systemd

使用DNS over TLS

冷暖自知 提交于 2020-08-07 02:41:32
现代计算机用来在互联网种查找资源的 域名系统(DNS) 是在 35 年前设计的,没有考虑用户隐私。它会面临安全风险和***,例如 DNS 劫持。它还能让 ISP 拦截查询。 作者:Thomas Bianchi来源:Linux中国|2020-08-04 10:10 收藏 分享 现代计算机用来在互联网种查找资源的 域名系统(DNS) 是在 35 年前设计的,没有考虑用户隐私。它会面临安全风险和***,例如 DNS 劫持。它还能让 ISP 拦截查询。 幸运的是,现在有 DNS over TLS 和 DNSSEC 两种技术。DNS over TLS 和 DNSSEC 允许创建从计算机到它配置的 DNS 服务器之间的安全且加密的端到端隧道。在 Fedora 上,部署这些技术的步骤很容易,并且所有必要的工具也很容易获得。 本指南将演示如何使用 systemd-resolved 在 Fedora 上配置 DNS over TLS。有关 systemd-resolved 服务的更多信息,请参见文档。 步骤 1:设置 systemd-resolved 类似于下面所示修改 /etc/systemd/resolved.conf。确保启用 DNS over TLS 并配置要使用的 DNS 服务器的 IP 地址。 1. $ cat /etc/systemd/resolved.conf 2. [Resolve

查看 Linux 系统服务的 5 大方法

你说的曾经没有我的故事 提交于 2020-08-06 13:13:20
Linux 系统服务有时也称为守护程序,是在Linux启动时自动加载并在Linux退出时自动停止的系统任务。 在本文中,良许将为大家介绍如何列出 Linux 系统里所有运行的服务,以及如何检查某个服务的当前状态。 Centos/RHEL 7.X 的 systemd 系统服务查看 CentOS 7.x开始,CentOS开始使用 systemd 服务来代替 daemon ,原来管理系统启动和管理系统服务的相关命令全部由 systemctl 命令来代替。 systemctl list-unit-files 命令的输出结果如下: 查看所有运行着的 systemd 服务可以运行以下命令: systemctl | more 命令的输出结果如下: [外链图片转存失败,源站可能有防盗链机制,建议将图片保存下来直接上传(img-rzOAWr5Y-1596456348890)(https://i.loli.net/2019/03/24/5c96d06ee5b07.png)] 除此之外,你还可以使用以下命令: systemctl list-units --type service 命令的输出结果如下: 如果你想要在结果里搜索某个特定的服务,可以使用管道及 grep 命令。 systemctl | grep "apache2" 命令的输出结果如下: 使用 netstat 命令查看系统服务 Netstat

个人笔记:centos环境mysql mariadb无法启动的处置(关键还是要细看mysql日志)

自闭症网瘾萝莉.ら 提交于 2020-08-06 12:00:02
故障现象:无法正常启动 [root@VM_0_3_centos ~]# systemctl start mariadb Job for mariadb.service failed because the control process exited with error code. See "systemctl status mariadb.service" and "journalctl -xe" for details. 根据提示执行systemctl status mariadb.service ,无明确指向 [root@VM_0_3_centos ~]# systemctl status mariadb.service ● mariadb.service - MariaDB database server Loaded: loaded (/usr/lib/systemd/system/mariadb.service; disabled; vendor preset: disabled) Active: failed (Result: exit-code) since Thu 2020-05-14 09:35:00 CST; 1min 42s ago Process: 12544 ExecStartPost=/usr/libexec/mariadb-wait-ready

LINUX--引导过程与服务控制(修复MBR扇区故障,grub菜单故障,忘记root密码怎么办?)

烂漫一生 提交于 2020-08-06 08:44:55
文章目录 一、引导过程总览 1.开机自检 2. MBR引导 3. GRUB 菜单 4.加载Linux内核 5. init 进程初始化 二、排除启动类故障 1、修复MBR扇区故障 1.1查看是否有sdb 1.2挂载 1.3备份MBR扇区数据 1.4模拟MBR扇区故障 1.5MBR挂了 1.6选择Troubleshooting选项 1.7进入引导 1.8将备份sdb的备份文件挂到mnt下 1.9往sda里写入引导文件 1.10重启后,正常启动 2、修复GRUB引导故障 2.1重建配置文件 2.2Init6重启,出现故障 2.3装入光盘,在光盘引导界面选择troubleshooting 2.4进入Rescu a CentOS system 2.5进入引导 2.6修复配置文件 2.7重启,改启动项 3、遗忘用户root密码 3.1装入光盘,引导选项选择troubleshooting 3.2进入救援模式后切根,修改密码 一、引导过程总览 Linux操作系统的引导过程一般包括以下几个阶段:开机自检、MBR引导、GRUB菜 单、加载Linux内核、init 进程初始化。 1.开机自检 服务器主机开机以后,将根据主板BIOS中的设置对CPU (Central Processing Unit, 中央处理器)、内存、显卡、键盘等设备进行初步检测,检测成功后根据预设的启动顺序移 交系统控制权

创建mysql服务

柔情痞子 提交于 2020-08-05 05:19:43
在RHEL7中,使用systemctl 启动mysql 1,创建启动文件 .service vi /usr/lib/systemd/system/mysqld.service [Unit] Description=MySQL Server After=network.target After=syslog.target [Service] User=mysql Group=mysql Type=forking PermissionsStartOnly=true ExecStart= /etc/init.d/mysqld start ExecStop= /etc/init.d/mysqld stop ExecReload= /etc/init.d/mysqld restart LimitNOFILE = 5000 [Install] WantedBy=multi-user.target 2,重新加载一下服务的配置文件 systemctl daemon-reload 3,开启mysql服务 systemctl start mysqld.service 4,关闭mysql服务 systemctl stop mysqld.service 来源: oschina 链接: https://my.oschina.net/u/4298434/blog/4296615

openstack安装配置—— controller node配置

夙愿已清 提交于 2020-08-05 02:52:32
实际生产环境中,每个服务模块很有可能都是一个集群,但我们这里只是带大家配置了一个实验环境,所以我们这里把keystone、nova、neutron、glance、dashboard都安装在了contoller节点上。 controller节点基础配置 [root@controller ~]# hostname controller [root@controller ~]# lscpu Architecture: x86_64 CPU op-mode(s): 32-bit, 64-bit Byte Order: Little Endian CPU(s): 4 On-line CPU(s) list: 0-3 Thread(s) per core: 1 Core(s) per s ocket: 1 Socket(s): 4 NUMA node(s): 1 Vendor ID: GenuineIntel CPU family: 6 Model: 44 Model name: Westmere E56xx/L56xx/X56xx (Nehalem-C) Stepping: 1 CPU MHz: 2400.084 BogoMIPS: 4800.16 Hypervisor vendor: KVM Virtualization type: full L1d cache: 32K L1i

What is the purpose of the /run/user/1000, tmpfs filesystem that appears in df?

微笑、不失礼 提交于 2020-08-04 14:32:34
环境 Red Hat Enterprise Linux (RHEL) 7 问题 We could see /run/user/1000 filesystem , is this a symptom of any issue? Why do I see multiple of tmpfs filesystems / partitions in the output of df? Why do I see a /run/user/$UID directory when the user is not logged in (i.e. does not appear in the output of w or who )? 决议 The directory /run/user/$UID is used by pam_systemd to store files that previously where put in /tmp . This is normal and should not cause any issues. NOTE : since systemd-219.19 , /run/user/$UID is mounted as tmpfs. The manual page of pam_systemd(8) gives more indications on this.

Is it recommended to run systemd inside docker container?

懵懂的女人 提交于 2020-08-01 18:25:52
问题 I am planning to use 'systemd' inside the container. Based on the articles I have read, it is preferable to limit only one process per container. But if I configure 'systemd' inside the container, I will end up running many processes. It would be great to understand the pros and cons of using systemd inside the container before I take any decision. 回答1: I'd advise you to avoid systemd in a container if at all possible. Systemd mounts filesystems, controls several kernel parameters, has its

Is it recommended to run systemd inside docker container?

夙愿已清 提交于 2020-08-01 18:16:34
问题 I am planning to use 'systemd' inside the container. Based on the articles I have read, it is preferable to limit only one process per container. But if I configure 'systemd' inside the container, I will end up running many processes. It would be great to understand the pros and cons of using systemd inside the container before I take any decision. 回答1: I'd advise you to avoid systemd in a container if at all possible. Systemd mounts filesystems, controls several kernel parameters, has its

Is it recommended to run systemd inside docker container?

让人想犯罪 __ 提交于 2020-08-01 18:14:50
问题 I am planning to use 'systemd' inside the container. Based on the articles I have read, it is preferable to limit only one process per container. But if I configure 'systemd' inside the container, I will end up running many processes. It would be great to understand the pros and cons of using systemd inside the container before I take any decision. 回答1: I'd advise you to avoid systemd in a container if at all possible. Systemd mounts filesystems, controls several kernel parameters, has its