- CentOS6
临时关闭
service iptables stop
禁止开机启动
chkconfig iptables off
- CentOS7默认使用firewalld
临时关闭
systemctl stop firewalld
禁止开机启动
systemctl disable firewalld
Removed symlink /etc/systemd/system/multi-user.target.wants/firewalld.service.
Removed symlink /etc/systemd/system/dbus-org.fedoraproject.FirewallD1.service.
- iptables-service
安装iptables
yum install -y iptables-services
关闭防火墙
service iptables stop
检查防火墙状态
service iptables status
修改CentOS默认yum源为mirrors.163.com
1、首先备份系统自带yum源配置文件/etc/yum.repos.d/CentOS-Base.repo
mv /etc/yum.repos.d/CentOS-Base.repo /etc/yum.repos.d/CentOS-Base.repo.backup
2、进入yum源配置文件所在的文件夹
cd /etc/yum.repos.d/
3、下载163的yum源配置文件到上面那个文件夹内
CentOS7
wget http://mirrors.163.com/.help/CentOS7-Base-163.repo
CentOS6
wget http://mirrors.163.com/.help/CentOS6-Base-163.repo
CentOS5
yum.repos.d]# wget http://mirrors.163.com/.help/CentOS5-Base-163.repo
4、运行yum makecache生成缓存
yum makecache
5、这时候再更新系统就会看到以下mirrors.163.com信息
yum -y update
已加载插件：fastestmirror, refresh-packagekit, security
设置更新进程Loading mirror speeds from cached hostfile
* base: mirrors.163.com
* extras: mirrors.163.com
* updates: mirrors.163.com
修改CentOS默认yum源为mirrors.aliyun.com
1、首先备份系统自带yum源配置文件/etc/yum.repos.d/CentOS-Base.repo
mv /etc/yum.repos.d/CentOS-Base.repo /etc/yum.repos.d/CentOS-Base.repo.backup
2、下载ailiyun的yum源配置文件到/etc/yum.repos.d/
CentOS7
wget -O /etc/yum.repos.d/CentOS-Base.repo http://mirrors.aliyun.com/repo/Centos-7.repo
CentOS6
wget -O /etc/yum.repos.d/CentOS-Base.repo http://mirrors.aliyun.com/repo/Centos-6.repo
CentOS5
wget -O /etc/yum.repos.d/CentOS-Base.repo http://mirrors.aliyun.com/repo/Centos-5.repo
3、运行yum makecache生成缓存
yum makecache
4、这时候再更新系统就会看到mirrors.aliyun.com信息
remove vim-common
apt-get remove vim-common
install vim full
apt-get install vim
docker pull fcojean/l2tp-ipsec-vpn-server
创建env
vi vpn.env
VPN_IPSEC_PSK=nonnix.com
VPN_USER_CREDENTIAL_LIST=[{"login":"uesr","password":"ssfq"},{"login":"tsi","password":"ssfq"},{"login":"vpn","password":"ssfq"}]
加载 IPsec NETKEY 内核模块
modprobe af_key
加载env配置文件，将对应端口与服务器端口绑定
docker run \
--name l2tp-ipsec-vpn-server \
--env-file ./vpn.env \
-p 500:500/udp \
-p 4500:4500/udp \
-v /lib/modules:/lib/modules:ro \
-d --privileged \
fcojean/l2tp-ipsec-vpn-server
查看VPN状态
docker logs vpn-server
查看和关闭防火墙，需开放500端口和4500端口
systemctl status firewalld
systemctl stop firewalld
Docker Hub 的服务器在国外,比较慢,可以用 DaoCloud.io免费的国内镜像服务，官方参考https://docs.docker.com/engine/installation/
环境：Docker Engine + runc + Ubuntu1804lts
检查服务器版本
uname -a
cat /proc/version
lsb_release -a
移除旧版本
apt-get remove docker docker-engine docker-ce docker.io
安装新版本，使apt可以通过HTTPS使用存储库（repository）
apt-get update
apt-get install -y apt-transport-https ca-certificates curl software-properties-common
Install packages to allow apt to use a repository over HTTPS
apt-get install \
> apt-transport-https \
> ca-certificates \
> curl \
> software-properties-common
添加Docker官方的GPG密钥
curl -fsSL https://download.docker.com/linux/ubuntu/gpg | sudo apt-key add -
如果Ubuntu 18.04 LTS (Bionic Beaver) docker package is not available，则通过如下语句安装stable存储库
add-apt-repository "deb [arch=amd64] https://download.docker.com/linux/ubuntu artful stable"
安装docker-ce
apt-get install -y docker-ce
也可查看可用版本并安装
apt-cache madison docker-ce
apt-get install docker-ce=<VERSION>
查看服务和启动
systemctl status docker
systemctl start docker
systemctl restart docker.service
测试Hello World
docker run hello-world
查看本地Docker镜像库
docker images
安装Apache并测试http://IP
docker run -d -p 80:80 httpd