10.7.2. 准备工作设置ip信息nmcli con add ifname ens33 con-name ens33 type ethernet ipv4.method manual ipv4.address 192.158.46.150/24 ipv4.gateway 192.168.46.1Note我使用的nmcli修改的ip，当然也是可以手工修改的。10.7.3. ansible的配置10.7.3.1. 安装ansible[root@localhost ~]# yum install ansible10.7.3.2. 添加主机需要添加如下内容到/etc/ansible/hosts文件中去。[client]192.168.46.159[dns]192.168.46.158[web]192.168.46.157192.168.46.156[db]192.168.46.155[nfs]192.168.46.154[self]192.168.46.15010.7.3.3. 配置免密码登陆这里我之前写有一个脚本自动完成免密码登陆的脚本，参考我的博客[root@localhost ~]# cat hosts.txt192.168.46.150 root oracle192.168.46.151 root oracle192.168.46.152 root oracle192.168.46.153 root oracle192.168.46.154 root oracle192.168.46.155 root oracle192.168.46.156 root oracle192.168.46.157 root oracle192.168.46.158 root oracle192.168.46.159 root oracle192.168.46.160 root oracle[root@localhost ~]# cat mima.sh#!/bin/bash#================================================#FileName :expect_ssh.sh#Author :zhaojiedi#Description:#DateTime :2018-01-05 08:26:06#Version :V1.0#Other :#================================================host_username_password_file=hosts.txt# install expectrpm -q expect &>/dev/null || yum install -yq expect &>/dev/null# create id_rsa.pub filepubkey=~/.ssh/id_rsa.pubif [ ! -e "$pubkey" ] ; then ssh-keygen -P "" -t rsa -f ~/.ssh/id_rsafiwhile read host username password ; do con=${username}"@"${host} echo $password expect <<EOF set timeout 20 spawn ssh-copy-id $con expect { "yes/no" { send "yes\n" ; exp_continue } "password:" { send "${password}\n"; exp_continue } }EOFdone < $host_username_password_file# 执行下脚本，自动完成公钥copy工作了[root@localhost ~]# bash mima.sh# 测试下[root@localhost ~]# ssh 192.168.46.151 ‘ip a show ens33‘10.7.3.4. 设置主机名（可选）我这里的机器全是刚刚克隆出来的虚拟机，为了管理方便设置下主机名，防止误操作。# 创建一个设置主机名的脚本[root@localhost ~]# vim set_hostname.sh[root@localhost ~]# cat set_hostname.sh#!/bin/bashecho "start"hostnamename=centos-$(ip a show ens33 |grep ‘inet.*ens33‘ | sed -r -n ‘s@.*\.([0-9]{1,3})/.*@\1@p‘).linuxpanda.techecho $namehostnamectl set-hostname $nameecho "end"[root@centos-localhost ~]# ansible all -m script -a ‘/root/set_hostname.sh‘这个脚本也是设置了ansible主机的ip。10.7.3.5. 防火墙和selinux关闭# 关闭防火墙[root@centos-150 ~]# ansible all -m service -a ‘name=firewalld enabled=no‘[root@centos-150 ~]# ansible all -m service -a ‘name=firewalld state=stopped‘[root@centos-150 ~]# ansible all -m shell -a ‘sed -i -r ‘s@SELINUX=.*@SELINUX=disabled@‘ /etc/sysconfig/selinux‘[root@centos-150 ~]# ansible all -m shell -a ‘setenforce 0‘Note如果原有selinux就是disabled，使用setenforce 0会报错误的，不用管它。10.7.4. dns主机设置10.7.4.1. dns配置[root@centos-158 ~]# yum install bind bind-utils[root@centos-158 ~]# vim /etc/named.conf# 注释如下5行// listen-on port 53 { 127.0.0.1; };// listen-on-v6 port 53 { ::1; };// allow-query { localhost; };// dnssec-enable yes;// dnssec-validation yes;[root@centos-158 ~]# vim /etc/named.rfc1912.zones# 添加如下内容，注意之后的分号zone "linuxpanda.tech" IN { type master; file "linuxpanda.tech.zone";};[root@centos-158 ~]# cd /var/named/[root@centos-158 named]# cp -a named.localhost linuxpanda.tech.zone[root@centos-158 named]# vim linuxpanda.tech.zone[root@centos-158 named]# cat linuxpanda.tech.zone$TTL 1D@ IN SOA ns1 admin ( 0 ; serial 1D ; refresh 1H ; retry 1W ; expire 3H ) ; minimum NS ns1ns1 A 192.168.46.158web A 192.168.46.157web A 192.168.46.156www CNAME web10.7.4.2. dns本机测试[root@centos-158 named]# dig www.linuxpanda.tech @localhost; <<>> DiG 9.9.4-RedHat-9.9.4-51.el7_4.2 <<>> www.linuxpanda.tech @localhost;; global options: +cmd;; Got answer:;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 57957;; flags: qr aa rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 1, ADDITIONAL: 2;; OPT PSEUDOSECTION:; EDNS: version: 0, flags:; udp: 4096;; QUESTION SECTION:;www.linuxpanda.tech. IN A;; ANSWER SECTION:www.linuxpanda.tech. 86400 IN CNAME web.linuxpanda.tech.web.linuxpanda.tech. 86400 IN A 192.168.46.156web.linuxpanda.tech. 86400 IN A 192.168.46.157;; AUTHORITY SECTION:linuxpanda.tech. 86400 IN NS ns1.linuxpanda.tech.;; ADDITIONAL SECTION:ns1.linuxpanda.tech. 86400 IN A 192.168.46.158;; Query time: 0 msec;; SERVER: 127.0.0.1#53(127.0.0.1);; WHEN: Sun Feb 18 21:05:05 CST 2018;; MSG SIZE rcvd: 13210.7.5. client主机测试# 修改客户端的dns指向为我们自己的dns主机[root@centos-159 ~]# nmcli con modify ens33 ipv4.dns 192.168.46.158# 重启网络，或者重新加载[root@centos-159 ~]# service network restart# ping下我们的web主机，看是否能解析出来157，156两个ip[root@centos-159 ~]# ping www.linuxpanda.techPING web.linuxpanda.tech (192.168.46.157) 56(84) bytes of data.64 bytes from 192.168.46.157 (192.168.46.157): icmp_seq=1 ttl=64 time=0.330 ms64 bytes from 192.168.46.157 (192.168.46.157): icmp_seq=2 ttl=64 time=0.255 ms64 bytes from 192.168.46.157 (192.168.46.157): icmp_seq=3 ttl=64 time=0.292 ms[root@centos-159 ~]# ping www.linuxpanda.techPING web.linuxpanda.tech (192.168.46.156) 56(84) bytes of data.64 bytes from 192.168.46.156 (192.168.46.156): icmp_seq=1 ttl=64 time=0.421 msNoteping命令去测试有点不专业的，需要多次测试才能2个地址都出现，这里就不安装dig工具了，毕竟客户端。10.7.6. nfs主机配置10.7.6.1. 添加用户[root@centos-154 ~]# groupadd -g 48 apache[root@centos-154 ~]# useradd -u 48 -g 48 apache[root@centos-154 ~]# id apacheuid=48(apache) gid=48(apache) groups=48(apache)10.7.6.2. 修改权限[root@centos-154 ~]# chown -R apache.apache /data/html10.7.6.3. 共享出去[root@centos-154 ~]# yum install nfs-utils[root@centos-154 ~]# vim /etc/exports[root@centos-154 ~]# cat /etc/exports/data/html 192.168.46.156(rw,all_squash,anonuid=apache,anongid=apache)/data/html 192.168.46.156(rw,all_squash,anonuid=apache,anongid=apache)[root@centos-154 ~]# systemctl restart nfsd[root@centos-154 ~]# exportfs -v/data/html 192.168.46.156(rw,sync,wdelay,hide,no_subtree_check,anonuid=48,anongid=48,sec=sys,secure,root_squash,all_squash)/data/html 192.168.46.157(rw,sync,wdelay,hide,no_subtree_check,anonuid=48,anongid=48,sec=sys,secure,root_squash,all_squash)10.7.7. mysql主机配置10.7.7.1. 安装软件[root@centos-155 ~]# yum install mariadb-server mariadb10.7.7.2. 启动服务[root@centos-155 ~]# systemctl start mariadb[root@centos-155 ~]# netstat -tunlp |grep 3306tcp 0 0 0.0.0.0:3306 0.0.0.0:* LISTEN 13680/mysqld10.7.7.3. 添加应用用户[root@centos-155 ~]# mysql -u root -pEnter password:Welcome to the MariaDB monitor. Commands end with ; or \g.Your MariaDB connection id is 10Server version: 5.5.56-MariaDB MariaDB ServerCopyright (c) 2000, 2017, Oracle, MariaDB Corporation Ab and others.Type ‘help;‘ or ‘\h‘ for help. Type ‘\c‘ to clear the current input statement.MariaDB [(none)]> create database web ;Query OK, 1 row affected (0.00 sec)MariaDB [(none)]> grant all on web.* to web@‘192.168.46.%‘ identified by ‘oracle‘;Query OK, 0 rows affected (0.05 sec)10.7.7.4. 安全初始化[root@centos-155 ~]# mysql_secure_installation10.7.8. web主机配置这里是2个主机。10.7.8.1. 安装软件# 安装[root@centos-150 ~]# ansible web -m yum -a ‘name=httpd,php-fpm,php-mysql,mod_fcgid state=installed‘# 启动服务[root@centos-150 ~]# ansible web -m service -a ‘name=httpd state=started‘[root@centos-150 ~]# ansible web -m service -a ‘name=php-fpm state=started‘10.7.8.2. 挂载目录# 安装必要的挂载相关的软件[root@centos-156 httpd]# yum install nfs-utils cifs-utils# 启动rpc服务[root@centos-156 httpd]# systemctl restart rpcbind# 查看远程的导出情况[root@centos-156 httpd]# showmount -e 192.168.46.154Export list for 192.168.46.154:/data/html 192.168.46.157,192.168.46.156# 挂载[root@centos-156 httpd]# mount 192.168.46.154:/data/html /var/www/html# 自动挂载[root@centos-156 httpd]# tail -n 1 /etc/mtab192.168.46.154:/data/html /var/www/html nfs4 rw,relatime,vers=4.1,rsize=65536,wsize=65536,namlen=255,hard,proto=tcp,port=0,timeo=600,retrans=2,sec=sys,clientaddr=192.168.46.156,local_lock=none,addr=192.168.46.154 0 0[root@centos-156 httpd]# tail -n 1 /etc/mtab >> /etc/fstab# 查看下样例网页[root@centos-156 httpd]# cat /var/www/html/index.htmlhellow world10.7.8.3. 配置httpd本部分内容需要在2个机器都要做一遍。# 下载一个样例的php页面[root@centos-156 httpd]# wget download.linuxpanda.tech/lamp/index.php.sample -O /var/www/html/index.php# 编辑下样例php页面的数据库连接用户和密码[root@centos-156 httpd]# vim /var/www/html/index.php[root@centos-156 httpd]# cat /var/www/html/index.php<?php$mysqli=new mysqli("192.168.46.155","web","oracle");if(mysqli_connect_errno()){echo "失败了";$mysqli=null;exit;}echo "成功了";$mysqli->close();?># fcgi编辑[root@centos-156 conf.d]# vim fcgid.conf# 添加如下3行DirectoryIndex index.phpProxyRequests OffProxyPassMatch ^/(.*\.php)$ fcgi://127.0.0.1:9000/var/www/html/$1# 重启网络服务[root@centos-156 conf.d]# service httpd restart10.7.8.4. 本机测试本部分内容需要在2个机器都要做一遍。[root@centos-156 conf.d]# curl localhost/index.php成功了10.7.9. client测试[root@centos-159 ~]# curl http://www.linuxpanda.tech/index.php成功了# 把156的web停掉[root@centos-159 ~]# curl http://www.linuxpanda.tech/index.php成功了# 再把157的web停掉[root@centos-159 ~]# curl http://www.linuxpanda.tech/index.phpcurl: (7) Failed connect to www.linuxpanda.tech:80; Connection refused10.7.10. 总结这个作业，看起来挺简单的，做起来还是遇到些麻烦的。需要改进的地方： dns解析太不稳定，如果web1停掉，dns还可能解析到这个停掉的主机，就会导致web没法访问。 mysql实例后面学习了主从可以考虑完善下。 lamp没有使用xcache加速下 本练习都是使用的yum安装的lamp环境，可以考虑使用编译安装方法。 数据通过nfs共享，本质还是一个磁盘的数据，可以考虑使用rsync来替代nfs。 数据文件可以考虑放到raid上，来提供文件的访问性能
