[CentOS]安裝 7zip

參考 http://wiki.centos.org/AdditionalResources/Repositories/RPMForge

yum install p7zip


指令就參考 http://www.dotnetperls.com/7-zip-examples

應資訊安全要求，可配合另外一篇達成檔案備份加密

7za a -t7z -mhe=on -Ppassword /backups/$PackFile $SourceDir

雲端運算定義

5種特徵、4種建置模式、3項服務，比較常見的有3種服務模式 (SaaS)軟體即服務、(PaaS)平台即服務、(IaaS)基礎設施即服務以及4種建置方式 Public cloud(公共雲), Private cloud(私有雲), Community cloud(社區雲), Hybrid cloud(混合雲)，另外有五種特徵可以評估該服務是不是雲端服務的重要項目，分別是(1)On-demand self-service(需要時自助的取得)(2)Broad network access(可以透過標準網路取得)(3)Resource pooling(資源可以動態配置)(4)Rapid elasticity，(快速且有彈性)(5)Measured Service(用多少付多少)。

NIST Cloud Computing Program

[Centos][FreeBSD]自動排程備份+上傳至FTP

#vi backup.sh



#!/bin/bash
##################################################
# 紀錄檔所在
LogFile="/backups/log/`date +"%Y-%m"`.log"
# 壓縮檔案名稱
file="backupfilename"

7zpassword="mypassword"
# 備份來源目錄
SourceDir="/etc/SourceDir"
# 備份目的目錄
BakDir="/backups"
# FTP IP位址
host="123.456.789.123"
# FTP 帳號和密碼
user="ftpusername"
pass="ftpuserpassword"
# FTP 備份目錄
dir="./"
# 備份保留天數
RetainDay=20
# Email To ?
email="xxxxx@xxxxx.edu.tw"
##################################################
DATE=`date +"%Y-%m-%d"`
echo "backup start at $(date +"%Y-%m-%d %H:%M:%S")" >>$LogFile
echo "--------------------------------------------------" >>$LogFile
cd $BakDir
PackFile=$file.$DATE.tar.gz
tar zcvf /backups/$PackFile $SourceDir

#7zip 壓縮，需另外安裝。

7za a -t7z -mhe=on -P$7zpassword /backups/$PackFile $SourceDir
echo "backup $SourceDir done into $PackFile" >>$LogFile

#FTP 檔案傳輸
/usr/bin/ftp -in $host << EOF

user $user $pass
cd $dir
bin
put $PackFile
quit
EOF

#FTPS 加密檔案傳輸。

#/usr/bin/lftp -u $user,$pass ftps://$host << EOF

#cd $dir

#put $PackFile

#quit

#EOF

echo "Backup files have been uploaded" >>$LogFile

#Centos
find -type f -mtime +$RetainDay -name "*.tar.gz" -exec rm {} \; >/dev/null
#freebsd
#find $BakDir -mtime +$RetainDay -name "*.tar.gz" -exec rm {} \; >/dev/null
echo "Delete expired backup files" >>$LogFile

# email subject
SUBJECT="$PackFile Backup is done."
# Email text/message
EMAILMESSAGE=$BakDir"/emailmessage.txt"
echo "$PackFile Backup is done."> $EMAILMESSAGE
echo "you can check FTP server $hotst.">>$EMAILMESSAGE
mail -s "$SUBJECT" "$EMAIL" < $EMAILMESSAGE
echo "Send e-mail notification" >>$LogFile
echo "--------------------------------------------------" >>$LogFile
echo "backup end at $(date +"%Y-%m-%d %H:%M:%S")" >>$LogFile
echo " " >> $LogFile

#chmod a+x backup.sh
#crontab -e

05 1 * * * ./backups/backup.sh

用 MRTG 監控 TR-72W 溫濕度

netflow#vi getxxx.sh

#! /bin/sh

url="http://123.456.789.000/B/crrntdata/cdata.txt"

wget=/usr/bin/wget

awg=/usr/bin/awk

$wget -q -O - $url | awk 'BEGIN{FS="="} /cHumidity=/ || /cTemperature1/ {print $2}'

echo "TEMP"

echo "-"

netflow#vi mrtgtempe.cfg 

WorkDir: /var/www/mrtg/tempe

PageTop[^]: <h1>Stats for</h1>
#TimeZone[_]: Taiwan
Options[^]: gauge growright
kilo[_]: 1024
XSize[_]: 400
Language: big5
EnableIPv6: no

Target[TR-72W]:`/etc/mrtg/temperature/getxxx.sh `
MaxBytes[TR-72W]: 100
MaxBytes2[TR-72W]: 100
Title[TR-72W]: West_Thermometer&Hygrometer
Options[TR-72W]: absolute, gauge
PageTop[TR-72W]:<H1>West_Thermometer&Hygrometer</H1>
AbsMax[TR-72W]: 100
Ylegend[TR-72W]: dig. / %
ShortLegend[TR-72W]: dig or %
#RouterUptime[TR-72W]:public@123.456.789.00
Unscaled[TR-72W]: dmwy
LegendI[TR-72W]: dig.
LegendO[TR-72W]: %
Legend1[TR-72W]: Thermometer
Legend2[TR-72W]: Hygrometer
netflow# env LANG=C /usr/bin/mrtg /etc/mrtg/temperature/mrtgtempe.cfg

netflow# crontab -e

*/5 * * * * env LANG=C /usr/bin/mrtg /etc/mrtg/temperature/mrtgtempe.cfg

Bind DNS DNSSEC 實作

產生 ZSK (Zone sign key)

dns#dnssec-keygen -r /dev/urandom -a RSASHA1 -b 1024 -n ZONE xxx.edu.tw

產生 KSK (Key sign key)
dns#dnssec-keygen -r /dev/urandom -f KSK -a RSASHA1 -b 2048 -n ZONE xxx.edu.tw
將 DNSKEY 放入 zone file
#cat K*.key » /etc/namedb/db.xxx.edu.tw
簽署網域
dns#dnssec-signzone -o xxx.edu.tw  -k Kxxx.edu.tw.+005+?????.key /etc/namedb/db.xxx.edu.tw Kxxx.edu.tw.+005+?????.key
完成後會出現

-----------------------

Verifying the zone using the following algorithms: RSASHA1.

Zone signing complete:

Algorithm: RSASHA1: ZSKs: 1, KSKs: 1 active, 0 revoked, 0 stand-by

/etc/namedb/db.xxx.edu.tw.signed

-----------------------

啟用該檔案

dns#vi name.conf

zone “xxx.edu.tw” { 

 type master; file “/etc/namedb/ db.xxx.edu.tw.signed ”;

 };

dns# named.reload

CIDR (Classless Inter-Domain Routing)

[ N * Class_C Cases]:

1. A.B.C.0/24 ::= A.B.C.0 255.255.255.0 :: 11111111.11111111.11111111.0 (1 setgment)
2. A.B.C.0/23 ::= A.B.C.0 255.255.254.0 :: 11111111.11111111.11111110.0 (2 setgment)
3. A.B.C.0/22 ::= A.B.C.0 255.255.252.0 :: 11111111.11111111.11111110.0 (4 setgment)
4. A.B.C.0/21 ::= A.B.C.0 255.255.248.0 :: 11111111.11111111.11111000.0 (8 setgment)
5. A.B.C.0/20 ::= A.B.C.0 255.255.240.0 :: 11111111.11111111.11110000.0 (16 setgment)
6. A.B.C.0/19 ::= A.B.C.0 255.255.224.0 :: 11111111.11111111.11100000.0 (32 setgment)
7. A.B.C.0/18 ::= A.B.C.0 255.255.192.0 :: 11111111.11111111.11000000.0 (64 setgment)
8. A.B.C.0/17 ::= A.B.C.0 255.255.128.0 :: 11111111.11111111.10000000.0 (128 setgment)
9. A.B.C.0/16 ::= A.B.0.0 255.255.0.0 :: 11111111.11111111.00000000.0 (256 setgment)

---

[ N * IP Cases]:

1. A.B.C.D/32 ::= A.B.C.D 255.255.255.255 :: 11111111.11111111.11111111.11111111 (1 IP)
2. A.B.C.D/31 ::= A.B.C.D 255.255.255.254 :: 11111111.11111111.11111111.11111110 (2 IP)
3. A.B.C.D/30 ::= A.B.C.D 255.255.255.252 :: 11111111.11111111.11111111.11111110 (4 IP)
4. A.B.C.D/29 ::= A.B.C.D 255.255.255.248 :: 11111111.11111111.11111111.11111000 (8 IP)
5. A.B.C.D/28 ::= A.B.C.D 255.255.255.240 :: 11111111.11111111.11111111.11110000 (16 IP)
6. A.B.C.D/27 ::= A.B.C.D 255.255.255.224 :: 11111111.11111111.11111111.11100000 (32 IP)
7. A.B.C.D/26 ::= A.B.C.D 255.255.255.192 :: 11111111.11111111.11111111.11000000 (64 IP)
8. A.B.C.D/25 ::= A.B.C.D 255.255.255.128 :: 11111111.11111111.11111111.10000000 (128 IP)
9. A.B.C.0/24 ::= A.B.C.0 255.255.255.0 :: 11111111.11111111.11111111.00000000 (256 IP)

[FreeBSD]更改預設分析信件收件者

#vi /etc/mail/aliases

root: me@my.domain.com

#newaliases

"daily run output" 及 "security check output"會寄到指定的信箱。

USHA Pro 設定 Client

安裝client程式

Windows

1.執行 SD_USHA Service_4.20.exe

2.設定

IP Address: 輸入 USHA 卡的 IP位址(非本機電腦位址)

Client Name: 識別名稱，自己取或電腦抓

Shutdown Delay: 延遲關機時間

Linux:

# tar xvf SD_LINUX_4_20_USHA.tar 

# ./install.sh 

# vi /etc/uGuard.conf

RemoteHostIP = 0.0.0.0

ClientName = YourClientName

ShutdownDelay = 120

AcFail = 1   

BatteryLow = 1 

# /etc/uGuard -s  // 啟動

其他常用指令

# /etc/uGuard -h    // 看help

# /etc/uGuard -s  // 啟動

# /etc/uGuard -p // 看設定資訊

# /etc/uGuard -e // 編輯設定

Shutdown Delay 時間

斷電開始時間 + Shutdown Delay = 執行電腦關機
ex:
斷電時間 12:00
Shutdown Delay 為 120s
電腦關機時間就是 12:02

查看UPS連接設備

監控UPS → 連接設備表格

[CentOS]查看 CentOS 版本

1.查看linux kernel 版本
$uname -r

2.查看centos版本

$cat /etc/redhat -release

3.查看php版本
$php -v

4.查看mysql版本
$mysql -v

5.查看apache版本
 5-1 $rpm -qa httpd