VESELOV.SUMY.UA

mysqltuner.pl - скрипт на perl проанализирует ваш mysql и предложит что можно улучшить в вашей настройке

#!/usr/bin/env perl
# mysqltuner.pl - Version 1.6.4
# High Performance MySQL Tuning Script
# Copyright (C) 2006-2015 Major Hayden - [email protected]
#
# For the latest updates, please visit http://mysqltuner.com/
# Git repository available at http://github.com/major/MySQLTuner-perl
#
# Inspired by Matthew Montgomery's tuning-primer.sh script:
# http://forge.mysql.com/projects/view.php?id=44

14 - Готовим CentOS 7. Установка и настройка дополнительного софта

yum install rkhunter -y
rkhunter --versioncheck
rkhunter --update

rkhunter --propupd
rkhunter --check

rkhunter -C

rkhunter -c --enable all --disable none --rwo

yum -y install clamav-server clamav-data clamav-update clamav-filesystem clamav clamav-scanner-systemd clamav-devel clamav-lib clamav-server-systemd

nano -w  /etc/freshclam.conf

# Example

DatabaseMirror db.us.clamav.net
DatabaseMirror db.de.clamav.net
DatabaseMirror db.jp.clamav.net

freshclam

clamscan -ri /var/www/test.dev/

cd /tmp
wget http://www.rfxn.com/downloads/maldetect-current.tar.gz
tar xfz maldetect-current.tar.gz
cd maldetect-*
./install.sh

maldet -a /var/www

maldet -u

yum install inxi -y
inxi -F

yum repolist        

ps axo rss,comm,pid \
| awk '{ proc_list[]++; proc_list[ "," 1] += ; } \
END { for (proc in proc_list) { printf("%d\t%s\n", \
proc_list[proc "," 1],proc); }}' | sort -n | tail -n 10 | sort -rn \
| awk '{/=1024;printf "%.0fMB\t",}{print }'

grep ^[^#] somefile.conf

grep ^[^\;] /etc/opt/remi/php70/php.ini

setenforce 0

setenforce 1

nano -w /etc/selinux/config

SELINUX=disabled

sync; dd if=/dev/zero of=tempfile bs=1M count=1024; sync

dd if=tempfile of=/dev/null bs=1M count=1024

yum install hdparm -y  
hdparm -Tt /dev/sda

nmap -p 80 192.168.1.1

nmap -p 80,443 192.168.1.1

nmap -p 80-1000 192.168.1.1

nmap --top-ports 10 192.168.1.1

nmap -F 192.168.1.1

nmap --open 192.168.1.1

nmap -O 192.168.1.1

nmap -sN 192.168.1.1

nmap -sF 192.168.1.1

nmap -sX 192.168.1.1

nmap 192.168.1.1 > output.txt

start c:/"Program Files"/Oracle/VirtualBox/VBoxManage startvm test.dev --type headless

CD d:/htdocs/test.dev

start C:/"Program Files"/Git/bin/sh.exe --login -i -e gulp

ping -n 35 localhost > null
DEL null

start c:/"Program Files (x86)"/portSoft/putty.exe -ssh test.dev
start c:/"Program Files (x86)"/Robomongo/Robomongo.exe
start c:/"Program Files (x86)"/RedisDesktopManager/rdm.exe

nano /home/utz0r2/backup.sh

#!/bin/bash
destination_folder=/home/utz0r2/backup/`date +%F`
archive_file="backup-`date +%H%M`.tar.gz"
mkdir -p $destination_folder
/bin/tar -czvf $destination_folder/$archive_file / --exclude=/proc --exclude=/dev --exclude=/home/utz0r2/backup

chmod +x /home/USERNAME/backup/backup.sh

/home/utz0r2/backup.sh

13 - Готовим CentOS 7. Установка и настройка firewalld

yum -y install firewalld

systemctl start firewalld

systemctl status firewalld

firewall-cmd --get-default-zone

firewall-cmd --set-default-zone=home

nano /etc/firewalld/firewalld.conf

firewall-cmd --zone=public --list-all     

firewall-cmd --reload     

firewall-cmd --panic-on     

firewall-cmd --panic-off        

firewall-cmd [--zone=] --add-port=[-]/ [--timeout=]

firewall-cmd [--zone=] --remove-port=[-]/ [--timeout=]

firewall-cmd --permanent --add-port=80/tcp

firewall-cmd --list-services

firewall-cmd --permanent --add-port=2222/tcp

firewall-cmd --reload  

firewall-cmd --list-all     

systemctl enable firewalld

12 - Готовим CentOS 7. Установка и настройка supervisord на воркер

yum install python-setuptools -y
easy_install pip
pip install supervisor
supervisord --version
mkdir -p /etc/supervisord
echo_supervisord_conf > /etc/supervisord/supervisord.conf

nano -w /usr/lib/systemd/system/supervisord.service

[Unit]
Description=supervisord - Supervisor process control system for UNIX
Documentation=http://supervisord.org
After=network.target

[Service]
Type=forking
ExecStart=/usr/bin/supervisord -c /etc/supervisord/supervisord.conf
ExecReload=/usr/bin/supervisorctl reload
ExecStop=/usr/bin/supervisorctl shutdown
User=nginx

[Install]
WantedBy=multi-user.target

systemctl start supervisord
systemctl status supervisord
systemctl enable supervisord

nano -w /etc/supervisord/supervisord.conf

[program:worker]
command=/opt/remi/php70/root/bin/php /var/www/test.dev/worker.php
numprocs=1
directory=/var/www/test.dev
autostart=true
autorestart=true
stopsignal=KILL

[program:worker]
command=/opt/remi/php70/root/bin/php /var/www/test.dev/worker.php
process_name=%(program_name)s_%(process_num)02d
numprocs=10
directory=/var/www/test.dev
autostart=true
autorestart=true
stopsignal=KILL

require_once '/var/www/test.dev/vendor/autoload.php';
$file = '/var/www/test.dev/data.txt';

systemctl restart supervisord

easy_install superlance

11 - Готовим CentOS 7. Установка сервера очередей beanstalkd

yum install git -y
cd /tmp

git clone git://github.com/kr/beanstalkd.git
cd beanstalkd
make
cp beanstalkd /usr/bin/beanstalkd
mkdir /var/lib/beanstalkd

nano -w /etc/systemd/system/beanstalkd.service

[Unit]
Description=Beanstalkd is a simple, fast work queue

[Service]
User=root
ExecStart=/usr/bin/beanstalkd -b /var/lib/beanstalkd

[Install]
WantedBy=multi-user.target

systemctl start beanstalkd
systemctl enable beanstalkd

systemctl status beanstalkd
ps ax | grep beanstalkd

cd /tmp
curl -sS https://getcomposer.org/installer | php70
mv composer.phar /usr/local/bin/composer

cd /var/www/test.dev
php70 /usr/local/bin/composer require pda/pheanstalk

nano -w /var/www/test.dev/producer.php

 'data',
                'msg' => "job 7 payload goes here\n"
        )
);
$pheanstalk->useTube('default')->put($data);
echo 'added';

nano -w /var/www/test.dev/worker.php

watch('default')->reserve();
        if ( $job->getData() ) {
                $data = unserialize($job->getData());
                if ( $data['do'] == 'data' ) {
                        $file = 'data.txt';
                        $current = file_get_contents($file);
                        $current .= $data['msg'];
                        file_put_contents($file, $current);
                        echo 'Log: add data'. PHP_EOL;              
                }
                $pheanstalk->delete($job);           
        }
}

cd /var/www/test.dev
php70 worker.php

watch('default')->reserve();
        if ( !isset($job) OR !$job ) {
                // return FALSE;
        } else {
                // распаковываем ранее запакованные данные
                $data = unserialize($job->getData());
                // и тд и тп =)
        }
} 

10 - Готовим CentOS 7. Cоздание заглушки для писем

nano -w /usr/bin/fakesendmail.sh

#!/bin/sh 
prefix="/var/mail/sendmail/new"
numPath="/var/mail/sendmail"
if [ ! -f $numPath/num ]; then 
echo "0" > $numPath/num 
fi 
num=`cat $numPath/num` 
num=$(($num + 1)) 
echo $num > $numPath/num 
name="$prefix/letter_$num.txt"
while read line 
do 
echo $line >> $name
done 
chmod 777 $name
/bin/true

chmod +x /usr/bin/fakesendmail.sh
chmod 755 /usr/bin/fakesendmail.sh

mkdir /var/mail/sendmail
cd /var/mail/sendmail
mkdir cur && mkdir new && mkdir tmp
chmod -R 777 /var/mail/sendmail 

php70 -i | grep "Loaded Configuration File"

nano -w /etc/opt/remi/php70/php.ini
sendmail_path = /usr/bin/fakesendmail.sh

systemctl restart php70-php-fpm

sestatus -b | grep -i sendmail
setsebool -P httpd_can_sendmail 1

nano -w /var/www/test.dev/3.php

ls /var/mail/sendmail/new
grep mail /var/log/audit/audit.log

grep mail /var/log/audit/audit.log | audit2allow -m mail > mail.te 
grep mail /var/log/audit/audit.log | audit2allow -M mail 
semodule -i mail.pp