然后原来的一元机就换系统了……

0x00.修改主机名

如果在创建实例时高级设置里指定了主机名，则会自动配置

1
2
3
4
5
6
7
8
[root@txy ~]# cat /etc/hosts
127.0.0.1 txy txy
127.0.0.1 localhost.localdomain localhost
127.0.0.1 localhost4.localdomain4 localhost4

::1 txy txy
::1 localhost.localdomain localhost
::1 localhost6.localdomain6 localhost6

否则，手动更改

1
2
3
4
5
6
7
8
9
10
11
12
[root@txy ~]# hostnamectl set-hostname txy.yuangezhizao.cn
[root@txy ~]# hostname
txy.yuangezhizao.cn
[root@txy ~]# cat /etc/hosts
127.0.0.1 txy.yuangezhizao.cn txy.yuangezhizao.cn
127.0.0.1 localhost.localdomain localhost
127.0.0.1 localhost4.localdomain4 localhost4

::1 txy.yuangezhizao.cn txy.yuangezhizao.cn
::1 localhost.localdomain localhost
::1 localhost6.localdomain6 localhost6
[root@txy ~]# reboot

0x01.修改ssh端口

改成非22端口防止爆破

1
2
3
4
5
6
7
8
9
[root@txy ~]# vim /etc/ssh/sshd_config 
……
# If you want to change the port on a SELinux system, you have to tell
# SELinux about this change.
# semanage port -a -t ssh_port_t -p tcp #PORTNUMBER
#
#Port 22
……
[root@txy ~]# systemctl restart sshd

注意一定要新开个shell测试新端口是否生效，生效则可关闭旧shell，否则需重新配置

0x02.软件

1
2
yum update -y
yum install htop screen git axel iftop -y

  1. nfs-utils：暂时10G免费

    腾讯云文件系统
    腾讯云文件系统

  2. COSFS：https://github.com/tencentyun/cosfs

    直接在本地是相当爽了，可惜 Win 享受不到
    直接在本地是相当爽了，可惜 Win 享受不到

0x03.挂载第三方存储

  1. 腾讯云文件存储即CFS
  2. 腾讯云对象存储即COS
    白嫖的一年资源包
    白嫖的一年资源包
    最终效果可以说是相当爽了
    最终效果可以说是相当爽了

0x04.编译安装python391环境

  1. 查看现有位置
    1
    [root@txy ~]# whereis python
    现有路径
    现有路径

全新：

1
2
[root@txy ~]# whereis python
python: /usr/bin/python3.6m /usr/bin/python3.6 /usr/lib/python3.6 /usr/lib64/python3.6 /usr/local/lib/python3.6 /usr/include/python3.6m /usr/share/man/man1/python.1.gz

  1. 安装编译工具
    yum groupinstall 'Development Tools' -y

    1
    yum install zlib-devel bzip2-devel openssl-devel ncurses-devel sqlite-devel readline-devel tk-devel gcc make libffi-devel -y

    这里面有一个包很关键libffi-devel，因为只有3.7才会用到这个包，如果不安装这个包的话，在make阶段会出现如下的报错：# ModuleNotFoundError: No module named '_ctypes'

  2. 下载源码包
    wget --no-check-certificate https://www.python.org/ftp/python/3.9.1/Python-3.9.1.tar.xz

    下载卡爆，jsproxy 启动！
    下载卡爆，jsproxy 启动！

或

下载卡爆，proxy 中转爽到！
下载卡爆，proxy 中转爽到！
1
2
3
4
CloudFlare：
wget https://proxy-cf.yuangezhizao.cn/dl/Python-3.9.1.tar.xz
Skysilk：
wget http://proxy.yuangezhizao.cn/dl/Python-3.9.1.tar.xz
  1. 解压
    1
    2
    tar xvJf Python-3.9.1.tar.xz
    cd Python-3.9.1
  2. 编译
    注：添加--enable-optimizations（编译器优化）之后的编译速度会变慢，但理论上编译产物的运行效率？会提高
    不添加--enable-shared（生成动态链接库）编译会报错：command 'gcc' failed with exit status 1
    rm -rf /usr/local/python3
    ./configure --prefix=/usr/local/python3 --enable-shared --enable-optimizations
    ./configure --prefix=/usr/local/python3 --enable-optimizations
    make && make install
  3. 修复
    ①2020-9-7 23:33:59：CentOS 8自带版本已为8
    2020-5-22 00:06:54：CentOS自带gcc版本是4，升级至版本8即可解决（而之前在ubuntu编译的时候是版本7，因此可以直接编译通过

再次编译，成功！

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
[root@txy Python-3.8.3]# python3
Python 3.8.3 (default, May 31 2020, 21:31:58) 
[GCC 8.3.1 20190311 (Red Hat 8.3.1-3)] on linux
Type "help", "copyright", "credits" or "license" for more information.
>>> 
[1]+  Stopped                 python3
[root@txy ~]# ldd /usr/local/python3/bin/python3
	linux-vdso.so.1 =>  (0x00007ffdfe1d7000)
	libcrypt.so.1 => /lib64/libcrypt.so.1 (0x00007f58dfe8f000)
	libpthread.so.0 => /lib64/libpthread.so.0 (0x00007f58dfc73000)
	libdl.so.2 => /lib64/libdl.so.2 (0x00007f58dfa6f000)
	libutil.so.1 => /lib64/libutil.so.1 (0x00007f58df86c000)
	libm.so.6 => /lib64/libm.so.6 (0x00007f58df56a000)
	libc.so.6 => /lib64/libc.so.6 (0x00007f58df19c000)
	libfreebl3.so => /lib64/libfreebl3.so (0x00007f58def99000)
	/lib64/ld-linux-x86-64.so.2 (0x00007f58e00c6000)

②旧法（不推荐使用）
添加--enable-shared编译之后会报找不到so的错误，此时可利用ldd工具查看详细

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
[root@txy ~]# python3 -V
python3: error while loading shared libraries: libpython3.8.so.1.0: cannot open shared object file: No such file or directory
[root@txy ~]# cd /usr/local/python3/bin/
[root@txy bin]# ls
2to3  2to3-3.8  easy_install-3.8  idle3  idle3.8  pip3  pip3.8  pydoc3  pydoc3.8  python3  python3.8  python3.8-config  python3-config
[root@txy bin]# ldd python3.8
        linux-vdso.so.1 =>  (0x00007ffd24de9000)
        libpython3.8.so.1.0 => not found
        libcrypt.so.1 => /lib64/libcrypt.so.1 (0x00007f9e9dd3c000)
        libpthread.so.0 => /lib64/libpthread.so.0 (0x00007f9e9db20000)
        libdl.so.2 => /lib64/libdl.so.2 (0x00007f9e9d91c000)
        libutil.so.1 => /lib64/libutil.so.1 (0x00007f9e9d719000)
        libm.so.6 => /lib64/libm.so.6 (0x00007f9e9d417000)
        libc.so.6 => /lib64/libc.so.6 (0x00007f9e9d049000)
        libfreebl3.so => /lib64/libfreebl3.so (0x00007f9e9ce46000)
        /lib64/ld-linux-x86-64.so.2 (0x00007f9e9df73000)

需要手动将所缺so库libpython3.8.so.1.0移至库目录下，具体生效路径为：/usr/lib64/，这里测试/usr/lib/、/usr/local/lib/、/usr/local/lib64/均无效……

1
2
3
[root@txy ~]# cp libpython3.8.so.1.0 /usr/lib64/
[root@txy ~]# python3 -V
Python 3.8.3
  1. 创建软链接（python3&pip3）
    此法不会破坏自带py环境，因此无需修改任何yum文件
    注：更改yum配置
    vim /usr/bin/yum
    vim /usr/libexec/urlgrabber-ext-down
    vim /bin/yum-config-manager
    把#! /usr/bin/python修改为#! /usr/bin/python2

①rm -rf /usr/bin/python3
ln -s /usr/local/python3/bin/python3 /usr/bin/python3
②rm -rf /usr/bin/pip3
ln -s /usr/local/python3/bin/pip3.8 /usr/bin/pip3

1
2
3
4
5
6
[root@txy Python 3.9.1]# python -V
-bash: python: command not found
[root@txy Python 3.9.1]# python3 -V
Python 3.9.1
[root@txy Python 3.9.1]# pip3.9 -V
pip 20.3.3 from /usr/local/python3/lib/python3.9/site-packages/pip (python 3.9)

这样就可以通过python/python2命令使用Python，python3来使用Python 3好了，这下2终于彻底没有了

  1. 升级pip3
    你云环境下会自动配置镜像源
    pip3 install -i https://pypi.tuna.tsinghua.edu.cn/simple pip -U
    pip3 config set global.index-url https://pypi.tuna.tsinghua.edu.cn/simple
    pip3 install --upgrade pip
    安装pip3的另一种方法
    1
    2
    curl https://bootstrap.pypa.io/get-pip.py -o get-pip.py
    python3 get-pip.py
  2. 加入环境变量
    1
    2
    3
    4
    5
    6
    7
    8
    9
    10
    11
    12
    13
    [root@txy ~]# cat ~/.bash_profile
    # .bash_profile

    # Get the aliases and functions
    if [ -f ~/.bashrc ]; then
    	. ~/.bashrc
    fi

    # User specific environment and startup programs

    PATH=$PATH:$HOME/bin:/usr/local/python3/bin

    export PATH

0x05.安装Docker

  1. 卸载旧版本
    1
    2
    3
    4
    5
    6
    7
    8
    yum remove docker \
        docker-client \
        docker-client-latest \
        docker-common \
        docker-latest \
        docker-latest-logrotate \
        docker-logrotate \
        docker-engine
  2. 使用源安装
    1
    2
    3
    4
    yum install -y yum-utils
    yum-config-manager \
        --add-repo \
        https://download.docker.com/linux/centos/docker-ce.repo
    因国外下载速度过慢不得不去看Docker CE 源使用帮助

    CentOS、Fedora等用户在下载docker-ce.repo文件后，还需要将该文件中的download.docker.com地址换成mirrors.ustc.edu.cn/docker-ce

yum clean all再yum makecache后开始安装

  1. 安装
    yum install docker-ce docker-ce-cli containerd.io
    根据Docker Hub 源使用帮助
    1
    2
    3
    4
    5
    [root@txy ~]# mkdir /etc/docker
    [root@txy ~]# cat /etc/docker/daemon.json
    {
      "registry-mirrors": ["https://docker.mirrors.ustc.edu.cn/"]
    }
  2. 启动
    systemctl start docker
  3. 测试
    docker run hello-world
    输出如下：
    1
    2
    3
    4
    5
    6
    7
    8
    9
    10
    11
    12
    13
    14
    15
    16
    17
    18
    19
    20
    21
    22
    23
    24
    25
    26
    27
    [root@txy ~]#  docker run hello-world
    Unable to find image 'hello-world:latest' locally
    latest: Pulling from library/hello-world
    0e03bdcc26d7: Pull complete 
    Digest: sha256:6a65f928fb91fcfbc963f7aa6d57c8eeb426ad9a20c7ee045538ef34847f44f1
    Status: Downloaded newer image for hello-world:latest

    Hello from Docker!
    This message shows that your installation appears to be working correctly.

    To generate this message, Docker took the following steps:
     1. The Docker client contacted the Docker daemon.
     2. The Docker daemon pulled the "hello-world" image from the Docker Hub.
        (amd64)
     3. The Docker daemon created a new container from that image which runs the
        executable that produces the output you are currently reading.
     4. The Docker daemon streamed that output to the Docker client, which sent it
        to your terminal.

    To try something more ambitious, you can run an Ubuntu container with:
     $ docker run -it ubuntu bash

    Share images, automate workflows, and more with a free Docker ID:
     https://hub.docker.com/

    For more examples and ideas, visit:
     https://docs.docker.com/get-started/
  4. 自启
    systemctl enable docker

0x06. 测速工具speedtest-cli

pip3 install speedtest-cli

1
2
3
4
5
6
7
8
9
10
[root@txy ~]# speedtest-cli
Retrieving speedtest.net configuration...
Testing from Tencent cloud computing (<rm>)...
Retrieving speedtest.net server list...
Selecting best server based on ping...
Hosted by Beijing Unicom (Beijing) [1.69 km]: 28.199 ms
Testing download speed................................................................................
Download: 86.21 Mbit/s
Testing upload speed......................................................................................................
Upload: 1.27 Mbit/s

0x07.安装PHPStudy Linux 面板

官网
官网
V0.2 公测版
V0.2 公测版

一键安装
yum install -y wget && wget -O install.sh https://download.xp.cn/install.sh && sh install.sh

还不错的面板
还不错的面板
吊炸天的监控
吊炸天的监控

0x08.编译安装Nginx

准备
mkdir nginx_build && cd nginx_build
下载1.17.3版本Nginx源码
wget http://nginx.org/download/nginx-1.17.3.tar.gz
tar -xvf nginx-1.17.3.tar.gz
下载0.1.18版本nginx-module-vts源码
wget https://github.com/vozlt/nginx-module-vts/archive/v0.1.18.tar.gz
tar -xvf v0.1.18.tar.gz
安装依赖
yum -y install gcc gcc-c++ pcre pcre-devel zlib zlib-devel openssl openssl-devel
编译安装
cd nginx-1.17.3/
./configure --add-module=/root/nginx_build/nginx-module-vts-0.1.18
make && make install
修改配置文件
vim /usr/local/nginx/conf/nginx.conf

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
http {
    vhost_traffic_status_zone;

    ...

    server {

        ...

        location /status {
            vhost_traffic_status_display;
            vhost_traffic_status_display_format html;
        }
    }
}

运行

1
2
3
4
5
[root@txy ~]# /usr/local/nginx/sbin/nginx
[root@txy ~]# ps aux | grep nginx
root      7895  0.0  0.0  21780   644 ?        Ss   21:42   0:00 nginx: master process /usr/local/nginx/sbin/nginx
nobody    7896  0.0  0.1  24236  1416 ?        S    21:42   0:00 nginx: worker process
root      7915  0.0  0.0 112708   976 pts/0    S+   21:42   0:00 grep --color=auto nginx

自启
将/usr/local/nginx/sbin/nginx命令加入/etc/rc.d/rc.local文件并赋予权限chmod +x /etc/rc.d/rc.local

0x09.测试延迟

也就只能凑合看下，不过拿来对比应该是可以的
①cn-py-dl-c7

1
2
3
4
5
6
7
8
9
10
11
[root@py ~]# ping jrmkt.jd.com
PING jrmkt.jd.com.gslb.qianxun.com (61.48.89.125) 56(84) bytes of data.
64 bytes from 61.48.89.125 (61.48.89.125): icmp_seq=1 ttl=38 time=27.8 ms
64 bytes from 61.48.89.125 (61.48.89.125): icmp_seq=2 ttl=38 time=34.1 ms
64 bytes from 61.48.89.125 (61.48.89.125): icmp_seq=3 ttl=38 time=27.7 ms
64 bytes from 61.48.89.125 (61.48.89.125): icmp_seq=4 ttl=38 time=27.2 ms
64 bytes from 61.48.89.125 (61.48.89.125): icmp_seq=5 ttl=38 time=27.3 ms
^C
--- jrmkt.jd.com.gslb.qianxun.com ping statistics ---
5 packets transmitted, 5 received, 0% packet loss, time 6565ms
rtt min/avg/max/mdev = 27.242/28.895/34.189/2.664 ms

②cn-tx-bj1-w2d

1
2
3
4
5
6
7
8
9
10
11
12
C:\LAB>ping jrmkt.jd.com

正在 Ping jrmkt.jd.com.gslb.qianxun.com [49.7.26.66] 具有 32 字节的数据:
来自 49.7.26.66 的回复: 字节=32 时间=4ms TTL=250
来自 49.7.26.66 的回复: 字节=32 时间=4ms TTL=250
来自 49.7.26.66 的回复: 字节=32 时间=4ms TTL=250
来自 49.7.26.66 的回复: 字节=32 时间=4ms TTL=250

49.7.26.66 的 Ping 统计信息:
    数据包: 已发送 = 4，已接收 = 4，丢失 = 0 (0% 丢失)，
往返行程的估计时间(以毫秒为单位):
    最短 = 4ms，最长 = 4ms，平均 = 4ms

③cn-tx-bj3-c8

1
2
3
4
5
6
7
8
9
10
11
[root@txy ~]# ping jrmkt.jd.com
PING jrmkt.jd.com.gslb.qianxun.com (61.48.89.125) 56(84) bytes of data.
64 bytes from 61.48.89.125 (61.48.89.125): icmp_seq=1 ttl=251 time=7.03 ms
64 bytes from 61.48.89.125 (61.48.89.125): icmp_seq=2 ttl=251 time=7.00 ms
64 bytes from 61.48.89.125 (61.48.89.125): icmp_seq=3 ttl=251 time=7.02 ms
64 bytes from 61.48.89.125 (61.48.89.125): icmp_seq=4 ttl=251 time=7.01 ms
64 bytes from 61.48.89.125 (61.48.89.125): icmp_seq=5 ttl=251 time=7.01 ms
^C
--- jrmkt.jd.com.gslb.qianxun.com ping statistics ---
5 packets transmitted, 5 received, 0% packet loss, time 1005ms
rtt min/avg/max/mdev = 7.004/7.012/7.029/0.092 ms

由此可见家里肯定是最慢的了，另外北京一区比北京三区快1ms

0x10.引用

python –enable-shared
CentOS 7 升级gcc/g++编译器
3.7.0 build error with –enable-optimizations