[TOC]

0x01 基础配置

如何查看KylinOS银河麒麟操作系统版本?

描述: 我们可使用如下三种方式（命令）进行对应银河麒麟操作系统版本的查询。

# 方式1.
$ nkvers
  ############## Kylin Linux Version #################
  Release:
  Kylin Linux Advanced Server release V10 (Lance)
  
  Kernel:
  4.19.90-52.15.v2207.ky10.x86_64
  
  Build:
  Kylin Linux Advanced Server
  release V10 (SP3) /(Lance)-x86_64-Build20/20221125

# 方式2.
$ cat /etc/os-release
  NAME="Kylin Linux Advanced Server"
  VERSION="V10 (Lance)"
  ID="kylin"
  VERSION_ID="V10"
  PRETTY_NAME="Kylin Linux Advanced Server V10 (Lance)"
  ANSI_COLOR="0;31"

# 方式3.
$ cat /etc/.productinfo
  Kylin Linux Advanced Server
  release V10 (SP3) /(Lance)-x86_64-Build20/20221125

# 扩展知识(提取版本信息):
release=$(grep -e "^VERSION=" /etc/os-release | cut -f 2 -d "=" | tr -d '[:punct:][:space:]')
if [ ${release} == "V10Lance" ];then echo "V10Lance";fi

温馨提示: 当前银河银河麒麟高级服务器操作系统V10发行版如下.

• (Tercel) 版本是 银河麒麟 V10 SP1 版本，
• (Sword) 版本是 银河麒麟 V10 SP2 版本，
• (Lance) 版本是 银河麒麟 V10 SP3 版本，

如何给KylinOS银河麒麟系统加上自定义登录欢迎语?

描述: 我们可以通过三种方式，让我们在登录服务器时显示文本欢迎语（前两种）或者执行命令显示信息相关信息（后一种）。

# 方式1.登录SSH前警告Banner提示。（文本）
sudo tee /etc/issue.net <<'EOF'
************************* [ 安全登陆 (Security Login) ] *************************
Authorized users only. All activity will be monitored and reported.By Security Center.
Author: WeiyiGeek, Blog: https://www.weiyigeek.top

EOF
cp -a /etc/issue.net /etc/issue

# 方式2.本地控制台与SSH登录后提示自定义提示信息。（文本）
tee /etc/motd <<'EOF'

Welcome to IT Cloud Computer Service!

                   _ooOoo_
                  o8888888o
                  88" . "88
                  (| -_- |)
                  O\  =  /O
               ____/`---'\____
             .'  \\|     |//  `.

            /  \\|||  :  |||//  \
           /  _||||| -:- |||||-  \
           |   | \\\  -  /// |   |
           | \_|  ''\---/''  |   |
           \  .-\__  `-`  ___/-. /
         ___`. .'  /--.--\  `. . __
      ."" '<  `.___\_<|>_/___.'  >'"".
     | | :  `- \`.;`\ _ /`;.`/ - ` : | |
     \  \ `-.   \_ __\ /__ _/   .-` /  /
======`-.____`-.___\_____/___.-`____.-'======
                   `=---='
 
 
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
           佛祖保佑       永不死机
           心外无法       法外无心

EOF

# 方式3.用户登录自定义登录提示信息（脚本执行）
tee /usr/local/bin/00-custom-header <<'EOF'
#!/bin/bash
# Author: WeiyiGeek, Blog: https://www.weiyigeek.top
# Get last login time
LAST_LOGIN=$(last -n 2 --time-format iso | sed -n '2p;')
LAST_LOGIN_T=$(echo ${LAST_LOGIN} | awk '{print $2}')
LAST_LOGIN_IP=$(echo ${LAST_LOGIN} | awk '{print $3}')
LAST_LOGIN_TIME=$(echo ${LAST_LOGIN} | awk '{print $4}')
LAST_LOGOUT_TIME=$(echo ${LAST_LOGIN} | awk '{print $6}')

# Get load averages
LOAD1=$(grep "" /proc/loadavg | awk '{print $1}')
LOAD5=$(grep "" /proc/loadavg | awk '{print $2}')
LOAD15=$(grep "" /proc/loadavg | awk '{print $3}')

# Get free memory
MEMORY_USED=$(free -t -m | grep "Mem" | awk '{print $3}')
MEMORY_ALL=$(free -t -m | grep "Mem" | awk '{print $2}')
MEMORY_PERCENTAGE=$(free | awk '/Mem/{printf("%.2f%"), $3/$2*100}')

# Get system uptime
UPTIME=$(grep "" /proc/uptime | cut -f1 -d.)
UPTIME_DAYS=$(("${UPTIME}"/60/60/24))
UPTIME_HOURS=$(("${UPTIME}"/60/60%24))
UPTIME_MINS=$(("${UPTIME}"/60%60))
UPTIME_SECS=$(("${UPTIME}"%60))

# Get processes
PROCESS=$(ps -eo user=|sort|uniq -c | awk '{print $2 " " $1 }')
PROCESS_ALL=$(echo "${PROCESS}" | awk '{print $2}' | awk '{SUM += $1} END {print SUM}')
PROCESS_ROOT=$(echo "${PROCESS}" | grep root | awk '{print $2}')
PROCESS_USER=$(echo "${PROCESS}" | grep -v root | awk '{print $2}' | awk '{SUM += $1} END {print SUM}')

# Get processors
PROCESSOR_NAME=$(grep "model name" /proc/cpuinfo | cut -d ' ' -f3- | awk '{print $0}' | head -1)
PROCESSOR_COUNT=$(grep -ioP 'processor\t:' /proc/cpuinfo | wc -l)


# Colors
G="\033[01;32m"
R="\033[01;31m"
D="\033[39m\033[2m"
N="\033[0m"

echo 
echo -e "\e[01;38;44;5m########################## 安全运维 (Security Operation) ############################\e[0m"
echo -e "${G}Login success.${N} Please execute the commands and operation data carefully.By WeiyiGeek."
echo -e "You are logged in to ${G}$(uname -n)${N}, Login time is $(/bin/date "+%Y-%m-%d %H:%M:%S").\n"
echo -e "[System Info]\n"
echo -e "  SYSTEM    : $(awk -F'[="]+' '/PRETTY_NAME/{print $2}' /etc/os-release)"
echo -e "  KERNEL    : $(uname -sr)"
echo -e "  UPTIME    : ${UPTIME_DAYS} days ${UPTIME_HOURS} hours ${UPTIME_MINS} minutes ${UPTIME_SECS} seconds"
echo -e "  CPU       : ${PROCESSOR_NAME} (${G}${PROCESSOR_COUNT}${N} vCPU)\n"
echo -e "  MEMORY    : ${MEMORY_USED} MB / ${MEMORY_ALL} MB (${G}${MEMORY_PERCENTAGE}${N} Used)"
echo -e "  LOAD AVG  : ${G}${LOAD1}${N} (1m), ${G}${LOAD5}${N} (5m), ${G}${LOAD15}${N} (15m)"
echo -e "  PROCESSES : ${G}${PROCESS_ROOT}${N} (root), ${G}${PROCESS_USER}${N} (user), ${G}${PROCESS_ALL}${N} (total)"
echo -e "  USERS     : ${G}$(users | wc -w)${N} users logged in"
echo -e "  BASH      : ${G}${BASH_VERSION}${N}\n"
EOF
# Add motd Execute permissions
chmod +x /usr/local/bin/00-custom-header 

# Add motd to /etc/profile files.
if [ $(grep -c "00-custom-header" /etc/profile) -eq 0 ];then 
  echo "/usr/local/bin/00-custom-header" >> /etc/profile
fi

如何给银河麒麟系统更新软件源?

快速配置

# 备份银河麒麟镜像源目录文件
$ cp /etc/yum.repos.d/kylin_x86_64.repo{,.bak}

# 查看官方镜像源文件
$ cat /etc/yum.repos.d/kylin_x86_64.repo

### Kylin Linux Advanced Server 10 - os repo ###
[ks10-adv-os]
name = Kylin Linux Advanced Server 10 - Os
baseurl = https://update.cs2c.com.cn/NS/V10/V10SP3/os/adv/lic/base/$basearch/
gpgcheck = 1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-kylin
enabled = 1

[ks10-adv-updates]
name = Kylin Linux Advanced Server 10 - Updates
baseurl = https://update.cs2c.com.cn/NS/V10/V10SP3/os/adv/lic/updates/$basearch/
gpgcheck = 1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-kylin
enabled = 1

[ks10-adv-addons]
name = Kylin Linux Advanced Server 10 - Addons
baseurl = https://update.cs2c.com.cn/NS/V10/V10SP3/os/adv/lic/addons/$basearch/
gpgcheck = 1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-kylin
enabled = 0

# 配置后需清理缓存及创建新的缓存
yum clean all
yum makecache

---

0x02 软件安装

如何在银河麒麟操作系统中安装 nfs 服务及客户端?

快速安装

# 查询软件包是否安装
 rpm-qa|grep rpcbind nfs-utils

# 安装nfs软件包
dnf install nfs-utils rpcbind 

# 防火墙放行设置
firewall-cmd --permanent --zone=public --add-service=nfs
firewall-cmd --permanent --zone=public --add-service=rpc-bind 
firewall-cmd --permanent --zone=public --add-service=mountd 
firewall-cmd --reload 

# 客户端查看服务器端nfs共享的文件系统
showmount -e 服务端ip

如何在银河麒麟操作系统中安装 docker ?

快速安装

# 1.卸载旧版本 
sudo yum remove docker docker-engine docker.io containerd runc

# 2.安装相关依赖包
sudo dnf install pt-transport-https

# 3.设置稳定镜像源存储库，此处采用阿里的docker源（CentOS8）
# Official
# DOCKER_COMPOSE_MIRRORS='https://github.com'
# DOCKER_CE_MIRRORS='https://download.docker.com'
# DOCKER_MIRRORS='https://docker.io'
yum-config-manager --add-repo https://mirrors.aliyun.com/docker-ce/linux/centos/docker-ce.repo
sed -i 's#download.docker.com#mirrors.aliyun.com/docker-ce#' /etc/yum.repos.d/docker-ce.repo
# 使用 CentOS 8 的源
echo "8" > /etc/yum/vars/centos_version
sed -i 's/$releasever/$centos_version/g'  /etc/yum.repos.d/docker-ce.repo

# 4.查看Docker特定的相关版本，使用如下命令列出可用的版本
dnf list docker-ce  --showduplicates | sort -r | head -n 2
dnf list docker-ce-cli --showduplicates | sort -r | head -n 2
dnf list containerd.io --showduplicates | sort -r | head -n 2

# 5.安装Docker最新版本，此处我们指定的是最新版本。
# 使用第二列中的版本字符串安装特定的版本，例如:containerd.io.x86_64  1.6.9-3.1.el8 docker-ce-stable
# $sudo apt-get install docker-ce-<VERSION_STRING> docker-ce-cli-<VERSION_STRING> containerd.io
dnf install docker-ce-3:23.0.1-1.el8 docker-ce-cli-1:23.0.1-1.el8 containerd.io-1.6.9-3.1.el8 -y

# 6.将当前（低）用户加入docker用户组然后重新登陆当前用户使得低权限用户
sudo gpasswd -a ${USER} docker

# 7.配置docker后台守护进程
mkdir -vp /etc/docker/
sudo tee /etc/docker/daemon.json <<-'EOF'
{
"data-root":"/var/lib/docker",
"registry-mirrors": ["https://xlx9erfu.mirror.aliyuncs.com"],
"exec-opts": ["native.cgroupdriver=systemd"],
"storage-driver": "overlay2",
"log-driver": "json-file",
"log-level": "warn",
"log-opts": {
  "max-size": "100m",
  "max-file": "10"
},
"live-restore": true,
"dns": ["223.6.6.6","114.114.114.114"],
"insecure-registries": [ "harbor.weiyigeek.top"]
}
EOF

# 8.自启与启动
sudo systemctl daemon-reload
sudo systemctl enable docker.service
sudo systemctl restart docker.service

# 9.验证安装的 docker 服务
systemctl status docker.service --no-pager -l
docker info

# 10.启动一个 hello-world 容器，验证是否正常
docker info
docker run --rm hello-world

如何在银河麒麟操作系统中安装 docker-compose ?

快速安装

#  Setting Docker-Compose MIRRORS
DOCKER_COMPOSE_MIRRORS='https://get.daocloud.io'
# Default New Version v2.16.0 (2023年3月8日 18:57:48)
DOCKER_COMPOSE_VERSION=
# Download、Install Docker-Compose
curl -L ${DOCKER_COMPOSE_MIRRORS}/docker/compose/releases/download/${DOCKER_COMPOSE_VERSION:="v2.16.0"}/docker-compose-"$(uname -s)"-"$(uname -m)" -o /usr/local/bin/docker-compose
chmod +x /usr/local/bin/docker-compose
ln -s /usr/local/bin/docker-compose /usr/bin/docker-compose
# Verify Install
docker-compose version

如何在银河麒麟操作系统中自动挂载磁盘分区 ?

描述: 当我们误操作/etc/fstab文件时，我们可以通过下述快速恢复挂载信息。

$ blkid
/dev/mapper/klas-swap: UUID="2420b50d-dc9c-403f-9e9e-223dcad196b0" TYPE="swap"
/dev/mapper/klas-var: UUID="296659eb-abc2-4700-a234-d0b12e640c90" BLOCK_SIZE="512" TYPE="xfs"
/dev/mapper/klas-root: UUID="372a7997-7638-4616-8cdf-6b205727ad59" BLOCK_SIZE="512" TYPE="xfs"
/dev/mapper/klas-opt: UUID="d1e3af16-78c6-409f-aa55-9b99f1a99ea4" BLOCK_SIZE="512" TYPE="xfs"
/dev/sda2: UUID="821c8898-0e09-4158-b817-b9c7a3ead52b" BLOCK_SIZE="512" TYPE="xfs" PARTUUID="c47f2119-c7b9-4195-8f2a-d7dc308521bb"
/dev/sda3: UUID="KNDT3D-3Zdc-DfUT-gQOW-Dg4B-BTPn-t4erYx" TYPE="LVM2_member" PARTUUID="85f7ddc4-2960-422b-80c3-799f82893214"
/dev/sda1: SEC_TYPE="msdos" UUID="733A-0287" BLOCK_SIZE="512" TYPE="vfat" PARTLABEL="EFI System Partition" PARTUUID="450945ad-686e-4c97-9005-69055cbd36f2"

$ vim /etc/fstab
/dev/mapper/klas-root   /                       xfs     defaults        0 0
/dev/mapper/klas-var    /var                    xfs     defaults        0 0
UUID=04821c8898-0e09-4158-b817-b9c7a3ead52b /boot                   ext4    defaults        1 2
UUID=733A-0287       /boot/efi               vfat    umask=0077,shortname=winnt 0 2