{"id":1450,"date":"2017-06-15T17:51:21","date_gmt":"2017-06-15T08:51:21","guid":{"rendered":"http:\/\/okamurax.com\/?p=1450"},"modified":"2021-11-02T15:40:51","modified_gmt":"2021-11-02T06:40:51","slug":"centos%e5%9f%ba%e7%a4%8e","status":"publish","type":"post","link":"https:\/\/appbay.org\/?p=1450","title":{"rendered":"CentOS \u521d\u671f\u8a2d\u5b9a"},"content":{"rendered":"

\u57fa\u672c\u30b3\u30de\u30f3\u30c9<\/h2>\n

\u30fb\u8d77\u52d5<\/p>\n

CentOS6\u307e\u3067
\n\/etc\/init.d\/xxx start\u3000\uff087\u306f\u4f7f\u3048\u306a\u3044\uff09<\/span>
\nservice xxx start\u3000\uff08\uff17\u306fsystemctl\u306b\u30ea\u30c0\u30a4\u30ec\u30af\u30c8\uff09<\/span>
\nCentOS7\u3067\u306f
\nsystemctl\u3068\u306a\u308b\u3002<\/span><\/p>\n

\u30fb\u81ea\u52d5\u8d77\u52d5<\/p>\n

CentOS6\u307e\u3067
\nchkconfig xxx on | off\u3000\uff08\uff17\u306fsystemctl\u306b\u30ea\u30c0\u30a4\u30ec\u30af\u30c8\uff09<\/span>
\nCentOS7\u3067\u306f
\nsystemctl\u3068\u306a\u308b\u3002<\/span><\/p>\n

yum\u3068rpm<\/h2>\n

yum\u306e\u5185\u90e8\u3067rpm\u304c\u547c\u3070\u308c\u3066\u3044\u308b\u3002<\/p>\n

\u5229\u7528\u53ef\u80fd\u304b\u3069\u3046\u304b\u3068\u3001\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u6e08\u307f\u4e21\u65b9\u8868\u793a\u3002
\nyum list xxx<\/span><\/p>\n

\u30d1\u30c3\u30b1\u30fc\u30b8\u3092\u63a2\u3059
\nyum search xxx<\/span><\/p>\n

\u30d1\u30c3\u30b1\u30fc\u30b8\u60c5\u5831
\nyum info<\/span><\/p>\n

yum -y install php<\/span>
\n(-y\u306f\u5168\u3066yes\u56de\u7b54)<\/p>\n

yum remove xxx
\n\u524a\u9664\u3059\u308b\u5834\u5408<\/p>\n

\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8
\nyum update<\/span>
\nyum update xxx<\/span><\/p>\n

\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u6e08\u307f\u3067\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u304c\u3042\u308b\u304b\u3069\u3046\u304b
\nyum check-update<\/span><\/p>\n

SSH\u306e\u8a2d\u5b9a<\/h2>\n

\u57fa\u672c\u306f\u305d\u306e\u307e\u307e\u63a5\u7d9a\u3067\u304d\u308b\u306f\u305a\u3001VirtualBox\u306b\u63a5\u7d9a\u306e\u5834\u5408\u3001
\n\u8a2d\u5b9a\uff1e\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\uff1e\u5272\u308a\u5f53\u3066<\/span>
\n\u3092\u30d6\u30ea\u30c3\u30b8\u30a2\u30c0\u30d7\u30bf\u30fc\u306b\u5909\u66f4\u3057\u3066\u3001\u81ea\u52d5\u53d6\u5f97\u306eIP\u306b\u7e4b\u3052\u308c\u3070\u5927\u4e08\u592b\u3002<\/p>\n

\u30fbSSH\u306e\u72b6\u614b\u78ba\u8a8d
\nsystemctl status sshd.service<\/span><\/p>\n

\u30fb\u30d5\u30a1\u30a4\u30a2\u30fc\u30a6\u30a9\u30fc\u30eb\u306e\u78ba\u8a8d
\nfirewall-cmd –list-all<\/span><\/p>\n

\u30fbroot\u306e\u30d1\u30b9\u30ef\u30fc\u30c9\u8a8d\u8a3c\u3092\u4e0d\u53ef\u306b\u3059\u308b\u3002<\/p>\n

PasswordAuthentication no
\nChallengeResponseAuthentication no<\/p>\n

\u306b\u306a\u3063\u3066\u3044\u308b\u304b\u3069\u3046\u304b\u78ba\u8a8d\u3002<\/p>\n

\u30e6\u30fc\u30b6\u30fc\u3092\u8ffd\u52a0\u3057\u3001
\nPermitRootLogin no
\n\u306b\u3059\u308b\u304broot\u306e\u307e\u307e\u306b\u3059\u308b\u306a\u3089\u3001
\nPermitRootLogin without-password
\n\u306b\u3059\u308b\u3002<\/p>\n

\u30fb\u30dd\u30fc\u30c8\u756a\u53f7\u5909\u66f4(49152 \u2013 65535\u8fba\u308a)<\/p>\n

firewall-cmd –add-port=49152\/tcp –zone=public –permanent
\nfirewall-cmd –reload
\n\u30dd\u30fc\u30c8\u3092\u958b\u3051\u308b\u3002<\/p>\n

systemctl restart sshd<\/p>\n

\u73fe\u5728\u306e\u63a5\u7d9a\u3092\u5207\u308b\u524d\u306b\u63a5\u7d9a\u3067\u304d\u308b\u304b\u8a66\u3059\u3002<\/p>\n

\u554f\u984c\u306a\u3051\u308c\u3070\u30dd\u30fc\u30c8\u3092\u9589\u3058\u308b\u3002<\/p>\n

firewall-cmd –remove-service=ssh –zone=public –permanent
\nfirewall-cmd –reload<\/p>\n

\u30fb\u518d\u8d77\u52d5<\/p>\n

systemctl restart sshd
\nsystemctl enable sshd<\/p>\n

firewalld<\/h2>\n

public\u30be\u30fc\u30f3\u306bnic\u304c\u5272\u308a\u5f53\u3066\u3066\u3042\u308b\u304b\u78ba\u8a8d\u3002
\n(active)\u306f\u6709\u52b9\u304b\u3069\u3046\u304b\u3068\u3044\u3046\u610f\u5473\u3067\u306f\u306a\u304f\u3001\u30be\u30fc\u30f3\u6307\u5b9a\u3057\u306a\u3044\u3068\u304d\u306e\u5bfe\u8c61\u304b\u3069\u3046\u304b\u3068\u3044\u3046\u610f\u5473\u3002<\/p>\n

\u5b9a\u7fa9\u3055\u308c\u3066\u3044\u308b\u30b5\u30fc\u30d3\u30b9
\nfirewall-cmd –get-services<\/span><\/p>\n

\u8a31\u53ef\u3055\u308c\u3066\u3044\u308b\u60c5\u5831
\nfirewall-cmd –list-all –zone=public<\/span>
\n–list-all<\/span>
\n–list-services<\/span>
\n–list-port<\/span><\/p>\n

\u30ea\u30ed\u30fc\u30c9
\nfirewall-cmd –reload<\/span><\/p>\n

\u30b5\u30fc\u30d3\u30b9\u3092\u8a31\u53ef\u3059\u308b
\nfirewall-cmd –add-service=http –zone=public –permanent<\/span><\/p>\n

\u8a31\u53ef\u3057\u305f\u30b5\u30fc\u30d3\u30b9\u3092\u524a\u9664
\nfirewall-cmd –remove-service=http –zone=public –permanent<\/span><\/p>\n

\u8a31\u53ef\u3059\u308b\u30dd\u30fc\u30c8\u306e\u8ffd\u52a0
\nfirewall-cmd –add-port=22\/tcp –zone=public –permanent<\/span><\/p>\n

\u30dd\u30fc\u30c8\u3092\u8ffd\u52a0\u3002(\u63a5\u7d9a\u5143\u3092\u6307\u5b9a\u3059\u308b\u5834\u5408)
\nfirewall-cmd –permanent –zone=public –add-rich-rule=”rule family=ipv4 source address=192.168.13.2 port protocol=tcp port=80 accept”<\/p>\n

\u8a31\u53ef\u3059\u308b\u30dd\u30fc\u30c8\u306e\u524a\u9664
\nfirewall-cmd –remove-port=22\/tcp –zone=public –permanent<\/span><\/p>\n

\u5b9a\u7fa9\u6e08\u307f\u30b5\u30fc\u30d3\u30b9(\u7de8\u96c6\u306f\u3057\u306a\u3044)
\n\/usr\/lib\/firewalld\/services<\/span><\/p>\n

\u5b9a\u7fa9\u6e08\u307f\u30be\u30fc\u30f3\u306e\u78ba\u8a8d
\nfirewall-cmd –list-all-zones<\/span><\/p>\n

\u30a2\u30af\u30c6\u30a3\u30d6\u306a\u30be\u30fc\u30f3\u306e\u78ba\u8a8d
\nfirewall<\/span><\/span>–<\/span>cmd<\/span> —<\/span>get<\/span>–<\/span>active<\/span>–<\/span>zones<\/span><\/span><\/p>\n

Nic\u306b\u5bfe\u3059\u308b\u30c7\u30d5\u30a9\u30eb\u30c8\u30be\u30fc\u30f3\u306e\u78ba\u8a8d
\nfirewall-cmd –get-default-zone<\/span><\/p>\n

NIC\u306e\u30be\u30fc\u30f3\u3092\u5909\u3048\u308b(permanet\u304c\u4e0d\u8981\u3068\u3044\u3046\u8a18\u4e8b\u3042\u308b\u8981\u78ba\u8a8d)
\nfirewall-cmd –change-interface=lo –zone=public
\n<\/span><\/p>\n

NIC\u3092\u30be\u30fc\u30f3\u304b\u3089\u524a\u9664(permanet\u304c\u4e0d\u8981\u3068\u3044\u3046\u8a18\u4e8b\u3042\u308b\u8981\u78ba\u8a8d)
\nfirewall-cmd –remove-interface=lo<\/span><\/p>\n

\u3060\u3044\u305f\u3044\u306e\u6d41\u308c\u3002\u672c\u6765\u30b5\u30fc\u30d3\u30b9\u767b\u9332\u306a\u3093\u3060\u308d\u3046\u3051\u3069\u3002<\/p>\n

\u767b\u9332\u6e08\u307f\u306e\u30b5\u30fc\u30d3\u30b9\u3092\u6d88\u3059\u3002
\nfirewall-cmd –remove-service=http –zone=public –permanent<\/span>
\nfirewall-cmd –remove-service=ssh –zone=public –permanent<\/span>
\nfirewall-cmd –remove-service=dhcpv6-client –zone=public –permanent<\/span><\/p>\n

\u5fc5\u8981\u306a\u30dd\u30fc\u30c8\u8ffd\u52a0\u3002
\nfirewall-cmd –add-port=54424\/tcp –zone=public –permanent<\/span>
\nfirewall-cmd –add-port=80\/tcp –zone=public –permanent<\/span><\/p>\n

\u30fb\u30bf\u30fc\u30b2\u30c3\u30c8<\/p>\n

\u5b9a\u7fa9\u306b\u30de\u30c3\u30c1\u3057\u306a\u3044\u30d1\u30b1\u30c3\u30c8\u3092\u3069\u3046\u3059\u308b\u304b\u3092\u30bf\u30fc\u30b2\u30c3\u30c8\u3068\u3044\u3044\u3001ACCEPT,DROP,REJECT(default)\u304c\u3042\u308b\u3002<\/p>\n

ACCEPT\uff1a\u5168\u3066\u8a31\u53ef\u3002
\nDROP\uff1a\u62d2\u5426\u30eb\u30fc\u30eb\u306b\u8a72\u5f53\u3059\u308b\u3068\u62d2\u5426\u3002
\nREJECT\uff1a\u62d2\u5426\u30eb\u30fc\u30eb\u306b\u8a72\u5f53\u3059\u308b\u3068\u62d2\u5426\u3002(\u30a8\u30e9\u30fc\u30b3\u30fc\u30c9\u3092\u8fd4\u3059)<\/p>\n

vimrc<\/h2>\n

vimrc\u3092\u4f5c\u6210\u3057\u4ee5\u4e0b\u3092\u8a18\u8ff0\u3002
\nUbuntu\u3068\u307b\u307c\u540c\u3058\u3067\u81ea\u52d5\u88dc\u5b8c\u306e\u90e8\u5206\u3092\u524a\u9664\u3002<\/p>\n

set t_Co=256\r\n\r\nautocmd VimEnter,ColorScheme * highlight cursorline cterm=none ctermbg=darkblue | highlight pmenu ctermbg=darkgrey | highlight pmenusel ctermbg=grey\r\n\r\ncolorscheme pablo\r\nsyntax enable\r\n\r\nset enc=utf8\r\nset ignorecase\r\nset incsearch\r\nset hlsearch\r\nset showmatch\r\nset number\r\nset visualbell\r\nset cursorline\r\n\r\nset autoindent\r\nset shiftwidth=2\r\nset tabstop=2\r\nset softtabstop=0\r\n\r\nset nowritebackup\r\nset nobackup\r\nset noswapfile\r\n\r\nset completeopt=menuone<\/pre>\n
bashrc<\/h2>\n
Ubuntu\u304b\u3089\u5fc5\u8981\u6700\u4f4e\u9650\u306e\u307f\u6301\u3063\u3066\u304d\u305f\u3002<\/p>\n
alias f='clear;stat --format \"%a %U:%G %n\" * '\r\nalias l=\"clear;ls -lh --color=always | less -F -R -S -X\"\r\nalias h=\"clear;history | sort -r | less -F -R -S -X\"\r\nalias c=\"clear;cd $1\"<\/pre>\n
LAMP<\/h2>\n
CentOS(ConoHa) \u521d\u671f\u8a2d\u5b9a LAMP<\/a><\/p><\/blockquote>\n