{"id":82415,"date":"2026-07-25T08:50:33","date_gmt":"2026-07-25T00:50:33","guid":{"rendered":"https:\/\/www.wsisp.com\/helps\/82415.html"},"modified":"2026-07-25T08:50:33","modified_gmt":"2026-07-25T00:50:33","slug":"%e4%bb%8e%e8%bf%9c%e7%a8%8b%e8%bf%90%e7%bb%b4%e5%88%b0-web-%e6%9c%8d%e5%8a%a1%e9%85%8d%e7%bd%ae","status":"publish","type":"post","link":"https:\/\/www.wsisp.com\/helps\/82415.html","title":{"rendered":"\u4ece\u8fdc\u7a0b\u8fd0\u7ef4\u5230 Web \u670d\u52a1\u914d\u7f6e"},"content":{"rendered":"<h3>ssh\u670d\u52a1<\/h3>\n<p>ssh\u670d\u52a1\u662f\u8fdc\u7a0b\u5b89\u5168\u767b\u5f55\u548c\u7ba1\u7406Linux\u670d\u52a1\u5668\u7684\u6838\u5fc3\u5de5\u5177\u3002<\/p>\n<h4>\u8fdc\u7a0b\u63a7\u5236Linux\u64cd\u4f5c<\/h4>\n<p>1\u3001\u786e\u8ba4\u662f\u5426\u5f00\u542fsshd\u670d\u52a1<\/p>\n<p>systemctl status sshd.service<\/p>\n<p><img decoding=\"async\" src=\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/07\/20260725005031-6a640857bf60b.png\" alt=\"\u5728\u8fd9\u91cc\u63d2\u5165\u56fe\u7247\u63cf\u8ff0\" \/><br \/>\n2\u3001\u786e\u8ba4\u9ed8\u8ba4\u7aef\u53e322\u6253\u5f00<\/p>\n<p>netstat -tnlp|grep :22<\/p>\n<p><img decoding=\"async\" src=\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/07\/20260725005031-6a640857d108c.png\" alt=\"\u5728\u8fd9\u91cc\u63d2\u5165\u56fe\u7247\u63cf\u8ff0\" \/><br \/>\n3\u3001\u8fde\u63a5\u8fdc\u7a0b\u670d\u52a1\u5668<br \/>\n\u683c\u5f0f&#xff1a;<\/p>\n<p>ssh    \u7528\u6237\u8eab\u4efd&#064;\u8fdc\u7a0b\u670d\u52a1ip<br \/>\nexit   #\u9000\u51fa\u94fe\u63a5\u8fdc\u7a0b\u4e3b\u673a<\/p>\n<p>\u4f8b&#xff1a;<\/p>\n<p>ssh root&#064;localhost<\/p>\n<p>\u7b2c\u4e00\u6b21\u8fdb\u884c\u8fdc\u7a0b\u8fde\u63a5\u65f6&#xff0c;\u4f1a\u751f\u6210\u5bc6\u94a5&#xff0c;\u65b9\u4fbf\u4e0b\u6b21\u8fde\u63a5\u4f7f\u7528\u3002<br \/>\n<img decoding=\"async\" src=\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/07\/20260725005031-6a640857dc15d.png\" alt=\"\u5728\u8fd9\u91cc\u63d2\u5165\u56fe\u7247\u63cf\u8ff0\" \/><br \/>\n\u5047\u5982\u518d\u6b21\u8fde\u63a5\u8fdc\u7a0b\u4e3b\u673a&#xff0c;\u5f53\u8fdc\u7a0b\u4e3b\u673aip\u53d1\u751f\u53d8\u5316\u65f6&#xff0c;\u9700\u8981\u6e05\u9664\u7f13\u5b58&#xff0c;\u91cd\u65b0\u751f\u6210\u5bc6\u94a5\u3002<\/p>\n<p>rm -fr ~\/.ssh\/known_hosts<br \/>\nssh-keygen -R localhost    #\u6216\u5220\u9664\u6307\u5b9a\u6761\u76ee<\/p>\n<p>\u4f7f\u7528\u7528\u6237lzc\u8fdb\u884c\u8fdc\u7a0b\u8fde\u63a5server2<\/p>\n<p>cat \/etc\/hosts    #\u9996\u5148\u5728server1\u89e3\u6790\u8fdc\u7a0b\u7528\u6237\u540d<\/p>\n<p><img decoding=\"async\" src=\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/07\/20260725005031-6a640857e4e09.png\" alt=\"\u5728\u8fd9\u91cc\u63d2\u5165\u56fe\u7247\u63cf\u8ff0\" \/><\/p>\n<p>ssh lzc&#064;server2    <\/p>\n<p><img decoding=\"async\" src=\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/07\/20260725005031-6a640857f33f3.png\" alt=\"\u5728\u8fd9\u91cc\u63d2\u5165\u56fe\u7247\u63cf\u8ff0\" \/><br \/>\n\u5f53\u6211\u4eec\u8f93\u5165rootlogin\u5bc6\u7801\u540e&#xff0c;\u51fa\u73b0\u62a5\u9519<br \/>\n<img decoding=\"async\" src=\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/07\/20260725005032-6a6408580b066.png\" alt=\"\u5728\u8fd9\u91cc\u63d2\u5165\u56fe\u7247\u63cf\u8ff0\" \/><br \/>\n\u5230server2\u7684\u8ba4\u8bc1\u65e5\u5fd7\u67e5\u770b\u62d2\u7edd\u539f\u56e0<br \/>\n<img decoding=\"async\" src=\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/07\/20260725005032-6a64085820c95.png\" alt=\"\u5728\u8fd9\u91cc\u63d2\u5165\u56fe\u7247\u63cf\u8ff0\" \/><br \/>\n\u5bc6\u7801\u9519\u8bef&#xff0c;\u91cd\u7f6e\u5bc6\u7801<\/p>\n<p>sudo passwd lzc<\/p>\n<p>\u53e6\u4e00\u79cd\u60c5\u51b5&#xff0c;lzc\u5e76\u672a\u8bbe\u7f6e\u5bc6\u7801&#xff0c;\u4e5f\u4f1a\u5bfc\u81f4\u767b\u5f55\u5931\u8d25&#xff0c;<\/p>\n<p>cat \/etc\/shadow<\/p>\n<p>\u00b7!! \u2014 \u4ece\u672a\u8bbe\u7f6e\u8fc7\u5bc6\u7801<br \/>\n\u00b7* \u2014 \u5bc6\u7801\u88ab\u9501\u5b9a\/\u7981\u7528<br \/>\n<img decoding=\"async\" src=\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/07\/20260725005032-6a64085830f44.png\" alt=\"\u5728\u8fd9\u91cc\u63d2\u5165\u56fe\u7247\u63cf\u8ff0\" \/><br \/>\n\u4ee5\u9632\u540e\u7eed\u51fa\u73b0\u8fd9\u79cd\u9519\u8bef&#xff0c;\u53ef\u4ee5\u7528\u5bc6\u94a5\u8ba4\u8bc1\u5b9e\u73b0\u514d\u5bc6\u64cd\u4f5c&#xff0c;\u8be6\u7ec6\u65b9\u6cd5\u89c1\u4e0b\u6587\u3002<br \/>\n\u5e38\u89c1\u9519\u8bef\u8fd8\u6709&#xff0c;\u8fdc\u7a0b\u670d\u52a1\u7aef\u7981\u6b62\u539f\u59cb\u5bc6\u7801\u8ba4\u8bc1\u6216\u8005\u7981\u6b62\u8d85\u7ea7\u7528\u6237\u767b\u5f55&#xff0c;\u6b64\u65f6\u9700\u8981\u5bf9ssh\u670d\u52a1\u914d\u7f6e\u6587\u4ef6\/etc\/ssh\/sshd_config\u8fdb\u884c\u4fee\u6539\u3002<br \/>\n<img decoding=\"async\" src=\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/07\/20260725005032-6a64085839ddf.png\" alt=\"\u5728\u8fd9\u91cc\u63d2\u5165\u56fe\u7247\u63cf\u8ff0\" \/><\/p>\n<h4>ssh\u5e38\u7528\u53c2\u6570<\/h4>\n<table>\n<tr>\u53c2\u6570\u8bf4\u660e\u793a\u4f8b<\/tr>\n<tbody>\n<tr>\n<td>-p<\/td>\n<td>\u6307\u5b9a\u7aef\u53e3&#xff08;\u9ed8\u8ba4 22&#xff09;<\/td>\n<td>ssh -p 2222 user&#064;host<\/td>\n<\/tr>\n<tr>\n<td>-i<\/td>\n<td>\u6307\u5b9a\u79c1\u94a5\u6587\u4ef6<\/td>\n<td>ssh -i ~\/.ssh\/my_key user&#064;host<\/td>\n<\/tr>\n<tr>\n<td>-l<\/td>\n<td>\u6307\u5b9a\u767b\u5f55\u7528\u6237\u540d<\/td>\n<td>ssh -l alice host<\/td>\n<\/tr>\n<tr>\n<td>-o<\/td>\n<td>\u8986\u76d6\u914d\u7f6e\u9009\u9879<\/td>\n<td>ssh -o &#034;StrictHostKeyChecking&#061;no&#034; host<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>\u5b89\u5168\u52a0\u56fa\u5efa\u8bae<br \/>\n\u5728\/etc\/ssh\/sshd_config\u4e2d\u914d\u7f6e&#xff1a;<\/p>\n<p><span class=\"token comment\"># \u7981\u7528 root \u76f4\u63a5\u767b\u5f55<\/span><br \/>\nPermitRootLogin no<\/p>\n<p><span class=\"token comment\"># \u7981\u7528\u5bc6\u7801\u8ba4\u8bc1&#xff0c;\u4ec5\u4f7f\u7528\u5bc6\u94a5<\/span><br \/>\nPasswordAuthentication no<br \/>\nPubkeyAuthentication <span class=\"token function\">yes<\/span><\/p>\n<p><span class=\"token comment\"># \u4ec5\u4f7f\u7528 SSH-2<\/span><br \/>\nProtocol <span class=\"token number\">2<\/span><\/p>\n<p><span class=\"token comment\"># \u4fee\u6539\u9ed8\u8ba4\u7aef\u53e3&#xff08;\u53ef\u9009&#xff0c;\u589e\u52a0\u9690\u853d\u6027&#xff09;<\/span><br \/>\nPort <span class=\"token number\">2222<\/span><\/p>\n<p><span class=\"token comment\"># \u9650\u5236\u5141\u8bb8\u767b\u5f55\u7684\u7528\u6237<\/span><br \/>\nAllowUsers alice bob<\/p>\n<p><span class=\"token comment\"># \u7a7a\u95f2\u8d85\u65f6\u65ad\u5f00<\/span><br \/>\nClientAliveInterval <span class=\"token number\">300<\/span><br \/>\nClientAliveCountMax <span class=\"token number\">2<\/span><\/p>\n<p><span class=\"token comment\"># \u7981\u7528\u7a7a\u5bc6\u7801<\/span><br \/>\nPermitEmptyPasswords no<\/p>\n<p>\u4fee\u6539\u540e\u6267\u884c sudo systemctl restart\/reload sshd \u751f\u6548\u3002<br \/>\n\u4f8b&#xff1a;<\/p>\n<p>ssh -l root localhost -o &#034;StrictHostKeyChecking&#061;no&#034;<\/p>\n<p>\u9996\u6b21\u767b\u5f55\u514d\u5bc6<br \/>\n<img decoding=\"async\" src=\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/07\/20260725005032-6a64085850de4.png\" alt=\"\u5728\u8fd9\u91cc\u63d2\u5165\u56fe\u7247\u63cf\u8ff0\" \/><\/p>\n<h4>ssh\u514d\u5bc6\u8bbf\u95ee<\/h4>\n<p>1\u3001\u5728\u672c\u5730\u751f\u6210\u5bc6\u94a5\u5bf9<\/p>\n<p>ssh-keygen<\/p>\n<p>\u6301\u7eed\u56de\u8f66<br \/>\n<img decoding=\"async\" src=\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/07\/20260725005032-6a6408585c9cf.png\" alt=\"\u5728\u8fd9\u91cc\u63d2\u5165\u56fe\u7247\u63cf\u8ff0\" \/><\/p>\n<p>2\u3001\u62f7\u8d1d\u516c\u94a5\u5230\u8fdc\u7a0b\u4e3b\u673a<\/p>\n<p>ssh-copy-id server1<\/p>\n<p>\u6216\u8005\u4f7f\u7528scp -rp .ssh\/ server1:<br \/>\n\u5047\u5982\u7528\u7528\u6237\u8fdb\u884c\u514d\u5bc6\u767b\u5f55<\/p>\n<p>ssh-copy-id lzc&#064;server1  #\u62f7\u8d1d\u5230\u7528\u6237<\/p>\n<p>3\u3001\u518d\u6b21\u767b\u5f55\u5219\u4e0d\u9700\u8981\u5bc6\u7801<\/p>\n<p>ssh server2<\/p>\n<h4>\u8fdc\u7a0b\u6587\u4ef6\u540c\u6b65 scp\u548crsync<\/h4>\n<p>scp\u57fa\u672c\u8bed\u6cd5<\/p>\n<p>scp file.txt user&#064;host:\/path\/<\/p>\n<p><span class=\"token comment\"># \u672c\u5730 \u2192 \u8fdc\u7a0b<\/span><br \/>\n<span class=\"token function\">scp<\/span> file.txt user&#064;host:\/path\/<\/p>\n<p><span class=\"token comment\"># \u8fdc\u7a0b \u2192 \u672c\u5730<\/span><br \/>\n<span class=\"token function\">scp<\/span> user&#064;host:\/path\/file.txt .\/<\/p>\n<p><span class=\"token comment\"># \u76ee\u5f55&#xff08;\u9012\u5f52&#xff09;<\/span><br \/>\n<span class=\"token function\">scp<\/span> <span class=\"token parameter variable\">-r<\/span> .\/dir user&#064;host:\/path\/<\/p>\n<p><span class=\"token comment\"># \u6307\u5b9a\u7aef\u53e3<\/span><br \/>\n<span class=\"token function\">scp<\/span> <span class=\"token parameter variable\">-P<\/span> <span class=\"token number\">2222<\/span> file.txt user&#064;host:\/path\/<\/p>\n<p>rsync\u4ec5\u540c\u6b65\u4e24\u4e2a\u6587\u4ef6\u4e0d\u540c\u90e8\u5206\u57fa\u672c\u8bed\u6cd5<\/p>\n<p><span class=\"token comment\"># \u57fa\u672c\u8bed\u6cd5<\/span><br \/>\n<span class=\"token function\">rsync<\/span> <span class=\"token punctuation\">[<\/span>\u9009\u9879<span class=\"token punctuation\">]<\/span> \u6e90 \u76ee\u6807<\/p>\n<p><span class=\"token comment\"># \u672c\u5730 \u2192 \u8fdc\u7a0b<\/span><br \/>\n<span class=\"token function\">rsync<\/span> <span class=\"token parameter variable\">-avz<\/span> .\/file.txt user&#064;host:\/path\/<\/p>\n<p><span class=\"token comment\"># \u8fdc\u7a0b \u2192 \u672c\u5730<\/span><br \/>\n<span class=\"token function\">rsync<\/span> <span class=\"token parameter variable\">-avz<\/span> user&#064;host:\/path\/file.txt .\/<\/p>\n<p><span class=\"token comment\"># \u76ee\u5f55\u540c\u6b65<\/span><br \/>\n<span class=\"token function\">rsync<\/span> <span class=\"token parameter variable\">-avz<\/span> .\/dir\/ user&#064;host:\/path\/dir\/    <span class=\"token comment\"># \u540c\u6b65\u76ee\u5f55\u5185\u5bb9<\/span><br \/>\n<span class=\"token function\">rsync<\/span> <span class=\"token parameter variable\">-avz<\/span> .\/dir  user&#064;host:\/path\/        <span class=\"token comment\"># \u540c\u6b65\u6574\u4e2a\u76ee\u5f55<\/span><\/p>\n<p><span class=\"token comment\"># \u5e38\u7528\u9009\u9879\u7ec4\u5408<\/span><br \/>\n<span class=\"token function\">rsync<\/span> <span class=\"token parameter variable\">-avz<\/span> <span class=\"token parameter variable\">&#8211;progress<\/span> <span class=\"token parameter variable\">&#8211;delete<\/span> .\/dir\/ user&#064;host:\/backup\/<\/p>\n<h3>\u7cfb\u7edf\u65e5\u5fd7<\/h3>\n<p>\u7cfb\u7edf\u65e5\u5fd7\u662f\u6392\u67e5\u95ee\u9898\u3001\u5ba1\u8ba1\u548c\u5b89\u5168\u5206\u6790\u7684\u6838\u5fc3\u3002<\/p>\n<h5>\u4e3b\u8981\u65e5\u5fd7\u53ca\u5176\u4f4d\u7f6e<\/h5>\n<table>\n<tr>\u8def\u5f84\u8bf4\u660e<\/tr>\n<tbody>\n<tr>\n<td>\/var\/log\/messages<\/td>\n<td>\u7cfb\u7edf\u901a\u7528\u65e5\u5fd7 &#xff0c;\u5927\u591a\u6570\u65e5\u5fd7\u4fe1\u606f<\/td>\n<\/tr>\n<tr>\n<td>\/var\/log\/secure<\/td>\n<td>\u8ba4\u8bc1\u3001\u5b89\u5168\u76f8\u5173&#xff08;SSH\u3001sudo \u7b49&#xff09;\u548c\u9519\u8bef\u65e5\u5fd7\u6587\u4ef6<\/td>\n<\/tr>\n<tr>\n<td>\/var\/log\/dmesg<\/td>\n<td>\u5185\u6838\u73af\u7f13\u51b2\u533a&#xff08;\u786c\u4ef6\u3001\u9a71\u52a8&#xff09;<\/td>\n<\/tr>\n<tr>\n<td>\/var\/log\/boot.log<\/td>\n<td>\u542f\u52a8\u8fc7\u7a0b\u65e5\u5fd7<\/td>\n<\/tr>\n<tr>\n<td>\/var\/log\/cron<\/td>\n<td>\u5b9a\u65f6\u4efb\u52a1\u65e5\u5fd7<\/td>\n<\/tr>\n<tr>\n<td>\/var\/log\/yum.log<\/td>\n<td>\u5305\u7ba1\u7406\u65e5\u5fd7<\/td>\n<\/tr>\n<tr>\n<td>\/var\/log\/journal\/<\/td>\n<td>systemd journal \u65e5\u5fd7&#xff08;\u4e8c\u8fdb\u5236&#xff09;<\/td>\n<\/tr>\n<tr>\n<td>\/var\/log\/maillog<\/td>\n<td>\u4e0e\u90ae\u4ef6\u670d\u52a1\u5668\u76f8\u5173\u7684\u65e5\u5fd7\u6587\u4ef6<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h3>systemd-journald\u670d\u52a1<\/h3>\n<p>\u00b7\u6536\u96c6\u3001\u5b58\u50a8\u3001\u7ba1\u7406\u5168\u7cfb\u7edf\u65e5\u5fd7\u7684\u4e8c\u8fdb\u5236\u65e5\u5fd7\u670d\u52a1\u3002<br \/>\n\u00b7\u5b58\u50a8\u4f4d\u7f6e\/run\/log\u3002<\/p>\n<h4>journalctl \u547d\u4ee4<\/h4>\n<p>\u5e38\u7528\u547d\u4ee4<\/p>\n<p>journalctl  <span class=\"token assign-left variable\">_SYSTEMD_UNIT<\/span><span class=\"token operator\">&#061;<\/span>sshd.service  <span class=\"token comment\">##\u67e5\u770bsshd.service\u76f8\u5173\u65e5\u5fd7<\/span><br \/>\njournalctl  <span class=\"token parameter variable\">-f<\/span> <span class=\"token comment\">##\u5b9e\u65f6\u8ddf\u8e2a\u65e5\u5fd7<\/span><br \/>\njournalctl <span class=\"token parameter variable\">-u<\/span> \u670d\u52a1\u540d  <span class=\"token comment\">##\u67e5\u770b\u7279\u5b9a\u670d\u52a1<\/span><br \/>\njournalctl <span class=\"token parameter variable\">&#8211;since<\/span>  <span class=\"token string\">&#034;\u65f6\u95f4&#034;<\/span>  <span class=\"token comment\">##\u67e5\u770b\u7279\u5b9a\u65f6\u95f4<\/span><br \/>\njournalctl <span class=\"token parameter variable\">-p<\/span> err <span class=\"token comment\">##\u67e5\u770b\u7cfb\u7edferr<\/span><br \/>\njournalctl <span class=\"token parameter variable\">-p<\/span> warning  <span class=\"token comment\">##\u67e5\u770b\u8b66\u544a\u53ca\u4ee5\u4e0a<\/span><br \/>\njournalctl <span class=\"token assign-left variable\">_UID<\/span><span class=\"token operator\">&#061;<\/span><span class=\"token number\">1000<\/span>  <span class=\"token comment\">##\u67e5\u770b\u6307\u5b9a\u7528\u6237<\/span><br \/>\n<span class=\"token assign-left variable\">journalctl_PID<\/span><span class=\"token operator\">&#061;<\/span><span class=\"token number\">1246<\/span>  <span class=\"token comment\">##\u67e5\u770b\u7279\u5b9a\u8fdb\u7a0b<\/span><br \/>\njournalctl <span class=\"token parameter variable\">-k<\/span>  <span class=\"token comment\">##\u67e5\u770b\u5185\u6838\u65e5\u5fd7<\/span><br \/>\n<span class=\"token assign-left variable\">journalctl_COMM<\/span><span class=\"token operator\">&#061;<\/span>systemctl  <span class=\"token comment\">##\u67e5\u770b\u6307\u5b9a\u547d\u4ee4<\/span><\/p>\n<h4>\u65e5\u5fd7\u6301\u4e45\u5316<\/h4>\n<p>\u9ed8\u8ba4\u65e5\u5fd7\u5b58\u5185\u5b58\/run\/log\/journal\/&#xff0c;\u91cd\u542f\u4e22\u5931\u3002<br \/>\n\u8981\u5f62\u6210\u6c38\u4e45\u65e5\u5fd7&#xff0c;\u6309\u5982\u4e0b\u64cd\u4f5c&#xff1a;<\/p>\n<p><span class=\"token function\">mkdir<\/span> \/var\/log\/journal<br \/>\n<span class=\"token function\">chown<\/span> root&#xff1a;systemd-journal \/var\/log\/journal <span class=\"token comment\">##\u8bbe\u7f6e\u76ee\u5f55\u6240\u6709\u8005&#xff0c;\u8bbe\u7f6e\u6240\u5c5e\u7ec4\u3002<\/span><br \/>\n<span class=\"token function\">chmod<\/span> <span class=\"token number\">2755<\/span> \/var\/log\/journal\/ <span class=\"token comment\">##\u7ec4\u7ee7\u627f\u6743\u9650<\/span><br \/>\nsystemctl restart systemd-journald<\/p>\n<h3>rsyslog<\/h3>\n<p>\u7cfb\u7edf\u65e5\u5fd7\u670d\u52a1&#xff0c;\u8d1f\u8d23\u6536\u96c6\u3001\u5904\u7406\u548c\u8f6c\u53d1\u65e5\u5fd7\u3002<\/p>\n<p>1\u3001\u4e3b\u914d\u7f6e\u6587\u4ef6&#xff1a;\/etc\/rsyslog.conf<br \/>\n2\u3001\u65e5\u5fd7\u7c7b\u578b<\/p>\n<table>\n<tr>\u7c7b\u578b\u8bf4\u660e<\/tr>\n<tbody>\n<tr>\n<td>auth \/ authpriv<\/td>\n<td>\u8ba4\u8bc1\/\u6388\u6743\u76f8\u5173&#xff08;\u767b\u5f55\u3001sudo&#xff09;<\/td>\n<\/tr>\n<tr>\n<td>cron<\/td>\n<td>\u5b9a\u65f6\u4efb\u52a1&#xff08;crontab\u3001at&#xff09;<\/td>\n<\/tr>\n<tr>\n<td>daemon<\/td>\n<td>\u7cfb\u7edf\u5b88\u62a4\u8fdb\u7a0b&#xff08;\u65e0\u5355\u72ec\u7c7b\u578b\u7684\u670d\u52a1&#xff09;<\/td>\n<\/tr>\n<tr>\n<td>kern<\/td>\n<td>\u5185\u6838\u65e5\u5fd7<\/td>\n<\/tr>\n<tr>\n<td>mail<\/td>\n<td>\u90ae\u4ef6\u7cfb\u7edf<\/td>\n<\/tr>\n<tr>\n<td>user<\/td>\n<td>\u7528\u6237\u7ea7\u522b\u65e5\u5fd7&#xff08;\u9ed8\u8ba4&#xff09;<\/td>\n<\/tr>\n<tr>\n<td>local0 ~ local7<\/td>\n<td>\u81ea\u5b9a\u4e49\/\u672c\u5730\u4f7f\u7528&#xff08;\u7559\u7ed9\u5e94\u7528\u7a0b\u5e8f&#xff09;<\/td>\n<\/tr>\n<tr>\n<td>lpr<\/td>\n<td>\u6253\u5370\u670d\u52a1<\/td>\n<\/tr>\n<tr>\n<td>news<\/td>\n<td>\u65b0\u95fb\u7ec4\u670d\u52a1<\/td>\n<\/tr>\n<tr>\n<td>uucp<\/td>\n<td>UUCP \u534f\u8bae<\/td>\n<\/tr>\n<tr>\n<td>ftp<\/td>\n<td>FTP \u670d\u52a1<\/td>\n<\/tr>\n<tr>\n<td>syslog<\/td>\n<td>\u65e5\u5fd7\u7cfb\u7edf\u81ea\u8eab<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>3\u3001\u65e5\u5fd7\u7ea7\u522b<\/p>\n<table>\n<tr>\u7ea7\u522b\u6570\u503c\u8bf4\u660e<\/tr>\n<tbody>\n<tr>\n<td>debug<\/td>\n<td>7<\/td>\n<td>\u8c03\u8bd5\u4fe1\u606f&#xff0c;\u6700\u8be6\u7ec6<\/td>\n<\/tr>\n<tr>\n<td>info<\/td>\n<td>6<\/td>\n<td>\u4e00\u822c\u4fe1\u606f<\/td>\n<\/tr>\n<tr>\n<td>notice<\/td>\n<td>5<\/td>\n<td>\u6b63\u5e38\u4f46\u91cd\u8981<\/td>\n<\/tr>\n<tr>\n<td>warning \/ warn<\/td>\n<td>4<\/td>\n<td>\u8b66\u544a<\/td>\n<\/tr>\n<tr>\n<td>err \/ error<\/td>\n<td>3<\/td>\n<td>\u9519\u8bef<\/td>\n<\/tr>\n<tr>\n<td>crit<\/td>\n<td>2<\/td>\n<td>\u4e25\u91cd\u9519\u8bef<\/td>\n<\/tr>\n<tr>\n<td>alert<\/td>\n<td>1<\/td>\n<td>\u5fc5\u987b\u7acb\u5373\u5904\u7406<\/td>\n<\/tr>\n<tr>\n<td>emerg \/ panic<\/td>\n<td>0<\/td>\n<td>\u7cfb\u7edf\u4e0d\u53ef\u7528&#xff0c;\u6700\u9ad8\u7ea7\u522b<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h4>\u8fdc\u7a0b\u65e5\u5fd7\u540c\u6b65<\/h4>\n<p>\u00b7\u65e5\u5fd7\u53d1\u9001\u65b9<br \/>\n<span class=\"token function\">vim<\/span> \/etc\/rsyslog.conf<br \/>\n*.* &#064;\u65e5\u5fd7\u63a5\u6536\u65b9ip <span class=\"token comment\">##\u4e24\u4e2a&#064;\u662ftcp\u4e00\u4e2a&#064;\u662fudp<\/span><\/p>\n<p><img decoding=\"async\" src=\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/07\/20260725005032-6a64085867077.png\" alt=\"\u5728\u8fd9\u91cc\u63d2\u5165\u56fe\u7247\u63cf\u8ff0\" \/><\/p>\n<p>\u00b7\u65e5\u5fd7\u63a5\u6536\u65b9<br \/>\n<span class=\"token function\">vim<\/span> \/etc\/rsyslog.conf<br \/>\n <span class=\"token variable\">$ModLoad<\/span> imudp  <span class=\"token comment\">##\u52a0\u8f7dUDP\u8f93\u5165\u6a21\u5757<\/span><br \/>\n <span class=\"token variable\">$UDPServerRUN<\/span> <span class=\"token number\">514<\/span>  <span class=\"token comment\">##\u76d1\u542cUDP 514\u7aef\u53e3\u63a5\u6536\u65e5\u5fd7<\/span><br \/>\nsystemctl restart rsyslog<br \/>\n\u00b7\u9a8c\u8bc1<br \/>\n ss <span class=\"token parameter variable\">-tnlp<\/span> <span class=\"token operator\">|<\/span><span class=\"token function\">grep<\/span> :514  <span class=\"token comment\">##\u662f\u5426\u76d1\u542c514\u7aef\u53e3<\/span><\/p>\n<p><img decoding=\"async\" src=\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/07\/20260725005032-6a64085871a5a.png\" alt=\"\u5728\u8fd9\u91cc\u63d2\u5165\u56fe\u7247\u63cf\u8ff0\" \/><\/p>\n<h4>at\u2013\u7cfb\u7edf\u5ef6\u65f6\u4efb\u52a1<\/h4>\n<p>\u00b7\u5b89\u88c5at\u547d\u4ee4<\/p>\n<p>yum provides *\/at  ##\u5bfb\u627eat\u547d\u4ee4<br \/>\nyum install  -y \/usr\/bin\/at<br \/>\nsystemctl start atd<\/p>\n<p>\u00b7\u8f93\u5165\u547d\u4ee4<\/p>\n<p>at now &#043;2 min<br \/>\nat&gt; echo &#034;Hello from the at command&#034; &gt; \/dev\/pts\/0<br \/>\nat&gt; &lt;EOT&gt;  ##ctrl&#043;D\u9000\u51fa<\/p>\n<p>\u00b7\u67e5\u770b\u547d\u4ee4<\/p>\n<p>atq<br \/>\n2       Tue Jul 21 13:38:00 2026 a root<br \/>\nyum install -y mailx<br \/>\nyum install -y postfix  ##\u7528\u4e8e\u6536\u53d1\u6587\u4ef6<br \/>\nsystemctl start postfix<br \/>\nmail  ##\u7528\u4e8e\u8bfb\u5199\u6587\u4ef6<\/p>\n<h4>crontab\u7ba1\u7406\u5b9a\u671f\u4efb\u52a1<\/h4>\n<p>\u8bbe\u7f6e\u5468\u671f\u6027\u5b9a\u65f6\u4efb\u52a1&#xff0c;\u6309\u6307\u5b9a\u65f6\u95f4\u95f4\u9694\u81ea\u52a8\u6267\u884c\u547d\u4ee4\u6216\u811a\u672c\u3002<br \/>\n1\u3001\u5e38\u7528\u547d\u4ee4<\/p>\n<p><span class=\"token comment\"># \u7f16\u8f91\u5f53\u524d\u7528\u6237\u7684 crontab<\/span><br \/>\n<span class=\"token function\">crontab<\/span> <span class=\"token parameter variable\">-e<\/span><\/p>\n<p><span class=\"token comment\"># \u67e5\u770b\u5f53\u524d\u7528\u6237\u7684\u4efb\u52a1\u5217\u8868<\/span><br \/>\n<span class=\"token function\">crontab<\/span> <span class=\"token parameter variable\">-l<\/span><\/p>\n<p><span class=\"token comment\"># \u5220\u9664\u5f53\u524d\u7528\u6237\u7684\u6240\u6709\u4efb\u52a1<\/span><br \/>\n<span class=\"token function\">crontab<\/span> <span class=\"token parameter variable\">-r<\/span><\/p>\n<p><span class=\"token comment\"># \u67e5\u770b\u6307\u5b9a\u7528\u6237\u7684\u4efb\u52a1&#xff08;root \u6743\u9650&#xff09;<\/span><br \/>\n<span class=\"token function\">sudo<\/span> <span class=\"token function\">crontab<\/span> <span class=\"token parameter variable\">-u<\/span> username <span class=\"token parameter variable\">-l<\/span><br \/>\n<span class=\"token function\">sudo<\/span> <span class=\"token function\">crontab<\/span> <span class=\"token parameter variable\">-u<\/span> username <span class=\"token parameter variable\">-e<\/span><\/p>\n<p>2\u3001\u65f6\u95f4\u683c\u5f0f<\/p>\n<ul>\n<li>\n<ul>\n<li>\n<ul>\n<li>\n<ul>\n<li>\n<ul>\n<li>command<br \/>\n\u2502 \u2502 \u2502 \u2502 \u2502<br \/>\n\u2502 \u2502 \u2502 \u2502 \u2514\u2500\u2500 \u661f\u671f (0-7, 0\u548c7\u90fd\u662f\u5468\u65e5)<br \/>\n\u2502 \u2502 \u2502 \u2514\u2500\u2500\u2500\u2500 \u6708\u4efd (1-12)<br \/>\n\u2502 \u2502 \u2514\u2500\u2500\u2500\u2500\u2500\u2500 \u65e5\u671f (1-31)<br \/>\n\u2502 \u2514\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 \u5c0f\u65f6 (0-23)<br \/>\n\u2514\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 \u5206\u949f (0-59)<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<p>3\u3001\u7279\u6b8a\u8f93\u5165<\/p>\n<table>\n<tr>\u7279\u6b8a\u7b26\u53f7\u542b\u4e49<\/tr>\n<tbody>\n<tr>\n<td>*<\/td>\n<td>\u4efb\u610f\u503c<\/td>\n<\/tr>\n<tr>\n<td>,<\/td>\n<td>\u5217\u8868&#xff0c;\u5982 1,3,5<\/td>\n<\/tr>\n<tr>\n<td>&#8211;<\/td>\n<td>\u8303\u56f4&#xff0c;\u5982 1-5<\/td>\n<\/tr>\n<tr>\n<td>\/<\/td>\n<td>\u6b65\u957f&#xff0c;\u5982 *\/10 \u6bcf10\u5206\u949f<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>\u4f8b&#xff1a;<\/p>\n<p>*\/5 * * * *  \/home\/user\/backup_db.sh <span class=\"token operator\">&gt;&gt;<\/span> \/var\/log\/backup.log <span class=\"token operator\"><span class=\"token file-descriptor important\">2<\/span>&gt;<\/span><span class=\"token file-descriptor important\">&amp;1<\/span>  <span class=\"token comment\">## \u6bcf\u5929\u51cc\u66683\u70b9\u5907\u4efd\u6570\u636e\u5e93<\/span><br \/>\n<span class=\"token number\">0<\/span> <span class=\"token number\">2<\/span> * * <span class=\"token number\">0<\/span> \/home\/user\/clean_logs.sh <span class=\"token comment\">## \u6bcf\u5468\u65e5\u51cc\u66682\u70b9\u6e05\u7406\u65e5\u5fd7<\/span><br \/>\n* * * * * <span class=\"token function\">uptime<\/span> <span class=\"token operator\">&gt;&gt;<\/span> \/tmp\/uptime.log <span class=\"token comment\">## \u6bcf\u5206\u949f\u8bb0\u5f55\u7cfb\u7edf\u8d1f\u8f7d<\/span><br \/>\n* * * * * <span class=\"token function\">sleep<\/span> <span class=\"token number\">10<\/span><span class=\"token punctuation\">;<\/span><span class=\"token function\">date<\/span>  <span class=\"token comment\">## \u6bcf\u969410s\u5b8c\u6210\u4e00\u6b21\u4efb\u52a1<\/span><br \/>\n* * * * * <span class=\"token function\">sleep<\/span> <span class=\"token number\">20<\/span><span class=\"token punctuation\">;<\/span><span class=\"token function\">date<\/span><br \/>\n* * * * * <span class=\"token function\">sleep<\/span> <span class=\"token number\">30<\/span><span class=\"token punctuation\">;<\/span><span class=\"token function\">date<\/span><br \/>\n* * * * * <span class=\"token function\">sleep<\/span> <span class=\"token number\">40<\/span><span class=\"token punctuation\">;<\/span><span class=\"token function\">date<\/span><br \/>\n* * * * * <span class=\"token function\">sleep<\/span> <span class=\"token number\">50<\/span><span class=\"token punctuation\">;<\/span><span class=\"token function\">date<\/span><br \/>\n<span class=\"token function\">ps<\/span> <span class=\"token parameter variable\">-aux<\/span> <span class=\"token comment\">##\u53ef\u4ee5\u67e5\u770b\u8fdb\u7a0b<\/span><\/p>\n<p>4\u3001cron\u6743\u9650\u8bbe\u5b9a<br \/>\n\u9ed8\u8ba4\u6240\u6709\u7528\u6237\u53ef\u4ee5\u8bbe\u5b9acron\u3002<br \/>\n\u00b7\u7528\u6237\u9ed1\u540d\u5355<br \/>\n\/etc\/cron.deny<br \/>\n\u00b7\u7528\u6237\u767d\u540d\u5355<br \/>\n\/etc\/cron.allow<\/p>\n<h3>NFS\u5b9e\u73b0\u6587\u4ef6\u5171\u4eab<\/h3>\n<p>1\u3001\u5b89\u88c5nfs-utils\u5b89\u88c5\u5305&#xff0c;\u5ba2\u6237\u7aef\u548c\u670d\u52a1\u7aef\u90fd\u5b89\u88c5\u3002<br \/>\n\u6ce8&#xff1a;\u540e\u7eed\u90fd\u4ee5server1\u4e3a\u670d\u52a1\u7aef&#xff0c;server2\u4e3a\u5ba2\u6237\u7aef\u3002<\/p>\n<p>yum install nfs-utils<br \/>\nsystemctl start nfs<\/p>\n<p>2\u3001\u8bbe\u7f6e\u5171\u4eab\u5185\u5bb9\u4ee5\u53ca\u5ba2\u6237\u7aef\u6743\u9650<br \/>\n\u5728server1<\/p>\n<p>vim \/etc\/exports<br \/>\n\u5171\u4eab\u6587\u4ef6\u76ee\u5f55     \u76ee\u6807\u670d\u52a1\u5668&#xff08;\u6743\u9650&#xff09;#\u6dfb\u52a0\u5185\u5bb9\u683c\u5f0f<br \/>\n\/mnt\/nfsdata  node1(\u6743\u9650&#xff09;    node2(\u6743\u9650&#xff09; #\u63a7\u5236\u4e0d\u540c\u5ba2\u6237\u7aef\u7684\u6743\u9650<br \/>\n\/mnt\/nfsdata  node1(rw,uid,gid) ##\u6307\u5b9a\u521b\u5efa\u6587\u4ef6\u7684\u7528\u6237\u548c\u7ec4<br \/>\nchmod 777 \/nfs ##\u4fee\u6539\u6587\u4ef6\u7cfb\u7edf\u6743\u9650<br \/>\nexportfs -rv  #\u91cd\u8f7dnfs\u670d\u52a1\u914d\u7f6e<\/p>\n<p>\u4f8b&#xff1a;<br \/>\n<img decoding=\"async\" src=\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/07\/20260725005032-6a6408587b685.png\" alt=\"\u5728\u8fd9\u91cc\u63d2\u5165\u56fe\u7247\u63cf\u8ff0\" \/><\/p>\n<p>3\u3001\u63a5\u6536\u5171\u4eab\u8d44\u6e90<br \/>\n\u5728server2<\/p>\n<p>mount  \u670d\u52a1\u7aefip:\/\u5171\u4eab\u6587\u4ef6\u76ee\u5f55   \/nfs<\/p>\n<h4>autofs\u670d\u52a1\u914d\u7f6e<\/h4>\n<p>\u5728\u5ba2\u6237\u7aef\u5b89\u88c5&#xff0c;\u53ef\u4ee5\u5728\u7528\u6237\u9700\u8981\u4f7f\u7528\u670d\u52a1\u7aef\u5171\u4eab\u6587\u4ef6\u65f6\u5b9e\u73b0\u81ea\u52a8\u6302\u8f7d\u670d\u52a1&#xff0c;\u5728\u4e0d\u9700\u8981\u65f6\u81ea\u52a8\u5378\u8f7d\u3002<br \/>\n1\u3001\u5b89\u88c5autofs<\/p>\n<p> yum <span class=\"token function\">install<\/span> autofs <span class=\"token parameter variable\">-y<\/span><br \/>\n systemctl start autofs<\/p>\n<p>2\u3001\u8bbe\u7f6e\u81ea\u52a8\u6302\u8f7d\u70b9<\/p>\n<p><span class=\"token function\">vim<\/span> \/etc\/auto.master<br \/>\n\u6302\u8f7d\u70b9     \/etc\/auto.nfs<\/p>\n<p><img decoding=\"async\" src=\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/07\/20260725005032-6a640858858bf.png\" alt=\"\u5728\u8fd9\u91cc\u63d2\u5165\u56fe\u7247\u63cf\u8ff0\" \/><\/p>\n<p>3\u3001\u8bbe\u7f6e\u6700\u7ec8\u6302\u8f7d\u70b9<\/p>\n<p><span class=\"token comment\">#\u6700\u7ec8\u6302\u8f7d\u70b9   \u9700\u8981\u6302\u8f7d\u7684\u5171\u4eab\u76ee\u5f55<\/span><br \/>\ndata    server2\/mnt\/nfs<\/p>\n<p>4\u3001\u91cd\u542fautofs\u670d\u52a1<\/p>\n<p>systemctl restart autofs<br \/>\ncd \/nfs\/data  #\u81ea\u52a8\u6302\u8f7d\u70b9\u4e0d\u4f7f\u7528\u7684\u60c5\u51b5\u4e0b&#xff0c;\u81ea\u52a8\u5378\u8f7d&#xff0c;\u4f7f\u7528\u8be5\u547d\u4ee4\u91cd\u65b0\u6302\u8f7d<\/p>\n<p>\u8865&#xff1a;<br \/>\n\u4fee\u6539autofs\u5378\u8f7d\u65f6\u95f4\u95f4\u9694\u65b9\u6cd5&#xff1a;<\/p>\n<p>vim  \/etc\/sysconfif\/autofs<br \/>\n    TIMEOUT&#061;5<br \/>\nsystemctl restart autofs<\/p>\n<h3>\u7cfb\u7edf\u5f15\u5bfc(boot)\/grub2\/<\/h3>\n<p>\u8ba1\u7b97\u673a\u4ece\u5f00\u673a\u5230\u64cd\u4f5c\u7cfb\u7edf\u52a0\u8f7d\u5b8c\u6210\u7684\u6574\u4e2a\u8fc7\u7a0b\u3002<br \/>\n\u5f15\u5bfc\u6d41\u7a0b<br \/>\n\u5f00\u673a \u2192 BIOS\/UEFI \u2192 \u5f15\u5bfc\u8bbe\u5907\u9009\u62e9 \u2192 MBR\/GPT \u2192 Bootloader \u2192 \u5185\u6838\u52a0\u8f7d \u2192 initramfs \u2192 systemd\u542f\u52a8\u7ba1\u7406\u6240\u6709\u8fdb\u7a0b \u2192 \u7cfb\u7edf\u5c31\u7eea<br \/>\ngrub2\u5f15\u5bfc\u9636\u6bb5<\/p>\n<table>\n<tr>\u9636\u6bb5\u6587\u4ef6\u4f5c\u7528<\/tr>\n<tbody>\n<tr>\n<td>Stage 1<\/td>\n<td>boot.img<\/td>\n<td>MBR \u4e2d\u7684 446 \u5b57\u8282<\/td>\n<\/tr>\n<tr>\n<td>Stage 1.5<\/td>\n<td>core.img<\/td>\n<td>\u6587\u4ef6\u7cfb\u7edf\u9a71\u52a8<\/td>\n<\/tr>\n<tr>\n<td>Stage 2<\/td>\n<td>\/boot\/grub2\/<\/td>\n<td>\u8bfb\u53d6\u914d\u7f6e&#xff0c;\u663e\u793a\u83dc\u5355<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>grub\u914d\u7f6e\u6587\u4ef6&#xff1a;\/boot\/grub2\/grub.cfg<br \/>\n\u95ee\u9898\u4fee\u590d<br \/>\n\u5047\u8bbe\u5220\u9664\/boot\/grub2\/grub.cfg,\u600e\u4e48\u91cd\u65b0\u6210\u529f\u5f15\u5bfc\u7cfb\u7edf<br \/>\n1\u3001\u8fdb\u5165grub\u6a21\u5f0f&#xff0c;\u67e5\u770b\u78c1\u76d8\u5206\u533a,\u8bbe\u7f6e\u6839\u5206\u533a\u3002<\/p>\n<p>ls<br \/>\nls (hd0,msdos1)\/ #\u67e5\u770b\u5206\u533a\u5185\u5bb9&#xff0c;\u627e\u5230\u5305\u542b\/boot\u7684\u5206\u533a<br \/>\nls (hd0,msdos2)\/<br \/>\nset root&#061;&#039;hd0,msdos1&#039;<\/p>\n<p>2\u3001\u52a0\u8f7d\u5185\u6838<\/p>\n<p> linux16 \/vmlinuz-3.10.0-1160.e17.x86_64 root&#061;\/dev\/centos\/root net.ifnames&#061;0   <\/p>\n<p>3\u3001\u52a0\u8f7d initramfs<\/p>\n<p>initrd16 \/initramfs-3.10.0-1160.el7.x86_64.img<\/p>\n<p>4\u3001\u542f\u52a8\u7cfb\u7edf<\/p>\n<p>boot<\/p>\n<h3>ISCSI<\/h3>\n<p>iscsi\u670d\u52a1\u914d\u7f6e<br \/>\n\u670d\u52a1\u7aef<\/p>\n<p><span class=\"token comment\">#\u5b89\u88c5\u670d\u52a1\u7aef\u8f6f\u4ef6<\/span><br \/>\nyum <span class=\"token function\">install<\/span> <span class=\"token parameter variable\">-y<\/span> targetcli<br \/>\nsystemctl start target<br \/>\nsystemctl <span class=\"token builtin class-name\">enable<\/span> <span class=\"token parameter variable\">&#8211;now<\/span> target<br \/>\n<span class=\"token comment\">#targetcli\u914d\u7f6e\u5982\u4e0b<\/span><br \/>\n\/backstores\/block<span class=\"token operator\">&gt;<\/span> create demo \/dev\/sdc<br \/>\n\/iscsi\/iqn.20<span class=\"token punctuation\">..<\/span>.ge1\/tpg1\/acls<span class=\"token operator\">&gt;<\/span> create iqn.2019-10.com.example:demokey<br \/>\n\/iscsi\/iqn.20<span class=\"token punctuation\">..<\/span>.ge1\/tpg1\/luns<span class=\"token operator\">&gt;<\/span> create \/backstores\/blocks\/demo<br \/>\nstorage object or path not valid<br \/>\n<span class=\"token builtin class-name\">exit<\/span><\/p>\n<p><img decoding=\"async\" src=\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/07\/20260725005032-6a6408588fc29.png\" alt=\"\u5728\u8fd9\u91cc\u63d2\u5165\u56fe\u7247\u63cf\u8ff0\" \/><\/p>\n<p>\u5ba2\u6237\u7aef<\/p>\n<p><span class=\"token comment\">#\u5b89\u88c5\u5ba2\u6237\u7aef\u8f6f\u4ef6<\/span><br \/>\nyum <span class=\"token function\">install<\/span> <span class=\"token parameter variable\">-y<\/span> iscsi-initiator-utils.x86_64<br \/>\n<span class=\"token comment\">#\u4fee\u6539\u540d\u79f0\u4e0e\u670d\u52a1\u7aef\u76f8\u540c&#xff08;\u5b89\u5168\u8ba4\u8bc1\u4e0e\u8bbf\u95ee\u63a7\u5236&#xff09;<\/span><br \/>\n<span class=\"token function\">vim<\/span> \/etc\/iscsi\/initiatorname.iscsi<br \/>\n<span class=\"token comment\">#\u4fee\u6539\u683c\u5f0f\u7c7b\u4f3c\u4e8e<\/span><br \/>\n<span class=\"token assign-left variable\">InitiatorName<\/span><span class=\"token operator\">&#061;<\/span>iqn.2019-10.com.example:demokey<br \/>\n<span class=\"token comment\">#\u53d1\u73b0\u8bbe\u5907<\/span><br \/>\niscsiadm <span class=\"token parameter variable\">-m<\/span> discovery <span class=\"token parameter variable\">-t<\/span> sst <span class=\"token parameter variable\">-p<\/span> <span class=\"token number\">192.168<\/span>.88.142<br \/>\n<span class=\"token comment\">#\u767b\u5f55\u8bbe\u5907<\/span><br \/>\niscsiadm <span class=\"token parameter variable\">-m<\/span> <span class=\"token function\">node<\/span> <span class=\"token parameter variable\">-l<\/span><\/p>\n<p><img decoding=\"async\" src=\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/07\/20260725005032-6a640858b55ca.png\" alt=\"\u5728\u8fd9\u91cc\u63d2\u5165\u56fe\u7247\u63cf\u8ff0\" \/><br \/>\n<img decoding=\"async\" src=\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/07\/20260725005032-6a640858c4894.png\" alt=\"\u5728\u8fd9\u91cc\u63d2\u5165\u56fe\u7247\u63cf\u8ff0\" \/><\/p>\n<h3>systemd\u7ba1\u7406\u670d\u52a1<\/h3>\n<p>systemd \u662f Linux \u7cfb\u7edf\u4e2d\u6700\u5e38\u7528\u7684\u521d\u59cb\u5316\u7cfb\u7edf&#xff08;init system&#xff09;&#xff0c;\u7528\u4e8e\u5f15\u5bfc\u7528\u6237\u7a7a\u95f4\u5e76\u7ba1\u7406\u7528\u6237\u8fdb\u7a0b\u3002\u5b83\u5728 RHEL\/CentOS 7 \u53ca\u4e4b\u540e\u7248\u672c\u4e2d\u53d6\u4ee3\u4e86\u4f20\u7edf\u7684 SysV init\u3002<\/p>\n<p>\u6838\u5fc3\u7279\u6027&#xff1a;<\/p>\n<p>\u5e76\u884c\u5316\u542f\u52a8&#xff1a;\u540c\u65f6\u542f\u52a8\u591a\u4e2a\u670d\u52a1&#xff0c;\u663e\u8457\u52a0\u5feb\u7cfb\u7edf\u542f\u52a8\u901f\u5ea6\u3002<\/p>\n<p>\u6309\u9700\u542f\u52a8&#xff1a;\u53ea\u5728\u9700\u8981\u65f6\u624d\u542f\u52a8\u5b88\u62a4\u8fdb\u7a0b&#xff0c;\u8282\u7701\u8d44\u6e90\u3002<\/p>\n<p>\u8fdb\u7a0b\u8ddf\u8e2a&#xff1a;\u4f7f\u7528 Linux cgroups&#xff08;\u63a7\u5236\u7ec4&#xff09; \u8ddf\u8e2a\u548c\u7ba1\u7406\u8fdb\u7a0b\u6811&#xff0c;\u786e\u4fdd\u670d\u52a1\u505c\u6b62\u65f6\u6240\u6709\u5b50\u8fdb\u7a0b\u90fd\u88ab\u6b63\u786e\u6e05\u7406\u3002<\/p>\n<p>\u6302\u8f7d\u7ba1\u7406&#xff1a;\u7ef4\u62a4\u6302\u8f7d\u70b9\u548c\u81ea\u52a8\u6302\u8f7d\u70b9&#xff0c;\u66ff\u4ee3\u4f20\u7edf\u7684 \/etc\/fstab \u90e8\u5206\u529f\u80fd\u3002<\/p>\n<p>\u4f9d\u8d56\u63a7\u5236&#xff1a;\u5b9e\u73b0\u57fa\u4e8e\u4f9d\u8d56\u5173\u7cfb\u7684\u670d\u52a1\u63a7\u5236\u903b\u8f91&#xff0c;\u786e\u4fdd\u670d\u52a1\u6309\u6b63\u786e\u987a\u5e8f\u542f\u52a8\u3002<\/p>\n<h5>systemd cgroups \u5c42\u7ea7\u7ed3\u6784<\/h5>\n<p>systemd \u4f7f\u7528 cgroups \u5c06\u7cfb\u7edf\u8fdb\u7a0b\u7ec4\u7ec7\u6210\u6811\u5f62\u7ed3\u6784&#xff0c;\u4e3b\u8981\u5305\u542b\u4e09\u4e2a\u9876\u5c42\u5207\u7247&#xff08;Slice&#xff09;&#xff1a;<\/p>\n<table>\n<tr>\u5207\u7247\u8bf4\u660e\u793a\u4f8b<\/tr>\n<tbody>\n<tr>\n<td>user.slice<\/td>\n<td>\u7528\u6237\u4f1a\u8bdd\u8fdb\u7a0b<\/td>\n<td>\u7528\u6237\u767b\u5f55\u540e\u4ea7\u751f\u7684 SSH\u3001bash \u8fdb\u7a0b<\/td>\n<\/tr>\n<tr>\n<td>system.slice<\/td>\n<td>\u7cfb\u7edf\u670d\u52a1\u8fdb\u7a0b<\/td>\n<td>sshd.service\u3001httpd.service\u3001mariadb.service<\/td>\n<\/tr>\n<tr>\n<td>machine.slice<\/td>\n<td>\u865a\u62df\u673a\u6216\u5bb9\u5668\u8fdb\u7a0b<\/td>\n<td>QEMU\/KVM \u865a\u62df\u673a<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>\u6bcf\u4e2a\u5207\u7247\u9ed8\u8ba4\u83b7\u5f97\u76f8\u540c\u7684 CPU \u65f6\u95f4\u4efd\u989d&#xff08;CPUShares&#061;1024&#xff09;&#xff0c;\u8c03\u5ea6\u5668\u5728\u5b83\u4eec\u4e4b\u95f4\u516c\u5e73\u5206\u914d CPU \u8d44\u6e90\u3002<\/p>\n<h4>\u67e5\u770b\u670d\u52a1\u72b6\u6001&#xff08;systemctl status&#xff09;<\/h4>\n<p>systemctl status sshd.service<\/p>\n<p>\u8f93\u51fa\u5b57\u6bb5\u542b\u4e49&#xff1a;<\/p>\n<table>\n<tr>\u72b6\u6001\u8bf4\u660e<\/tr>\n<tbody>\n<tr>\n<td>loaded<\/td>\n<td>\u5355\u5143\u914d\u7f6e\u6587\u4ef6\u5df2\u6210\u529f\u52a0\u8f7d\u5e76\u5904\u7406<\/td>\n<\/tr>\n<tr>\n<td>active (running)<\/td>\n<td>\u670d\u52a1\u6b63\u5728\u8fd0\u884c&#xff0c;\u6709\u4e00\u4e2a\u6216\u591a\u4e2a\u6301\u7eed\u8fdb\u7a0b<\/td>\n<\/tr>\n<tr>\n<td>active (exited)<\/td>\n<td>\u670d\u52a1\u5df2\u5b8c\u6210\u4e00\u6b21\u6027\u914d\u7f6e\u4efb\u52a1&#xff08;\u5982 sysctl&#xff09;<\/td>\n<\/tr>\n<tr>\n<td>active (waiting)<\/td>\n<td>\u670d\u52a1\u6b63\u5728\u8fd0\u884c\u4f46\u7b49\u5f85\u67d0\u4e2a\u4e8b\u4ef6&#xff08;\u5982 network-online&#xff09;<\/td>\n<\/tr>\n<tr>\n<td>inactive<\/td>\n<td>\u670d\u52a1\u672a\u8fd0\u884c<\/td>\n<\/tr>\n<tr>\n<td>enabled<\/td>\n<td>\u670d\u52a1\u5df2\u8bbe\u7f6e\u4e3a\u5f00\u673a\u81ea\u52a8\u542f\u52a8<\/td>\n<\/tr>\n<tr>\n<td>disabled<\/td>\n<td>\u670d\u52a1\u672a\u8bbe\u7f6e\u4e3a\u5f00\u673a\u81ea\u52a8\u542f\u52a8<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h4>\u7ba1\u7406\u670d\u52a1&#xff1a;\u542f\u52a8\u3001\u505c\u6b62\u3001\u91cd\u542f<\/h4>\n<p>\u4ee5sshd\u670d\u52a1\u4e3a\u4f8b<\/p>\n<table>\n<tr>\u64cd\u4f5c\u547d\u4ee4<\/tr>\n<tbody>\n<tr>\n<td>\u67e5\u770b\u670d\u52a1\u72b6\u6001<\/td>\n<td>systemctl status sshd<\/td>\n<\/tr>\n<tr>\n<td>\u542f\u52a8\u670d\u52a1<\/td>\n<td>systemctl start sshd<\/td>\n<\/tr>\n<tr>\n<td>\u505c\u6b62\u670d\u52a1<\/td>\n<td>systemctl stop sshd<\/td>\n<\/tr>\n<tr>\n<td>\u91cd\u542f\u670d\u52a1<\/td>\n<td>systemctl restart sshd<\/td>\n<\/tr>\n<tr>\n<td>\u91cd\u65b0\u52a0\u8f7d\u914d\u7f6e&#xff08;\u4e0d\u91cd\u542f&#xff09;<\/td>\n<td>systemctl reload sshd<\/td>\n<\/tr>\n<tr>\n<td>\u8bbe\u7f6e\u5f00\u673a\u81ea\u542f<\/td>\n<td>systemctl enable sshd<\/td>\n<\/tr>\n<tr>\n<td>\u53d6\u6d88\u5f00\u673a\u81ea\u542f<\/td>\n<td>systemctl disable sshd<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h4>\u5c4f\u853d\u670d\u52a1&#xff08;mask&#xff09;<\/h4>\n<p>\u5982\u679c\u7cfb\u7edf\u4e2d\u5b58\u5728\u51b2\u7a81\u7684\u670d\u52a1&#xff08;\u5982 network \u548c NetworkManager&#xff09;&#xff0c;\u4e3a\u4e86\u9632\u6b62\u7ba1\u7406\u5458\u8bef\u542f\u52a8&#xff0c;\u53ef\u4ee5\u5c06\u5176\u201c\u5c4f\u853d\u201d\u3002<\/p>\n<p>\u00b7\u7981\u7528&#xff08;disable&#xff09;&#xff1a;\u670d\u52a1\u4e0d\u4f1a\u5f00\u673a\u81ea\u542f&#xff0c;\u4f46\u53ef\u4ee5\u624b\u52a8\u542f\u52a8\u3002<\/p>\n<p>\u00b7\u5c4f\u853d&#xff08;mask&#xff09;&#xff1a;\u670d\u52a1\u65e2\u4e0d\u80fd\u624b\u52a8\u542f\u52a8&#xff0c;\u4e5f\u4e0d\u80fd\u81ea\u52a8\u542f\u52a8\u3002<\/p>\n<p>systemctl mask firewalld     <span class=\"token comment\"># \u5c4f\u853d\u9632\u706b\u5899\u670d\u52a1<\/span><br \/>\nsystemctl unmask firewalld   <span class=\"token comment\"># \u53d6\u6d88\u5c4f\u853d<\/span><\/p>\n<h4>\u67e5\u770b\u6240\u6709\u5355\u5143\u548c\u670d\u52a1<\/h4>\n<p>systemctl list-units <span class=\"token parameter variable\">&#8211;all<\/span>          <span class=\"token comment\"># \u67e5\u770b\u6240\u6709\u5355\u5143&#xff08;\u542b inactive&#xff09;<\/span><br \/>\nsystemctl list-units <span class=\"token parameter variable\">&#8211;type<\/span><span class=\"token operator\">&#061;<\/span>service <span class=\"token comment\"># \u4ec5\u67e5\u770b\u670d\u52a1\u5355\u5143<\/span><br \/>\nsystemctl list-unit-files           <span class=\"token comment\"># \u67e5\u770b\u6240\u6709\u5355\u5143\u6587\u4ef6\u7684\u542f\u7528\/\u7981\u7528\u72b6\u6001<\/span><\/p>\n<h4>\u5355\u5143\u6587\u4ef6\u4f4d\u7f6e<\/h4>\n<table>\n<tr>\u4f18\u5148\u7ea7\u8def\u5f84\u8bf4\u660e<\/tr>\n<tbody>\n<tr>\n<td>\u6700\u9ad8<\/td>\n<td>\/etc\/systemd\/system\/<\/td>\n<td>\u7ba1\u7406\u5458\u81ea\u5b9a\u4e49\u6216\u8986\u76d6\u7684\u5355\u5143\u6587\u4ef6<\/td>\n<\/tr>\n<tr>\n<td>\u6b21\u9ad8<\/td>\n<td>\/run\/systemd\/system\/<\/td>\n<td>\u8fd0\u884c\u65f6\u52a8\u6001\u751f\u6210\u7684\u5355\u5143\u6587\u4ef6&#xff08;\u91cd\u542f\u540e\u4e22\u5931&#xff09;<\/td>\n<\/tr>\n<tr>\n<td>\u9ed8\u8ba4<\/td>\n<td>\/usr\/lib\/systemd\/system\/<\/td>\n<td>\u8f6f\u4ef6\u5305\u81ea\u5e26\u7684\u5355\u5143\u6587\u4ef6&#xff08;\u7cfb\u7edf\u7ef4\u62a4\u8005\u63d0\u4f9b&#xff09;<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h3>firewalld \u9632\u706b\u5899\u914d\u7f6e\u6307\u5357<\/h3>\n<p>CentOS 7 \u4e4b\u540e&#xff0c;\u7cfb\u7edf\u63d0\u4f9b\u4e86\u4e24\u79cd\u9632\u706b\u5899\u7ba1\u7406\u65b9\u5f0f&#xff1a;firewalld&#xff08;\u9ed8\u8ba4\u63a8\u8350&#xff09;\u548c iptables&#xff08;\u4f20\u7edf\u65b9\u5f0f&#xff09;&#xff0c;\u4e24\u8005\u9009\u5176\u4e00\u5373\u53ef\u3002<\/p>\n<table>\n<tr>\u5bf9\u6bd4\u9879iptablesfirewalld<\/tr>\n<tbody>\n<tr>\n<td>\u914d\u7f6e\u5b58\u50a8\u4f4d\u7f6e<\/td>\n<td>\/etc\/sysconfig\/iptables<\/td>\n<td>\/usr\/lib\/firewalld\/\u3001\/etc\/firewalld\/*.xml<\/td>\n<\/tr>\n<tr>\n<td>\u914d\u7f6e\u683c\u5f0f<\/td>\n<td>\u547d\u4ee4\u884c\u89c4\u5219\u94fe<\/td>\n<td>XML \u6587\u4ef6 &#043; \u533a\u57df&#xff08;zone&#xff09;\u6982\u5ff5<\/td>\n<\/tr>\n<tr>\n<td>\u52a8\u6001\u66f4\u65b0<\/td>\n<td>\u9700\u8981\u91cd\u542f\u670d\u52a1\u751f\u6548<\/td>\n<td>\u8fd0\u884c\u65f6\u548c\u6c38\u4e45\u914d\u7f6e\u5206\u79bb&#xff0c;\u4fee\u6539\u540e\u65e0\u9700\u91cd\u542f<\/td>\n<\/tr>\n<tr>\n<td>\u7ba1\u7406\u65b9\u5f0f<\/td>\n<td>\u7eaf\u547d\u4ee4\u884c<\/td>\n<td>\u547d\u4ee4\u884c &#043; \u56fe\u5f62\u5316\u5de5\u5177&#xff08;firewall-config&#xff09;<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h4>\u6838\u5fc3\u6982\u5ff5&#xff1a;\u533a\u57df&#xff08;Zones&#xff09;<\/h4>\n<p>firewalld \u901a\u8fc7\u201c\u533a\u57df\u201d\u6765\u7ba1\u7406\u4e0d\u540c\u7f51\u7edc\u7684\u4fe1\u4efb\u7ea7\u522b\u3002\u6bcf\u4e2a\u7f51\u7edc\u63a5\u53e3\u53ef\u4ee5\u7ed1\u5b9a\u5230\u4e00\u4e2a\u533a\u57df&#xff0c;\u4e0d\u540c\u533a\u57df\u6709\u4e0d\u540c\u7684\u9ed8\u8ba4\u89c4\u5219\u3002<\/p>\n<table>\n<tr>\u533a\u57df\u540d\u79f0\u9ed8\u8ba4\u4fe1\u4efb\u7ea7\u522b\u5178\u578b\u7528\u9014<\/tr>\n<tbody>\n<tr>\n<td>trusted<\/td>\n<td>\u2705 \u63a5\u53d7\u6240\u6709\u8fde\u63a5<\/td>\n<td>\u5185\u90e8\u5b8c\u5168\u53ef\u4fe1\u7f51\u7edc<\/td>\n<\/tr>\n<tr>\n<td>home<\/td>\n<td>\u4ec5\u63a5\u53d7 ssh\u3001mdns\u3001ipp-client\u3001samba-client\u3001dhcpv6-client<\/td>\n<td>\u5bb6\u5ead\u7f51\u7edc\u73af\u5883<\/td>\n<\/tr>\n<tr>\n<td>internal<\/td>\n<td>\u540c home<\/td>\n<td>\u5185\u90e8\u4f01\u4e1a\u7f51\u7edc<\/td>\n<\/tr>\n<tr>\n<td>work<\/td>\n<td>\u4ec5\u63a5\u53d7 ssh\u3001ipp-client\u3001dhcpv6-client<\/td>\n<td>\u529e\u516c\u7f51\u7edc<\/td>\n<\/tr>\n<tr>\n<td>public<\/td>\n<td>\u4ec5\u63a5\u53d7 ssh\u3001dhcpv6-client<\/td>\n<td>\u9ed8\u8ba4\u533a\u57df&#xff0c;\u516c\u5171\u73af\u5883&#xff08;\u5982\u5496\u5561\u9986\u3001\u673a\u573a&#xff09;<\/td>\n<\/tr>\n<tr>\n<td>external<\/td>\n<td>\u4ec5\u63a5\u53d7 ssh&#xff0c;\u652f\u6301 IPv4 \u4f2a\u88c5\u8f6c\u53d1<\/td>\n<td>\u5916\u90e8\u7f51\u5173\u73af\u5883<\/td>\n<\/tr>\n<tr>\n<td>dmz<\/td>\n<td>\u4ec5\u63a5\u53d7 ssh<\/td>\n<td>\u975e\u519b\u4e8b\u533a&#xff08;DMZ&#xff09;<\/td>\n<\/tr>\n<tr>\n<td>block<\/td>\n<td>&#x1f6ab; \u62d2\u7edd\u6240\u6709\u5165\u7ad9\u8fde\u63a5<\/td>\n<td>\u9ad8\u5b89\u5168\u9694\u79bb\u73af\u5883<\/td>\n<\/tr>\n<tr>\n<td>drop<\/td>\n<td>&#x1f6ab; \u4e22\u5f03\u6240\u6709\u5165\u7ad9\u8fde\u63a5&#xff08;\u65e0\u56de\u590d&#xff09;<\/td>\n<td>\u6700\u9ad8\u5b89\u5168\u7ea7\u522b<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h4>\u5b89\u88c5iptables<\/h4>\n<p>yum install -y iptables iptables-services<br \/>\nsystemctl disable &#8211;now firewalld<\/p>\n<h4>\u5e38\u7528\u547d\u4ee4<\/h4>\n<p>1\u3001 \u67e5\u770b\u9632\u706b\u5899\u72b6\u6001<\/p>\n<p>firewall-cmd <span class=\"token parameter variable\">&#8211;state<\/span><br \/>\nfirewall-cmd &#8211;list-all<\/p>\n<p>2\u3001\u653e\u884c\u670d\u52a1<\/p>\n<p>firewall-cmd &#8211;add-service<span class=\"token operator\">&#061;<\/span>http <span class=\"token parameter variable\">&#8211;permanent<\/span><br \/>\nfirewall-cmd &#8211;add-service<span class=\"token operator\">&#061;<\/span>https <span class=\"token parameter variable\">&#8211;permanent<\/span><\/p>\n<p>3\u3001\u653e\u884c\u7aef\u53e3<\/p>\n<p>firewall-cmd &#8211;add-port<span class=\"token operator\">&#061;<\/span><span class=\"token number\">8080<\/span>\/tcp <span class=\"token parameter variable\">&#8211;permanent<\/span><br \/>\nfirewall-cmd &#8211;add-port<span class=\"token operator\">&#061;<\/span><span class=\"token number\">3306<\/span>\/tcp <span class=\"token parameter variable\">&#8211;permanent<\/span><\/p>\n<p>4\u3001\u67e5\u770b\u5f53\u524d\u533a\u57df<\/p>\n<p>firewall-cmd &#8211;get-default-zone<br \/>\nfirewall-cmd &#8211;get-active-zones<\/p>\n<p>5\u3001\u91cd\u65b0\u52a0\u8f7d\u914d\u7f6e<\/p>\n<p>firewall-cmd <span class=\"token parameter variable\">&#8211;reload<\/span><\/p>\n<p>6\u3001\u67e5\u8be2\u89c4\u5219\u662f\u5426\u5df2\u6dfb\u52a0<\/p>\n<p>firewall-cmd &#8211;query-service<span class=\"token operator\">&#061;<\/span>http<br \/>\nfirewall-cmd &#8211;query-port<span class=\"token operator\">&#061;<\/span><span class=\"token number\">8080<\/span>\/tcp<\/p>\n<p>7\u3001\u79fb\u9664\u89c4\u5219<\/p>\n<p>firewall-cmd &#8211;remove-service<span class=\"token operator\">&#061;<\/span>http <span class=\"token parameter variable\">&#8211;permanent<\/span><br \/>\nfirewall-cmd &#8211;remove-port<span class=\"token operator\">&#061;<\/span><span class=\"token number\">8080<\/span>\/tcp <span class=\"token parameter variable\">&#8211;permanent<\/span><\/p>\n<h3>Web \u670d\u52a1\u914d\u7f6e\u6307\u5357<\/h3>\n<h4>Apache \u57fa\u7840\u914d\u7f6e<\/h4>\n<li>\u5b89\u88c5 Apache<\/li>\n<p>yum <span class=\"token function\">install<\/span> <span class=\"token parameter variable\">-y<\/span> httpd<\/p>\n<li>\u542f\u52a8\u5e76\u8bbe\u7f6e\u5f00\u673a\u81ea\u542f<\/li>\n<p>systemctl start httpd<br \/>\nsystemctl <span class=\"token builtin class-name\">enable<\/span> httpd<\/p>\n<li>\u4e3b\u914d\u7f6e\u6587\u4ef6\u4f4d\u7f6e<\/li>\n<p>\u4e3b\u914d\u7f6e\u6587\u4ef6&#xff1a;\/etc\/httpd\/conf\/httpd.conf<\/p>\n<p>\u5b50\u914d\u7f6e\u76ee\u5f55&#xff1a;\/etc\/httpd\/conf.d\/<\/p>\n<p>\u7f51\u7ad9\u6839\u76ee\u5f55&#xff1a;\/var\/www\/html\/<\/p>\n<p>CGI \u811a\u672c\u76ee\u5f55&#xff1a;\/var\/www\/cgi-bin\/<\/p>\n<p>\u65e5\u5fd7\u76ee\u5f55&#xff1a;\/var\/log\/httpd\/<\/p>\n<li>\u521b\u5efa\u6d4b\u8bd5\u9875\u9762<\/li>\n<p><span class=\"token builtin class-name\">echo<\/span> <span class=\"token string\">&#034;Hello, World!&#034;<\/span> <span class=\"token operator\">&gt;<\/span> \/var\/www\/html\/index.html<\/p>\n<h4>CGI \u811a\u672c\u914d\u7f6e<\/h4>\n<p>\u521b\u5efa CGI \u7a0b\u5e8f&#xff08;\u4f4d\u4e8e \/var\/www\/cgi-bin\/ \u76ee\u5f55&#xff09;&#xff1a;<\/p>\n<p><span class=\"token builtin class-name\">cd<\/span> \/var\/www\/cgi-bin\/<br \/>\n<span class=\"token function\">vim<\/span> test.cgi<\/p>\n<p>\u811a\u672c\u5185\u5bb9&#xff1a;<\/p>\n<p><span class=\"token shebang important\">#!\/bin\/bash<\/span><br \/>\n<span class=\"token builtin class-name\">echo<\/span> <span class=\"token string\">&#039;Content-type:text\/html&#039;<\/span><br \/>\n<span class=\"token builtin class-name\">echo<\/span><br \/>\n<span class=\"token function\">ls<\/span> <span class=\"token parameter variable\">-l<\/span> \/<\/p>\n<p>\u8bbe\u7f6e\u53ef\u6267\u884c\u6743\u9650&#xff1a;<\/p>\n<p><span class=\"token function\">chmod<\/span> a&#043;x test.cgi<\/p>\n<p>\u8bbf\u95ee\u6d4b\u8bd5&#xff1a;<\/p>\n<p>http:\/\/server1\/cgi-bin\/test.cgi<\/p>\n<h4>SELinux \u5bf9 Web \u670d\u52a1\u7684\u5f71\u54cd<\/h4>\n<p>1\u3001 SELinux \u5e03\u5c14\u503c&#xff08;Booleans&#xff09;<br \/>\nSELinux \u7b56\u7565\u53ef\u4ee5\u901a\u8fc7\u542f\u7528\u6216\u7981\u7528\u5e03\u5c14\u503c\u6765\u52a8\u6001\u8c03\u6574\u3002\u8fd9\u4e9b\u5e03\u5c14\u503c\u5141\u8bb8\u5728\u65e0\u9700\u4fee\u6539\u7b56\u7565\u6587\u4ef6\u7684\u60c5\u51b5\u4e0b&#xff0c;\u6539\u53d8 SELinux \u7684\u90e8\u5206\u884c\u4e3a\u3002<\/p>\n<table>\n<tr>\u5e38\u7528\u5e03\u5c14\u503c\u8bf4\u660e<\/tr>\n<tbody>\n<tr>\n<td>httpd_enable_cgi<\/td>\n<td>\u662f\u5426\u5141\u8bb8 Apache \u6267\u884c CGI \u811a\u672c<\/td>\n<\/tr>\n<tr>\n<td>httpd_can_network_connect<\/td>\n<td>\u662f\u5426\u5141\u8bb8 Apache \u5411\u5916\u53d1\u8d77\u7f51\u7edc\u8fde\u63a5<\/td>\n<\/tr>\n<tr>\n<td>httpd_can_connect_ftp<\/td>\n<td>\u662f\u5426\u5141\u8bb8 Apache \u8fde\u63a5 FTP \u670d\u52a1\u5668<\/td>\n<\/tr>\n<tr>\n<td>httpd_serve_cgi_files<\/td>\n<td>\u662f\u5426\u5141\u8bb8 Apache \u63d0\u4f9b CGI \u6587\u4ef6<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>2\u3001\u7ba1\u7406\u5e03\u5c14\u503c&#xff1a;<\/p>\n<p>getsebool <span class=\"token parameter variable\">-a<\/span>                    <span class=\"token comment\"># \u67e5\u770b\u6240\u6709\u5e03\u5c14\u503c<\/span><br \/>\ngetsebool httpd_enable_cgi      <span class=\"token comment\"># \u67e5\u770b\u7279\u5b9a\u5e03\u5c14\u503c<\/span><br \/>\nsetsebool <span class=\"token assign-left variable\">httpd_enable_cgi<\/span><span class=\"token operator\">&#061;<\/span>on   <span class=\"token comment\"># \u4e34\u65f6\u542f\u7528&#xff08;\u91cd\u542f\u540e\u4e22\u5931&#xff09;<\/span><br \/>\nsetsebool <span class=\"token parameter variable\">-P<\/span> <span class=\"token assign-left variable\">httpd_enable_cgi<\/span><span class=\"token operator\">&#061;<\/span>on <span class=\"token comment\"># \u6c38\u4e45\u542f\u7528&#xff08;-P \u6301\u4e45\u5316&#xff09;<\/span><\/p>\n<p>3\u3001\u4e3b\u673a\u8bbf\u95ee\u63a7\u5236<\/p>\n<p><span class=\"token function\">vi<\/span> \/etc\/httpd\/conf\/httpd.conf<\/p>\n<p>\u793a\u4f8b&#xff1a;\u53ea\u5141\u8bb8 192.168.88.142 \u8bbf\u95ee \/var\/www\/html\/admin \u76ee\u5f55&#xff1a;<\/p>\n<p><span class=\"token operator\">&lt;<\/span>Directory <span class=\"token string\">&#034;\/var\/www\/html\/admin&#034;<\/span><span class=\"token operator\">&gt;<\/span><br \/>\n    Require all granted<br \/>\n    Order deny,allow<br \/>\n    deny from all<br \/>\n    allow from <span class=\"token number\">192.168<\/span>.88.142<br \/>\n<span class=\"token operator\">&lt;<\/span>\/Directory<span class=\"token operator\">&gt;<\/span><\/p>\n<h4>\u7528\u6237\u8ba4\u8bc1&#xff08;Basic Authentication&#xff09;<\/h4>\n<p>\u4e3a\u76ee\u5f55\u8bbe\u7f6e\u7528\u6237\u540d\u5bc6\u7801\u8ba4\u8bc1&#xff1a;<\/p>\n<li>\u521b\u5efa\u5bc6\u7801\u6587\u4ef6<\/li>\n<p>htpasswd <span class=\"token parameter variable\">-c<\/span> \/etc\/httpd\/conf\/httpaswd admin<\/p>\n<li>\u914d\u7f6e\u76ee\u5f55\u8ba4\u8bc1<\/li>\n<p><span class=\"token function\">vi<\/span> \/etc\/httpd\/conf\/httpd.conf<br \/>\n<span class=\"token operator\">&lt;<\/span>Directory <span class=\"token string\">&#034;\/var\/www\/html\/admin&#034;<\/span><span class=\"token operator\">&gt;<\/span><br \/>\n    AuthUserFile \/etc\/httpd\/conf\/httpaswd<br \/>\n    AuthName <span class=\"token string\">&#034;Input user name and password&#034;<\/span><br \/>\n    AuthType basic<br \/>\n    Require user admin<br \/>\n    <span class=\"token comment\"># Require valid-user   # \u5982\u679c\u5bc6\u7801\u6587\u4ef6\u4e2d\u6709\u591a\u4e2a\u7528\u6237&#xff0c;\u53ef\u4f7f\u7528\u6b64\u9009\u9879\u653e\u884c\u6240\u6709\u5408\u6cd5\u7528\u6237<\/span><br \/>\n<span class=\"token operator\">&lt;<\/span>\/Directory<span class=\"token operator\">&gt;<\/span><\/p>\n<li>\u91cd\u542f Apache<\/li>\n<p>systemctl restart httpd<\/p>\n<li>\u8bbf\u95ee\u6d4b\u8bd5<br \/>\n\u6d4f\u89c8\u5668\u8bbf\u95ee http:\/\/server1\/admin\/&#xff0c;\u4f1a\u5f39\u51fa\u767b\u5f55\u6846&#xff0c;\u8f93\u5165\u7528\u6237\u540d admin \u548c\u5bf9\u5e94\u5bc6\u7801\u5373\u53ef\u3002<\/li>\n","protected":false},"excerpt":{"rendered":"<p>ssh\u670d\u52a1<br \/>\nssh\u670d\u52a1\u662f\u8fdc\u7a0b\u5b89\u5168\u767b\u5f55\u548c\u7ba1\u7406Linux\u670d\u52a1\u5668\u7684\u6838\u5fc3\u5de5\u5177\u3002<br \/>\n\u8fdc\u7a0b\u63a7\u5236Linux\u64cd\u4f5c<br \/>\n1\u3001\u786e\u8ba4\u662f\u5426\u5f00\u542fsshd\u670d\u52a1<br \/>\nsystemctl status sshd.service2\u3001\u786e\u8ba4\u9ed8\u8ba4\u7aef\u53e322\u6253\u5f00<br \/>\nnetstat -tnlp|grep :223\u3001\u8fde\u63a5\u8fdc\u7a0b\u670d\u52a1\u5668<br \/>\n\u683c\u5f0f&#xff1a;<br \/>\nssh    \u7528\u6237\u8eab\u4efd\u8fdc\u7a0b\u670d\u52a1ip<br \/>\nexit   #\u9000\u51fa\u94fe\u63a5\u8fdc\u7a0b\u4e3b\u673a\u4f8b&#xff1a;<br \/>\nssh rootlocalhost\u7b2c\u4e00\u6b21\u8fdb\u884c\u8fdc\u7a0b\u8fde\u63a5\u65f6&#xff0c;\u4f1a\u751f\u6210\u5bc6\u94a5&#xff0c;<\/p>\n","protected":false},"author":2,"featured_media":82397,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[58,43,44],"topic":[],"class_list":["post-82415","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-server","tag-linux","tag-43","tag-44"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v20.3 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>\u4ece\u8fdc\u7a0b\u8fd0\u7ef4\u5230 Web \u670d\u52a1\u914d\u7f6e - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.wsisp.com\/helps\/82415.html\" \/>\n<meta property=\"og:locale\" content=\"zh_CN\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"\u4ece\u8fdc\u7a0b\u8fd0\u7ef4\u5230 Web \u670d\u52a1\u914d\u7f6e - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\" \/>\n<meta property=\"og:description\" content=\"ssh\u670d\u52a1 ssh\u670d\u52a1\u662f\u8fdc\u7a0b\u5b89\u5168\u767b\u5f55\u548c\u7ba1\u7406Linux\u670d\u52a1\u5668\u7684\u6838\u5fc3\u5de5\u5177\u3002 \u8fdc\u7a0b\u63a7\u5236Linux\u64cd\u4f5c 1\u3001\u786e\u8ba4\u662f\u5426\u5f00\u542fsshd\u670d\u52a1 systemctl status sshd.service2\u3001\u786e\u8ba4\u9ed8\u8ba4\u7aef\u53e322\u6253\u5f00 netstat -tnlp|grep :223\u3001\u8fde\u63a5\u8fdc\u7a0b\u670d\u52a1\u5668 \u683c\u5f0f&#xff1a; ssh  \u7528\u6237\u8eab\u4efd\u8fdc\u7a0b\u670d\u52a1ip exit  #\u9000\u51fa\u94fe\u63a5\u8fdc\u7a0b\u4e3b\u673a\u4f8b&#xff1a; ssh rootlocalhost\u7b2c\u4e00\u6b21\u8fdb\u884c\u8fdc\u7a0b\u8fde\u63a5\u65f6&#xff0c;\u4f1a\u751f\u6210\u5bc6\u94a5&#xff0c;\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.wsisp.com\/helps\/82415.html\" \/>\n<meta property=\"og:site_name\" content=\"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\" \/>\n<meta property=\"article:published_time\" content=\"2026-07-25T00:50:33+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/07\/20260725005031-6a640857bf60b.png\" \/>\n<meta name=\"author\" content=\"admin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"\u4f5c\u8005\" \/>\n\t<meta name=\"twitter:data1\" content=\"admin\" \/>\n\t<meta name=\"twitter:label2\" content=\"\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4\" \/>\n\t<meta name=\"twitter:data2\" content=\"7 \u5206\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/82415.html\",\"url\":\"https:\/\/www.wsisp.com\/helps\/82415.html\",\"name\":\"\u4ece\u8fdc\u7a0b\u8fd0\u7ef4\u5230 Web \u670d\u52a1\u914d\u7f6e - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\",\"isPartOf\":{\"@id\":\"https:\/\/www.wsisp.com\/helps\/#website\"},\"datePublished\":\"2026-07-25T00:50:33+00:00\",\"dateModified\":\"2026-07-25T00:50:33+00:00\",\"author\":{\"@id\":\"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41\"},\"breadcrumb\":{\"@id\":\"https:\/\/www.wsisp.com\/helps\/82415.html#breadcrumb\"},\"inLanguage\":\"zh-Hans\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.wsisp.com\/helps\/82415.html\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/82415.html#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"\u9996\u9875\",\"item\":\"https:\/\/www.wsisp.com\/helps\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"\u4ece\u8fdc\u7a0b\u8fd0\u7ef4\u5230 Web \u670d\u52a1\u914d\u7f6e\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/#website\",\"url\":\"https:\/\/www.wsisp.com\/helps\/\",\"name\":\"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\",\"description\":\"\u9999\u6e2f\u670d\u52a1\u5668_\u9999\u6e2f\u4e91\u670d\u52a1\u5668\u8d44\u8baf_\u670d\u52a1\u5668\u5e2e\u52a9\u6587\u6863_\u670d\u52a1\u5668\u6559\u7a0b\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.wsisp.com\/helps\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"zh-Hans\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41\",\"name\":\"admin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-Hans\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery\",\"contentUrl\":\"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery\",\"caption\":\"admin\"},\"sameAs\":[\"http:\/\/wp.wsisp.com\"],\"url\":\"https:\/\/www.wsisp.com\/helps\/author\/admin\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"\u4ece\u8fdc\u7a0b\u8fd0\u7ef4\u5230 Web \u670d\u52a1\u914d\u7f6e - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.wsisp.com\/helps\/82415.html","og_locale":"zh_CN","og_type":"article","og_title":"\u4ece\u8fdc\u7a0b\u8fd0\u7ef4\u5230 Web \u670d\u52a1\u914d\u7f6e - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","og_description":"ssh\u670d\u52a1 ssh\u670d\u52a1\u662f\u8fdc\u7a0b\u5b89\u5168\u767b\u5f55\u548c\u7ba1\u7406Linux\u670d\u52a1\u5668\u7684\u6838\u5fc3\u5de5\u5177\u3002 \u8fdc\u7a0b\u63a7\u5236Linux\u64cd\u4f5c 1\u3001\u786e\u8ba4\u662f\u5426\u5f00\u542fsshd\u670d\u52a1 systemctl status sshd.service2\u3001\u786e\u8ba4\u9ed8\u8ba4\u7aef\u53e322\u6253\u5f00 netstat -tnlp|grep :223\u3001\u8fde\u63a5\u8fdc\u7a0b\u670d\u52a1\u5668 \u683c\u5f0f&#xff1a; ssh  \u7528\u6237\u8eab\u4efd\u8fdc\u7a0b\u670d\u52a1ip exit  #\u9000\u51fa\u94fe\u63a5\u8fdc\u7a0b\u4e3b\u673a\u4f8b&#xff1a; ssh rootlocalhost\u7b2c\u4e00\u6b21\u8fdb\u884c\u8fdc\u7a0b\u8fde\u63a5\u65f6&#xff0c;\u4f1a\u751f\u6210\u5bc6\u94a5&#xff0c;","og_url":"https:\/\/www.wsisp.com\/helps\/82415.html","og_site_name":"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","article_published_time":"2026-07-25T00:50:33+00:00","og_image":[{"url":"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/07\/20260725005031-6a640857bf60b.png"}],"author":"admin","twitter_card":"summary_large_image","twitter_misc":{"\u4f5c\u8005":"admin","\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4":"7 \u5206"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.wsisp.com\/helps\/82415.html","url":"https:\/\/www.wsisp.com\/helps\/82415.html","name":"\u4ece\u8fdc\u7a0b\u8fd0\u7ef4\u5230 Web \u670d\u52a1\u914d\u7f6e - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","isPartOf":{"@id":"https:\/\/www.wsisp.com\/helps\/#website"},"datePublished":"2026-07-25T00:50:33+00:00","dateModified":"2026-07-25T00:50:33+00:00","author":{"@id":"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41"},"breadcrumb":{"@id":"https:\/\/www.wsisp.com\/helps\/82415.html#breadcrumb"},"inLanguage":"zh-Hans","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.wsisp.com\/helps\/82415.html"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.wsisp.com\/helps\/82415.html#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"\u9996\u9875","item":"https:\/\/www.wsisp.com\/helps"},{"@type":"ListItem","position":2,"name":"\u4ece\u8fdc\u7a0b\u8fd0\u7ef4\u5230 Web \u670d\u52a1\u914d\u7f6e"}]},{"@type":"WebSite","@id":"https:\/\/www.wsisp.com\/helps\/#website","url":"https:\/\/www.wsisp.com\/helps\/","name":"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","description":"\u9999\u6e2f\u670d\u52a1\u5668_\u9999\u6e2f\u4e91\u670d\u52a1\u5668\u8d44\u8baf_\u670d\u52a1\u5668\u5e2e\u52a9\u6587\u6863_\u670d\u52a1\u5668\u6559\u7a0b","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.wsisp.com\/helps\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"zh-Hans"},{"@type":"Person","@id":"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41","name":"admin","image":{"@type":"ImageObject","inLanguage":"zh-Hans","@id":"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/image\/","url":"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery","contentUrl":"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery","caption":"admin"},"sameAs":["http:\/\/wp.wsisp.com"],"url":"https:\/\/www.wsisp.com\/helps\/author\/admin"}]}},"_links":{"self":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/posts\/82415","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/comments?post=82415"}],"version-history":[{"count":0,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/posts\/82415\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/media\/82397"}],"wp:attachment":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/media?parent=82415"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/categories?post=82415"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/tags?post=82415"},{"taxonomy":"topic","embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/topic?post=82415"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}