拿到的帐号

VPS IP Address: 184.82.9.30
SSH Root Password: pass001

 注意：如果你安装 ubuntu 14.04 可能会无法登录，提示访问拒绝，这并不是密码输入错误了，而是因为 sshd 的默认配置里面禁止了 root 帐号登录，所以你需要使用面板的 临时通道 上去，逐行执行如下命令开启 root 登录权限：

sed -i "s/PermitRootLogin.*$/PermitRootLogin yes/" /etc/ssh/sshd_config
service ssh restart

如何远程访问

 注意输入密码是不会显示 “*” 的，同时密码是区分大小写的。

如何上传和下载文件

主机：VPS的IP，本例输入 184.82.9.30
协议：选择 SFTP
登录类型：选一般
用户：输入root
密码：输入ssh的登录密码，注意密码区分大小写。

更新软件源 (不可跳过)

apt-get update

root@241541:~# apt-get update
Get:1 http://archive.ubuntu.com maverick Release.gpg [198B]
Ign http://archive.ubuntu.com/ubuntu/ maverick/main Translation-en
Ign http://archive.ubuntu.com/ubuntu/ maverick/restricted Translation-en
Ign http://archive.ubuntu.com/ubuntu/ maverick/universe Translation-en
Get:2 http://archive.ubuntu.com maverick-updates Release.gpg [198B]
Ign http://archive.ubuntu.com/ubuntu/ maverick-updates/main Translation-en
Ign http://archive.ubuntu.com/ubuntu/ maverick-updates/restricted Translation-en
Ign http://archive.ubuntu.com/ubuntu/ maverick-updates/universe Translation-en
Get:3 http://archive.ubuntu.com maverick-security Release.gpg [198B]
Ign http://archive.ubuntu.com/ubuntu/ maverick-security/main Translation-en
Ign http://archive.ubuntu.com/ubuntu/ maverick-security/restricted Translation-en
Ign http://archive.ubuntu.com/ubuntu/ maverick-security/universe Translation-en
Get:4 http://archive.ubuntu.com maverick Release [39.8kB]
Get:5 http://archive.ubuntu.com maverick-updates Release [31.4kB]
Get:6 http://archive.ubuntu.com maverick-security Release [31.4kB]
Get:7 http://archive.ubuntu.com maverick/main i386 Packages [1492kB]
Get:8 http://archive.ubuntu.com maverick/restricted i386 Packages [5992B]
Get:9 http://archive.ubuntu.com maverick/universe i386 Packages [5791kB]
Get:10 http://archive.ubuntu.com maverick-updates/main i386 Packages [380kB]
Get:11 http://archive.ubuntu.com maverick-updates/restricted i386 Packages [1797B]
Get:12 http://archive.ubuntu.com maverick-updates/universe i386 Packages [157kB]
Get:13 http://archive.ubuntu.com maverick-security/main i386 Packages [157kB]
Get:14 http://archive.ubuntu.com maverick-security/restricted i386 Packages [14B]
Get:15 http://archive.ubuntu.com maverick-security/universe i386 Packages [77.9kB]
Fetched 8166kB in 4s (1724kB/s)
Reading package lists... Done

W: GPG 错误：http://security.ubuntu.com trusty-security Release: 由于没有公钥，无法验证下列签名： NO_PUBKEY 40976EAF437D05B5 NO_PUBKEY 3B4FE6ACC0B21F32
W: GPG 错误：http://archive.canonical.com trusty Release: 由于没有公钥，无法验证下列签名： NO_PUBKEY 40976EAF437D05B5 NO_PUBKEY 3B4FE6ACC0B21F32
W: GPG 错误：http://archive.ubuntu.com trusty Release: 由于没有公钥，无法验证下列签名： NO_PUBKEY 40976EAF437D05B5 NO_PUBKEY 3B4FE6ACC0B21F32
W: GPG 错误：http://archive.ubuntu.com trusty-updates Release: 由于没有公钥，无法验证下列签名： NO_PUBKEY 40976EAF437D05B5 NO_PUBKEY 3B4FE6ACC0B21F32

apt-key adv --recv-keys --keyserver keyserver.ubuntu.com 40976EAF437D05B5
apt-key adv --recv-keys --keyserver keyserver.ubuntu.com 3B4FE6ACC0B21F32
apt-get update

echo "precedence ::ffff:0:0/96  100">> /etc/gai.conf

echo "Acquire::ForceIPv4 true;"> /etc/apt/apt.conf.d/99force-ipv4

安装常用软件 (不可跳过)

apt-get install unzip zip wget rsync

root@241541:~# apt-get install unzip zip wget rsync 
Reading package lists... Done
Building dependency tree
Reading state information... Done
unzip is already the newest version.
wget is already the newest version.
rsync is already the newest version.
0 upgraded, 0 newly installed, 0 to remove and 26 not upgraded.

root@241541:~# apt-get install unzip zip wget rsync
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following NEW packages will be installed:
  rsync unzip wget zip
0 upgraded, 4 newly installed, 0 to remove and 26 not upgraded.
Need to get 319kB/1125kB of archives.
After this operation, 2314kB of additional disk space will be used.
Get:1 http://archive.ubuntu.com/ubuntu/ maverick/main zip i386 3.0-3 [319kB]
Fetched 319kB in 0s (417kB/s)
Selecting previously deselected package wget.
(Reading database ... 22549 files and directories currently installed.)
Unpacking wget (from .../wget_1.12-1.1ubuntu3_i386.deb) ...
Selecting previously deselected package rsync.
Unpacking rsync (from .../rsync_3.0.7-2ubuntu1.1_i386.deb) ...
Selecting previously deselected package unzip.
Unpacking unzip (from .../archives/unzip_6.0-4_i386.deb) ...
Selecting previously deselected package zip.
Unpacking zip (from .../archives/zip_3.0-3_i386.deb) ...
Setting up wget (1.12-1.1ubuntu3) ...
Setting up rsync (3.0.7-2ubuntu1.1) ...
Setting up unzip (6.0-4) ...
Setting up zip (3.0-3) ...

使用 Apache 搭建站点

安装 Apache2 Web 服务

apt-get install apache2

root@241541:~# apt-get install apache2
Reading package lists... Done
Building dependency tree... Done
apache2 is already the newest version.
0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.

开启 Apache2 的伪静态

a2enmod rewrite

root@241541:~# a2enmod rewrite
Module rewrite installed; run /etc/init.d/apache2 force-reload to enable.

root@241541:~# a2enmod rewrite
Mudule rewrite already enabled

安装 mysql 数据库服务

apt-get install mysql-server

root@241541:~# apt-get install mysql-server
Reading package lists... Done
Building dependency tree... Done
The following extra packages will be installed:
  libdbd-mysql-perl libdbi-perl libhtml-template-perl libmysqlclient16
  libnet-daemon-perl libplrpc-perl mysql-client-5.1 mysql-client-core-5.1
  mysql-common mysql-server-5.1 mysql-server-core-5.1
Suggested packages:
  libipc-sharedcache-perl libterm-readkey-perl tinyca
The following NEW packages will be installed:
  libdbd-mysql-perl libdbi-perl libhtml-template-perl libmysqlclient16
  libnet-daemon-perl libplrpc-perl mysql-client-5.1 mysql-client-core-5.1
  mysql-common mysql-server mysql-server-5.1 mysql-server-core-5.1
0 upgraded, 12 newly installed, 0 to remove and 26 not upgraded.
Need to get 22.9MB of archives.
After this operation, 54.4MB of additional disk space will be used.
Do you want to continue[Y/n]?

mysql 数据库管理

mysql 数据库优化

cp /etc/mysql/my.cnf /etc/mysql/my.cnf.`date +%s`
find /usr/share/doc/mysql* -name my-small.cnf -exec cp {} /etc/mysql/my.cnf \;
sed -i 's/\[mysqld\]/&\nuser            = mysql\n/' /etc/mysql/my.cnf

root@241541:~# cp /etc/mysql/my.cnf /etc/mysql/my.cnf.`date +%s`
root@241541:~# find /usr/share/doc/mysql* -name my-small.cnf -exec cp {} /etc/mysql/my.cnf \;
root@241541:~# sed -i 's/\[mysqld\]/&\nuser            = mysql\n/' /etc/mysql/my.cnf

service mysql restart

root@241541:~# service mysql restart
Rather than invoking init scripts through /etc/init.d, use the service(8)
utility, e.g. service mysql restart

Since the script you are attempting to invoke has been converted to an
Upstart job, you may also use the restart(8) utility, e.g. restart mysql
mysql start/running, process 9886

安装php环境

apt-get install libapache2-mod-php5 php5-gd php5-mysql php5-curl php5-mcrypt php5-common php-apc
php5enmod mcrypt

root@241541:~# apt-get install libapache2-mod-php5 php5-gd php5-mysql php5-mcrypt php5-common php-apc
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following extra packages will be installed:
  libgd2-xpm libjpeg62 libt1-5 libx11-6 libx11-data libxau6 libxcb1 libxdmcp6
  libxpm4 php5-cli php5-common php-apc
Suggested packages:
  php-pear libgd-tools 
The following NEW packages will be installed:
  libapache2-mod-php5 libgd2-xpm libjpeg62 libt1-5 libx11-6 libx11-data
  libxau6 libxcb1 libxdmcp6 libxpm4 php5-cli php5-common php5-gd php5-mysql php5-mcrypt
0 upgraded, 15 newly installed, 0 to remove and 26 not upgraded.
Need to get 8128kB of archives.
After this operation, 22.7MB of additional disk space will be used.
Do you want to continue[Y/n]?

service apache2 restart

root@241541:~# service apache2 restart
* Restarting web server apache2                                                  apache2: Could not reliably determine the server's fully qualified domain name, using 0.3.175.133 for ServerName
[ OK ]

测试站点

安装 phpsysinfo

cd /var/www/html
wget http://sourceforge.net/projects/phpsysinfo/files/phpsysinfo/3.0.13/phpsysinfo-3.0.13.tar.gz/download -O phpsysinfo-3.0.13.tar.gz
tar xzvf phpsysinfo-3.0.13.tar.gz 
cd phpsysinfo
mv config.php.new config.php

安装 php 探针

cd /var/www/html
wget http://www.yahei.net/tz/tz.zip
unzip tz.zip

root@241541:~# cd /var/www/html
root@241541:/var/www/html# wget http://www.yahei.net/tz/tz.zip
--2011-08-13 09:18:40--  http://www.yahei.net/tz/tz.zip
Resolving www.yahei.net... 110.34.192.14
Connecting to www.yahei.net|110.34.192.14|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 16087(16K)[application/zip]
Saving to: `tz.zip'

100%[======================================>] 16,087      --.-K/s   in 0.07s

2011-08-13 09:18:41 (152 KB/s) - `tz.zip' saved [16,087/16,087]

root@241541:/var/www/html# unzip tz.zip
Archive:  tz.zip
  inflating: tz.php

安装 phpmyadmin

apt-get install phpmyadmin

root@241541:~# apt-get install phpmyadmin
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following extra packages will be installed:
  dbconfig-common javascript-common libjs-mootools libmcrypt4 php5-mcrypt
  wwwconfig-common
Suggested packages:
  libmcrypt-dev mcrypt postgresql-client apache apache-ssl
The following NEW packages will be installed:
  dbconfig-common javascript-common libjs-mootools libmcrypt4 php5-mcrypt
  phpmyadmin wwwconfig-common
0 upgraded, 7 newly installed, 0 to remove and 26 not upgraded.
Need to get 5184kB of archives.
After this operation, 21.3MB of additional disk space will be used.
Do you want to continue[Y/n]?

 按 空格键 选择 Apche2 如下图:

ln -s /usr/share/phpmyadmin /var/www/html/

配置虚拟站点

配置域名

上传程序

www.test.com(test.com) 对应目录： /var/www/html/test
bbs.test.com 对应目录： /var/www/html/bbs

多域名配置

<VirtualHost *:80>
    ServerName www.test.com
    ServerAlias test.com
    DocumentRoot /var/www/html/test/
</VirtualHost> 

<VirtualHost *:80>
    ServerName bbs.test.com
    DocumentRoot /var/www/html/bbs/
</VirtualHost>

Apache2 伪静态

<VirtualHost *:80>
    ServerName bbs.test.com
    DocumentRoot /var/www/html/bbs/
<Directory /var/www/html/bbs/>
          AllowOverride AuthConfig
</Directory>
</VirtualHost> 

<VirtualHost *:80>
    ServerName bbs.test.com
    DocumentRoot /var/www/html/bbs/
    #伪静态代码段开始    
<Directory /var/www/html/bbs/>
       ...............................
</Directory>
    #伪静态代码段结束    
</VirtualHost> 

          RewriteEngine On
          RewriteRule ^forum-(\w+)-([0-9]+)\.html$ forum.php?mod=forumdisplay&fid=$1&page=$2
          RewriteRule ^thread-([0-9]+)-([0-9]+)-([0-9]+)\.html$ forum.php?mod=viewthread&tid=$1&extra=page\%3D$3&page=$2
          RewriteRule ^topic-(.+)\.html$ portal.php?mod=topic&topic=$1
          RewriteRule ^article-([0-9]+)\.html$ portal.php?mod=article&articleid=$1
          RewriteRule ^group-([0-9]+)-([0-9]+)\.html$ forum.php?mod=group&fid=$1&page=$2
          RewriteRule ^space-(username|uid)-(.+)\.html$ home.php?mod=space&$1=$2
          RewriteRule ^([a-z]+)-(.+)\.html$ $1.php?rewrite=$2

<VirtualHost *:80>
    ServerName bbs.test.com
    DocumentRoot /var/www/html/bbs/
<Directory /var/www/html/bbs/>
          RewriteEngine On
          RewriteRule ^forum-(\w+)-([0-9]+)\.html$ forum.php?mod=forumdisplay&fid=$1&page=$2
          RewriteRule ^thread-([0-9]+)-([0-9]+)-([0-9]+)\.html$ forum.php?mod=viewthread&tid=$1&extra=page\%3D$3&page=$2
          RewriteRule ^topic-(.+)\.html$ portal.php?mod=topic&topic=$1
          RewriteRule ^article-([0-9]+)\.html$ portal.php?mod=article&articleid=$1
          RewriteRule ^group-([0-9]+)-([0-9]+)\.html$ forum.php?mod=group&fid=$1&page=$2
          RewriteRule ^space-(username|uid)-(.+)\.html$ home.php?mod=space&$1=$2
          RewriteRule ^([a-z]+)-(.+)\.html$ $1.php?rewrite=$2
</Directory>
</VirtualHost>

<Directory />
          RewriteEngine On
          RewriteRule ^index\.php$ - [L]
          RewriteCond %{REQUEST_FILENAME} !-f
          RewriteCond %{REQUEST_FILENAME} !-d
          RewriteRule . /index.php [L]
</Directory>

<Directory />
          RewriteEngine On
          RewriteRule ^(.*)/index.html$ $1/index\.php [I]
          RewriteRule ^(.*)/category$ $1/index\.php [I]
          RewriteRule ^(.*)/feed-c([0-9]+).xml$ $1/feed\.php\?cat=$2 [I]
          RewriteRule ^(.*)/feed-b([0-9]+).xml$ $1/feed\.php\?brand=$2 [I]
          RewriteRule ^(.*)/feed-type([^-]+)\.xml$ $1/feed\.php\?type=$2 [I]
          RewriteRule ^(.*)/feed.xml$ $1/feed\.php [I]
          RewriteRule ^(.*)/category-([0-9]+)-b([0-9]+)-min([0-9]+)-max([0-9]+)-attr([^-]*)-([0-9]+)-(.+)-([a-zA-Z]+)(.*)\.html$ $1/category\.php\?id=$2&brand=$3&price_min=$4&price_max=$5&filter_attr=$6&page=$7&sort=$8&order=$9 [I]
          RewriteRule ^(.*)/category-([0-9]+)-b([0-9]+)-min([0-9]+)-max([0-9]+)-attr([^-]*)\.html$ $1/category\.php\?id=$2&brand=$3&price_min=$4&price_max=$5&filter_attr=$6 [I]
          RewriteRule ^(.*)/category-([0-9]+)-b([0-9]+)-([0-9]+)-(.+)-([a-zA-Z]+)(.*)\.html$ $1/category\.php\?id=$2&brand=$3&page=$4&sort=$5&order=$6 [I]
          RewriteRule ^(.*)/category-([0-9]+)-b([0-9]+)-([0-9]+)(.*)\.html$ $1/category\.php\?id=$2&brand=$3&page=$4 [I]
          RewriteRule ^(.*)/category-([0-9]+)-b([0-9]+)(.*)\.html$ $1/category\.php\?id=$2&brand=$3 [I]
          RewriteRule ^(.*)/category-([0-9]+)(.*)\.html$ $1/category\.php\?id=$2 [I]
          RewriteRule ^(.*)/category-([0-9]+)-b([0-9]+)\.html(.*)$ $1/category\.php\?$4&id=$2&brand=$3
          RewriteRule ^(.*)/goods-([0-9]+)(.*)\.html$ $1/goods\.php\?id=$2 [I]
          RewriteRule ^(.*)/article_cat-([0-9]+)-([0-9]+)-(.+)-([a-zA-Z]+)(.*)\.html$ $1/article_cat\.php\?id=$2&page=$3&sort=$4&order=$5 [I]
          RewriteRule ^(.*)/article_cat-([0-9]+)-([0-9]+)(.*)\.html$ $1/article_cat\.php\?id=$2&page=$3 [I]
          RewriteRule ^(.*)/article_cat-([0-9]+)(.*)\.html$ $1/article_cat\.php\?id=$2 [I]
          RewriteRule ^(.*)/article-([0-9]+)(.*)\.html$ $1/article\.php\?id=$2 [I]
          RewriteRule ^(.*)/brand-([0-9]+)-c([0-9]+)-([0-9]+)-(.+)-([a-zA-Z]+)\.html $1/brand\.php\?id=$2&cat=$3&page=$4&sort=$5&order=$6 [I]
          RewriteRule ^(.*)/brand-([0-9]+)-c([0-9]+)-([0-9]+)(.*)\.html $1/brand\.php\?id=$2&cat=$3&page=$4 [I]
          RewriteRule ^(.*)/brand-([0-9]+)-c([0-9]+)\.html(.*)$ $1/brand\.php\?$4&id=$2&cat=$3 [I]
          RewriteRule ^(.*)/brand-([0-9]+)-c([0-9]+)(.*)\.html $1/brand\.php\?id=$2&cat=$3 [I]
          RewriteRule ^(.*)/brand-([0-9]+)(.*)\.html $1/brand\.php\?id=$2 [I]
          RewriteRule ^(.*)/tag-(.*)\.html $1/search\.php\?keywords=$2 [I]
          RewriteRule ^(.*)/snatch-([0-9]+)\.html$ $1/snatch\.php\?id=$2 [I]
          RewriteRule ^(.*)/group_buy-([0-9]+)\.html$ $1/group_buy\.php\?act=view&id=$2 [I]
          RewriteRule ^(.*)/auction-([0-9]+)\.html$ $1/auction\.php\?act=view&id=$2 [I]
          RewriteRule ^(.*)/exchange-id([0-9]+)(.*)\.html$ $1/exchange\.php\?id=$2&act=view [I]
          RewriteRule ^(.*)/exchange-([0-9]+)-min([0-9]+)-max([0-9]+)-([0-9]+)-(.+)-([a-zA-Z]+)(.*)\.html$ $1/exchange\.php\?cat_id=$2&integral_min=$3&integral_max=$4&page=$5&sort=$6&order=$7 [I]
          RewriteRule ^(.*)/exchange-([0-9]+)-([0-9]+)-(.+)-([a-zA-Z]+)(.*)\.html$ $1/exchange\.php\?cat_id=$2&page=$3&sort=$4&order=$5 [I]
          RewriteRule ^(.*)/exchange-([0-9]+)-([0-9]+)(.*)\.html$ $1/exchange\.php\?cat_id=$2&page=$3 [I]
          RewriteRule ^(.*)/exchange-([0-9]+)(.*)\.html$ $1/exchange\.php\?cat_id=$2 [I]
</Directory>

修改上传文件权限

chown -R www-data:www-data /var/www
service apache2 restart

root@241541:~# chown -R www-data:www-data /var/www
root@241541:~# service apache2 restart
 * Restarting web server apache2                                                apache2: Could not reliably determine the server's fully qualified domain name, using 0.3.175.133 for ServerName
 ... waiting apache2: Could not reliably determine the server's fully qualified domain name, using 0.3.175.133 for ServerName

安装配置

Apache2 301 跳转

<VirtualHost *:80>
    ServerName test.com
    RewriteCond %{HTTP_HOST} ^test\.com [NC]
    RewriteRule ^(.*)$ http://www.test.com/$1[L,R=301]
</VirtualHost>

Apache2 优化

sed -i -e "s/^[[:blank:]]*StartServers[[:blank:]]*.*/StartServers       5/"\
       -e "s/^[[:blank:]]*MinSpareServers[[:blank:]]*.*/MinSpareServers    5/"\
       -e "s/^[[:blank:]]*MaxSpareServers[[:blank:]]*.*/MaxSpareServers    10/"\
       -e "s/^[[:blank:]]*ServerLimit[[:blank:]]*.*/ServerLimit       10/"\
       -e "s/^[[:blank:]]*MaxClients[[:blank:]]*.*/MaxClients        10/"\
       -e "s/^[[:blank:]]*MinSpareThreads[[:blank:]]*.*/MinSpareThreads    5/"\
       -e "s/^[[:blank:]]*MaxSpareThreads[[:blank:]]*.*/MaxSpareThreads    10/" /etc/apache2/apache2.conf

service apache2 restart

root@241541:~# sed -i -e "s/^[[:blank:]]*StartServers[[:blank:]]*.*/StartServers       5/"\
>       -e "s/^[[:blank:]]*MinSpareServers[[:blank:]]*.*/MinSpareServers    5/" \
>       -e "s/^[[:blank:]]*MaxSpareServers[[:blank:]]*.*/MaxSpareServers    10/" \
>       -e "s/^[[:blank:]]*ServerLimit[[:blank:]]*.*/ServerLimit       10/" \
>       -e "s/^[[:blank:]]*MaxClients[[:blank:]]*.*/MaxClients        10/" \
>       -e "s/^[[:blank:]]*MinSpareThreads[[:blank:]]*.*/MinSpareThreads    5/" \
>       -e "s/^[[:blank:]]*MaxSpareThreads[[:blank:]]*.*/MaxSpareThreads    10/" /etc/apache2/apache2.conf
root@241541:~# service apache2 restart
 * Restarting web server apache2                                                apache2: Could not reliably determine the server's fully qualified domain name, using 0.4.54.225 for ServerName
 ... waiting apache2: Could not reliably determine the server's fully qualified domain name, using 0.4.54.225 for ServerName
                                                                         [ OK ]

查看 Apache2 日志

使用 Nginx 搭建站点

删除 apache2

service apache2 stop

root@241541:~# service apache2 stop
 * Stopping web server apache2                                                  apache2: Could not reliably determine the server's fully qualified domain name, using 0.3.175.133 for ServerName
 ... waiting                                                             [ OK ]

apt-get remove apache2 apache2.2-common

0 upgraded, 1 newly installed, 7 to remove and 26 not upgraded.
Need to get 5837kB of archives.
After this operation, 14.5MB disk space will be freed.
Do you want to continue [Y/n]?

Removing libapache2-mod-php5 ...
Module php5 disabled.
Run '/etc/init.d/apache2 restart' to activate new configuration!
Removing apache2-mpm-prefork ...
 * Stopping web server apache2                                                  apache2: Could not reliably determine the  server's fully qualified domain name, using 0.3.175.133 for ServerName
 ... waiting                                                             [ OK ]
Removing apache2.2-common ...
Removing apache2-utils ...
Removing apache2.2-bin ...

安装 php5-fpm php5-cgi

apt-get install php5-cgi php5-fpm php5-gd php5-mysql php5-curl php5-mcrypt php5-common php-apc
php5enmod mcrypt

root@241541:~# apt-get install php5-cgi php5-fpm php5-gd php5-mysql php5-mcrypt php5-common php-apc
Reading package lists... Done
Building dependency tree
Reading state information... Done
php5-cgi is already the newest version.
php5-cgi set to manually installed.
Suggested packages:
  php-pear
The following NEW packages will be installed:
  libevent-1.4-2 php5-fpm
0 upgraded, 2 newly installed, 0 to remove and 26 not upgraded.
Need to get 3002kB of archives.
After this operation, 7967kB of additional disk space will be used.
Get:1 http://archive.ubuntu.com/ubuntu/ maverick/main libevent-1.4-2 i386 1.4.13-stable-1 [56.2kB]
Get:2 http://archive.ubuntu.com/ubuntu/ maverick-updates/universe php5-fpm i386 5.3.3-1ubuntu9.5 [2946kB]
Fetched 3002kB in 1s (2181kB/s)
Selecting previously deselected package libevent-1.4-2.
(Reading database ... 21902 files and directories currently installed.)
Unpacking libevent-1.4-2 (from .../libevent-1.4-2_1.4.13-stable-1_i386.deb) ...
Selecting previously deselected package php5-fpm.
Unpacking php5-fpm (from .../php5-fpm_5.3.3-1ubuntu9.5_i386.deb) ...
Setting up libevent-1.4-2 (1.4.13-stable-1) ...
Setting up php5-fpm (5.3.3-1ubuntu9.5) ...
update-rc.d: warning: php5-fpm stop runlevel arguments (01 6)do not match LSB Default-Stop values (none)
 * Starting PHP5 FPM...                                                         Aug 13 06:25:50.352643 [WARNING][pool  www] pm.start_servers is not set. It's been set to 20.
[ OK ]

Creating config file /etc/php5/fpm/php.ini with new version
Processing triggers for libc-bin ...
ldconfig deferred processing now taking place

sed -i -e 's/listen =.*$/listen = 127.0.0.1:9000/' `grep -R -l listen /etc/php5/fpm`

service php5-fpm restart 

root@241541:~# service php5-fpm restart
php5-fpm stop/waiting
php5-fpm start/running, process 6899

安装 mysql

安装 nginx

apt-get install nginx

root@241541:~# apt-get install nginx
Reading package lists... Done
Building dependency tree
Reading state information... Done
Suggested packages:
  ufw
The following NEW packages will be installed:
  nginx
0 upgraded, 1 newly installed, 0 to remove and 26 not upgraded.
Need to get 341kB of archives.
After this operation, 827kB of additional disk space will be used.
Get:1 http://archive.ubuntu.com/ubuntu/ maverick/universe nginx i386 0.7.67-3ubuntu1 [341kB]
Fetched 341kB in 0s (437kB/s)
Selecting previously deselected package nginx.
(Reading database ... 21918 files and directories currently installed.)
Unpacking nginx (from .../nginx_0.7.67-3ubuntu1_i386.deb) ...
Setting up nginx (0.7.67-3ubuntu1) ...

service nginx start

root@241541:~# service nginx start
Starting nginx: nginx.

测试站点

server	{
	listen       80;
	server_name 184.82.9.30 184.82.9.31;
	index index.html index.htm index.php;
	root  /var/www/;
	location ~ \.php$ {
		include /etc/nginx/fastcgi_params;
		fastcgi_param  SCRIPT_FILENAME    $document_root$fastcgi_script_name;
		fastcgi_pass  127.0.0.1:9000;
		}
	}

service nginx restart

root@241541:~# service nginx restart
Restarting nginx: nginx.

安装phpsysinfo

安装 php 探针

安装 phpmyadmin

cd /var/www
ln -s /usr/share/phpmyadmin .

root@241541:~# cd /var/www
root@241541:/var/www# ln -s /usr/share/phpmyadmin .
root@241541:/var/www#

配置虚拟站点

配置域名

上传程序

多域名配置

server	{
	listen       80;
	server_name www.test.com test.com;
	index index.html index.htm index.php;
	root  /var/www/test/;
	location ~ \.php$ {
		include /etc/nginx/fastcgi_params;
		fastcgi_param  SCRIPT_FILENAME    $document_root$fastcgi_script_name;
		fastcgi_pass  127.0.0.1:9000;
		}
	}

server	{
	listen       80;
	server_name bbs.test.com;
	index index.html index.htm index.php;
	root  /var/www/bbs/;
	location ~ \.php$ {
		include /etc/nginx/fastcgi_params;
		fastcgi_param  SCRIPT_FILENAME    $document_root$fastcgi_script_name;
		fastcgi_pass  127.0.0.1:9000;
		}
	}

Nginx 伪静态

server	{
	listen       80;
	server_name bbs.test.com;
	index index.html index.htm index.php;
	root  /var/www/bbs/;
	location ~ \.php$ {
		include /etc/nginx/fastcgi_params;
		fastcgi_param  SCRIPT_FILENAME    $document_root$fastcgi_script_name;
		fastcgi_pass  127.0.0.1:9000;
		}
       #伪静态代码段开始    
	location / {
        ...............................
		}
       #伪静态代码段结束    
	}

location / {
   	rewrite ^([^\.]*)/topic-(.+)\.html$ $1/portal.php?mod=topic&topic=$2 last;
   	rewrite ^([^\.]*)/article-([0-9]+)-([0-9]+)\.html$ $1/portal.php?mod=view&aid=$2&page=$3 last;
   	rewrite ^([^\.]*)/forum-(\w+)-([0-9]+)\.html$ $1/forum.php?mod=forumdisplay&fid=$2&page=$3 last;
   	rewrite ^([^\.]*)/thread-([0-9]+)-([0-9]+)-([0-9]+)\.html$ $1/forum.php?mod=viewthread&tid=$2&extra=page%3D$4&page=$3 last;
   	rewrite ^([^\.]*)/group-([0-9]+)-([0-9]+)\.html$ $1/forum.php?mod=group&fid=$2&page=$3 last;
   	rewrite ^([^\.]*)/space-(username|uid)-(.+)\.html$ $1/home.php?mod=space&$2=$3 last;
   	rewrite ^([^\.]*)/blog-([0-9]+)-([0-9]+)\.html$ $1/home.php?mod=space&uid=$2&do=blog&id=$3 last;
   	rewrite ^([^\.]*)/(fid|tid)-([0-9]+)\.html$ $1/index.php?action=$2&value=$3 last;
	}

server	{
	listen       80;
	server_name bbs.test.com;
	index index.html index.htm index.php;
	root  /var/www/bbs/;
	location ~ \.php$ {
		include /etc/nginx/fastcgi_params;
		fastcgi_param  SCRIPT_FILENAME    $document_root$fastcgi_script_name;
		fastcgi_pass  127.0.0.1:9000;
		}
	location / {
   		rewrite ^([^\.]*)/topic-(.+)\.html$ $1/portal.php?mod=topic&topic=$2 last;
   		rewrite ^([^\.]*)/article-([0-9]+)-([0-9]+)\.html$ $1/portal.php?mod=view&aid=$2&page=$3 last;
   		rewrite ^([^\.]*)/forum-(\w+)-([0-9]+)\.html$ $1/forum.php?mod=forumdisplay&fid=$2&page=$3 last;
   		rewrite ^([^\.]*)/thread-([0-9]+)-([0-9]+)-([0-9]+)\.html$ $1/forum.php?mod=viewthread&tid=$2&extra=page%3D$4&page=$3 last;
   		rewrite ^([^\.]*)/group-([0-9]+)-([0-9]+)\.html$ $1/forum.php?mod=group&fid=$2&page=$3 last;
   		rewrite ^([^\.]*)/space-(username|uid)-(.+)\.html$ $1/home.php?mod=space&$2=$3 last;
   		rewrite ^([^\.]*)/blog-([0-9]+)-([0-9]+)\.html$ $1/home.php?mod=space&uid=$2&do=blog&id=$3 last;
   		rewrite ^([^\.]*)/(fid|tid)-([0-9]+)\.html$ $1/index.php?action=$2&value=$3 last;
		}
	}

location / {
	if (-f $request_filename/index.html){
		rewrite (.*) $1/index.html break;
		}
	if (-f $request_filename/index.php){
		rewrite (.*) $1/index.php;
		}
	if (!-f $request_filename){
		rewrite (.*) /index.php;
		}
	}

location / {
	if (!-e $request_filename) {
		rewrite "^/index\.html" /index.php last;
		rewrite "^/category$" /index.php last;
		rewrite "^/feed-c([0-9]+)\.xml$" /feed.php?cat=$1 last;
		rewrite "^/feed-b([0-9]+)\.xml$" /feed.php?brand=$1 last;
		rewrite "^/feed\.xml$" /feed.php last;
		rewrite "^/category-([0-9]+)-b([0-9]+)-min([0-9]+)-max([0-9]+)-attr([^-]*)-([0-9]+)-(.+)-([a-zA-Z]+)(.*)\.html$" /category.php?id=$1&brand=$2&price_min=$3&price_max=$4&filter_attr=$5&page=$6&sort=$7&order=$8 last;
		rewrite "^/category-([0-9]+)-b([0-9]+)-min([0-9]+)-max([0-9]+)-attr([^-]*)(.*)\.html$" /category.php?id=$1&brand=$2&price_min=$3&price_max=$4&filter_attr=$5 last;
		rewrite "^/category-([0-9]+)-b([0-9]+)-([0-9]+)-(.+)-([a-zA-Z]+)(.*)\.html$" /category.php?id=$1&brand=$2&page=$3&sort=$4&order=$5 last;
		rewrite "^/category-([0-9]+)-b([0-9]+)-([0-9]+)(.*)\.html$" /category.php?id=$1&brand=$2&page=$3 last;
		rewrite "^/category-([0-9]+)-b([0-9]+)(.*)\.html$" /category.php?id=$1&brand=$2 last;
		rewrite "^/category-([0-9]+)(.*)\.html$" /category.php?id=$1 last;
		rewrite "^/goods-([0-9]+)(.*)\.html" /goods.php?id=$1 last;
		rewrite "^/article_cat-([0-9]+)-([0-9]+)-(.+)-([a-zA-Z]+)(.*)\.html$" /article_cat.php?id=$1&page=$2&sort=$3&order=$4 last;
		rewrite "^/article_cat-([0-9]+)-([0-9]+)(.*)\.html$" /article_cat.php?id=$1&page=$2 last;
		rewrite "^/article_cat-([0-9]+)(.*)\.html$" /article_cat.php?id=$1 last;
		rewrite "^/article-([0-9]+)(.*)\.html$" /article.php?id=$1 last;
		rewrite "^/brand-([0-9]+)-c([0-9]+)-([0-9]+)-(.+)-([a-zA-Z]+)\.html" /brand.php?id=$1&cat=$2&page=$3&sort=$4&order=$5 last;
		rewrite "^/brand-([0-9]+)-c([0-9]+)-([0-9]+)(.*)\.html" /brand.php?id=$1&cat=$2&page=$3 last;
		rewrite "^/brand-([0-9]+)-c([0-9]+)(.*)\.html" /brand.php?id=$1&cat=$2 last;
		rewrite "^/brand-([0-9]+)(.*)\.html" /brand.php?id=$1 last;
		rewrite "^/tag-(.*)\.html" /search.php?keywords=$1 last;
		rewrite "^/snatch-([0-9]+)\.html$" /snatch.php?id=$1 last;
		rewrite "^/group_buy-([0-9]+)\.html$" /group_buy.php?act=view&id=$1 last;
		rewrite "^/auction-([0-9]+)\.html$" /auction.php?act=view&id=$1 last;
		rewrite "^/exchange-id([0-9]+)(.*)\.html$" /exchange.php?id=$1&act=view last;
		rewrite "^/exchange-([0-9]+)-min([0-9]+)-max([0-9]+)-([0-9]+)-(.+)-([a-zA-Z]+)(.*)\.html$" /exchange.php?cat_id=$1&integral_min=$2&integral_max=$3&page=$4&sort=$5&order=$6 last;
		rewrite "^/exchange-([0-9]+)-([0-9]+)-(.+)-([a-zA-Z]+)(.*)\.html$" /exchange.php?cat_id=$1&page=$2&sort=$3&order=$4 last;
		rewrite "^/exchange-([0-9]+)-([0-9]+)(.*)\.html$" /exchange.php?cat_id=$1&page=$2 last;
		rewrite "^/exchange-([0-9]+)(.*)\.html$" /exchange.php?cat_id=$1 last;
		}
	}

修改上传文件权限

chown -R www-data:www-data /var/www
service nginx restart

root@241541:~# chown -R www-data:www-data /var/www
root@195669:~# service nginx restart
Restarting nginx: nginx.

安装配置

nginx 301 跳转

server {
	listen       80;
	server_name test.com;
	rewrite ^/(.*) http://www.test.com/$1 permanent;
}

nginx 优化

sed -i -e 's/pm.max_children =.*$/pm.max_children = 10/' `grep -R -l pm.max_children /etc/php5/fpm`
sed -i -e 's/pm.start_servers =.*$/pm.start_servers = 5/' `grep -R -l pm.max_children /etc/php5/fpm`
sed -i -e 's/pm.max_spare_servers =.*$/pm.max_spare_servers = 10/' `grep -R -l pm.max_children /etc/php5/fpm`

service php5-fpm restart

nginx 限制同一IP的并发数和连接流量

echo "limit_conn_zone \$binary_remote_addr zone=one:10m;"> /etc/nginx/conf.d/limitconn.conf

 limit_conn one 20;
 limit_rate 200k;

server	{
	listen       80;
	server_name bbs.test.com;
	limit_conn one 20;
	limit_rate 200k;
	index index.html index.htm index.php;
	root  /var/www/bbs/;
	location ~ \.php$ {
		include /etc/nginx/fastcgi_params;
		fastcgi_param  SCRIPT_FILENAME    $document_root$fastcgi_script_name;
		fastcgi_pass  127.0.0.1:9000;
		}
	}

service nginx restart

查看 nginx 日志

配置CDN或反向代理

mkdir /var/www/cache
mkdir /var/www/temp
chown -R www-data:www-data /var/www
echo "proxy_cache_path /var/www/cache levels=1:2 keys_zone=cache_one:100m inactive=7d max_size=20g;"> /etc/nginx/conf.d/cdn.conf
echo "proxy_temp_path /var/www/temp;">> /etc/nginx/conf.d/cdn.conf

server	{
	listen       80;
	server_name www.test.com test.com;
        location / {
                proxy_set_header Host $host;
                proxy_set_header X-Real-IP $remote_addr;
                proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
                proxy_pass_header Server;
                proxy_pass http://192.168.1.1;
}
        location ~ .*\.(gif|png|jpg|jpeg|swf|zip|gz|tar|bz2|rar|doc|txt|ico|cur)$ {
                proxy_cache cache_one;
                proxy_cache_valid 30d;
                proxy_cache_key $host$uri$is_args$args;
                proxy_set_header Host $host;
                proxy_pass  http://192.168.1.1;
}
        location ~ .*\.(css|js)?$ {
                proxy_cache cache_one;
                proxy_cache_valid 1h;
                proxy_cache_key $host$uri$is_args$args;
                proxy_set_header Host $host;
                proxy_pass  http://192.168.1.1;
}
}

server	{
	listen       80;
	server_name www.test.com test.com;
        location / {
                proxy_set_header Host $host;
                proxy_set_header X-Real-IP $remote_addr;
                proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
                proxy_pass_header Server;
                proxy_pass http://192.168.1.1;
}
}

service nginx restart

反向代理 Google

apt-get install openssl
cd /etc/nginx/
openssl genrsa -out google.key 1024
openssl req -new -key google.key -out google.csr
openssl x509 -req -days 3650 -in google.csr -signkey google.key -out google.crt

server {
        listen 80;
        server_name google.test.com;
        rewrite ^(.*) https://google.test.com$1 permanent;
}

server {
        listen      443;
        server_name  google.test.com;
        ssl on;
        ssl_certificate /etc/nginx/google.crt;
        ssl_certificate_key /etc/nginx/google.key;
        location / {
                proxy_redirect https://www.google.com.hk/ /;
                proxy_cookie_domain google.com.hk google.test.com;
                proxy_set_header Host www.google.com.hk;
                proxy_pass https://www.google.com.hk;
}
}

service nginx restart

安装邮件服务器

hostname mydomain.com
apt-get -y install postfix mailutils libsasl2-2 ca-certificates libsasl2-modules

postconf -e default_process_limit=10

postconf -e relayhost=smtp.gmail.com:587
postconf -e smtp_sasl_auth_enable=yes
postconf -e smtp_sasl_password_maps=hash:/etc/postfix/sasl_passwd
postconf -e smtp_sasl_security_options=noanonymous
postconf -e smtp_tls_CAfile=/etc/ssl/certs/ca-certificates.crt
postconf -e smtp_use_tls=yes

echo "smtp.gmail.com:587    USERNAME@gmail.com:PASSWORD"> /etc/postfix/sasl_passwd
chmod 400 /etc/postfix/sasl_passwd
postmap /etc/postfix/sasl_passwd
service postfix restart

echo "Test mail" | mail -s "Test" you@example.com

tail /var/log/mail.log

搭建临时的FTP服务

下载 pyftpdlib 库

cd /root
wget https://pypi.python.org/packages/a8/f8/0f6db156898616dbcbd7bf865660295c81479071ab0fcd1898fe1b3a4fc4/pyftpdlib-1.5.1.tar.gz
tar xzvf pyftpdlib-1.5.1.tar.gz

开启匿名ftp服务

cd /root/pyftpdlib-1.5.1/
python -m pyftpdlib -d /var/www

开启允许写入ftp服务

cd /root/pyftpdlib-1.5.1/
python -m pyftpdlib -w -d /var/www 

登录ftp的账号

关闭ftp服务

VPS 自我监控

监控内存和负载

cat << "EOF"> /usr/bin/vpscheck.sh
#!/bin/bash
free_mem=$(grep MemFree /proc/meminfo | awk '{print $2}')
echo 'Free Memory:'$free_mem
if [ $free_mem -lt 1000 ];then
   shutdown -r now
fi
load=$(awk '$1 > 3 {print $1}' /proc/loadavg)
echo "Load:"$load
if [ -n "$load" ];then
   shutdown -r now
fi
EOF

chmod +x /usr/bin/vpscheck.sh
echo "*/5 * * * * root  /usr/bin/vpscheck.sh"> /etc/cron.d/vpscheck
service cron restart

监控网站并发数

cat << "EOF"> /usr/bin/wwwcheck.sh
#!/bin/bash
count=`netstat -na|grep :80|wc -l`
echo 'Count:'$count
if [ $count -gt 100 ];then
   shutdown -r now
fi
EOF

chmod +x /usr/bin/wwwcheck.sh
echo "*/5 * * * * root  /usr/bin/wwwcheck.sh"> /etc/cron.d/wwwcheck
service cron restart

安全相关事项

防止扫描

apt-get install fail2ban

root@241541:/# ~# apt-get install fail2ban
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following extra packages will be installed:
  python-pyinotify
Suggested packages:
  python-gamin python-pyinotify-doc
The following NEW packages will be installed:
  fail2ban python-pyinotify
0 upgraded, 2 newly installed, 0 to remove and 62 not upgraded.
Need to get 154 kB of archives.
After this operation, 763 kB of additional disk space will be used.
Do you want to continue? [Y/n] y
Get:1 http://archive.ubuntu.com/ubuntu/ trusty/universe fail2ban all 0.8.11-1 [129 kB]
Get:2 http://archive.ubuntu.com/ubuntu/ trusty/main python-pyinotify all 0.9.4-1build1 [24.5 kB]
Fetched 154 kB in 0s (213 kB/s)
Selecting previously unselected package fail2ban.
(Reading database ... 28959 files and directories currently installed.)
Preparing to unpack .../fail2ban_0.8.11-1_all.deb ...
Unpacking fail2ban (0.8.11-1) ...
Selecting previously unselected package python-pyinotify.
Preparing to unpack .../python-pyinotify_0.9.4-1build1_all.deb ...
Unpacking python-pyinotify (0.9.4-1build1) ...
Processing triggers for man-db (2.6.7.1-1ubuntu1) ...
fopen: Permission denied
Setting up fail2ban (0.8.11-1) ...
 * Starting authentication failure monitor fail2ban                                                                                                                       [ OK ]
Setting up python-pyinotify (0.9.4-1build1) ...

防止php木马

 通过设置限制php的 eval 函数来防止木马，可能会导致某些程序无法正常运行，目前在 Ubuntu 14.04 版本上测试通过。

sudo apt-get install php5-suhosin

;suhosin.executor.eval.blacklist =

suhosin.executor.eval.blacklist = include,include_once,require,require_once,curl_init,fpassthru,file,base64_encode,base64_decode,mail,exec,system,proc_open,leak,syslog,pfsockopen,shell_exec,ini_restore,symlink,stream_socket_server,proc_nice,popen,proc_get_status,dl, pcntl_exec, pcntl_fork, pcntl_signal,pcntl_waitpid, pcntl_wexitstatus, pcntl_wifexited, pcntl_wifsignaled,pcntl_wifstopped, pcntl_wstopsig, pcntl_wtermsig, socket_accept,socket_bind, socket_connect, socket_create, socket_create_listen,socket_create_pair,link,register_shutdown_function,register_tick_function 

木马基本检查和手工清除

cd /var/www/
grep -R base64_decode *|more

eval(base64_decode("一大串无意义字母
或
eval(base64_decode($_POST["
或
eval(gzuncompress(base64_decode

find /var/www/ -name '*.php' -exec sed -i -r "s/eval.{0,10}\(.{0,10}base64_decode.*?\);//g" {} \;
find /var/www/ -name '*.php' -exec sed -i -r "s/eval.{0,10}\(.{0,10}gzuncompress.{0,10}\(.{0,10}base64_decode.*?\);//g" {} \;
find /var/www/ -name '*.php' -exec sed -i -r "s/eval.{0,10}\(.{0,10}stripslashes.*?\);//g" {} \;

grep -R -E 'POST.*pfsockopen.*EHLO' /var/www/

grep -R -l -E 'POST.*pfsockopen.*EHLO' /var/www/ | xargs rm -f

grep -R -E 'REQUEST.*eval.*fwrite' /var/www/

grep -R -l -E 'REQUEST.*eval.*fwrite' /var/www/  | xargs rm -f

 find . -name "*.php" -exec grep -l eval {} \;

根据访问日志批量封IP

cat access.log | grep "xmlrpc.php" | awk '{print $1}' | sort | uniq

cat access.log | grep "xmlrpc.php" | awk '{print $1}' | sort | uniq | xargs -n1 -I {} iptables -A INPUT -p tcp --dport 80 -s {}/32 -j DROP

iptables -L

关闭邮件服务

apt-get remove postfix* sendmail* procmail*

iptables -I FORWARD -p tcp --dport 25 -j DROP
sed -i '$i\iptables -I FORWARD -p tcp --dport 25 -j DROP' /etc/rc.local

备份站点

备份站点配置文件

备份Apache配置文件

cd
tar czf apache2.tar.gz /etc/apache2

root@241541:~# cd
root@241541:~# tar czf apache2.tar.gz /etc/apache2
tar: Removing leading `/' from member names

 ls -l apache2.tar.gz

root@241541:~# ls -l apache2.tar.gz
-rw-r--r-- 1 root root 31021 Aug 13 18:32 apache2.tar.gz

备份Nginx配置文件

cd
tar czf nginx.tar.gz /etc/nginx

root@241541:~# cd
root@241541:~# tar czf nginx.tar.gz /etc/nginx
tar: Removing leading `/' from member names

root@241541:~# ls -l nginx.tar.gz
-rw-r--r-- 1 root root 5179 Aug 13 18:21 nginx.tar.gz

备份Mysql配置文件

cd
tar czf mysql.tar.gz /etc/mysql

root@241541:~# cd
root@241541:~# tar czf mysql.tar.gz /etc/mysql
tar: Removing leading `/' from member names

root@241541:~# ls -l mysql.tar.gz
-rw-r--r-- 1 root root 2639 Aug 13 18:25 mysql.tar.gz

备份站点文件

cd
tar czf www.tar.gz /var/www

root@241541:~# cd
root@241541:~# tar czf www.tar.gz /var/www
tar: Removing leading `/' from member names

root@241541:~# ls -l www.tar.gz
-rw-r--r-- 1 root root 12042534 Aug 13 18:43 www.tar.gz

备份数据库

cd
mysqldump -p --all-databases |gzip > mysql.sql.gz

root@241541:~# mysqldump -p --all-databases |gzip > mysql.sql.gz
Enter password:

root@241541:~# ls -l mysql.sql.gz
-rw-r--r-- 1 root root 133351 Aug 13 19:01 mysql.sql.gz

恢复站点

恢复站点配置文件

恢复Apache配置文件

cd
tar xzf apache2.tar.gz
cp -a etc/apache2 /etc/apache2

root@241541:~# cd
root@241541:~# tar xzf apache2.tar.gz
root@241541:~# cp -a etc/apache2 /etc/

service apache2 restart

恢复Nginx配置文件

cd
tar xzf nginx.tar.gz
cp -a etc/nginx /etc/nginx

root@241541:~# cd
root@241541:~# tar xzf nginx.tar.gz
root@241541:~# cp -a etc/nginx /etc/

service nginx restart

恢复Mysql配置文件

cd
tar xzf mysql.tar.gz
cp -a etc/mysql /etc/

root@241541:~# cd
root@241541:~# tar xzf mysql.tar.gz
root@241541:~# cp -a etc/mysql /etc/mysql

恢复站点文件

cd
tar xzf www.tar.gz
rm -fr /var/www/*
mv var/www/* /var/www/

root@241541:~# cd
root@241541:~# tar xzf www.tar.gz
root@241541:~# rm -fr /var/www/*
root@241541:~# mv var/www/* /var/www/

恢复数据库

cd
gunzip < mysql.sql.gz | mysql -p

root@241541:~# cd
root@241541:~# gunzip < mysql.sql.gz | mysql -p
Enter password:

使用 Dropbox 每天自动备份

注册 Dropbox

安装 Dropbox 客户端

cd ~ && wget -O - https://www.dropbox.com/download?plat=lnx.x86 | tar xzf -

cd ~ && wget -O - "https://www.dropbox.com/download?plat=lnx.x86_64"| tar xzf -

root@241541:~# cd ~ && wget -O - https://www.dropbox.com/download?plat=lnx.x86 | tar xzf -
--2012-02-22 06:44:40--  https://www.dropbox.com/download?plat=lnx.x86
Resolving www.dropbox.com... 199.47.217.171, 199.47.216.170, 199.47.216.171, ...
Connecting to www.dropbox.com|199.47.217.171|:80... connected.
HTTP request sent, awaiting response... 302 FOUND
Location: https://dl-web.dropbox.com/u/17/dropbox-lnx.x86-1.2.52.tar.gz [following]
--2012-02-22 06:44:40--  https://dl-web.dropbox.com/u/17/dropbox-lnx.x86-1.2.52.tar.gz
Resolving dl-web.dropbox.com... 107.20.132.92, 107.20.138.135, 107.20.170.126, ...
Connecting to dl-web.dropbox.com|107.20.132.92|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 15794278(15M)[application/x-tar]
Saving to: `STDOUT'

100%[======================================>] 15,794,278   893K/s   in 15s     

2012-02-22 06:44:57 (1.01 MB/s) - written to stdout [15794278/15794278]

设置帐号

~/.dropbox-dist/dropboxd

Please visit https://www.dropbox.com/cli_link?host_id=xxx&cl=en_US to link this machine.

Client successfully linked, Welcome xxx! 

root@241541:~# ~/.dropbox-dist/dropboxd 
This client is not linked to any account...
Please visit https://www.dropbox.com/cli_link?host_id=db0a5acabdf1fba62f360ffb8ebe910e&cl=en_US to link this machine.
This client is not linked to any account...
Please visit https://www.dropbox.com/cli_link?host_id=db0a5acabdf1fba62f360ffb8ebe910e&cl=en_US to link this machine.
This client is not linked to any account...
Please visit https://www.dropbox.com/cli_link?host_id=db0a5acabdf1fba62f360ffb8ebe910e&cl=en_US to link this machine.
This client is not linked to any account...
Please visit https://www.dropbox.com/cli_link?host_id=db0a5acabdf1fba62f360ffb8ebe910e&cl=en_US to link this machine.
Client successfully linked, Welcome guest!

开始使用

root@241541:~# ls
Dropbox
root@241541:~# cd Dropbox/
root@241541:~/Dropbox# ls
Getting Started.pdf  Photos  Public

root@241541:~/Dropbox# echo "Hello"> a.txt

root@241541:~/Dropbox# ~/.dropbox-dist/dropboxd 

自动运行 Dropbox

cat << "EOF"> /etc/init.d/dropbox
#!/bin/bash
# dropbox service
DAEMON=.dropbox-dist/dropboxd

start(){
echo"Starting dropbox..."
if[ -x /root/$DAEMON];then
HOME="/root" start-stop-daemon -b -o -c root -S -u root -x /root/$DAEMON
fi
}

stop(){
echo"Stopping dropbox..."
if[ -x /root/$DAEMON];then
        start-stop-daemon -o -c root -K -u root -x /root/$DAEMON
fi
}

status(){
dbpid=`pgrep -u root dropboxd`
if[ -z $dbpid];then
echo"dropboxd not running."
else
echo"dropboxd running (pid $dbpid)"
fi
}


case"$1" in
  start)
    start
;;

  stop)
    stop
;;

  restart|reload|force-reload)
    stop
    start
;;

  status)
    status
;;

  *)
echo"Usage: /etc/init.d/dropbox {start|stop|reload|force-reload|restart|status}"
exit 1

esac

exit 0
EOF

chmod +x /etc/init.d/dropbox
update-rc.d dropbox defaults
/etc/init.d/dropbox start

root@241541:~/Dropbox# sed -i "s/\r//" /etc/init.d/dropbox 
root@241541:~/Dropbox# chmod +x /etc/init.d/dropbox
root@241541:~/Dropbox# update-rc.d dropbox defaults
perl: warning: Setting locale failed.
perl: warning: Please check that your locale settings:
LANGUAGE=(unset),
LC_ALL=(unset),
LANG="zh_CN.UTF-8"
    are supported and installed on your system.
perl: warning: Falling back to the standard locale ("C").
update-rc.d: warning: /etc/init.d/dropbox missing LSB information
update-rc.d: see <http://wiki.debian.org/LSBInitScripts>
 Adding system startup for /etc/init.d/dropbox ...
   /etc/rc0.d/K20dropbox -> ../init.d/dropbox
   /etc/rc1.d/K20dropbox -> ../init.d/dropbox
   /etc/rc6.d/K20dropbox -> ../init.d/dropbox
   /etc/rc2.d/S20dropbox -> ../init.d/dropbox
   /etc/rc3.d/S20dropbox -> ../init.d/dropbox
   /etc/rc4.d/S20dropbox -> ../init.d/dropbox
   /etc/rc5.d/S20dropbox -> ../init.d/dropbox
root@241541:~/Dropbox# /etc/init.d/dropbox start
Starting dropbox...

自动每天备份数据库和站点

echo '#!/bin/bash'> /etc/cron.daily/dropboxbackup
echo 'tar czf /root/Dropbox/www.tar.gz /var/www'>>/etc/cron.daily/dropboxbackup
echo 'mysqldump -p数据库密码 --all-databases |gzip > /root/Dropbox/mysql.sql.gz'>>/etc/cron.daily/dropboxbackup
chmod +x /etc/cron.daily/dropboxbackup
service cron restart

root@241541:~# echo '#!/bin/bash'> /etc/cron.daily/dropboxbackup
root@241541:~# echo 'tar czf /root/Dropbox/www.tar.gz /var/www'>>/etc/cron.daily/dropboxbackup
root@241541:~# echo 'mysqldump -p123456 --all-databases |gzip > /root/Dropbox/mysql.sql.gz'>>/etc/cron.daily/dropboxbackup
root@241541:~# chmod +x /etc/cron.daily/dropboxbackup
root@241541:~# service cron restart 
Rather than invoking init scripts through /etc/init.d, use the service(8)
utility, e.g. service cron restart

Since the script you are attempting to invoke has been converted to an
Upstart job, you may also use the restart(8) utility, e.g. restart cron
cron start/running, process 3094

使用 BitTorrent Sync 备份系统

说明

安装

apt-get install python-software-properties
add-apt-repository ppa:tuxpoldo/btsync
apt-get update
apt-get install btsync

service btsync restart

使用

客户端安装

安装 Zend Guard Loader

cd ~
wget http://phpcj.googlecode.com/files/ZendGuardLoader.so
mkdir -p /usr/local/zend/
cp ZendGuardLoader.so /usr/local/zend/ZendGuardLoader.so
echo"zend_extension=/usr/local/zend/ZendGuardLoader.so"> /etc/php5/conf.d/zend.ini
echo"zend_loader.enable=1">> /etc/php5/conf.d/zend.ini

关于Zend Optimizer

php 降级

apt-get install aptitude lsb-release
php_installed=`dpkg -l | grep php| awk '{print $2}'|tr "\n"""`
aptitude purge $php_installed
echo -e "Package: php5\nPin: release a=karmic\nPin-Priority: 991\n"> /etc/apt/preferences.d/php 
apt-cache search php5-|grep php5-|awk '{print "Package:", $1,"\nPin: release a=karmic\nPin-Priority: 991\n"}'>> /etc/apt/preferences.d/php 
apt-cache search -n libapache2-mod-php5 |awk '{print "Package:", $1,"\nPin: release a=karmic\nPin-Priority: 991\n"}'>> /etc/apt/preferences.d/php 
echo -e "Package: php-pear\nPin: release a=karmic\nPin-Priority: 991\n">> /etc/apt/preferences.d/php 
egrep '(main restricted|universe|multiverse)' /etc/apt/sources.list|grep -v "#"| sed s/`lsb_release -s -c`/karmic/g | sed s/'http:\/\/.*\/'/'http:\/\/old-releases.ubuntu.com\/'/g > /etc/apt/sources.list.d/karmic.list
apt-get update
apt-get install $php_installed
aptitude hold `dpkg -l | grep php5| awk '{print $2}'|tr "\n"""`

Do you want to continue? [Y/n/?] 

php 高级安装技巧

aptitude install -t karmic php5-cli php5-cgi 

apt-get install -t karmic  libapache2-mod-php5

安装 Zend Optimizer

cd ~
wget http://downloads.zend.com/optimizer/3.3.3/ZendOptimizer-3.3.3-linux-glibc23-i386.tar.gz
tar zxvf ZendOptimizer-3.3.3-linux-glibc23-i386.tar.gz
mkdir -p /usr/local/zend/
cp ZendOptimizer-3.3.3-linux-glibc23-i386/data/5_2_x_comp/ZendOptimizer.so /usr/local/zend/
echo"zend_extension=/usr/local/zend/ZendOptimizer.so"> /etc/php5/conf.d/zend.ini

安装成功验证

php -v

root@241541:~# php -v
PHP 5.2.10-2ubuntu6 with Suhosin-Patch 0.9.7 (cli) (built: Oct 23 2009 16:30:10)

Copyright (c) 1997-2009 The PHP Group
Zend Engine v2.2.0, Copyright (c) 1998-2009 Zend Technologies
    with Zend Optimizer v3.3.3, Copyright (c) 1998-2007, by Zend Technologies

重启 Web 服务

service apache2 restart

service php5-fpm restart

额外支持

XEN VPS 增加交换分区大小

root@289085:~# free
             total       used       free     shared    buffers     cached
Mem:        5060884600846008003624      21944
-/+ buffers/cache:      20440     485648
Swap:       2621400     262140

dd if=/dev/zero of=/mnt/256M.swap bs=1M count=256
chmod 600 /mnt/256M.swap
mkswap /mnt/256M.swap
swapon /mnt/256M.swap
echo '/mnt/256M.swap  none  swap  sw  0 0'>> /etc/fstab

root@289085:~# free
             total       used       free     shared    buffers     cached
Mem:        50608831274019334803952     284180
-/+ buffers/cache:      24608     481480
Swap:       5242800     524280

配置 php 加速器

echo "extension=apc.so"> /etc/php5/conf.d/apc.ini
echo "apc.enabled=1">> /etc/php5/conf.d/apc.ini
echo "apc.shm_size=64M">> /etc/php5/conf.d/apc.ini
echo "apc.ttl=7200">> /etc/php5/conf.d/apc.ini

service apache2 restart

service php5-fpm restart

安装 JAVA

apt-get install openjdk-7-jdk

$ java -version
java version "1.7.0_25"
OpenJDK Runtime Environment (IcedTea 2.3.12) (7u25-2.3.12-4ubuntu3)
OpenJDK Client VM (build 23.7-b01, mixed mode, sharing)

update-alternatives --config java

日常维护

查看硬盘剩余空间大小

df

root@241541:/# df
Filesystem           1K-blocks      Used Available Use% Mounted on
/dev/simfs            20971520    583508  20388012   3% /

查看硬盘可用文件数

df -i

root@241541:/# df -i
Filesystem            Inodes   IUsed   IFree IUse% Mounted on
/dev/simfs            400000   26568  373432    7% /

查看内存剩余大小

free

root@241541:/# free
             total       used       free     shared    buffers     cached
Mem:        524800     245240     279560          0          0          0
-/+ buffers/cache:     245240     279560
Swap:            0          0          0

如何从其他网站上下载文件

wget "下载文件的链接地址"

wget http://download.comsenz.com/DiscuzX/2.0/Discuz_X2_SC_UTF8.zip

wget http://download.comsenz.com/DiscuzX/2.0/Discuz_X2_SC_UTF8.zip -O dz.zip

wget http://download.comsenz.com/DiscuzX/2.0/Discuz_X2_SC_UTF8.zip --referer=http://download.comsenz.com/

常用服务重启

service apache2 restart

service mysql restart

service nginx restart

service php5-fpm restart

查看内存被什么消耗

ps -eo vsz,rss,pid,cmd --sort -vsz|head -n 20

root@241541:~#  ps -eo vsz,rss,pid,cmd --sort -vsz|head -n 20
   VSZ   RSS   PID CMD
146384368601629 /usr/sbin/mysqld --basedir=/usr --datadir=/var/lib/mysql --user=mysql --pid-file=/var/run/mysqld/mysqld.pid --skip-external-locking --port=3306 --socket=/var/run/mysqld/mysqld.sock
6290836768026 nginx: worker process
6266028848027 nginx: cache manager process
62660340417440 nginx: master process /usr/sbin/nginx
50380111601517 /usr/sbin/named -u bind
339481307632345 /usr/bin/php-cgi
337961291232344 /usr/bin/php-cgi
337641282832351 /usr/bin/php-cgi
336841280432350 /usr/bin/php-cgi
328921201232346 /usr/bin/php-cgi
328921198432349 /usr/bin/php-cgi
28864795232347 /usr/bin/php-cgi
28864795632348 /usr/bin/php-cgi
27708562432342 /usr/bin/php-cgi
868819243089 sendmail: MTA: accepting connections          
8136292432338 /usr/sbin/sendmail -i -FCronDaemon -oem root
8096280420387 sshd: root@pts/0 
8096275623759 sshd: root@pts/1 
530410841547 /usr/sbin/sshd

动态显示系统程序情况

top

显示 

mysql 常用命令

mysqladmin -u root -p create 数据库名

mysqladmin -u root -p drop 数据库名

mysql> GRANT ALL PRIVILEGES ON 数据库名.* TO '用户名'@'%' IDENTIFIED BY '密码' WITH GRANT OPTION;

mysqlcheck -A --auto-repair -p

 mysql -p 数据库名 < xxxx.sql

mysqldump -p 数据库名 > xxxx.sql

mysqladmin -u root password '新密码'

在线解压缩

unzip xxx.zip

tar -xzvf xxx.tar.gz

tar -xjvf xxx.tar.bz2

tar -zcvf xxx.tar.gz aaa bbb

tar -jcvf xxx.tar.bz2 aaa bbb

封掉某个IP或IP段

iptables -t filter -I INPUT -s 192.168.2.0/24 -p tcp -j DROP
iptables -t filter -I INPUT -s 192.168.2.23 -p tcp -j DROP

查看日志

查看网络流量

apt-get install nload

更多命令参考

点击查看 Ubuntu 技巧

根据压力测试来调整最大并发数

测试内存的使用情况

root@241541:~# free
            total       used       free     shared    buffers     cached
Mem:        524800     296004     228796          0          0          0
-/+ buffers/cache:     296004     228796
Swap:            0          0          0

watch -n 1 free

安装压力测试软件

apt-get install apache2-utils

开始压力测试

watch -n 1 free

ab -n 100 -c 5 http://www.test.com/index.php

[root@241541 ~]# ab -n 100 -c 5 http://www.test.com/index.php
This is ApacheBench, Version 2.0.40-dev <$Revision: 1.146 $> apache-2.0
Copyright 1996 Adam Twiss, Zeus Technology Ltd, http://www.zeustech.net/
Copyright 2006 The Apache Software Foundation, http://www.apache.org/

Benchmarking www.test.com (be patient).....done


Server Software:        Apache/2.2.16
Server Hostname:        www.test.com
Server Port:            80

Document Path:          /index.php
Document Length:        56446 bytes

Concurrency Level:      5
Time taken for tests:   53.147069 seconds
Complete requests:      100
Failed requests:        0
Write errors:           0
Total transferred:      5721547 bytes
HTML transferred:       5695792 bytes
Requests per second:    1.88 [#/sec] (mean)
Time per request:       2657.354 [ms](mean)
Time per request:       531.471 [ms](mean, across all concurrent requests)
Transfer rate:          105.12 [Kbytes/sec] received

Connection Times (ms)
              min  mean[+/-sd] median   max
Connect:      218219   2.9    218     230
Processing:  14632407 258.5   2429    3126
Waiting:      4501280 217.7   1291    1832
Total:       16812627 258.6   2648    3344

Percentage of the requests served within a certain time(ms)
  50%   2648
  66%   2691
  75%   2759
  80%   2818
  90%   2885
  95%   3093
  98%   3339
  99%   3344
 100%   3344(longest request)

进一步压力测试

[root@241541 ~]# ab -n 100 -c 8 http://www.test.com/index.php
This is ApacheBench, Version 2.0.40-dev <$Revision: 1.146 $> apache-2.0
Copyright 1996 Adam Twiss, Zeus Technology Ltd, http://www.zeustech.net/
Copyright 2006 The Apache Software Foundation, http://www.apache.org/

Benchmarking www.test.com (be patient).....done


Server Software:        Apache/2.2.16
Server Hostname:        www.test.com
Server Port:            80

Document Path:          /index.php
Document Length:        56446 bytes

Concurrency Level:      8
Time taken for tests:   41.779898 seconds
Complete requests:      100
Failed requests:        0
Write errors:           0
Total transferred:      5670100 bytes
HTML transferred:       5644600 bytes
Requests per second:    2.39 [#/sec] (mean)
Time per request:       3342.392 [ms](mean)
Time per request:       417.799 [ms](mean, across all concurrent requests)
Transfer rate:          132.53 [Kbytes/sec] received

Connection Times (ms)
              min  mean[+/-sd] median   max
Connect:      218218   0.9    218     223
Processing:  16843021 461.5   3087    4525
Waiting:      4951820 418.3   1927    3165
Total:       19033239 461.6   3307    4744

Percentage of the requests served within a certain time(ms)
  50%   3307
  66%   3384
  75%   3452
  80%   3521
  90%   3654
  95%   3763
  98%   4695
  99%   4744
 100%   4744(longest request)

配置并发参数

常见故障

"Temporary failure resolving"或 正在解析主机...失败，未知的名称或服务

echo nameserver 208.67.222.222 > /etc/resolv.conf

echo dns-nameservers 208.67.222.222 >> /etc/network/interfaces

"locale: Cannot set LC_ALL to default locale: No such file or directory"

perl: warning: Setting locale failed.
perl: warning: Please check that your locale settings:
LANGUAGE=(unset),
LC_ALL=(unset),
LANG="zh_CN.UTF-8"
    are supported and installed on your system.
perl: warning: Falling back to the standard locale ("C").
locale: Cannot set LC_CTYPE to default locale: No such file or directory
locale: Cannot set LC_MESSAGES to default locale: No such file or directory
locale: Cannot set LC_ALL to default locale: No such file or directory

locale-gen --lang zh_CN.UTF-8
dpkg-reconfigure locales

修正时区

cp /usr/share/zoneinfo/Asia/Shanghai /etc/localtime

开启 GBK/GB2312 支持

echo "zh_CN.GBK GBK">> /var/lib/locales/supported.d/local 
echo "zh_CN.GB2312 GB2312">> /var/lib/locales/supported.d/local 

dpkg-reconfigure --force locales  

修复cron问题

#检查cron的任务文件名是否包括 . ，如果有扩展名会导致无法运行，
#可以使用如下命令检查 run-parts --test /etc/cron.daily
apt-get remove anacron
service cron restart

禁止执行的命令

rm -fr /

chmod -R 777 /

dd if=/dev/zero of=/dev/xxx

使用 mtr 检测网络丢包

• Ubuntu Linux

apt-get install mtr

• Centos Linux

yum install mtr

mtr -n --report 本地公网地址

VPS之间备份、下载、上传需要限速

常用软件限速

wget --limit-rate=1024k ......
scp -l  8196 ......
rsync -auvzP --bwlimit=1024 --size-only ......
lftp :~> set net:limit-rate 1024000,1024000

采用 trickle 限速

apt-get install trickle

trickle -d 1024 -u 1024 wget ....

trickle -d 1024 -u 1024 ~/.dropbox-dist/dropboxd

快速安装配置lnmp的命令

service apache2 stop
apt-get update
apt-get -y remove apache2 apache2.2-common

apt-get -y install php5-cgi php5-fpm php5-gd php5-mysql php5-curl php5-mcrypt php5-common php-apc mysql-server nginx

from http://wiki.ubuntu.com.cn/Vps