<br />
Thank you for your delisting request SRX1332393068ID. Your ticket was received on (Mar 22 2016 07:57 AM UTC) and will be responded to within 24 hours.<br />
<br />
Our team will investigate the address that you have requested to be removed from our blocklist. If for any reason we are not able to remove your address, one of our technical support representatives will respond to you with additional information.<br />
<br />
<br />
Regards,<br />
Technical Support<br />
<br />
最後,等待24小時進行審核,如果沒有任何意外就會將IP從黑名單當中移除。<br />
<br />
或是 微軟黑名單申訴方法(550 SC-001) <a href="http://psy.pengsme.com/2016/05/550-sc-001_11.html">解法 二</a>Anonymoushttp://www.blogger.com/profile/02768237855233416154noreply@blogger.com0tag:blogger.com,1999:blog-3506419250791502155.post-11221152793360090972016-05-06T01:17:00.002+08:002016-05-23T11:51:24.326+08:00How to install BIND on CentOS 7 How to install BIND on CentOS 7<br />
<br />
安裝好 CentOS 7 後,確認一下版本<br />
<br />
cat /etc/redhat-release <br />
CentOS Linux release 7.1.1503 (Core)<br />
<br />
<br />
初始初始設定 (依需求調整)<br />
<br />
變更hotname<br />
hostnamectl set-hostname BIND1<br />
<br />
設定網卡<br />
vi(vim) /etc/sysconfig/network-scripts/ifcfg-eth0(1)<br />
<br />
TYPE="Ethernet"<br />
BOOTPROTO="none"<br />
DEFROUTE="yes"<br />
IPV4_FAILURE_FATAL="no"<br />
IPV6INIT="yes"<br />
IPV6_AUTOCONF="yes"<br />
IPV6_DEFROUTE="yes"<br />
IPV6_FAILURE_FATAL="no"<br />
NAME="eth0"<br />
UUID="c6892610-eg40-5423-9398-9e28660d4d82"<br />
DEVICE="eth0"<br />
ONBOOT="yes"<br />
<span style="color: red;">IPADDR="192.168.50.53"(內部IP) <span style="color: black;">-- 調整符合現況的內部IP或是外部IP</span><br />PREFIX="24</span>"<br />
<span style="color: red;">GATEWAY="192.168.50.254"(內部G/W)</span><br />
<span style="color: red;">※</span>此部DNS如果要對外服務時,記得NAT要對應內部IP。<br />
<span style="color: red;">DNS1="168.95.1.1" <span style="color: black;">-- 外部DNS(中華電信)</span></span><br />
IPV6_PEERDNS="yes"<br />
IPV6_PEERROUTES="yes"<br />
IPV6_PRIVACY="no"<br />
<br />
<br />
用不到的服務關閉<br />
<br />
1. 關閉 SMTP<br />
systemctl disable postfix<br />
systemctl stop postfix<br />
<br />
2.關閉防火牆 (若不需要,則關閉吧)<br />
systemctl disable firewalld<br />
systemctl stop firewalld<br />
<br />
3.關閉 SELINUX(若不需要,則關閉吧)<br />
vim /etc/sysconfig/selinux<br />
<br />
<span style="color: red;">SELINUX=disabled</span><br />
<br />
4.關閉IPV6(若不需要,則關閉吧)<br />
sysctl -w net.ipv6.conf.all.disable_ipv6=1<br />
sysctl -w net.ipv6.conf.default.disable_ipv6=1<br />
<br />
<br />
<br />
開始安裝 BIND<br />
<br />
a). yum -y install bind bind-chroot<br />
<br />
<br />
b). vi(vim) /etc/named.conf (修改這幾個地方)<br />
<br />
allow-query { any; };<br />
allow-transfer { none; };<br />
recursion yes;<br />
forward only;<br />
forwarders {<br />
168.95.1.1;<br />
139.175.55.244;<br />
};<br />
<br />
dnssec-enable yes;<br />
dnssec-validation yes;<br />
<br />
ZONE 的設法<br />
<br />
Step1 編輯/etc/named.conf<br />
<span style="color: red;"><span style="color: black;"><b>設定 # taiwanno1.com # <-----域名</b></span></span><br />
<span style="color: red;"><br /></span>
<span style="color: red;">-- 正解<br />zone "taiwanno1.com" IN {<br /> type master;<br /> file "/var/named/chroot/etc/named/taiwanno1.com"; (小編的設定檔存放路徑,讀者可以自行決定要放在哪個路徑下)<br /> allow-update { none; };<br />};</span><br />
<span style="color: red;">-- 反解(假設IP為1.2.3.4)<br />zone "3.2.1.in-addr.arpa" IN {<br /> type master;<br /> file "/var/named/chroot/etc/named/taiwanno1.rev";<br /> allow-update { none; };<br />};</span><br />
<br />
<br />
SETP2 編輯 taiwanno1.com (正解設定檔 )<br />
vim /var/named/chroot/etc/named/taiwanno1.com<br />
<br />
範例如下:<br />
$TTL 1D<br />
@ IN SOA taiwanno1.com. root.taiwanno1.com. (<br />
160324 ; serial<br />
1D ; refresh<br />
1H ; retry<br />
1W ; expire<br />
3H ) ; minimum<br />
IN NS ns.taiwanno1.com.<br />
;<br />
; <br />
ns IN A 1.2.3.4<br />
mail IN A 1.2.3.4<br />
www IN A 2.3.4.5<br />
ftp IN A 2.3.4.5<br />
;<br />
taiwanno1.com. IN A 1.2.3.4<br />
;<br />
message IN CNAME mail<br />
files IN CNAME ftp<br />
webmail IN CNAME mail<br />
;<br />
@ IN MX 10 mail.taiwanno1.com.<br />
<br />
@ IN MX 20 message.taiwanno1.com.<br />
<div>
<br /></div>
<br />
編輯 taiwanno1.rev (反解設定檔)<br />
vi /var/named/chroot/etc/named/taiwanno1.rev<br />
<br />
範例如下<br />
$TTL 1D<br />
@ IN SOA taiwanno1.com. root.taiwanno1.com. (<br />
160324 ; serial<br />
1D ; refresh<br />
1H ; retry<br />
1W ; expire<br />
3H ) ; minimum<br />
<br />
IN NS ns.taiwanno1.com.<br />
;<br />
ns IN A 1.2.3.4<br />
taiwanno1.com. IN A 1.2.3.4<br />
; <br />
1.2.3.4 IN PTR ns.taiwanno1.com.<br />
1.2.3.4 IN PTR taiwanno1.com.<br />
1.2.3.4 IN PTR mail.taiwanno1.com.<br />
2.3.4.5 IN PTR ftp.taiwanno1.com.<br />
1.2.3.4 IN PTR www.taiwanno1.com.<br />
<div>
<br /></div>
<div>
<br /></div>
<div>
STEP3 將named服務重啟</div>
systemctl enable named-chroot.service<br />
systemctl restart named-chroot.service<br />
<br />
<br />
netstat -ntlp<br />
<br />
tcp 0 0 192.168.50.53:53 0.0.0.0:* LISTEN 3365/named <br />
tcp 0 0 10.10.10.53:53 0.0.0.0:* LISTEN 3365/named <br />
tcp 0 0 127.0.0.1:53 0.0.0.0:* LISTEN 3365/named<br />
<br />
※ DNS 反解權目前都在ISP身上,也就是說,想將mail主機設反解,那就得向ISP申請反解,ISP收到通知並設定好反解後,還要通過全球各個DNS的同步(台灣預設24hr,全球約3天左右)才有效。除非公司本身掌握了整個class C 的外部網段,ISP才有可能將反解權下放給自己來做。<br />
<a href="http://hidomain.hinet.net/">IPv4 反解設定</a><br />
<br />Anonymoushttp://www.blogger.com/profile/02768237855233416154noreply@blogger.com0tag:blogger.com,1999:blog-3506419250791502155.post-43733387365177784742014-08-13T12:02:00.000+08:002014-08-13T12:02:00.711+08:00雲端運算的儲存基礎架構 揭開雲端儲存的面貌 雲端運算的儲存基礎架構 揭開雲端儲存的面貌<br />
<br />
<br />
當前的IT產業中,「雲端」幾乎成了時下最火紅、時髦的代名詞,軟硬體廠商開始將旗下產品逐漸移轉到雲端,或提出各自在雲端架構中的發展方向。其中屬於儲存領域的「雲端儲存」,究竟在整個雲端運算的框架中扮演什麼角色?現在的發展狀況與面臨的瓶頸為何?請看本專題的分析探討。<br />
談到雲端儲存(Cloud storage),簡單來說,就是將儲存資源放到網路上供人存取的一種新興方案。如此一來,使用者可以在任何時間、任何地方,透過任何可連網的裝置方便地存取資料。若方案供應商能進一步確保資料的安全無虞,同時又提供許多資料檢索及管理的功能,使用者又何必不定期地花錢購買、安裝、設定或擴充儲存設備呢?尤其對於定期會有龐大資料備份需求的使用者或企業來說,設備的管理及擴充絕對是一大夢魘及負擔。<br />
<br />
就一般使用者而言,雲端儲存及類似方案似乎處處可見。值得注意的趨勢,就是雲端儲存所支援的存取裝置也從電腦主機,慢慢擴展到手機等行動裝置上。換句話說,非透過電腦上網存取資料的時代已然過去,機動性更強的手機提供更具彈性的雲端資料存取方案。當前甚至有雲端音樂串流服務-ZumoDrive的推出,iPod/iPhone的使用者可以事先將音樂丟到線上儲存空間中,然後再透過無線網路播放音樂串流,相當方便。(圖1)<br />
<br />
<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody>
<tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhHqBHDhMokGkSXr7W9HoOkhBEdioUHgjW4IWTssN-X47CAGXg9DxYgPvTfPps6cEbsELaJhBL4E2mQa7rfeMUFTnP86sVWvXhI5wSfyFQbxgCHL8VjsgHq6e8cFjubWFPrrnrYMJApeSlS/s1600/R190E11_01.gif" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhHqBHDhMokGkSXr7W9HoOkhBEdioUHgjW4IWTssN-X47CAGXg9DxYgPvTfPps6cEbsELaJhBL4E2mQa7rfeMUFTnP86sVWvXhI5wSfyFQbxgCHL8VjsgHq6e8cFjubWFPrrnrYMJApeSlS/s1600/R190E11_01.gif" /></a></td></tr>
<tr><td class="tr-caption" style="text-align: center;"><span style="font-size: small; text-align: start;"> 圖1:ZumoDrive網站上所提供的雲端儲存服務。 </span></td></tr>
</tbody></table>
<br />
相對於消費端雲端儲存的熱絡,企業端雖然仍處於「只聞樓梯響」的階段,但當前主要的儲存業者,如EMC、HP、HDS、IBM、NetApp…等,早已準備好迎接雲端運算所可能產生的變革,如今就等著「東風」起而全力搶攻。<br />
<br />
<br />
<b><span style="color: red;">IT資源轉化為Web服務</span></b><br />
雲端儲存是雲端運算架構中的一部分,所以在介紹雲端儲存之前,必須先對雲端運算架構有一些基本的了解。簡單來說,雲端運算就是將運算、儲存及網路,抑或硬體、軟體及平台等IT資源,透過虛擬化之資源利用最佳化,以及可量化計費的服務型態,經由網路分送,給使用者隨時存取的一種服務平台。<br />
<br />
該服務就像水電等公共設施一般,使用者不需了解其背後運作技術及狀況,企業用戶也不必耗費可觀的人力及管理成本,進行任何IT設備及資源的管理。所有資源的分配及管理,設備的汰換、更新與擴充,全都由雲端運算供應商負責一切,並依使用者需求提供可擴展性的高可用性服務,至於使用戶則只要按使用量付費即可。<br />
<br />
事實上,雲端運算所採用的理論基礎與技術皆非全新,從過去以來的伺服器整合(Server Consolidation)、Web Service、服務導向架構(SOA)、公共運算(Utility Computing)、主機代管等服務或平台上,就已經可以看到與雲端運算概念相似的身影。這也是當前雲端運算一直沒有被明確定義的原因之一。<br />
<br />
不論如何,隨著網路頻寬的提昇、Web 2.0與虛擬化技術的日漸普及,雲端運算在上述各種有著相似概念技術、服務或平台長久所奠下的基礎上發展,開始愈受注目與青睞。<br />
<br />
在許多技術服務當中,網格運算(Grid Computing)最常與雲端運算相提並論,雖然兩者皆採分散式運算架構,但事實上,卻有很大差異,其中尤以資源擴展性最為明顯。前者強調所有運算資源集中化,以因應需要大規模運算的應用任務,缺乏擴展彈性;後者適用於多重用戶之大量單一請求,並依不同個別需求調配資源,具備動態擴展能力。<br />
<br />
<br />
<b><span style="color: red;">資源配置與管理介面 </span></b><br />
要達到資源隨需分配、隨需擴展的彈性,雲端運算必須融合許多技術,例如分散式運算、SaaS、Web Service與伺服器虛擬化等,尤其是伺服器虛擬化技術,在這幾年的推展下,不論是資源利用率的提昇,乃至降低電力、散熱所達成的節能減碳效益,都為雲端運算發展奠下厚實的基礎,使其不但可發揮動態擴展性與多重用戶(Multi-tenancy)的經濟效益,並有效降低IT資源的使用成本。<br />
<br />
伺服器虛擬化允許多作業系統與相關應用軟體可同時運行在單一實體機器中的特性,可協助企業加速完成基礎架構即服務(Infrastructure as a Service, IaaS)方案的部署。所謂IaaS資源大致是指儲存、網路與運算等三種資源而言,使用者可針對特定屬性的虛擬機器,指定搭配不同用量的資源配置(例如配置該機擁有1GB記憶體、320GB硬碟等)。(圖2)<br />
<br />
<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody>
<tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh511c9Ih43Ei6Fi5SA-LtcaJZnw2tQOTavX0CrbGsOLn_EHLNQT4fEH_ILOwWYnjA81jMUkNtnPAG06HDv5EHcZ4Wqu49Vys_ZrhR5tscEz0-X9tsvCai6n18TkTQXZeBFc6GokK7i9Hgd/s1600/R190E11_02.gif" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh511c9Ih43Ei6Fi5SA-LtcaJZnw2tQOTavX0CrbGsOLn_EHLNQT4fEH_ILOwWYnjA81jMUkNtnPAG06HDv5EHcZ4Wqu49Vys_ZrhR5tscEz0-X9tsvCai6n18TkTQXZeBFc6GokK7i9Hgd/s1600/R190E11_02.gif" /></a></td></tr>
<tr><td class="tr-caption" style="text-align: center;"><span style="font-size: small; text-align: start;">圖2:雲端運算架構模型。(資料來源:IBM)</span></td></tr>
</tbody></table>
<br />
該方案允許快速的應用程式資源配置,基礎架構之上的底層作業系統,也可依負載控制需求進行擴展或縮小。也因為如此,使用中的資源較能與應用軟體的需求做良好的搭配。當前IaaS方案多半提供了基於REST(REpresentational State Transfer)式的HTTP操作介面,透過該介面,可允許在其基礎架構上進行虛擬映像檔的部署、管理,以及資源的指定分配。<br />
<br />
REST介面並沒有其他協定的額外負擔,它允許使用者可以簡易地存取其伺服器。每個資源皆透過獨一無二的URI(Uniform Resource Identifier)定址,同時基於CRUD(Create創建、Retrieve檢索、Update更新、Delete刪除)四個操作,資源因而能被控管。<br />
<br />
<br />
<b><span style="color: red;">三種雲端運算架構 </span></b><br />
依照Wikipedia的定義,如圖3,雲端運算在建置架構上大致分成三個階層:應用程式、平台與基礎設施,並由此分別提供三種型態服務:<br />
<br />
<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="float: left; margin-right: 1em; text-align: left;"><tbody>
<tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi1v3rwj7kfhMGpPPsZ2JJ0AQs1Mpbr5F0Bi0aaBHd3hCTfeU0ixJ1nWuT94_9mx7mRa68QU54ePkur9ru0Y3bwov0cocNIRF2K9RZzUjEFZ-D-e3wHW6RYNqRi3qF-aBzQp2IJELfCw0LF/s1600/R190E11_03.gif" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi1v3rwj7kfhMGpPPsZ2JJ0AQs1Mpbr5F0Bi0aaBHd3hCTfeU0ixJ1nWuT94_9mx7mRa68QU54ePkur9ru0Y3bwov0cocNIRF2K9RZzUjEFZ-D-e3wHW6RYNqRi3qF-aBzQp2IJELfCw0LF/s1600/R190E11_03.gif" height="400" width="281" /></a></td></tr>
<tr><td class="tr-caption" style="text-align: center;"><span style="font-size: small; text-align: start;">圖3:雲端運算架構階層堆疊。資料來源:Wikipedia</span></td></tr>
</tbody></table>
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
1.軟體即服務(SaaS)<br />
<br />
在此階層中,主要是以雲端應用程式(Cloud Application)來提供各種SaaS服務,存取該服務的使用者不需要下載或安裝任何程式,就可以直接透過瀏覽器存取雲端應用程式所提供的功能與服務。透過該服務,使用者不用對軟體進行排錯、更新等維護作業,對於使用管理負擔及成本的降低有不小的助益。不僅如此,比起自行建置的系統與程式,SaaS提供了更高可用性的不中斷服務。<br />
<br />
當前市面上不乏許多通行已久的SaaS服務,其中最耳熟能詳的莫過於Google Apps與Saleforce.com。採用P2P技術的Skype、趨勢科技的雲端防毒,以及YouTube、Facebook、Twitter等Web應用程式,皆屬於不同類型的SaaS服務。微軟在既有商用軟體上,另外提供相對應線上軟體服務也是其中一種。在儲存方面,目前Amazon所提供的自助式內容分派服務CloudFront,以及支援檔案共享與資料同步化服務的微軟Live Mesh,皆屬於採用分散式雲端儲存技術的SaaS服務。<br />
<br />
2.平台即服務(PaaS)<br />
<br />
所謂PaaS,指的是提供運算平台或解決方案服務化而言。它仰賴雲端基礎設施之資源,支援雲端應用的不同功能,並提供整合的API。PaaS好處在於應用程式的部署更簡便、有效降低底層軟硬體架構採買及管理成本。常見的服務包括Microsoft Azure、Google Engine、Google Custom Search、Yahoo! BOSS等。至於Amazon SimpleDB、Amazon S3、Nirvanix等,則屬於提供結構化雲端儲存機制的PaaS服務。<br />
<br />
3.基礎設施即服務(IaaS)<br />
<br />
至於IaaS意指雲端基礎架構(Cloud Infrastructure),也就是將運算、儲存及網路等資源轉化為標準化服務,以提供內外部使用者存取之用。為了讓資源有效管理與應用,IaaS多半藉助虛擬化技術來完成伺服器整合之基本作業。目前市面上的IaaS服務,在運算資源分派服務上,有Amazon CloudWatch,以及提供虛擬機器服務的Amazon EC2;在網路資源分派服務上,則有Amazon VPC虛擬私有雲端;在原生儲存資源分派服務上,則以Amazon EBS為代表。<br />
<br />
除了上述三個服務階層外,整個雲端運算架構中還有最頂層的用戶端,以及最底層的伺服器。對於雲端運算而言,其服務對象即為用戶端。用戶端可透過桌機、筆電、Thin Client,甚至手機、PDA等行動裝置內建的瀏覽器來存取雲端運算服務。<br />
<br />
就Thin Client與手機等裝置來說,裝置本身並不需要強大的硬體效能,也不用安裝任何軟體,只要有簡單好用的瀏覽器,就可以隨時隨地享受雲端服務所帶來的種種好處。至於伺服器,當然是雲端運算提供各種服務的最重要基礎設備,即使是可以提昇整合效率的虛擬化軟體,也必須藉助伺服器的安裝才行。在伺服器類型上,同時具備高密度運算容量,並有效提昇管理及佔用空間效益的刀鋒伺服器愈見青睞。<br />
<br />
<br />
<b><span style="color: red;">三大雲端部署類型</span></b><br />
上述三種類型服務的雲端,若是供企業內部使用,即為私有雲端(Private Cloud),如果是營運商專門建置用來提供外部用戶使用,並藉此營利者稱為公共雲端(Public Cloud),說明如下:<br />
<br />
<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody>
<tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgsJyu4MmW1LBksV6we_lZVZS-fnjsit4NEG63uVFvE7orC3dlznHf8oLO4kkBNQKgfiMau6QR1KJwNJwLqSLFMun63aF_npveT0AWxGXaEpIVI_6zNEkDWc0fQewKfaqiokaL2AEzv5w4K/s1600/R190E11_04.gif" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgsJyu4MmW1LBksV6we_lZVZS-fnjsit4NEG63uVFvE7orC3dlznHf8oLO4kkBNQKgfiMau6QR1KJwNJwLqSLFMun63aF_npveT0AWxGXaEpIVI_6zNEkDWc0fQewKfaqiokaL2AEzv5w4K/s1600/R190E11_04.gif" height="377" width="640" /></a></td></tr>
<tr><td class="tr-caption" style="text-align: center;"><span style="font-size: small; text-align: start;">圖4:雲端運算部署型態。(資料來源:Wikipedia)</span></td></tr>
</tbody></table>
<br />
公共雲端<br />
一般雲端運算多半是指公共雲端而言,又稱為外部雲端(External Cloud)。其服務供應商能提供極精細的IT服務資源動態配置,並透過Web應用或Web服務,提供網路自助式服務。對於使用者而言,完全不需知道伺服器的確切位置,或什麼等級伺服器,所有IT資源皆有遠端方案商提供。而且該廠商必須具備資源監控與評量等機制,才能採取如同公用運算般的精細付費機制。EMC Atmos即為此例。<br />
<br />
對於中小型企業而言,公共雲端提供了最佳IT運算與成本效益的解決方案;但對有能力自建資料中心的大型企業來說,公共雲端難免仍有安全與信任上的顧慮。不論如何,公共雲端改變了既有委外市場的產品內容與型態,提供裝置設定,以及永續IT資源管理的代管服務,對於主機代管等委外市場會產生影響。<br />
<br />
<br />
私有雲端<br />
私有雲端又稱之為內部雲端(Internal Cloud),相對於公共雲端,此概念較新。許多企業由於對公共雲端供應商的IT管理方式、機密資料安全性與賠償機制,會有信任上的疑慮,所以紛紛開始嘗試透過虛擬化或自動化機制,來模擬建置內部網路中的雲端運算。<br />
<br />
內部雲端的建置,不但提供更高的安全掌控性,同時內部IT資源不論在管理、調度、擴展、分派、存取控制與成本支出上都更具精細度、彈性與效益。其建置難度不小,當前已有HP BladeSystem Matrix、NetApp Dynamic Data Center等整合型基礎架構方案的推出,以HP BladeSystem Matrix為例,其組成硬體包括BladeSystem c7000機箱,撘配ProLiant BL460c G6刀鋒型伺服器、StorageWorks Enterprise Virtual Array 4400,以及管理軟體工具HP Insight Dynamics-VSE,即試圖藉此方案得以減低建置技術的門檻,在可見的未來取代資料中心,成為資料中心未來蛻變轉型的終極樣貌。<br />
<br />
<br />
混合雲端(Hybrid Cloud)<br />
所謂混合雲端,意指企業同時擁有公共與私有兩種型態雲端而言。當然在建置步驟上會先從私有雲端開始,待一切運作穩定後再對外開放,企業不但可提昇內部IT使用效率,也可藉由對外的公共雲端服務獲利。<br />
<br />
如此一來,原本只能讓企業花大錢的IT資源,也能轉而成為營利的工具。企業可將這些收入一部分用來繼續投資在IT資源的添購及改善上,不但內部員工受益,同時也提供更完善的雲端服務。也因為如此,混合雲端或許會成為今後企業IT建置的主流模式。此型態的最佳代表,莫過於提供簡易儲存服務(Simple Storage Service;S3)及彈性運算雲端(Elastic Compute Cloud;EC2)服務的亞馬遜(Amazon)。<br />
<br />
<br />
<b><span style="color: red;">雲端儲存的樣貌</span></b><br />
如前述,雲端儲存是指雲端運算架構中的儲存部分,從底層的IaaS、中層PaaS到頂層SaaS都可以看到其身影,其中尤以底層儲存資源的網路服務化最為重要。或許可以簡單地說,雲端儲存就是儲存即服務(Storage as a Service)的意思。<br />
<br />
事實上,雲端儲存既可以看做雲端運算架構中的重要組成份子,當然也可以個別拉出成為獨立的Web服務。就像雲端運算的組成架構一樣,一個完備的雲端儲存也有許多階層,雖然劃分方式及名稱不同,但與前者階層架構仍有許多相似之處。<br />
<br />
舉例來說,雲端儲存的核心即為儲存層,就如同雲端運算中的IaaS階層,是由分散在不同區域的各類型儲存設備所組成,不論是DAS,抑或FC SAN、iSCSI或NAS等IP儲存設備,皆可透過支援儲存虛擬化技術的集中化管理系統整合在一起。透過管理系統,可以進行所有儲存設備的遠端監控、排錯等作業;而最重要且最困難的部份則是應用中介層,此類似於雲端運算中的PaaS階層,必須達到不同儲存設備間的協同運作,並提供單一整合服務。<br />
<br />
在使用上,使用者不論身在何處或任何時間,只要透過Web-based應用程式,即可上網直接存取資料。即時面對任何特定需求,例如串流資料檔之存取,雲端儲存系統也可隨時動態新增擴充來加以支援。<br />
<br />
再就傳輸介面來說,HTTP可說是最通用的通訊協定。換句話說,它使得使用者只要透過瀏覽器便可遠端存取資料,而不必進行任何編碼程序,同時相對應的應用程式會隨即被啟動呼叫。但為了解決網路資料的定址與操作問題,具備URI定址能力,並支援CRUD操作原理的REST介面,遂成為當前許多雲端儲存產品一致採用的資料物件介面。<br />
<br />
對於雲端運算所啟動的映像檔,雲端儲存大多能透過傳統區塊及檔案介面,像是iSCSI或NFS來提供。這些映像檔為虛擬機器所掛載,並派送到使用雲端運算的用戶系統上。至於傳統磁碟及檔案系統也能一樣地被配置。雲端運算應用軟體,一旦被運行,當然也能使用資料物件介面。<br />
<br />
比起專用設備,雲端儲存的最大特點不在功能或介面上,而在於隨選派送功能的支援上。更重要的是,它可實現不同儲存裝置之間的協同運作。面對區塊儲存或檔案系統,雲端儲存可對單一LUN或虛擬Volume提供精細的分配外,實際的儲存空間能被隨需配置,同時並採取用多少就付多少的付費機制。<br />
<br />
藉由一些壓縮或資料重複刪除等技術,並可進一步減少儲存空間的用量。針對儲存管理,則多半採用典型之頻外(Out-of-band)標準資料儲存介面,另外也可透過API,抑或Web-based使用者管理介面。該介面當然也可以將快照與複製等其他資料服務功能納入。<br />
<br />
<br />
<b><span style="color: red;">首要解決異質平台協同問題 </span></b><br />
不論是雲端運算或雲端儲存,虛擬化技術都是其中不可或缺的重要促因與基礎。但儲存虛擬化並不像推展已久的伺服器虛擬化那麼普及與順利,因為其中仍有許多待解決的難題存在。<br />
<br />
這是因為當前各種儲存方案與技術十分繁雜而多樣,光從一家企業內部可能同時存在各種不同類型儲存裝置的狀況便知一二。更何況不同儲存設備供應商間的儲存環境一直存在相容性問題,所以喊了多年的儲存整合,仍舊難以如企業需求所願,這也是儲存虛擬化與雲端儲存推展上的最大阻力。<br />
<br />
雖然儲存雲端在某方面很容易跨入(例如線上儲存與備份),但另一方面想要透過私有雲端儲存來達成全面性之儲存整合,似乎不是那麼容易的事情。對此,HP建議指出,想要成功完成儲存虛擬化目標必須改善企業既有IT儲存環境,其改善重點不外共通分享的儲存架構、親和的使用環境、簡潔單一的操作介面,以及效能卓著的儲存方案等。其中,不論是單一操作介面或統一標準的API,更是解決不同儲存裝置間協同問題的關鍵之一。(圖5)<br />
<div class="separator" style="clear: both; text-align: center;">
</div>
<br />
<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody>
<tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg6TZf9iku3xXAPVCSppMBbFxNRpyPTJaVJnjAbTFNnFWicoR4FV-MzVn4Aq2HBwLQ1q3HsBWXaJ1TyFmPvDjmLMvyzMTIXlYqquE5BGm6Csf48cEVext6PtVp8mpFO5rPBQcF8Azotizcf/s1600/R190E11_05.gif" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg6TZf9iku3xXAPVCSppMBbFxNRpyPTJaVJnjAbTFNnFWicoR4FV-MzVn4Aq2HBwLQ1q3HsBWXaJ1TyFmPvDjmLMvyzMTIXlYqquE5BGm6Csf48cEVext6PtVp8mpFO5rPBQcF8Azotizcf/s1600/R190E11_05.gif" /></a></td></tr>
<tr><td class="tr-caption" style="text-align: center;"><span style="font-size: small; text-align: start;">圖5:虛擬化儲存架構的層級分類。(資料來源:HP)</span></td></tr>
</tbody></table>
<br />
對於IaaS基礎架構而言,擁有一個可程式介面,意味著使用者可以撰寫一個可透過該介面來管理雲端使用狀況的用戶端軟體,而這也是當前充斥許多API的原因。不僅如此,許多雲端方案供應商並且免費地授權其專利API,好讓使用者能夠藉此打造出相同的雲端基礎架構。<br />
<br />
儘管有許多Open API,但是許多雲端社群會員已經開始放慢制式地採用單一公司專利介面的腳步。雖然開源社群開始一些嘗試性的回應動作,但仍無法扼止API激增的狂潮。事實上,對於雲端運算而言,其所需要的標準API,應該得符合中立特色,同時廠商實施風險最小且最穩定可靠才行。如此才可讓客戶將其應用程式堆疊從一個雲端供應商,方便無礙地轉移到其他供應商。<br />
<br />
<br />
<b><span style="color: red;">OCCI開放雲端運算介面 </span></b><br />
面對上述問題,開放網格論壇(Open Grid Forum, OGF)早已成立專責介面標準化的工作小組。其所制定的開放雲端運算介面標準(Open Cloud Computing Interface, OCCI),即為一個免費、開放、為社群共同接納推動,且以雲端基礎架構服務為鎖定目標的介面標準。藉由該API,資料中心與雲端夥伴可以免受現有一堆專利或開放雲端API之間歧異不相容之苦。<br />
<br />
面對雲端基礎架構服務所組成之關鍵元件,目前OCCI是採用資源導向架構(Resourced Oriented Architecture, ROA)來表示。同時,每個由簡潔URI標示的資源可擁有許多不同的描述呈現方式(例如可以超文件來表示)。OCCI工作小組正規劃在API中加入許多格式的支援,在初始版本中,Atom/Pub、JSON及Plain Text等標準都被納入支援行列中。<br />
<br />
該版本並且規定一個單獨URI進入點(Entry Point)定義一個OCCI介面,該介面顯示「Nouns」內含屬性,其中的「Verb」會被執行。原則上,該屬性會以鍵值對(Key-value pairs)表示,而適當的動詞則以連結(Link)表示。重要的是,該屬性會以URI來描述。(圖6)<br />
<br />
<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody>
<tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiSdSpyEIAjxTvfxjwRQfJkHioL5g__2pG3yFQBbb2zb0wKPjuxlU4zVF00Jdwn_lUM3SPQj_v-ZmWWIh5UlXTx-Iotc6F9_RzZ7mE_I4ADuURJphetvpHQPT7cGHcDGBMYC_y7I9j_aVAr/s1600/R190E11_06.gif" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiSdSpyEIAjxTvfxjwRQfJkHioL5g__2pG3yFQBbb2zb0wKPjuxlU4zVF00Jdwn_lUM3SPQj_v-ZmWWIh5UlXTx-Iotc6F9_RzZ7mE_I4ADuURJphetvpHQPT7cGHcDGBMYC_y7I9j_aVAr/s1600/R190E11_06.gif" /></a></td></tr>
<tr><td class="tr-caption" style="text-align: center;"><span style="font-size: small; text-align: start;">圖6:OCCI介面URI對齊IaaS資源示意圖。(資料來源:SNIA)</span></td></tr>
</tbody></table>
<br />
該API不僅提供CRUD操作,且分別與HTTP Verb的POST、GET、PUT及Delete等參數相對應。HEAD與OPTIONS等Verb參數可用來檢索詮釋資料(Metadata)與有效操作,而不需要實體主體來增進效能。所有HTTP功能均能利用現有網際網路基礎架構,包括快取、代理、閘道及其他進階功能。再者,所有詮釋資料,包括資源間的關聯性會透過HTTP表頭對外公開。該介面原生地以ATOM表示,並盡可能地接近底層HTTP協定來執行。<br />
<br />
OCCI會提供對基礎架構服務之定義、創建、部署、操作及退出的管理功能。透過簡易服務生命週期模型,可支援由雲端供應商提供的基本通用生命週期狀態。在事件中,供應商並不會提供或報告服務生命週期狀況,OCCI並不會強制遵行,而是將生命週期模型定義成提議書,供雲端供應商遵循。<br />
<br />
參照OCCI,雲端運算用戶端可啟動執行全新應用程式堆疊,並管理其生命週期與其採用的資源。為了執行像是來自SNIA CDMI介面所導出的應用程式堆疊,透過OCCI介面即可分派儲存至特定虛擬機器。SNIA機構並表示,接下來該組織會進一步對儲存管理與其中資料管理之方法途徑進行檢驗。<br />
<br />
<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody>
<tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEirIH_lBkqMk_OprPZU4PPYkzcQyace9cm1yVnd5G0pF1olngC9oGvn4tDP0lSnFm7ze9UpOibvNQHrj4eRPPy6M7zyG0rtwTAW7CzGzlJkufBh9OfluAmRg32Qp49q8P8kBj1PeLDfgDrE/s1600/R190E11_07.gif" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEirIH_lBkqMk_OprPZU4PPYkzcQyace9cm1yVnd5G0pF1olngC9oGvn4tDP0lSnFm7ze9UpOibvNQHrj4eRPPy6M7zyG0rtwTAW7CzGzlJkufBh9OfluAmRg32Qp49q8P8kBj1PeLDfgDrE/s1600/R190E11_07.gif" /></a></td></tr>
<tr><td class="tr-caption" style="text-align: center;"><span style="font-size: small; text-align: start;">圖6:OCCI介面URI對齊IaaS資源示意圖。(資料來源:SNIA)</span></td></tr>
</tbody></table>
<br />
<span style="color: red;"><b>擔負雲端儲存標準介面制定重任的SNIA</b></span><br />
在介紹完雲端運算的標準介面之後,接著讓我們看看雲端儲存統一標準介面的制定狀況。國際間致力於儲存標準制定工作的儲存網路產業協會(Storage Networking Industry Association, SNIA),是當前雲端儲存標準的主要推動者,致力於儲存系統統一標準與API介面的開發作業,用以集中搜尋、監控並管理不同廠牌及標準的儲存設備。<br />
<br />
由於各家儲存系統的標準不一,異質儲存裝置所構成的網路儲存系統的協同管理,一直是當前最急迫待解的問題。透過標準化介面,即使各家系統內部各有不同的運作功能與標準,但仍能透過統一介面進行溝通,從而實現並發揮協同管理的最大效益,且各家產品仍能保留進行自身標準及技術功能的研發。<br />
<br />
<br />
雲端儲存計畫正式推動<br />
對於雲端儲存發展有著里程碑一般深遠意義與影響的,莫過於SNIA組織於2009年10月12日對外發佈雲端儲存計畫(Cloud Storage Initiative, CSI)的正式推動。該計畫是在2009年秋季舉行的年度盛會-儲存網路世界大會(SNW Fall 2009)上正式發表。發起成員包括EMC、HP、HDS、LSI、NetApp、Sun、Symantec與Xiotech(Seagte子公司)。CSI計畫的工作內容主要包括雲端儲存技術及標準的推廣與技術合作,同時並與業界共同推廣雲端儲存相關技術的培訓、開發與應用發展。<br />
<br />
當前雲端儲存互通性與協同管理的最重要且急迫的工作,莫過於統一標準介面的制定。對此,SNIA特別成立專門性的雲端儲存技術工作小組(Techical Working Group, TWG),如圖8,目前該小組已有30家廠商共140名技術成員的加入。該小組會與SNIA、CSI各單位及會員,乃至其他雲端產業組織共同合作。其主要工作項目大致包含開發雲端儲存參考模型、最佳應用方案與實例。當然最重要的任務莫過於制定雲端儲存產品之統一管理標準介面(亦即CDMI標準API的制定與推廣)。(圖9)<br />
<br />
<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody>
<tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiD98L8YAEaqPM4DLhdXjTYNruhMoMwwXQEruheh9QQ7MW5_raB_KxYPbmwTmcoMdSlb2MoNX-42KCbL1R1Dn28_OrMHvNMJr0N2Nuuh0u2PPQrv5sQCPyyobGX6zGaS25i6FHuhZPToVKq/s1600/R190E11_08.gif" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiD98L8YAEaqPM4DLhdXjTYNruhMoMwwXQEruheh9QQ7MW5_raB_KxYPbmwTmcoMdSlb2MoNX-42KCbL1R1Dn28_OrMHvNMJr0N2Nuuh0u2PPQrv5sQCPyyobGX6zGaS25i6FHuhZPToVKq/s1600/R190E11_08.gif" /></a></td></tr>
<tr><td class="tr-caption" style="text-align: center;"><span style="font-size: small; text-align: start;">圖8:SNIA雲端儲存技術工作小組組織架構圖。</span></td></tr>
</tbody></table>
<br />
<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody>
<tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgeciej_sl2AZKxrcdyeXeKTHpvKYrnvvGnwit4YGsL_hTa9sIPmzMYdrB2F5s8IJIqNfDPobCofRrRr-nCamU-yJYVc9dsrXeM6VPB6pmgv7ChVfNM0_8CucfJ7O_2nocTDCRhvdMtYGoS/s1600/R190E11_09.gif" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgeciej_sl2AZKxrcdyeXeKTHpvKYrnvvGnwit4YGsL_hTa9sIPmzMYdrB2F5s8IJIqNfDPobCofRrRr-nCamU-yJYVc9dsrXeM6VPB6pmgv7ChVfNM0_8CucfJ7O_2nocTDCRhvdMtYGoS/s1600/R190E11_09.gif" /></a></td></tr>
<tr><td class="tr-caption" style="text-align: center;"><span style="font-size: small; text-align: start;">圖9:雲端儲存參考模型。(資料來源:SNIA)</span></td></tr>
</tbody></table>
<br />
<b><span style="color: red;">CDMI雲端儲存全新標準介面</span></b><br />
目前由SNIA草擬的CDMI(Cloud Data Management Interface)介面標準之最新版本為0.80版,預計明年將會推出正式的1.0版。由於各家儲存方案介面標準不一,所以當前不論是儲存虛擬化或雲端儲存,皆深為儲存資源無法有效協同運作的問題所苦。對此,CDMI介面的制定,就是為了強化雲端儲存與資料管理的協同作業。<br />
<br />
在CDMI架構中,被上層介面所揭示的下層儲存空間,是以抽象化的容器(Container)概念來表示。所謂容器不僅僅是儲存空間的有用抽象化,同時也做為儲存在其中資料的群組,抑或總體應用數據服務的控制點。至於CDMI不只提供具備CRUD基本操作概念的資料物件介面,同時也可以用來管理被雲端運算基礎架構所傳送使用的容器。<br />
<br />
對於雲端運算來說,CDMI提供了通用雲端運算管理基礎架構,同時原本資訊管理的重點已漸漸從儲存管理轉移圍繞在資料管理上。CDMI標準則可以協助使用者將特殊詮釋資料(Metadata)標記在資料上,該詮釋資料會告訴端點儲存供應商,什麼樣的資料服務提供該資料(例如備份、歸檔、加密等)。<br />
<br />
這些資料服務都會將鍵值加入到使用者存在雲端上的資料中,然後透過CDMI標準介面的執行,使用者可在不同雲端供應商間任意移動資料,而不再需要忍受不同介面中一再重新編碼的痛苦。<br />
<br />
<br />
<b><span style="color: red;">標準化運算及儲存的協同運作 </span></b><br />
再就可存取的CDMI容器來說,其不僅藉由CDMI做為資料通道,同時也可採用其他協定來存取資料,尤其是以CDMI做為雲端運算環境的儲存介面。輸出的CDMI容器能被雲端運算環境中的虛擬機器當成每一個用戶上所顯示的虛擬磁碟機來用。<br />
<br />
較令人期待的是,雲端運算基礎架構管理可同時支援OCCI及CDMI兩種標準介面。為了達成協同運作,CDMI內含可導出OCCI介面所獲得的資訊,OCCI則提供被導出CDMI容器相對應的儲存。<br />
<br />
其操作執行的範例如下:<br />
1.用戶端透過CDMI介面創建一個CDMI容器,並將其轉換成一個OCCI導出型態。CDMI容器ObjectID會回報結果。<br />
2.用戶端接著透過OCCI介面創建一個虛擬機器,並藉由該ObjectID附加一個CDMI類型之儲存容量。OCCI虛擬機器ID會回報結果。<br />
3.接著用戶端以OCCI虛擬機器ID進行CDMI容器物件導出資訊的更新作業,如此才能讓虛擬機器存取該容器。<br />
4.最後用戶端再透過OCCI介面啟動虛擬機器。<br />
<br />
OCCI及CDMI可說是專門讓雲端運算及雲端儲存達成協同運作的標準化作業(圖10)。該標準是透過OGF與SNIA兩者間的策略聯盟,以及透過跨SDO雲端標準協同小組之協調一致才達成。OCCI可充份利用CDMI已配置好,以及設定完成的儲存。一旦兩個介面採用相同原理及技術,單一用戶將能同時管理應用程式的運算與儲存需求,並且符合配置在兩介面上需求的同時擴展。<br />
<br />
<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody>
<tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi5_e6hMi-CFq6YInRUHkQ-WpnA_B5-8Ohu4EDoapMaC4w1vTqFQcqH24FWdNFNe8kckkq4jO6I1dyWNAEKjWNWZjLS_yM3nKdq1cbKgvBrFhf7mEGI29d2wcUA22phj3TOxWOjZVXhyr7c/s1600/R190E11_10.gif" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi5_e6hMi-CFq6YInRUHkQ-WpnA_B5-8Ohu4EDoapMaC4w1vTqFQcqH24FWdNFNe8kckkq4jO6I1dyWNAEKjWNWZjLS_yM3nKdq1cbKgvBrFhf7mEGI29d2wcUA22phj3TOxWOjZVXhyr7c/s1600/R190E11_10.gif" /></a></td></tr>
<tr><td class="tr-caption" style="text-align: center;"><span style="font-size: small; text-align: start;">圖10:整合式雲端運算環境CDMI及OCCI介面協同運作架構。(資料來源:SNIA)</span></td></tr>
</tbody></table>
<b style="color: red;"><br /></b>
<b style="color: red;">小結 </b><br />
雲端儲存與雲端運算一樣,必須經由網路來提供隨選分派的儲存資源。重要的是,該網路必須具備良好的QoS機制才行。對於用戶來說,具備彈性擴展與隨使用需求彈性配置的雲端儲存,可節省大筆的儲存設備採購及管理成本,甚至因儲存設備損壞所造成的資料遺失風險也可因此避免。總之,不論是端點使用者將資料備份到雲端,抑或企業基於法規遵循,或其他目的的資料歸檔與保存,雲端儲存皆可滿足不同需求。<br />
<br />
至於IT資源要能實現彈性隨需配置,還須仰賴各種不同平台領域之間的協同工作才能達成。而國際標準的制定,正有助於整個雲端運算相關產業的應用發展,讓雲端的精神不再那麼遙不可及,而是落實到實際IT架構的應用。<br />
<br />
<br />
<br />
【原文刊載於RUN!PC雜誌】Anonymoushttp://www.blogger.com/profile/02768237855233416154noreply@blogger.com1tag:blogger.com,1999:blog-3506419250791502155.post-5129396402296914242014-08-12T20:31:00.003+08:002014-08-12T20:31:55.057+08:00yum 基本介紹和參數說明yum 基本介紹和參數說明<br />
<br />
<br />
前言 :<br />
想必大家對yum這個指令應該不陌生吧。清清鬆鬆就把想要的東西安裝好了。但是真的了解yum的人應該就不多了。所以今天就來介紹一下yum吧。<br />
<br />
一、yum介紹<br />
YUM 是一個自動安裝工具,它可以幫助RPM系統安裝,移除,升級軟體套件(應用程式,函式庫等)。您不需要在一一檢查手冊查閱相依性需要的套件,它能夠自動檢測軟體安裝時的相依性。這使得我們在管理(升級,安裝,移除)相關群組時更加簡單便利。<br />
您可以使用YUM擴充套件的界面來安裝簡單的功能。您也可以從其他Python程式來使用(大部份Linux的YUM使用python實作)<br />
<br />
二、yum移除與安裝<br />
<br />
1.查詢是否有安裝yum<br />
檢視原始檔複製到剪貼簿列印關於<br />
<br />
[root@localhost ~]# rpm -qa | grep yum <br />
<br />
#若有看到以下內容就比較有安裝 <br />
yum-metadata-parser-1.1.2-3.el5.centos <br />
yum-3.2.22-33.el5.centos <br />
yum-fastestmirror-1.1.16-14.el5.centos.1 <br />
yum-updatesd-0.9-2.el5 <br />
<br />
<br />
2.移除yum (移除的方式有兩種擇一即可)<br />
2.1用yum的方式移除<br />
檢視原始檔複製到剪貼簿列印關於<br />
[root@localhost ~]# yum remove yum* <br />
<br />
<br />
2.2用rpm -e的方式移除<br />
<br />
#先查看有那些yum檔案要移除的<br />
檢視原始檔複製到剪貼簿列印關於<br />
[root@localhost ~]# rpm -qa | grep yum <br />
<br />
yum-metadata-parser-1.1.2-3.el5.centos <br />
yum-3.2.22-33.el5.centos <br />
yum-fastestmirror-1.1.16-14.el5.centos.1 <br />
yum-updatesd-0.9-2.el5 <br />
<br />
<br />
#移除yum<br />
<br />
檢視原始檔複製到剪貼簿列印關於<br />
[root@localhost ~]# rpm -e yum-metadata-parser-1.1.2-3.el5.centos <br />
[root@localhost ~]# rpm -e yum-3.2.22-33.el5.centos <br />
[root@localhost ~]# rpm -e yum-fastestmirror-1.1.16-14.el5.centos.1 <br />
[root@localhost ~]# rpm -e yum-updatesd-0.9-2.el5 <br />
<br />
<br />
三、安裝yum<br />
1.安裝源<br />
在安裝源的部份可以到以下的網址查看<br />
請依自行的需要找到安裝源<br />
i386 :<br />
http://mirrors.sohu.com/centos/5/os/i386/CentOS/<br />
http://mirror.centos.org/centos-5/5/os/i386/CentOS/<br />
<br />
x86_64 :<br />
http://mirrors.sohu.com/centos/5/os/x86_64/CentOS/<br />
http://mirror.centos.org/centos-5/5/os/x86_64/CentOS/<br />
<br />
在yum的部份主要是使用到以下4個檔<br />
yum-metadata-parser-1.1.2-3.el5.centos.i386.rpm<span class="Apple-tab-span" style="white-space: pre;"> </span><br />
yum-fastestmirror-1.1.16-16.el5.centos.noarch.rpm<br />
yum-3.2.22-37.el5.centos.noarch.rpm<br />
yum-updatesd-0.9-2.el5.noarch.rpm<br />
<br />
2安裝yum<br />
i386<br />
檢視原始檔複製到剪貼簿列印關於<br />
[root@localhost ~]# rpm -ivh http://mirror.centos.org/centos-5/5/os/i386/CentOS/yum-metadata-parser-1.1.2-3.el5.centos.i386.rpm http://mirror.centos.org/centos-5/5/os/i386/CentOS/yum-fastestmirror-1.1.16-16.el5.centos.noarch.rpm http://mirror.centos.org/centos-5/5/os/i386/CentOS/yum-3.2.22-37.el5.centos.noarch.rpm http://mirror.centos.org/centos-5/5/os/i386/CentOS/yum-updatesd-0.9-2.el5.noarch.rpm <br />
[root@localhost ~]# rpm -qa |grep yum <br />
yum-updatesd-0.9-2.el5 <br />
yum-metadata-parser-1.1.2-3.el5.centos <br />
yum-fastestmirror-1.1.16-16.el5.centos <br />
yum-3.2.22-37.el5.centos <br />
<br />
<br />
<br />
x86_64<br />
檢視原始檔複製到剪貼簿列印關於<br />
[root@localhost ~]# rpm -ivh http://mirror.centos.org/centos-5/5/os/x86_64/CentOS/yum-metadata-parser-1.1.2-3.el5.centos.x86_64.rpm http://mirror.centos.org/centos-5/5/os/x86_64/CentOS/yum-fastestmirror-1.1.16-16.el5.centos.noarch.rpm http://mirror.centos.org/centos-5/5/os/x86_64/CentOS/yum-3.2.22-37.el5.centos.noarch.rpm http://mirror.centos.org/centos-5/5/os/x86_64/CentOS/yum-updatesd-0.9-2.el5.noarch.rpm <br />
[root@localhost ~]# rpm -qa |grep yum <br />
yum-updatesd-0.9-2.el5 <br />
yum-metadata-parser-1.1.2-3.el5.centos <br />
yum-fastestmirror-1.1.16-16.el5.centos <br />
yum-3.2.22-37.el5.centos <br />
<br />
<br />
2.2更新所有已安裝的套件(依個人需求看是否更新)<br />
檢視原始檔複製到剪貼簿列印關於<br />
[root@localhost ~]# yum -y update <br />
<br />
<br />
四、yum指令說明<br />
在使用yum時,會將下載的東西,存放在/var/cache/yum目錄下。<br />
1.yum更新<br />
yum check-update<br />
#檢查能更新的套件有那些<br />
<br />
yum update<br />
#更新所有已安裝的套件,若在update後面接上套件名稱的話可針對該套件更新<br />
如yum update httpd<br />
<br />
yum upgrade<br />
#功能看update差不多,差別在於yum upgrade會連同一些過舊即將洮汰的套件也一起更新,大多使用在版本升級。<br />
<br />
1.1安裝移除套件<br />
yum install<br />
#安裝套件,install後面接要安裝的套件名稱,如yum install httpd。若要把所有相關的一起安裝的話可在最後加上「*」。如yum install httpd*<br />
<br />
yum remove<br />
#移除套件在這邊會考慮到相依性的問題,remove後可接要移除套件名稱,如yum remove httpd。若要把相關套件也一起移除的話可在最後加上「*」。如yum remove httpd*<br />
<br />
yum clean<br />
#清除安裝下載時的暫套件原始檔,大多是存放在/var/cache/yum,通常會下yum clean packages或是yum clean all,一次全刪除。<br />
<br />
1.2清暫存<br />
yum clean<br />
#清除安裝下載時的暫套件原始檔,大多是存放在/var/cache/yum<br />
<br />
yum clean packages<br />
#用來清除暫存(/var/cache/yum)目錄下的套件<br />
<br />
yum clean headers<br />
#用來清除暫存(/var/cache/yum)目錄下的 headers<br />
<br />
yum clean oldheaders<br />
#用來清除暫存(/var/cache/yum)目錄下的 oldheaders<br />
<br />
yum clearn all<br />
#直接把所有的站存都一次清除。<br />
<br />
1.3列清單<br />
yum list<br />
#列出所有的套件,若在list後面接套件名稱,則可單獨列出該套件。<br />
<br />
yum list updates<br />
#列出所有可以更新的套件<br />
<br />
yum list installed<br />
#列出所有已經安裝的套件<br />
<br />
yum list extra<br />
#列出所有已安裝但不在 yum Repository 內的套件<br />
<br />
1.4列出套件的相關資訊<br />
yum info<br />
#列出所有套件的相關資訊,若在info後接上套件名稱,則可單讀該套件相關資訊。<br />
如yum info httpd 或yum info httpd*,差別在於有加「*」則會把以httpd開頭的都列出來<br />
<br />
yum info updates<br />
#列出所有可以更新的套件資訊<br />
<br />
yum info installed<br />
#列出所有已安裝的套件資訊<br />
<br />
yum info extras<br />
#列出所有已安裝但不在 Yum Repository 內的套件資訊<br />
<br />
<br />
1.5搜尋功能<br />
yum search<br />
#搜尋所有相關的套件,如yum search httpd,在從中找到所需要的套件。類似關鍵字的用途<br />
<br />
五、升級不動kernel<br />
如果想要用yum來升級套件,但又不想動到kernel的話。請參考下面做法<br />
[root@localhost ~]# vim /etc/yum.conf<br />
#在[main]當中加入下面字串<br />
exclude=kernel kernel-source<br />
<br />
雖然說yum的用法很多,但是一般常用的大概就是安裝、更新和移除。剩下的等有用到才查看就可以了。<br />
<br />
六、yum FAQ<br />
有關yum常見的問題可以參考官網的解答<br />
http://yum.baseurl.org/wiki/FaqAnonymoushttp://www.blogger.com/profile/02768237855233416154noreply@blogger.com0tag:blogger.com,1999:blog-3506419250791502155.post-4288142532587159872014-08-06T02:38:00.002+08:002014-08-06T02:38:30.071+08:00How to disable IPV6 on Windows Server 2012 and Hyper-V 2012 from power shellHow to disable IPV6 on Windows Server 2012 and Hyper-V 2012 from power shell<br />
<br />
<br />
Another simple one that disables IPV6 from powershell for Server and Hyper-V 2012.<br />
<br />
<span style="color: red;">New-ItemProperty -Path HKLM:\SYSTEM\CurrentControlSet\services\TCPIP6\Parameters -Name DisabledComponents -PropertyType DWord -Value 0xffffffff</span><br />
<br />
So that’s one command and you can simply copy and paste into power shell. You will need to have admin privs for this to work.Anonymoushttp://www.blogger.com/profile/02768237855233416154noreply@blogger.com0tag:blogger.com,1999:blog-3506419250791502155.post-75220865588222347192014-07-31T00:33:00.003+08:002014-07-31T00:33:52.208+08:00【 Windows Server 2012 】桌面 顯示(我的電腦、等其它圖示 )【 Windows Server 2012 】桌面 顯示(我的電腦、等其它圖示 )<br />
<br />
<br />
win 2012 桌面 顯示(我的電腦、等其它圖示 )<br />
<br />
win 鍵 + R<br />
<br />
直接輸入:<br />
<br />
rundll32.exe shell32.dll,Control_RunDLL desk.cpl,,0<br />
<br />
就可以跑出 (自訂桌面顯示圖示)<br />
再點你要的圖示在桌面上顯示<br />
<br />
參考(圖說)網址:http://wenku.baidu.com/view/c458b8a8284ac850ad0242ad.htmlAnonymoushttp://www.blogger.com/profile/02768237855233416154noreply@blogger.com1tag:blogger.com,1999:blog-3506419250791502155.post-16234850121683090702014-07-18T09:07:00.003+08:002014-07-18T09:07:48.497+08:00IT產品有後門?中國政府為國安把關,台灣自由選用雲端服務IT 產品有後門?中國政府為國安把關,台灣自由選用雲端服務<br />
<br />
<br />
<b>暨今(2014)年5月Windows 8被大陸中央政府禁止採購之後,日前又傳出中國公安部發布通知禁止採購與使用賽門鐵克DLP,理由是內藏竊密後門與漏洞,並進一步呼籲改用中國國產軟體。大陸政府對於涉及國安與公共利益的系統所採用的技術已制訂安全審查機制,而台灣卻仍各機關各自決定,無一套標準,相當民主自由。 </b><br />
<b><br /></b>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjzcY6QWfZsJVUoZRMUwL5F1waB27tHld0z-DtTC7_xkD4WzkVTnChDDlimPJtoa60A8zdAcugCXTkFFrGW6_dh3CGzH3SonGHHzOlMz3W90eyK1zNSwAO-8niwLAa7CUNsPTABdksE63LF/s1600/62577.931625.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjzcY6QWfZsJVUoZRMUwL5F1waB27tHld0z-DtTC7_xkD4WzkVTnChDDlimPJtoa60A8zdAcugCXTkFFrGW6_dh3CGzH3SonGHHzOlMz3W90eyK1zNSwAO-8niwLAa7CUNsPTABdksE63LF/s1600/62577.931625.jpg" /></a></div>
<br />
媒體報導之後,中國賽門鐵克隨之發表聲明,表示該產品絕無後門,且其DLP產品於2011年已取得產品銷售許可證。根據熟悉DLP的業界人士指出,DLP產品中應該沒有任何程式會將資料回傳原廠,亦不會有錯誤通報功能的程式。不論如何,可以確定的是美國IT產品在中國市場遇到了極大的阻礙。根據大陸媒體報導,在5月下旬中國國家互聯網信息辦公室亦規定凡涉及國家安全和公共利益的系统所使用的信息技術產品和服務,都將進行安全審查,而這些措施也都有利於中國國產廠商。<br />
<br />
反觀台灣在上(6)個月傳出環保署導入Gmail系統做為公務使用,引起專家學者對於國安外洩的隱憂,儘管環保署回應表示,在合約中已要求承商需盡保密義務,且對機密文件另訂有管控流程。但兩相比較之下,台灣政府對於外商IT產品/雲端服務相對地「公平、公正、公開」。<br />
<br />
對於公務機關採用Gmail服務,某政府機關資訊長A先生直言此舉十分不妥。他指出,存在Google雲端服務裡的資料擺在哪裡沒人知道,同一份資料會複製三份,且在台灣沒有司法管轄權,資料即使被拿走也不能怎樣。除了Gmail之外,A先生提醒,伺服器存放在國外的Line也更是近期公務機關應慎防資料外洩的管道。<br />
<br />
本土Webmail廠商網擎資訊執行長廖長健也強調司法管轄權的問題,一旦有國土安全議題或相關訴訟事件發生時,國外雲端服務供應商勢必會遵循該國法令要求,而調閱資料,客戶可能完全不知情,或者也無能阻止,這等於是將管理權交給別人。再加上,一旦發生資安事件,雲端服務供應商能否配合提供log作為調查?儘管可以在合約上要求,但在實務技術層面可能會有難度。因此,凡是與民眾福祉相關的公務機關或金融單位都應審慎評估採用此類服務的影響。<br />
<br />
對此,掌管金融機構的金管會對於金融業採取雲端服務就有嚴格要求,由於銀行存有民眾帳戶、存款等重要資料,因此規定金融業的雲端服務供應商資料中心必須設立在台灣。廖長健進一步指出,網擎的Web mail雲端服務亦有日本政府採用,是因為網擎在日本也直接設立資料中心,且維運人員也是日籍工程師,符合日本法規。<br />
<br />
臺灣網路防護協會樊國楨教授也表示,政府機關資訊系統委外的政策應謹慎考量國際法相關規定,根據北大西洋公約組織邀各國專家制訂的塔林手冊(Tallinn Manual on the International Law Applicable to Cyber Warfare),已使用數位基礎設施(Cyber Infrastructure)的名稱將關鍵基礎設施列為國家主權標的中,然而Gmail此類雲端郵件服務在戰爭時的國家主權卻可能不屬於我國。再加上此類郵件服務不屬於核電廠等禁止發動「資訊戰」之CI,卻是APT攻擊常見的標的,因此政府將電子郵件系統委外的資訊政策應該再審慎研議。<br />
<br />
除了司法管轄權、國家安全/國家主權等議題之外,站在產業發展的角度,A先生認為扶植廠商有其必要,尤其是有資安國安疑慮的產品應該以國產為優先,例如email或手機。他認為,政府應該出來制訂一套統一的採購標準,哪些是採購國產產品為宜,哪些不受限制。而對於外國產品,也不應獨排中國,不論中國或美國都應一視同仁。<br />
<br />
轉載 <a href="http://mis.bankshung.net/2014/07/it.html">不及格網管</a><br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh7VKa6ixBL3PsGpIyvG-s6CUJT9lktUsR1JWlcN1t560f5zWz7RqVdspIbX6gQMLD5HybHi9ZpvJ5HQ3RvFLIz9aKTR6_Qa0XrPZ4CuQZf_KqBSevdTQzZqrcTINNVYRAL9xcOJBreWCH3/s1600/vontu_sample_report.gif" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh7VKa6ixBL3PsGpIyvG-s6CUJT9lktUsR1JWlcN1t560f5zWz7RqVdspIbX6gQMLD5HybHi9ZpvJ5HQ3RvFLIz9aKTR6_Qa0XrPZ4CuQZf_KqBSevdTQzZqrcTINNVYRAL9xcOJBreWCH3/s1600/vontu_sample_report.gif" /></a></div>
<br />Anonymoushttp://www.blogger.com/profile/02768237855233416154noreply@blogger.com1tag:blogger.com,1999:blog-3506419250791502155.post-50581313842592458912014-07-17T23:45:00.007+08:002014-07-17T23:46:11.126+08:00使用 SCP 指令,讓您傳送檔案至遠端、下載檔案<b>使用 SCP 指令,讓您傳送檔案至遠端、下載檔案</b><br />
<br />
<br />
當我們使用 Linux 系統時,可能需要一些傳送檔案的動作,此時就可以使用 SCP 這個指令,即可不須透過隨身碟等方式,幫你將檔案傳送至另一端 Linux 電腦~<br />
<br />
接著我們看看如何使用~~<br />
假設我們有兩台電腦…..<br />
<br />
<span style="color: red;">A電腦 IP : 1.1.1.1</span><br />
<span style="color: blue;">B電腦 IP : 1.1.1.2</span><br />
<br />
[上傳]若目前使用<span style="color: red;">A電腦</span>,我們要將 <span style="color: red;">A電腦</span> 某個檔案,傳送至 <span style="color: blue;">B電腦</span> 中,可以這麼輸入<br />
scp [-P Port] [-pr] [-l 速度] [傳送至遠端的檔案] [遠端帳號@IP:放置的路徑]<br />
ex. scp -P 1234 -pr /home/user/temp/ test@1.1.1.2:/home/test/test/<br />
<br />
[下載]若目前使用<span style="color: red;">A電腦</span>,我們想從<span style="color: blue;"> B電腦</span> 某個檔案,下載至 <span style="color: red;">A電腦 </span>中,可以這麼輸入<br />
scp [-P Port] [-pr] [-l 速度] [遠端帳號@IP:檔案路徑] [儲存至本機的路徑]<br />
ex. scp -P 1234 -pr test@1.1.1.2:/home/test/test/ /home/user/temp/<br />
<br />
參數說明<br />
<br />
[-P Port] scp 指令預設是走 22 Port ,若想走其他 Port 可以加入此參數<br />
[-p] 保留原檔案的屬性(權限)資料<br />
[-r] 若要傳送目錄時,要記得家此指令才可以傳送整個目錄<br />
[-l 速度] 限制傳輸速度,單位為 Kbits/sAnonymoushttp://www.blogger.com/profile/02768237855233416154noreply@blogger.com1tag:blogger.com,1999:blog-3506419250791502155.post-89949683104382891982014-07-17T23:20:00.000+08:002014-07-17T23:21:02.973+08:00郵件的傳送流程、MUA、MTA、MDA<div>
<span style="font-family: arial, helvetica, sans-serif, verdana, 宋体;"><span style="font-size: 14px; line-height: 18px;"><b>郵件的傳送流程、MUA、MTA、MDA</b></span></span></div>
<div>
<span style="font-family: arial, helvetica, sans-serif, verdana, 宋体;"><span style="font-size: 14px; line-height: 18px;"><br /></span></span></div>
<div>
<span style="font-family: arial, helvetica, sans-serif, verdana, 宋体;"><span style="font-size: 14px; line-height: 18px;"><br /></span></span></div>
<div>
<span style="font-family: arial, helvetica, sans-serif, verdana, 宋体;"><span style="font-size: 14px; line-height: 18px;">先說明什麼是MUA,MTA與MDA,然後說明信件的傳送流程。</span></span></div>
<div>
<span style="font-family: arial, helvetica, sans-serif, verdana, 宋体;"><span style="font-size: 14px; line-height: 18px;"><br /></span></span></div>
<div>
<span style="font-family: arial, helvetica, sans-serif, verdana, 宋体;"><span style="font-size: 14px; line-height: 18px;">MUA(Mail User Agent):顧名思義,MUA就是“郵件用戶代理”。舉個例子,Windows裏的OutLook Express、Netscape裏的mail功能與KDE裏的Kmail都是MUA。MUA主要的功能就是接收郵件主機的電子郵件,並提供用戶瀏覽與編寫郵件的功能。 MTA(Mail Transfer Agent):MUA是用在Client端的軟件,而MTA是用在郵件主機上的軟件,它也是主要的郵件服務器。MTA就是“郵件傳送代理”的意思,既然是 “傳送代理”,那麼用戶寄信與收信時,都找MTA就對了 MDA(Mail Delivery Agent):“郵件投遞代理”主要的功能就是將MTA接收的信件依照信件的流向(送到哪裏)將該信件放置到本機賬戶下的郵件文件中(收件箱),或者再經由MTA將信件送到下個MTA。了解了MUA,MTA與MDA之後,下面說說如何將信寄出去。可以分爲幾個步驟。</span></span></div>
<div>
<span style="font-family: arial, helvetica, sans-serif, verdana, 宋体;"><span style="font-size: 14px; line-height: 18px;"><br /></span></span></div>
<div>
<span style="font-family: arial, helvetica, sans-serif, verdana, 宋体;"><span style="font-size: 14px; line-height: 18px;">Step 1 用戶利用MUA寄信到MTA。通常我們使用MUA(例如Outlook express)寫信時,要寫明幾個項:</span></span></div>
<div>
<span style="font-family: arial, helvetica, sans-serif, verdana, 宋体;"><span style="font-size: 14px; line-height: 18px;">發信人與發信網站:必須有這個信息。發信網站就是下面Step 2接收信件的那個MTA;</span></span></div>
<div>
<span style="font-family: arial, helvetica, sans-serif, verdana, 宋体;"><span style="font-size: 14px; line-height: 18px;">收信人與收信網站:以account@e-mail.server 的形式給出,其中,account就是該e-mail.server裏的賬號。 在圖20-1左上角的那臺機器上,也就是“本地客戶端使用的電腦”,利用MUA功能(如Outlook express)寫好信之後,按下MUA的“發送”按鈕,MUA就會依據你所定義的主機地址將信發送到MTA上。</span></span></div>
<div>
<span style="font-family: arial, helvetica, sans-serif, verdana, 宋体;"><span style="font-size: 14px; line-height: 18px;"><br /></span></span></div>
<div>
<span style="font-family: arial, helvetica, sans-serif, verdana, 宋体;"><span style="font-size: 14px; line-height: 18px;">Step 2 MTA收到信件,交由MDA發送到該賬號的MailBox中。如果在Step 1收到的信件中,那個e-mail.server就是MTA自己,此時MTA會將該信件交由MDA處理,將信件放置在收信者的信箱中。</span></span></div>
<div>
<span style="font-family: arial, helvetica, sans-serif, verdana, 宋体;"><span style="font-size: 14px; line-height: 18px;"><br /></span></span></div>
<div>
<span style="font-family: arial, helvetica, sans-serif, verdana, 宋体;"><span style="font-size: 14px; line-height: 18px;">Step 3 MTA將信再轉送出去。如果由Step 1發來的信件的收件人並不是MTA的內部賬號,那麼該信將被再次轉送出去!Step 1及Step 3的動作,我們也稱爲Relay(郵件轉發)功能。</span></span></div>
<div>
<span style="font-family: arial, helvetica, sans-serif, verdana, 宋体;"><span style="font-size: 14px; line-height: 18px;"><br /></span></span></div>
<div>
<span style="font-family: arial, helvetica, sans-serif, verdana, 宋体;"><span style="font-size: 14px; line-height: 18px;">Step 4 遠程MTA收到本地MTA發出的郵件。遠程MTA會收到我們這臺MTA的信件,並將該信件交給它的MDA處理(Step 5),此時,信件會存放在遠程MTA上,等待用戶登錄讀取或下載。</span></span></div>
<div>
<span style="font-family: arial, helvetica, sans-serif, verdana, 宋体;"><span style="font-size: 14px; line-height: 18px;">整個發信流程大致就是這樣。</span></span></div>
<div>
<span style="font-family: arial, helvetica, sans-serif, verdana, 宋体;"><span style="font-size: 14px; line-height: 18px;"> 收信的動作很簡單。不再接受。</span></span></div>
<div>
<span style="font-family: arial, helvetica, sans-serif, verdana, 宋体;"><span style="font-size: 14px; line-height: 18px;"><br /></span></span></div>
<div>
<span style="font-family: arial, helvetica, sans-serif, verdana, 宋体;"><span style="font-size: 14px; line-height: 18px;"><br /></span></span></div>
<div>
<span style="font-family: arial, helvetica, sans-serif, verdana, 宋体;"><span style="font-size: 14px; line-height: 18px;"><b>郵件在傳輸的時候會使用到 MUA,MTA,MDA這三個角色。他們分別是:</b></span></span></div>
<div>
<span style="font-family: arial, helvetica, sans-serif, verdana, 宋体;"><span style="font-size: 14px; line-height: 18px;"><br /></span></span></div>
<div>
<span style="font-family: arial, helvetica, sans-serif, verdana, 宋体;"><span style="font-size: 14px; line-height: 18px;">MUA:Mail User Agent ,郵件用戶代理。客戶端用到的軟件,如 mutt,thunderbird,outlook等。</span></span></div>
<div>
<span style="font-family: arial, helvetica, sans-serif, verdana, 宋体;"><span style="font-size: 14px; line-height: 18px;"><br /></span></span></div>
<div>
<span style="font-family: arial, helvetica, sans-serif, verdana, 宋体;"><span style="font-size: 14px; line-height: 18px;">MTA:Mail Transport Agent,郵件傳輸代理。服務器端用的軟件,如 msmtp,postfix,sendmail等。</span></span></div>
<div>
<span style="font-family: arial, helvetica, sans-serif, verdana, 宋体;"><span style="font-size: 14px; line-height: 18px;"><br /></span></span></div>
<div>
<span style="font-family: arial, helvetica, sans-serif, verdana, 宋体;"><span style="font-size: 14px; line-height: 18px;">MDA:Mail Delivery Agent,郵件投遞代理。服務器處理郵件的軟件,有分揀、過濾 的功能,postfix、sendmail都自帶有,也有獨立的procmail。</span></span></div>
Anonymoushttp://www.blogger.com/profile/02768237855233416154noreply@blogger.com1tag:blogger.com,1999:blog-3506419250791502155.post-4023047103506743792014-07-17T15:46:00.002+08:002014-07-17T15:47:53.534+08:00How to disable IPv6 on CentOS 6.x or Redhat 6.x (RHEL)Setp 1 Check IPv6 on your CentOS or RHEL Server<br />
<br />
$ip addr<br />
<br />
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue state UNKNOWN<br />
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00<br />
inet 127.0.0.1/8 scope host lo<br />
inet6 ::1/128 scope host<br />
valid_lft forever preferred_lft forever<br />
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000<br />
link/ether 00:0c:29:8b:33:58 brd ff:ff:ff:ff:ff:ff<br />
inet 192.168.0.111/24 brd 192.168.0.255 scope global eth0<br />
<span style="color: red;">inet6 fe80::20c:29ff:fe8b:3358/64 scope link</span><br />
valid_lft forever preferred_lft forever<br />
<br />
Step 2 Diasble IPv6 on CentOS or RHEL Server<br />
<br />
vi /etc/modprobe.d/disable-ipv6.conf<br />
<br />
install ipv6 /bin/true<br />
<br />
Step3 edit network and disable IPv6<br />
<br />
vi /etc/sysconfig/network<br />
<br />
NETWORKIING=yes<br />
<span style="color: red;">NETWORKING_IPV6=no</span><br />
HOSTNAME=localhost.localdomain<br />
GATEWAY=192.168.17.1<br />
<br />
Step 4 Check your IP address on your server afrer reboot<br />
<br />
$ ip addr<br />
<br />
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue state UNKNOWN<br />
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00<br />
inet 127.0.0.1/8 scope host lo<br />
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000<br />
link/ether 12:1b:50:ea:5a:1d brd ff:ff:ff:ff:ff:ff<br />
inet 192.168.17.41/24 brd 192.168.17.255 scope global eth0<br />
<br />
see also <a href="http://fuglemanpeter.blogspot.tw/2012/09/centos-ipv6.html">How to disable ipv6 on CentOS 5.x</a>Anonymoushttp://www.blogger.com/profile/02768237855233416154noreply@blogger.com0tag:blogger.com,1999:blog-3506419250791502155.post-16286778727095565452013-12-10T05:41:00.001+08:002013-12-10T05:41:42.377+08:00CentOS secondary IP (IP Alias) How-toThis how-to will show you how to add a additional IP addresses to a single NIC (Network Interface Card) with the use of aliases.<br />
<br />
You will find your interface configurations under /etc/sysconfig/network-scripts/<br />
<br />
Each interface is represented by a file named ifcfg-ethX - where X represents the interface's unique number/id. As an example, the first/default interface would have a corresponding configuration file called ifcfg-eth0.<br />
<br />
In order to create an alias for the interface, you need to create a file in the format ifcfg-ethX:Y - where X is the interface number and Y represents the alias number. The first alias would be numbered 0, the next alias 1, and so forth. For the first alias on the first interface, you would create a file called ifcfg-eth0:0.<br />
<br />
To add a secondary IP address via an alias to eth0, we open ifcfg-eth0:0 in a text editor (I will use my favorite, nano, for this example - you are of course free to use whatever editor you prefer):<br />
<br />
nano -w /etc/sysconfig/network-scripts/ifcfg-eth0:0<br />
<br />
And add the following configuration:<br />
<br />
DEVICE=eth0:0<br />
BOOTPROTO=none<br />
ONPARENT=yes<br />
IPADDR=XXX.XXX.XXX.XXX<br />
GATEWAY=XXX.XXX.XXX.1<br />
NETMASK=255.255.255.0<br />
<br />
-- This assumes that your IP addresses are in the same vlan/range as your primary interface, and you will need to replace the IPADDR, GATEWAY and in some cases the NETMASK with the appropriate values. If in doubt, use ifcfg-eth0 as a guide, or ask someone to help you. --<br />
<br />
In order to apply the new IP address, you can either do a full network restart (which will interrupt all services temporarily):<br />
<br />
service network restart<br />
<br />
Or you can simply use ifup to bring up the alias "interface":<br />
<br />
ifup eth0:0<br />
<br />
To verify that everything is OK, issue the ifconfig command to list active interfaces:<br />
<br />
# ifconfig<br />
<br />
eth0 Link encap:Ethernet HWaddr XX:XX:XX:XX:XX:XX<br />
inet addr:XXX.XXX.XXX.XX Bcast:XXX.XXX.XXX.255 Mask:255.255.255.0<br />
inet6 addr: XXX::XXX:XXXX:XXXX:XXXX/XX Scope:Link<br />
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1<br />
RX packets:1672376185 errors:0 dropped:0 overruns:0 frame:0<br />
TX packets:1830099250 errors:0 dropped:0 overruns:0 carrier:0<br />
collisions:0 txqueuelen:1000<br />
RX bytes:1022777289 (975.3 MiB) TX bytes:111054671 (105.9 MiB)<br />
<br />
eth0:0 Link encap:Ethernet HWaddr XX:XX:XX:XX:XX:XX<br />
inet addr:XXX.XXX.XXX.XX Bcast:XXX.XXX.XXX.255 Mask:255.255.255.0<br />
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1<br />
<br />
(...)<br />
<br />
That should be it! If you have any issues, feel free to comment or get in touch.Anonymoushttp://www.blogger.com/profile/02768237855233416154noreply@blogger.com0tag:blogger.com,1999:blog-3506419250791502155.post-62583148628465466482013-12-09T22:24:00.000+08:002013-12-09T22:24:21.581+08:00CentOS 新增第三方 yum RepositoriesCentOS 新增第三方 yum Repositories<br />
<br />
<br />
CentOS在套件管理上和Fedora相比<br />
<br />
預設的repositories 只有放官方測試過的程式<br />
<br />
有些好用的軟體都必須自己去抓source下來編譯安裝<br />
<br />
所以我們可以新增一個第三方repositories 去擴充 yum 可用的套件<br />
<br />
至於有那些repositories可用,<br />
<br />
可參考CentOS 官方 wiki : http://wiki.centos.org/AdditionalResources/Repositories<br />
<br />
<br />
<br />
以下介紹 rpmforge 的安裝方式<br />
<br />
1. 先確認系統核心<br />
<br />
# uname -i<br />
x86_64<br />
<br />
<br />
2. 下載對應核心版本 rpm forege<br />
<br />
i386 http://packages.sw.be/rpmforge-release/rpmforge-release-0.5.2-2.el5.rf.i386.rpm<br />
x86_64 http://packages.sw.be/rpmforge-release/rpmforge-release-0.5.2-2.el5.rf.x86_64.rpm <---- 我的是x86_64<br />
# wget http://packages.sw.be/rpmforge-release/rpmforge-release-0.5.2-2.el5.rf.x86_64.rpm<br />
<br />
<br />
3. 匯入DAG's GPG KEY<br />
<br />
# rpm --import http://apt.sw.be/RPM-GPG-KEY.dag.txt<br />
4. 驗證下載的rpm來源是否正確<br />
<br />
# rpm -K rpmforge-release-0.5.2-2.el5.rf.*.rpm<br />
rpmforge-release-0.5.2-2.el5.rf.x86_64.rpm: (sha1) dsa sha1 md5 gpg OK<br />
5. 安裝 rpmforge<br />
<br />
# rpm -ivh rpmforge-release-0.5.2-2.el5.rf.*.rpm<br />
Preparing... ########################################### [100%]<br />
1:rpmforge-release ########################################### [100%]<br />
<br />
6. 測試yum reposititores 是否已加入 rpmforge<br />
<br />
# yum clean all<br />
<span class="Apple-tab-span" style="white-space: pre;"> </span>隨便下指令安裝個什麼東西來看看是否已加入成功<br />
<br />
# yum install htop<br />
Loaded plugins: fastestmirror<br />
Loading mirror speeds from cached hostfile<br />
* addons: mirror01.idc.hinet.net<br />
* base: mirror01.idc.hinet.net<br />
* extras: mirror01.idc.hinet.net<br />
* rpmforge: fr2.rpmfind.net<br />
* updates: mirror01.idc.hinet.net<br />
addons | 951 B 00:00<br />
addons/primary | 204 B 00:00<br />
atrpms | 3.0 kB 00:00<br />
atrpms/primary_db | 1.2 MB 00:02<br />
base | 2.1 kB 00:00<br />
base/primary_db | 2.2 MB 00:02<br />
extras | 2.1 kB 00:00<br />
extras/primary_db | 241 kB 00:00<br />
rpmforge | 1.1 kB 00:00<br />
rpmforge/primary | 2.2 MB 00:03<br />
rpmforge 10480/10480<br />
updates | 1.9 kB 00:00<br />
updates/primary_db | 335 kB 00:00<br />
Setting up Install Process<br />
Resolving Dependencies<br />
--> Running transaction check<br />
---> Package htop.x86_64 0:0.9-1.el5.rf set to be updated<br />
--> Finished Dependency Resolution<br />
<br />
<br />
Dependencies Resolved<br />
<br />
<br />
==========================================================================================<br />
Package Arch Version Repository Size<br />
==========================================================================================<br />
Installing:<br />
htop x86_64 0.9-1.el5.rf rpmforge 84 k<br />
<br />
<br />
Transaction Summary<br />
==========================================================================================<br />
Install 1 Package(s)<br />
Upgrade 0 Package(s)<br />
<br />
<br />
Total download size: 84 k<br />
Is this ok [y/N]:<br />
<br />
<br />
這樣就完成囉!Anonymoushttp://www.blogger.com/profile/02768237855233416154noreply@blogger.com1tag:blogger.com,1999:blog-3506419250791502155.post-73812766906693236862013-12-09T22:20:00.002+08:002013-12-09T22:20:22.522+08:00如何配置更新套件 YUM 的設定<div>
<span style="font-family: arial, sans-serif; font-size: medium;">如何配置更新套件 YUM 的設定</span><br />
<span style="font-family: arial, sans-serif; font-size: medium;"><br /></span>
<span style="font-family: arial, sans-serif; font-size: medium;"><br /></span>
<span style="font-family: arial, sans-serif; font-size: medium;">今天把 CentOS 裝了起來 ... 即將開始要亂槍打鳥的學習方式了 XD</span></div>
<div>
<br /></div>
<div>
參考此篇文章來說,所謂的 <a href="http://yum.baseurl.org/">YUM </a>就是 Yellowdog Updater Modified,有一點點像 FreeBSD 裡的 Ports 這東東,簡單來說就是可以輕鬆的來管理軟體的工具。</div>
<div>
<br /></div>
<div>
要使用 YUM 必須做一些設定。預設在 /etc/yum.conf 裡面就可以做設定,不過 yum.conf 也有提到,若沒有在裡面做任何配置,它就會自動去尋找 /etc/yum.repos.d/ 裡面的 CentOS-Base.repo 這個檔案。因此我們要針對此檔案做一些調校。</div>
<div>
<br /></div>
<div>
# cd /etc/yum.repos.d</div>
<div>
# cp CentOS-Base.repo CentOS-Base.default</div>
<div>
# vi CentOS-Base.repo</div>
<div>
<br /></div>
<div>
直接打入下面這行,並存檔離開 ( 進入 vi 後按 Esc )</div>
<div>
:%s/mirror.centos.org\/centos/ftp.cse.yzu.edu.tw\/pub\/CentOS </div>
<div>
或</div>
<div>
:%s/mirror.centos.org\/centos/ftp.cs.pu.edu.tw\/Linux\/CentOS</div>
<div>
或</div>
<div>
:%s/mirror.centos.org\/centos/ftp2.tnc.edu.tw\/pub1\/CentOS</div>
<div>
另外,我們在安裝一些要用到的一些工具時,或許它並不存在於 CentOS yum 的官方資料庫中。所以我們還要另外定義非官方資料庫文件,讓一些實用的工具也能透過 yum 來安裝。</div>
<div>
# vi /etc/yum.repos.d/dag.repo</div>
<div>
<br /></div>
<div>
[dag]</div>
<div>
name=Dag RPM Repository for Red Hat Enterprise Linux</div>
<div>
baseurl=http://apt.sw.be/redhat/el$releasever/en/$basearch/dag</div>
<div>
gpgcheck=1</div>
<div>
enabled=1</div>
<div>
http://dag.wieers.com/rpm/packages/RPM-GPG-KEY.dag.txt</div>
<div>
<br /></div>
<div>
匯入非官方資料庫的GPG</div>
<div>
# rpm --import http://dag.wieers.com/rpm/packages/RPM-GPG-KEY.dag.txt</div>
<span style="font-family: arial, sans-serif; font-size: medium;"></span><br />
<div>
<div style="margin: 0px;">
這樣子就可以了!</div>
</div>
Anonymoushttp://www.blogger.com/profile/02768237855233416154noreply@blogger.com0tag:blogger.com,1999:blog-3506419250791502155.post-41718677448659679272013-12-09T17:11:00.004+08:002013-12-09T17:20:28.894+08:00yum 指令介紹yum 指令介紹<br />
<br />
<br />
YUM - Yellowdog Updater Modified<br />
<br />
YUM 官方網站:<br />
<a href="http://linux.duke.edu/projects/yum/">http://linux.duke.edu/projects/yum/</a><br />
<br />
yum 指令介紹<br />
---------------------------------------------------------------<br />
更新:yum update<br />
安裝:yum install xxx<br />
移除:yum remove xxx<br />
清除已經安裝過的檔案(/var/cache/yum/):yum clean all<br />
搜尋:yum search xxx<br />
列出所有檔案:yum list<br />
查詢檔案訊息:yum info xxx<br />
<br />
群組安裝功能<br />
---------------------------------------------------------------<br />
yum grouplist<br />
yum groupinstall "Web Server"<br />
<br />
一些檔案<br />
---------------------------------------------------------------<br />
rpm -qc yum<br />
more /var/log/yum.log<br />
<br />
利用 yum 指令更新 CentOS<br />
---------------------------------------------------------------<br />
yum check-update;yum -y update;yum clean all<br />
<br />
<br />
yum check-update 是找 mirror 上有啥你可以更新的<br />
yum -y update 是開始更新,並在出現尋問的時候直接回答 y<br />
yum clean all 是清除你剛剛更新時下載的 package<br />
<br />
<br />
<br />
CentOS yum的詳細使用方法<br />
<br />
yum是什麼<br />
yum = Yellow dog Updater, Modified<br />
主要功能是更方便的添加/刪除/更新RPM包.<br />
它能自動解决包的倚賴性問題.<br />
它能便於管理大量系統的更新問題<br />
<br />
yum特點<br />
可以同時配置多個資源庫(Repository)<br />
簡潔的配置文件(/etc/yum.conf<br />
自動解决增加或刪除rpm包時遇到的倚賴性問題<br />
使用方便<br />
保持與RPM數據庫的一致性<br />
<br />
yum安裝<br />
<br />
CentOS自帶(yum-*.noarch.rpm)<br />
#rpm -ivh yum-*.noarch.rpm<br />
<br />
在第一次启用yum之前首先需要導入系統的RPM-GPG-KEY:<br />
#rpm --import /usr/share/doc/centos-release-3(4)/RPM-GPG-KEY-CentOS-3(4)<br />
<br />
yum指令<br />
注:當第一次使用yum或yum資源庫有更新時,yum會自動下載所有所需的headers放置於/var/cache/yum目錄下,所需時間可能較長.<br />
<br />
rpm包的更新<br />
<br />
檢查可更新的rpm包<br />
#yum check-update<br />
<br />
更新所有的rpm包<br />
#yum update<br />
<br />
更新指定的rpm包,如更新kernel和kernel source<br />
#yum update kernel kernel-source<br />
<br />
大規模的版本升級,與yum update不同的是,連舊的淘汰的包也升級<br />
#yum upgrade<br />
<br />
rpm包的安裝和刪除<br />
<br />
安裝rpm包,如xmms-mp3<br />
#yum install xmms-mp3<br />
<br />
刪除rpm包,包括與該包有倚賴性的包<br />
#yum remove licq<br />
<br />
注:同時會提示刪除licq-gnome,licq-qt,licq-text<br />
yum暫存(/var/cache/yum/)的相關参數<br />
<br />
清除暫存中rpm包文件<br />
#yum clean packages<br />
<br />
清除暫存中rpm頭文件<br />
#yum clearn headers<br />
<br />
清除暫存中舊的rpm頭文件<br />
#yum clean oldheaders<br />
<br />
清除暫存中舊的rpm頭文件和包文件<br />
#yum clearn 或#yum clearn all<br />
<br />
注:相當於yum clean packages + yum clean oldheaders<br />
<br />
包列表<br />
列出資源庫中所有可以安裝或更新的rpm包<br />
#yum list<br />
<br />
列出資源庫中特定的可以安裝或更新以及已經安裝的rpm包<br />
#yum list mozilla#yum list mozilla*<br />
<br />
注:可以在rpm包名中使用匹配符,如列出所有以mozilla開頭的rpm包<br />
<br />
列出資源庫中所有可以更新的rpm包<br />
#yum list updates<br />
<br />
列出已經安裝的所有的rpm包<br />
#yum list installed<br />
<br />
列出已經安裝的但是不包含在資源庫中的rpm包<br />
#yum list extras<br />
<br />
注:通過其它網站下載安裝的rpm包<br />
<br />
rpm包信息顯示(info参數同list)<br />
<br />
列出資源庫中所有可以安裝或更新的rpm包的信息<br />
#yum info<br />
<br />
列出資源庫中特定的可以安裝或更新以及已經安裝的rpm包的信息<br />
#yum info mozilla#yum info mozilla*<br />
<br />
注:可以在rpm包名中使用匹配符,如列出所有以mozilla開頭的rpm包的信息<br />
<br />
列出資源庫中所有可以更新的rpm包的信息<br />
#yum info updates<br />
<br />
列出已經安裝的所有的rpm包的信息<br />
#yum info installed<br />
<br />
列出已經安裝的但是不包含在資源庫中的rpm包的信息<br />
#yum info extras<br />
<br />
注:通過其它網站下載安裝的rpm包的信息<br />
<br />
搜索rpm包<br />
<br />
搜索匹配特定字符的rpm包<br />
#yum search mozilla<br />
<br />
注:在rpm包名,包描述等中搜索<br />
<br />
搜索有包含特定文件名的rpm包<br />
#yum provides realplay<br />
<br />
增加資源庫<br />
<br />
例如:增加rpm.livna.org作为資源庫<br />
<br />
安裝Livna.org rpms GPG key<br />
#rpm --import http://rpm.livna.org/RPM-LIVNA-GPG-KEY<br />
<br />
檢查GPG Key<br />
# rpm -qa gpg-pubkey*<br />
<br />
顯示Key信息<br />
#rpm -qi gpg-pubkey-a109b1ec-3f6e28d5<br />
<br />
(注:如果要刪除Key,使用#rpm -e gpg-pubkey-a109b1ec-3f6e28d5)<br />
<br />
yum常用的命令<br />
# yum install xxx 安裝xxx軟件<br />
# yum info xxx 查看xxx軟件的信息<br />
# yum remove xxx 刪除軟件包<br />
# yum list 列出軟件包<br />
# yum clean 清除緩沖和就的包<br />
# yum provides xxx 以xxx为關鍵字搜索包(提供的信息为關鍵字)<br />
# yum search xxx 搜索軟件包(以名字为關鍵字)<br />
# yum groupupdate xxx<br />
# yum grouplist xxx<br />
# yum groupremove xxx<br />
<br />
這三個都是一組为單位進行升級 列表和刪除的操作。。比如 "Mysql Database"就是一個組會同時操作相關的所有軟件包;<br />
<br />
# yum update 系統升級<br />
# yum list available 列出所有升級源上的包;<br />
# yum list updates 列出所有升級源上的可以更新包;<br />
# yum list installed 列出已經安裝的包;<br />
# yun update kernel 升級內核;<br />
<br />
yum常用的源<br />
<br />
1) 自動選擇最快的源<br />
由於yum中有的mirror速度是非常慢的,如果yum選擇了這個mirror,這個時候yum就會非常慢,對此,可以下載fastestmirror插件,它會自動選擇最快的mirror:<br />
<br />
#yum install yum-fastestmirror<br />
配置文件:(一般不用動)/etc/yum/pluginconf.d/fastestmirror.conf<br />
你的yum鏡像的速度測試記錄文件:/var/cache/yum/timedhosts.txt<br />
<br />
(2)使用圖形界面的yum<br />
如果覺得命令行的yum不方便,那麼可以使用圖形化的yumex,這個看起來更方便,因为可以自由地選擇軟件倉庫:<br />
<br />
#yum install yumex<br />
然後在系統工具中就可以看到yum extender了。實際上系統自帶的“添加/刪除程序“也可以實現圖形化的軟件安裝,但有些yumex的功能它沒有。Anonymoushttp://www.blogger.com/profile/02768237855233416154noreply@blogger.com0tag:blogger.com,1999:blog-3506419250791502155.post-62523833349840759262013-10-09T19:54:00.001+08:002013-10-09T19:55:53.894+08:00Linux 下用 haparm 測試硬碟效能Linux 下用 haparm 測試硬碟效能<br />
<br />
<br />
hdparm -d0 /dev/sda1<br />
<br />
<span style="color: blue;">/dev/sda1:</span><br />
<span style="color: blue;"> setting using_dma to 0 (off)</span><br />
<br />
/etc/rc.d/rc.local 最後面加上一行 /sbin/hdparm -d1 -c3 -m16 /dev/hda 這樣每次開機後,硬碟的 DMA 就會開啟,不必每次手動設定。<br />
<br />
hdparm -d0 /dev/sda1<br />
<br />
<span style="color: blue;">/dev/sda1:</span><br />
<span style="color: blue;"> setting using_dma to 1 (on)</span><br />
<br />
hdparm -tT /dev/sda1<br />
<br />
<span style="color: blue;">/dev/sda1:</span><br />
<span style="color: blue;"> Timing cached reads: 4778 MB in 2.00 seconds = 2392.92 MB/sec</span><br />
<span style="color: blue;"> Timing buffered disk reads: 100 MB in 0.74 seconds = 135.26 MB/sec</span><br />
<br />
如果出現 HDIO_SET_DMA failed: Inappropriate ioctl for device,下載 <a href="http://sourceforge.net/settings/mirror_choices?projectname=hdparm&filename=hdparm/hdparm-9.9.tar.gz">hdparm</a><br />
<br />
# tar -zxvf hdparm-9.9.tar.gz<br />
# cd hdparm-9.9<br />
# make<br />
# make installAnonymoushttp://www.blogger.com/profile/02768237855233416154noreply@blogger.com0tag:blogger.com,1999:blog-3506419250791502155.post-44105810706420356202013-10-04T23:37:00.004+08:002013-10-04T23:40:23.187+08:00Postfix 三十天就上手 (全)Postfix 三十天就上手<br />
<br />
<br />
經過了上篇 <a href="http://fuglemanpeter.blogspot.tw/2012/05/centos-postfix.html">安裝 Postfix</a> 之後,相信很多讀者對於 <a href="http://fuglemanpeter.blogspot.tw/2012/05/centos-postfix.html">Posetfix</a> 設定上有很多疑惑,所以此篇特別整理了 <a href="http://fuglemanpeter.blogspot.tw/2012/05/centos-postfix.html">Postfix</a> 的基礎概念與設定技巧,加強讀者在管理 <a href="http://fuglemanpeter.blogspot.tw/2012/05/centos-postfix.html">Postfix</a> 時能夠更有效的管理維運。<br />
<br />
<br />
<b><span style="color: blue;">Postfix 三十天就上手-Day 01 Postfix 是什麼</span></b><br />
<b><span style="color: blue;"><br /></span></b>
要學 Postfix 之前,當然是要先知道什麼是 Postfix ,本篇文章,會先對 Postfix 作間單的介紹讓大家知道 Postfix 是什麼,它有哪些功能,以及如何運用它。<br />
<br />
Postfix 的用途是『郵件伺服器』,以前大家比較熟悉的可能是『 Sendmail 伺服器』,這個 Postfix 與 sendmail 是類似的東西,那就是『MTA』啦,既然都是 MTA ,這個 Postfix 最早之前的用途也是想要用來『取代 sendmail 』。<br />
<br />
Postfix 是由 Wietse Zweitze Venema ( <a href="http://www.porcupine.org/wietse/">http://www.porcupine.org/wietse/</a> ) 所發展的。sendmail 雖然很好用,但是安全性卻不足,尤其效能上是最大的困擾。<br />
<br />
Venema 博士就在 1998 年利用他老大在 IBM 公司第一個休假年進行一個計畫:『設計一個可以取代 sendmail 的軟體套件,可以提供網站管理員一個更快速、更安全、而且"完全相容"於 sendmail 的 mail server 軟體!』<br />
<br />
Venema 博士也在 1998 年首次釋出這個自行發展的郵件伺服器,並定名為 VMailer。不過為了避免註冊的商標很類似,引起一些註冊上面的困擾。所以 Venema 博士就將名稱改為 Postfix !這個 Postfix 有『在什麼什麼之後修正』的意思(大改就是在 sendmail 之後修正所以這樣取名吧)。<br />
<br />
Postfix 改善了 sendmail 安全性上面的問題,改良了 mail server 的工作效率,更由於其設定檔完全為 ASCII 碼,且設定內容都是『人類看的懂得語言!』因此,你可以輕易的由 sendmail 改良到 Postfix 上面!<br />
<br />
<br />
<b><span style="color: blue;">Postfix 三十天就上手-Day 02 名詞解釋 MUA MTA MDA</span></b><br />
<br />
<span style="color: red;">MUA </span>( <span style="color: red;">Mail User Agent</span> ):顧名思義, MUA 就是『郵件使用者代理人』,<br />
您如果需要收發郵件,除了現在流行的 webmail ,一般您會需要使用 mail 的收發軟體(也有人人喜歡叫他 mail client ) 這個幫您進行郵件收發工作的東西,就是MUA ( Mail User Agent ) Client 端的用戶都需要透過各個作業系統提供的 MUA 才能夠使用郵件系統。<br />
<br />
舉個例子來說, Windows XP 裡面的 OutLook Express 或是 Microsoft Office裡的 Outlook,還有免費又好用的 Thunderbird ( <a href="http://www.mozilla.org/en-US/thunderbird/">http://www.mozilla.org/en-US/thunderbird/</a> )<br />
都是 MUA 的一種!<br />
<br />
MUA 主要的功能就是收受郵件主機的電子郵件,以及提供使用者瀏覽與編寫郵件的功能!<br />
<br />
<span style="color: red;">MTA</span> ( <span style="color: red;">Mail Transfer Agent</span> ) : 顧名思義, MTA 就是『郵件傳送代理人』,它要負責幫使用者傳送郵件,當MUA要收送信件的時候,就需要先找 MTA 連絡一下。<br />
<br />
MTA 的基本功能如下:<br />
<br />
1.接收外部主機寄來的郵件<br />
2.幫使用者傳送 ( 寄出 ) 郵件<br />
3.提供使用者接收自己的郵信<br />
<br />
通常我們所說的 <b><span style="color: yellow;">Mail server ( 郵件伺服器 ) 就是指 MTA</span></b>。<br />
<br />
<span style="color: red;">MDA</span> (<span style="color: red;"> Mail Delivery Agent</span> ) : 顧名思義,MDA 就是『郵件遞送代理人』,主要的功能就是將 MTA 所收受的信件,依照信件的 Flow ( 送到哪裡去 ) 來將該信件進行放置到本機帳戶下的郵件信箱中 ( Mailbox ),或者是再經由 MTA 將這個信件送到下個<br />
MTA 去。<br />
<br />
今天您已大致了解郵件傳送中,常會用到的名詞,明天將會為您解是郵件是如何傳送。<br />
<br />
<br />
<b><span style="color: blue;">Postfix 三十天就上手-Day 03 郵件如何傳送</span></b><br />
<b><span style="color: blue;"><br /></span></b>
該知道的名詞知道了之後,接下來我們就來看郵件如何傳送。<br />
<br />
上一篇說明了 MUA、MTA 跟 MDA,知道了這些名詞之後,接下來想知道郵件傳送流程也就不困難了。<br />
<br />
<span style="color: red;">MUA</span> 您就把它想成是<span style="color: red;">要寫信的人</span>。<br />
<span style="color: orange;">MTA</span> 您就把它想成是<span style="color: orange;">郵局</span>吧。<br />
<span style="color: cyan;">MDA</span> 您就把它想成是<span style="color: cyan;">郵差</span>吧。<br />
<br />
平常如果要些封信給朋友,寫完通常要送給郵局,郵局會先送交給離目的地最近的郵局,最後再送給您的朋友。<br />
<br />
以上幾句就說明郵件傳送奧義,對應到電子郵件傳送流程如下。<br />
<br />
<ol>
<li>使用者利用 MUA 寄信到 MTA -->我們寄信到郵局去。</li>
<li>MTA 轉送到目的帳號所屬的 MTA--> 郵局作業都是先送到離目的地最近的郵局(所以寫郵遞區號才會快),此段就像是 MTA 對 MTA 的郵件 relay。</li>
<li>MTA 收到自己的信件,交由 MDA 發送到該帳號( 如果此信件的目的地屬於該郵局,則交給郵差發送到收件者的信箱)</li>
</ol>
<br />
<b><span style="color: blue;">Postfix 三十天就上手-Day 04 設定檔結構說明</span></b><br />
<b><span style="color: blue;"><br /></span></b>
在要進行 Postfix 設定之前,第一步當然就是先了解設定檔的結構,這樣您設定起來才會快速又正確。<br />
<br />
以 CentOS 為例來說,Postfix 的設定檔預設位置在 /etc/postfix 裡面,主要的設定檔案如下:<br />
<br />
<span style="color: lime;">/etc/postfix/main.cf</span><br />
從這個檔名您大概就可以猜到,這個設定檔就是 postfix 最主要的內容,這個檔案本身基本上就是一個簡單的 postfix 說明文檔。<br />
<span style="color: lime;"><br /></span>
<span style="color: lime;">/etc/postfix/master.cf</span><br />
此檔案規範了 postfix 中,process 運作的參數,從檔名您就知道他是老大囉,您就是透過它來告訴 process 做事方法囉!<br />
<span style="color: lime;"><br /></span>
<span style="color: lime;">/etc/postfix/access</span><br />
當您需要對某些伺服器 ( Hostname or IP ) 作 relay 或者是 deny ,需要使用的檔案。不過這是預設的位置,複雜的郵件伺服器設定大多會配合管理者的習慣,在 main.cf 中指定檔案。<br />
<span style="color: lime;"><br /></span>
<span style="color: lime;">/etc/postfix/aliases</span><br />
此檔案就是讓您設定別名,與 naccess 一樣這是預設的位置,複雜的郵件伺服器設定大多會配合管理者的習慣,在 main.cf 中指定檔案。<br />
<br />
<br />
<span style="color: blue;"><b>Postfix 三十天就上手-Day 05 佇列 (Queue)</b></span><br />
<span style="color: blue;"><b><br /></b></span>
了解Postfix 的佇列可以幫助您判斷郵件目前的狀態。<br />
<br />
您可以由上一篇中介紹的 main.cf 檔案中,找到 queue_directory 的參數,此參數會指定佇列存放的目錄,預設值是設定在 /var/spool/postfix 。<br />
<br />
每一個佇列都擁有一個子目錄,停留在該佇列的郵件都會存在該子目錄下,存在哪個佇列也就代表著目前該郵件的狀態。<br />
<br />
佇列說明如下:<br />
<br />
<span style="color: magenta;">incoming</span><br />
新進的郵件都會送進去 incoming 的佇列 ,postfix 會掃描 incoming 的佇列,並將郵件移往active的佇列。<br />
<br />
<span style="color: magenta;">maildrop</span><br />
postfix允許沒有權限的 sendmail 程式將郵件放到 maildrop 的佇列中。就算 postfix 目前沒有運作您也可以直接將郵件放入,postfix 一啟動就會到 maildrop 進行檢查。<br />
<br />
<span style="color: magenta;">deferred</span><br />
當有部分收件者無法收件,且可收件的人員都已送達時,就會將郵件放入 deferred 的佇列。<br />
<br />
<span style="color: magenta;">active</span><br />
當郵件準備要傳送時,就會進入到 active 的佇列。<br />
<br />
<span style="color: magenta;">hold</span><br />
放到 hold 的佇列的郵件,不會被週期性的傳送,並等待系統管理者來手動處理,如果郵件在停留在此佇列超過 maximal_queue_lifetime 參數所設定的時間,就會被退回給寄件者。<br />
<br />
<span style="color: magenta;">corrupt</span><br />
如果有損回的佇列檔就會被放到 corrupt 的佇列,等待系統管理者處理。<br />
以上了解了 postfix 的佇列之後,您就可以依照的佇列判斷目前郵件的狀態<br />
<br />
<br />
<span style="color: blue;"><b>Postfix 三十天就上手-Day 06 常用指令說明</b></span><br />
<span style="color: blue;"><b><br /></b></span>
利用Postfix 所以供的命令列指令,可以幫助您更輕鬆管理郵件伺服器的工作。<br />
今天的介紹會將重點放在日常操作比較需要的地方,如果對該指令有需要更進一步了解,可以參考一下指令的使用說明,Postfix 所提供的命令列指令有一個共通點,就是全部都使用post開頭。<br />
<br />
指令說明如下:<br />
<br />
<span style="color: magenta;"><b>postfix</b></span><br />
用來啟動、停止跟重新載入設定檔,使用上配合參數如下:<br />
<br />
啟動<br />
檢視原始檔複製到剪貼簿列印關於<br />
<span style="color: lime;">postfix start </span><br />
<br />
停止<br />
檢視原始檔複製到剪貼簿列印關於<br />
<span style="color: lime;">postfix stop </span><br />
<br />
重新載入設定檔<br />
檢視原始檔複製到剪貼簿列印關於<br />
<span style="color: lime;">postfix reload </span><br />
<br />
<span style="color: magenta;"><b>postmap</b></span><br />
postmap主要是將文字檔的內容建立出索引對照檔,ex:將 /etc/postfix/virtual 轉為 /etc/postfix/virtual.db<br />
<span style="color: lime;">postmap hash:/etc/postfix/virtual </span><br />
<br />
另外它還有另外一個很重要的功用,用來 debug (執行 "<span style="color: lime;">postmap -q</span>")。您可以利用 postmap 來檢查對照表中傳回的項目是否與您預期的一樣。<br />
<br />
ex: 檢查 /etc/postfix/access_sender 中 key 為 funkent@ithome.com.tw 的 value<br />
<span style="color: lime;">postmap -q funkent@ithome.com.tw hash:/etc/postfix/access_sender </span><br />
<br />
<b><span style="color: magenta;">postalias</span></b><br />
功能類似 postmap,是將別名檔建立一個索引別名,postalias 必須在別名檔上使用。<br />
<br />
<b><span style="color: magenta;">postcat</span></b><br />
postcat 用來顯示郵件內容,使用時須要提供郵件 ID 。<br />
ex:查看郵件ID為 0E3569009C 的內容<br />
<span style="color: lime;">postcat -q 0E3569009C</span><br />
<br />
<span style="color: magenta;"><b>postlog</b></span><br />
postfix 允許外部程式 (如 shell script ) 使用postlog,將訊息寫到 maillog 中。 ex: 將 This is a test 寫入 maillog<br />
<span style="color: lime;">postlog This is a test </span><br />
<br />
<span style="color: magenta;"><b>postqueue</b></span><br />
postqueue 是 postfix 提供給 user 對上一篇介紹的佇列進行操作的使用者介面,參數使用如下:<br />
<br />
重送所有佇列中的郵件<br />
<span style="color: lime;">postqueue -f </span><br />
<br />
列出佇列中內容<br />
<span style="color: lime;">postqueue -p </span><br />
<br />
PS:postqueue 需要在 postfix 啟動的情況下才能運作。<br />
<br />
<b><span style="color: magenta;">postsuper</span></b><br />
postsuper 是提供管理者維護 postfi x佇列的工具,執行 postsuper 需要有 root 權限。<br />
最常使用的就是刪除佇列中卡住的郵件, 下列範例會將郵件 ID 為 0E3569009C 的郵件從佇列中移除。<br />
<span style="color: lime;">postsuper -d 0E3569009C </span><br />
<br />
正所謂工欲善其事,必先利其器!以上了解了 postfix 提供的工具之後,您就可以更輕鬆的管理postfix。<br />
<br />
<br />
<b><span style="color: blue;">Postfix 三十天就上手-Day 07 Mail Server 的 DNS</span></b><br />
<br />
郵件伺服器要如要對外正常收送郵件,當然最先必要條件就是讓別人可以透過DNS找到你的伺服器。<br />
<span class="Apple-tab-span" style="white-space: pre;"> </span><br />
要讓您的 Mail Server 正常在網際網路上運作,請先設定好 DNS,建議最少將下列3種 Type 的 Resource record 設定好。<br />
<br />
<span style="color: magenta;"><b>A record</b></span><br />
address record --一筆 A record 會對應到一個 ip address,您的 mail server 需要完全合法的的主機名稱,讓客戶端能夠找到您的主機。如:<b><span style="color: red;">mail.ithome.com.tw </span></b><br />
<br />
<span style="color: magenta;">PTR record</span><br />
pointer record--由 ip address 反解到主機名稱就需要使用 PTR record ,您的主機名稱應該要可以被反解,因為在這個垃圾郵件氾濫的時代,如果不能被反解是很容易被判斷成為垃圾郵件。<br />
<br />
<span style="color: magenta;"><b>MX record</b></span><br />
mail exchange record --用來說明那些伺服器負責該網域的郵件服務,您可以有多台郵件伺服器來為您的網域作郵件服務,透過 MX record 就能找到這些服務的伺服器的 ip address。<br />
<br />
在設定 DNS 的時候,您可以將 MX record 指到 A record,另外為企業為了避免遇到郵件伺服器掛點害郵件無法正常運作,對外通常都會有超過一台的郵件伺服器,也就是會有多筆的 MX ,當由郵件送到該網域時,會依 MX 的順序來寄送,如果第一台 MX 紀錄的主機掛點,就會送到順序第二的伺服器。<br />
<br />
在此順便分享一個小撇步,通常垃圾郵件伺服器都會將垃圾郵件送給最後一台 MX,且它不會重送,所以有一招避免垃圾郵件的方式是將最後的 MX 指到<span style="color: red;"><b>空的IP </b></span>。<br />
<br />
不過現在垃圾郵件<b><span style="color: yellow;">不斷進化</span></b>,如何防垃圾郵件已經變成系統管理員最頭痛的問題了。<br />
<br />
<br />
<span style="color: blue;"><b>Postfix 三十天就上手-Day 08 郵件日誌 (maillog)</b></span><br />
<br />
系統管理員最好的朋友就是 log了,想知道系統在搞什麼鬼,最好要知道 log 跟你說什麼?<br />
<br />
當您要對您的 mail server作 debug 時,第一個要想到的就是郵件日誌 ( maillog ),postfix 使用syslog 紀錄 maillog,您可以在 /etc/syslog.conf 查看 maillog 的位置。<br />
<br />
一般建議設定的設值如下:<br />
<br />
mail.none 將不會把郵件訊息存在 /var/log/messages,避免大量郵件日誌搞亂你的系統訊息。<br />
<span style="color: #f4cccc;"># Don't log private authentication messages! </span><br />
<span style="color: lime;">*.info;mail.none;authpriv.none;cron.none /var/log/messages</span> <br />
<br />
再將 mail 的 log 單獨寫到 /var/log/maillog 中。<br />
<span style="color: #f4cccc;"># Log all the mail messages in one place. </span><br />
<span style="color: lime;">mail.* -/var/log/maillog </span><br />
<br />
在 maillog 中還有一個很重要可是卻可能被初學者忽略的問題,就是<b>系統時間</b>與<b>時間戳記</b>,正確的系統時間對 mail server 來說相當的重要,尤其遇到需要與其他 mail server 管理者進行 debug 時,非常需要一個精準的時戳來查核。<br />
<br />
<br />
<b><span style="color: blue;">Postfix 三十天就上手-Day 09 信件代轉 (relay)</span></b><br />
<span class="Apple-tab-span" style="white-space: pre;"> </span><br />
了解代轉避免您的伺服器變成垃圾發送者。<br />
<br />
開放式代轉 ( Open relays ) 可能會讓您的郵件伺服器變成垃圾發送機,可以說是系統管理員的大噩夢。<br />
<br />
所以 Postfix 在預設只會允許你的網域內的郵件代轉。<br />
<br />
您可以透過 mynetworks_style 設定一般的待轉權限,設定如下:<br />
<span style="color: lime;"><br /></span>
<span style="color: lime;">mynetworks_style = class</span><br />
將 mynetworks_style 設定為 class 時,postfix 將會把代轉範圍放寬到伺服器所設定的 IP 的 class 。<br />
<span style="color: lime;"><br /></span>
<span style="color: lime;">mynetworks_style = subnet</span><br />
將 mynetworks_style 設定為 subnet 時,postfix 將會把代轉範圍限定在伺服器所屬的子網路。<br />
<br />
<span style="color: lime;">mynetworks_style = host</span><br />
將 mynetworks_style 設定為 hos 時,postfix 將會把只允許自己主機進行代轉。<br />
<br />
另外您也可以透過設定 mynetworks 來設定獨立允許的代轉,設定方法如下:<br />
<span style="color: lime;">mynetworks = 127.0.0.0/8, 192.168.1.0/24, 192.254.1.30</span> <br />
<br />
請以逗號作為分隔。<br />
<br />
<br />
<b><span style="color: blue;">Postfix 三十天就上手-Day 10 建立別名 (Alias)</span></b><br />
<span class="Apple-tab-span" style="white-space: pre;"> </span><br />
使用別名 ( Alias ) 可以讓大家更好記得您的 e-mail address。<br />
<br />
一般系統開帳號,會使用比較像類似 m91001 這類的英文字搭配數字(如<span style="color: #d9d2e9;">工號</span>或<span style="color: #d9d2e9;">學號</span>),此時您的 e-mail address 可能就會長的像 m91001@ithome.com.tw 。<br />
<br />
您會發現這樣別人很難從你的 e-mail address 聯想到你是誰。此時您就需要使用別名,假設您的名子是 Steve Jobs,您一定會希望您的 e-mail address長的像 steve.jobs@ithome.com.tw,讓別人個好記得你的 e-mail address (尤其業務人員更是需要)。<br />
<br />
另外還有一個狀況,假設您跟另外兩個同事 ( m91002,m91003 )都需要收到 ithelp@ithome.com.tw的郵件時,ithelp@ithome.com.tw 就是像是一個郵件群組,希望大家有問題要問得時候都寄到這個郵件信箱中,此時一樣可以透過建立別名來達成。<br />
<br />
第一步您需要先將這些別名對應到您的需要的系統帳號,您可以編輯 /etc/postfix/aliases,加入的項目如下:<br />
<span style="color: #f4cccc;">#user </span><br />
<span style="color: lime;">steve.jobs: m91001 </span><br />
<span style="color: #f4cccc;">#group </span><br />
<span style="color: lime;">ithelp: m91001,m91002,m91003 </span><br />
<br />
編輯完畢後,您還需要執行 <span style="color: lime;">postalias hash:/etc/postfix/aliases</span> 這樣才會更新你的 aliases.db 。<br />
<br />
別名建立好之後,您就可以試著發送測試的郵件測試看看囉!<br />
<br />
<br />
<b><span style="color: blue;">Postfix 三十天就上手-Day 11 利用 LDAP 建立別名 (Alias)</span></b><br />
<span class="Apple-tab-span" style="white-space: pre;"> </span><br />
利用 LDAP 讓你的 postfix 更好用。<br />
<br />
昨天已經跟大家介紹如何建立別名。相信您看完昨天的文章之後,可能會產生一個小小疑惑,那就是假設我有一千個以上的帳號,是不是會造成檔案很難維護,又如果說你要有多台postfix 那檔案不一致不是很麻煩嗎?<br />
<br />
這個時候您就可以搭配 LDAP,小弟個人比較愛好使用 OpenLDAP,為了要讓您的 Postfix 使用LDAP 來當作查看的對照表( MAPS ),您需要先在 main.cf 先定義 LDAP 的 source,您需要編輯main.cf 並定義 alias_maps 如下範例:<br />
<span style="color: lime;">alias_maps = hash:/etc/aliases, ldap:/etc/postfix/ldap-aliases.cf </span><br />
<br />
另外您的 /etc/postfix/ldap-aliases.cf 範例如下:<br />
<span style="color: lime;">server_host = ldap.ithome.com.tw </span><br />
<span style="color: lime;">search_base = dc=ithome, dc=com, dc=tw </span><br />
<br />
完成以上設定後,假設您的 Postfix 收到一封寄給 Steve.Jo s 的郵件,當它在 /etc/aliases 中找不到時,就會連線到 ldap.ithome.com.tw,由於我們沒有指定 ldap 使用的 port ,所以他會預設使用 port 389 ,另外我們也沒有指定 bind 的 user(password),所以他會 bind anonymously,然後搜尋dc=ithome, dc=com, dc=tw 這棵樹,找出 mailacceptinggeneralid 這個屬性( attribute )為 "Steve.Jos" 的項目( entry ),然後回傳此項目的 maildrop<br />
<br />
利用這樣的方式,就算您有上千個帳號,就算您有多台 postfix,都可以簡單管理。<br />
<br />
<br />
<b><span style="color: blue;">Postfix 三十天就上手-Day 12 利用 MySQL 建立別名 (Alias)</span></b><br />
<span class="Apple-tab-span" style="white-space: pre;"> </span><br />
利用MySQL 讓你的postfix 更好用。<br />
<br />
昨天已經跟大家介紹如何利用 LDAP 建立別名。相信您看完昨天的文章之後,可能也會除了LDAP 是否也能利用資料庫?<br />
<br />
沒錯今天我們就接著來介紹利用 MySQL 建立別名( Alias ),跟 LDAP一樣您需要先告訴 postfix要去找 MySQL,一樣編輯 main.cf 並定義 alias_maps 如下範例:<br />
<span style="color: lime;">alias_maps = mysql:/etc/postfix/mysql-aliases.cf </span><br />
<br />
接著在 /etc/postfix/mysql-aliases.cf 您需要告訴 postfix 如何去參考資料庫,如下列範例:<br />
<span style="color: #f4cccc;"># 設定要連入的主機 </span><br />
<span style="color: lime;">hosts = mysql.ithome.com.tw </span><br />
<br />
<span style="color: #f4cccc;"># 設定要登入資料庫的帳號跟密碼 </span><br />
<span style="color: lime;">user = ithome_user </span><br />
<span style="color: lime;">password = ithome_password</span> <br />
<br />
<span style="color: #f4cccc;"># 設定使用的資料庫名稱 </span><br />
<span style="color: lime;">dbname = mail_db </span><br />
<br />
<span style="color: #f4cccc;"># 設定查詢條件 </span><br />
<span style="color: lime;">query = SELECT maildrop FROM mxaliases WHERE alias='%s' AND status='active' </span><br />
<br />
PS:當您使用 MySQL 來查詢的時候,要記得考量到 postfix 的大量連線數,很多時候容易因為後方的執行效率導致前方的 postfix 變慢。<br />
<br />
<br />
<b><span style="color: blue;">Postfix 三十天就上手-Day 13 main.cf</span></b><br />
<br />
說明 main.cf 基本語法<br />
<br />
在第四天的時候有說明過<b><span style="color: blue;"> Postfix 三十天就上手-Day 04 設定檔結構說明</span></b>,相信大家看完之後對於 postfix 主要設定檔與作用有了一個大概的概念。<br />
<br />
今天我們就針對 main.cf 說明一下此檔案設定語法,postfix 預設將 main.cf 放在 /etc/postfix 的目錄下,該檔案的 owner 預設為 root,所以您要編輯的時候,需要使用 root 進行編輯。<br />
<br />
postfix 在 main.cf 中使用的參數設定方法,與 UNIX shell 的變數設定方式類似,您可以如下列範例將等號<b>左邊的數值</b>(設定值)設定給等號<b>右邊的參數</b>。ex:<br />
<span style="color: lime;">parameter = value </span><br />
<br />
除了直接設定設定值給參數,您也可以將某一參數設定為另外一個參數的設定值,就像變數使用的方法一樣,您只要在開頭使用錢字號 <b>"$"</b>,如以下範例:ex:<br />
<span style="color: lime;">other_parameter = $parameter </span><br />
<br />
這裡要特別跟大家說明,postfix 與 UNIX shell 有兩點比較不一樣的地方,說明如下:<br />
<br />
第一:<span style="color: blue;">Postfix 不使用雙引號</span><br />
第二:<span style="color: blue;">就算在設定 $parameter 的設定值之前您一樣可以使用 $parameter</span><br />
<br />
最後,當您變更了mail.cf 的設定值之後,請記得要在 root 的身分下執行下列指令,讓您的postfix ( running ) 重新載入設定檔。<br />
<span style="color: lime;">postfix reload </span><br />
<span style="color: lime;"><br /></span>
<span style="color: lime;"><br /></span>
<b><span style="color: blue;">Postfix 三十天就上手-Day 14 改寫郵件地址</span></b><br />
<span class="Apple-tab-span" style="white-space: pre;"> </span><br />
利用Canonical address mapping 改寫郵件地址<br />
<br />
在第10天的文章 <span style="color: blue;">Postfix 三十天就上手-Day 10 建立別名(Alias) </span>中有說明利用別名可以讓一個系統帳號有多個 e-mail address,當 user 在收信的時候,我們可以讓 postfix 幫忙將這些系統帳號的e-mail 在 postfix 把郵件地址改寫為您希望設定的 e-mail address,當然改寫的目的有很多,比如說把 "username" 轉到 "username@ithome.com.tw",或是 把 "username@hostname" 轉到 "username@hostname.ithome.com.tw 等等之類,其他目的我們就不多談,今天主要介紹利用<span style="color: red;">Canonical address mapping</span> 改寫郵件地址。<br />
<br />
今天的範例假設使用者的 login name是 steve,但是我們希望把他換成全名 "steve.jobs"。<br />
<br />
Canonical 預設是被停用的 ( disabled ),您需要在 main.c f中設定 canonical_maps 這個參數。<br />
<br />
Step1.編輯 main.cf 設定 canonical_maps 參數如下:<br />
<span style="color: lime;">canonical_maps = hash:/etc/postfix/canonical</span> <br />
<br />
Step2.編輯/etc/postfix/canonical內容如下:<br />
<span style="color: lime;">steve steve.jobs </span><br />
<br />
這樣就可以讓postfix幫您改寫郵件地址。<br />
<br />
<br />
<b><span style="color: blue;">Postfix 三十天就上手-Day 15 利用 LDAP 改寫郵件地址</span></b><br />
<span class="Apple-tab-span" style="white-space: pre;"> </span><br />
利用LDAP 當成你的 postfix 的 lookup table。<br />
<br />
昨天已經跟大家介紹如何改寫郵件地址。如果您有讀過前幾天的文章,您也許會想說是否一樣可以利用 LDAP 作為 Canonical address mapping 的 lookup table,這樣就算您有一千個以上的帳號,也不會造成檔案很難維護,又如果說你要有多台 postfix 那檔案不會不一致。<br />
<br />
為了要讓您的 Postfix 使用 LDAP 來當作查看的對照表 ( MAPS ),您需要先在 main.cf 先定義LDAP 的 source,您需要編輯 main.cf 並定義 canonical_maps 如下範例:<br />
<span style="color: lime;">canonical_maps = hash:/etc/postfix/canonical,ldap:/etc/postfix/ldap-canonical.cf </span><br />
<br />
當然如果您如果完全不想使用 local file ,只使用 LDAP 來當 lookup table,您可以改寫如下:<br />
<span style="color: lime;">canonical_maps = ldap:/etc/postfix/ldap-canonical.cf </span><br />
<br />
另外您的 /etc/postfix/ldap-canonical.cf 範例如下:<br />
<span style="color: lime;">server_host = ldap.ithome.com.tw </span><br />
<span style="color: lime;">search_base = dc=ithome, dc=com, dc=tw </span><br />
<span style="color: lime;">query_filter = (&(mailacceptinggeneralid=%s) </span><br />
<span style="color: lime;">result_attribute= mail </span><br />
<br />
另外LDAP 的 Data假設內容節錄如下:<br />
<span style="color: lime;">mail: Steve.Jobs@ithome.com.tw </span><br />
<span style="color: lime;">uid: m91001 </span><br />
<span style="color: lime;">cn: ITHome Steve Joes </span><br />
<span style="color: lime;">maildrop: m91001@ithome.com.tw </span><br />
<span style="color: lime;">mailacceptinggeneralid:Steve@ithome.com.tw</span> <br />
<br />
完成以上設定後,假設您的 Postfix 收到一封寄給 Steve@ithome.com.tw 的郵件,就會連線到ldap.ithome.com.tw,然後搜尋 dc=ithome, dc=com, dc=tw 這棵樹,找出 mailacceptinggeneralid 這個屬性 ( attribute ) 為 "Steve.Jos" 的項目( entry ),然後回傳此項目的 mail,取得回傳的 mai l值之後,回拿這個回傳值來改寫郵件地址。<br />
<br />
PS:如果你的 LDAP Query 結果回傳超過一筆資料,會讓你的郵件地址改寫機制失敗,您會在maillog 看到如下列的錯誤訊息:<br />
<span style="color: #f4cccc;">Oct 11 07:51:42 mailsrv postfix/cleanup[25578]: warning: D6652F8D11: multi-valued canonical_maps entry for Steve@ithome.com.tw</span> <br />
<br />
為了避免發生邏輯上的設定錯誤,您可以對照 <span style="color: blue;">Postfix 三十天就上手-Day 06 常用指令</span> 說明中的postmap 來檢查對照表中傳回的項目是否與您預期的一樣。<br />
<br />
範例如下:<br />
<span style="color: lime;">postmap -q Steve@ithome.com.tw ldap:/etc/postfix/ldap-canonical.cf </span><br />
<br />
正確的話就會得到下列結果:<br />
<span style="color: lime;">Steve.Jobs@ithome.com.tw</span> <br />
<br />
如果回傳多個值,那您就要看看您邏輯或是資料哪裡錯囉!<br />
<br />
<br />
<b><span style="color: blue;">Postfix 三十天就上手-Day 16 利用 MySQL 改寫郵件地址</span></b><br />
<span class="Apple-tab-span" style="white-space: pre;"> </span><br />
利用 MySQL 當成你的 postfix 的 lookup table。<br />
<br />
昨天已經跟大家介紹如何何利用 LDAP 改寫郵件地址。如果您有讀過前幾天的文章,您也許會想說是否一樣可以利用 MySQL 作為 Canonical address mapping 的 lookup table,這樣就算您有一千個以上的帳號,也不會造成檔案很難維護,又如果說你要有多台 postfix 那檔案不會不一致。<br />
<br />
為了要讓您的 Postfix 使用 MySQL 來當作查看的對照表 ( MAPS ),您需要先在 main.cf 先定義MySQL 的 source,您需要編輯 main.cf 並定義 canonical_maps 如下範例:<br />
<span style="color: lime;">canonical_maps = mysql:/etc/postfix/mysql-canonical.cf </span><br />
<br />
另外您的 /etc/postfix/mysql-canonical.cf 範例如下:<br />
<span style="color: #f4cccc;"># 設定要連入的主機 </span> <br />
<span style="color: lime;">hosts = mysql.ithome.com.tw </span> <br />
<br />
<span style="color: #f4cccc;"># 設定要登入資料庫的帳號跟密碼 </span> <br />
<span style="color: lime;">user = ithome_user </span><br />
<span style="color: lime;">password = ithome_password</span> <br />
<br />
<span style="color: #f4cccc;"># 設定使用的資料庫名稱</span> <br />
<span style="color: lime;">dbname = mail_db</span> <br />
<br />
<span style="color: #f4cccc;"># 設定查詢條件</span> <br />
<span style="color: lime;">query = SELECT mail FROM user WHERE mailacceptinggeneralid='%s' AND status='active' limit 1</span> <br />
<br />
這裡跟LDAP比較不一樣的作法是,我們可以限制指回傳一筆資料,拿回傳的第一筆去改寫郵件地址改。<br />
<br />
<b><span style="color: blue;"><br /></span></b>
<b><span style="color: blue;">Postfix 三十天就上手-Day 17 限制 Client 的連線頻率</span></b><br />
<span class="Apple-tab-span" style="white-space: pre;"> </span><br />
調教您的Postfix 效能。<br />
<br />
postfix 預設並不會對 Client 端的連線頻率設限,但是現在的網路實在是跟以前不一樣了,一個什麼防護都沒有的 postfix 放到網路上,我想可以活的天數不會太久。<br />
<br />
所以今天就來跟大家講如何限制 Client 端的連線頻率,避免遇到惡意人士吃掉你的資源。<br />
<br />
第一步、您需要告訴 postfix 要計算多久期間的的連線數,假設我們要現在每分鐘不能超過的連線數,所以您需要編輯 main.cf 並定義 client_connection_rate_time_unit 如下範例:<br />
<span style="color: lime;">client_connection_rate_time_unit = 60s </span><br />
<br />
第二步、設定在期間內允許單一 Client 的連線數,假設我們要設定允許的連線數為 30,所以您需要編輯 main.cf 並定義 smtpd_client_connection_rate_limit 如下範例:<br />
<span style="color: lime;">smtpd_client_connection_rate_limit=30</span> <br />
<br />
設定完成之後記得要執行 <span style="color: lime;">postfix reload</span> 。<br />
<br />
<br />
<b><span style="color: blue;">Postfix 三十天就上手-Day 18 控制每個 Client 的同時連線數</span></b><br />
<span class="Apple-tab-span" style="white-space: pre;"> </span><br />
調教您的Postfix 效能。<br />
<br />
在 <span style="color: blue;">Postfix 三十天就上手-Day 17 限制 Client 的連線頻率</span> 中已經知道如何限制連線頻率,當然在效能上還需要考慮到同一時間的連線數,所以今天就來跟大家說明如何控制每個 Client 的同時連線數。<br />
<br />
postfix 預設每個 Client 是預設程序數的一半,這樣的設定可能會讓兩個惡意 Client 就吃光您允許的 smtpd process 數。<br />
<br />
您可以透過 smtpd_client_connection_count_limit 來控制每個 Client 的同時連線數,假設我們要設定允許的連線數為20,所以您需要編輯 main.cf 並定義 smtpd_client_connection_count_limit 如下範例:<br />
<span style="color: lime;">smtpd_client_connection_count_limit=20</span> <br />
<br />
PS:請注意,建議此數值不應大於 smtpd 與 default_process_limit 大,否則一個 Client 就把 process 吃光囉!<br />
<br />
<b><span style="color: magenta;">Exception</span></b><br />
如果某些 Client 您希望他不要受到限制,您可以透過smtpd_client_connection_count_limit_exceptions 來設定,預設已經允許 mynetworks,您可以另外加上您需要設定的主機,如以下範例:<br />
<span style="color: lime;">smtpd_client_connection_count_limit_exceptions=$mynetworks, .ithome.com.tw,192.168.45.0/24 </span><br />
<br />
設定完成之後記得要執行 <span style="color: lime;">postfix reload</span> 。<br />
<br />
<br />
<span style="color: blue;"><b>Postfix 三十天就上手-Day 19 淺談 Lookup Table ( 對照表 )</b></span><br />
<span class="Apple-tab-span" style="white-space: pre;"> </span><br />
說明Postfix的對照表。<br />
<br />
postfix 使用 lookup tables 來查看需要的資訊,如前面幾篇所介紹的 <span style="color: blue;">Postfix 三十天就上手-Day 10 建立別名( Alias )</span>、<span style="color: blue;">Postfix 三十天就上手-Day 14 改寫郵件地址</span>,都是 postfix 使用 lookup table 的範例,<br />
另外也有人叫它作 maps (從參數設定可以看出來),反正我們中文就翻成<b>對照表</b>吧!<br />
<br />
這些對照表一個共通的特性,就是-- 左手值(Key) 對應 右手值(Value),如 <span style="color: blue;">Postfix 三十天就上手-Day 10 建立別名 ( Alias ) 範例中的 lookup table</span> 如下:<br />
<span style="color: lime;">steve.jobs: m91001</span> <br />
<br />
左手邊的部分為 Key ( steve.jobs ),右手邊的部分為 Value( m91001 ),postfix 依照對照表的 key找到它所對應的 value。<br />
<br />
postfix 支援多種不同類型的對照表,您可以執行下列指令來查看您的 postfix 支援哪些類型的對照表:<br />
<span style="color: lime;">postconf -m </span><br />
<br />
另外當您編輯 main.cf 來設定 postfix 使用哪一個 lookup table 時,都會以 type:table 來開頭,其中type 就是指對照表類型,如下列設定中,type 就是 hash<br />
<span style="color: lime;">alias_maps = hash:/etc/postfix/aliases </span><br />
<br />
以下是幾個比較常支援的類型:<br />
<span style="color: #f4cccc;">btree </span><br />
<span style="color: #f4cccc;">cidr </span><br />
<span style="color: #f4cccc;">environ </span><br />
<span style="color: #f4cccc;">hash </span><br />
<span style="color: #f4cccc;">ldap </span><br />
<span style="color: #f4cccc;">nis </span><br />
<span style="color: #f4cccc;">pcre </span><br />
<span style="color: #f4cccc;">proxy </span><br />
<span style="color: #f4cccc;">regexp </span><br />
<span style="color: #f4cccc;">static </span><br />
<span style="color: #f4cccc;">unix </span><br />
<br />
<br />
<b><span style="color: blue;">Postfix 三十天就上手-Day 20 使用 LDAP 當 Lookup Table</span></b><br />
<br />
說明 Postfix 使用 LDAP 作為對照表。<br />
<br />
postfix 使用 lookup tables 來查看需要的資訊,先前就有說明如果使用檔案來維護,當你帳號多機器多的時候,可能就會讓你太費力,所以使用 LDAP 來當 Lookup Table 會是一個不錯的選擇,今天就來對他好好說明一下。<br />
<br />
如同上一篇所提到對照表共通的特性,左手值(Key) 對應 右手值(Value),在 LDAP 中您需要定義 postfix 來查詢時的 Key的屬性,邏輯如下:<br />
<br />
對照檔方式: Key Value <br />
LDAP 查詢方式: <span style="color: #f4cccc;">Query_filter Result_attribute </span><br />
<br />
如<span style="color: blue;"> Postfix 三十天就上手-Day 15 利用 LDAP 改寫郵件地址</span> 範例中說明,使 query_filter 來定義查詢的 Key 屬性,並設定 result_attribute 回查詢後對映傳回的 Value。<br />
範例節錄如下:<br />
<span style="color: lime;">server_host = ldap.ithome.com.tw </span><br />
<span style="color: lime;">search_base = dc=ithome, dc=com, dc=tw </span><br />
<span style="color: lime;">query_filter = (&(mailacceptinggeneralid=%s) </span><br />
<span style="color: lime;">result_attribute= mail</span> <br />
<br />
上列範例中您可以看到在對 LDAP 進行查詢時,常會使用倒置換的運算元,說明如下:<br />
%s<br />
完整的mail address (ex:m91001@ithome.com.tw)<br />
%u<br />
取得@先前的 uid (ex:m91001)<br />
%d<br />
取得@之後的 domain (ex:ithome.com.tw)<br />
<br />
<br />
<b><span style="color: blue;">Postfix 三十天就上手-Day 21 請求主機名稱</span></b><br />
<span class="Apple-tab-span" style="white-space: pre;"> </span><br />
對抗垃圾郵件招數一,請求主機名稱。<br />
<br />
在現在的網際網路上,可以說好人不多見,隨時都有惡意人士上門拜訪,將您 postfix 設定嚴格一點,是管理人員的必要實務之一。<br />
<br />
要避免惡意人士,第一步當然就是請他先自我介紹一下,所以我們可以設定當有郵件傳送到或是經過時,要有正確的自我介紹。<br />
<br />
我們可以在 SMTP 的對話中,在 HELO/EHLO 中限制主機名稱,這樣可以要求對方送出合乎規定的主機名稱。<br />
<br />
您可以透過 smtpd_helo_required 來進行設定,請編輯 main.c f並定義 smtpd_helo_required 如下範例:<br />
<span style="color: lime;">smtpd_helo_required=yes</span> <br />
<br />
此預設值為 no,設定後記得要執行 <span style="color: lime;">postfix reload</span>。<br />
<br />
以下就是測試沒有 HELO 的反應結果:<br />
<span style="color: red;">502 Error: send HELO/EHLO first</span><b> </b><br />
<br />
<br />
<b><span style="color: blue;">Postfix 三十天就上手-Day 22 要求 FQDN</span></b><br />
<span class="Apple-tab-span" style="white-space: pre;"> </span><br />
對抗垃圾郵件招數一,請求FQDN。<br />
<br />
FQDN 對一台正規郵件伺服器來說是非常重要的,許多郵件伺服器都會檢查對方是否有提供FQDN,如果就會拒絕接收。<br />
所謂的 FQDN(Fully Qualified Domain Name) 是由「主機名稱」與「網域名稱所組成」。<br />
<br />
以 <span style="color: red;">mail</span>.<span style="color: blue;">ithome.com.tw</span> 為例:<br />
主機名稱就是 <span style="color: red;">mail</span><br />
網域名稱就是<span style="color: blue;"> ithome.com.tw</span><br />
<br />
您可以透過下列指令查看是否您的主機有設定正確的 FQDN:<br />
<span style="color: lime;">hostname -f </span><br />
<br />
傳回結果範例如下:<br />
<span style="color: lime;">mail.ithome.com.tw </span><br />
<br />
很多垃圾郵件發送機,可能都不會提供 FQDN,透過要求提供 FQDN 可以過濾掉一些水準較低的<span style="color: yellow;">垃圾郵件發送機</span>。<br />
<br />
您可以透過 smtpd_recipient_restrictions 來進行設定,請編輯 main.c f並定義smtpd_recipient_restrictions 如下範例:<br />
<span style="color: lime;">smtpd_recipient_restrictions= </span><br />
<span style="color: lime;">... </span><br />
<span style="color: lime;">reject_non_fqdn_hostname </span><br />
<span style="color: lime;">... </span><br />
<br />
由於通常 smtpd_recipient_restrictions 會設定多條的條件,這裡就用<span style="color: lime;"> ...替代</span>,我們主要是要設定reject_non_fqdn_hostname,設定後 postfix 會拒絕任何來自未傳送 FQDN 的主機的郵件。<br />
<br />
以下就是測試沒有 FQDN 的反應結果:<br />
<span style="color: red;">504 <Client>: Helo command rejected: need fully-qualified hostname</span><br />
<br />
<br />
<span style="color: blue;"><b>Postfix 三十天就上手-Day 23 要求寄件人包含 FQDN</b></span><br />
<span class="Apple-tab-span" style="white-space: pre;"> </span><br />
對抗垃圾郵件招數一,要求寄件人包含 FQDN。<br />
<br />
上一篇<span style="color: blue;"> Postfix 三十天就上手-Day 22 要求FQDN</span> 說明 FQDN 以及要求主機需要提供 FQDN。<br />
對付垃圾郵件的另外一招就是要求寄件人也需要包含 FQDN,一個完整的信件,寄件人應該要整的像是下列的樣子:<br />
<span style="color: #f4cccc;">sender@ithome.com.tw </span><br />
<br />
在網域的部分 (@之後) 需要包含 FQDN,如果像是下列範例,都是不合格:<br />
<span style="color: #f4cccc;">sender </span><br />
<span style="color: #f4cccc;">sender@ithome </span><br />
<br />
您可以透過 smtpd_recipient_restrictions 來進行設定,請編輯 main.cf 並定義smtpd_recipient_restrictions 如下範例:<br />
<span style="color: lime;">smtpd_recipient_restrictions= </span><br />
<span style="color: lime;">... </span><br />
<span style="color: lime;">reject_non_fqdn_sender </span><br />
<span style="color: lime;">... </span><br />
<br />
由於通常 smtpd_recipient_restrictions 會設定多條的條件,這裡就用<span style="color: lime;"> ...替代</span>,我們主要是要設定reject_non_fqdn_sender,設定後 postfix 會拒絕任何來自未傳送 FQDN 的主機的郵件。<br />
<br />
以下就是測試沒有 FQDN 的反應結果 (假設 from 是 sender ):<br />
<span style="color: red;">504 <sender>: Sender address rejected: need fully-qualified address</span><br />
<br />
<br />
<b><span style="color: blue;">Postfix 三十天就上手-Day 24 拒絕不合法的主機名稱</span></b><br />
<br />
對抗垃圾郵件招數一,拒絕不合法的主機名稱。<br />
<br />
主機名稱除了必須是 FQDN,您還可以要求需要遵守網域名稱 ( DNS ) 系統的需求。合法的一個網域名稱需要遵守下列幾點:<br />
<br />
<b>需要有一個最上層網域</b>,<span style="color: yellow;">top-level domain (TLD)</span>,如 [<span style="color: yellow;">com</span>]<br />
需要<b>一個網域名稱</b>,如 [<span style="color: yellow;">ithome</span>]<br />
一<b>個區隔網域名稱</b>與 <b>TLD 的點</b> (<span style="color: yellow;">.</span>)<br />
<br />
您可以透過 smtpd_recipient_restrictions 來進行設定,請編輯 main.cf 並定義smtpd_recipient_restrictions 如下範例:<br />
<span style="color: lime;">smtpd_recipient_restrictions= </span><br />
<span style="color: lime;">... </span><br />
<span style="color: lime;">reject_invalid_hostname </span><br />
<span style="color: lime;">...</span> <br />
<br />
由於通常 smtpd_recipient_restrictions 會設定多條的條件,這裡就用 <span style="color: lime;">...替代</span>,我們主要是要設定reject_invalid_hostname,設定後 postfix 拒絕不合法的主機名稱。<br />
<br />
另外如果您的 postfix 版本 >=2.3 您可以透過 smtpd_helo_restrictions 來進行設定,請編輯 main.cf並定義 smtpd_helo_restrictions 如下範例:<br />
<span style="color: lime;">smtpd_helo_restrictions = </span><br />
<span style="color: lime;"> reject_invalid_helo_hostname </span><br />
<br />
以下就是測試沒有合法主機名稱的反應結果(假設主機名稱為[.]):<br />
<span style="color: red;">501 <.>: Helo command rejected: Invalid name </span><br />
<br />
<br />
<b><span style="color: blue;">Postfix 三十天就上手-Day 25 拒絕網域不存在的郵件</span></b><br />
<span class="Apple-tab-span" style="white-space: pre;"> </span><br />
對抗垃圾郵件招數一,拒絕網域不存在的郵件。<br />
<br />
垃圾郵件的寄送者會利用 <b><span style="color: red;">不存在的網域( unknow domain )</span></b> 來隱藏他們的來源。建議不要讓您的郵件伺服器<b><span style="color: red;">接收網域不存在</span></b>的郵件,如果讓您的郵件伺服器接收,如果在傳送過程中發生錯誤(如找不到收件人),會讓您的伺服器退件找不到正確位址,最後可能就會擠爆郵件管理者的信箱囉!<br />
<br />
您可以透過 smtpd_recipient_restrictions 來進行設定,請編輯 main.cf 並定義smtpd_recipient_restrictions 如下範例:<br />
<span style="color: lime;">smtpd_recipient_restrictions= </span><br />
<span style="color: lime;">... </span><br />
<span style="color: lime;">reject_unknown_sender_domain </span><br />
<span style="color: lime;">... </span><br />
<br />
由於通常 smtpd_recipient_restrictions 會設定多條的條件,這裡就用 <span style="color: lime;">...替代</span>,我們主要是要設定reject_unknown_sender_domain,設定後 postfix 會拒絕網域不存在的郵件。<br />
<br />
以下就是測試結果,postfix會回傳 Error Code 450 :<br />
<span style="color: lime;">450 <sender@unknow.domain>: Sender address rejected: Domain not found </span><br />
<br />
<br />
<b><span style="color: blue;">Postfix 三十天就上手-Day 26 設定收件人限制</span></b><br />
<span class="Apple-tab-span" style="white-space: pre;"> </span><br />
對抗垃圾郵件招數一,設定收件人限制。<br />
<br />
抵抗垃圾郵件的瘋狂亂送,我們可以拒絕收件人中有不存在網域。這樣您可以避免您的伺服器收了一堆信件,處理半天後又忙著回覆說找不到,不小心還會被 user 誤會是伺服器有問題。<br />
所以最好的方法就是一開始就<span style="color: red;">拒絕帶有不存在網域</span>的收件人郵件。<br />
<br />
您可以透過 smtpd_recipient_restrictions 來進行設定,請編輯 main.cf 並定義smtpd_recipient_restrictions 如下範例:<br />
<span style="color: lime;">smtpd_recipient_restrictions= </span><br />
<span style="color: lime;">... </span><br />
<span style="color: lime;">reject_unknown_recipient_domain </span><br />
<span style="color: lime;">... </span><br />
<br />
由於通常 smtpd_recipient_restrictions 會設定多條的條件,這裡就用 <span style="color: lime;">...替代</span>,我們主要是要設定reject_unknown_recipient_domain,設定後 postfix 會拒絕收件人網域不存在的郵件。<br />
<br />
以下就是測試結果,postfix會回傳 Error Code 450 :<br />
<span style="color: red;">450 <recipient@unknow.domain>: Recipient address rejected: Domain not found </span><br />
<br />
<br />
<span style="color: blue;"><b>Postfix 三十天就上手-Day 27 拒絕無 FQDN 的收件人</b></span><br />
<span class="Apple-tab-span" style="white-space: pre;"> </span><br />
對抗垃圾郵件招數一,拒絕無FQDN的收件人。<br />
<br />
如果送件的人沒有提供完整的收件人位址,您是可以拒絕接收的。當然提供正確的收件人位址是送件人的責任。您可以設定 postfix 拒絕那些非 FQDN 的收件人郵件。<br />
<br />
您可以透過 smtpd_recipient_restrictions 來進行設定,請編輯 main.cf 並定義smtpd_recipient_restrictions 如下範例:<br />
<span style="color: lime;">smtpd_recipient_restrictions= </span><br />
<span style="color: lime;">... </span><br />
<span style="color: lime;">reject_non_fqdn_recipient </span><br />
<span style="color: lime;">... </span><br />
<br />
由於通常 smtpd_recipient_restrictions 會設定多條的條件,這裡就用 <span style="color: lime;">...替代</span>,我們主要是要設定reject_non_fqdn_recipient,設定後 postfix 會拒絕非 FQDN 收件人的郵件。<br />
<br />
<br />
以下就是測試提供一個非 FQDN 收件人的測試結果,我們測試送信給 recipient,postfix 會回傳Error Code 504 :<br />
<span style="color: red;">450 <recipient>: Recipient address rejected: need fully-qualified address</span><br />
<br />
<br />
<b><span style="color: blue;">Postfix 三十天就上手-Day 28 檢核寄件人</span></b><br />
<span class="Apple-tab-span" style="white-space: pre;"> </span><br />
對抗垃圾郵件大絕招,檢核寄件人。<br />
<br />
對抗垃圾郵件的大絕招,檢核寄件人,這是 postfix 對垃圾郵件非常重要的工具,當然相對的,跟你打 KOF(King of Fighters) 一樣,要使用大絕招通常都需要先集氣,在 postfix 中雖然不用集氣,但是使用這招是需要付出<span style="color: red;"><b>相對的代價</b></span>,需要時間與相對的系統資源。使用此招數postfix 會檢查寄件人是否真的存在,如果不存在則會拒絕接收該郵件。<br />
<br />
當 postfix 對郵件進行第一次寄件人檢核的時候,該郵件會有<span style="color: yellow;">9秒的短暫延遲</span>,如果檢核的程序超過 9秒,postfix 會回應 code 450,並拒絕來自客戶端的郵件,正常的郵件客戶端在延遲之後,都會重新連線,但是垃圾郵件伺服器就不會想要重複讓費力氣囉。<br />
<br />
您可以透過 smtpd_recipient_restrictions 來進行設定,請編輯 main.cf 並定義smtpd_recipient_restrictions 如下範例:<br />
<span style="color: lime;">smtpd_recipient_restrictions= </span><br />
<span style="color: lime;">... </span><br />
<span style="color: lime;">reject_unverified_sender </span><br />
<span style="color: lime;">permit </span><br />
<br />
特別要說明的是,由於這招是大絕招,所以建議放到最後,如範例中您會看到reject_unverified_sender 之後就是 permit 了,這樣如果前面的條件可以拒絕掉的郵件,就不用再浪費大力氣了。<br />
<br />
<br />
<b><span style="color: blue;">Postfix 三十天就上手-Day 29 選擇性的檢核寄件人</span></b><br />
<span class="Apple-tab-span" style="white-space: pre;"> </span><br />
對抗垃圾郵件中絕招,選擇性檢核寄件人。<br />
<br />
昨天<span style="color: blue;"> Postfix 三十天就上手-Day 28 檢核寄件人</span> 已經說明了對抗垃圾郵件的大絕招,但是我們也有說明使用這招是需要付出相對的代價,如果您的郵件伺服器平常負載已經很高,很可能使用這招就造成系統的瓶頸。<br />
<br />
想要使用大絕招又不想浪費不必要的力氣,當然就跟打 KOF (King of Fighters) 一樣,要發大絕招的時候,當然是要在能一擊必中的情況下,有打過的都知道,最好把大絕讓在連續技的最後一著,保證對手大失血。<br />
<br />
雖然 postfix 沒辦法使用連續技讓垃圾郵一擊必中,但是可您讓您選擇要使用的對象,我們可以<b><span style="color: red;">針對特別幾個愛發垃圾郵件的網域</span></b>作選擇性的檢核寄件人。<br />
<br />
Step.1 準備對照表,如 P<span style="color: blue;">ostfix 三十天就上手-Day 19 淺談 Lookup Table (對照表) </span>中所說明的,您需要準備一個對照表,用對照表來定義您對哪些網域進行檢核寄件人。<br />
建立 /etc/postfix/spam_domain ,檔案範例如下:<br />
<span style="color: lime;">yahoo.com.tw reject_unverified_sender </span><br />
<span style="color: lime;">hotmail.com reject_unverified_sender</span> <br />
<br />
以上範例指定當信件的寄件人符合設定的 domain,就會執行 reject_unverified_sender 的動作。<br />
<br />
Step.2 完成對照表之後,接著就是要告訴 postfix 要來參考對照表,您還需要先執行 postmap hash:/etc/postfix/spam_domain 轉換為 db 檔。然後您可以透過 smtpd_recipient_restrictions 來進行設定讓 postfix可以參考對照表,請編輯 main.cf並定義 smtpd_recipient_restrictions 如下範例:<br />
<span style="color: lime;">smtpd_recipient_restrictions= </span><br />
<span style="color: lime;">... </span><br />
<span style="color: lime;">check_sender_access hash:/etc/postfix/spam_domain </span><br />
<span style="color: lime;">permit</span> <br />
<br />
完成以上步驟後,當信件的寄件人符合設定的 domain,就會執行 reject_unverified_sender,reject_unverified_sender 的動作您可以參考上一篇 <span style="color: blue;">Postfix 三十天就上手-Day 28 檢核寄件人</span><br />
<br />
<br />
<b><span style="color: blue;">Postfix 三十天就上手-Day 30 定義您的 VIP</span></b><br />
<span class="Apple-tab-span" style="white-space: pre;"> </span><br />
給 VIP 特別的待遇。<br />
<br />
在介紹了這麼多對付垃圾郵件的招數之後,相信大家最後一定心中會有一個疑慮,那就是萬一這些厲害招數<b><span style="color: red;">攔了不該攔</span></b>的人,那管理者可就頭大了。<br />
<br />
相信企業的郵件伺服器除了害怕遭到垃圾郵件攻擊,更是害怕攔掉了客戶來的郵件,現實狀況中,可能不是只要求不能誤攔,連慢一點可能就要被抓起來打了。<br />
<br />
面對這樣的情況,當然要給客戶 VIP 的待遇,所以今天就來說明如何在這些攔截條件執行之前,開一條 VIP 的康莊大道給客戶走。<br />
<br />
Step.1 準備對照表,如 <span style="color: blue;">Postfix 三十天就上手-Day 19 淺談 Lookup Table( 對照表)</span> 中所說明的,您需要準備一個對照表,用對照表來定義您的 VIP 是哪些網域寄件人。<br />
建立 /etc/postfix/sender_vip ,檔案範例如下:<br />
<span style="color: #f4cccc;">ithome.com.tw OK </span><br />
<span style="color: #f4cccc;">apple.com OK</span> <br />
<br />
有看財經新聞的都知道,只要企業打進頻果供應鏈,股價就要漲了,雖然現在可成引爆毒頻果事件,但是我相信 Apple 還是最大的客戶,所以一定要拿 apple.com 來當範例囉。當然跟apple.com 一樣紅的 ithome.com.tw 也不能錯攔。<br />
<br />
Step.2 完成對照表之後,接著就是要告訴 postfix 要來參考對照表,您還需要先執行 <span style="color: lime;">postmap hash:/etc/postfix/sender_vip</span> 轉換為 db 檔。然後您可以透過 smtpd_recipient_restrictions 來進行設定讓 postfix 可以參考對照表,請編輯 main.cf 並定義 smtpd_recipient_restrictions 如下範例:<br />
<span style="color: lime;">smtpd_recipient_restrictions= </span><br />
<span style="color: lime;">check_sender_access hash:/etc/postfix/sender_vip </span><br />
<span style="color: lime;">... </span><br />
<br />
這邊您特別要注意的是您放的順序,請注意本範例將它放到第一條,也就是說當<span style="color: red;">第一條符合</span>的時候,會得到 <span style="color: yellow;">OK</span>,其它條件就<span style="color: red;"><b>不會在繼續檢查下去</b></span>,當然他就不怕被其他條件攔掉,也不用浪費時間作其他的檢查。<br />
<br />
PS:如果您害被有垃圾郵件假造是您的 VIP 剛好 bypass 掉你的檢查,<span style="color: red;">可以考慮在 VIP 之前作比較基本的檢查,此時您只要調整順序即可</span>。<br />
<br />
<br />
<br />
參考資料:<a href="http://www.postfix.org/">http://www.postfix.org/</a> <a href="http://ithelp.ithome.com.tw/"> iT邦幫忙</a>Anonymoushttp://www.blogger.com/profile/02768237855233416154noreply@blogger.com1tag:blogger.com,1999:blog-3506419250791502155.post-11049818117300490692013-10-04T18:29:00.001+08:002013-10-04T18:29:04.463+08:00網站管理基本功:避免網站遭入侵的5大技巧網站管理基本功:避免網站遭入侵的5大技巧<br />
<br />
<br />
今天我們以工程師的角度聊一下,管理網站平常應該注意什麼 ?<br />
<br />
一個網站,從我們註冊網址開始,請人設計網頁,租一個網站空間,把網頁資料放上去,網站可以正常瀏覽了,那再來呢 ?<br />
<br />
很多人都忽略了,網站建置好後,還是需要去關心它、維護它的。其實網站管理也應該像我們每天會收取 Email、上 FB 一樣,把它排在每天的例行事物上。<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEikfT4ik4DJWwjmFuvF0dBz3on5uYRjqcyVdmTJNQhqZlhUxrGYT7LP12jAkWJVXsGS6pk3-QMA4V2LVKbfWz8LvCW_VTv3UR0qh6IW6Z0ulBlq0NxUUuh_l3L8P_ytF1Dd5LWog3RU6B7M/s1600/shutterstock_6114583-1600x1200-680x453.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="426" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEikfT4ik4DJWwjmFuvF0dBz3on5uYRjqcyVdmTJNQhqZlhUxrGYT7LP12jAkWJVXsGS6pk3-QMA4V2LVKbfWz8LvCW_VTv3UR0qh6IW6Z0ulBlq0NxUUuh_l3L8P_ytF1Dd5LWog3RU6B7M/s640/shutterstock_6114583-1600x1200-680x453.jpg" width="640" /></a></div>
<br />
我們可以作什麼 :<br />
<br />
<b><span style="color: red;">定期查看網站存取記錄</span></b><br />
<br />
這是什麼 ? 網站存取記錄就是存著網站被瀏覽、被下載、被上傳、被存取哪些連結的記錄。<br />
<br />
舉例來說,假如你的網站是 PHP + MySQL,主機通常就是 Linux + Apache 的環境,會有 access_log (範例一)、error_log (範例二) 這兩個檔案<br />
<br />
範例一、記錄著被瀏覽了什麼連結,那個來源 IP 瀏覽了網站<br />
<br />
<span style="color: blue;">1.1.1.1 – - [08/Sep/2013:10:10:38 +0800] “GET / HTTP/1.1″ 200 341 “-" “Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"</span><br />
<br />
網站如果有帳密登入的功能,想觀察是否有有心人士再 Try 帳密,我們可以從 access_log 這個記錄檔查來源 IP 是不是自己的,也可以因此做一些防範 (密碼設強一點、定期更換、鎖來源 IP(自己可以瀏覽就行) 等等)。<br />
<br />
範例二、記錄著被瀏覽的連結可能會有的錯誤訊息<br />
<br />
<span style="color: blue;">[Sun Sep 08 06:16:58 2013] [error] [client 2.2.2.2] File does not exist: /var/www/html/robots.txt</span><br />
<br />
error_log 是記錄著哪個連結找不到,或者網站的錯誤訊息,可能是 NOTICE 或 ERROR,有 ERROR 就需要注意一下並且有要修正的可能,否則將可能影響網站的正常運作。<br />
<br />
<span style="color: red;"><b>定期檢查網頁檔案及內容</b></span><br />
<br />
一般網站都會有圖片,那圖片怎麼來的,一是從網頁程式中上傳,另一種是從 FTP 上傳,無論是用何種方式上傳的,存放網站圖片的目錄 (比方說 : /upload/image) 當它裡面出現一個檔案 xx.php,你覺得有沒有問題呢?肯定是要檢查一下!存放網站圖片的目錄裡會有 xx.php ?不是要存 xx.jpg 或 xx.png 等等的檔案類型嗎?<br />
<br />
這裡要探討的是,如果是從網頁程式上傳上來的,主要原因就是程式沒有過濾上傳的檔案類型 ,比方說 xx.php 就不應該被上傳,如果 xx.php 是惡意程式,一旦被執行了可能網站裡所有的資料(包括會員、交易資料) 都可能被看光光,甚至破壞網站、刪除資料等,所以這是很嚴重的漏洞,必須小心、並定期檢查。<br />
<br />
<b><span style="color: red;">定期更新程式</span></b><br />
<br />
不管網站是不是請人設計的,你我可能會用一些常見的套裝軟體,像 WordPress、phpBB、Joomla,比如說 phpBB 常會因為版本過舊沒有更新而被利用漏洞塞了很多垃圾留言,資料庫的資料量因此增大,影響程式和資料庫的存取,增加主機的負載,這時最明顯的情況就是網站會變得很慢,所以網站的程式(尤其是用免費的套裝軟體架站的)應該要定期檢查更新才行。<br />
<br />
<span style="color: red;"><b>定期修改密碼</b></span><br />
<br />
這也是我們一直在強調的,攻擊其實是不分時間, 一年365天、8760個小時網站都有可能隨時遭受攻擊,像是最常見的密碼暴力破解。所以就算覺得累、嫌麻煩也一定要定期改密碼、更新程式,這才是保命之道。<br />
<br />
<b><span style="color: red;">基本安全掃描</span></b><br />
<br />
網路上有一些免費、基本的網站掃描工具,可以拿它來對網站作掃毒的動作,確認網站有沒有惡意程式,或釣魚程式等等。<br />
<br />
<span style="color: red;"><b>結論</b></span><br />
<br />
以上是管理網站的基本功,好好的關心我們所架好的網站,不放過任何的蛛絲馬跡或徵兆,就有可能可以避免掉網站被入侵、被破壞的機會。<br />
<br />
轉載自《WIS匯智》Anonymoushttp://www.blogger.com/profile/02768237855233416154noreply@blogger.com1tag:blogger.com,1999:blog-3506419250791502155.post-24710952196491080232013-10-04T18:20:00.002+08:002013-10-04T18:20:50.076+08:00個資法的第1年個資法的第1年<br />
<br />
<br />
個資法的第1年<br />
<br />
在人民對個資保護的意識逐步提升後,個資訴訟案件也會跟著越來越多。個資法是少數與全國的人民、產業皆有關係的法律,在社會變動越來越快的局面下,更應該及早檢討與調整。<br />
<br />
個人資料保護法上路滿1年了,對我們的社會到底帶來什麼改變呢?本期封面故事就檢視個資法上路1年的成績。<br />
<br />
就個人生活的感受來看,近來我接到詐騙電話的數量有變少的傾向,顯然個資法祭出刑責與2億元的天價罰款後,對遏止詐騙已發揮了一些效果;同時,生活周遭也不斷出現各種個資使用宣告,許多希望我們提供個人資料的表格文件,也都加上個資蒐集、處理與利用的聲明,個資意識也是明顯提高了。<br />
<br />
當然,新法上路總會出現適應不良的亂象,在個資法上路這1年中,個資法亂象也是層出不窮。擔心觸法者,如法務部下屬的地檢署,大概是因為過度害怕公務人員觸法要面臨加倍的處罰,竟把判決書的當事人姓名以姓氏加上兩個圈圈來代表,雖然此舉保證完全不會觸法,但卻明顯忽略了人民知的權利,判決書只有法官、檢查官與當事人看得懂,哪還需要公告判決呢?<br />
<br />
擁有大量個人資料的學校與教育機構也很擔心觸法,學校把網站榮譽榜上的學生姓名予以部分遮罩,大學指考榜單也只列準考證號碼,這般遮掩反像是見不得人似的,完全沒有半點榮譽的感覺。<br />
<br />
有人怕觸法,也有人把個資法無限上綱,阻繞警察與檢察官辦案,甚至是利用人們擔心觸法的弱點,濫用個資法來詐騙的也有。不過,在各單位陸續推廣個資法觀念之後,這些亂象終究會逐漸消失。<br />
<br />
在人民對個資保護的意識逐步提升後,個資訴訟案件也會跟著越來越多。個資法上路第1年,相關訴訟不多,而且多數案件皆為個人間的糾紛。例如其中的兩起違反個資法而被起訴的刑事判決,情節頗為類似,皆是社區事務問題,因為停車、漏水起了糾紛,而在網路上張貼當事人的個資。這兩件案子皆涉及誹謗,分別被判了拘役40天與2個月,法律專家指出,法官採取與誹謗罪幾乎同等嚴重的裁決,提醒民眾要特別小心個資觸法行為,不只是會有刑事罰責,處罰不算輕,而且日後就是有案在身了。<br />
<br />
另一個大家關心的,是企業違反個資法的判例。不過,在個資法上路這一年雖然發生了幾起大型的企業個資外洩事件,但至今尚未有訴訟結果。究其原因,個資法在保障人民權益的一大突破上──團訟機制,雖立意良好,但在目前的實務上卻難以發揮功能。一來是臺灣人民普遍不熟悉團訟機制,對於主張自己的權利不太積極;再者是,對於能提出團訟的財團法人或公益社團法人的規定嚴格,在個資法才剛上路的第1年,能符合資格的團體很少,而且,專家指出更關鍵的問題在於,個資法規定賠償金額扣除必要的訴訟費用,其他必須交付授與訟訴的當事人,也就是說,代打團訟不能要求報酬。<br />
<br />
至於各個產業面對個資法的態度如何呢?據專家們的觀察,大型企業、或是主管機關的監管較為嚴格的產業,都已積極因應個資法,但是在整備度上仍未及完全。而<span style="color: red;">大多數企業目前又回復至觀望的狀態,因此第一起大型個資外洩事件,或是第一宗企業違法案件的判例,將會決定企業的腳步。</span><br />
<br />
其實<span style="color: red;">去年Nokia會員網路外洩大量個資的事件,早已是臺灣第一起大型個資外洩事件了,但是至今卻未有任何團訟,也未見主管機關行政檢查的進展。這種情形反映出臺灣個資法上路的一個重大問題:缺乏專責的個資法機關。</span>在目前由法務部負責法規制定、各事業目的主管機關負責推動與監督的架構下,所呈現的就是人力、資源不足,各單位步調不統一,人民無所適從的局面。<br />
<br />
法規的制定不可能一開始就是完美的,尤其是個資法這種牽涉層面廣闊,且與社會生活習習相關的法律,在社會變動越來越快的局面下,更應該及早檢討與調整,畢竟個資法是少數與全國的人民、產業皆有關係的法律,不得不慎。<br />
<br />
轉載自《iThome》Anonymoushttp://www.blogger.com/profile/02768237855233416154noreply@blogger.com1tag:blogger.com,1999:blog-3506419250791502155.post-69496224638960952872013-10-04T18:19:00.000+08:002013-10-04T18:24:06.313+08:00Android 上的 Firefox APP 爆發安全漏洞請盡速更新(含影片示範)Android 上的 Firefox APP 爆發安全漏洞請盡速更新(含影片示範)<br />
<br />
<br />
行動裝置安全分析研究員 Sebastián Guerrero 於 2013/9/30 在其 Twitter (<a href="https://twitter.com/0xroot">https://twitter.com/0xroot</a>) 上指出,新發現在 Android 的 Firefox 漏洞,這個漏洞將允許攻擊者可以自由瀏覽 SD 卡的內容和瀏覽器內隱私資料。<br />
<br />
當攻擊生效時,被駭的使用者可能被偷裝一些惡意APP或者開啟具有惡意 Javascript 的HTML檔案。<br />
<br />
該漏洞已經提交給 Mozilla 並且在最新的一次更新(v24)已經修復漏洞。<br />
<br />
所以還未將 Android 上的 Firefox APP 更新至 v24 版的使用者動作要加快了。<br />
<br />
<br />
<iframe allowfullscreen="" frameborder="0" height="390" src="//www.youtube.com/embed/q74g58kX5lQ" width="640"></iframe>
<br />
轉載自《網路攻防戰》Anonymoushttp://www.blogger.com/profile/02768237855233416154noreply@blogger.com1tag:blogger.com,1999:blog-3506419250791502155.post-52690601715043447532013-10-03T12:22:00.000+08:002013-10-03T12:22:08.319+08:00一行指令,Windows 7 筆電 變 無線 AP 一行指令,Windows 7 筆電 變 無線 AP<br />
<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhfAvgC7xMkit3Qwe_u-_tI72fVZKavh6cUbiBiDV2L2Qeg-0IE8Ik-lLGtaFIF8WjwZYZ-fzaAHdeMHeYP_6I109GpGPYrf1X5Ieq-pjJDAjBYl4bRrFVLXt27cf1Dga1RmCSG8ZL0RVyk/s1600/win7net.png" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhfAvgC7xMkit3Qwe_u-_tI72fVZKavh6cUbiBiDV2L2Qeg-0IE8Ik-lLGtaFIF8WjwZYZ-fzaAHdeMHeYP_6I109GpGPYrf1X5Ieq-pjJDAjBYl4bRrFVLXt27cf1Dga1RmCSG8ZL0RVyk/s1600/win7net.png" /></a></div>
你需要分享無線網路、身邊剛好又沒有基地台怎麼辦?這時候本來就帶有Wi-Fi存取功能的筆電就派上用場了。用筆電充當基地台,其實並不新奇,早在XP時代就能透過Ad Hoc的方式來建立多台電腦之間的點對點網路,不但能夠分享網路訊號、也讓無線對傳資料更方便。只是,以前得經過較為繁瑣的設定步驟,現在在Windows 7只要靠一條命令就能達成。<br />
<br />
<br />
<br />
<br />
<br />
<span style="color: blue;"><b>請你照著這麼做</b></span><br />
<br />
<b>1. </b>打開命令輸入視窗,輸入「cmd」(不含括號)之後,同時按下鍵盤上的Ctrl+Shift+Enter,這是為了以管理員模式開啟終端機視窗,Windows環境下的正確名稱是命令提示字元。<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEitBXlfdQjVgU4yoDv9Pp9q3bEBD5Vlw03TUCo2mKQZynELVb9hxzyZPwPYIfSbshyaaIYd5duc_YghxQto8_nqU5DSr2rVAqRmHdt-A93-vNjar9WpOjUO70aYp1hteRx8uhF3W7Oxtz6Z/s1600/0a4e0a52e2991b9cf447e7178d26ffaca02061e4.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEitBXlfdQjVgU4yoDv9Pp9q3bEBD5Vlw03TUCo2mKQZynELVb9hxzyZPwPYIfSbshyaaIYd5duc_YghxQto8_nqU5DSr2rVAqRmHdt-A93-vNjar9WpOjUO70aYp1hteRx8uhF3W7Oxtz6Z/s1600/0a4e0a52e2991b9cf447e7178d26ffaca02061e4.png" /></a></div>
<br />
<b>2.</b> 這時候終端機視窗就會打開了,請輸入<br />
<br />
「<b><span style="color: red;">netsh wlan set hostednetwork mode=allow ssid=你要的名稱 key=密碼</span></b>」<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh6sLDC6Iv5d9lQJueXLTSg4w_OSshSbAXFyfDWAQlI6ZhMUgP4IT-Xh96YvdsYemiiRYGEwmkyNjyVCIWbccTT_JmT1yU4j9zRlaeUclt7JdWR5zQPSYyzRENweNFBuw321C6RIr_GqLLv/s1600/faf91bfb79524f2dfcd42b2b7e764c9d6f024d74.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh6sLDC6Iv5d9lQJueXLTSg4w_OSshSbAXFyfDWAQlI6ZhMUgP4IT-Xh96YvdsYemiiRYGEwmkyNjyVCIWbccTT_JmT1yU4j9zRlaeUclt7JdWR5zQPSYyzRENweNFBuw321C6RIr_GqLLv/s1600/faf91bfb79524f2dfcd42b2b7e764c9d6f024d74.png" /></a></div>
<br />
<b>3.</b> 如果出現了上圖的成功訊息,那麼再輸入<br />
<br />
「<b><span style="color: red;">netsh wlan start hostednetwork</span></b>」<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiyWf_NuChWVm2shTQI-5xG6MYllxVl0qpMt59HjuDrqfwN4XIuGr0UHE1KiWMJhaFR5oDQkBYHxf2O08DcBx7Y2qQgWcCLgz3syMNxUr5sIYihyOuqD7kUySR1h-3fOdOUhMtr1_mlfE-G/s1600/2a1cbd6e2e25742b8ca555414d4bb7f4ef88392d.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiyWf_NuChWVm2shTQI-5xG6MYllxVl0qpMt59HjuDrqfwN4XIuGr0UHE1KiWMJhaFR5oDQkBYHxf2O08DcBx7Y2qQgWcCLgz3syMNxUr5sIYihyOuqD7kUySR1h-3fOdOUhMtr1_mlfE-G/s1600/2a1cbd6e2e25742b8ca555414d4bb7f4ef88392d.png" /></a></div>
<br />
<b>4.</b> 如果上一步執行後出現的訊息是「已啟動主控網路」,那麼請回到桌面,按一下右下方的網路狀態圖示,並點擊「開啟網路和共用中心」<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgWWqNCzbiVgOAgbuiERPe26UiJF5PvaDaDWPy7z3sbOa6CRWLKa27NCsBHZZlbJ84-9h0bjpGwe9rdPtEvB_2tGiu3Yg2yxR0lG9G3gSuEZBl2wq3efe7LPCZvS_pnpd0vCZAq8CSYS63F/s1600/9a8525fc8e3fee001b06d0299c5352996131d93d.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgWWqNCzbiVgOAgbuiERPe26UiJF5PvaDaDWPy7z3sbOa6CRWLKa27NCsBHZZlbJ84-9h0bjpGwe9rdPtEvB_2tGiu3Yg2yxR0lG9G3gSuEZBl2wq3efe7LPCZvS_pnpd0vCZAq8CSYS63F/s1600/9a8525fc8e3fee001b06d0299c5352996131d93d.png" /></a></div>
<br />
<b>5.</b> 這時候,你應該會在「檢視作用中的網路」頁框裡,看到剛才建立的無線網路名稱。點擊一下右邊的「無線網路連線」。<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh-V_6TaDlAjjgUgoz0pUgUZUeTMOsVCU47iMLMBg2w6rvexKTqEaG1DYTTGBMPoBJrTLXy9EQWkhCUKuSgcbEu3_RGYqlknJhyphenhyphenQ-VgAFmQlaaXjBJlElhcDSHqMDwdsZBPZehxcVEDOPqP/s1600/1558a8782f7d5caedea55e84f88f92851a7ef9c3.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh-V_6TaDlAjjgUgoz0pUgUZUeTMOsVCU47iMLMBg2w6rvexKTqEaG1DYTTGBMPoBJrTLXy9EQWkhCUKuSgcbEu3_RGYqlknJhyphenhyphenQ-VgAFmQlaaXjBJlElhcDSHqMDwdsZBPZehxcVEDOPqP/s1600/1558a8782f7d5caedea55e84f88f92851a7ef9c3.png" /></a></div>
<br />
<b>6.</b> 按下「內容」。<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhlQOpNq4uYsPtOf69YY1R7apYSRucb3fpfbi9d9uIlIR-Tf63yyM-I2TxgSK_3-hVIhihbrzseAzjL0AMmNGVxXACrftrMwEUupzc5UnojAUVDg4GReXXXjfhIRdyajYXrvikoVcRKM-sn/s1600/eae45587e99f5903dd99d0fd8b2b2cfc338e7baa.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhlQOpNq4uYsPtOf69YY1R7apYSRucb3fpfbi9d9uIlIR-Tf63yyM-I2TxgSK_3-hVIhihbrzseAzjL0AMmNGVxXACrftrMwEUupzc5UnojAUVDg4GReXXXjfhIRdyajYXrvikoVcRKM-sn/s1600/eae45587e99f5903dd99d0fd8b2b2cfc338e7baa.png" /></a></div>
<br />
<b>7. </b>在「共用」頁框裡,把「允許其它網路使用者透過這台電腦的網際網路連線來連線」打勾,然後再把下方的「允許其它網路使用者來控制或停用網際網路連線」取消勾選,接著按下確定。<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh0IdXj9qiXKes0Vg3sFYF1MF-K67Wg0M8aEBbGhh90aC-E4rZOo_Hni2eOXEkfghQnNjOU6QHGEdfjWqtIcXp2TBuG4dwurIVfXw6CLR4U4ssOqRLoXXiWA6NeOmtCzUMCv1zalFjljHn7/s1600/74aad980b5b07a8e66aa83e90010830c88398b75.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh0IdXj9qiXKes0Vg3sFYF1MF-K67Wg0M8aEBbGhh90aC-E4rZOo_Hni2eOXEkfghQnNjOU6QHGEdfjWqtIcXp2TBuG4dwurIVfXw6CLR4U4ssOqRLoXXiWA6NeOmtCzUMCv1zalFjljHn7/s1600/74aad980b5b07a8e66aa83e90010830c88398b75.png" /></a></div>
<br />
<b>8.</b> 基本上到這裡,你的筆電已經變成一個基地台了,我們來看看連不連得上。以iphone為例,點一下「設定」。<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiUiMdtlT0gcZKToxQ148etny2D-k_arzCblUxAIPydfpOu9iyunrgQ9jf4svJ5F2UCIAa7znz0wxouG8RN-ZgjUB9P-htCVfNbtI6iwlFVoh1otNErseaHc48ADScryoRO8smv8VxG8Ogu/s1600/2093687d8a9d9a62eec5c8cbf59aedffe698c7ab.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiUiMdtlT0gcZKToxQ148etny2D-k_arzCblUxAIPydfpOu9iyunrgQ9jf4svJ5F2UCIAa7znz0wxouG8RN-ZgjUB9P-htCVfNbtI6iwlFVoh1otNErseaHc48ADScryoRO8smv8VxG8Ogu/s1600/2093687d8a9d9a62eec5c8cbf59aedffe698c7ab.png" /></a></div>
<br />
<b>9. </b>點一下「一般」<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiQznMnm6Z9FTz_LuaiJHI6gOeKaohY_hrJiAmbk9TXi1kNfcWj7-OJcx2qnc67QSs6faXP5JBd_fRyUADlU5DUgqAXmZmg8cUBxRLW2AHVUQZE4wIT1Mbp7Pq7oWYXJylUvBtwhfoSIRch/s1600/2dbadadaf6e94accbdc6b876ee10412c4e005cd1.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiQznMnm6Z9FTz_LuaiJHI6gOeKaohY_hrJiAmbk9TXi1kNfcWj7-OJcx2qnc67QSs6faXP5JBd_fRyUADlU5DUgqAXmZmg8cUBxRLW2AHVUQZE4wIT1Mbp7Pq7oWYXJylUvBtwhfoSIRch/s1600/2dbadadaf6e94accbdc6b876ee10412c4e005cd1.png" /></a></div>
<br />
<b>10.</b> 選擇「網路」<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhiTo2zaorjODz-gPKyiEdh3URKAklMUmhxxqSaQE0ttMMycVpV7tn7WPhbUnXFYLZAkVhI6Lbyir-G1gRHhmaJxLGuQxSePkII9BwlkMQyaWBPsMEQ4DyvOd_iIEVNtQjCSg40SV4cet6y/s1600/f976ba2d9b25cd980523bb61fd8290bb395ade71.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhiTo2zaorjODz-gPKyiEdh3URKAklMUmhxxqSaQE0ttMMycVpV7tn7WPhbUnXFYLZAkVhI6Lbyir-G1gRHhmaJxLGuQxSePkII9BwlkMQyaWBPsMEQ4DyvOd_iIEVNtQjCSg40SV4cet6y/s1600/f976ba2d9b25cd980523bb61fd8290bb395ade71.png" /></a></div>
<br />
<b>11.</b> 找到最下面的「Wi-Fi」<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg8We367erMIeSnZieIPgQVhC2JkY1IS13TyyiaC9PsPgJUw730_8NAdi9eqrzOgR7twvw1y_vcwRVe2wCTv-41MFnMzcuFQyNa8FTJlA5TmhXcXZQ5q8nnRVdWRf_ysiVNg6rlcg3thiPQ/s1600/b9151a3123c3ca5f8c4145ae7e632c494c450452.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg8We367erMIeSnZieIPgQVhC2JkY1IS13TyyiaC9PsPgJUw730_8NAdi9eqrzOgR7twvw1y_vcwRVe2wCTv-41MFnMzcuFQyNa8FTJlA5TmhXcXZQ5q8nnRVdWRf_ysiVNg6rlcg3thiPQ/s1600/b9151a3123c3ca5f8c4145ae7e632c494c450452.png" /></a></div>
<br />
<b>12.</b> 應該就可以找到基地台的名稱,按一下它。<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg1iWmHqQJ7uaiisWimTu0dJXym3-ta2MQCeWgmuX0LJBaMvSQU3S9Rm3YL9VxqS3PZ1jJaZY8PvQzP3P1-vNVnC_D_041WEew8fJbxbxUaO5iTIPeTaP9QxcKakKEgLJa15dAuDL-UIbHw/s1600/d887baa488262f5b13a36bf610161f9117c8fe33.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg1iWmHqQJ7uaiisWimTu0dJXym3-ta2MQCeWgmuX0LJBaMvSQU3S9Rm3YL9VxqS3PZ1jJaZY8PvQzP3P1-vNVnC_D_041WEew8fJbxbxUaO5iTIPeTaP9QxcKakKEgLJa15dAuDL-UIbHw/s1600/d887baa488262f5b13a36bf610161f9117c8fe33.png" /></a></div>
<br />
<b>13.</b> 輸入在第三步所設定的密碼。<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhXadPlb1fX5NiiKBmld3gaSviH_LNtRY1qug2irGVo0Gz3oT7e-E3Gfn4C3Jq7QFqoqVkEdjPTokibVgdsKZ_6EcAk1lSsRkZsifaYMYZzmh-5YboeD9-U5rRerkDO00hVY86AkQ7uabb5/s1600/1f2dbb6cf141f69768396770422cddc90cc5942a.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhXadPlb1fX5NiiKBmld3gaSviH_LNtRY1qug2irGVo0Gz3oT7e-E3Gfn4C3Jq7QFqoqVkEdjPTokibVgdsKZ_6EcAk1lSsRkZsifaYMYZzmh-5YboeD9-U5rRerkDO00hVY86AkQ7uabb5/s1600/1f2dbb6cf141f69768396770422cddc90cc5942a.png" /></a></div>
<br />
<b>14.</b> 驗證通過後,iPhone使用的Wi-Fi來源就會變成剛才所建立的連線。<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjHmqYpGHSoSHkDHanCZVPYO4WbUTTXfjDSTKZtfC85C-KkNh_VBJFjO65HjyY3vaGgspT07cOKfPi11ZP__qTbLkmD31_T_c_YgiNBV06yxc9bCbI_UxJ2dZWem02DTotfqbm0HHlDhkgv/s1600/ff7f0441a297a7f2a4d7549ae3f5f363d68411a0.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjHmqYpGHSoSHkDHanCZVPYO4WbUTTXfjDSTKZtfC85C-KkNh_VBJFjO65HjyY3vaGgspT07cOKfPi11ZP__qTbLkmD31_T_c_YgiNBV06yxc9bCbI_UxJ2dZWem02DTotfqbm0HHlDhkgv/s1600/ff7f0441a297a7f2a4d7549ae3f5f363d68411a0.png" /></a></div>
<br />
<b>15. </b>打開Safari看是否能上網,可以的話就恭喜你!你的iPhone已經可以跟筆電共享網路了!<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEimt6TpsV9GiWgX_K0b_K_599Ae1ePf6yHBQur1RUZyndXmW-8RxMQz5WxgFn5JflJb_Mylsz7IB6otaEpVm5QK3jOGa3Zmd8Xt3ric6-yGbRTByJXo8J9tskQI_y_qCCmHxLe6N0VAhUTt/s1600/bbaa6bce596050dcb632e9f82045121614cbced2.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEimt6TpsV9GiWgX_K0b_K_599Ae1ePf6yHBQur1RUZyndXmW-8RxMQz5WxgFn5JflJb_Mylsz7IB6otaEpVm5QK3jOGa3Zmd8Xt3ric6-yGbRTByJXo8J9tskQI_y_qCCmHxLe6N0VAhUTt/s1600/bbaa6bce596050dcb632e9f82045121614cbced2.png" /></a></div>
<br />
在這個技巧裡,其實最主要的就是用到了「netsh」這條命令。它是用來幹啥的?這條從<span style="color: red;"><b>Windows XP、2000</b></span>時代就已經存在的命令,本來是單純用於更改電腦的網路連線設定,彌補圖形化介面無法批次執行或程式化的不足,到了<b><span style="color: red;">Vista</span></b>及<span style="color: red;"><b>Server 2008</b></span>,則是更進一步提供設定無線網路連線的功能。簡單的說,你用這條命令能做的事、從控制台也能做,但是用命令列來進行可以簡化流程、也提高了批次處理的彈性。<br />
<br />
需要特別說明的是,只要你的無線網路卡支援,筆電是可以同時兼具「基地台」與「存取者」兩種身份的。也就是說,你可以先用筆電連上其它無線網路,然後再把它變成基地台,並不會有「無線網路已經用來存取其它連線了」的佔用問題,在無線網路資源有限的環境裡,十分受用。<br />
<br />
轉載 <<T客邦>>Anonymoushttp://www.blogger.com/profile/02768237855233416154noreply@blogger.com1tag:blogger.com,1999:blog-3506419250791502155.post-83965559814534810692013-10-03T11:57:00.001+08:002013-10-03T15:30:41.163+08:00Linux常用基本指令詳解 ( 三 )Linux常用基本指令詳解 ( 三 )<br />
<br />
<br />
在電腦常用操作中,我們經常會用到CentOS常用命令。 所以,我們對一些經常使用又很重要的CentOS常用命令進行了全面的整理。 下面,就給大家介紹這些CentOS常用命令。<br />
<br />
<br />
<b><span style="color: red;">一:使用CentOS常用命令查看cpu</span></b><br />
more /proc/cpuinfo | grep "model name"<br />
grep "model name" /proc/cpuinfo<br />
[root@localhost /]# grep "CPU" /proc/cpuinfo<br />
model name : Intel(R) Pentium(R) Dual CPU E2180 @ 2.00GHz<br />
model name : Intel(R) Pentium(R) Dual CPU E2180 @ 2.00GHz<br />
如果覺得需要看的更加舒服<br />
grep "model name" /proc/cpuinfo | cut -f2 -d:<br />
<span style="color: red;"><br /></span>
<b><span style="color: red;">二:使用CentOS常用命令查看內存</span></b><br />
grep MemTotal /proc/meminfo grep MemTotal /proc/meminfo | cut -f2 -d: free -m |grep "Mem" | awk '{print $2}'<br />
<br />
<b><span style="color: red;">三:使用CentOS常用命令查看cpu是32位元還是64位元</span></b><br />
getconf LONG_BIT<br />
<br />
<b><span style="color: red;">四:使用CentOS常用命令查看當前linux的版本</span></b><br />
more /etc/redhat-release<br />
cat /etc/redhat-release<br />
<br />
<b><span style="color: red;">五:使用CentOS常用命令查看內核版本</span></b><br />
uname -r<br />
uname -a<br />
<br />
<b><span style="color: red;">六:使用CentOS常用命令查看當前時間</span></b><br />
date上面已經介紹如何同步時間了<br />
<br />
<b><span style="color: red;">七:使用CentOS常用命令查看硬盤和分區</span></b><br />
df -h<br />
fdisk -l<br />
也可以查看分區<br />
du -sh<br />
可以看到全部佔用的空間<br />
du /etc -sh<br />
可以看到這個目錄的大小<br />
<b><br /></b>
<b><span style="color: red;">八:使用CentOS常用命令查看安裝的軟件包</span></b><br />
cat -n /root/install.log<br />
more /root/install.log | wc -l<br />
<br />
<b>查看現在已經安裝了那些軟件包</b><br />
rpm -qa<br />
rpm -qa | wc -l<br />
yum list installed | wc -l<br />
不過很奇怪,我通過rpm,和yum這兩種方式查詢的安裝軟件包,數量並不一樣。 沒有找到原因。<br />
<br />
<b><span style="color: red;">九:使用CentOS常用命令查看鍵盤佈局</span></b><br />
cat /etc/sysconfig/keyboard<br />
cat /etc/sysconfig/keyboard | grep KEYTABLE | cut -f2 -d=<br />
<br />
<b><span style="color: red;">十:使用CentOS常用命令查看selinux情況</span></b><br />
sestatus<br />
sestatus | cut -f2 -d:<br />
cat /etc/sysconfig/selinux<br />
<br />
<b><span style="color: red;">十一:使用CentOS常用命令查看ip,mac地址</span></b><br />
在ifcfg-eth0 文件裡你可以看到mac,G/W等信息。<br />
<br />
ifconfig cat /etc/sysconfig/network-scripts/ifcfg-eth0 | grep IPADDR<br />
cat /etc/sysconfig/network-scripts/ifcfg-eth0 | grep IPADDR | cut -f2 -d= ifconfig eth0 |grep "inet addr:" | awk '{print $2}'|cut -c 6- ifconfig | grep 'inet addr:'| grep -v '127.0.0.1' | cut -d: -f2 | awk '{ print $1}'<br />
<br />
<b>查看網關</b><br />
cat /etc /sysconfig/network<br />
<br />
<b>查看dns </b><br />
cat /etc/resolv.conf<br />
<br />
<span style="color: red;"><b>十二:使用CentOS常用命令查看默認語言</b></span><br />
echo $LANG $LANGUAGE<br />
cat /etc/sysconfig/i18n<br />
<b><br /></b>
<b><span style="color: red;">十三:使用CentOS常用命令查看所屬時區和是否使用UTC時間</span></b><br />
cat /etc/sysconfig/clock<br />
<br />
<b><span style="color: red;">十四:使用CentOS常用命令查看主機名</span></b><br />
hostname<br />
cat /etc/sysconfig/network<br />
修改主機名就是修改這個文件,同時最好也把host文件也修改。<br />
<br />
<b><span style="color: red;">十五:使用CentOS常用命令查看開機運行時間</span></b><br />
uptime<br />
09:44:45 up 67 days, 23:32, ...<br />
<br />
<br />
更多基本指令,請參考前一篇 <a href="http://fuglemanpeter.blogspot.tw/2012/09/linux_28.html">Linux常用基本指令詳解</a> 與 <a href="http://fuglemanpeter.blogspot.tw/2013/10/linux.html">Linux常用基本指令詳解 ( 二 )</a>Anonymoushttp://www.blogger.com/profile/02768237855233416154noreply@blogger.com1