<?xml version="1.0" encoding="utf-8" ?><rss version="2.0"><channel><title><![CDATA[jon_stark的博客]]></title><description><![CDATA[]]></description><link>https://blog.youkuaiyun.com/jon_stark</link><language>zh-cn</language><generator>https://blog.youkuaiyun.com/</generator><copyright><![CDATA[Copyright &copy; jon_stark]]></copyright><item><title><![CDATA[NGINX(Tengine) 安装部署]]></title><link>https://blog.youkuaiyun.com/jon_stark/article/details/102683040</link><guid>https://blog.youkuaiyun.com/jon_stark/article/details/102683040</guid><author>jon_stark</author><pubDate>Tue, 22 Oct 2019 15:23:35 +0800</pubDate><description><![CDATA[一、下载编译环境包


yum -y install gcc gcc-c++ bzip2 perl curl curl-devel expat-devel gettext-devel openssl-devel libxml2 libxml2-devel libjpeg-devel libpng-devel freetype-devel libmcrypt-devel autoconf gd-d...]]></description><category></category></item><item><title><![CDATA[使用firewalld拉黑恶意破密码登陆ip]]></title><link>https://blog.youkuaiyun.com/jon_stark/article/details/100080738</link><guid>https://blog.youkuaiyun.com/jon_stark/article/details/100080738</guid><author>jon_stark</author><pubDate>Mon, 26 Aug 2019 16:33:42 +0800</pubDate><description><![CDATA[#!/bin/bash
#自动拒绝恶意 IP 脚本
#auto drop ssh failed IP address
#定义变量
SSH_PORT=22
SEC_FILE=/var/log/secure
#如下为截取 secure 文件恶意 ip 远程登录，大于等于 4 次就写入防火墙，禁止以后再尝试登录服务器,第一次可以判断secure全文，后续可只匹配末尾1000行
IP_ADDR=`cat...]]></description><category></category></item><item><title><![CDATA[ansible-playbook]]></title><link>https://blog.youkuaiyun.com/jon_stark/article/details/96987998</link><guid>https://blog.youkuaiyun.com/jon_stark/article/details/96987998</guid><author>jon_stark</author><pubDate>Tue, 23 Jul 2019 13:34:40 +0800</pubDate><description><![CDATA[vim /etc/ansible/ansible.cfg,开启如下选项

[privilege_escalation] ##这一部分为提升权限的参数，如果使用普通用户需要开启。目标服务器普通用户需要有免密码使用sudo功能

[privilege_escalation]
become=True
become_method=sudo
become_user=root
become_ask_pass...]]></description><category></category></item><item><title><![CDATA[mysql-proxy  数据库的读写分离]]></title><link>https://blog.youkuaiyun.com/jon_stark/article/details/95081893</link><guid>https://blog.youkuaiyun.com/jon_stark/article/details/95081893</guid><author>jon_stark</author><pubDate>Mon, 08 Jul 2019 21:10:01 +0800</pubDate><description><![CDATA[通过 主从复制(Master-Slave)的方式来同步数据，再通过读写分离(MySQL-Proxy)来提升数据库的并发负载能力 。本文介绍mysql-proxy读写分离的实践。

首先配置主从同步，主从同步可以查看另一篇文章，主从配置：https://blog.youkuaiyun.com/jon_stark/article/details/89154976

mysql读写分离

环境分配：都是centos...]]></description><category></category></item><item><title><![CDATA[docker-ce最新版安装]]></title><link>https://blog.youkuaiyun.com/jon_stark/article/details/94204336</link><guid>https://blog.youkuaiyun.com/jon_stark/article/details/94204336</guid><author>jon_stark</author><pubDate>Sat, 29 Jun 2019 20:48:37 +0800</pubDate><description><![CDATA[下载对应依赖包


yum -y install yum-utils device-mapper-persistent-data lvm2

添加yum源


yum-config-manager --add-repo https://download.docker.com/linux/centos/docker-ce.repo 

设置默认yum源为新添加yum源而并非原系统自带yum源


y...]]></description><category></category></item><item><title><![CDATA[使用expect批量传送公钥]]></title><link>https://blog.youkuaiyun.com/jon_stark/article/details/89739852</link><guid>https://blog.youkuaiyun.com/jon_stark/article/details/89739852</guid><author>jon_stark</author><pubDate>Wed, 01 May 2019 19:32:10 +0800</pubDate><description><![CDATA[#!/usr/bin/bash
password=123456
rpm -q expect &amp;&gt;/dev/null
if [ $? -ne 0 ];then
    yum -y install expect
fi

if [ ! -f ~/.ssh/id_rsa ];then
    ssh-keygen -P "" -f ~/.ssh/id_rsa
fi

for i in {...]]></description><category></category></item><item><title><![CDATA[nginx+php部署环境]]></title><link>https://blog.youkuaiyun.com/jon_stark/article/details/89418804</link><guid>https://blog.youkuaiyun.com/jon_stark/article/details/89418804</guid><author>jon_stark</author><pubDate>Sat, 20 Apr 2019 16:19:33 +0800</pubDate><description><![CDATA[nginx+php安装脚本


#!/bin/sh
[ `whoami` != "root" ] &amp;&amp; echo "please use root" &amp;&amp; exit 1
function format() {
    echo -e "\033[32m Success!!!\033[0m\n"
    echo "#########################...]]></description><category></category></item><item><title><![CDATA[Jumpserver官方精华安装文档，三种用户简述]]></title><link>https://blog.youkuaiyun.com/jon_stark/article/details/89294724</link><guid>https://blog.youkuaiyun.com/jon_stark/article/details/89294724</guid><author>jon_stark</author><pubDate>Sun, 14 Apr 2019 13:12:55 +0800</pubDate><description><![CDATA[Jumpserver 是全球首款完全开源的堡垒机, 使用 GNU GPL v2.0 开源协议, 是符合 4A 的专业运维审计系统。

Jumpserver 使用 Python / Django 进行开发, 遵循 Web 2.0 规范, 配备了业界领先的 Web Terminal 解决方案, 交互界面美观、用户体验好。

组件说明

Jumpserver 为管理后台, 管理员可以通过Web页面进行资...]]></description><category></category></item><item><title><![CDATA[logrotate分割]]></title><link>https://blog.youkuaiyun.com/jon_stark/article/details/88994807</link><guid>https://blog.youkuaiyun.com/jon_stark/article/details/88994807</guid><author>jon_stark</author><pubDate>Wed, 03 Apr 2019 14:44:32 +0800</pubDate><description><![CDATA[Linux系统默认安装logrotate工具，它默认的配置文件在：
/etc/logrotate.conf
/etc/logrotate.d/

logrotate.conf 才主要的配置文件，logrotate.d 是一个目录，该目录里的所有文件都会被主动的读入/etc/logrotate.conf中执行。
另外，如果 /etc/logrotate.d/ 里面的文件中没有设定一些细节，则会以/e...]]></description><category></category></item><item><title><![CDATA[filebeat+redis+ELK 集群环境]]></title><link>https://blog.youkuaiyun.com/jon_stark/article/details/85403989</link><guid>https://blog.youkuaiyun.com/jon_stark/article/details/85403989</guid><author>jon_stark</author><pubDate>Sun, 30 Dec 2018 19:31:15 +0800</pubDate><description><![CDATA[ELK搭建手册

2018-12-30

需求背景：

业务发展越来越庞大，服务器越来越多
	各种访问日志、应用日志、错误日志量越来越多，导致运维人员无法很好的去管理日志
	开发人员排查问题，需要运维到服务器上查日志，不方便
	运营人员需要一些数据，需要我们运维到服务器上分析日志
ELK是三个开源软件的缩写，分别为：Elasticsearch 、 Logstash以及Kibana , 它们都是开源...]]></description><category></category></item><item><title><![CDATA[破解x-pack+ELK优化]]></title><link>https://blog.youkuaiyun.com/jon_stark/article/details/85404208</link><guid>https://blog.youkuaiyun.com/jon_stark/article/details/85404208</guid><author>jon_stark</author><pubDate>Sun, 30 Dec 2018 19:24:55 +0800</pubDate><description><![CDATA[6.2.3破解：https://www.jianshu.com/p/6acfeabb44f8 

主要方法：更改LicenseVerifier.class和 XPackBuild.class（6.0版本不需要）

修改java证书代码 ---- 在Windows本地上操作
Windows需要工具：luyten-0.5.0（java代码编辑器）

/opt/apps/elk/elasticse...]]></description><category></category></item><item><title><![CDATA[搭建Gitlab+Maven+Jenkins持续集成环境]]></title><link>https://blog.youkuaiyun.com/jon_stark/article/details/84797257</link><guid>https://blog.youkuaiyun.com/jon_stark/article/details/84797257</guid><author>jon_stark</author><pubDate>Wed, 05 Dec 2018 17:21:33 +0800</pubDate><description><![CDATA[环境:

Jenkins服务器:192.168.6.148            需要安装git，maven，jdk，nginx,需要tomcat容器运行jenkins，

Gitlab服务器:192.168.6.149             搭建gitlab环境

Tomcat服务器:192.168.6.150        ...]]></description><category></category></item><item><title><![CDATA[google-authenticator ssh动态验证登录]]></title><link>https://blog.youkuaiyun.com/jon_stark/article/details/82912563</link><guid>https://blog.youkuaiyun.com/jon_stark/article/details/82912563</guid><author>jon_stark</author><pubDate>Sun, 30 Sep 2018 18:15:49 +0800</pubDate><description><![CDATA[1 、安装

方案一：

yum -y install google-authenticator 

注：如果没有找到，要安装epel-release源 ，yum -y install epel-release

方案二：

或者下载压缩包

yum -y install mercurial pam-devel  bzip2  

安装Google Authenticator：

https://...]]></description><category></category></item><item><title><![CDATA[iptables防火墙 filter表控制 扩展匹配 nat表典型应用]]></title><link>https://blog.youkuaiyun.com/jon_stark/article/details/80372221</link><guid>https://blog.youkuaiyun.com/jon_stark/article/details/80372221</guid><author>jon_stark</author><pubDate>Sat, 19 May 2018 17:22:10 +0800</pubDate><description><![CDATA[一 iptables基本管理                1--熟悉iptables框架        1）iptables的4个表（区分大小写）：iptables默认有4个表，nat表（地址转换表）、filter表（数据过滤表）、raw表（状态跟踪表）、mangle表（包标记表）。2）iptables的5个链（区分大小写）：INPUT链（入站规则）OUTPUT链（出站规则）FORWARD链（转...]]></description><category></category></item><item><title><![CDATA[系统审计，服务安全，linux安全之打补丁]]></title><link>https://blog.youkuaiyun.com/jon_stark/article/details/80359774</link><guid>https://blog.youkuaiyun.com/jon_stark/article/details/80359774</guid><author>jon_stark</author><pubDate>Fri, 18 May 2018 21:35:11 +0800</pubDate><description><![CDATA[一 部署audit监控文件    1--配置audit审计系统        1）安装软件包，查看配置文件（确定审计日志的位置）[root@svr5 ~]# yum -y  install  audit                //安装软件包[root@svr5 ~]# cat /etc/audit/auditd.conf            //查看配置文件，确定日志位置[root@sv...]]></description><category></category></item><item><title><![CDATA[Linux基本防护 用户切换与提权  SSH访问控制  SElinux安全]]></title><link>https://blog.youkuaiyun.com/jon_stark/article/details/80307505</link><guid>https://blog.youkuaiyun.com/jon_stark/article/details/80307505</guid><author>jon_stark</author><pubDate>Thu, 17 May 2018 14:34:33 +0800</pubDate><description><![CDATA[一 用户帐号安全

1--设置帐号有效期

 chage -l lisi //查看lisi用户的有效信息

 chage -d 0 lisi //下次登陆必须更改密码

 chage -E 2020-5-14 lisi //设置密码有效期

 chage...]]></description><category></category></item><item><title><![CDATA[加密与解密  AIDE入侵检测系统  扫描与抓包]]></title><link>https://blog.youkuaiyun.com/jon_stark/article/details/80319664</link><guid>https://blog.youkuaiyun.com/jon_stark/article/details/80319664</guid><author>jon_stark</author><pubDate>Tue, 15 May 2018 17:47:36 +0800</pubDate><description><![CDATA[对称加密：加密/解密用同一个密钥对称加密算法：DES，AES非对称加密：加密/解密用不同的密钥（公钥，私钥）非对称加密算法：RSA，DSAHash散列技术：MD5 （md5sum  文件名），SHA一  使用GPG对称加密方式保护文件1）安装gnupg2    [root@vpn ~]# yum -y install gnupg22）使用gpg对称加密算法加密数据的操作    [root@vpn ...]]></description><category></category></item><item><title><![CDATA[Nginx调度器]]></title><link>https://blog.youkuaiyun.com/jon_stark/article/details/80227757</link><guid>https://blog.youkuaiyun.com/jon_stark/article/details/80227757</guid><author>jon_stark</author><pubDate>Mon, 07 May 2018 19:06:20 +0800</pubDate><description><![CDATA[vim   /etc/rc.local                    //开机自动启动nginx程序的脚本，里面添加nginx（/usr/local/nginx/sbin/nginx）部署实施后端Web服务器vim  /usr/local/nginx/conf/nginx.confupstream   服务器池名 {    ip_hash;                         ...]]></description><category></category></item></channel></rss>