智慧校園解決方案安裝集成指導手冊

智慧校園解決方案安裝集成指導手冊中國移動成研院

目錄1 引言 31.1 編寫目的 31.2 參考資料 32 硬件環(huán)境部署 32.1 硬件拓撲圖 32.2 硬件配置說明 43 軟件環(huán)境部署 53.1 軟件清單 53.2 docker服務鏡像版本 53.3 軟件環(huán)境部署 53.4 操作系統(tǒng)安裝 53.5 數(shù)據(jù)庫安裝 53.5.1 數(shù)據(jù)庫的安裝 53.5.2 下載 63.5.3 新增用戶及組 63.5.4 創(chuàng)建數(shù)據(jù)庫文件存放的目錄 63.5.5 編譯安裝 63.5.6 設置用戶環(huán)境變量及初始化數(shù)據(jù)庫 63.5.7 修改默認配置文件 73.5.8 啟動和停止postgresql 73.5.9 Postgresql主庫設置 73.5.10 Postgresql從庫的設置 73.5.11 啟動從庫后執(zhí)行檢測 83.6 基礎設置及nginx、nfs、docker服務的安裝 83.6.1 基礎設置及nginx、nfs、docker服務的安裝 83.6.2 redis安裝 143.6.3 Zookeeper服務的部署 163.7 支撐軟件安裝 173.7.1 phantomjs安裝 173.7.2 ffmpeg安裝 174 系統(tǒng)初始化與確認 174.1 系統(tǒng)初始化 174.2 系統(tǒng)部署確認 185 故障應急處理 185.1 web服務器 185.2 應用服務器 185.3 數(shù)據(jù)庫服務器 18引言編寫目的本文檔的編寫目的在于為智慧校園平臺管理員提供系統(tǒng)安裝，部署幫助，以便用戶可獨立完成系統(tǒng)的安裝和部署，并使系統(tǒng)能夠正常運行。參考資料硬件環(huán)境部署硬件拓撲圖硬件配置說明主機名稱作用內(nèi)網(wǎng)IP公網(wǎng)CPU內(nèi)存硬盤存儲VxiaoSrv202Nginx負載均衡028核16G20+100GVxiaoSrv103nginx主機038核16G20+100GVxiaoSrv104nginx主機048核16G20+100GVxiaoSrv105nginx主機058核16G20+100GVxiaoSrv162nfs主機10.111.1000.168核16G20+100G2TVxiaoSrv164App主機648核16G20+100GVxiaoSrv165App主機658核16G20+100GVxiaoSrv166App主機668核16G20+100GCacheSrv172zaookeeper728核16G20+100GVxiaoSrv173redis738核16G20+100GVxiaoSrv174redis748核16G20+100GVxiaoSrv178redis788核16G20+100GVxiaoSrv168Mqtt主機688核16G20+100GVxiaoSrv169Mqtt主機698核16G20+100GVxiaoSrv119Postgresqlmaster198核32G20+100GVxiaoSrv122Postgresqlslave228核32G20+100GVxiaoSrv244Postgresqlslave448核16G20+100GVxiaoSrv245Postgresql備用庫458核16G20+100G軟件環(huán)境部署軟件清單apache-maven-3.5.4-bin.tar.gzjdk-8u212-linux-x64.tar.gznginx-1.14.2.tar.gzdocker-ce-18.09.7-3.el7.x86_64.rpmdocker服務鏡像版本redis：redis:4.0zookeeper：zookeeper:3.4軟件環(huán)境部署web服務器：nginx應用服務器：redis、tomcat數(shù)據(jù)庫服務器：postgresql操作系統(tǒng)安裝移動云主機已經(jīng)預裝好CentOS7.464位操作系統(tǒng)。數(shù)據(jù)庫安裝數(shù)據(jù)庫的安裝檢查系統(tǒng)是否有安裝舊版本postgresql：#rpm-qa|greppostgres或#rpm-qal|greppostgres 若已經(jīng)安裝，則使用rpm-e命令卸載下載#cd/app/software#wget/pub/source/v10.8/postgresql-10.9.tar.gz 新增用戶及組#groupaddpostgres#useradd-gpostgrespostgres#passwdpostgres /*修改用戶密碼*/ 創(chuàng)建數(shù)據(jù)庫文件存放的目錄創(chuàng)建數(shù)據(jù)目錄：`#mkdir-p/app/pgdata/data`更改屬主及屬組：`#chown-Rpostgres:postgres/app/pgdata` 編譯安裝 安裝依賴：#yuminstallzlib-devel–y編譯：#tarxfpostgresql-10.9.tar.gz#cdpostgresql-10.8#./configure--prefix=/app/pgdata/data--without-readline#make&&makeinstall 設置用戶環(huán)境變量及初始化數(shù)據(jù)庫 設置環(huán)境變量，在postgres用戶下的.bash_profile中添加以下變量：exportPG_HOME=/usr/pgsql-10PATH=$PATH:$HOME/.local/bin:$HOME/bin:$PG_HOME/binexportPATH 初始化數(shù)據(jù)庫：#su-postgres#initdb-D/app/pgdata/data-EUTF-8--locale=zh_CN.UTF-8 修改默認配置文件 進入pgsql的數(shù)據(jù)庫安裝目錄下打開客戶端認證配置pg_hba.conf文件添加需要連接的地址方法需設置為trust,則該IP可通過遠程連接。打開`postgresql.conf`可修改默認端口及其他配置 啟動和停止postgresql 啟動：$pg_ctl-D/app/data/pgsql/datastart關(guān)閉：$pg_ctl-D/app/data/pgsql/datastop重載：$pg_ctl-D/app/data/pgsql/datareloadPostgresql主庫設置進入database1主庫，新增用于主從復制的用戶createrolepostgrereploginreplicationencryptedpassword'reppasswd',在database1修改數(shù)據(jù)庫的pg_hba.conf文件，新增一下配置：hostreplicationrepuser/0md5hostallall/0md5Postgresql從庫的設置1、復制主庫相關(guān)文件$rm–fr/app/pgdata/data/*$pg_basebackup–h19–Upostgrerep–D/app/pgdata/data–P$cp/usr/pgsql-10/share/postgresql/recovery.conf.sample/app/pgdata/data/recovery.conf2、修改recovery.conf文件standby_mode=onprimary_conninfo='host=19port=5544user=repuserpassword='reppasswd'trigger_file='/app/data/pgsql/data/trigger.kenyon'recovery_target_timeline='latest'3、修改從庫配置文件postgresql.confwal_level=hot_standbymax_connections=1000hot_standby=onmax_standby_streaming_delay=30swal_receiver_status_interval=10shot_standby_feedback=on啟動從庫后執(zhí)行檢測 進入數(shù)據(jù)庫執(zhí)行以下命令： postgres=#selectclient_addr,sync_statefrompg_stat_replication;基礎設置及nginx、nfs、docker服務的安裝基礎設置及nginx、nfs、docker服務的安裝基礎設置及nginx、nfs、docker服務主要采用了腳本安裝，提前將腳本分發(fā)到每臺服務器上去執(zhí)行，主要部署的內(nèi)容有：系統(tǒng)基本依賴包、普通用戶的建立、常用目錄的建立、云磁盤的掛載、系統(tǒng)內(nèi)核的升級、docker服務的安裝、nfs的安裝、nginx的安裝、openssh的升級。腳本內(nèi)容：#!/bin/bash#defineconstantvxiao_passwd=''nginx_version='nginx-1.14.2.tar.gz'nginx_user='www'appsrv_list=''websrv_list=''dbsrv_list=''mrgsrv_list=''nfssrv_list=''cachesrv_list=''nginxsrv_list=''app_bin_dir=''app_package_dir=''localhost_ip=$(ipaddrshoweth0|grep'inet'|awk-F'[/]''{print$6}')#installdepsfunctiontools(){ yuminstallvimbash-completionlvm2expectyum-utilsdevice-mapper-persistent-datalrzsznet-toolsdstat\ gccgcc-c++autoconfautomakemakepcrepcre-developenssl-develwgetnfs-utils-y yummakecachefast}#createnomarluserfunctioncreateuser(){ useradd-u1000vxiao echo"$vxiao_passwd"|passwd--stdinvxiao}#create/appdirfunctioncreatedir(){ mkdir-p/app/{bin,data,docker,software,scripts,logs} mkdir/vxiao chown-Rvxiao:vxiao/app chown-Rvxiao:vxiao/vxiao}#createlvmfunctioncreatelvm(){ dev_name=$(fdisk-l|grepvdb|awk-F'[:,]+''{print$2}') echo"createlvm..." #settimeout-1 #/usr/bin/expect<<EOF #spawnpvcreate${dev_name} #expect"*[y/n]" #send"y\n" #EOF pvcreate${dev_name}&&pvs&&vgcreatevxiao${dev_name}&&lvcreate-L99G-nlv1vxiao&&lvs&&mkfs.ext4/dev/vxiao/lv1&&mount/dev/vxiao/lv1/app chmod+x/etc/rc.d/rc.local echo"mount/dev/vxiao/lv1/app">>/etc/rc.local}#updatekernelfunctionupdatesystemkernal(){echo"updatesystemkernal"rpm--import/RPM-GPG-KEY-yuminstall/elrepo-release-7.0-3.el7.elrepo.noarch.rpm-yyum-y--enablerepo=elrepo-kernelinstallkernel-lt.x86_64kernel-lt-devel.x86_64sed-i's#GRUB_DEFAULT=saved#GRUB_DEFAULT=0#g'/etc/default/grubgrub2-mkconfig-o/boot/grub2/grub.cfg}#dockerinstallfunctioninstall_docker(){echo"installdocker..."yum-config-manager--add-repo/docker-ce/linux/centos/docker-ce.repoyum-yinstalldocker-cegpasswd-avxiaodocker}functionset_sysctl(){echo"setsysctl..."cat>/etc/sysctl.conf<<EOFnet.ipv6.conf.all.disable_ipv6=1net.ipv6.conf.default.disable_ipv6=1net.ipv6.conf.lo.disable_ipv6=1vm.swappiness=0net.ipv4.neigh.default.gc_stale_time=120net.ipv4.conf.all.rp_filter=0net.ipv4.conf.default.rp_filter=0net.ipv4.conf.default.arp_announce=2net.ipv4.conf.lo.arp_announce=2net.ipv4.conf.all.arp_announce=2net.ipv4.tcp_max_tw_buckets=5000net.ipv4.tcp_syncookies=1net.ipv4.tcp_max_syn_backlog=1024net.ipv4.tcp_synack_retries=2kernel.sysrq=1EOFsysctl-p}#ulimitsetfunctionmodify_limit(){echo"modifylimit.conf..."echo"*softnofile65535">>/etc/security/limits.confecho"*hardnofile65535">>/etc/security/limits.conf}#dockersetfunctionconfig_docker(){localhost_ip=$(ipaddrshoweth0|grep'inet'|awk-F'[/]''{print$6}')dockerconfig='/usr/lib/systemd/system/docker.service'src_exec="ExecStart=/usr/bin/dockerd-Hfd://--containerd=/run/containerd/containerd.sock"dst_exec="ExecStart=/usr/bin/dockerd-Hfd://--containerd=/run/containerd/containerd.sock-Hunix:///var/run/docker.sock--graph/app/docker"sed-i"s#${src_exec}#${dst_exec}#g"$dockerconfigmkdir/app/{bin,data,docker,software,scripts,logs}grep'ExecStart'$dockerconfigsystemctldaemon-reloadsystemctlrestartdocker.service}#nginxfunctioninstall_nginx(){ cd${app_package_dir} [-f${nginx_version}.tar.gz]||wget-P${app_package_dir}/download/${nginx_version}.tar.gz tarxf${nginx_version}&&cd${nginx_version} useradd-M-s/sbin/nologin${nginx_user} ./configure--user=${nginx_user}--group=${nginx_user}--with-http_ssl_module--with-http_stub_status_module--prefix=/app/bin/${nginx_version} make&&makeinstall ln-s/app/bin/${nginx_version}/app/bin/nginx echo"exportPATH="$PATH:/app/bin/nginx/sbin"">>/root/.bashrc}#onwebserverinstallnginxfunctionserver_install_nginx(){ foriin${websrv_list} do if[$i==${localhost_ip}];then install_nginx fi done}#setnfsservicefunctionset_nfs_server(){ if[${nfssrv_list}==${localhost_ip}];then echo"/vxiao/22(rw,sync,all_squash,anonuid=1000,anongid=1000)">>/etc/exports echo"/vxiao/22(rw,sync,all_squash,anonuid=1000,anongid=1000)">>/etc/exports systemctlreloadnfs else mount${nfssrv_list}:/vxiao/vxiao echo"${nfssrv_list}:/vxiao/vxiao">>/etc/rc.local fi}functionlimitsu(){sed-i'2aauthrequiredpam_wheel.souse_uid'/etc/pam.d/su usermod-Gwheelvxiao}functionupdate_openssh(){ cp/vxiao/software/openssh-8.0p1.tar.gz/app/software cd/app/software tarxfopenssh-8.0p1.tar.gz cdopenssh-8.0p1 yuminstall-ytelnet-server*telnetxinetdgcczlibzlib-developenssl-develpam-devel systemctlenablexinetd.service systemctlenabletelnet.socket systemctlstarttelnet.socket systemctlstartxinetd.service echo'pts/0'>>/etc/securetty echo'pts/1'>>/etc/securetty echo'pts/2'>>/etc/securetty cp-r/etc/ssh/etc/ssh.bak`date+%Y%m%d` ./configure--prefix=/usr/local/openssh--sysconfdir=/etc/ssh--with-pam--with-tcp-wrappers--with-ssl-dir=/usr/local/ssl--with-md5-passwords--with-zlib=zlib rpm-e--nodeps`rpm-qa|grepopenssh` make&&makeinstall chmod600/etc/ssh/ssh_host_rsa_key chmod600/etc/ssh/ssh_host_ecdsa_key chmod600/etc/ssh/ssh_host_ed25519_key cpcontrib/redhat/sshd.init/etc/init.d/sshd chmod+x/etc/init.d/sshd systemctlenablesshd sed-i's/#PermitRootLoginprohibit-password/PermitRootLoginyes/g'/etc/ssh/sshd_config cp-a/usr/local/openssh/sbin/sshd/usr/sbin/sshd cp-a/usr/local/openssh/bin/*/usr/bin/ sed-i's#/usr/libexec/sftp-server#/usr/local/openssh/libexec/sftp-server#'/etc/ssh/sshd_config systemctlstartsshd systemctldisablexinetd systemctldisabletelnet.socket systemctlstopxinetd.service systemctlstoptelnet.socket}functionmain(){ tools createuser createdirupdatesystemkernalcreatelvm install_docker set_sysctl modify_limit config_docker server_install_nginx set_nfs_server}mainredis安裝1、Redis-sentinel通用配置文件：$cat/app/conf/redis/sentinel.confport26379dir"/tmp"sentineldeny-scripts-reconfigyessentinelmonitorredismasterslave7473792sentinelauth-passredismasterslavemobile!.02019sentinelconfig-epochredismasterslave1sentinelleader-epochredismasterslave12、73節(jié)點： Redisdocker-compose啟動文件：$cat/app/compose/redis.ymlversion:'3.7'services:master:image:redis:4.0container_name:redis-masterrestart:alwayscommand:redis-server--port7379--requirepassmobile!.02019--masterauthmobile!.02019--appendonlyyes--maxmemory4000m--maxmemory-policyallkeys-lruports:-7379:7379volumes:-/app/data/redis:/data Redis-sentineldocker-compose配置文件：$cat/app/compose/redis-sentinel.ymlversion:'3.7'services:sentinel1:image:redis:4.0container_name:redis-sentinel-1command:redis-sentinel/usr/local/etc/redis/sentinel.confrestart:alwaysports:-26379:26379volumes:-/app/conf/redis/sentinel.conf:/usr/local/etc/redis/sentinel.conf 3、74節(jié)點： Redisdocker-compose啟動文件：$cat/app/compose/redis.ymlversion:'3.7'services:slave1:image:redis:4.0container_name:redis-slave-1restart:alwayscommand:redis-server--slaveof737379--port7379--requirepassmobile!.02019--masterauthmobile!.02019--appendonlyyes--maxmemory4000m--maxmemory-policyallkeys-lruports:-7379:7379volumes:-/app/data/redis:/data Redis-sentineldocker-compose配置文件：$cat/app/compose/redis-sentinel.ymlversion:'3.7'services:sentinel2:image:redis:4.0container_name:redis-sentinel-2command:redis-sentinel/usr/local/etc/redis/sentinel.confrestart:alwaysports:-26379:26379volumes:-/app/conf/redis/sentinel.conf:/usr/local/etc/redis/sentinel.conf 4、78節(jié)點： Redisdocker-compose啟動文件：$cat/app/compose/redis.ymlversion:'3.7'services:slave1:image:redis:4.0container_name:redis-slave-2restart:alwayscommand:redis-server--slaveof737379--port7379--requirepassmobile!.02019--masterauthmobile!.02019--appendonlyyes--maxmemory4000m--maxmemory-policyallkeys-lruports:-7379:7379volumes:-/app/data/redis: