福和思

docker pull minio/minio

## 9000为api接口，9090为控制台管理界面接口
docker run -p 9000:9000 -p 9090:9090 --name minio -v H:\minio\data:/data -v H:\minio\config:/root/.minio minio/minio server --console-address ":9090" /data

## 浏览器访问127.0.0.1:9090  默认登录minioadmin/minioadmin

docker pull minio/mc
docker run minio/mc ls play
docker run -it --entrypoint=/bin/sh minio/mc
mc config host add minio http://api-minio.foxhello.com 52trhHBInpg9UGpm 秘钥 --api s3v4
mc ls minio

# 设置Access Key和Secret Key
ACCESS_KEY="upload"
SECRET_KEY=""

# 设置上传的文件路径、Bucket名称和Object名称
FILE_PATH="/Volumes/T7/project/project_fmzh/test.md"
BUCKET_NAME="test"
OBJECT_NAME="test.md"

# 构建HTTP PUT请求，并添加认证头部信息
#DATE=$(date -u "+%a, %d %b %Y %H:%M:%S GMT")
#DATE=$(date "+%Y%m%dT%H%M%S%z")
DATE="Tue, 21 Feb 2023 05:41:57 GMT"
CONTENT_TYPE=$(file --mime-type $FILE_PATH | awk '{print $2}')
CONTENT_MD5=$(openssl md5 -binary $FILE_PATH | base64)
STRING_TO_SIGN="PUT\n$CONTENT_MD5\n$CONTENT_TYPE\n$DATE\nx-amz-acl:public-read\n/$BUCKET_NAME/$OBJECT_NAME"
SIGNATURE=$(echo -en "$STRING_TO_SIGN" | openssl sha1 -binary -hmac "$SECRET_KEY" | base64)
curl -X PUT -T "$FILE_PATH" \
     -H "Host: minio-api.foxhello.com" \
     -H "Date: $DATE" \
     -H "Content-Type: $CONTENT_TYPE" \
     -H "Content-MD5: $CONTENT_MD5" \
     -H "Authorization: AWS $ACCESS_KEY:$SIGNATURE" \
     -H "x-amz-acl:public-read" \
     "https://minio-api.foxhello.com/$BUCKET_NAME/$OBJECT_NAME"

# 修改密码
export MINIO_ACCESS_KEY=minioadmin
export MINIO_SECRET_KEY=***

docker run -d \
--name minio \
--restart=always \
-p 9000:9000 \
-p 9001:9001 \
-e "MINIO_ROOT_USER=minioAlan" \
-e "MINIO_ROOT_PASSWORD=miniokillccc" \
-v /www/docker/minio/config:/root/.minio \
-v /www/docker/minio/data:/data \
minio/minio \
server /data --console-address ":9001" --address ":9000"

# 将bucket设置为public jpg直接能在浏览器打开

#直接下载：
http://api-minio.foxhello.com/fmzh/logo.png

#可在浏览器打开:
http://api-minio.foxhello.com/fmzh/logo.png?response-content-type=image%2Fpng

# 查看内存剩余
free -H

# 查看应用占用情况
top

## 查看占用内存的前3名进程
ps -aux | sort -k4nr | head -3

## 按cpu排序
ps -eo "%C  : %p : %z : %a" --sort -%cpu

## 按内存排序
ps -eo "%C  : %p : %z : %a" --sort -vsz

mysql 连接占用较大 mysql-cj-abandoned-connection-cleanup
nacos 客户端更新对象较大 com.alibaba.nacos.client.config.security.updater

dig +short ns foxhello.com

dns10.hichina.com.
dns9.hichina.com.

curl -LO "https://dl.k8s.io/release/$(curl -L -s https://dl.k8s.io/release/stable.txt)/bin/linux/amd64/kubectl"
curl -LO "https://dl.k8s.io/$(curl -L -s https://dl.k8s.io/release/stable.txt)/bin/linux/amd64/kubectl.sha256"
echo "$(<kubectl.sha256) kubectl" | sha256sum --check

sudo install -o root -g root -m 0755 kubectl /usr/local/bin/kubectl

kubectl version --client

curl -LO https://storage.googleapis.com/minikube/releases/latest/minikube-linux-amd64
sudo install minikube-linux-amd64 /usr/local/bin/minikube

minikube start

kubectl get po -A
minikube kubectl -- get po -A
alias kubectl="minikube kubectl --"
minikube dashboard

kubectl proxy --address='0.0.0.0' --port=8080 --accept-hosts='^\*$'

http://192.168.31.24:8080/api/v1/namespaces/kubernetes-dashboard/services/http:kubernetes-dashboard:/proxy/#/overview?namespace=default

kubectl create deployment hello-minikube --image=k8s.gcr.io/echoserver:1.4
kubectl expose deployment hello-minikube --type=NodePort --port=8080

kubectl get services hello-minikube

minikube service hello-minikube

kubectl port-forward service/hello-minikube 7080:8080

kubectl create deployment balanced --image=k8s.gcr.io/echoserver:1.4
kubectl expose deployment balanced --type=LoadBalancer --port=8080

minikube tunnel

kubectl get services balanced

port=$1

echo 'add port is : '$port

firewall-cmd --query-port=$port/tcp
firewall-cmd --add-port=$port/tcp --permanent
firewall-cmd --reload
firewall-cmd --query-port=$port/tcp

docker run -d \
  --privileged \
  --restart=unless-stopped \
  --name=kuboard-spray \
  -p 80:80/tcp \
  -e TZ=Asia/Shanghai \
  -v /var/run/docker.sock:/var/run/docker.sock \
  -v ~/kuboard-spray-data:/data \
  eipwork/kuboard-spray

kubectl apply -f https://kuboard.cn/install-script/kuboard.yaml
kubectl apply -f https://addons.kuboard.cn/metrics-server/0.3.7/metrics-server.yaml

# 查看状态
kubectl get pods -l k8s.kuboard.cn/name=kuboard -n kube-system
# 结果
NAME                       READY   STATUS        RESTARTS   AGE
kuboard-54c9c4f6cb-6lf88   1/1     Running       0          45s

# 获取token
echo $(kubectl -n kube-system get secret $(kubectl -n kube-system get secret | grep ^kuboard-user | awk '{print $1}') -o go-template='{{.data.token}}' | base64 -d)

eyJhbGciOiJSUzI1NiIsImtpZCI6Im45Z25UWDhma2l2bERNZDUtd1IwX3FaOVczRkJDSnVib0l6V1VLdHh3TmsifQ.eyJpc3MiOiJrdWJlcm5ldGVzL3NlcnZpY2VhY2NvdW50Iiwia3ViZXJuZXRlcy5pby9zZXJ2aWNlYWNjb3VudC9uYW1lc3BhY2UiOiJrdWJlLXN5c3RlbSIsImt1YmVybmV0ZXMuaW8vc2VydmljZWFjY291bnQvc2VjcmV0Lm5hbWUiOiJrdWJvYXJkLXVzZXItdG9rZW4tdDRjNHgiLCJrdWJlcm5ldGVzLmlvL3NlcnZpY2VhY2NvdW50L3NlcnZpY2UtYWNjb3VudC5uYW1lIjoia3Vib2FyZC11c2VyIiwia3ViZXJuZXRlcy5pby9zZXJ2aWNlYWNjb3VudC9zZXJ2aWNlLWFjY291bnQudWlkIjoiNzAyZGY0ZTktZGY4Ni00NzhkLWI2YjMtYjljZjUwMjg3NjRiIiwic3ViIjoic3lzdGVtOnNlcnZpY2VhY2NvdW50Omt1YmUtc3lzdGVtOmt1Ym9hcmQtdXNlciJ9.C5mh0Iq0bXMTjNUhYMeCD_U3Cm5Ut02M7lTGKO39GSvfQaw9l1JnqlRyfhmjOD_grq7IpCOl0RYiif6zS43nDa0_y0t3PmJUbpJU_-XbyElCz1cLu2i1V3XhHA9yzsdz4AvZGBIbyczDfBM7dAxfE6mY5sFfn5Sfj_SY6_tx18S9B9EaYAZxryByzL-3JKjV9OYeQtCoPDGIMEO6D_oJw5Tj_dY36955aO6Xg5nSDOkqadvECLWi5eVk_QYmu_oFDtHjF7hoVNuuLLIqLMOpT1khNr7JJE9BbIdFJWfuYAhctPbJgbaYm4ZNBBfuQBWBNCtBM4J-XWDkiDbeTfxc4Q

# 访问kuboard
http://任意一个Worker节点的IP地址:32567/

export Ali_Key="你的key"
export Ali_Secret="你的密钥"

source ~/.bashrc

~/.acme.sh/acme.sh --issue --dns dns_ali -d foxhello.com -d *.foxhello.com

# 更新nginx配置
sl_certificate /path/*.example.com/fullchain.cer;
ssl_certificate_key /path/*.example.com/*.example.com.key;

acme.sh --set-default-ca --server letsencrypt
acme.sh --set-default-ca --server zerossl

acme.sh -i  -d foxhello.com --key-file /root/file/foxhello.key --fullchain-file /root/file/foxhello.crt --ca-file /root/file/foxhello.ca.crt

# 命令失败时，参考-k ec-256参数
~/.acme.sh/acme.sh --issue --dns dns_cf -d "*.foxhello.com" -d "foxhello.com" -k ec-256
~/.acme.sh/acme.sh --install-cert -d "*.foxhello.com" --key-file /root/sign/ssl/foxhello.com/foxhello.com.key --fullchain-file /root/sign/ssl/foxhello.com/foxhello.com.crt --ca-file /root/sign/ssl/foxhello.com/foxhello.com.ca.crt --ecc

# 安装依赖
yum install -y epel-release

# 安装ansible
yum install -y ansible

# 迁移目录
mkdir -p /data/service/ansible
rsync -av /etc/ansible /data/service/
mv /etc/ansible{,_bak}
ln -s /data/service/ansible /etc/ansible

# 检测语法
ansible-playbook --syntax-check /path/to/playbook.yaml
# 测试运行
ansible-playbook -C /path/to/playbook.yaml
# 运行
ansible-playbook /path/to/playbook.yaml

# 测试主机
ansible foxhello -i hosts -m ping

### roicloud-user.yml 

---
- hosts: roicloud-release 
  tasks:
  - name: backup jar |
    shell: |
        cd /root/roicloud/user/target
        pwd
        now=$(date '+%Y%m%d%H%M%S')
        mv roi-auth.jar roi-auth.jar_bak$now
        ls -lrt

  - name: "复制主机上的文件到目标服务器上"
    copy:
        src: "{{baseDir}}/roi-auth/target/roi-auth-0.0.1-SNAPSHOT.jar"
        dest: "/root/roicloud/user/target/roi-auth.jar"

  - name: deploy app |
    shell: |
        cd /root/roicloud/user/bin
        pwd
        ls -lrt
        sh shutdown.sh
        sleep 5
        sh startUp.sh

[roicloud-db]
118.31.246.133	ansible_ssh_private_key_file=~/.ssh/id_rsa-andy

[roicloud-test]
81.69.252.30 ansible_ssh_private_key_file=~/.ssh/id_rsa

[roicloud-release]
124.220.190.16 ansible_ssh_private_key_file=~/.ssh/id_rsa

ansible-playbook /root/playbook-yml/roicloud-user.yml  --extra-vars "baseDir=${WORKSPACE}"