Linux/Unix

25 03 2024

Linux Apache Free SSL 적용방법

Haeng Ho Kang | OS, Linux/Unix

1) yum install epel-release 2) yum install certbot 3) ./apachectl stop 4) certbot certonly –standalone -d www.nuriware.com -d www.narettechnos.co.kr 5) # SSL Engine Switch: # Enable/Disable SSL for this virtual host. SSLEngine on SSLCertificateFile “/etc/letsencrypt/live/www.nuriware.com/cert.pem” SSLCertificateKeyFile “/etc/letsencrypt/live/www.nuriware.com/privkey.pem” SSLCertificateChainFile “/etc/letsencrypt/live/www.nuriware.com/chain.pem” 6) SSL 인증서 3개말다 갱신 certbot renew – cron tab에 등록한다.

13 01 2022

SSH 키 생성

Haeng Ho Kang | OS, Linux/Unix

SSH Key – 비밀번호 없이 로그인 SSH Key란? 서버에 접속 할 때 비밀번호 대신 key를 제출하는 방식이다. SSH Key는 언제 사용하는가? 비밀번호 보다 높은 수준의 보안을 필요로 할 때 로그인 없이 자동으로 서버에 접속 할 때 SSH Key가 동작하는 방식 SSH Key는 공개키(public key)와 비공개 키(private key)로 이루어지는데 이 두개의 관계를 이해하는 것이 SSH Key를 […]

2 01 2022

CentOS 8 + MySQL Install

Haeng Ho Kang | OS, DataBase, Linux/Unix, MySQL(MariaDB)

1.설치 – install mysql – [root@localhost /]# yum install mysql-server 2.서비스 시작 [root@localhost /]# systemctl start mysqld.service [root@localhost /]# systemctl start mysqld 3.서버 자동시작 4. 서버 재구동시 mysql 자동 서비스 구동 설정 5.패스워드 정책설정 최초설정- $ mysql_secure_installation 정책변경 – [root@localhost my.cnf.d]# cat mysql-server.cnf #Password Ploicy validate_password.policy=LOW 7.ssh 포트변경 – 1)selinux 완전 사용안함 변경 vi /etc/selinux/config SELINUX=disabled […]

21 04 2021

Centos 7 firewall-cmd

Haeng Ho Kang | OS, Linux/Unix

1)add port firewall-cmd –permanent –zone=public –add-port=80/tcp firewall-cmd –reload (설정적용) firewall-cmd –list-all (확인) 2)remove port firewall-cmd –permanent –zone=public –remove-port=80/tcp

14 04 2021

Cloud9 volume 확장

Haeng Ho Kang | OS, Linux/Unix

xvda 일경우 1) ec2 의 스토리지로 가서 볼륨확장후 – xvda ec2-user:~/environment $ sudo growpart /dev/xvda 1 – /dev/nvme0n1 일경우 ec2-user:~/environment $ sudo growpart /dev/nvme0n1 1 ec2-user:~/environment $ sudo xfs_growfs -d /

12 04 2021

Centos public key connect

Haeng Ho Kang | OS, Linux/Unix

1.Client [root@client ~]#ssh-kegen -t rsa ssh-copy-id -i .ssh/id_rsa.pub root@서버 그리고 바로 ssh root@서버 해서 로그인하면 키없이 로그인가능한 상태입니다.

25 02 2021

Centos7 apache install (수동설치)

Haeng Ho Kang | OS, Server, Linux/Unix, Web

root권한으로 실행합니다. 1.필수 라이브러리 설치

[root@hae app]# yum install gcc gcc-c++ expat-devel.x86_64 pcre-devel

1	[root@hae app]# yum install gcc gcc-c++ expat-devel.x86_64 pcre-devel

3.apr, apr-util, pcre,httpd 다운로드 및 컴파일

[root@hae install]#  wget http://mirror.apache-kr.org/httpd/httpd-2.4.46.tar.gz
[root@hae install]# wget http://mirror.apache-kr.org/apr/apr-1.7.0.tar.gz
[root@hae install]#  wget http://mirror.apache-kr.org/apr/apr-util-1.6.1.tar.gz
[root@hae install]# wget https://sourceforge.net/projects/pcre/files/pcre/8.44/pcre-8.44.tar.gz

[root@hae install]# tar zxvf apr-1.7.0.tar.gz
[root@hae install]# tar zxvf apr-util-1.6.1.tar.gz
[root@hae install]# tar zxvf httpd-2.4.46.tar.gz
[root@hae install]# tar zxvf pcre-8.44.tar.gz 

[root@hae install]# mv apr-1.7.0 apr-util-1.6.1 pcre-8.44 httpd-2.4.46 /usr/local/src

[root@hae install]# cd /usr/local/src/
[root@hae src]# ls
apr-1.7.0  apr-util-1.6.1  pcre-8.44

- apr install
[root@hae src]# cd apr-1.7.0/
[root@hae apr-1.7.0]# ./configure --prefix=/usr/local/src/apr-1.7.0
[root@hae apr-1.7.0]# make && make install

- apr-util install
[root@hae src]# cd apr-util-1.6.1/
[root@hae apr-util-1.6.1]# ./configure --prefix=/usr/local/src/apr-util-1.6.1 --with-apr=/usr/local/src/apr-1.7.0
[root@hae apr-util-1.6.1]# make && make install

- pcre install
[root@hae src]# cd pcre-8.44/
[root@hae pcre-8.44]# ./configure --prefix=/usr/local/src/apr-util-1.6.1 --with-apr=/usr/local/src/apr-1.7.0
[root@hae pcre-8.44]# make && make install

- apache install
[root@hae src]# cd httpd-2.4.46/
[root@hae httpd-2.4.46]#./configure --prefix=/app/web/apache2 --enable-so --enable-rewrite --enable-proxy --enable-ssl --enable-mods-shared=all --enable-modules=shared --with-apr=/usr/local/src/apr-1.7.0 --with-apr-util=/usr/local/src/apr-util-1.6.1
[root@hae httpd-2.4.46]# make && make install

[root@hae install]# wget http://mirror.apache-kr.org/httpd/httpd-2.4.46.tar.gz

[root@hae install]# wget http://mirror.apache-kr.org/apr/apr-1.7.0.tar.gz

[root@hae install]# wget http://mirror.apache-kr.org/apr/apr-util-1.6.1.tar.gz

[root@hae install]# wget https://sourceforge.net/projects/pcre/files/pcre/8.44/pcre-8.44.tar.gz

[root@hae install]# tar zxvf apr-1.7.0.tar.gz

[root@hae install]# tar zxvf apr-util-1.6.1.tar.gz

[root@hae install]# tar zxvf httpd-2.4.46.tar.gz

[root@hae install]# tar zxvf pcre-8.44.tar.gz

[root@hae install]# mv apr-1.7.0 apr-util-1.6.1 pcre-8.44 httpd-2.4.46 /usr/local/src

[root@hae install]# cd /usr/local/src/

[root@hae src]# ls

apr-1.7.0 apr-util-1.6.1 pcre-8.44

- apr install

[root@hae src]# cd apr-1.7.0/

[root@hae apr-1.7.0]# ./configure --prefix=/usr/local/src/apr-1.7.0

[root@hae apr-1.7.0]# make && make install

- apr-util install

[root@hae src]# cd apr-util-1.6.1/

[root@hae apr-util-1.6.1]# ./configure --prefix=/usr/local/src/apr-util-1.6.1 --with-apr=/usr/local/src/apr-1.7.0

[root@hae apr-util-1.6.1]# make && make install

- pcre install

[root@hae src]# cd pcre-8.44/

[root@hae pcre-8.44]# ./configure --prefix=/usr/local/src/apr-util-1.6.1 --with-apr=/usr/local/src/apr-1.7.0

[root@hae pcre-8.44]# make && make install

- apache install

[root@hae src]# cd httpd-2.4.46/

[root@hae httpd-2.4.46]#./configure --prefix=/app/web/apache2 --enable-so --enable-rewrite --enable-proxy --enable-ssl --enable-mods-shared=all --enable-modules=shared --with-apr=/usr/local/src/apr-1.7.0 --with-apr-util=/usr/local/src/apr-util-1.6.1

[root@hae httpd-2.4.46]# make && make install

작동확인 [root@hae bin]# cd /app/web/apache2/bin [root@hae bin]# ./apachectl start [root@hae bin]# netstat -tulpn | grep LISTEN tcp 0 0 0.0.0.0:7990 0.0.0.0:* LISTEN 9188/ssh tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 1001/sshd tcp 0 0 127.0.0.1:25 0.0.0.0:* LISTEN 1595/master tcp 0 0 0.0.0.0:3389 […]

24 02 2021

Linux mount/umount

Haeng Ho Kang | OS, Linux/Unix

mount 확인후 할당

[root@test etc]# fdisk -l

Disk /dev/sdb: 256.1 GB, 256060514304 bytes, 500118192 sectors
Units = sectors of 1 * 512 = 512 bytes
Sector size (logical/physical): 512 bytes / 512 bytes
I/O size (minimum/optimal): 512 bytes / 512 bytes
Disk label type: dos
Disk identifier: 0x00085ecd

   Device Boot      Start         End      Blocks   Id  System
/dev/sdb1            2048   500117503   250057728   83  Linux

Disk /dev/sdc: 2000.4 GB, 2000398934016 bytes, 3907029168 sectors
Units = sectors of 1 * 512 = 512 bytes
Sector size (logical/physical): 512 bytes / 4096 bytes
I/O size (minimum/optimal): 4096 bytes / 4096 bytes
Disk label type: dos
Disk identifier: 0x0009f1b1

   Device Boot      Start         End      Blocks   Id  System
/dev/sdc1            2048  3907028991  1953513472   83  Linux

Disk /dev/sda: 256.1 GB, 256060514304 bytes, 500118192 sectors
Units = sectors of 1 * 512 = 512 bytes
Sector size (logical/physical): 512 bytes / 512 bytes
I/O size (minimum/optimal): 512 bytes / 512 bytes
Disk label type: dos
Disk identifier: 0x0001e6f8

   Device Boot      Start         End      Blocks   Id  System
/dev/sda1   *        2048     2099199     1048576   83  Linux
/dev/sda2         2099200   466563071   232231936   83  Linux
/dev/sda3       466563072   500117503    16777216   82  Linux swap / Solaris
[root@test etc]# df
Filesystem      1K-blocks    Used  Available Use% Mounted on
devtmpfs         16359468       0   16359468   0% /dev
tmpfs            16369908       0   16369908   0% /dev/shm
tmpfs            16369908  115444   16254464   1% /run
tmpfs            16369908       0   16369908   0% /sys/fs/cgroup
/dev/sda2       228455892 6355972  210471940   3% /
/dev/sdb1       246002848   60572  233423008   1% /backup1
/dev/sda1          999320  147456     783052  16% /boot
/dev/sdc1      1922728752 6486828 1818549868   1% /backup2
tmpfs             3273984       0    3273984   0% /run/user/0
[root@test etc]# vi /etc/fstab
[root@test etc]# umount /dev/sdc1
[root@test etc]# df
Filesystem     1K-blocks    Used Available Use% Mounted on
devtmpfs        16359468       0  16359468   0% /dev
tmpfs           16369908       0  16369908   0% /dev/shm
tmpfs           16369908  115444  16254464   1% /run
tmpfs           16369908       0  16369908   0% /sys/fs/cgroup
/dev/sda2      228455892 6355988 210471924   3% /
/dev/sdb1      246002848   60572 233423008   1% /backup1
/dev/sda1         999320  147456    783052  16% /boot
tmpfs            3273984       0   3273984   0% /run/user/0
[root@test etc]# mount /dev/sdc1 /app
mount: mount point /app does not exist
[root@test etc]# cd /
[root@test /]# mkdir app
[root@test /]# mount /dev/sdc1 /app

[root@test etc]# fdisk -l

Disk /dev/sdb: 256.1 GB, 256060514304 bytes, 500118192 sectors

Units = sectors of 1 * 512 = 512 bytes

Sector size (logical/physical): 512 bytes / 512 bytes

I/O size (minimum/optimal): 512 bytes / 512 bytes

Disk label type: dos

Disk identifier: 0x00085ecd

Device Boot Start End Blocks Id System

/dev/sdb1 2048 500117503 250057728 83 Linux

Disk /dev/sdc: 2000.4 GB, 2000398934016 bytes, 3907029168 sectors

Units = sectors of 1 * 512 = 512 bytes

Sector size (logical/physical): 512 bytes / 4096 bytes

I/O size (minimum/optimal): 4096 bytes / 4096 bytes

Disk label type: dos

Disk identifier: 0x0009f1b1

Device Boot Start End Blocks Id System

/dev/sdc1 2048 3907028991 1953513472 83 Linux

Disk /dev/sda: 256.1 GB, 256060514304 bytes, 500118192 sectors

Units = sectors of 1 * 512 = 512 bytes

Sector size (logical/physical): 512 bytes / 512 bytes

I/O size (minimum/optimal): 512 bytes / 512 bytes

Disk label type: dos

Disk identifier: 0x0001e6f8

Device Boot Start End Blocks Id System

/dev/sda1 * 2048 2099199 1048576 83 Linux

/dev/sda2 2099200 466563071 232231936 83 Linux

/dev/sda3 466563072 500117503 16777216 82 Linux swap / Solaris

[root@test etc]# df

Filesystem 1K-blocks Used Available Use% Mounted on

devtmpfs 16359468 0 16359468 0% /dev

tmpfs 16369908 0 16369908 0% /dev/shm

tmpfs 16369908 115444 16254464 1% /run

tmpfs 16369908 0 16369908 0% /sys/fs/cgroup

/dev/sda2 228455892 6355972 210471940 3% /

/dev/sdb1 246002848 60572 233423008 1% /backup1

/dev/sda1 999320 147456 783052 16% /boot

/dev/sdc1 1922728752 6486828 1818549868 1% /backup2

tmpfs 3273984 0 3273984 0% /run/user/0

[root@test etc]# vi /etc/fstab

[root@test etc]# umount /dev/sdc1

[root@test etc]# df

Filesystem 1K-blocks Used Available Use% Mounted on

devtmpfs 16359468 0 16359468 0% /dev

tmpfs 16369908 0 16369908 0% /dev/shm

tmpfs 16369908 115444 16254464 1% /run

tmpfs 16369908 0 16369908 0% /sys/fs/cgroup

/dev/sda2 228455892 6355988 210471924 3% /

/dev/sdb1 246002848 60572 233423008 1% /backup1

/dev/sda1 999320 147456 783052 16% /boot

tmpfs 3273984 0 3273984 0% /run/user/0

[root@test etc]# mount /dev/sdc1 /app

mount: mount point /app does not exist

[root@test etc]# cd /

[root@test /]# mkdir app

[root@test /]# mount /dev/sdc1 /app

리부팅할경우도 마운트 유지 Auto mount (case restart) [root@test /]# vi /etc/fstab

# /etc/fstab
# Created by anaconda on Tue Feb 16 19:12:05 2021
#
# Accessible filesystems, by reference, are maintained under '/dev/disk'
# See man pages fstab(5), findfs(8), mount(8) and/or blkid(8) for more info
#
UUID=44821e00-59a5-4d92-a1a8-10c9154cc5ca /                       ext4    defaults        1 1
UUID=fd18a2c6-d9b5-45ae-8050-80e600a161a8 /boot                   ext4    defaults        1 2
UUID=46b1cbd5-2d3d-43ac-891e-7484419ee4cb swap                    swap    defaults        0 0
/dev/sdb1                                 /backup1                ext4    defaults        2 1
/dev/sdc1                                 /app                    ext4    defaults        3 1
~

# /etc/fstab

# Created by anaconda on Tue Feb 16 19:12:05 2021

# Accessible filesystems, by reference, are maintained under '/dev/disk'

# See man pages fstab(5), findfs(8), mount(8) and/or blkid(8) for more info

UUID=44821e00-59a5-4d92-a1a8-10c9154cc5ca / ext4 defaults 1 1

UUID=fd18a2c6-d9b5-45ae-8050-80e600a161a8 /boot ext4 defaults 1 2

UUID=46b1cbd5-2d3d-43ac-891e-7484419ee4cb swap swap defaults 0 0

/dev/sdb1 /backup1 ext4 defaults 2 1

/dev/sdc1 /app ext4 defaults 3 1

19 02 2021

Linux Centos 8 apache install

Haeng Ho Kang | OS, Server, Linux/Unix, Web

1) yum install httpd 2) 확인 [root@hae sbin]# httpd -version Server version: Apache/2.4.6 (CentOS) Server built: Nov 16 2020 16:18:20 3) 방화벽설정 [root@hae sbin]# firewall-cmd – -state running [root@hae conf]# firewall-cmd – -permanent – -add-service=http success [root@hae conf]# firewall-cmd – -permanent – -add-service=https success [root@hae conf]# firewall-cmd – -reload success [root@hae conf]# systemctl enable httpd […]

19 02 2021

Linux(CentOS) open java 8 install

Haeng Ho Kang | OS, Linux/Unix

1.java 확인 [root@hae bin]# which java /usr/bin/java 2.없을 경우 yum install [root@hae ~]# yum install java-1.8.0-openjdk 3.확인 [root@hae ~]# which java /usr/bin/java [root@hae ~]# cd /usr/bin [root@hae bin]# ls -al|grep java lrwxrwxrwx. 1 root root 26 Feb 19 19:25 alt-java -> /etc/alternatives/alt-java lrwxrwxrwx. 1 root root 22 Feb 19 19:25 java -> /etc/alternatives/java [root@hae bin]# […]