|
|
|
#!/bin/bash
|
|
|
|
PATH=/bin:/sbin:/usr/bin:/usr/sbin:/usr/local/bin:/usr/local/sbin:~/bin
|
|
|
|
export PATH
|
|
|
|
LANG=C.UTF-8
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
setenforce 0
|
|
|
|
sed -i 's#SELINUX=enforcing#SELINUX=disabled#g' /etc/selinux/config
|
|
|
|
|
|
|
|
dnf install -y wget lsof
|
|
|
|
dnf install -y python3-devel
|
|
|
|
dnf install -y python-devel
|
|
|
|
dnf install -y crontabs
|
|
|
|
|
|
|
|
#https need
|
|
|
|
|
|
|
|
if [ ! -d /root/.acme.sh ];then
|
|
|
|
curl https://get.acme.sh | sh
|
|
|
|
fi
|
|
|
|
|
|
|
|
if [ -f /etc/init.d/iptables ];then
|
|
|
|
|
|
|
|
iptables -I INPUT -p tcp -m state --state NEW -m tcp --dport 22 -j ACCEPT
|
|
|
|
iptables -I INPUT -p tcp -m state --state NEW -m tcp --dport 80 -j ACCEPT
|
|
|
|
iptables -I INPUT -p tcp -m state --state NEW -m tcp --dport 443 -j ACCEPT
|
|
|
|
iptables -I INPUT -p tcp -m state --state NEW -m tcp --dport 888 -j ACCEPT
|
|
|
|
iptables -I INPUT -p tcp -m state --state NEW -m tcp --dport 7200 -j ACCEPT
|
|
|
|
# iptables -I INPUT -p tcp -m state --state NEW -m tcp --dport 3306 -j ACCEPT
|
|
|
|
# iptables -I INPUT -p tcp -m state --state NEW -m tcp --dport 30000:40000 -j ACCEPT
|
|
|
|
service iptables save
|
|
|
|
|
|
|
|
iptables_status=`service iptables status | grep 'not running'`
|
|
|
|
if [ "${iptables_status}" == '' ];then
|
|
|
|
service iptables restart
|
|
|
|
fi
|
|
|
|
|
|
|
|
#安装时不开启
|
|
|
|
service iptables stop
|
|
|
|
fi
|
|
|
|
|
|
|
|
|
|
|
|
if [ ! -f /etc/init.d/iptables ];then
|
|
|
|
yum install firewalld -y
|
|
|
|
systemctl enable firewalld
|
|
|
|
systemctl start firewalld
|
|
|
|
|
|
|
|
firewall-cmd --permanent --zone=public --add-port=22/tcp
|
|
|
|
firewall-cmd --permanent --zone=public --add-port=80/tcp
|
|
|
|
firewall-cmd --permanent --zone=public --add-port=443/tcp
|
|
|
|
firewall-cmd --permanent --zone=public --add-port=888/tcp
|
|
|
|
firewall-cmd --permanent --zone=public --add-port=7200/tcp
|
|
|
|
# firewall-cmd --permanent --zone=public --add-port=3306/tcp
|
|
|
|
# firewall-cmd --permanent --zone=public --add-port=30000-40000/tcp
|
|
|
|
|
|
|
|
|
|
|
|
sed -i 's#AllowZoneDrifting=yes#AllowZoneDrifting=no#g' /etc/firewalld/firewalld.conf
|
|
|
|
firewall-cmd --reload
|
|
|
|
fi
|
|
|
|
|
|
|
|
|
|
|
|
#安装时不开启
|
|
|
|
systemctl stop firewalld
|
|
|
|
|
|
|
|
dnf upgrade -y
|
|
|
|
dnf autoremove -y
|
|
|
|
|
|
|
|
dnf groupinstall -y "Development Tools"
|
|
|
|
dnf install -y epel-release
|
|
|
|
|
|
|
|
dnf install -y oniguruma
|
|
|
|
dnf --enablerepo=crb install oniguruma-devel
|
|
|
|
|
|
|
|
dnf install -y libevent libevent-devel libjpeg* libpng* gd* libxslt* unzip libmcrypt libmcrypt-devel
|
|
|
|
dnf install -y wget libicu-devel zip bzip2-devel gcc libxml2 libxml2-devel libjpeg-devel libpng-devel libwebp libwebp-devel pcre pcre-devel
|
|
|
|
dnf install -y lsof net-tools
|
|
|
|
dnf install -y ncurses-devel cmake
|
|
|
|
dnf --enablerepo=crb install mysql-devel
|
|
|
|
|
|
|
|
for yumPack in make cmake gcc gcc-c++ gcc-g77 flex bison file libtool libtool-libs autoconf kernel-devel patch wget libjpeg libjpeg-devel libpng libpng-devel libpng10 libpng10-devel gd gd-devel libxml2 libxml2-devel zlib zlib-devel glib2 glib2-devel tar bzip2 bzip2-devel libevent libevent-devel ncurses ncurses-devel curl curl-devel libcurl libcurl-devel e2fsprogs e2fsprogs-devel krb5 krb5-devel libidn libidn-devel vim-minimal gettext gettext-devel ncurses-devel gmp-devel pspell-devel libcap diffutils ca-certificates net-tools libc-client-devel psmisc libXpm-devel git-core c-ares-devel libicu-devel libxslt libxslt-devel zip unzip glibc.i686 libstdc++.so.6 cairo-devel bison-devel ncurses-devel libaio-devel perl perl-devel perl-Data-Dumper lsof vixie-cron crontabs expat-devel readline-devel;
|
|
|
|
do yum -y install $yumPack;done
|
|
|
|
|
|
|
|
|
|
|
|
cd /www/server/mdserver-web/scripts && bash lib.sh
|
|
|
|
chmod 755 /www/server/mdserver-web/data
|
|
|
|
|
|
|
|
|
|
|
|
cd /www/server/mdserver-web && ./cli.sh start
|
|
|
|
isStart=`ps -ef|grep 'gunicorn -c setting.py app:app' |grep -v grep|awk '{print $2}'`
|
|
|
|
n=0
|
|
|
|
while [[ ! -f /etc/init.d/mw ]];
|
|
|
|
do
|
|
|
|
echo -e ".\c"
|
|
|
|
sleep 1
|
|
|
|
let n+=1
|
|
|
|
if [ $n -gt 20 ];then
|
|
|
|
echo -e "start mw fail"
|
|
|
|
exit 1
|
|
|
|
fi
|
|
|
|
done
|
|
|
|
|
|
|
|
cd /www/server/mdserver-web && /etc/init.d/mw stop
|
|
|
|
cd /www/server/mdserver-web && /etc/init.d/mw start
|
|
|
|
cd /www/server/mdserver-web && /etc/init.d/mw default
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|