wget https://mirrors.aliyun.com/golang/go1.20.3.linux-amd64.tar.gz tar xzvf go1.20.3.linux-amd64.tar.gz -C /opt/
1 2 3 4 5 6
tee -a /etc/profile << EOF export GO_HOME=/opt/go export PATH=$PATH:$GO_HOME/bin go env -w GO111MODULE=on go env -w GOPROXY=https://goproxy.cn,direct EOF
The bundle size is significantly larger than recommended. Consider reducing it with code splitting: https://umijs.org/docs/load-on-demand You can also analyze the project dependencies using ANALYZE=1
# 其余省略... etcd: endpoints:# supports defining multiple etcd host addresses for an etcd cluster -10.1.80.91:2379 -10.1.80.92:2379 -10.1.80.93:2379 # yamllint disable rule:comments-indentation # etcd basic auth info # username: "root" # ignore etcd username if not enable etcd auth # password: "123456" # ignore etcd password if not enable etcd auth mtls: key_file:"/usr/local/apisix/ssl/etcd-server-key.pem"# Path of your self-signed client side key cert_file:"/usr/local/apisix/ssl/etcd-server.pem"# Path of your self-signed client side cert ca_file:"/usr/local/apisix/ssl/etcd-ca.pem"# Path of your self-signed ca cert, the CA is used to sign callers' certificates # prefix: /apisix # apisix config's prefix in etcd, /apisix by default # 其余省略...
运行APISIX DASHBOARD
frontend方式运行apisix-dashboard(不推荐)
1 2
cd /usr/local/apisix/dashboard ./manager-api
安装为系统服务(推荐)
1 2 3 4 5 6 7 8 9 10 11
tee /usr/lib/systemd/system/apisix-dashboard.service << EOF [Unit] Description=apisix-dashboard Conflicts=apisix-dashboard.service After=network-online.target
# 其余省略... allow_list:# If we don't set any IP list, then any IP access is allowed by default. -127.0.0.1# The rules are checked in sequence until the first match is found. -10.1.80.0/24# The rules are checked in sequence until the first match is found. -::1# In this example, access is allowed only for IPv4 network 127.0.0.1, and for IPv6 network ::1. # It also support CIDR like 192.168.1.0/24 and 2001:0db8::/32 # 其余省略...
root@s91:/opt/src/apisix-3.2.0/utils/luarocks-3.8.0# ./configure --prefix=/usr/local/openresty/luajit \ > --with-lua=/usr/local/openresty/luajit/ \ > --lua-suffix=jit \ > --with-lua-include=/usr/local/openresty/luajit/include/luajit-2.1 --lua-suffix is no longer necessary. The suffix is automatically detected.
Configuring LuaRocks version 3.8.0...
Lua version detected: 5.1 Lua interpreter found: /usr/local/openresty/luajit/bin/luajit lua.h found: /usr/local/openresty/luajit/include/luajit-2.1/lua.h unzip found in PATH: /usr/bin
Done configuring.
LuaRocks will be installed at......: /usr/local/openresty/luajit LuaRocks will install rocks at.....: /usr/local/openresty/luajit LuaRocks configuration directory...: /usr/local/openresty/luajit/etc/luarocks Using Lua from.....................: /usr/local/openresty/luajit Lua include directory..............: /usr/local/openresty/luajit/include/luajit-2.1
* Type make and make install: to install to /usr/local/openresty/luajit as usual. * Type make bootstrap: to install LuaRocks into /usr/local/openresty/luajit as a rock.
To enable etcd client certificate you need to build APISIX-Base, seehttps://apisix.apache.org/docs/apisix/FAQ#how-do-i-build-the-apisix-base-environment
prev_workdir="$PWD" repo=$(basename "$prev_workdir") workdir=$(mktemp -d) cd "$workdir" || exit 1
or_ver="1.21.4.1" wget --no-check-certificate https://openresty.org/download/openresty-${or_ver}.tar.gz tar -zxvpf openresty-${or_ver}.tar.gz > /dev/null
if [ "$repo" == ngx_multi_upstream_module ]; then cp -r "$prev_workdir" ./ngx_multi_upstream_module-${ngx_multi_upstream_module_ver} else unzip ${prev_workdir}/ngx_multi_upstream_module-${ngx_multi_upstream_module_ver}.zip fi
if [ "$repo" == mod_dubbo ]; then cp -r "$prev_workdir" ./mod_dubbo-${mod_dubbo_ver} else unzip ${prev_workdir}/mod_dubbo-${mod_dubbo_ver}.zip fi
if [ "$repo" == apisix-nginx-module ]; then cp -r "$prev_workdir" ./apisix-nginx-module-${apisix_nginx_module_ver} else unzip ${prev_workdir}/apisix-nginx-module-${apisix_nginx_module_ver}.zip fi
if [ "$repo" == wasm-nginx-module ]; then cp -r "$prev_workdir" ./wasm-nginx-module-${wasm_nginx_module_ver} else unzip ${prev_workdir}/wasm-nginx-module-${wasm_nginx_module_ver}.zip fi
if [ "$repo" == lua-var-nginx-module ]; then cp -r "$prev_workdir" ./lua-var-nginx-module-${lua_var_nginx_module_ver} else unzip ${prev_workdir}/lua-var-nginx-module-${lua_var_nginx_module_ver#*v}.zip fi
if [ "$repo" == grpc-client-nginx-module ]; then cp -r "$prev_workdir" ./grpc-client-nginx-module-${grpc_client_nginx_module_ver} else unzip ${prev_workdir}/grpc-client-nginx-module-${grpc_client_nginx_module_ver#*v}.zip fi
if [ "$repo" == amesh ]; then cp -r "$prev_workdir" ./amesh-${amesh_ver} else unzip ${prev_workdir}/Amesh-${amesh_ver}.zip fi
cd ngx_multi_upstream_module-${ngx_multi_upstream_module_ver} || exit 1 ./patch.sh ../openresty-${or_ver} cd ..
cd apisix-nginx-module-${apisix_nginx_module_ver}/patch || exit 1 ./patch.sh ../../openresty-${or_ver} cd ../..
cd wasm-nginx-module-${wasm_nginx_module_ver} || exit 1 ./install-wasmtime.sh cd ..
cc_opt=${cc_opt:-} ld_opt=${ld_opt:-} luajit_xcflags=${luajit_xcflags:="-DLUAJIT_NUMMODE=2 -DLUAJIT_ENABLE_LUA52COMPAT"} no_pool_patch=${no_pool_patch:-} # TODO: remove old NGX_HTTP_GRPC_CLI_ENGINE_PATH once we have released a new # version of grpc-client-nginx-module grpc_engine_path="-DNGX_GRPC_CLI_ENGINE_PATH=$OR_PREFIX/libgrpc_engine.so -DNGX_HTTP_GRPC_CLI_ENGINE_PATH=$OR_PREFIX/libgrpc_engine.so"
cd openresty-${or_ver} || exit 1 # FIXME: remove this once 1.21.4.2 is released rm -rf bundle/LuaJIT-2.1-20220411 lj_ver=2.1-20230119 wget "https://github.com/openresty/luajit2/archive/v$lj_ver.tar.gz" -O "LuaJIT-$lj_ver.tar.gz" tar -xzf LuaJIT-$lj_ver.tar.gz mv luajit2-* bundle/LuaJIT-2.1-20220411
if [[ $ARCH == "arm64" ]] || [[ $ARCH == "aarch64" ]]; then ETCD_ARCH="arm64" fi
wget -q https://github.com/etcd-io/etcd/releases/download/v${ETCD_VERSION}/etcd-v${ETCD_VERSION}-linux-${ETCD_ARCH}.tar.gz tar xf etcd-v${ETCD_VERSION}-linux-${ETCD_ARCH}.tar.gz # ship etcdctl under the same bin dir of openresty so we can package it easily sudo cp etcd-v${ETCD_VERSION}-linux-${ETCD_ARCH}/etcdctl "$OR_PREFIX"/bin/ rm -rf etcd-v${ETCD_VERSION}-linux-${ETCD_ARCH}
# 其余省略... ssl: enable:true listen:# APISIX listening port in https. - port:9443 enable_http2:true # - ip: 127.0.0.3 # Specific IP, If not set, the default value is `0.0.0.0`. # port: 9445 # enable_http2: true ssl_trusted_certificate:/usr/local/apisix/ssl/etcd-ca.pem# Specifies a file path with trusted CA certificates in the PEM format
# 其余省略... etcd: host:# it's possible to define multiple etcd hosts addresses of the same etcd cluster. -"https://10.1.80.91:2379"# multiple etcd address, if your etcd cluster enables TLS, please use https scheme, -"https://10.1.80.92:2379"# multiple etcd address, if your etcd cluster enables TLS, please use https scheme, -"https://10.1.80.93:2379"# multiple etcd address, if your etcd cluster enables TLS, please use https scheme, # e.g. https://127.0.0.1:2379. prefix:/apisix# configuration prefix in etcd use_grpc:false# enable the experimental configuration sync via gRPC timeout:30# 30 seconds. Use a much higher timeout (like an hour) if the `use_grpc` is true. #resync_delay: 5 # when sync failed and a rest is needed, resync after the configured seconds plus 50% random jitter #health_check_timeout: 10 # etcd retry the unhealthy nodes after the configured seconds startup_retry:2# the number of retry to etcd during the startup, default to 2 #user: root # root username for etcd #password: 5tHkHhYkjr6cQY # root password for etcd tls: # To enable etcd client certificate you need to build APISIX-Base, see # https://apisix.apache.org/docs/apisix/FAQ#how-do-i-build-the-apisix-base-environment cert:/usr/local/apisix/ssl/etcd-server.pem# path of certificate used by the etcd client key:/usr/local/apisix/ssl/etcd-server-key.pem# path of key used by the etcd client
verify:true# whether to verify the etcd endpoint certificate when setup a TLS connection to etcd,
初始化启动APISIX
启动apisix
1 2 3
/usr/bin/apisix test /usr/bin/apisix init /usr/bin/apisix start
Error: Failed installing dependency: https://luarocks.org/luasec-0.9-1.src.rock - Could not find header file for OPENSSL No file openssl/ssl.h in /usr/local/openresty/openssl/include You may have to install OPENSSL in your system and/or pass OPENSSL_DIR or OPENSSL_INCDIR to the luarocks command. Example: luarocks install luasec OPENSSL_DIR=/usr/local make: *** [Makefile:152: deps] Error 1 root@exp:/tmp/src/apisix-2.15# ll /usr/local/openresty/op^C root@exp:/tmp/src/apisix-2.15# apt install libssl-dev Reading package lists... Done Building dependency tree Reading state information... Done libssl-dev is already the newest version (1.1.1f-1ubuntu2.16). 0 upgraded, 0 newly installed, 0 to remove and 9 not upgraded.
需要安装openresty-openssl111-dev
1
sudo apt install -y openresty-openssl111-dev
gzip module requires the zlib library
在进行./configure编译Nginx提示gzip module requires the zlib library 执行sudo apt install zlib1g-dev可解决
1
sudo apt install zlib1g-dev
ngx_postgres addon was unable to detect version of the libpq library
在进行./configure编译Nginx提示ngx_postgres addon was unable to detect version of the libpq library 执行sudo apt-get install libpq-dev可解决
1
sudo apt-get install libpq-dev
安装apixsix make deps时报如下错误，说明没有安装libldap2-dev
1 2 3 4
Error: Failed installing dependency: https://luarocks.cn/lualdap-1.2.6-1.src.rock - Could not find header file for LDAP No file ldap.h in /usr/local/include No file ldap.h in /usr/include No file ldap.h in /include
root@s91:/usr/local/apisix# apisix init /usr/local/openresty//luajit/bin/luajit /usr/local/apisix/apisix/cli/apisix.lua init /usr/local/openresty//luajit/bin/luajit: cannot open /usr/local/apisix/apisix/cli/apisix.lua: No such file or directory root@s91:/usr/local/apisix# apisix test /usr/local/openresty//luajit/bin/luajit /usr/local/apisix/apisix/cli/apisix.lua test /usr/local/openresty//luajit/bin/luajit: cannot open /usr/local/apisix/apisix/cli/apisix.lua: No such file or directory
# make sure etcd process has write access to this directory # remove this directory if the cluster is new; keep if restarting etcd # rm -rf /tmp/etcd/s1
# to start service sudo systemctl daemon-reload sudo systemctl enable s1.service sudo systemctl start s1.service
# cat s1.service sudo systemctl cat s1.service
# to get logs from service sudo systemctl status s1.service -l --no-pager sudo journalctl -u s1.service -l --no-pager|less sudo journalctl -f -u s1.service
# to stop service sudo systemctl stop s1.service sudo systemctl disable s1.service
# to start service sudo systemctl daemon-reload sudo systemctl enable s2.service sudo systemctl start s2.service
# cat s2.service sudo systemctl cat s2.service
# to get logs from service sudo systemctl status s2.service -l --no-pager sudo journalctl -u s2.service -l --no-pager|less sudo journalctl -f -u s2.service
# to stop service sudo systemctl stop s2.service sudo systemctl disable s2.service
# to start service sudo systemctl daemon-reload sudo systemctl enable s3.service sudo systemctl start s3.service
# cat s3.service sudo systemctl cat s3.service
# to get logs from service sudo systemctl status s3.service -l --no-pager sudo journalctl -u s3.service -l --no-pager|less sudo journalctl -f -u s3.service
# to stop service sudo systemctl stop s3.service sudo systemctl disable s3.service
10.1.80.93:2379 is healthy: successfully committed proposal: took = 6.506639ms 10.1.80.91:2379 is healthy: successfully committed proposal: took = 6.427877ms 10.1.80.92:2379 is healthy: successfully committed proposal: took = 7.161322ms
# after transferring certs to remote machines mkdir -p ${HOME}/certs cp /tmp/certs/* ${HOME}/certs
# make sure etcd process has write access to this directory # remove this directory if the cluster is new; keep if restarting etcd # rm -rf /tmp/etcd/s1
# to write service file for etcd cat > /tmp/s1.service <<EOF [Unit] Description=etcd Documentation=https://github.com/coreos/etcd Conflicts=etcd.service Conflicts=etcd2.service
# to start service sudo systemctl daemon-reload sudo systemctl enable s1.service sudo systemctl start s1.service
# cat s1.service sudo systemctl cat s1.service
# to get logs from service sudo systemctl status s1.service -l --no-pager sudo journalctl -u s1.service -l --no-pager|less sudo journalctl -f -u s1.service
# to stop service sudo systemctl stop s1.service sudo systemctl disable s1.service
# after transferring certs to remote machines mkdir -p ${HOME}/certs cp /tmp/certs/* ${HOME}/certs
# make sure etcd process has write access to this directory # remove this directory if the cluster is new; keep if restarting etcd # rm -rf /tmp/etcd/s2
# to write service file for etcd cat > /tmp/s2.service <<EOF [Unit] Description=etcd Documentation=https://github.com/coreos/etcd Conflicts=etcd.service Conflicts=etcd2.service
# to start service sudo systemctl daemon-reload sudo systemctl enable s2.service sudo systemctl start s2.service
# cat s2.service sudo systemctl cat s2.service
# to get logs from service sudo systemctl status s2.service -l --no-pager sudo journalctl -u s2.service -l --no-pager|less sudo journalctl -f -u s2.service
# to stop service sudo systemctl stop s2.service sudo systemctl disable s2.service
# after transferring certs to remote machines mkdir -p ${HOME}/certs cp /tmp/certs/* ${HOME}/certs
# make sure etcd process has write access to this directory # remove this directory if the cluster is new; keep if restarting etcd # rm -rf /tmp/etcd/s3
# to write service file for etcd cat > /tmp/s3.service <<EOF [Unit] Description=etcd Documentation=https://github.com/coreos/etcd Conflicts=etcd.service Conflicts=etcd2.service
# to start service sudo systemctl daemon-reload sudo systemctl enable s3.service sudo systemctl start s3.service
# cat s3.service sudo systemctl cat s3.service
# to get logs from service sudo systemctl status s3.service -l --no-pager sudo journalctl -u s3.service -l --no-pager|less sudo journalctl -f -u s3.service
# to stop service sudo systemctl stop s3.service sudo systemctl disable s3.service
10.1.80.92:2379 is healthy: successfully committed proposal: took = 9.184858ms 10.1.80.93:2379 is healthy: successfully committed proposal: took = 8.681243ms 10.1.80.91:2379 is healthy: successfully committed proposal: took = 11.855811ms
; ; BIND data file for local loopback interface ; $TTL 604800 @ IN SOA localhost. root.localhost. ( 2 ; Serial 604800 ; Refresh 86400 ; Retry 2419200 ; Expire 604800 ) ; Negative Cache TTL ; @ IN NS localhost. ; delete this line @ IN A 127.0.0.1 ; delete this line @ IN AAAA ::1 ; delete this line
将localhost替换为idc3.meeleet.com,删除含delete this line标记的行
文件最后添加上DNS服务器NS记录
1 2 3 4 5 6
...
; name servers - NS records IN NS ns1.idc3.meeleet.com. IN NS ns2.idc3.meeleet.com.
给这个域内的主机添加A记录
1 2 3 4 5 6 7 8 9
...
; name servers - A records ns1.idc3.meeleet.com. IN A 10.1.80.220 ns2.idc3.meeleet.com. IN A 10.1.80.221
; 10.1.80.0/24 - A records s91.idc3.meeleet.com. IN A 10.1.80.91 s92.idc3.meeleet.com. IN A 10.1.80.92
$TTL 604800 @ IN SOA localhost. root.localhost. ( 1 ; Serial 604800 ; Refresh 86400 ; Retry 2419200 ; Expire 604800 ) ; Negative Cache TTL ; @ IN NS localhost. ; delete this line 1.0.0 IN PTR localhost. ; delete this line
删除含delete this line标记的行
最终
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19
$TTL 604800 @ IN SOA ns1.idc3.meeleet.com. root.idc3.meeleet.com. ( 3 ; Serial 604800 ; Refresh 86400 ; Retry 2419200 ; Expire 604800 ) ; Negative Cache TTL ;
; name servers - NS records IN NS ns1.idc3.meeleet.com. IN NS ns2.idc3.meeleet.com.
; PTR Records 220 IN PTR ns1.idc3.meeleet.com. ; 10.1.80.220 221 IN PTR ns2.idc3.meeleet.com. ; 10.1.80.221 91 IN PTR s91.idc3.meeleet.com. ; 10.1.80.91 92 IN PTR s92.idc3.meeleet.com. ; 10.1.80.92
2: enp0s3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000 inet 10.1.80.91/24 brd 10.1.80.255 scope global enp0s3 valid_lft forever preferred_lft forever
Global LLMNR setting: no MulticastDNS setting: no DNSOverTLS setting: no DNSSEC setting: no DNSSEC supported: no DNSSEC NTA: 10.in-addr.arpa 16.172.in-addr.arpa 168.192.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa corp d.f.ip6.arpa home internal intranet lan local private test
Link 3 (enp0s8) Current Scopes: DNS DefaultRoute setting: yes LLMNR setting: yes MulticastDNS setting: no DNSOverTLS setting: no DNSSEC setting: no DNSSEC supported: no Current DNS Server: 223.5.5.5 DNS Servers: 223.5.5.5 223.6.6.6
Link 2 (enp0s3) Current Scopes: DNS DefaultRoute setting: yes LLMNR setting: yes MulticastDNS setting: no DNSOverTLS setting: no DNSSEC setting: no DNSSEC supported: no Current DNS Server: 223.5.5.5 DNS Servers: 223.5.5.5 223.6.6.6 10.1.80.200 10.1.80.201 DNS Domain: idc3.meeleet.com
Oct 8 15:50:14 ds01 Keepalived_healthcheckers[15444]: TCP connection to [10.1.80.93]:80 failed. Oct 8 15:50:15 ds01 Keepalived_healthcheckers[15444]: TCP connection to [10.1.80.93]:80 failed. Oct 8 15:50:15 ds01 Keepalived_healthcheckers[15444]: Check on service [10.1.80.93]:80 failed after 1 retry. Oct 8 15:50:15 ds01 Keepalived_healthcheckers[15444]: Removing service [10.1.80.93]:80 from VS [10.1.80.90]:80
Oct 8 16:11:41 ds01 Keepalived_healthcheckers[15444]: TCP connection to [10.1.80.93]:80 success. Oct 8 16:11:41 ds01 Keepalived_healthcheckers[15444]: Adding service [10.1.80.93]:80 to VS [10.1.80.90]:80
[root@demo-master-a-1 ~]$ ip route show default via 172.21.0.1 dev eth0 169.254.0.0/16 dev eth0 scope link metric 1002 172.21.0.0/20 dev eth0 proto kernel scope link src 172.21.0.12
[root@demo-master-a-1 ~]$ ip address 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo valid_lft forever preferred_lft forever 2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000 link/ether 00:16:3e:12:a4:1b brd ff:ff:ff:ff:ff:ff inet 172.17.216.80/20 brd 172.17.223.255 scope global dynamic eth0 valid_lft 305741654sec preferred_lft 305741654sec
[root@demo-master-a-1 ~]# kubectl get nodes NAME STATUS ROLES AGE VERSION demo-master-a-1 Ready master 5m3s v1.19.x demo-worker-a-1 Ready <none> 2m26s v1.19.x demo-worker-a-2 Ready <none> 3m56s v1.19.x
Worker节点不能启动 Master 节点的 IP 地址变化，导致 worker 节点不能启动。请重装集群，并确保所有节点都有固定内网 IP 地址。
许多Pod一直Crash或不能正常访问
1
kubectl get pods --all-namespaces
重启后会发现许多 Pod 不在 Running 状态，此时，请使用如下命令删除这些状态不正常的 Pod。通常，您的 Pod 如果是使用 Deployment、StatefulSet 等控制器创建的，kubernetes 将创建新的 Pod 作为替代，重新启动的 Pod 通常能够正常工作。
1
kubectl delete pod <pod-name> -n <pod-namespece>
安装过程中的问题
1 2 3 4 5 6 7 8
sysctl -p net.ipv4.ip_forward = 1 sysctl: cannot stat /proc/sys/net/bridge/bridge-nf-call-ip6tables: No such file or directory sysctl: cannot stat /proc/sys/net/bridge/bridge-nf-call-iptables: No such file or directory net.ipv6.conf.all.disable_ipv6 = 1 net.ipv6.conf.default.disable_ipv6 = 1 net.ipv6.conf.lo.disable_ipv6 = 1 net.ipv6.conf.all.forwarding = 1
systemd启动elasticsearch，需要设置这两个文件，否则启动会报如下错误 [1] bootstrap checks failed [1]: max file descriptors [4096] for elasticsearch process is too low, increase to at least [65535]
解压
1
tar xzvf elasticsearch-7.6.1-linux-x86_64.tar.gz -C /opt/
Mar 15 10:08:51 ubuntu bash[1308]: ERROR: [1] bootstrap checks failed Mar 15 10:08:51 ubuntu bash[1308]: [1]: max file descriptors [4096] for elasticsearch process is too low, increase to at least [65535] Mar 15 10:08:51 ubuntu bash[1308]: ERROR: Elasticsearch did not exit normally - check the logs at /opt/elasticsearch-7.6.1/logs/my-es.log Mar 15 10:08:51 ubuntu bash[1308]: [2020-03-15T02:08:51,352][INFO ][o.e.n.Node ] [node-1] stopping ... Mar 15 10:08:51 ubuntu bash[1308]: [2020-03-15T02:08:51,462][INFO ][o.e.n.Node ] [node-1] stopped Mar 15 10:08:51 ubuntu bash[1308]: [2020-03-15T02:08:51,463][INFO ][o.e.n.Node ] [node-1] closing ... Mar 15 10:08:51 ubuntu bash[1308]: [2020-03-15T02:08:51,535][INFO ][o.e.n.Node ] [node-1] closed
org.elasticsearch.bootstrap.StartupException: java.lang.RuntimeException: can not run elasticsearch as root at org.elasticsearch.bootstrap.Elasticsearch.init(Elasticsearch.java:174) ~[elasticsearch-7.6.1.jar:7.6.1] at org.elasticsearch.bootstrap.Elasticsearch.execute(Elasticsearch.java:161) ~[elasticsearch-7.6.1.jar:7.6.1] at org.elasticsearch.cli.EnvironmentAwareCommand.execute(EnvironmentAwareCommand.java:86) ~[elasticsearch-7.6.1.jar:7.6.1] at org.elasticsearch.cli.Command.mainWithoutErrorHandling(Command.java:125) ~[elasticsearch-cli-7.6.1.jar:7.6.1] at org.elasticsearch.cli.Command.main(Command.java:90) ~[elasticsearch-cli-7.6.1.jar:7.6.1] at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:126) ~[elasticsearch-7.6.1.jar:7.6.1] at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:92) ~[elasticsearch-7.6.1.jar:7.6.1] Caused by: java.lang.RuntimeException: can not run elasticsearch as root at org.elasticsearch.bootstrap.Bootstrap.initializeNatives(Bootstrap.java:105) ~[elasticsearch-7.6.1.jar:7.6.1] at org.elasticsearch.bootstrap.Bootstrap.setup(Bootstrap.java:172) ~[elasticsearch-7.6.1.jar:7.6.1] at org.elasticsearch.bootstrap.Bootstrap.init(Bootstrap.java:349) ~[elasticsearch-7.6.1.jar:7.6.1] at org.elasticsearch.bootstrap.Elasticsearch.init(Elasticsearch.java:170) ~[elasticsearch-7.6.1.jar:7.6.1]
这个是最常见的了，不能用root用户来启动elasticsearch
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19
Exception in thread "main" org.elasticsearch.bootstrap.BootstrapException: java.nio.file.AccessDeniedException: /opt/elasticsearch-7.6.1/config/elasticsearch.keystore Likely root cause: java.nio.file.AccessDeniedException: /opt/elasticsearch-7.6.1/config/elasticsearch.keystore at java.base/sun.nio.fs.UnixException.translateToIOException(UnixException.java:90) at java.base/sun.nio.fs.UnixException.rethrowAsIOException(UnixException.java:111) at java.base/sun.nio.fs.UnixException.rethrowAsIOException(UnixException.java:116) at java.base/sun.nio.fs.UnixFileSystemProvider.newByteChannel(UnixFileSystemProvider.java:219) at java.base/java.nio.file.Files.newByteChannel(Files.java:374) at java.base/java.nio.file.Files.newByteChannel(Files.java:425) at org.apache.lucene.store.SimpleFSDirectory.openInput(SimpleFSDirectory.java:77) at org.elasticsearch.common.settings.KeyStoreWrapper.load(KeyStoreWrapper.java:219) at org.elasticsearch.bootstrap.Bootstrap.loadSecureSettings(Bootstrap.java:234) at org.elasticsearch.bootstrap.Bootstrap.init(Bootstrap.java:305) at org.elasticsearch.bootstrap.Elasticsearch.init(Elasticsearch.java:170) at org.elasticsearch.bootstrap.Elasticsearch.execute(Elasticsearch.java:161) at org.elasticsearch.cli.EnvironmentAwareCommand.execute(EnvironmentAwareCommand.java:86) at org.elasticsearch.cli.Command.mainWithoutErrorHandling(Command.java:125) at org.elasticsearch.cli.Command.main(Command.java:90) at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:126) at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:92)
2020-03-07 14:50:20,774 main ERROR Unable to invoke factory method in class org.apache.logging.log4j.core.appender.RollingFileAppender for element RollingFile: java.lang.IllegalStateException: No factory method found for class org.apache.logging.log4j.core.appender.RollingFileAppender java.lang.IllegalStateException: No factory method found for class org.apache.logging.log4j.core.appender.RollingFileAppender at org.apache.logging.log4j.core.config.plugins.util.PluginBuilder.findFactoryMethod(PluginBuilder.java:235) at org.apache.logging.log4j.core.config.plugins.util.PluginBuilder.build(PluginBuilder.java:135) at org.apache.logging.log4j.core.config.AbstractConfiguration.createPluginObject(AbstractConfiguration.java:959) at org.apache.logging.log4j.core.config.AbstractConfiguration.createConfiguration(AbstractConfiguration.java:899) at org.apache.logging.log4j.core.config.AbstractConfiguration.createConfiguration(AbstractConfiguration.java:891) at org.apache.logging.log4j.core.config.AbstractConfiguration.doConfigure(AbstractConfiguration.java:514) at org.apache.logging.log4j.core.config.AbstractConfiguration.initialize(AbstractConfiguration.java:238) at org.apache.logging.log4j.core.config.AbstractConfiguration.start(AbstractConfiguration.java:250) at org.apache.logging.log4j.core.LoggerContext.setConfiguration(LoggerContext.java:547) at org.apache.logging.log4j.core.LoggerContext.start(LoggerContext.java:263) at org.elasticsearch.common.logging.LogConfigurator.configure(LogConfigurator.java:234) at org.elasticsearch.common.logging.LogConfigurator.configure(LogConfigurator.java:127) at org.elasticsearch.bootstrap.Bootstrap.init(Bootstrap.java:310) at org.elasticsearch.bootstrap.Elasticsearch.init(Elasticsearch.java:170) at org.elasticsearch.bootstrap.Elasticsearch.execute(Elasticsearch.java:161) at org.elasticsearch.cli.EnvironmentAwareCommand.execute(EnvironmentAwareCommand.java:86) at org.elasticsearch.cli.Command.mainWithoutErrorHandling(Command.java:125) at org.elasticsearch.cli.Command.main(Command.java:90) at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:126) at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:92)
处理方法 chown -R es:es $ES_HOME/logs
1 2 3 4 5 6 7 8 9 10 11 12 13 14
[2020-03-07T14:11:03,119][WARN ][o.e.c.c.Coordinator ] [node-1] failed to validate incoming join request from node [{node-2}{OTFjHR3wRuyQBMbb9PdGoQ}{GH_dXyYZQIuyjnnBTsELRw}{192.168.56.132}{192.168.56.132:9300}{dil}{ml.machine_memory=3665874944, ml.max_open_jobs=20, xpack.installed=true}] org.elasticsearch.transport.RemoteTransportException: [node-2][192.168.56.132:9300][internal:cluster/coordination/join/validate] Caused by: org.elasticsearch.cluster.coordination.CoordinationStateRejectedException: join validation on cluster state with a different cluster uuid of6I6UasSd209Y_5-YdZ2A than local cluster uuid 4jifFlHcR9K7wQflerzo3g, rejecting at org.elasticsearch.cluster.coordination.JoinHelper.lambda$new$4(JoinHelper.java:148) ~[elasticsearch-7.6.1.jar:7.6.1] at org.elasticsearch.xpack.security.transport.SecurityServerTransportInterceptor$ProfileSecuredRequestHandler$1.doRun(SecurityServerTransportInterceptor.java:257) ~[?:?] at org.elasticsearch.common.util.concurrent.AbstractRunnable.run(AbstractRunnable.java:37) ~[elasticsearch-7.6.1.jar:7.6.1] at org.elasticsearch.xpack.security.transport.SecurityServerTransportInterceptor$ProfileSecuredRequestHandler.messageReceived(SecurityServerTransportInterceptor.java:315) ~[?:?] at org.elasticsearch.transport.RequestHandlerRegistry.processMessageReceived(RequestHandlerRegistry.java:63) ~[elasticsearch-7.6.1.jar:7.6.1] at org.elasticsearch.transport.InboundHandler$RequestHandler.doRun(InboundHandler.java:264) ~[elasticsearch-7.6.1.jar:7.6.1] at org.elasticsearch.common.util.concurrent.ThreadContext$ContextPreservingAbstractRunnable.doRun(ThreadContext.java:692) ~[elasticsearch-7.6.1.jar:7.6.1] at org.elasticsearch.common.util.concurrent.AbstractRunnable.run(AbstractRunnable.java:37) ~[elasticsearch-7.6.1.jar:7.6.1] at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1128) [?:?] at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:628) [?:?] at java.lang.Thread.run(Thread.java:830) [?:?]
FROM openjdk:8-jdk-alpine MAINTAINER jaychang <jaychang1987@gmail.com> VOLUME /tmp ARG FILE ARG APP_NAME ADD ${FILE} /app.jar # PINPOINT_VERSION Default 1.6.2 it can be replaced at docker run use -e or docker service -e or environment in docker-compose.yml ENV PINPOINT_VERSION=1.6.2 ENV JAVA_OPTS="-XX:MaxRAMFraction=2" ENV PINPOINT_OPTS="-Dpinpoint.agentId=${APP_NAME} -Dpinpoint.applicationName=$APP_NAME" # Configure ustc alpine software source and timezone RUN sed -i "s/http:\/\/dl-cdn.alpinelinux.org/https:\/\/mirrors.aliyun.com/g" /etc/apk/repositories \ && apk update \ && apk --no-cache add tzdata curl tini \ && cp /usr/share/zoneinfo/Asia/Shanghai /etc/localtime \ && echo"Asia/Shanghai" > /etc/timezone \ && rm -rf /var/cache/apk/* # To reduce Tomcat startup time we added a system property pointing to "/dev/urandom" as a source of entropy. ENTRYPOINT ["/sbin/tini", "--"] CMD ["sh","-c","java $JAVA_OPTS -javaagent:/pinpoint_data/pinpoint-agent-${PINPOINT_VERSION}/pinpoint-bootstrap-$PINPOINT_VERSION.jar $PINPOINT_OPTS -Djava.security.egd=file:/dev/./urandom -jar app.jar"]
带字体版
常见的场景如excel导出，验证码
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18
FROM openjdk:8-jdk-alpine MAINTAINER jaychang <jaychang1987@gmail.com> VOLUME /tmp ARG FILE ARG APP_NAME ADD ${FILE} /app.jar ENV JAVA_OPTS="-XX:MaxRAMFraction=2" # Configure ustc alpine software source and timezone RUN sed -i "s/http:\/\/dl-cdn.alpinelinux.org/https:\/\/mirrors.aliyun.com/g" /etc/apk/repositories \ && apk update \ && apk --no-cache add tzdata curl tini \ && apk --no-cahce add font-adobe-100dpi ttf-dejavu fontconfig \ && cp /usr/share/zoneinfo/Asia/Shanghai /etc/localtime \ && echo"Asia/Shanghai" > /etc/timezone \ && rm -rf /var/cache/apk/* # To reduce Tomcat startup time we added a system property pointing to "/dev/urandom" as a source of entropy. ENTRYPOINT ["/sbin/tini", "--"] CMD ["sh","-c","java $JAVA_OPTS -Djava.security.egd=file:/dev/./urandom -jar app.jar"]
Google Jib的优势是无需事先安装docker，无需定义Dockerfile文件，而且Google Jib可以分层,依赖的jar构成一层，resource构成一层，然后项目本身的classes构建一层。这样如果只是改变项目本身代码，那么构建是非常快的。且推送的镜像也是非常小的，可以大大节省网络流量。
########################## # Logging ########################## # mysql log timezone use system timezone log_timestamps=SYSTEM log_error = /data/mysql/log/mysql_error.log
########################## # gtid ########################## gtid_mode = on enforce_gtid_consistency = on replicate_ignore_db=mysql replicate_ignore_db=information_schema replicate_ignore_db=performation_schema replicate_ignore_db=sys
########################## # General logs (only enable for debugging – it use too much I/O) ########################## #general-log = on #general-log-file = /data/mysql/log/general-query.log
root@ubuntu:/usr/local/src/nginx-1.14.2# nginx -t nginx: error while loading shared libraries: libluajit-5.1.so.2: cannot open shared object file: No such file or directory
nginx: [alert] detected a LuaJIT version which is not OpenResty's; many optimizations will be disabled and performance will be compromised (see https://github.com/openresty/luajit2 for OpenResty's LuaJIT or, even better, consider using the OpenResty releases from https://openresty.org/en/download.html) nginx: [error] lua_load_resty_core failed to load the resty.core module from https://github.com/openresty/lua-resty-core; ensure you are using an OpenResty release from https://openresty.org/en/download.html (rc: 2, reason: module 'resty.core' not found: no field package.preload['resty.core'] no file ' /usr/local/lib/lua-resty-core-0.1.17/lib/resty/core.lua' no file './resty/core.lua' no file '/usr/local/share/luajit-2.0.5/resty/core.lua' no file '/usr/local/share/lua/5.1/resty/core.lua' no file '/usr/local/share/lua/5.1/resty/core/init.lua' no file './resty/core.so' no file '/usr/local/lib/lua/5.1/resty/core.so' no file '/usr/local/lib/lua/5.1/loadall.so' no file './resty.so' no file '/usr/local/lib/lua/5.1/resty.so' no file '/usr/local/lib/lua/5.1/loadall.so')
# add support for img which has query params, # like: xxx.jpg?a=b&c=d_750x750.jpg if ($args ~* "^([^_]+)_(\d+)+x(\d+)+\.(jpg|jpeg|gif|png)$") { set $w $2; set $h $3; set $img_ext $4;
# set var for thumb pic set $upload_path /var/filebase; set $img_original_root $upload_path;# original root; set $img_thumbnail_root $upload_path/cache/thumb; set $img_file $img_thumbnail_root$uri;
# like：/xx/xx/xx.jpg_100-.jpg or /xx/xx/xx.jpg_-100.jpg location ~* ^(.+\.(jpg|jpeg|gif|png))_((\d+\-)|(\-\d+))\.(jpg|jpeg|gif|png)$ { root $img_thumbnail_root; # root path for croped img set $img_size $3;
if (!-f $img_file) { # if file not exists add_header X-Powered-By 'Nginx+Lua+GraphicsMagick By Botao'; # header for test add_header file-path $request_filename; # header for test set $request_filepath $img_original_root$1; # origin_img full path：/document_root/1.gif set $img_size $3; # img width or height size depends on uri set $img_ext $2; # file ext content_by_lua_file /usr/local/nginx/lua/autoSize.lua; # load lua } }
if (!-f $img_file) { # if file not exists add_header X-Powered-By 'Nginx+Lua+GraphicsMagick By Botao'; # header for test add_header file-path $request_filename; # header for test set $request_filepath $img_original_root$1; # origin_img file path set $img_width $3; # img width set $img_height $4; # height set $img_ext $5; # file ext content_by_lua_file /usr/local/nginx/lua/cropSize.lua; # load lua } }
# if need (all go there) location ~* /upload { root $img_original_root; }
-- 检测路径是否目录 local function is_dir(sPath) if type(sPath) ~= "string" then return false end
local response = os.execute("cd " .. sPath) if response == 0 then return true end return false end
-- 文件是否存在 function file_exists(name) local f = io.open(name, "r") if f ~= nil then io.close(f) return true else return false end end
-- 获取文件路径 function getFileDir(filename) return string.match(filename, "(.+)/[^/]*%.%w+$") --*nix system end
-- 获取文件名 function strippath(filename) return string.match(filename, ".+/([^/]*%.%w+)$") -- *nix system end
--去除扩展名 function stripextension(filename) local idx = filename:match(".+()%.%w+$") if (idx) then return filename:sub(1, idx - 1) else return filename end end
--获取扩展名 function getExtension(filename) return filename:match(".+%.(%w+)$") end
function getImgSize(img)
end
-- 判断尺寸是否合法 -- check image size function table.contains(table, element) for _, value in pairs(table) do if value == element then return true end end return false end
if image_sizes_check then if not table.contains(image_sizes, ngx.var.img_size) then ngx.exit(404); end end -- check image end
-- 检测路径是否目录 local function is_dir(sPath) if type(sPath) ~= "string" then return false end
local response = os.execute("cd " .. sPath) if response == 0 then return true end return false end
-- 文件是否存在 function file_exists(name) local f = io.open(name, "r") if f ~= nil then io.close(f) return true else return false end end
-- 获取文件路径 function getFileDir(filename) return string.match(filename, "(.+)/[^/]*%.%w+$") --*nix system end
-- 获取文件名 function strippath(filename) return string.match(filename, ".+/([^/]*%.%w+)$") -- *nix system end
--去除扩展名 function stripextension(filename) local idx = filename:match(".+()%.%w+$") if (idx) then return filename:sub(1, idx - 1) else return filename end end
--获取扩展名 function getExtension(filename) return filename:match(".+%.(%w+)$") end
-- 判断尺寸是否合法 -- 待切割的图片尺寸 local img_width_height = ngx.var.img_width .. "x" .. ngx.var.img_height; -- check image size function table.contains(table, element) for _, value in pairs(table) do if value == element then return true end end return false end
if image_sizes_check then if not table.contains(image_sizes, img_width_height) then ngx.exit(404); end end -- check image end
curl -R -O http://www.lua.org/ftp/lua-5.3.5.tar.gz tar zxf lua-5.3.5.tar.gz cd lua-5.3.5 make linux test
编译安装LuaJIT
1 2 3 4 5 6 7
curl -R -O http://luajit.org/download/LuaJIT-2.0.5.tar.gz tar -zxvf LuaJIT-2.0.5.tar.gz cd LuaJIT-2.0.5 make -j2 export LUAJIT_LIB=/usr/local/lib export LUAJIT_INC=/usr/local/include/luajit-2.0 ln -s /usr/local/lib/libluajit-5.1.so.2 /lib64/libluajit-5.1.so.2
安装GraphicsMagick
1 2 3 4 5
wget ftp://ftp.graphicsmagick.org/pub/GraphicsMagick/1.3/GraphicsMagick-1.3.31.tar.gz tar xzvf GraphicsMagick-1.3.31.tar.gz cd GraphicsMagick-1.3.31 ./configure --prefix=/usr/local/GraphicsMagick --enable-shared make && make install
jaychang@tengine:/usr/local/tengine/sbin$ ./nginx -t ./nginx: error while loading shared libraries: libluajit-5.1.so.2: cannot open shared object file: No such file or directory
# add support for img which has query params, # like: xxx.jpg?a=b&c=d_750x750.jpg if ($args ~* "^([^_]+)_(\d+)+x(\d+)+\.(jpg|jpeg|gif|png)$") { set $w $2; set $h $3; set $img_ext $4;
# set var for thumb pic set $upload_path /var/filebase; set $img_original_root $upload_path;# original root; set $img_thumbnail_root $upload_path/cache/thumb; set $img_file $img_thumbnail_root$uri;
# like：/xx/xx/xx.jpg_100-.jpg or /xx/xx/xx.jpg_-100.jpg location ~* ^(.+\.(jpg|jpeg|gif|png))_((\d+\-)|(\-\d+))\.(jpg|jpeg|gif|png)$ { root $img_thumbnail_root; # root path for croped img set $img_size $3;
if (!-f $img_file) { # if file not exists add_header X-Powered-By 'Nginx+Lua+GraphicsMagick By Botao'; # header for test add_header file-path $request_filename; # header for test set $request_filepath $img_original_root$1; # origin_img full path：/document_root/1.gif set $img_size $3; # img width or height size depends on uri set $img_ext $2; # file ext content_by_lua_file /usr/local/tengine/lua/autoSize.lua; # load lua } }
if (!-f $img_file) { # if file not exists add_header X-Powered-By 'Nginx+Lua+GraphicsMagick By Botao'; # header for test add_header file-path $request_filename; # header for test set $request_filepath $img_original_root$1; # origin_img file path set $img_width $3; # img width set $img_height $4; # height set $img_ext $5; # file ext content_by_lua_file /usr/local/tengine/lua/cropSize.lua; # load lua } }
# if need (all go there) location ~* /upload { root $img_original_root; }
-- 检测路径是否目录 local function is_dir(sPath) if type(sPath) ~= "string" then return false end
local response = os.execute("cd " .. sPath) if response == 0 then return true end return false end
-- 文件是否存在 function file_exists(name) local f = io.open(name, "r") if f ~= nil then io.close(f) return true else return false end end
-- 获取文件路径 function getFileDir(filename) return string.match(filename, "(.+)/[^/]*%.%w+$") --*nix system end
-- 获取文件名 function strippath(filename) return string.match(filename, ".+/([^/]*%.%w+)$") -- *nix system end
--去除扩展名 function stripextension(filename) local idx = filename:match(".+()%.%w+$") if (idx) then return filename:sub(1, idx - 1) else return filename end end
--获取扩展名 function getExtension(filename) return filename:match(".+%.(%w+)$") end
function getImgSize(img)
end
-- 判断尺寸是否合法 -- check image size function table.contains(table, element) for _, value in pairs(table) do if value == element then return true end end return false end
if image_sizes_check then if not table.contains(image_sizes, ngx.var.img_size) then ngx.exit(404); end end -- check image end
-- 检测路径是否目录 local function is_dir(sPath) if type(sPath) ~= "string" then return false end
local response = os.execute("cd " .. sPath) if response == 0 then return true end return false end
-- 文件是否存在 function file_exists(name) local f = io.open(name, "r") if f ~= nil then io.close(f) return true else return false end end
-- 获取文件路径 function getFileDir(filename) return string.match(filename, "(.+)/[^/]*%.%w+$") --*nix system end
-- 获取文件名 function strippath(filename) return string.match(filename, ".+/([^/]*%.%w+)$") -- *nix system end
--去除扩展名 function stripextension(filename) local idx = filename:match(".+()%.%w+$") if (idx) then return filename:sub(1, idx - 1) else return filename end end
--获取扩展名 function getExtension(filename) return filename:match(".+%.(%w+)$") end
-- 判断尺寸是否合法 -- 待切割的图片尺寸 local img_width_height = ngx.var.img_width .. "x" .. ngx.var.img_height; -- check image size function table.contains(table, element) for _, value in pairs(table) do if value == element then return true end end return false end
if image_sizes_check then if not table.contains(image_sizes, img_width_height) then ngx.exit(404); end end -- check image end
[Service] Type=notify # the default is not to use systemd for cgroups because the delegate issues still # exists and systemd currently does not support the cgroup feature set required # for containers run by docker ExecStart=/usr/bin/dockerd -H fd:// -H 0.0.0.0:2375 --containerd=/run/containerd/containerd.sock ExecReload=/bin/kill -s HUP $MAINPID TimeoutSec=0 RestartSec=2 Restart=always
# Note that StartLimit* options were moved from "Service" to "Unit" in systemd 229. # Both the old, and new location are accepted by systemd 229 and up, so using the old location # to make them work for either version of systemd. StartLimitBurst=3
# Note that StartLimitInterval was renamed to StartLimitIntervalSec in systemd 230. # Both the old, and new name are accepted by systemd 230 and up, so using the old name to make # this option work for either version of systemd. StartLimitInterval=60s
# Having non-zero Limit*s causes performance problems due to accounting overhead # in the kernel. We recommend using cgroups to do container-local accounting. LimitNOFILE=infinity LimitNPROC=infinity LimitCORE=infinity
# Comment TasksMax if your systemd version does not supports it. # Only systemd 226 and above support this option. TasksMax=infinity
# set delegate yes so that systemd does not reset the cgroups of docker containers
内容过多省略...
还可以改成
1 2
# for containers run by docker ExecStart=/usr/bin/dockerd -H unix:// -H 0.0.0.0:2375 --containerd=/run/containerd/containerd.sock
或
1 2
# for containers run by docker ExecStart=/usr/bin/dockerd -H unix:///var/run/docker.sock -H 0.0.0.0:2375 --containerd=/run/containerd/containerd.sock
[root@localhost ~]# yum -y update nss Loaded plugins: fastestmirror Setting up Update Process base | 3.7 kB 00:00 base/primary_db | 4.7 MB 00:01 extras | 3.4 kB 00:00 extras/primary_db | 30 kB 00:00 updates | 3.4 kB 00:00 updates/primary_db | 8.1 MB 00:03 Resolving Dependencies --> Running transaction check ---> Package nss.x86_64 0:3.16.1-14.el6 will be updated --> Processing Dependency: nss = 3.16.1-14.el6 for package: nss-sysinit-3.16.1-14.el6.x86_64 --> Processing Dependency: nss(x86-64) = 3.16.1-14.el6 for package: nss-tools-3.16.1-14.el6.x86_64 ---> Package nss.x86_64 0:3.28.4-4.el6_9 will be an update --> Processing Dependency: nss-util >= 3.28.3 for package: nss-3.28.4-4.el6_9.x86_64 --> Processing Dependency: nss-softokn(x86-64) >= 3.14.3-22 for package: nss-3.28.4-4.el6_9.x86_64 --> Processing Dependency: nspr >= 4.13.0 for package: nss-3.28.4-4.el6_9.x86_64 --> Processing Dependency: libnssutil3.so(NSSUTIL_3.24)(64bit) for package: nss-3.28.4-4.el6_9.x86_64 --> Processing Dependency: libnssutil3.so(NSSUTIL_3.21)(64bit) for package: nss-3.28.4-4.el6_9.x86_64 --> Running transaction check ---> Package nspr.x86_64 0:4.10.6-1.el6_5 will be updated ---> Package nspr.x86_64 0:4.13.1-1.el6 will be an update ---> Package nss-softokn.x86_64 0:3.14.3-17.el6 will be updated ---> Package nss-softokn.x86_64 0:3.14.3-23.3.el6_8 will be an update --> Processing Dependency: nss-softokn-freebl(x86-64) >= 3.14.3-23.3.el6_8 for package: nss-softokn-3.14.3-23.3.el6_8.x86_64 ---> Package nss-sysinit.x86_64 0:3.16.1-14.el6 will be updated ---> Package nss-sysinit.x86_64 0:3.28.4-4.el6_9 will be an update ---> Package nss-tools.x86_64 0:3.16.1-14.el6 will be updated ---> Package nss-tools.x86_64 0:3.28.4-4.el6_9 will be an update ---> Package nss-util.x86_64 0:3.16.1-3.el6 will be updated ---> Package nss-util.x86_64 0:3.28.4-1.el6_9 will be an update --> Running transaction check ---> Package nss-softokn-freebl.x86_64 0:3.14.3-17.el6 will be updated ---> Package nss-softokn-freebl.x86_64 0:3.14.3-23.3.el6_8 will be an update --> Finished Dependency Resolution
Dependencies Resolved
=============================================================================================================================================================================================== Package Arch Version Repository Size =============================================================================================================================================================================================== Updating: nss x86_64 3.28.4-4.el6_9 updates 879 k Updating for dependencies: nspr x86_64 4.13.1-1.el6 base 114 k nss-softokn x86_64 3.14.3-23.3.el6_8 base 262 k nss-softokn-freebl x86_64 3.14.3-23.3.el6_8 base 168 k nss-sysinit x86_64 3.28.4-4.el6_9 updates 51 k nss-tools x86_64 3.28.4-4.el6_9 updates 447 k nss-util x86_64 3.28.4-1.el6_9 updates 68 k
vi /etc/grub.conf (这里踩了个坑，我改了/etc/grub.conf文件，但是貌似一直没有生效，后来发现原来用的是/boot/grub/grub.conf，这个得事先观察下是否存在这个/boot/grub/grub.conf)，一般情况应该都是使用/etc/grub.conf。但无论如何安装内核都是去操作/etc/grub.conf文件的，如果grub启动用的是/boot/grub/grub.conf，那么请将/etc/grub.conf文件内新安装的内核的启动引导配置复制到/boot/grub/grub.conf文件内。
# grub.conf generated by anaconda # # Note that you do not have to rerun grub after making changes to this file # NOTICE: You have a /boot partition. This means that # all kernel and initrd paths are relative to /boot/, eg. # root (hd0,0) # kernel /vmlinuz-version ro root=/dev/mapper/VolGroup-LogVol00 # initrd /initrd-[generic-]version.img #boot=/dev/sda default=0 timeout=5 splashimage=(hd0,0)/grub/splash.xpm.gz hiddenmenu title CentOS (4.4.132-1.el6.elrepo.x86_64) root (hd0,0) kernel /vmlinuz-4.4.132-1.el6.elrepo.x86_64 ro root=/dev/mapper/VolGroup-LogVol00 rd_NO_LUKS LANG=en_US.UTF-8 rd_NO_MD SYSFONT=latarcyrheb-sun16 crashkernel=auto KEYBOARDTYPE=pc KEYTABLE=us rd_LVM_LV=VolGroup/LogVol00 rd_NO_DM rhgb quiet initrd /initramfs-4.4.132-1.el6.elrepo.x86_64.img title CentOS 6 (2.6.32-504.el6.x86_64) root (hd0,0) kernel /vmlinuz-2.6.32-504.el6.x86_64 ro root=/dev/mapper/VolGroup-LogVol00 rd_NO_LUKS LANG=en_US.UTF-8 rd_NO_MD SYSFONT=latarcyrheb-sun16 crashkernel=auto KEYBOARDTYPE=pc KEYTABLE=us rd_LVM_LV=VolGroup/LogVol00 rd_NO_DM rhgb quiet initrd /initramfs-2.6.32-504.el6.x86_64.img
[root@localhost ~]# dockerd WARN[0000] could not change group /var/run/docker.sock to docker: group docker not found WARN[0000] libcontainerd: makeUpgradeProof could not open /var/run/docker/libcontainerd/containerd INFO[0000] libcontainerd: new containerd process, pid: 13659 WARN[0000] containerd: low RLIMIT_NOFILE changing to max current=1024 max=4096 FATA[0001] Your Linux kernel version 2.6.32-504.el6.x86_64 is not supported for running docker. Please upgrade your kernel to 3.10.0 or newer.
[root@localhost ~]# docker info Cannot connect to the Docker daemon at unix:///var/run/docker.sock. Is the docker daemon running?
[root@localhost ~]# dockerd WARN[0000] could not change group /var/run/docker.sock to docker: group docker not found INFO[0000] libcontainerd: new containerd process, pid: 1293 WARN[0000] containerd: low RLIMIT_NOFILE changing to max current=1024 max=4096 INFO[0001] [graphdriver] using prior storage driver: overlay2 INFO[0001] Graph migration to content-addressability took 0.00 seconds WARN[0001] Your kernel does not support cgroup memory limit WARN[0001] Unable to find cpu cgroup in mounts WARN[0001] Unable to find blkio cgroup in mounts WARN[0001] Unable to find cpuset cgroup in mounts WARN[0001] mountpoint for pids not found Error starting daemon: Devices cgroup isn't mounted
# 必须要以root帐号或sudo来运行 wget_bin=`which wget` if [ -z "$wget_bin" ];then echo "please install wget" >&2 exit 1 fi # 禁用 fastestmirror 插件 sed -i.backup 's/^enabled=1/enabled=0/' /etc/yum/pluginconf.d/fastestmirror.conf # 备份 mv /etc/yum.repos.d/CentOS-Base.repo /etc/yum.repos.d/CentOS-Base.repo.backup # 使用阿里云镜像 wget -O /etc/yum.repos.d/CentOS-Base-aliyun.repo http://mirrors.aliyun.com/repo/Centos-6.repo # 安装 EPEL 源(用于更新内核) elrepo="/etc/yum.repos.d/elrepo.repo" if [ ! -f $elrepo ]; then yum -y update nss rpm --import https://www.elrepo.org/RPM-GPG-KEY-elrepo.org rpm -Uvh http://www.elrepo.org/elrepo-release-6-8.el6.elrepo.noarch.rpm fi
# 使用阿里云镜像 if [[ ! -f /etc/yum.repos.d/epel.repo.backup ]]; then mv /etc/yum.repos.d/epel.repo /etc/yum.repos.d/epel.repo.backup 2>/dev/null || : fi if [[ ! -f /etc/yum.repos.d/epel-testing.repo.backup ]]; then mv /etc/yum.repos.d/epel-testing.repo /etc/yum.repos.d/epel-testing.repo.backup 2>/dev/null || : fi wget -O /etc/yum.repos.d/epel.repo http://mirrors.aliyun.com/repo/epel.repo wget -O /etc/yum.repos.d/epel-testing.repo http://mirrors.aliyun.com/repo/epel-testing.repo yum clean all yum makecache
# 安装cgroup，docker依赖它 if [ ! -d "/sys/fs/cgroup" ]; then yum install -y libcgroup fi count=`cat /etc/fstab |grep "/sys/fs/cgroup"|grep -v grep |wc -l` if [ $count -eq 0 ]; then echo "none /sys/fs/cgroup cgroup defaults 0 0" >> /etc/fstab fi
# 找出4.4内核的启动顺序，并自动修改/etc/grub.conf(这里有坑如果是grub配置文件用的是/boot/grub/grub.conf请自行修改) count=`cat /etc/grub.conf |grep "/vmlinuz-4.4.*" |grep -v grep |wc -l` if [ $count -eq 0 ]; then yum --enablerepo=elrepo-kernel install kernel-lt -y content=`cat /etc/grub.conf |grep title` target_kernel=4.4 num=0 target=0 while read line do echo $line if [[ "$line" == *"$target_kernel"* ]]; then target=$num fi let num=num+1 done <<< "$content" sed -i 's/^default\s*=\s*[0-9]/default=$target/g' /etc/grub.conf fi
# 压轴了，安装docker dockerd_bin=`which dockerd` if [ -z "$dockerd_bin" ]; then if [ ! -f "docker-17.06.2-ce.tgz" ]; then wget http://mirrors.ustc.edu.cn/docker-ce/linux/static/stable/x86_64/docker-17.06.2-ce.tgz tar -xzvf docker-17.06.2-ce.tgz && cp docker/* /usr/bin && rm -rf docker count=`cat /etc/rc.local |grep dockerd | grep -v grep | wc -l` if [ $count -eq 0 ]; then echo "nohup dockerd > /var/log/dockerd.log 2>&1 &" >> /etc/rc.local fi fi fi
if [ ! -d "/etc/docker" ]; then mkdir -p /etc/docker fi
docker_daemon_file="/etc/docker/daemon.json" if [ ! -f $docker_daemon_file ]; then echo "{\"registry-mirrors\": [\"https://docker.mirrors.ustc.edu.cn\"]}" > /etc/docker/daemon.json fi
如果是在复制模式下该参数是必须的，要么在启动容器时，指定此环境变量。要么在zoo.cfg配置文件里指定 。This variable allows you to specify a list of machines of the Zookeeper ensemble. Each entry has the form of server.id=host:port:port. Entries are separated with space. Do note that this variable will not have any effect if you start the container with a /conf directory that already contains the zoo.cfg file.
# The number of milliseconds of each tick tickTime=2000 # The number of ticks that the initial # synchronization phase can take initLimit=10 # The number of ticks that can pass between # sending a request and getting an acknowledgement syncLimit=5 # the directory where the snapshot is stored. # do not use /tmp for storage, /tmp here is just # example sakes. dataDir=/data dataLogDir=/datalog # the port at which the clients will connect clientPort=2181 # the maximum number of client connections. # increase this if you need to handle more clients #maxClientCnxns=60 # # Be sure to read the maintenance section of the # administrator guide before turning on autopurge. # # http://zookeeper.apache.org/doc/current/zookeeperAdmin.html#sc_maintenance # # The number of snapshots to retain in dataDir #autopurge.snapRetainCount=3 # Purge task interval in hours # Set to "0" to disable auto purge feature #autopurge.purgeInterval=1
# The number of milliseconds of each tick tickTime=2000 # The number of ticks that the initial # synchronization phase can take initLimit=10 # The number of ticks that can pass between # sending a request and getting an acknowledgement syncLimit=5 # the directory where the snapshot is stored. # do not use /tmp for storage, /tmp here is just # example sakes. dataDir=/data dataLogDir=/datalog # the port at which the clients will connect clientPort=2182 # the maximum number of client connections. # increase this if you need to handle more clients #maxClientCnxns=60 # # Be sure to read the maintenance section of the # administrator guide before turning on autopurge. # # http://zookeeper.apache.org/doc/current/zookeeperAdmin.html#sc_maintenance # # The number of snapshots to retain in dataDir #autopurge.snapRetainCount=3 # Purge task interval in hours # Set to "0" to disable auto purge feature #autopurge.purgeInterval=1 server.1=192.168.56.101:2881:3881 server.2=192.168.56.101:2882:3882 server.3=192.168.56.101:2883:3883
# The number of milliseconds of each tick tickTime=2000 # The number of ticks that the initial # synchronization phase can take initLimit=10 # The number of ticks that can pass between # sending a request and getting an acknowledgement syncLimit=5 # the directory where the snapshot is stored. # do not use /tmp for storage, /tmp here is just # example sakes. dataDir=/data dataLogDir=/datalog # the port at which the clients will connect clientPort=2183 # the maximum number of client connections. # increase this if you need to handle more clients #maxClientCnxns=60 # # Be sure to read the maintenance section of the # administrator guide before turning on autopurge. # # http://zookeeper.apache.org/doc/current/zookeeperAdmin.html#sc_maintenance # # The number of snapshots to retain in dataDir #autopurge.snapRetainCount=3 # Purge task interval in hours # Set to "0" to disable auto purge feature #autopurge.purgeInterval=1 server.1=192.168.56.101:2881:3881 server.2=192.168.56.101:2882:3882 server.3=192.168.56.101:2883:3883
Status clearList(SqList *sqList){ if (!sqList) { return FAILURE; } sqList->length = 0; return SUCCESS; }
Status getElement(SqList sqList, int i, ElementType *e){ if (i < 1 || i > sqList.length) { return FAILURE; } *e = sqList.data[i]; return SUCCESS; }
intlocateElement(SqList sqList, ElementType e){ for (int i = 0; i < sqList.length; i++) { if (sqList.data[i] == e) { return i + 1; } } return0; }
Status listInsert(SqList *sqList, int i, ElementType e){ if (sqList->length >= MAXSIZE || i < 1 || i > sqList->length + 1) { return FAILURE; } if (i <= sqList->length) { // 从最后那个元素到第i个元素每个元素都往后移动一个位置 for (int j = sqList->length - 1; j >= i - 1; j--) { sqList->data[j + 1] = sqList->data[j]; } } // 将原先第i个元素值替换为e sqList->data[i - 1] = e; // 线性表长度+1 sqList->length = sqList->length + 1; return SUCCESS; }
Status listDelete(SqList *sqList, int i, ElementType *e){ if (i <= 0 || i >= sqList->length + 1) { return FAILURE; } *e = sqList->data[i - 1]; for (int j = i - 1; j < sqList->length - 1; j++) { sqList->data[j] = sqList->data[j + 1]; } sqList->length = sqList->length - 1; return SUCCESS; }
voidlistPrint(SqList *sqList){ for (int i = 0; i < sqList->length; i++) { printf("%d\n", sqList->data[i]); } printf("length=%d\n", sqList->length); }
intmain(){ SqList sqList; initList(&sqList); for (int i = 1; i <= 10; i++) { listInsert(&sqList, i, (ElementType) i); } listPrint(&sqList); printf("locate the element 3's index = %d", locateElement(sqList, 3)); ElementType deletedElement; listDelete(&sqList, 4, &deletedElement); printf("deleted element is %d", deletedElement); listPrint(&sqList); return0; }
]]>
