运维常用指令

大体发版推送的步骤：
拉取仓库代码 构建包  看是否运行集成及单元测试  
仓库代码提交 设置流水线-阻止异常或是对现有业务产生影响的代码入正式代码仓库，测试左移，让低级别错误回归到dev,减轻QA测试压力

node等前端静态页面
其他jar.构建打jar包，或是用docker-compose 维护发版，或是用k8s 维护线上版本业务  私仓一般用harbor
其他车机固件，刷机板子

堡垒机
远程主机仅仅允许从堡垒机密钥登录
PasswordAuthentication no



docker: Error response from daemon: driver failed programming external connectivity on endpoint mysql-server (9c274c7f4af2610577b8134980e573f93baeb86b5d84dc16f7abdb068053372a):  (iptables failed: iptables --wait -t nat -A DOCKER -p tcp -d 0/0 --dport 3306 -j DNAT --to-destination 172.17.0.2:3306 ! -i docker0: iptables: No chain/target/match by that name.

原因：在我们启动了Docker后，我们再对防火墙firewalld进行操作，就会发生上述报错，

详细原因：docker服务启动时定义的自定义链DOCKER，当 centos7 firewall 被清掉时，

firewall的底层是使用iptables进行数据过滤，建立在iptables之上，这可能会与 Docker 产生冲突。

当 firewalld 启动或者重启的时候，将会从 iptables 中移除 DOCKER 的规则，从而影响了 Docker 的正常工作。

当你使用的是 Systemd 的时候， firewalld 会在 Docker 之前启动，但是如果你在 Docker 启动之后操作 firewalld ，你就需要重启 Docker 进程了。
解决办法：输入指令 如下指令，重启docker服务及可重新生成自定义链DOCKER

systemctl restart docker


海南更新
scp -P :/opt/hainan/dist.zip .
scp -P :/opt/hainan/kge-biz.jar .

前端：替换nginx root dist
manage: 替换jar包 ,docker-compose stop manage && docker-compose build manage && docker-compose start manage
for i in nacos tx upms auth gateway manage ;do docker-compose restart $i;done

root/hfkmyl

病毒处理
loginclientbot
xmrig

34 发版推送126需要ssh ,密码修改 为root 

yum -y install psmisc.x86_64

yum -y install python3-pip.noarch
pip3 install runlike
runlike -p docker-container-id 查看docker 容器启动命令

kubectl top  pod km-manage-biz-578558db86-f6xp5 -n pre
kubectl top nodes
kubectl get pods -A
kubectl get pod --show-labels
kubectl label pod {pod名称} app=app
kubectl edit deploy km-auth-pre -n pre
pod扩容
kubectl scale deployment {deployment名称} --replicas=10
kubectl get deploy &&  kubectl scale deployment details-v1 --replicas=2

kubectl get deploy -n pre
pod deploy 更新镜像
kubectl set image deployment/nginx-deployment nginx=nginx:1.14
kubectl set image deployment km-manage-biz km-manage-biz=harbor-inside.hfkmyl.com:9443/his/km-manage-biz-master:202308021019 -n pre

pod 回滚
kubectl rollout undo deployment/pigx-ui -n pre

kubectl rollout status deployment/pigx-ui -n pre

kubectl rollout history deployment/pigx-ui -n pre
kubectl rollout undo deployment/pigx-ui -n pre --to-revision=8

docker run --name mysql-server -t --hostname mysql_server --restart=always \
-v /etc/localtime:/etc/localtime -v /docker/volume1/mysql/1/:/var/lib/mysql \
-e MYSQL_DATABASE="jumpserver" -e MYSQL_USER="jumpserver" -e MYSQL_PASSWORD="jumpserver" \
-e MYSQL_ROOT_PASSWORD="ming1128" -p 3306:3306 -d mysql:5.7 \
--character-set-server=utf8 --collation-server=utf8_bin


docker run --name redis-server -t \
 --hostname redis-server \
 --restart=always \
 -v /etc/localtime:/etc/localtime\
 -p 6379:6379 -d redis:5.0  



docker run --name jumpserver -t --hostname jump-server --restart=always -v /etc/localtime:/etc/localtime -p 8058:80 -p 2222:2222  -e SECRET_KEY=$SECRET_KEY -e BOOTSTRAP_TOKEN=$BOOTSTRAP_TOKEN -e DB_HOST="mysql-server" -e DB_PORT=3306  -e DB_NAME="jumpserver" -e DB_USER="jumpserver" -e DB_PASSWORD="jumpserver" --link mysql-server:mysql  -e REDIS_HOST="redis-server" -e REDIS_PORT="6379"  --link redis-server:redis  jumpserver/jms_all:1.5.2


docker run --name=jumpserver \
        --hostname=jump-server \
        --mac-address=02:42:a9:fe:1e:04 \
        --env=DB_PASSWORD=jumpserver \
        --env=SECRET_KEY=HYyLkKVdEOMSA0skdUNWdSF3lvsEyufIu9v1FYEheLpKn9toqo \
        --env=REDIS_HOST=redis-server \
        --env=BOOTSTRAP_TOKEN=2S81RLtRhqEkV4dU \
        --env=DB_HOST=mysql-server \
        --volume=/etc/localtime:/etc/localtime \
        --workdir=/opt \
        -p 2222:2222 \
        -p 8088:80 \
        --link mysql-server:mysql \
        --link redis-server:redis \
        --restart=always \
        --log-opt max-file=20 \
        --log-opt max-size=50m \
        --runtime=runc \
        -t \
        jumpserver/jms_all:1.5.2




公司堡垒机
Bi4gjU2VQ5dxgRrS3F9oyGHJ
公司内部堡垒机
http://192.168.19.129/
spp/Bi4gjU2VQ5dxgRr

curl ipinfo.io


观察现象，telnet 远程目标业务端口 ，立即 conn reset说明业务端口又问题 



ssh-keygen
ssh-copy-id

实现免密钥既把本机生成的pub公钥注入到免密钥登录主机的authorized_keys
~/.ssh/authorized_keys



ssh远程登录响应时间很慢


/usr/local/apache-maven-3.6.3/bin/mvn clean install package -Dmaven.test.skip=true
/usr/local/apache-maven-3.6.3/bin/mvn install


docker push harbor-inside.hfkmyl.com:9443/his/pigx-upms-biz-master:202308011647 

sudo kubectl set image deployment pigx-upms-biz pigx-upms-biz=harbor.hfkmyl.com/his/pigx-upms-biz-master:202303010414 -n pre



curl -v -F "file=@/path/to/file" http://192.168.1.4/base/medicare/uploadFile





yum install -y yum-utils device-mapper-persistent-data lvm2

yum-config-manager --add-repo https://download.docker.com/linux/centos/docker-ce.repo

yum list docker-ce --showduplicates | sort -r

yum -y install docker-ce-20.10.0-3.el7 docker-ce-cli-20.10.0-3.el7 containerd.io



/usr/local/jdk1.8.0_161/bin/java -Dsun.misc.URLClassPath.disableJarChecking=true -Dfile.encoding=UTF-8 -Dsun.jnu.encoding=UTF-8 -jar /opt/server/km_cloud/pigx-register.jar --db.password=qW@erwqerR!123@1*@%


set global validate_password_policy=0;
set global validate_password_length=4;

update mysql.user set authentication_string=password('qW@erwqerR!123@1*@%') where user='root';



if [ "$SECRET_KEY" = "" ]; then SECRET_KEY=`cat /dev/urandom | tr -dc A-Za-z0-9 | head -c 50`; echo "SECRET_KEY=$SECRET_KEY" >> ~/.bashrc; echo $SECRET_KEY; else echo $SECRET_KEY; fi
if [ "$BOOTSTRAP_TOKEN" = "" ]; then BOOTSTRAP_TOKEN=`cat /dev/urandom | tr -dc A-Za-z0-9 | head -c 16`; echo "BOOTSTRAP_TOKEN=$BOOTSTRAP_TOKEN" >> ~/.bashrc; echo $BOOTSTRAP_TOKEN; else echo $BOOTSTRAP_TOKEN; fi

for i in nacos tx upms auth gateway manage ihos consult;do docker-compose restart $i;done

yum --showduplicates list  docker 
pods 多副本日志查看，基于label 标签名
kubectl get pod --show-labels -n vip
kubectl logs  -l app=km-manage-selector,pod-template-hash=6c45d9cddb -n vip  -f --tail=100


for i in `seq -w 1 100`; do cp -rp /var/log/messages /data/test/copy-test-$i; done


:set paste

kubectl logs  -l k8s-app=kube-dns -n kube-system


流水线改
改dockerfile

http://192.168.19.142/kmyl/jenkinscms_new.git

kubectl edit deploy km-ihos-biz -n pre


harbor-login-qr





sudo kubectl set image deployment km-assets-biz km-assets-biz=harbor.hfkmyl.com:4433/his/km-assets-biz-master:202304260425 -n pre











Km!06

ops
Km!0611


202305171810



sudo kubectl set image deployment km-manage-biz km-manage-biz=harbor.hfkmyl.com:4433/his/km-manage-biz-master:202305171810 -n pre

sudo kubectl set image deployment km-manage-biz km-manage-biz=harbor-inside.hfkmyl.com:9443/his/km-manage-biz-master:202305222119 -n pre


/dev/sdb1 /opt/jenkinsbuilddir/

npm install --python=python2.7 ; npm config set python python2.7 ; npm install -g cnpm --registry=http://registry.npm.taobao.org ; npm install --registry=http://registry.npm.taobao.org;npm run build;npm install --save jsbarcode   初次 nodejs build 时 需要node_modules 可以加入到流水线

Error: Cannot find module 'node-sass'


./easyrsa init-pki

./easyrsa build-ca
kmylpp
hfkmyl



plm


km-manage-biz-9d6766549-zdzxr

kubectl delete pod km-manage-biz-9d6766549-4mddw -n vip
kubectl logs -f km-manage-biz-9d6766549-zdzxr -n vip


./easyrsa gen-req server nopass
./easyrsa sign-req server server

快到期主机
/192.168.0.76
pods自动迁移到其他主机，安排固定时间验证



Windows 2008 Enterprise R2 64位 中文版
ecs-2da0-1216613-volume-0000



解决方法：
Try running npm update -g npm then run npm i again.Іf thаt dоеѕn’t wоrk mауbе прm сасhе сlеаn hеlрѕ.

If that doesn’t work either you should consider removing the node_ _modules folder in your application and running npm i again.

If you still have no luck, I suggest removing the package-lock. json and the node_ modules folderbеfоrе runnіng прm і.

运行 npm update -g npm 然后运行 npm i
如果第1步不行，在第一步的基础上运行прm сасhе сlеаn
如果第2步还是不行，删除node_modules文件夹，再运行npm i
如果第3步还是不行，删除掉package-lock.json和node_modules，再运行npm i.
我删除了package-lock.json以后才启动成功的


npm install -g @vue/cli  




kubectl edit deploy km-manage-biz -n pre
kubectl get deploy -n pre




kubectl get deployments -n pre -o=custom-columns=NAME:.metadata.name,IMAGE:.spec.template.spec.containers[*].image
kubectl get pods -o wide -n pre

docker login -u admin -p Harbor12345 

docker pull 

docker push 





imagePullSecrets

kubectl create secret docker-registry xx --docker-username=admin --docker-password=Harbor12345 --docker-server= -n pre

kubectl logs km-consult-biz-5f9c949d56-96rmj -n vip


kubectl create secret docker-registry harbor-inside-hfkmyl \
    --docker-server=10.3.9.107:5000 \
    --docker-username='gsafety' \
    --docker-password='123456'





docker://18.9.0

Client Version: version.Info{Major:"1", Minor:"23", GitVersion:"v1.23.5", GitCommit:"c285e781331a3785a7f436042c65c5641ce8a9e9", GitTreeState:"clean", BuildDate:"2022-03-16T15:58:47Z", GoVersion:"go1.17.8", Compiler:"gc", Platform:"linux/amd64"}
Server Version: version.Info{Major:"1", Minor:"15+", GitVersion:"v1.15.6-r1-CCE2.0.30.B001", GitCommit:"3270aae40a24cd434ea48f594746f020c7473203", GitTreeState:"clean", BuildDate:"2020-01-08T10:05:41Z", GoVersion:"go1.12.12", Compiler:"gc", Platform:"linux/amd64"}
WARNING: version difference between client (1.23) and server (1.15) exceeds the supported minor version skew of +/-1