Centos7 minimal install 후 설치할 것들

 

• big-master :
   cpu 2 core 2 mem 8G hdd 64G ipaddr 192.168.100.180/24 gw 192.168.100.1 dns 164.124.101.2,168.126.63.1 hostname big-master
• big-slave1 :
   cpu 2 core 2 mem 8G hdd 64G ipaddr 192.168.100.181/24 gw 192.168.100.1 dns 164.124.101.2,168.126.63.1 hostname big-slave1 
• big-slav 2 :
   cpu 2 core 2 mem 8G hdd 64G ipaddr 192.168.100.182/24 gw 192.168.100.1 dns 164.124.101.2,168.126.63.1 hostname big-slave2
• big-slave3 : 
   cpu 2 core 2 mem 8G hdd 64G ipaddr 192.168.100.183/24 gw 192.168.100.1 dns 164.124.101.2,168.126.63.1 hostname big-slave3
• big-slave4
   cpu 2 core 2 mem 8G hdd 64G ipaddr 192.168.100.184/24 gw 192.168.100.1 dns 164.124.101.2,168.126.63.1 hostname big-slave4

[root@big-master ~]# iptables -L
# Centos7 이전은
# service firewalld stop
# chkconfig firewalld off #테스트용도 이므로 방화벽 비활성화
[root@big-master ~]# systemctl stop firewalld
[root@big-master ~]# systemctl disable firewalld
[root@big-master ~]# vi /etc/ssh/sshd_config
GSSAPIAuthentication no
UseDNS no
X11Forwarding no
PermitRootLogin no # 설치 완료후에
RSAAuthentication yes
PubkeyAuthentication yes

[root@big-master ~]# systemctl restart sshd
# Centos7 이전은
#service sshd restart

#yum repository 추가
[root@big-master ~]# echo '[base]
name=CentOS-$releasever - Base
baseurl=http://mirror.kakao.com/centos/$releasever/os/$basearch/
gpgcheck=0 
[updates]
name=CentOS-$releasever - Updates
baseurl=http://mirror.kakao.com/centos/$releasever/updates/$basearch/
gpgcheck=0
[extras]
name=CentOS-$releasever - Extras
baseurl=http://mirror.kakao.com/centos/$releasever/extras/$basearch/
gpgcheck=0' > /etc/yum.repos.d/Kakao.repo

[root@big-master ~]# yum -y update
[root@big-master ~]# yum -y install \
net-tools psmisc wget \
setuptool ntsysv openssh* libaio mc ipvsadm nano curl \
lsof NetworkManager-tui rsync gcc gcc-c++ \
cmake autoconf automake \
libtool zlib zlib-devel openssl openssl-devel \
ncurses-devel gnutls-devel dstat sysstat \
policycoreutils-python \
bz2 lz4 Bson \
git python-devel
#ipv6 비활성화 GRUB_CMDLINE_LINUX에 추가
[root@big-master ~]# vi /etc/default/grub
GRUB_CMDLINE_LINUX="ipv6.disable=1"
:wq!
[root@big-master ~]# grub2-mkconfig -o /boot/grub2/grub.cfg
Generating grub configuration file ...
Found linux image: /boot/vmlinuz-3.10.0-693.21.1.el7.x86_64
Found initrd image: /boot/initramfs-3.10.0-693.21.1.el7.x86_64.img
Found linux image: /boot/vmlinuz-3.10.0-229.el7.x86_64
Found initrd image: /boot/initramfs-3.10.0-229.el7.x86_64.img
Found linux image: /boot/vmlinuz-0-rescue-fe61e176a0a74febb3beeff237c87a91
Found initrd image: /boot/initramfs-0-rescue-fe61e176a0a74febb3beeff237c87a91.img
done

#ecosystem에 사용할 supergroup 및 경로,권한 설정 전체적용
[root@big-master ~]# groupadd -r datagroup
[root@big-master ~]# mkdir /bigdata
[root@big-master ~]# chgrp datagroup /bigdata
[root@big-master ~]# chmod 775 bigdata

dstat는 cpu,disk,network,page file 사용량을,

iostat는 디스크별 사용상태를 표시한다.

sysstat는 iostat사용을 위해 설치했다.

npm, rpm-build, git, python-devel은 master서버에 build시 필요한 경우만 설치하고,

firewall-cmd를 사용하는 대신 필요하다면 system-config-firewall, system-config-firewall-tui를 설치.

 

firewall을 활성화 상태에서 운영하려면, 아래 링크를 참고. oracle base에서 저걸 찾다니..음..

https://oracle-base.com/articles/linux/linux-firewall-firewalld