toolsの最近のブログ記事
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
tarでのバックアップ
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
[root@localhost ~]# tar zcvf $HOME/backup`date +%m%d`.tar.gz $HOME/ATBK5TH
tar: メンバ名から先頭の `/' を取り除きます
/home/admin/ATBK5TH/
/home/admin/ATBK5TH/atmarkit.ini
/home/admin/ATBK5TH/index.html
/home/admin/ATBK5TH/insert.php
/home/admin/ATBK5TH/update.ini
/home/admin/ATBK5TH/select.php
/home/admin/ATBK5TH/jscripts.ini
/home/admin/ATBK5TH/update.php
/home/admin/ATBK5TH/insert_form.ini
/home/admin/ATBK5TH/grant.sql
/home/admin/ATBK5TH/select_form.ini
/home/admin/ATBK5TH/ADDRESS.sql
/home/admin/ATBK5TH/image/
/home/admin/ATBK5TH/image/back.gif
/home/admin/ATBK5TH/image/0.gif
/home/admin/ATBK5TH/image/sakujo.gif
/home/admin/ATBK5TH/image/title1.gif
/home/admin/ATBK5TH/image/1shori.gif
/home/admin/ATBK5TH/image/title2.gif
/home/admin/ATBK5TH/image/henko.gif
/home/admin/ATBK5TH/image/xpress2.gif
/home/admin/ATBK5TH/image/line.gif
/home/admin/ATBK5TH/image/uketsuke.gif
/home/admin/ATBK5TH/image/kensaku.gif
/home/admin/ATBK5TH/delete.php
[root@localhost ~]# ls
ATBK5TH backup0105.tar.gz dumpbackup2 iptable_config_base.sh dumpbackup index.html.1 modsecurity_crs_20071222.conf source
[root@localhost ~]#
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
tarアーカイブの中身を確認する。 (tfオプション)
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
[root@localhost ~]# tar tf backup0105.tar.gz
home/admin/ATBK5TH/
home/admin/ATBK5TH/atmarkit.ini
home/admin/ATBK5TH/index.html
home/admin/ATBK5TH/insert.php
home/admin/ATBK5TH/update.ini
home/admin/ATBK5TH/select.php
home/admin/ATBK5TH/jscripts.ini
home/admin/ATBK5TH/update.php
home/admin/ATBK5TH/insert_form.ini
home/admin/ATBK5TH/grant.sql
home/admin/ATBK5TH/select_form.ini
home/admin/ATBK5TH/ADDRESS.sql
home/admin/ATBK5TH/image/
home/admin/ATBK5TH/image/back.gif
home/admin/ATBK5TH/image/0.gif
home/admin/ATBK5TH/image/sakujo.gif
home/admin/ATBK5TH/image/title1.gif
home/admin/ATBK5TH/image/1shori.gif
home/admin/ATBK5TH/image/title2.gif
home/admin/ATBK5TH/image/henko.gif
home/admin/ATBK5TH/image/xpress2.gif
home/admin/ATBK5TH/image/line.gif
home/admin/ATBK5TH/image/uketsuke.gif
home/admin/ATBK5TH/image/kensaku.gif
home/admin/ATBK5TH/delete.php
[root@localhost ~]#
[root@localhost ~]#
名前解決順序
[root@localhost ~]# cat /etc/host.conf
order hosts,bind
[root@localhost ~]#
[root@localhost ~]# more /etc/nsswitch.conf
#
# /etc/nsswitch.conf
#
# An example Name Service Switch config file. This file should be
# sorted with the most-used services at the beginning.
#
# The entry '[NOTFOUND=return]' means that the search for an
# entry should stop if the search in the previous entry turned
# up nothing. Note that if the search failed due to some other reason
# (like no NIS server responding) then the search continues with the
# next entry.
#
# Legal entries are:
#
# nisplus or nis+ Use NIS+ (NIS version 3)
# nis or yp Use NIS (NIS version 2), also called YP
# dns Use DNS (Domain Name Service)
# files Use the local files
# db Use the local database (.db) files
# compat Use NIS on compat mode
# hesiod Use Hesiod for user lookups
# [NOTFOUND=return] Stop searching if not found so far
#
# To use db, put the "db" in front of "files" for entries you want to be
# looked up first in the databases
#
# Example:
#passwd: db files nisplus nis
#shadow: db files nisplus nis
passwd: files
shadow: files
group: files
#hosts: db files nisplus nis dns
hosts: files dns
名前解決
[root@localhost ~]# cat /etc/resolv.conf
; generated by /sbin/dhclient-script
nameserver 192.168.1.1
search localdomain
[root@localhost ~]#
[root@localhost ~]# cat /etc/hosts
# Do not remove the following line, or various programs
# that require network functionality will fail.
127.0.0.1 localhost.localdomain localhost
::1 localhost6.localdomain6 localhost6
[root@localhost ~]#
ホスト名，ホスト名，GW，使用/不使用
[root@localhost ~]# cat /etc/sysconfig/network
NETWORKING=yes
NETWORKING_IPV6=yes
HOSTNAME=localhost.localdomain
GATEWAY=192.168.1.1
[root@localhost ~]#
IPアドレスの設定
（以下：DHCPの場合)
[root@localhost ~]# cat /etc/sysconfig/network-scripts/ifcfg-eth0
# ADMtek NC100 Network Everywhere Fast Ethernet 10/100
DEVICE=eth0
BOOTPROTO=dhcp
HWADDR=00:90:CC:E0:0C:C5
ONBOOT=yes
[root@localhost ~]#
（以下：IP指定の場合)
[root@localhost ~]# cat /etc/sysconfig/network-scripts/ifcfg-eth0
# ADMtek NC100 Network Everywhere Fast Ethernet 10/100
DEVICE=eth0
BOOTPROTO=static
HWADDR=00:90:CC:E0:0C:C5
BROADCAST=192.168.1.255
IPADDR=192.168.1.10
NETMASK=255.255.255.0
NETWORK=192.168.1.0
ONBOOT=yes
[root@localhost ~]#
※ NETWORK,BROADCASTなどは記入しなくても良い場合は多い。
コマンド色々：
hostコマンド
[root@localhost ~]# host yahoo.co.jp
yahoo.co.jp has address 203.216.227.176
yahoo.co.jp has address 124.83.139.192
yahoo.co.jp mail is handled by 10 mx5.mail.yahoo.co.jp.
yahoo.co.jp mail is handled by 10 mx1.mail.yahoo.co.jp.
yahoo.co.jp mail is handled by 10 mx2.mail.yahoo.co.jp.
yahoo.co.jp mail is handled by 10 mx3.mail.yahoo.co.jp.
[root@localhost ~]#
[root@localhost ~]# host 203.216.227.176
176.227.216.203.in-addr.arpa domain name pointer f1.top.vip.tnz.yahoo.co.jp.
[root@localhost ~]#
netstatコマンド
[root@localhost ~]# netstat -at
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address Foreign Address State
tcp 0 0 *:838 *:* LISTEN
tcp 0 0 *:mysql *:* LISTEN
tcp 0 0 *:sunrpc *:* LISTEN
tcp 1 0 192.168.11.4:46259 ftp4.ncnu.edu.tw:http CLOSE_WAIT
tcp 1 0 192.168.11.4:46262 ftp4.ncnu.edu.tw:http CLOSE_WAIT
tcp 1 0 192.168.11.4:40359 centos.at.multacom.com:http CLOSE_WAIT
tcp 1 0 192.168.11.4:40363 centos.at.multacom.com:http CLOSE_WAIT
tcp 1 0 192.168.11.4:40361 centos.at.multacom.com:http CLOSE_WAIT
tcp 1 0 192.168.11.4:40365 centos.at.multacom.com:http CLOSE_WAIT
tcp 0 0 *:webcache *:* LISTEN
tcp 0 0 *:http *:* LISTEN
tcp 0 0 *:ssh *:* LISTEN
tcp 0 132 ::ffff:192.168.11.4:ssh ::ffff:192.1:carrius-rshell ESTABLISHED
[root@localhost ~]#
-a 全てのソケット
-c 1秒毎リアルタイム表示
-i ネットワークインターフェース状況
-n アドレス，ポートを数値で表示
-p PIDとプロセス名も表示する
-r ルーティングテーブル表示
-t TCPポートのみ表示
routeコマンド
Destination → 宛先 Gateway→GWのアドレス Genmask→宛先のSubnet(ホストは255.255.255.255 GWは0.0.0.0)
Flags→経路状態(U:有効, H:宛先はホスト, G: GW, !:経路無効) Metric→距離(HOP) Ref→ルートの参照数,
Use→経路参照回数 Iface→ネットワークインターフェース
[root@localhost ~]# route
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
192.168.11.0 * 255.255.255.0 U 0 0 0 eth0
169.254.0.0 * 255.255.0.0 U 0 0 0 eth0
default air.setup 0.0.0.0 UG 0 0 0 eth0
[root@localhost ~]#
route add で追加
route del で削除
LinuxをRouterとして扱うような場合は，異なるネットワークのパケットを転送する必要がるのでip fowardを1に設定する。
0＝パケット転送拒否 1＝パケット転送許可
[root@localhost ~]# cat /proc/sys/net/ipv4/ip_forward
0
[root@localhost ~]#
TCPDUMP
-i インターフェース
-s バイト数
-X 16進とASCII文字で表示
-n アドレスを名前変換しないで表示
port ポート番号指定
proto プロトコルを指定
[root@localhost ~]# tcpdump -X -i eth0 port 80
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on eth0, link-type EN10MB (Ethernet), capture size 96 bytes
01:09:10.196603 IP 192.168.11.2.gxtelmd > 192.168.11.4.http: S 3053066467:3053066467(0) win 16384 <mss 1460,
0x0000: 4500 0030 601c 4000 8006 0355 c0a8 0b02 E..0`.@....U....
0x0010: c0a8 0b04 0934 0050 b5fa 18e3 0000 0000 .....4.P........
0x0020: 7002 4000 d366 0000 0204 05b4 0101 0402 p.@..f..........
01:09:10.239801 IP 192.168.11.4.http > 192.168.11.2.gxtelmd: S 2904952068:2904952068(0) ack 3053066468 win 5p,nop,sackOK>
■事前確認
./configure \
--enable-rewrite \
--enable-so \
--enable-ssl \
--enable-dav \
--enable-dav-fs \
--enable-suexec \
--enable-cache \
--enable-disk-cache \
--enable-mem-cache \
--enable-webdav=true \
--with-suexec-docroot=/home/www \
--with-included-apr \
--with-apxs=/usr/local/apache2/bin/apxs \
--with-suexec-caller=apache
■SVNダウンロード
http://subversion.tigris.org/servlets/ProjectDocumentList?folderID=260&expandFolder=74
http://subversion.tigris.org/downloads/subversion-1.4.5.tar.gz
[root@localhost subversion]# wget http://subversion.tigris.org/downloads/subversion-1.4.5.tar.gz
--18:49:43-- http://subversion.tigris.org/downloads/subversion-1.4.5.tar.gz
subversion.tigris.org をDNSに問いあわせています... 204.16.104.146
subversion.tigris.org|204.16.104.146|:80 に接続しています... 接続しました。
HTTP による接続要求を送信しました、応答を待っています... 200 OK
長さ: 6317665 (6.0M) [application/x-gzip]
Saving to: `subversion-1.4.5.tar.gz'
100%[==============================================================================================>] 6,317,665 564K/s in 12s
18:49:55 (503 KB/s) - `subversion-1.4.5.tar.gz' を保存しました [6317665/6317665]
[root@localhost subversion]#
■インストール
[root@localhost subversion]# tar zxvf subversion-1.4.5.tar.gz
[root@localhost subversion]# cd subversion-1.4.5
[root@localhost subversion]#./configure
[root@localhost subversion-1.4.5]# make
[root@localhost subversion-1.4.5]# make install
■モジュールの確認
[root@localhost subversion-1.4.5]# ls /usr/local/apache2/modules/
httpd.exp libphp5.so mod_authz_svn.so mod_dav_svn.so mod_fastcgi.so
[root@localhost subversion-1.4.5]#
■リポジトリー作成
[root@localhost subversion]# mkdir repository
[root@localhost subversion]# svnadmin create /home/subversion/repository
[root@localhost subversion]# chown -R apache:apache /home/subversion/repository
[root@localhost subversion]#
■テスト
[root@localhost variable]# svn import http://localhost --message 'Initial repository layout'
svn: 'http' 用 RA のバージョンが一致しません: 実際 1.4.5, 期待 1.4.2
[root@localhost variable]#
■AUTHファイル作成
[root@localhost conf]# /usr/local/apache2/bin/htpasswd -c svn-auth-file admin
New password:
Re-type new password:
Adding password for user admin
[root@localhost conf]#
■httpd.confの設定変更
#Suversion
LoadModule dav_svn_module modules/mod_dav_svn.so
LoadModule authz_svn_module modules/mod_authz_svn.so
<Location /svn>
DAV svn
SVNPath /home/subversion/repository
AuthType Basic
AuthName "Authorization Realm"
AuthUserFile /usr/local/apache2/conf/svn-auth-file
Require valid-user
</Location>
apacheを再起動して最後の設定確認。
