VPS : Setup Ubuntu VPS. #36

hhstore · 2018-05-16T15:09:37Z

📖 Abstract:

✅ 云主机(Ubuntu 22.04) 配置 & 初始化教程.

💯 Related:

反向代理 & 负载均衡:

域名解析:

✅ Domain: DNS Management #333
✅ Domain+DNS: Subdomain setup #409 : 二级域名解析 & 配置.

域名购买:

✅ Namecheap: use crypto coin buy domains #293

hhstore · 2018-05-16T15:11:34Z

云主机 + Ubuntu 配置教程

从 0 配置 VPS 主机.

Checklist:

✅ VPS 主机, 安装必备软件: zsh, git, curl, wget, docker 等.
✅ VPS 平台控制台, 放开对外端口: 80, 8080, 7000, 9000, 等开发/测试端口.
- 华为云, 控制台, 网络设置, 单独配置
- Azure, 也需要单独配置.
✅ 域名托管&解析平台: 将购买的域名, 解析到云主机 IP.
- 配置 二级域名.

参考:

配置 VPS 教程:

hhstore · 2021-12-01T11:02:01Z

配置服务器:

网络设置/静态IP:

https://www.cnblogs.com/liujiaxin2018/p/16287463.html

更改镜像源:

https://www.cnblogs.com/echohye/p/17771091.html
https://mirrors.ustc.edu.cn/help/ubuntu.html
推荐使用 阿里云 镜像源.

sudo bash -c "cat << EOF > /etc/apt/sources.list && apt update
deb http://mirrors.aliyun.com/ubuntu/ jammy main restricted universe multiverse
deb-src http://mirrors.aliyun.com/ubuntu/ jammy main restricted universe multiverse
deb http://mirrors.aliyun.com/ubuntu/ jammy-security main restricted universe multiverse
deb-src http://mirrors.aliyun.com/ubuntu/ jammy-security main restricted universe multiverse
deb http://mirrors.aliyun.com/ubuntu/ jammy-updates main restricted universe multiverse
deb-src http://mirrors.aliyun.com/ubuntu/ jammy-updates main restricted universe multiverse
deb http://mirrors.aliyun.com/ubuntu/ jammy-proposed main restricted universe multiverse
deb-src http://mirrors.aliyun.com/ubuntu/ jammy-proposed main restricted universe multiverse
deb http://mirrors.aliyun.com/ubuntu/ jammy-backports main restricted universe multiverse
deb-src http://mirrors.aliyun.com/ubuntu/ jammy-backports main restricted universe multiverse
EOF"

安装 clash:

下载包:

https://github.com/doreamon-design/clash/releases

echo -e "export http_proxy=http://127.0.0.1:7890\nexport https_proxy=http://127.0.0.1:7890" >> ~/.bashrc


echo -e "export http_proxy=http://127.0.0.1:7890\nexport https_proxy=http://127.0.0.1:7890" >> ~/.zshrc

hhstore · 2021-12-01T11:06:59Z

从0配置 Ubuntu VPS 主机:

安装依赖:

git
zsh
root 用户:

apt update -y

apt install curl -y
apt install git -y
apt install zsh -y
apt install vim -y
apt install tmux -y

# ssh 登录保护:
apt install fail2ban -y

# Python 包安装: for docker-compose
apt install python3-pip -y

非 root 用户:

sudo apt update -y


sudo apt install curl -y
sudo apt install git -y
sudo apt install zsh -y
sudo apt install vim -y
sudo apt install tmux -y

# set zsh:
sudo chsh -s $(which zsh)

创建 dev 用户:

https://sspai.com/post/43011
不要直接使用 root 用户, 作为开发用户.
先安装 zsh.

# 参数说明：
# -m 创建用户的主目录，如 /home/xxx
# -g 指定用户所属的群组
# -G 指定用户所属的附加群组，将新用户加入 sudo 群组中，以获得 root 权限
# -s 指定用户登入后所使用的shell。注意使用 /bin/bash 之类的路径，而非 /usr/bin/bash
useradd -m -g users -G sudo -s /bin/zsh dev


# 设置密码:
passwd dev

配置 zsh:

https://github.com/ohmyzsh/ohmyzsh/wiki/Installing-ZSH
配置 dev 用户(多用户, 可以不用配置 root 用户)
切换到 dev 用户操作:
- su 用户：只切换身份
- su - 用户：身份和shell（包含环境变量）都切换

# 切换到新用户(注意要切换身份+env)
su - dev

q: 先不定制zsh(未装oh-my-zsh)

# 进入用户目录
cd ~


# 安装
sh -c "$(wget https://github.com/robbyrussell/oh-my-zsh/master/tools/install.sh -O -)"


# zsh theme:
wget https://raw.githubusercontent.com/skylerlee/zeta-zsh-theme/master/zeta.zsh-theme

#
cp zeta.zsh-theme ~/.oh-my-zsh/themes

# vim ~/.zshrc
ZSH_THEME="zeta"

# 自带:
ZSH_THEME="candy"

# 登出账号
exit

hhstore · 2021-12-02T05:08:31Z

配置 SSH key 登录:

非 server 版本 Ubuntu, 需要安装:

sudo apt install openssh-server -y

特别提醒:

✅ 建议设置过程中, 多开几个 VPS 连接窗口.
✅ 避免更改 ssh 配置过程种, 出现错误, 重启服务之后, 导致无法访问服务器.
✅ 这样还可以在服务器上, 修改配置.

✅ 基于密码的方式登录 VPS 主机:

ssh root@22.33.22.33 -p 22

# 交互式输入密码

🔥 VPS 侧设置:

✅ 生成新的 ssh key.

cd ~
mkdir .ssh


ssh-keygen

cd .ssh/
cat id_rsa.pub >> authorized_keys

chmod 600 authorized_keys
chmod 700 ~/.ssh

更改配置:

✅ 更改配置:
✅ 在文件最末添加:

vim /etc/ssh/sshd_config


# update:

RSAAuthentication yes
PubkeyAuthentication yes

PermitRootLogin yes

# set ok, then add this:
PasswordAuthentication no

✅ 重启 ssh: 如果发现不生效, 可能存在额外的配置文件, 参数覆盖问题.
✅ 注意检查 /etc/ssh/sshd_config.d 目录, 是否存在其他配置文件, 如无用, 可删除.
✅ (实际也可在此, 新增文件来改配置项, 这样更安全)

# 检测配置文件是否异常
sshd -t


# 重启
service sshd restart

本机设置:

✅ 将 VPS 生成的 ssh key 的私钥, 复制到 本地路径: ~/.ssh/vps/xxx-key`.
✅ 注意, 文本复制后, 要在文件末尾, 追加一个换行符! 否则报错: 格式不对.
✅ 文件 chmod 600 xxx 改一下访问权限.

# 放入本地路径: 追加一个 `换行符`
~/.ssh/vps/id_rsa.crypto

# 修正权限:
chmod 600 ~/.ssh/vps/id_rsa.crypto

✅ 本地基于 ssh key 远程访问 VPS 主机:

# 示例方式:
ssh root@22.33.22.33 -p 22 -i ~/.ssh/vps/id_rsa.crypto

✅ 测试正常后, 继续 VPS 禁用密码访问

禁用密码访问服务器:

✅ vim /etc/ssh/sshd_config

# 设置登录成功, 再改此:
PasswordAuthentication no

✅ 重启 ssh 服务:

service sshd restart

✅ 验证基于密码的方式, 被禁用:

ssh root@22.33.22.33 -p 22

✅ 还可以更改 SSH 的默认端口, 防止被爬虫乱扫.

配置 SSH Config

✅ https://arc.net/l/quote/bgdaancy
✅ 修改 ~/.ssh/config 文件, 增加配置项
✅ 配置:

Host vps.hw    # 别名
    HostName xx.xxx.xx.xxx    # 替换 xx.xxx.xx.xxx 为服务器 ip 地址
    Port 22    # 端口，稍后会进行修改
    User xxx    # 用户名
    IdentityFile ~/.ssh/vps/key.hw    # 私钥文件

✅ 连接:

# 命令行直接通过如下参数, 自动连接.
ssh vps.hy

hhstore · 2021-12-02T05:08:34Z

SSH 超时断开问题:

https://cloud.tencent.com/developer/article/1788071
编辑修改 /etc/ssh/sshd_config 文件，找到下面2个参数：

ClientAliveInterval 60
ClientAliveCountMax 3

hhstore · 2021-12-02T05:08:37Z

中间件定制:

Tmux 使用:

https://www.ruanyifeng.com/blog/2019/10/tmux.html

brew install tmux

hhstore · 2021-12-02T05:35:22Z

Linux 性能调优:

内核参数调优:

https://segmentfault.com/a/1190000037494125

hhstore · 2021-12-02T05:35:29Z

安装 docker:

配置源:

✅ 国外环境: https://docs.docker.com/engine/install/ubuntu/

# Add Docker's official GPG key:
sudo apt-get update
sudo apt-get install ca-certificates curl
sudo install -m 0755 -d /etc/apt/keyrings
sudo curl -fsSL https://download.docker.com/linux/ubuntu/gpg -o /etc/apt/keyrings/docker.asc
sudo chmod a+r /etc/apt/keyrings/docker.asc

# Add the repository to Apt sources:
echo \
  "deb [arch=$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/docker.asc] https://download.docker.com/linux/ubuntu \
  $(. /etc/os-release && echo "$VERSION_CODENAME") stable" | \
  sudo tee /etc/apt/sources.list.d/docker.list > /dev/null
sudo apt-get update

✅ 国内环境: Ubuntu 22.04.3 LTS_安装Docker

# Add Docker's official GPG key:
sudo apt-get update
sudo apt-get install ca-certificates curl
sudo install -m 0755 -d /etc/apt/keyrings

# 
# change:
# - https://mirrors.aliyun.com/docker-ce/linux/ubuntu/gpg
# 
sudo curl -fsSL https://mirrors.aliyun.com/docker-ce/linux/ubuntu/gpg -o /etc/apt/keyrings/docker.asc

sudo chmod a+r /etc/apt/keyrings/docker.asc

# Add the repository to Apt sources:
echo \
  "deb [arch=$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/docker.asc] https://mirrors.aliyun.com/docker-ce/linux/ubuntu \
  $(. /etc/os-release && echo "$VERSION_CODENAME") stable" | \
  sudo tee /etc/apt/sources.list.d/docker.list > /dev/null
sudo apt-get update

安装 docker 组件:

相同指令:

sudo apt-get install docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin -y

验证安装成功:

sudo docker run hello-world

配置 docker:

run Docker as a non-privileged user:

https://docs.docker.com/engine/security/rootless/

dockerd-rootless-setuptool.sh install

配置开机启动:

# 开机启动
sudo systemctl enable docker
sudo systemctl start docker
sudo systemctl status docker

创建 docker 用户组:

创建 docker 用户组

# 1. 创建 docker 用户组
sudo groupadd docker

# 2. 添加用户到 docker 用户组:
sudo usermod -aG docker $USER

# 3. 重启
sudo service docker restart

# 4. exit, 需要退出当前终端, 重新登入, 才能生效.
exit

验证 docker 配置成功:

docker run hello-world

配置 docker-compose:

安装 pip: https://pip.pypa.io/en/stable/installation/
https://github.com/pypa/get-pip

# 方法1:
apt install python3-pip -y

pip3 install docker-compose

# 方法2:
curl -sSL https://bootstrap.pypa.io/get-pip.py -o get-pip.py

python3 get-pip.py


pip3 install docker-compose

限制 docker 容器日志:

https://www.cnblogs.com/operationhome/p/10907591.html
https://docs.docker.com/config/containers/logging/configure/
编辑 /etc/docker/daemon.json 文件：
vim /etc/docker/daemon.json

{
  "log-driver": "json-file",
  "log-opts": { "max-size": "50m", "max-file": "3" }
}



{
  "log-driver": "local",
  "log-opts": {
    "max-size": "50m"
  }
}

重启 docker

sudo service docker restart

hhstore · 2021-12-02T06:32:36Z

docker 更新国内镜像源:

2024 更新源:

DockerHub国内镜像源列表（2024年6月18日亲测可用） cmliu/CF-Workers-docker.io#8

sudo mkdir -p /etc/docker


sudo tee /etc/docker/daemon.json <<EOF
{
    "registry-mirrors": [
        "https://hub.uuuadc.top",
        "https://docker.anyhub.us.kg",
        "https://dockerhub.jobcher.com",
        "https://dockerhub.icu",
        "https://docker.ckyl.me",
        "https://docker.awsl9527.cn"
    ]
}
EOF



sudo systemctl daemon-reload
sudo systemctl restart docker

可能已经过期的源:

官方源, 国内已经不可访问.
更改镜像源.
https://www.v2ex.com/t/1050454
https://github.com/DaoCloud/public-image-mirror

sudo mkdir -p /etc/docker


sudo tee /etc/docker/daemon.json <<EOF
{
    "registry-mirrors": [
        "https://docker.m.daocloud.io",
        "https://hub.uuuadc.top",
        "https://docker.anyhub.us.kg",
        "https://dockerhub.jobcher.com",
        "https://dockerhub.icu",
        "https://docker.ckyl.me",
        "https://docker.awsl9527.cn"
    ]
}
EOF



sudo systemctl daemon-reload
sudo systemctl restart docker

验证修改成功:

# 自动走镜像源:
docker pull redis

docker run hello-world

hhstore · 2021-12-02T07:29:15Z

git 设置:

git config --global user.name "crypto"

git config --global user.email crypto@gmail.com

git config --global core.editor vim

hhstore · 2024-06-28T09:58:25Z

安全防护:

防止 SSH 登录扫描:

apt install fail2ban -y

开启 BBR，root 账户执行

echo "net.core.default_qdisc=fq" >> /etc/sysctl.conf
echo "net.ipv4.tcp_congestion_control=bbr" >> /etc/sysctl.conf

hhstore · 2024-06-28T14:36:11Z

Linux 服务器状态检测:

https://www.runoob.com/w3cnote/linux-view-disk-space.html

内核信息查看:

hostnamectl

uname -a

cat /proc/version

查看磁盘空间:

df -Th
df -hl
df -h

查看内存:

# 单位 MB
free -m

cat /proc/meminfo

查看最大文件描述符:

当前用户的每个进程最多允许同时打开1024个文件
基于Linux的通讯程序最多允许同时1014个TCP并发连接
https://segmentfault.com/a/1190000037494125

cat /proc/sys/fs/file-max
9223372036854775807

ulimit -n
1024

更改:

# vim /etc/security/limits.conf

* soft nofile 65535
* hard nofile 65535

hhstore mentioned this issue Dec 2, 2021

VPN: wtf GFW. #190

Open

hhstore added v2ray VPN VPS labels Dec 2, 2021

hhstore mentioned this issue Jan 13, 2022

Macbook: M1 - setup new a device #330

Open

7 tasks

hhstore mentioned this issue Jun 28, 2024

VPS: HuaweiCloud + Ubuntu 22.04 Setup #427

Open

hhstore changed the title ~~VPS : init VPS dev env.~~ VPS : Setup Ubuntu VPS. Jun 28, 2024

hhstore mentioned this issue Jun 28, 2024

Reverse Proxy: Frp - expose a local server to the Internet #428

Open

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

VPS : Setup Ubuntu VPS. #36

VPS : Setup Ubuntu VPS. #36

hhstore commented May 16, 2018 •

edited

Loading

hhstore commented May 16, 2018 •

edited

Loading

hhstore commented Dec 1, 2021 •

edited

Loading

hhstore commented Dec 1, 2021 •

edited

Loading

hhstore commented Dec 2, 2021 •

edited

Loading

hhstore commented Dec 2, 2021 •

edited

Loading

hhstore commented Dec 2, 2021 •

edited

Loading

hhstore commented Dec 2, 2021 •

edited

Loading

hhstore commented Dec 2, 2021 •

edited

Loading

hhstore commented Dec 2, 2021 •

edited

Loading

hhstore commented Dec 2, 2021

hhstore commented Jun 28, 2024

hhstore commented Jun 28, 2024

VPS : Setup Ubuntu VPS. #36

VPS : Setup Ubuntu VPS. #36

Comments

hhstore commented May 16, 2018 • edited Loading

📖 Abstract:

💯 Related:

hhstore commented May 16, 2018 • edited Loading

云主机 + Ubuntu 配置教程

Checklist:

参考:

hhstore commented Dec 1, 2021 • edited Loading

配置服务器:

网络设置/静态IP:

更改镜像源:

安装 clash:

hhstore commented Dec 1, 2021 • edited Loading

从0配置 Ubuntu VPS 主机:

安装依赖:

创建 dev 用户:

配置 zsh:

hhstore commented Dec 2, 2021 • edited Loading

配置 SSH key 登录:

🔥 VPS 侧 设置:

本机设置:

禁用密码访问服务器:

配置 SSH Config

hhstore commented Dec 2, 2021 • edited Loading

SSH 超时断开问题:

hhstore commented Dec 2, 2021 • edited Loading

中间件定制:

Tmux 使用:

hhstore commented Dec 2, 2021 • edited Loading

Linux 性能调优:

hhstore commented Dec 2, 2021 • edited Loading

安装 docker:

配置源:

安装 docker 组件:

配置 docker:

配置开机启动:

创建 docker 用户组:

配置 docker-compose:

限制 docker 容器日志:

hhstore commented Dec 2, 2021 • edited Loading

docker 更新国内镜像源:

2024 更新源:

可能已经过期的源:

hhstore commented Dec 2, 2021

git 设置:

hhstore commented Jun 28, 2024

安全防护:

hhstore commented Jun 28, 2024

Linux 服务器状态检测:

hhstore commented May 16, 2018 •

edited

Loading

hhstore commented May 16, 2018 •

edited

Loading

hhstore commented Dec 1, 2021 •

edited

Loading

hhstore commented Dec 1, 2021 •

edited

Loading

hhstore commented Dec 2, 2021 •

edited

Loading

🔥 VPS 侧设置:

hhstore commented Dec 2, 2021 •

edited

Loading

hhstore commented Dec 2, 2021 •

edited

Loading

hhstore commented Dec 2, 2021 •

edited

Loading

hhstore commented Dec 2, 2021 •

edited

Loading

hhstore commented Dec 2, 2021 •

edited

Loading