主页 / user-102604

Nyxynyx's questions

Martin Hope
Nyxynyx
Asked: 2021-05-29 06:14:59 +0800 CST
  • 0

我需要按其在列df -h中的挂载点按字母顺序排序的输出。Mounted on

但是，df -h目前的输出类似于：

$ df -h
Filesystem      Size  Used Avail Use% Mounted on
/dev/nvme0n1p2  228G   14G  203G   7% /
/dev/nvme0n1p1  511M  7.9M  504M   2% /boot/efi
/dev/sdf2        17T   17T  3.3T  56% /mnt/data/drive014
/dev/sdl1        17T   17T   53G 100% /mnt/data/drive006
/dev/sdd1        17T   17T  102G 100% /mnt/data/drive002
/dev/sda1        17T   17T   26G 100% /mnt/data/drive001

有没有像下面这样输出的命令？

Filesystem      Size  Used Avail Use% Mounted on
/dev/nvme0n1p2  228G   14G  203G   7% /
/dev/nvme0n1p1  511M  7.9M  504M   2% /boot/efi
/dev/sda1        17T   17T   26G 100% /mnt/data/drive001
/dev/sdd1        17T   17T  102G 100% /mnt/data/drive002
/dev/sdl1        17T   17T   53G 100% /mnt/data/drive006
/dev/sdf2        17T   17T  3.3T  56% /mnt/data/drive014
linux ubuntu filesystems bash df
Martin Hope
Nyxynyx
Asked: 2021-01-24 13:23:42 +0800 CST
  • 1

在 Ubuntu 20.04 上，我正在尝试使用 Strongswan 建立通往 IKEv2/Ipsec VPN 站点的 VPN 隧道。

但是，即使我有/etc/ipsec.conf如图所示的文件

# ipsec.conf - strongSwan IPsec configuration file

# basic configuration

config setup
    # strictcrlpolicy=yes
    # uniqueids = no

conn foo
    left= ...
    right= ...
    ...

当我运行时sudo ipsec up foo，我得到了错误

没有名为“foo”的配置

我在运行之前尝试了以下命令ipsec up foo，但错误仍然存​​在。

sudo ipsec update
sudo ipsec reload 
sudo ipsec restart

Strongswan U5.8.2/K5.4.0-60-generic 安装使用

sudo apt-get install strongswan libcharon-extra-plugins -y

似乎是什么阻止了foo连接被检测到？

谢谢！

vpn ipsec strongswan ikev2 point-to-site-vpn
Martin Hope
Nyxynyx
Asked: 2014-07-20 07:05:24 +0800 CST
  • 6

在 Ubuntu 14.04 上，必须增加交换文件，因为内存和交换使用率达到 100%。

在实时生产服务器上，是否可以在对服务的干扰最小的情况下增加交换？

输出free -h：

             total       used       free     shared    buffers     cached
Mem:          3.9G       3.4G       435M        24K       1.2M       7.5M
-/+ buffers/cache:       3.4G       443M
Swap:         8.0G       6.6G       1.4G
linux
Martin Hope
Nyxynyx
Asked: 2014-02-19 00:05:05 +0800 CST
  • 0

在 Ubuntu 12.04 上安装logwatch（安装postfix）之前，端口 25 被iptables/阻止csf

PORT   STATE    SERVICE
25/tcp filtered smtp

安装 logwatch（安装 postfix）后，现在打开 25 端口

PORT   STATE SERVICE
25/tcp open  smtp

使用重新启动 CSF，csf -r但端口保持打开状态。TCP_ON除了, TCP_OUT, UDP_IN,中定义的端口之外，不是所有端口都默认被阻止UDP_OUT吗？为什么 25 端口仍然开放？

csf.conf

TCP_IN = "22,27017,27018,27019"
TCP_OUT = "53,27017,27018,27019"

UDP_IN = ""
UDP_OUT = "53,123"

sudo netstat -tnlp | grep：25

tcp        0      0 0.0.0.0:25              0.0.0.0:*               LISTEN      7641/master     
tcp6       0      0 :::25                   :::*                    LISTEN      7641/master

iptables -L -n -v --line-numbers

Chain INPUT (policy DROP 0 packets, 0 bytes)
num   pkts bytes target     prot opt in     out     source               destination         
1        0     0 ACCEPT     tcp  --  !lo    *       209.244.0.3          0.0.0.0/0            tcp dpt:53
2        0     0 ACCEPT     udp  --  !lo    *       209.244.0.3          0.0.0.0/0            udp dpt:53
3        0     0 ACCEPT     tcp  --  !lo    *       209.244.0.3          0.0.0.0/0            tcp spt:53
4        0     0 ACCEPT     udp  --  !lo    *       209.244.0.3          0.0.0.0/0            udp spt:53
5        0     0 ACCEPT     tcp  --  !lo    *       8.8.8.8              0.0.0.0/0            tcp dpt:53
6        0     0 ACCEPT     udp  --  !lo    *       8.8.8.8              0.0.0.0/0            udp dpt:53
7        0     0 ACCEPT     tcp  --  !lo    *       8.8.8.8              0.0.0.0/0            tcp spt:53
8        0     0 ACCEPT     udp  --  !lo    *       8.8.8.8              0.0.0.0/0            udp spt:53
9        0     0 ACCEPT     tcp  --  !lo    *       8.8.4.4              0.0.0.0/0            tcp dpt:53
10       0     0 ACCEPT     udp  --  !lo    *       8.8.4.4              0.0.0.0/0            udp dpt:53
11       0     0 ACCEPT     tcp  --  !lo    *       8.8.4.4              0.0.0.0/0            tcp spt:53
12      52  6331 ACCEPT     udp  --  !lo    *       8.8.4.4              0.0.0.0/0            udp spt:53
13   10491  986K LOCALINPUT  all  --  !lo    *       0.0.0.0/0            0.0.0.0/0           
14      51  3795 ACCEPT     all  --  lo     *       0.0.0.0/0            0.0.0.0/0           
15   10278  968K INVALID    tcp  --  !lo    *       0.0.0.0/0            0.0.0.0/0           
16   10226  965K ACCEPT     all  --  !lo    *       0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
17       0     0 ACCEPT     tcp  --  !lo    *       0.0.0.0/0            0.0.0.0/0            ctstate NEW tcp dpt:22
18      44  2640 ACCEPT     tcp  --  !lo    *       0.0.0.0/0            0.0.0.0/0            ctstate NEW tcp dpt:27017
19       0     0 ACCEPT     tcp  --  !lo    *       0.0.0.0/0            0.0.0.0/0            ctstate NEW tcp dpt:27018
20       0     0 ACCEPT     tcp  --  !lo    *       0.0.0.0/0            0.0.0.0/0            ctstate NEW tcp dpt:27019
21       0     0 ACCEPT     icmp --  !lo    *       0.0.0.0/0            0.0.0.0/0            icmptype 8 limit: avg 1/sec burst 5
22       0     0 ACCEPT     icmp --  !lo    *       0.0.0.0/0            0.0.0.0/0            icmptype 0 limit: avg 1/sec burst 5
23       0     0 ACCEPT     icmp --  !lo    *       0.0.0.0/0            0.0.0.0/0            icmptype 11
24       0     0 ACCEPT     icmp --  !lo    *       0.0.0.0/0            0.0.0.0/0            icmptype 3
25       8   452 LOGDROPIN  all  --  !lo    *       0.0.0.0/0            0.0.0.0/0           

Chain FORWARD (policy DROP 0 packets, 0 bytes)
num   pkts bytes target     prot opt in     out     source               destination         

Chain OUTPUT (policy DROP 0 packets, 0 bytes)
num   pkts bytes target     prot opt in     out     source               destination         
1        0     0 ACCEPT     tcp  --  *      !lo     0.0.0.0/0            209.244.0.3          tcp dpt:53
2        0     0 ACCEPT     udp  --  *      !lo     0.0.0.0/0            209.244.0.3          udp dpt:53
3        0     0 ACCEPT     tcp  --  *      !lo     0.0.0.0/0            209.244.0.3          tcp spt:53
4        0     0 ACCEPT     udp  --  *      !lo     0.0.0.0/0            209.244.0.3          udp spt:53
5        0     0 ACCEPT     tcp  --  *      !lo     0.0.0.0/0            8.8.8.8              tcp dpt:53
6        0     0 ACCEPT     udp  --  *      !lo     0.0.0.0/0            8.8.8.8              udp dpt:53
7        0     0 ACCEPT     tcp  --  *      !lo     0.0.0.0/0            8.8.8.8              tcp spt:53
8        0     0 ACCEPT     udp  --  *      !lo     0.0.0.0/0            8.8.8.8              udp spt:53
9        0     0 ACCEPT     tcp  --  *      !lo     0.0.0.0/0            8.8.4.4              tcp dpt:53
10      52  3614 ACCEPT     udp  --  *      !lo     0.0.0.0/0            8.8.4.4              udp dpt:53
11       0     0 ACCEPT     tcp  --  *      !lo     0.0.0.0/0            8.8.4.4              tcp spt:53
12       0     0 ACCEPT     udp  --  *      !lo     0.0.0.0/0            8.8.4.4              udp spt:53
13    7286 1342K LOCALOUTPUT  all  --  *      !lo     0.0.0.0/0            0.0.0.0/0           
14       0     0 ACCEPT     tcp  --  *      !lo     0.0.0.0/0            0.0.0.0/0            tcp dpt:53
15       0     0 ACCEPT     udp  --  *      !lo     0.0.0.0/0            0.0.0.0/0            udp dpt:53
16       0     0 ACCEPT     tcp  --  *      !lo     0.0.0.0/0            0.0.0.0/0            tcp spt:53
17       0     0 ACCEPT     udp  --  *      !lo     0.0.0.0/0            0.0.0.0/0            udp spt:53
18      51  3795 ACCEPT     all  --  *      lo      0.0.0.0/0            0.0.0.0/0           
19    7127 1288K INVALID    tcp  --  *      !lo     0.0.0.0/0            0.0.0.0/0           
20    7127 1288K ACCEPT     all  --  *      !lo     0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
21       0     0 ACCEPT     tcp  --  *      !lo     0.0.0.0/0            0.0.0.0/0            ctstate NEW tcp dpt:53
22       0     0 ACCEPT     tcp  --  *      !lo     0.0.0.0/0            0.0.0.0/0            ctstate NEW tcp dpt:80
23       0     0 ACCEPT     tcp  --  *      !lo     0.0.0.0/0            0.0.0.0/0            ctstate NEW tcp dpt:27017
24       0     0 ACCEPT     tcp  --  *      !lo     0.0.0.0/0            0.0.0.0/0            ctstate NEW tcp dpt:27018
25       0     0 ACCEPT     tcp  --  *      !lo     0.0.0.0/0            0.0.0.0/0            ctstate NEW tcp dpt:27019
26       0     0 ACCEPT     udp  --  *      !lo     0.0.0.0/0            0.0.0.0/0            ctstate NEW udp dpt:53
27       0     0 ACCEPT     udp  --  *      !lo     0.0.0.0/0            0.0.0.0/0            ctstate NEW udp dpt:123
28       0     0 ACCEPT     icmp --  *      !lo     0.0.0.0/0            0.0.0.0/0            icmptype 0
29       0     0 ACCEPT     icmp --  *      !lo     0.0.0.0/0            0.0.0.0/0            icmptype 8
30       0     0 ACCEPT     icmp --  *      !lo     0.0.0.0/0            0.0.0.0/0            icmptype 11
31       0     0 ACCEPT     icmp --  *      !lo     0.0.0.0/0            0.0.0.0/0            icmptype 3
32       0     0 LOGDROPOUT  all  --  *      !lo     0.0.0.0/0            0.0.0.0/0           

Chain ALLOWIN (1 references)
num   pkts bytes target     prot opt in     out     source               destination         
1        0     0 ACCEPT     all  --  !lo    *       162.158.0.0/15       0.0.0.0/0           
2        0     0 ACCEPT     all  --  !lo    *       198.41.128.0/17      0.0.0.0/0           
3        0     0 ACCEPT     all  --  !lo    *       197.234.240.0/22     0.0.0.0/0           
4        0     0 ACCEPT     all  --  !lo    *       188.114.96.0/20      0.0.0.0/0           
5        0     0 ACCEPT     all  --  !lo    *       190.93.240.0/20      0.0.0.0/0           
6        0     0 ACCEPT     all  --  !lo    *       108.162.192.0/18     0.0.0.0/0           
7        0     0 ACCEPT     all  --  !lo    *       141.101.64.0/18      0.0.0.0/0           
8        0     0 ACCEPT     all  --  !lo    *       103.31.4.0/22        0.0.0.0/0           
9        0     0 ACCEPT     all  --  !lo    *       103.22.200.0/22      0.0.0.0/0           
10       0     0 ACCEPT     all  --  !lo    *       103.21.244.0/22      0.0.0.0/0           
11       0     0 ACCEPT     all  --  !lo    *       173.245.48.0/20      0.0.0.0/0           
12       0     0 ACCEPT     all  --  !lo    *       199.27.128.0/21      0.0.0.0/0           
13     213 17445 ACCEPT     all  --  !lo    *       59.189.154.164       0.0.0.0/0           

Chain ALLOWOUT (1 references)
num   pkts bytes target     prot opt in     out     source               destination         
1        0     0 ACCEPT     all  --  *      !lo     0.0.0.0/0            162.158.0.0/15      
2        0     0 ACCEPT     all  --  *      !lo     0.0.0.0/0            198.41.128.0/17     
3        0     0 ACCEPT     all  --  *      !lo     0.0.0.0/0            197.234.240.0/22    
4        0     0 ACCEPT     all  --  *      !lo     0.0.0.0/0            188.114.96.0/20     
5        0     0 ACCEPT     all  --  *      !lo     0.0.0.0/0            190.93.240.0/20     
6        0     0 ACCEPT     all  --  *      !lo     0.0.0.0/0            108.162.192.0/18    
7        0     0 ACCEPT     all  --  *      !lo     0.0.0.0/0            141.101.64.0/18     
8        0     0 ACCEPT     all  --  *      !lo     0.0.0.0/0            103.31.4.0/22       
9        0     0 ACCEPT     all  --  *      !lo     0.0.0.0/0            103.22.200.0/22     
10       0     0 ACCEPT     all  --  *      !lo     0.0.0.0/0            103.21.244.0/22     
11       0     0 ACCEPT     all  --  *      !lo     0.0.0.0/0            173.245.48.0/20     
12       0     0 ACCEPT     all  --  *      !lo     0.0.0.0/0            199.27.128.0/21     
13     159 53077 ACCEPT     all  --  *      !lo     0.0.0.0/0            59.189.154.164      

Chain DENYIN (1 references)
num   pkts bytes target     prot opt in     out     source               destination         

Chain DENYOUT (1 references)
num   pkts bytes target     prot opt in     out     source               destination         

Chain INVALID (2 references)
num   pkts bytes target     prot opt in     out     source               destination         
1        0     0 INVDROP    all  --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate INVALID
2        0     0 INVDROP    tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcpflags: 0x3F/0x00
3        0     0 INVDROP    tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcpflags: 0x3F/0x3F
4        0     0 INVDROP    tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcpflags: 0x03/0x03
5        0     0 INVDROP    tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcpflags: 0x06/0x06
6        0     0 INVDROP    tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcpflags: 0x05/0x05
7        0     0 INVDROP    tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcpflags: 0x11/0x01
8        0     0 INVDROP    tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcpflags: 0x18/0x08
9        0     0 INVDROP    tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcpflags: 0x30/0x20
10       0     0 INVDROP    tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcpflags:! 0x17/0x02 ctstate NEW

Chain INVDROP (10 references)
num   pkts bytes target     prot opt in     out     source               destination         
1        0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain LOCALINPUT (1 references)
num   pkts bytes target     prot opt in     out     source               destination         
1    10491  986K ALLOWIN    all  --  !lo    *       0.0.0.0/0            0.0.0.0/0           
2    10278  968K DENYIN     all  --  !lo    *       0.0.0.0/0            0.0.0.0/0           

Chain LOCALOUTPUT (1 references)
num   pkts bytes target     prot opt in     out     source               destination         
1     7286 1342K ALLOWOUT   all  --  *      !lo     0.0.0.0/0            0.0.0.0/0           
2     7127 1288K DENYOUT    all  --  *      !lo     0.0.0.0/0            0.0.0.0/0           

Chain LOGDROPIN (1 references)
num   pkts bytes target     prot opt in     out     source               destination         
1        0     0 DROP       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:67
2        0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp dpt:67
3        0     0 DROP       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:68
4        0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp dpt:68
5        0     0 DROP       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:111
6        0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp dpt:111
7        0     0 DROP       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:113
8        0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp dpt:113
9        0     0 DROP       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpts:135:139
10       0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp dpts:135:139
11       0     0 DROP       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:445
12       0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp dpt:445
13       0     0 DROP       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:500
14       0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp dpt:500
15       0     0 DROP       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:513
16       0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp dpt:513
17       0     0 DROP       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:520
18       0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp dpt:520
19       8   452 LOG        tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            limit: avg 30/min burst 5 LOG flags 0 level 4 prefix "Firewall: *TCP_IN Blocked* "
20       0     0 LOG        udp  --  *      *       0.0.0.0/0            0.0.0.0/0            limit: avg 30/min burst 5 LOG flags 0 level 4 prefix "Firewall: *UDP_IN Blocked* "
21       0     0 LOG        icmp --  *      *       0.0.0.0/0            0.0.0.0/0            limit: avg 30/min burst 5 LOG flags 0 level 4 prefix "Firewall: *ICMP_IN Blocked* "
22       8   452 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain LOGDROPOUT (1 references)
num   pkts bytes target     prot opt in     out     source               destination         
1        0     0 LOG        tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcpflags: 0x17/0x02 limit: avg 30/min burst 5 LOG flags 8 level 4 prefix "Firewall: *TCP_OUT Blocked* "
2        0     0 LOG        udp  --  *      *       0.0.0.0/0            0.0.0.0/0            limit: avg 30/min burst 5 LOG flags 8 level 4 prefix "Firewall: *UDP_OUT Blocked* "
3        0     0 LOG        icmp --  *      *       0.0.0.0/0            0.0.0.0/0            limit: avg 30/min burst 5 LOG flags 8 level 4 prefix "Firewall: *ICMP_OUT Blocked* "
4        0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0
ubuntu
Martin Hope
Nyxynyx
Asked: 2013-04-15 22:18:41 +0800 CST
  • 3

我将 PostgreSQL 的共享缓冲区（以及其他设置）增加到 4096M，现在 PostgreSQL 无法启动，并给出以下错误消息。

我应该将内核SHMMAX参数更改为 4096M 吗？该系统有 16GB 的 RAM。应该怎么做？我应该改成SHMALL什么？我希望更改是永久性的，并在重新启动后持续存在。

* Starting PostgreSQL 9.1 database server                                       
* The PostgreSQL server failed to start. Please check the log output:

2013-04-15 06:15:53 UTC FATAL: could not create shared memory segment: Invalid argument 2013-04-15 06:15:53 UTC DETAIL: Failed system call was shmget(key=5432001, size=4418322432, 03600). 2013-04-15 06:15:53 UTC HINT: This error usually means that PostgreSQL's request for a shared memory segment exceeded your kernel's SHMMAX parameter. You can either reduce the request size or reconfigure the kernel with larger SHMMAX. To reduce the request size (currently 4418322432 bytes), reduce PostgreSQL's shared memory usage, perhaps by reducing shared_buffers or max_connections. If the request size is already small, it's possible that it is less than your kernel's SHMMIN parameter, in which case raising the request size or reconfiguring SHMMIN is called for. The PostgreSQL documentation contains more information about shared memory configuration.

自由的

             total       used       free     shared    buffers     cached
Mem:      24744200    1244936   23499264          0      77480     670240
-/+ buffers/cache:     497216   24246984
Swap:     16775160          0   16775160
linux
Martin Hope
Nyxynyx
Asked: 2013-04-15 20:31:02 +0800 CST
  • 1

我所有的服务器刚刚被黑，现在我准备开始锁定我的网络服务器。他们目前正在运行 Ubuntu 12.04

  • nginx 1.27
  • php5-fpm
  • PHP 5.4.14
  • MySQL 5.5
  • postgresql 9.1
  • 雷迪斯
  • proftpd
  • 绑定9
  • ssh

我不知道他们是如何被黑客入侵的。有哪些建议可以减少再次丢失服务器的可能性？

ubuntu
Martin Hope
Nyxynyx
Asked: 2013-04-04 07:58:06 +0800 CST
  • 1

在 Ubuntu Precise 12.04 上，该软件包osm2pgsql当前位于0.70.5+r25090-2ubuntu2. 但是我需要安装更新版本0.80但apt-get update不提供更新版本。

问题：我0.80在 Ubuntu quantal 的 repo 中找到了这个版本，https://launchpad.net/ubuntu/+source/osm2pgsql/0.80.0+r27899-1ubuntu1当我在 Ubuntu 12.04 上时，有什么方法可以安装它吗？

ubuntu
Martin Hope
Nyxynyx
Asked: 2012-12-31 20:35:32 +0800 CST
  • 1

我有 2 个sites-enabled，server_name如下所示：

server_name www.mysite.com mysite.com

和

server_name dev.mysite.com

问题：当我通过网站的 IP 地址访问该网站时，通过查看访问/错误日志，似乎 nginx 正在root为dev.mysite.com.

nginx 如何决定服务哪一个？当使用其 ip 地址访问该站点时，root我们可以强制它停止服务吗？www.mysite.com

会议

server {
    listen   80;
    server_name www.mysite.com mysite.com;
    access_log /var/log/nginx/access.log;
    error_log /var/log/nginx/error.log;
    root /var/www/mysite/public;

    index index.php index.html;

    location / {
        try_files $uri $uri/ /index.php?$args ;
    }
    location ~ \.php$ {
        fastcgi_pass unix:/var/run/php5-fpm.sock;
        fastcgi_index index.php;
        include fastcgi_params;
        fastcgi_read_timeout 300;
    }

}
linux
Martin Hope
Nyxynyx
Asked: 2012-10-15 10:00:22 +0800 CST
  • 4

如何为特定位置及其所有子目录关闭 gzip？我的主站点位于，我想为和http://mydomain.com关闭 gzip 。在 中打开。http://mydomain.com/foohttp://mydomain.com/foo/bargzipnginx.conf

gzip我尝试如下所示关闭，但 Chrome 开发工具中的 Response Headers 显示Content-Encoding:gzip.

应该如何正确禁用 gzip/输出缓冲？

尝试：

server {
    listen   80;
    server_name www.mydomain.com mydomain.com;
    access_log /var/log/nginx/access.log;
    error_log /var/log/nginx/error.log;
    root /var/www/mydomain/public;

    index index.php index.html;

    location / {
        gzip on;
        try_files $uri $uri/ /index.php?$args ;
    }

    location ~ \.php$ {
        fastcgi_pass unix:/var/run/php5-fpm.sock;
        fastcgi_index index.php;
        include fastcgi_params;
        fastcgi_read_timeout 300;
    }

    location /foo/ {
        gzip off;
        try_files $uri $uri/ /index.php?$args ;
    }

}

更新

我关闭gzip并nginx.conf尝试使用命名位置。然而 gzip 现在总是关闭的，并且gzip on;在location /块中似乎没有重新打开 gzip。有任何想法吗？

server {
    listen   80;
    server_name www.mydomain.com mydomain.com;
    access_log /var/log/nginx/access.log;
    error_log /var/log/nginx/error.log;
    root /var/www/mydomain/public;

    index index.php index.html;

    location / {
        try_files $uri $uri/ @php;
    }

    location /foo/ {
        try_files $uri $uri/ @php_nogzip;
    }

    location @php {
        gzip on;
        try_files $uri $uri/ /index.php?$args ;
    }

    location @php_nogzip {
        gzip off;
        try_files $uri $uri/ /index.php?$args ;
    }

    location ~ \.php$ {
        fastcgi_pass unix:/var/run/php5-fpm.sock;
        fastcgi_index index.php;
        include fastcgi_params;
        fastcgi_read_timeout 300;
    }

}
php
Martin Hope
Nyxynyx
Asked: 2012-10-12 13:37:01 +0800 CST
  • 2

我一直在安装php-fpm与apache2-mpm-worker. 这是我正在遵循的指南。

根据指南的第 5 步，

Alias /php5-fcgi /usr/lib/cgi-bin/php5-fcgi
FastCgiExternalServer /usr/lib/cgi-bin/php5-fcgi -host 127.0.0.1:9000 -pass-header Authorization

但是我找不到php5-fcgi，/usr/lib只有/usr/bin/php5-cgi和/usr/bin/php-cgi，我不确定它们是否相同。

所以我将第 5 步中的行更改为：

Alias /php5-fcgi /usr/bin/php5-fcgi
FastCgiExternalServer /usr/bin/php5-fcgi -host 127.0.0.1:9000 -pass-header

在重新启动 Apache 时，它​​的日志给出了错误：

[notice] caught SIGTERM, shutting down
[alert] (4)Interrupted system call: FastCGI: read() from pipe failed (0)
[alert] (4)Interrupted system call: FastCGI: the PM is shutting down, Apache seems to have disappeared - bye
[notice] Apache/2.2.22 (Ubuntu) mod_fastcgi/mod_fastcgi-SNAP-0910052141 configured -- resuming normal operations
[notice] FastCGI: process manager initialized (pid 16348)

并加载索引页面

[error] [client 10.0.2.2] (111)Connection refused: FastCGI: failed to connect to server "/usr/bin/php5-cgi": connect() failed
[error] [client 10.0.2.2] FastCGI: incomplete headers (0 bytes) received from server "/usr/bin/php5-cgi"
[error] [client 10.0.2.2] File does not exist: /var/www/mydomain/public/favicon.ico

问题：知道为什么php5-fcgi会丢失，应该如何解决这个问题？谢谢！！:)

apache-2.2
Martin Hope
Nyxynyx
Asked: 2012-10-12 09:50:30 +0800 CST
  • 4

我在 a 中犯了一个错误，rsync所有文件都被复制了很长的完整路径。我复制的所有文件都在

/var/www/photos/2012/1007/1007

尝试 1

现在我想通过这样做来修复路径

 mv /var/www/photos/2012/1007/1007 /var/www/photos/2012

这给出了错误：

mv: cannot move `/var/www/photos/2012/1007/1007' to `/var/www/photos/2012/1007': Directory not empty

尝试 2

 mv /var/www/photos/2012/1007/1007/* /var/www/photos/2012/1007

我收到错误：

-bash: /bin/mv: Argument list too long

问题：重命名包含大量文件的文件夹的正确方法是什么？

这些文件实际上被复制到了，/var/www/photos/2012/1007/home/photos/public_html/2012/1007但不知何故我把它们复制到了/var/www/photos/2012/1007/1007

同步命令：

rsync -zavrR --rsh="ssh -c arcfour -l root -p 2200" www.mydomain.com:/home/photos/public_html/2012/1007 /var/www/photos/2012/1007

linux
Martin Hope
Nyxynyx
Asked: 2012-10-12 06:52:24 +0800 CST
  • 2

我有一个使用 Virtualmin/Webmin 的网络服务器（带有 LAMP 的 Ubuntu 12.04）。因为我刚从 Cpanel 系统迁移过来，所以我在配置 DNS 时遇到了噩梦！

使用 intoDNS.com，失败的报告是：

Mismatched NS records   WARNING: One or more of your nameservers did not return any of your NS records.
DNS servers responded   ERROR: One or more of your nameservers did not respond: The ones that did not respond are: 123.123.123.123 213.251.188.141x
Multiple Nameservers    ERROR: Looks like you have less than 2 nameservers. According to RFC2182 section 5 you must have at least 3 nameservers, and no more than 7. Having 2 nameservers is also ok by me.
Missing nameservers 
  reported by your nameserver   You should already know that your NS records at your nameservers are missing, so here it is again: 
                                    ns1.mydomain.com. sdns2.ovh.net. 
SOA record  No valid SOA record came back!
MX Records
WWW A Record     ERROR: I could not get any A records for www.mydomain.com!

我的逐步尝试

在我的域名注册商 (Namecheap) 中，我注册ns1.mydomain.com为域名服务器，指向我正在运行的网络服务器的 IP 地址bind9。该域使用 DNSns1.mydomain.com和sdns2.ovh.net. sdns2.ovh.net是辅助 DNS 服务器（SLAVE 并指向mydomain.com我的 Web 服务器的 IP 地址）

网络服务器域：mydomain.com

网络服务器主机名：ns4000000.ip-123-123-123.net

网络服务器 IP :123.123.123.123

在 Virtualmin 下，我编辑了默认的虚拟服务器模板，

  • 绑定新域的 DNS 记录：ns1.mydomain.com
  • 主 DNS 服务器主机名：ns1.mydomain.com

接下来，我使用该服务器模板创建了一个虚拟服务器。

这就是我所做的，但它仍然无法正常工作！有任何想法吗？我被困了好几天了，谢谢大家的帮助！

服务绑定9状态

* bind9 is running

lsof -i :53

COMMAND  PID USER   FD   TYPE DEVICE SIZE/OFF NODE NAME
named   6966 bind   20u  IPv6 338583      0t0  TCP *:domain (LISTEN)
named   6966 bind   21u  IPv4 338588      0t0  TCP localhost.localdomain:domain (LISTEN)
named   6966 bind   22u  IPv4 338590      0t0  TCP ns4000000.ip-123-123-123.net:domain (LISTEN)
named   6966 bind  512u  IPv6 338582      0t0  UDP *:domain
named   6966 bind  513u  IPv4 338587      0t0  UDP localhost.localdomain:domain
named   6966 bind  514u  IPv4 338589      0t0  UDP ns4000000.ip-123-123-123.net:domain

/etc/resolv.con

（不知道怎么213.186.33.99来的）

nameserver 127.0.0.1
nameserver 213.186.33.99
search ovh.net

主机 123.123.123.123 （我的网络服务器的 IP）

13.60.245.198.in-addr.arpa domain name pointer ns4000000.ip-123-123-123.net.

nslookup 213.186.33.99

Server:         127.0.0.1
Address:        127.0.0.1#53

Non-authoritative answer:
99.33.186.213.in-addr.arpa      name = cdns.ovh.net.

Authoritative answers can be found from:
33.186.213.in-addr.arpa nameserver = ns.ovh.net.
33.186.213.in-addr.arpa nameserver = dns.ovh.net.

nslookup ns1.mydomain.com

;; Got SERVFAIL reply from 127.0.0.1, trying next server
;; connection timed out; no servers could be reached

nslookup ns2.mydomain.com

;; Got SERVFAIL reply from 127.0.0.1, trying next server
;; connection timed out; no servers could be reached

nslookup www.mydomain.com

;; Got SERVFAIL reply from 127.0.0.1, trying next server
;; connection timed out; no servers could be reached

挖 mydomain.com

; <<>> DiG 9.8.1-P1 <<>> mydomain.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 43540
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;mydomain.com.                  IN      A

;; Query time: 0 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Thu Oct 11 11:30:09 2012
;; MSG SIZE  rcvd: 30

挖 ns1.mydomain.com

; <<>> DiG 9.8.1-P1 <<>> ns1.mydomain.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 31254
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;ns1.mydomain.com.              IN      A

;; Query time: 0 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Thu Oct 11 11:30:16 2012
;; MSG SIZE  rcvd: 34

/etc/bind/named.conf

include "/etc/bind/named.conf.options";
include "/etc/bind/named.conf.local";
include "/etc/bind/named.conf.default-zones";

/etc/bind/named.conf.default-zones

zone "." {
    type hint;
    file "/etc/bind/db.root";
};

zone "localhost" {
    type master;
    file "/etc/bind/db.local";
};

zone "127.in-addr.arpa" {
    type master;
    file "/etc/bind/db.127";
};

zone "0.in-addr.arpa" {
    type master;
    file "/etc/bind/db.0";
};

zone "255.in-addr.arpa" {
    type master;
    file "/etc/bind/db.255";
};

/etc/bind/named.conf.local

zone "mydomain.com" {
    type master;
    file "/var/lib/bind/mydomain.com.hosts";
    allow-transfer {
        127.0.0.1;
        localnets;
        };
    };

/etc/bind/named.conf.options

options {
    directory "/var/cache/bind";

    dnssec-validation auto;

    auth-nxdomain no;    # conform to RFC1035
    listen-on-v6 { any; };
//  allow-recursion { 127.0.0.1; };
//  transfer-source;
};

命名-checkconf -z

zone mydomain.com/IN: loaded serial 1349965194
zone localhost/IN: loaded serial 2
zone 127.in-addr.arpa/IN: loaded serial 1
zone 0.in-addr.arpa/IN: loaded serial 1
zone 255.in-addr.arpa/IN: loaded serial 1

iptables -L

Chain INPUT (policy ACCEPT)
target     prot opt source               destination
ACCEPT     udp  --  anywhere             anywhere             udp dpt:domain
ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:20000
ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:webmin
ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:https
ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:http
ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:imaps
ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:imap2
ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:pop3s
ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:pop3
ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:ftp-data
ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:ftp
ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:domain
ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:submission
ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:smtp
ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:ssh
ACCEPT     all  --  anywhere             anywhere

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination
linux
Martin Hope
Nyxynyx
Asked: 2012-10-12 02:09:03 +0800 CST
  • 3

我安装了 virtualmin 并尝试了 DNS 设置。现在，当我尝试启动 bind9 时，出现错误：

Service bind9 restart

 * Stopping domain name service... bind9   
   rndc: connect failed: 127.0.0.1#953: connection refused
                                                                    [ OK ]
 * Starting domain name service... bind9                            [fail]

/var/日志/系统日志

Oct 11 06:05:45 stock named[6316]: starting BIND 9.8.1-P1 -u bind
Oct 11 06:05:45 stock named[6316]: built with '--prefix=/usr' '--mandir=/usr/share/man' '--infodir=/usr/share/info' '--sysconfdir=/etc/bind' '--localstatedir=/var' '--enable-threads' '--enable-largefile' '--with-libtool' '--enable-shared' '--enable-static' '--with-openssl=/usr' '--with-gssapi=/usr' '--with-gnu-ld' '--with-geoip=/usr' '--enable-ipv6' 'CFLAGS=-fno-strict-aliasing -DDIG_SIGCHASE -O2' 'LDFLAGS=-Wl,-Bsymbolic-functions -Wl,-z,relro' 'CPPFLAGS=-D_FORTIFY_SOURCE=2'
Oct 11 06:05:45 stock named[6316]: adjusted limit on open files from 4096 to 1048576
Oct 11 06:05:45 stock named[6316]: found 4 CPUs, using 4 worker threads
Oct 11 06:05:45 stock named[6316]: using up to 4096 sockets
Oct 11 06:05:45 stock named[6316]: loading configuration from '/etc/bind/named.conf'
Oct 11 06:05:45 stock named[6316]: /etc/bind/named.conf.options:26: expected IPv4 address or '*' near ';'
Oct 11 06:05:45 stock named[6316]: loading configuration: unexpected token
Oct 11 06:05:45 stock named[6316]: exiting (due to fatal error)

/etc/bind/named.conf.options

options {
    directory "/var/cache/bind";

    // If there is a firewall between you and nameservers you want
    // to talk to, you may need to fix the firewall to allow multiple
    // ports to talk.  See http://www.kb.cert.org/vuls/id/800113

    // If your ISP provided one or more IP addresses for stable 
    // nameservers, you probably want to use them as forwarders.  
    // Uncomment the following block, and insert the addresses replacing 
    // the all-0's placeholder.

    // forwarders {
    //  0.0.0.0;
    // };

    //========================================================================
    // If BIND logs error messages about the root key being expired,
    // you will need to update your keys.  See https://www.isc.org/bind-keys
    //========================================================================
    dnssec-validation auto;

    auth-nxdomain no;    # conform to RFC1035
    listen-on-v6 { any; };
//  allow-recursion { 127.0.0.1; };
    transfer-source;
};
ubuntu
Martin Hope
Nyxynyx
Asked: 2012-10-11 21:50:52 +0800 CST
  • 3

我收到错误

fopen(/var/www/photos/testphoto.jpg): failed to open stream: Permission denied

当 PHP 尝试将文件写入 时/var/www/photos，其目录权限为

drwxrwsr-x 3 root www-pub 4096 Oct 11 01:46 photos

我已经将 apache2 用户添加www-data到组www-pub中，为什么除非我仍然无法将文件写入目录chmod 777 /var/www/photos？

更新

正如 Laurentiu Roescu 所建议的那样，我做了一个chmod 777 photos并让 PHP 写入文件。这是输出ls -la

-rw-r--r--  1 www-data www-pub 34777 Oct 11 02:12 testphoto.jpg
linux
Martin Hope
Nyxynyx
Asked: 2012-10-11 06:55:29 +0800 CST
  • 0

可能重复：
传输大量文件最快、最可靠的方法是什么？

我目前正在尝试将超过 100 万个文件从一台服务器传输到另一台服务器。使用 wget，它似乎非常慢，可能是因为它在前一个传输完成后开始新的传输。

问题：是否有更快的非阻塞（异步）方式进行传输？我在第一台服务器上没有足够的空间将文件压缩到 tar.gz 中并将它们传输过来。谢谢！

linux
Martin Hope
Nyxynyx
Asked: 2012-10-09 11:59:38 +0800 CST
  • 1

我刚刚在 Ubuntu 上安装了 tomcat6 apt-get，在 CentOs 上使用yum. 当我访问时www.domain.com:8080，我得到 2 个不同的页面。

如果只是视觉效果并不重要，但我是否错过了导致这种差异的包或设置？

中央操作系统

在此处输入图像描述

Ubuntu

在此处输入图像描述

java
Martin Hope
Nyxynyx
Asked: 2012-10-02 08:37:10 +0800 CST
  • 0

您好，有一个 LAMP 堆栈连接到在 CentOS 6.3 上运行的 Solr 3.6.1 服务器。在对我的应用程序进行基准测试时，我注意到 PHP 向 Solr 发送搜索查询并取回结果所花费的时间突然激增。

该时间通常约为 20-40 毫秒，而 Solr 的QTime通常为 0-30 毫秒。

我的基准测试结果：

Start function                                         msec
Creating the query                                     2.50196456909 msec
Executing query and getting results (PHP & Solr)       37.4531745911 msec
    \->Executing query (as reported by Solr QTime)     21 msec
Processing Solr results

问题：然而，有时这一步Executing query and getting results (PHP & Solr)会增加到 2000+ 毫秒，而 Solr 继续报告 0-30 毫秒QTime。这让我怀疑PHP/Apache和Solr之间的连接可能有问题。

我怎样才能确定这是不是真的，或者使这种联系更好？

apache-2.2
Martin Hope
Nyxynyx
Asked: 2012-09-27 16:07:29 +0800 CST
  • 2

在CentOS 6.3 上安装tomcat6 后，无法启动tomcat6 服务器。

root@host [/var/log/tomcat6]# service tomcat6 start
Starting tomcat6:                                          [  OK  ]

虽然它说OK，我无法访问http://mydomain.com:8080。

卡特琳娜.out

Exception in thread "main" java.lang.NullPointerException
   at java.lang.VMClassLoader.defineClass(libgcj.so.10)
   at java.lang.ClassLoader.defineClass(libgcj.so.10)
   at java.security.SecureClassLoader.defineClass(libgcj.so.10)
   at java.net.URLClassLoader.findClass(libgcj.so.10)
   at gnu.gcj.runtime.SystemClassLoader.findClass(libgcj.so.10)
   at java.lang.ClassLoader.loadClass(libgcj.so.10)
   at java.lang.ClassLoader.loadClass(libgcj.so.10)
   at gnu.java.lang.MainThread.run(libgcj.so.10)

使用 yum 安装了 Tomcat6：

yum -y install java tomcat6 tomcat6-webapps tomcat6-admin-webapps

当我试图找到版本时tomcat6 version：：

Exception in thread "main" java.lang.NoClassDefFoundError: org.apache.catalina.util.ServerInfo
   at gnu.java.lang.MainThread.run(libgcj.so.10)
Caused by: java.lang.ClassNotFoundException: org.apache.catalina.util.ServerInfo not found in gnu.gcj.runtime.SystemClassLoader{urls=[], parent=gnu.gcj.runtime.ExtensionClassLoader{urls=[], parent=null}}
   at java.net.URLClassLoader.findClass(libgcj.so.10)
   at gnu.gcj.runtime.SystemClassLoader.findClass(libgcj.so.10)
   at java.lang.ClassLoader.loadClass(libgcj.so.10)
   at java.lang.ClassLoader.loadClass(libgcj.so.10)
   at gnu.java.lang.MainThread.run(libgcj.so.10)

知道我应该做什么吗？谢谢！

linux