安装
Ubuntu Server的安装、配置和基础软件
- 1: 安装Ubuntu Server
- 2: 安装后常出现的问题
- 3: 配置Timeshift
- 3.1: timeshift的介绍
- 3.2: timeshift的安装配置
- 3.3: 创建timeshift快照
- 4: 基本配置
- 4.1: 设置更新源
- 4.2: 修改hostname
- 4.3: SSH登录
- 4.4: 安装配置git
- 4.5: 安装配置zsh作为默认shell
- 4.6: 配置网络
- 4.7: 安装Homebrew
- 4.8: [归档]添加新用户
- 5: 网络配置
- 5.1: 配置静态IP
- 5.2: 网络代理快捷命令
- 5.3: 安装配置Samba文件共享
- 5.4: 安装配置nfs文件共享
- 5.5: 安装配置sftp
- 6: 内核配置
- 7: 硬件配置
1 - 安装Ubuntu Server
Ubuntu Server的安装
注意事项
安装时关闭网络
ubuntu server 在安装完成之后，会自动进入更新状态，然后由于没有设置国内的源，会导致速度很慢，时间会长达30分钟，而且无法中断，完全浪费时间。
因此，安装时的最佳实践是不带网络安装，这样安装过程非常快（SSD硬盘的话大概3分钟）。安装完成之后，设置好源，再进行 apt
物理机安装
常规安装，没啥特殊。
我习惯的磁盘分区：
- EFI 分区： 200或者300M
- 根目录：
/除了 timeshift 分区之外的空间都给这里 - timeshift 备份分区： 一般留 50-100g 作为 timeshift 的备份分区，非常实用。
一般建议用分区软件先行分好区再进行安装，因为 ubuntu 安装器的设置比较简陋。但如果是ubuntu单独占用一整块硬盘，设置简单也可以用 ubuntu 安全器。
选择自定义方方式：
- “reformat”： 先清理整块硬盘，去除所有现有分区
- “use as boot device”：设置硬盘为启动盘，这样安装器会默认创建 efi 分区，大小为 512m
- “add gpt partition”: 在硬盘的空余空间中创建一个分区，占用除 timeshift 分区之外的所有空间，格式化为 ext4，挂载为
/ - “add gpt partition”: 在剩余空间中创建分区，格式化为 ext4, 挂载为
/timeshift
备注：和windows一起安装时，不需要划分额外的 ESP 分区，ubuntu server在安装时会自动选择 windows 所在的 ESP 分区，而且无法改动。（新版本没有确认过）
安装过程中必选安装 openssh 服务。
虚拟机安装
ubuntu server 的安装非常简单，如果是用 vmware 安装，则更加的简单，vmware 会自动完成安装过程中的设置，直接自动安装完成。
ESXi安装
在 ESXi 中新建虚拟机，选择 ubuntu server 的 iso 启动，一路安装。
bios 启动选择 efi，开启安全启动。
raid安装
参考：
- server - Install Ubuntu 20.04 Focal Fossa with RAID 1 on two devices
- Looking to create a Software RAID 1 setup for your 2-disk server on Ubuntu Server 20.04?： 其中的一个答案的单独整理版本。
不能简单的利用 “Create Software RAID (md) " 功能直接把两块硬盘做成 raid0/1，这样会因为没有启动分区而报错：
If you put all disks into RAIDS or LVM VGs, there will be nowhere to put the boot partition.
基本思路是按照普通安装 ubuntu server 的方式，分别对两块硬盘做分区，并保持分区方案的一致。分区包括：
- esp 分区：只在第一块硬盘上使用，第二块硬盘只要保持同样大小
- 用作 “/” 的分区
- 用作 “/timeshift” 的分区
然后再将准备好的这两个分区分别建立 raid0 md，然后分别格式化为 ext4，挂载为 “/” 和 “/timeshift” 。
然后正常安装 ubuntu server。
2 - 安装后常出现的问题
Ubuntu Server 安装后常出现的问题
登录后出现无法连接到 ubuntu.com 的错误提示
ssh 登录后，有时（主要是 ubuntu 22.04 下）会遇到这样的提示：
ssh sky@192.168.0.152
Welcome to Ubuntu 22.04.2 LTS (GNU/Linux 5.15.0-77-generic x86_64)
......
0 updates can be applied immediately.
Enable ESM Apps to receive additional future security updates.
See https://ubuntu.com/esm or run: sudo pro status
Failed to connect to https://changelogs.ubuntu.com/meta-release-lts. Check your Internet connection or proxy settings
Last login: Mon Jun 26 08:10:26 2023 from 192.168.0.90
解决的方式如下：
sudo rm /var/lib/ubuntu-release-upgrader/release-upgrade-available
/usr/lib/ubuntu-release-upgrader/release-upgrade-motd
重新登录就不会再看到错误提示了:
ssh sky@192.168.0.152
Welcome to Ubuntu 22.04.2 LTS (GNU/Linux 5.15.0-77-generic x86_64)
* Documentation: https://help.ubuntu.com
* Management: https://landscape.canonical.com
* Support: https://ubuntu.com/advantage
System information as of Mon Jun 26 03:15:45 PM UTC 2023
System load: 0.00537109375 Memory usage: 2% Processes: 258
Usage of /: 1.5% of 441.87GB Swap usage: 0% Users logged in: 0
Expanded Security Maintenance for Applications is not enabled.
0 updates can be applied immediately.
Enable ESM Apps to receive additional future security updates.
See https://ubuntu.com/esm or run: sudo pro status
Last login: Mon Jun 26 08:31:13 2023 from 192.168.0.90
参考：
3 - 配置Timeshift
安装配置timeshift对ubuntu系统进行备份和恢复
3.1 - timeshift的介绍
timeshift的介绍
Timeshift 是一款自由开源工具，可创建文件系统的增量快照。可以使用 RSYNC 或 BTRFS 两种方式创建快照。
项目地址：
https://github.com/teejee2008/timeshift
参考资料：
在 ubuntu server 安装完成之后，第一时间安装 timeshift 进行备份，后续配置过程中随时可以回滚。
3.2 - timeshift的安装配置
安装并配置timeshift
安装
sudo apt install timeshift
完成之后看一下：
$ sudo timeshift
Timeshift v20.03 by Tony George (teejeetech@gmail.com)
Syntax:
timeshift --check
timeshift --create [OPTIONS]
timeshift --restore [OPTIONS]
timeshift --delete-[all] [OPTIONS]
timeshift --list-{snapshots|devices} [OPTIONS]
配置
默认安装后，在第一次运行前，我们需要修改 timeshift 的配置文件，否则 timeshift 会默认找到一个 ext4 分区作为备份区。
看一下目前的硬盘情况：
$ sudo fdisk -l
Disk /dev/loop0: 55.45 MiB, 58130432 bytes, 113536 sectors
Units: sectors of 1 * 512 = 512 bytes
Sector size (logical/physical): 512 bytes / 512 bytes
I/O size (minimum/optimal): 512 bytes / 512 bytes
Disk /dev/loop1: 70.32 MiB, 73728000 bytes, 144000 sectors
Units: sectors of 1 * 512 = 512 bytes
Sector size (logical/physical): 512 bytes / 512 bytes
I/O size (minimum/optimal): 512 bytes / 512 bytes
Disk /dev/loop2: 32.3 MiB, 33865728 bytes, 66144 sectors
Units: sectors of 1 * 512 = 512 bytes
Sector size (logical/physical): 512 bytes / 512 bytes
I/O size (minimum/optimal): 512 bytes / 512 bytes
Disk /dev/nvme0n1: 838.37 GiB, 900185481216 bytes, 219771846 sectors
Disk model: MZ1LB960HBJR-000FB
Units: sectors of 1 * 4096 = 4096 bytes
Sector size (logical/physical): 4096 bytes / 4096 bytes
I/O size (minimum/optimal): 131072 bytes / 131072 bytes
Disklabel type: gpt
Disk identifier: 7C431E31-78CA-4600-9C2F-C68D10E793CC
Device Start End Sectors Size Type
/dev/nvme0n1p1 256 131327 131072 512M EFI System
/dev/nvme0n1p2 131328 196739327 196608000 750G Linux filesystem
/dev/nvme0n1p3 196739328 219771391 23032064 87.9G Linux filesystem
这里的 /dev/nvme0n1p3 是我为 timeshift 预留的分区，存放在 nvme 磁盘上，以保证备份和恢复的速度。
$ sudo lsblk -f
NAME FSTYPE LABEL UUID FSAVAIL FSUSE% MOUNTPOINT
loop0 squashfs 0 100% /snap/core18/2128
loop1 squashfs 0 100% /snap/lxd/21029
loop2 squashfs 0 100% /snap/snapd/12704
nvme0n1
├─nvme0n1p1 vfat 72C9-B4E4 504.9M 1% /boot/efi
├─nvme0n1p2 ext4 a83415e6-ed69-4932-9d08-1e87d7510dc1 689.1G 1% /
└─nvme0n1p3 ext4 9b22569d-9410-48cc-b994-10257b2d0498 81.5G 0% /run/timeshift/backup
记录 nvme0n1p3 的 uuid ，然后修改配置, sudo vi /etc/timeshift/timeshift.json 打开后设置 backup_device_uuid 为 nvme0n1p3 的 uuid :
{
"backup_device_uuid" : "9b22569d-9410-48cc-b994-10257b2d0498",
"parent_device_uuid" : "",
"do_first_run" : "true",
"btrfs_mode" : "false",
"include_btrfs_home" : "false",
"stop_cron_emails" : "true",
"schedule_monthly" : "false",
"schedule_weekly" : "false",
"schedule_daily" : "false",
"schedule_hourly" : "false",
"schedule_boot" : "false",
"count_monthly" : "2",
"count_weekly" : "3",
"count_daily" : "5",
"count_hourly" : "6",
"count_boot" : "5",
"snapshot_size" : "0",
"snapshot_count" : "0",
"exclude" : [
],
"exclude-apps" : [
]
}
执行timeshift命令，就能看到配置生效了：
sudo timeshift --list
First run mode (config file not found)
Selected default snapshot type: RSYNC
/dev/nvme0n1p3 is mounted at: /run/timeshift/backup, options: rw,relatime,stripe=32
Device : /dev/nvme0n1p3
UUID : 9b22569d-9410-48cc-b994-10257b2d0498
Path : /run/timeshift/backup
Mode : RSYNC
Status : No snapshots on this device
First snapshot requires: 0 B
No snapshots found
3.3 - 创建timeshift快照
通过create命令创建timeshift快照进行备份
创建快照
命令介绍
常见快照的命令为：
sudo timeshift --create --comments "first backup after install" --tags O
tags的类型:
- O: Ondemand，默认值，一般用于手工创建快照
- B: Boot
- H: Hourly
- D: Daily
- W: Weekly
- M: Monthly
示例
这是创建的第一个快照，操作系统和 timeshift 安装完成之后的第一个快照：
$ sudo timeshift --create --comments "first backup after install"
/dev/nvme0n1p6 is mounted at: /run/timeshift/backup, options: rw,relatime
------------------------------------------------------------------------------
Estimating system size...
Creating new snapshot...(RSYNC)
Saving to device: /dev/nvme0n1p6, mounted at path: /run/timeshift/backup
Synching files with rsync...
Created control file: /run/timeshift/backup/timeshift/snapshots/2022-01-06_08-19-32/info.json
RSYNC Snapshot saved successfully (28s)
Tagged snapshot '2022-01-06_08-19-32': ondemand
完成后查看：
$ sudo timeshift --list
/dev/nvme0n1p6 is mounted at: /run/timeshift/backup, options: rw,relatime
Device : /dev/nvme0n1p6
UUID : 208eb500-fd49-4580-b4ea-3b126d5b0fe4
Path : /run/timeshift/backup
Mode : RSYNC
Status : OK
1 snapshots, 96.1 GB free
Num Name Tags Description
------------------------------------------------------------------------------
0 > 2022-01-06_08-19-32 O first backup after install
4 - 基本配置
Ubuntu Server安装后的基本配置工作
4.1 - 设置更新源
设置Ubuntu Server的更新源
设置更新源
在进行任何更新和软件安装前，建议先设置更新源，以保证速度。
如果服务器在国内，则可以考虑设置apt源为国内代理，这样速度要好很多。
首先备份源列表:
sudo cp /etc/apt/sources.list /etc/apt/sources.list_original
sudo vi /etc/apt/sources.list
然后修改 /etc/apt/sources.list 文件.
ubuntu 23.04
阿里云源 :
deb http://mirrors.aliyun.com/ubuntu/ lunar main restricted universe multiverse
# deb-src http://mirrors.aliyun.com/ubuntu/ lunar main restricted universe multiverse
deb http://mirrors.aliyun.com/ubuntu/ lunar-security main restricted universe multiverse
# deb-src http://mirrors.aliyun.com/ubuntu/ lunar-security main restricted universe multiverse
deb http://mirrors.aliyun.com/ubuntu/ lunar-updates main restricted universe multiverse
# deb-src http://mirrors.aliyun.com/ubuntu/ lunar-updates main restricted universe multiverse
deb http://mirrors.aliyun.com/ubuntu/ lunar-proposed main restricted universe multiverse
# deb-src http://mirrors.aliyun.com/ubuntu/ lunar-proposed main restricted universe multiverse
deb http://mirrors.aliyun.com/ubuntu/ lunar-backports main restricted universe multiverse
# deb-src http://mirrors.aliyun.com/ubuntu/ lunar-backports main restricted universe multiverse
中科大源：
deb https://mirrors.ustc.edu.cn/ubuntu/ lunar main restricted universe multiverse
# deb-src https://mirrors.ustc.edu.cn/ubuntu/ lunar main restricted universe multiverse
deb https://mirrors.ustc.edu.cn/ubuntu/ lunar-updates main restricted universe multiverse
# deb-src https://mirrors.ustc.edu.cn/ubuntu/ lunar-updates main restricted universe multiverse
deb https://mirrors.ustc.edu.cn/ubuntu/ lunar-backports main restricted universe multiverse
# deb-src https://mirrors.ustc.edu.cn/ubuntu/ lunar-backports main restricted universe multiverse
deb https://mirrors.ustc.edu.cn/ubuntu/ lunar-security main restricted universe multiverse
# deb-src https://mirrors.ustc.edu.cn/ubuntu/ lunar-security main restricted universe multiverse
deb https://mirrors.ustc.edu.cn/ubuntu/ lunar-proposed main restricted universe multiverse
# deb-src https://mirrors.ustc.edu.cn/ubuntu/ lunar-proposed main restricted universe multiverse
ubuntu 22.04
阿里云源 (不知道为什么特别慢）:
deb http://mirrors.aliyun.com/ubuntu/ jammy main restricted universe multiverse
# deb-src http://mirrors.aliyun.com/ubuntu/ jammy main restricted universe multiverse
deb http://mirrors.aliyun.com/ubuntu/ jammy-security main restricted universe multiverse
# deb-src http://mirrors.aliyun.com/ubuntu/ jammy-security main restricted universe multiverse
deb http://mirrors.aliyun.com/ubuntu/ jammy-updates main restricted universe multiverse
# deb-src http://mirrors.aliyun.com/ubuntu/ jammy-updates main restricted universe multiverse
deb http://mirrors.aliyun.com/ubuntu/ jammy-proposed main restricted universe multiverse
# deb-src http://mirrors.aliyun.com/ubuntu/ jammy-proposed main restricted universe multiverse
deb http://mirrors.aliyun.com/ubuntu/ jammy-backports main restricted universe multiverse
# deb-src http://mirrors.aliyun.com/ubuntu/ jammy-backports main restricted universe multiverse
中科大源（非常快）：
deb https://mirrors.ustc.edu.cn/ubuntu/ jammy main restricted universe multiverse
# deb-src https://mirrors.ustc.edu.cn/ubuntu/ jammy main restricted universe multiverse
deb https://mirrors.ustc.edu.cn/ubuntu/ jammy-updates main restricted universe multiverse
# deb-src https://mirrors.ustc.edu.cn/ubuntu/ jammy-updates main restricted universe multiverse
deb https://mirrors.ustc.edu.cn/ubuntu/ jammy-backports main restricted universe multiverse
# deb-src https://mirrors.ustc.edu.cn/ubuntu/ jammy-backports main restricted universe multiverse
deb https://mirrors.ustc.edu.cn/ubuntu/ jammy-security main restricted universe multiverse
# deb-src https://mirrors.ustc.edu.cn/ubuntu/ jammy-security main restricted universe multiverse
deb https://mirrors.ustc.edu.cn/ubuntu/ jammy-proposed main restricted universe multiverse
# deb-src https://mirrors.ustc.edu.cn/ubuntu/ jammy-proposed main restricted universe multiverse
ubuntu 20.04
阿里云源:
deb http://mirrors.aliyun.com/ubuntu/ focal main restricted universe multiverse
# deb-src http://mirrors.aliyun.com/ubuntu/ focal main restricted universe multiverse
deb http://mirrors.aliyun.com/ubuntu/ focal-security main restricted universe multiverse
# deb-src http://mirrors.aliyun.com/ubuntu/ focal-security main restricted universe multiverse
deb http://mirrors.aliyun.com/ubuntu/ focal-updates main restricted universe multiverse
# deb-src http://mirrors.aliyun.com/ubuntu/ focal-updates main restricted universe multiverse
deb http://mirrors.aliyun.com/ubuntu/ focal-proposed main restricted universe multiverse
# deb-src http://mirrors.aliyun.com/ubuntu/ focal-proposed main restricted universe multiverse
deb http://mirrors.aliyun.com/ubuntu/ focal-backports main restricted universe multiverse
# deb-src http://mirrors.aliyun.com/ubuntu/ focal-backports main restricted universe multiverse
中科大镜像源:
deb https://mirrors.ustc.edu.cn/ubuntu/ focal main restricted universe multiverse
deb-src https://mirrors.ustc.edu.cn/ubuntu/ focal main restricted universe multiverse
deb https://mirrors.ustc.edu.cn/ubuntu/ focal-updates main restricted universe multiverse
deb-src https://mirrors.ustc.edu.cn/ubuntu/ focal-updates main restricted universe multiverse
deb https://mirrors.ustc.edu.cn/ubuntu/ focal-backports main restricted universe multiverse
deb-src https://mirrors.ustc.edu.cn/ubuntu/ focal-backports main restricted universe multiverse
deb https://mirrors.ustc.edu.cn/ubuntu/ focal-security main restricted universe multiverse
deb-src https://mirrors.ustc.edu.cn/ubuntu/ focal-security main restricted universe multiverse
deb https://mirrors.ustc.edu.cn/ubuntu/ focal-proposed main restricted universe multiverse
deb-src https://mirrors.ustc.edu.cn/ubuntu/ focal-proposed main restricted universe multiverse
对于腾讯云/阿里云上的服务器，默认都配置好了腾讯云和阿里云的源，直接用即可，速度超好。
偶尔会遇到阿里云或者中科大源不可用的情况（以前没遇到过，最近很频繁），可以切换其他源试试。
网易163源：
deb http://mirrors.163.com/ubuntu/ focal main restricted universe multiverse
deb http://mirrors.163.com/ubuntu/ focal-security main restricted universe multiverse
deb http://mirrors.163.com/ubuntu/ focal-updates main restricted universe multiverse
deb http://mirrors.163.com/ubuntu/ focal-proposed main restricted universe multiverse
deb http://mirrors.163.com/ubuntu/ focal-backports main restricted universe multiverse
# deb-src http://mirrors.163.com/ubuntu/ focal main restricted universe multiverse
# deb-src http://mirrors.163.com/ubuntu/ focal-security main restricted universe multiverse
# deb-src http://mirrors.163.com/ubuntu/ focal-updates main restricted universe multiverse
# deb-src http://mirrors.163.com/ubuntu/ focal-proposed main restricted universe multiverse
# deb-src http://mirrors.163.com/ubuntu/ focal-backports main restricted universe multiverse
清华源：
deb https://mirrors.tuna.tsinghua.edu.cn/ubuntu/ eoan main restricted universe multiverse
# deb-src https://mirrors.tuna.tsinghua.edu.cn/ubuntu/ eoan main restricted universe multiverse
deb https://mirrors.tuna.tsinghua.edu.cn/ubuntu/ eoan-updates main restricted universe multiverse
# deb-src https://mirrors.tuna.tsinghua.edu.cn/ubuntu/ eoan-updates main restricted universe multiverse
deb https://mirrors.tuna.tsinghua.edu.cn/ubuntu/ eoan-backports main restricted universe multiverse
# deb-src https://mirrors.tuna.tsinghua.edu.cn/ubuntu/ eoan-backports main restricted universe multiverse
deb https://mirrors.tuna.tsinghua.edu.cn/ubuntu/ eoan-security main restricted universe multiverse
# deb-src https://mirrors.tuna.tsinghua.edu.cn/ubuntu/ eoan-security main restricted universe multiverse
deb https://mirrors.tuna.tsinghua.edu.cn/ubuntu/ eoan-proposed main restricted universe multiverse
# deb-src https://mirrors.tuna.tsinghua.edu.cn/ubuntu/ eoan-proposed main restricted universe multiverse
更新系统
先更新各种软件到最新，简单的 apt upgrade 搞定：
sudo apt update
sudo apt upgrade
取消PPA仓库
当添加太多的 PPA 仓库之后，apt update 的速度就会慢很多。
考虑到大多数软件不会经常更新，而且我们也没有立即更新的迫切需求，因此建议取消这些 PPA 仓库。
终端操作
PPA仓库存储位置：
$ cd /etc/apt/sources.list.d
$ ls -l
git-core-ubuntu-ppa-focal.list
打开具体要取消的PPA仓库，如上面的git的ppa仓库文件，注释掉相关的内容。
不要直接删，以后如果需要更新，可以手工取消注释而不用重新找ppa仓库地址再添加。
UI操作
“开始菜单” -> “系统管理” -> “软件源” -> “PPA”, 将不需要及时更新的软件的 PPA 取消。
4.2 - 修改hostname
修改Ubuntu Server的hostname
背景
在 esxi 等虚拟平台上复制虚拟机时，就会遇到 hostname 重复的问题，这时最好是能在虚拟机复制之后永久性的修改 hostname 。
查看当前 hostname ：
hostname
ubuntu 20.04
可以通过 hostnamectl 来修改：
sudo hostnamectl set-hostname newNameHere
完成后再额外修改一下 hosts 文件中的 hostname：
sudo nano /etc/hosts
完成后重启即可：
sudo reboot
参考资料
4.3 - SSH登录
使用新用户SSH登录服务器
安装openssh(可选)
安装ssh软件，以便从外部直接ssh进来，而不用在服务器上操作。通常选择安装openssh，有些服务器默认有安装openssh，如果服务器默认没有安装ssh软件，则：
sudo apt-get install openssh-server
使用密码远程登录
执行：
ssh sky@ubuntu.server.ip
输入密码即可。
使用密钥远程登录
为了进一步方便使用，不必每次输入密码, 还可以通过authorized_keys 的方式来自动登录。
上传本机的 .ssh/id_isa.pub 文件到ubuntu server服务器端：
scp ~/.ssh/id_rsa.pub sky@192.168.0.10:/home/sky
在ubuntu server服务器上运行：
mkdir -p .ssh
touch ~/.ssh/authorized_keys
cat ~/id_rsa.pub >> ~/.ssh/authorized_keys
以后简单输入 “ssh ubuntu.server.ip” 即可自动登录。
快捷登录
如果服务器ip地址固定，则可以进一步简化，修改本机的/etc/hosts文件，加入下面内容：
# local machine list
192.168.100.10 skywork
192.168.100.20 skywork2
192.168.100.30 skydownload
192.168.100.40 skyserver
192.168.100.50 skyserver2
192.168.100.60 skyserver3
以后简单输入 “ssh skyserver” 即可。
指定特定端口登录
ssh默认采用22端口，对于需要进行端口映射导致不能访问22端口的情况，需要在ssh时通过 -p 参数指定具体的端口。
如下面的命令，有一台服务器的22端口是通过路由器的2122端口进行端口映射，则远程ssh连接的命令为：
ssh -p 2122 sky@dev.sky.io
修改本机的 ~/.bash_profile 或者 ~/.zshrc 文件，加入以下内容，以后就可以一个简单命令直接ssh到远程服务器了：
# ssh to home
alias sshwork="ssh sky@skywork"
alias sshwork2="ssh sky@skywor2"
alias sshserver="ssh sky@skyserver"
alias sshserver2="ssh sky@skyserver2"
alias sshserver3="ssh sky@skyserver3"
特别补充
腾讯云
在腾讯云上购买的linux主机，使用 SSH 登录：
https://cloud.tencent.com/document/product/1207/44643
特别提醒：首次通过本地 SSH 客户端登录 Linux 实例之前，您需要重置默认用户名（root）的密码，或者绑定密钥。否则会直接报错。
4.5 - 安装配置zsh作为默认shell
安装配置zsh和ohmyzsh，替代默认的bash
背景
zsh的功能极其强大，只是配置过于复杂，起初只有极客才在用。后来，一些极客为了让更多人受益，开发了Oh-my-zsh这个插件，用来简化zsh的配置，让zsh更加容易上手。
官网地址：
https://github.com/ohmyzsh/ohmyzsh
安装
首先安装 zsh：
sudo apt install zsh zsh-doc
然后安装ohmyzsh:
sh -c "$(wget -O- https://raw.githubusercontent.com/ohmyzsh/ohmyzsh/master/tools/install.sh)"
DNS 污染问题：
如果遇到 DNS 污染，导致 raw.githubusercontent.com 被解析到 127.0.0.1 或者 0.0.0.1 导致无法访问。需要修改 hosts 文件:
sudo vi /etc/hosts
增加一行：
199.232.68.133 raw.githubusercontent.com
中途询问是否把zsh作为默认 shell 时选择Y：
Do you want to change your default shell to zsh? [Y/n] Y
Changing the shell...
配置
关闭自动粘贴转义
Oh-my-zsh 默认开启自动粘贴转义，容易造成问题，建议关闭。
vi ~/.zshrc
修改 .zshrc 文件：
# Uncomment the following line if pasting URLs and other text is messed up.
# 把这里的注释取消即可
DISABLE_MAGIC_FUNCTIONS="true"
配置插件
https://github.com/ohmyzsh/ohmyzsh/wiki/Plugins
Oh-my-zsh 默认将插件存放在 ~/.oh-my-zsh/plugins 目录下，数量非常多：
➜ ~ cd .oh-my-zsh/plugins
➜ plugins git:(master) ls
adb composer frontend-search ipfs n98-magerun redis-cli terraform
ag copybuffer fzf isodate nanoc repo textastic
aliases copydir gas iterm2 ng ripgrep textmate
alias-finder copyfile gatsby jake-node nmap ros thefuck
ansible cp gb jenv node rsync themes
ant cpanm gcloud jfrog nomad ruby thor
apache2-macports dash geeknote jhbuild npm rust tig
arcanist debian gem jira npx rustup timer
archlinux deno genpass jruby nvm rvm tmux
asdf dircycle gh jsontools oc safe-paste tmux-cssh
autoenv direnv git jump octozen salt tmuxinator
autojump dirhistory git-auto-fetch kate osx samtools torrent
autopep8 dirpersist git-escape-magic keychain otp sbt transfer
aws django git-extras kitchen pass scala tugboat
battery dnf gitfast knife paver scd ubuntu
bazel dnote git-flow knife_ssh pep8 screen ufw
bbedit docker git-flow-avh kops percol scw universalarchive
bedtools docker-compose github kubectl per-directory-history sdk urltools
bgnotify docker-machine git-hubflow kubectx perl sfdx vagrant
boot2docker doctl gitignore kube-ps1 perms sfffe vagrant-prompt
bower dotenv git-lfs lando phing shell-proxy vault
branch dotnet git-prompt laravel pip shrink-path vim-interaction
brew droplr glassfish laravel4 pipenv singlechar vi-mode
bundler drush globalias laravel5 pj spring virtualenv
cabal eecms gnu-utils last-working-dir please sprunge virtualenvwrapper
cake emacs golang lein pm2 ssh-agent vscode
cakephp3 ember-cli gpg-agent lighthouse pod stack vundle
capistrano emoji gradle lol postgres sublime wakeonlan
cargo emoji-clock grails lxd pow sublime-merge wd
cask emotty grc macports powder sudo web-search
catimg encode64 grunt magic-enter powify supervisor wp-cli
celery extract gulp man profiles suse xcode
chruby fabric hanami marked2 pyenv svcat yarn
chucknorris fancy-ctrl-z helm mercurial pylint svn yii
cloudfoundry fasd heroku meteor python svn-fast-info yii2
codeclimate fastfile history microk8s rails swiftpm yum
coffee fbterm history-substring-search minikube rake symfony z
colemak fd hitchhiker mix rake-fast symfony2 zbell
colored-man-pages firewalld hitokoto mix-fast rand-quote systemadmin zeus
colorize flutter homestead mongocli rbenv systemd zoxide
command-not-found fnm httpie mosh rbfu taskwarrior zsh-interactive-cd
common-aliases forklift invoke mvn react-native terminitor zsh-navigation-tools
compleat fossil ionic mysql-macports rebar term_tab zsh_reload
比较常用的：
- git
- golang
- rust / rustup
- docker / docker-compose / docker-machine
- kubectl
- npm / node
- mvn
- sudo
- helm
- redis-cli
- ubuntu / ufw
- wd
- zsh-autosuggestions
- zsh-syntax-highlighting
- history-substring-search
小结
最后启动的插件如下所示：
plugins=(git golang rust docker docker-compose docker-machine kubectl npm node mvn sudo helm redis-cli ubuntu ufw wd zsh-autosuggestions zsh-syntax-highlighting history-substring-search)
配置样式
https://github.com/ohmyzsh/ohmyzsh/wiki/Themes
暂时先用默认。
附录：常用插件用法
git插件
开启 git 插件后就可以使用以下简写命令了：
更多细节参见：
https://github.com/ohmyzsh/ohmyzsh/tree/master/plugins/git
wd插件
可以快速切换到常用目录。
先安装 wd:
wget --no-check-certificate https://github.com/mfaerevaag/wd/raw/master/install.sh -O - | sh
使用方法：
# 进入某个目录
cd work/code/learning
pwd
/home/sky/work/code/learning
# 添加到wd
wd add learning
# 之后就可以用wd命令直接进入了
wd learning
# 方便期间，常见的学习笔记都加入wd，以l为前缀
/home/sky/work/code/learning/learning-rust
wd add lrust
详细使用参考：https://github.com/mfaerevaag/wd
sudo插件
按 2 次 esc 会在命令前自动输入 sudo
zsh-autosuggestions插件
根据历史记录智能自动补全命令，输入命令时会以暗色补全，按方向键右键完成输入。
安装命令：
git clone https://github.com/zsh-users/zsh-autosuggestions $ZSH_CUSTOM/plugins/zsh-autosuggestions
zsh-syntax-highlighting插件
fish shell 风格的语法高亮插件。输入的命令根据主题自动高亮。
安装命令：
git clone https://github.com/zsh-users/zsh-syntax-highlighting.git $ZSH_CUSTOM/plugins/zsh-syntax-highlighting
history-substring-search 插件
历史命令搜索插件，如果和 zsh-syntax-highlighting 插件共用，要配置到语法高亮插件之后。
安装命令：
git clone https://github.com/zsh-users/zsh-history-substring-search.git $ZSH_CUSTOM/plugins/history-substring-search
参考资料
4.6 - 配置网络
配置网络
问题：卡住两分钟
开机启动时出现两分钟的停顿，显示提醒如下：
A start job is running for wait for Network to be configured
然后2分钟超时才能继续启动。
登录之后检查：
$ sudo systemctl status systemd-networkd-wait-online.service
输出为：
$ sudo systemctl status systemd-networkd-wait-online.service
systemd-networkd-wait-online.service - Wait for Network to be Configured
Loaded: loaded (/lib/systemd/system/systemd-networkd-wait-online.service; enabled; vendor preset: enabled)
Active: failed (Result: exit-code) since Sat 2022-01-15 08:12:57 UTC; 7min ago
Docs: man:systemd-networkd-wait-online.service(8)
Process: 1272 ExecStart=/lib/systemd/systemd-networkd-wait-online (code=exited, status=1/FAILURE)
Main PID: 1272 (code=exited, status=1/FAILURE)
Jan 15 08:10:57 skywork2 systemd[1]: Starting Wait for Network to be Configured...
Jan 15 08:11:28 skywork2 systemd-networkd-wait-online[1272]: managing: ens1
Jan 15 08:11:28 skywork2 systemd-networkd-wait-online[1272]: managing: enp6s0
Jan 15 08:11:28 skywork2 systemd-networkd-wait-online[1272]: managing: ens1
Jan 15 08:11:28 skywork2 systemd-networkd-wait-online[1272]: managing: enp6s0
Jan 15 08:12:57 skywork2 systemd-networkd-wait-online[1272]: Event loop failed: Connection timed out
Jan 15 08:12:57 skywork2 systemd[1]: systemd-networkd-wait-online.service: Main process exited, code=exited, status=1/FAILURE
Jan 15 08:12:57 skywork2 systemd[1]: systemd-networkd-wait-online.service: Failed with result 'exit-code'.
Jan 15 08:12:57 skywork2 systemd[1]: Failed to start Wait for Network to be Configured.
问题所在在于网卡的配置：
networkctl
IDX LINK TYPE OPERATIONAL SETUP
1 lo loopback carrier unmanaged
2 enp5s0 ether no-carrier configuring
3 enp6s0 ether routable configured
4 ens1 ether routable configured
5 ibs1d1 infiniband off unmanaged
5 links listed.
解决方案1-减少超时时间
cd /etc/systemd/system/network-online.target.wants/
sudo vi systemd-networkd-wait-online.service
在[Service]下添加一行 TimeoutStartSec=2sec：
[Service]
Type=oneshot
ExecStart=/lib/systemd/systemd-networkd-wait-online
RemainAfterExit=yes
TimeoutStartSec=15sec # 增加这一行
这样15秒钟之后就会继续启动，而不是卡住两分钟，虽然治标不治本。
TBD： 发现我的40G网络会有dhcp获取IP地址很慢的问题，基本要30秒左右才能拿到IP地址，导致启动时很慢。即使这里设置timeout可以继续启动操作系统， 但是进入桌面之后由于40G网络的IP尚未能获取，用40G网络的IP地址会无法访问。千兆网络dhcp的速度就非常快。
解决方案2-配置网络
终极解决方案还是要配置好网络。用 ip 命令查看当前网卡情况：
ip addr
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: enp4s0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000
link/ether 00:e0:4c:68:f7:da brd ff:ff:ff:ff:ff:ff
inet 192.168.0.50/24 brd 192.168.0.255 scope global dynamic enp4s0
valid_lft 81706sec preferred_lft 81706sec
inet6 fe80::2e0:4cff:fe68:f7da/64 scope link
valid_lft forever preferred_lft forever
3: enp5s0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc fq_codel state DOWN group default qlen 1000
link/ether 00:e0:4c:54:17:3a brd ff:ff:ff:ff:ff:ff
4: enp6s0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc fq_codel state DOWN group default qlen 1000
link/ether 00:e0:4c:54:17:3b brd ff:ff:ff:ff:ff:ff
5: ens4: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 1000
link/ether 48:0f:cf:ef:08:11 brd ff:ff:ff:ff:ff:ff
inet 10.0.0.50/24 brd 10.0.0.255 scope global dynamic ens4
valid_lft 38533sec preferred_lft 38533sec
inet6 fe80::4a0f:cfff:feef:811/64 scope link
valid_lft forever preferred_lft forever
6: ibs4d1: <BROADCAST,MULTICAST> mtu 4092 qdisc noop state DOWN group default qlen 256
link/infiniband a0:00:03:00:fe:80:00:00:00:00:00:00:48:0f:cf:ff:ff:ef:08:12 brd 00:ff:ff:ff:ff:12:40:1b:ff:ff:00:00:00:00:00:00:ff:ff:ff:ff
参考资料：
但上面的方案对于不准备使用的网口（比如连网线都没插）来说是无效的。对于这样的网口，我们需要彻底的禁用他们。
systemctl | grep net-devices
sys-subsystem-net-devices-enp4s0.device loaded active plugged RTL8111/8168/8411 PCI Express Gigabit Ethernet Controller
sys-subsystem-net-devices-enp5s0.device loaded active plugged RTL810xE PCI Express Fast Ethernet controller
sys-subsystem-net-devices-enp6s0.device loaded active plugged RTL810xE PCI Express Fast Ethernet controller
sys-subsystem-net-devices-ens4.device loaded active plugged MT27520 Family [ConnectX-3 Pro] (InfiniBand FDR/Ethernet 10Gb/40Gb 2-port 544+FLR-QSFP Adapter)
sys-subsystem-net-devices-ibs4d1.device loaded active plugged MT27520 Family [ConnectX-3 Pro] (InfiniBand FDR/Ethernet 10Gb/40Gb 2-port 544+FLR-QSFP Adapter)
实践中发现网上的很多方法都无效，比如 ifconfig / ip 中的 down/up 命令，重启之后就无效了。
目前 systemd 接管的网卡情况如下：
networkctl
$ networkctl
IDX LINK TYPE OPERATIONAL SETUP
1 lo loopback carrier unmanaged
2 enp4s0 ether routable configured
3 enp5s0 ether no-carrier configuring
4 enp6s0 ether no-carrier configuring
5 ens4 ether routable configured
6 ibs4d1 infiniband off unmanaged
在这里，enp5s0 和 enp6s0 这两张网卡是我们希望禁用的。
参考以下资料的说明：
我们在 /usr/lib/systemd/network 目录下放置两个文件来申明我们要禁用两块网卡，操作如下：
cd /usr/lib/systemd/network
sudo vi 01-disable-enp5s0.network
创建文件，内容如下：
[Match]
MACAddress=00:e0:4c:54:17:3a
[Link]
Unmanaged=yes
cd /usr/lib/systemd/network
sudo vi 02-disable-enp6s0.network
创建文件，内容如下：
[Match]
MACAddress=00:e0:4c:54:17:3b
[Link]
Unmanaged=yes
注意：[Match] 这里用 mac 地址来匹配，不要用 name，实际测试中我发现用 name 做匹配和设置 Unmanaged 后，系统中的网卡会发生名字变化的情况，导致匹配出现问题。切记用 mac 地址进行匹配。
重启机器之后，看效果：
$ networkctl
$ networkctl
IDX LINK TYPE OPERATIONAL SETUP
1 lo loopback carrier unmanaged
2 enp4s0 ether routable configured
3 enp5s0 ether off unmanaged # 被禁用了
4 enp6s0 ether off unmanaged # 被禁用了
5 ens4 ether routable configured
6 ibs4d1 infiniband off unmanaged # 这个口本来被禁用了
增加要管理的网卡
有某台机器，出现了网卡状态为 down 的情况，造成无法使用，原因不明。
$ ip addr
......
5: ens4: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN group default qlen 1000
link/ether 70:10:6f:aa:2a:81 brd ff:ff:ff:ff:ff:ff
$ networkctl
IDX LINK TYPE OPERATIONAL SETUP
1 lo loopback carrier unmanaged
2 enp4s0 ether routable configured
3 enp5s0 ether off unmanaged
4 enp6s0 ether off unmanaged
5 ens4 ether off unmanaged
6 ibs4d1 infiniband off unmanaged
解决方法：
cd /usr/lib/systemd/network
vi 03-ens4-dhcp.network
输入以下内容：
[Match]
MACAddress=70:10:6f:aa:2a:81
[Link]
Unmanaged=no
[Network]
DHCP=yes
重启即可。
4.7 - 安装Homebrew
Homebrew 是一个linux和mac上的应用管理工具,方便安装其他软件
安装
准备工作:
sudo apt-get install build-essential
开始安装:
/bin/bash -c "$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/HEAD/install.sh)"
==> This script will install:
/home/linuxbrew/.linuxbrew/bin/brew
/home/linuxbrew/.linuxbrew/share/doc/homebrew
/home/linuxbrew/.linuxbrew/share/man/man1/brew.1
/home/linuxbrew/.linuxbrew/share/zsh/site-functions/_brew
/home/linuxbrew/.linuxbrew/etc/bash_completion.d/brew
/home/linuxbrew/.linuxbrew/Homebrew
==> The following new directories will be created:
/home/linuxbrew/.linuxbrew/bin
/home/linuxbrew/.linuxbrew/etc
/home/linuxbrew/.linuxbrew/include
/home/linuxbrew/.linuxbrew/lib
/home/linuxbrew/.linuxbrew/sbin
/home/linuxbrew/.linuxbrew/share
/home/linuxbrew/.linuxbrew/var
/home/linuxbrew/.linuxbrew/opt
/home/linuxbrew/.linuxbrew/share/zsh
/home/linuxbrew/.linuxbrew/share/zsh/site-functions
/home/linuxbrew/.linuxbrew/var/homebrew
/home/linuxbrew/.linuxbrew/var/homebrew/linked
/home/linuxbrew/.linuxbrew/Cellar
/home/linuxbrew/.linuxbrew/Caskroom
/home/linuxbrew/.linuxbrew/Frameworks
==> Downloading and installing Homebrew...
==> Installation successful!
==> Homebrew has enabled anonymous aggregate formulae and cask analytics.
Read the analytics documentation (and how to opt-out) here:
https://docs.brew.sh/Analytics
No analytics data has been sent yet (nor will any be during this install run).
==> Homebrew is run entirely by unpaid volunteers. Please consider donating:
https://github.com/Homebrew/brew#donations
==> Next steps:
- Run these two commands in your terminal to add Homebrew to your PATH:
echo 'eval "$(/home/linuxbrew/.linuxbrew/bin/brew shellenv)"' >> /home/sky/.zprofile
eval "$(/home/linuxbrew/.linuxbrew/bin/brew shellenv)"
- Install Homebrew's dependencies if you have sudo access:
sudo apt-get install build-essential
For more information, see:
https://docs.brew.sh/Homebrew-on-Linux
- We recommend that you install GCC:
brew install gcc
- Run brew help to get started
- Further documentation:
https://docs.brew.sh
按照提示执行:
echo 'eval "$(/home/linuxbrew/.linuxbrew/bin/brew shellenv)"' >> /home/sky/.zprofile
eval "$(/home/linuxbrew/.linuxbrew/bin/brew shellenv)"
建议安装 gcc,那就装吧:
brew install gcc
参考资料
4.8 - [归档]添加新用户
添加新用户以便日常使用
ubuntu server 20.04 版本在安装时就需要设置用户名，而不是默认只有root账号。
添加新用户
默认安装后只有root账户，肯定不能直接用root。
注： 如果是用vmware自动安装，则会提前录入一个用户名，安装完成之后就可以直接用这个用户名。这样就可以跳过这个步骤。
因此增加一个日常使用的用户，这个用户需要拥有 sudo 的权限，以便在必要时可以得到 root 权限：
sudo adduser sky
sudo adduser sky sudo
后续可以通过 passwd 命令修改密码：
sudo passwd sky
5 - 网络配置
Ubuntu Server安装后的网络配置工作
5.1 - 配置静态IP
配置静态IP地址
通常ip地址采用 dhcp，然后在路由器上绑定 IP 地址和 mac 地址即可。但在使用大量虚拟机时，每次都去修改路由器增加静态地址绑定比较麻烦，因此还是有必要在需要时设置静态IP地址。
使用 NetworkManager
适用于 ubuntu 20.04 版本
设置前先安装 network-manager：
sudo apt install network-manager
安全起见，备份原有的配置文件：
sudo cp /etc/netplan/00-installer-config.yaml /etc/netplan/00-installer-config.yaml.original
修改 /etc/netplan 的配置文件，如 00-installer-config.yaml，
sudo vi /etc/netplan/00-installer-config.yaml
将需要配置为静态IP地址的网卡设置 dhcp4: false ，然后手工配置：
network:
version: 2
renderer: NetworkManager
ethernets:
wan1:
match:
macaddress: 00:0c:29:23:d3:de
set-name: wan1
dhcp4: false
addresses: [192.168.0.21/24]
gateway4: 192.168.0.1
nameservers:
addresses: [192.168.0.1]
wan2:
match:
macaddress: 48:0f:cf:ef:08:11
set-name: wan2
dhcp4: true
使用 Networkd
适用于 ubuntu 22.04 / 22.10 / 23.04 版本
安全起见，备份原有的配置文件：
sudo cp /etc/netplan/00-installer-config.yaml /etc/netplan/00-installer-config.yaml.original
修改 /etc/netplan 的配置文件，如 00-installer-config.yaml，
sudo vi /etc/netplan/00-installer-config.yaml
手工配置：
network:
renderer: networkd
ethernets:
ens160:
addresses:
- 192.168.0.56/24
nameservers:
addresses: [192.168.0.1]
routes:
- to: default
via: 192.168.0.1
version: 2
5.2 - 网络代理快捷命令
设置启用网络代理的快捷命令，方便随时开启和关闭网络代理
手动启用代理
将以下内容添加到 .zshrc :
# proxy
alias proxyon='export all_proxy=socks5://192.168.0.1:7891;export http_proxy=http://192.168.0.1:7890;export https_proxy=http://192.168.0.1:7890;export no_proxy=127.0.0.1,localhost,local,.local,.lan,192.168.0.0/16,10.0.0.0/16'
alias proxyoff='unset all_proxy http_proxy https_proxy no_proxy'
背景：我的代理安装在路由器上，http端口为 3333， socks5 端口为 23456
给git配置代理
vi ~/.ssh/config ，内容如下：
Host github.com
HostName github.com
User git
# http proxy
#ProxyCommand socat - PROXY:192.168.0.1:%h:%p,proxyport=7890
# socks5 proxy
ProxyCommand nc -v -x 192.168.0.1:7891 %h %p
5.3 - 安装配置Samba文件共享
在linux mint上安装Samba，进行文件共享
安装samba
直接apt安装，然后设置数据所在的路径。
sudo apt-get install samba
cd
mkdir -p data/samba
chmod 777 data/samba
配置samba
sudo vi /etc/samba/smb.conf
打开配置文件，在文件末尾添加以下内容：
[share]
path = /home/sky/data/samba
valid users = sky
writable = yes
创建samba用户:
sudo smbpasswd -a sky
重启samba服务
sudo service smbd restart
访问samba
在其他linux机器上使用地址 smb://172.168.0.10 访问，在windows下使用地址 \\172.0.0.10。
参考资料
- Ubuntu 20 开启samba文件共享
- samba升级_Ubuntu20.04升级后共享文件打不开处理方法 : 如果遇到samba版本问题导致的不能访问，可以参考这个文章
5.4 - 安装配置nfs文件共享
在linux mint上安装nfs，进行文件共享
配置nfs服务器端
安装nfs-server
sudo apt update
sudo apt install nfs-kernel-server
查看 nfs-server 的状态：
$ sudo systemctl status nfs-server
● nfs-server.service - NFS server and services
Loaded: loaded (/lib/systemd/system/nfs-server.service; enabled; vendor pr>
Active: active (exited) since Wed 2021-12-29 00:45:44 CST; 5min ago
Main PID: 758742 (code=exited, status=0/SUCCESS)
Tasks: 0 (limit: 154080)
Memory: 0B
CGroup: /system.slice/nfs-server.service
Dec 29 00:45:43 skyserver systemd[1]: Starting NFS server and services...
Dec 29 00:45:44 skyserver systemd[1]: Finished NFS server and services.
创建nfs共享目录
sudo mkdir /mnt/nfs-share
让所有的客户端都可以访问所有的文件，修改文件的所有者和许可：
sudo chown nobody:nogroup /mnt/nfs-share
sudo chmod -R 777 /mnt/nfs-share
授权客户端访问nfs server
sudo vi /etc/exports 打开文件，为每个客户端授权访问:
/mnt/nfs-share client-IP(rw,sync,no_subtree_check)
如果有多个客户端则需要重复多次授权，也可以通过子网掩码一次性授权：
/mnt/nfs-share 192.168.0.0/24(rw,sync,no_subtree_check)
/mnt/nfs-share 10.0.0.0/24(rw,sync,no_subtree_check)
参数解释：
- rw (Read and Write)
- sync (Write changes to disk before applying them)
- no_subtree_check (Avoid subtree checking )
执行下面命令进行export：
sudo exportfs -a
配置防火墙
关闭防火墙，或者设置防火墙规则:
sudo ufw allow from 192.168.0.0/24 to any port nfs
sudo ufw allow from 10.0.0.0/24 to any port nfs
增加nfs共享的硬盘
服务器机器上有一块4t的ssd和两块3t的旧硬盘，准备通过nfs共享出来，方便其他机器访问。
可以通过fdisk命令获取相关的硬盘和分区信息：
$ fdisk -l
......
Disk /dev/sda: 2.75 TiB, 3000878383104 bytes, 5861090592 sectors
Device Start End Sectors Size Type
/dev/sda1 2048 5861089279 5861087232 2.7T Linux filesystem
Disk /dev/sdb: 2.75 TiB, 3000592982016 bytes, 5860533168 sectors
Device Start End Sectors Size Type
/dev/sdb1 2048 5860532223 5860530176 2.7T Linux filesystem
Disk /dev/nvme1n1: 3.5 TiB, 3840755982336 bytes, 7501476528 sectors
Device Start End Sectors Size Type
/dev/nvme1n1p1 2048 7501475839 7501473792 3.5T Linux filesystem
然后查分区对应的uuid备用:
$ ls -l /dev/disk/by-uuid/
......
lrwxrwxrwx 1 root root 10 Jan 16 12:34 7c3a3aca-9cde-48a0-957b-eead5b2ab7dc -> ../../sda1
lrwxrwxrwx 1 root root 10 Jan 16 12:34 fcae6bde-4789-4afe-b164-c7189a0bdf5f -> ../../sdb1
lrwxrwxrwx 1 root root 15 Jan 17 01:35 561fe530-4888-4759-97db-f36f607ca18e -> ../../nvme1n1p1
$ sudo mkdir /mnt/e
$ sudo mkdir /mnt/f
sudo vi /etc/fstab 增加挂载信息:
# two old disks
/dev/disk/by-uuid/7c3a3aca-9cde-48a0-957b-eead5b2ab7dc /mnt/e ext4 defaults 0 1
/dev/disk/by-uuid/fcae6bde-4789-4afe-b164-c7189a0bdf5f /mnt/f ext4 defaults 0 1
# one ssd disk
/dev/disk/by-uuid/561fe530-4888-4759-97db-f36f607ca18e /mnt/d ext4 defaults 0 1
执行 sudo mount -av 立即生效。
加到nfs共享中：
sudo chown nobody:nogroup /mnt/d
sudo chmod -R 777 /mnt/d
sudo chown nobody:nogroup /mnt/e
sudo chmod -R 777 /mnt/e
sudo chown nobody:nogroup /mnt/f
sudo chmod -R 777 /mnt/f
sudo vi /etc/exports 增加授权访问:
/mnt/d 192.168.0.0/24(rw,sync,no_subtree_check)
/mnt/d 10.0.0.0/24(rw,sync,no_subtree_check)
/mnt/e 192.168.0.0/24(rw,sync,no_subtree_check)
/mnt/e 10.0.0.0/24(rw,sync,no_subtree_check)
/mnt/f 192.168.0.0/24(rw,sync,no_subtree_check)
/mnt/f 10.0.0.0/24(rw,sync,no_subtree_check)
执行 sudo exportfs -a 立即生效。
配置nfs客户端
安装nfs软件
sudo apt update
sudo apt install nfs-common
挂载nfs server到本地
创建用来挂载 nfs server的本地目录：
sudo mkdir -p /mnt/nfs-skyserver
sudo mkdir -p /mnt/d
sudo mkdir -p /mnt/e
sudo mkdir -p /mnt/f
挂载 nfs server 共享目录到这个客户端本地目录:
sudo mount 10.0.0.40:/mnt/nfs-share /mnt/nfs-skyserver
sudo mount 10.0.0.40:/mnt/d /mnt/d
sudo mount 10.0.0.40:/mnt/e /mnt/e
sudo mount 10.0.0.40:/mnt/f /mnt/f
验证一下：
cd /mnt/nfs-skyserver
touch a.txt
回到服务器端那边检查一下看文件是否创建。
为了方便使用，创建一些软链接：
mkdir -p ~/data
cd ~/data
ln -s /mnt/nfs-skyserver skyserver
ln -s /mnt/d d
ln -s /mnt/e e
ln -s /mnt/f f
设置永久挂载
上面的挂载在重启之后就会消失，/mnt/nfs-skyserver 会变成一个普通的目录。
为了在机器重启之后继续自动挂载, sudo vi /etc/fstab 打开文件增加以下内容:
# nfs from skyserver
10.0.0.40:/mnt/nfs-share /mnt/nfs-skyserver nfs defaults,timeo=15,retrans=5,_netdev 0 0
10.0.0.40:/mnt/d /mnt/d nfs defaults,timeo=15,retrans=5,_netdev 0 0
10.0.0.40:/mnt/e /mnt/e nfs defaults,timeo=15,retrans=5,_netdev 0 0
10.0.0.40:/mnt/f /mnt/f nfs defaults,timeo=15,retrans=5,_netdev 0 0
timeout 时间不要放太长，以备skyserver服务器没有开机时其他机器不至于在启动时阻塞太长时间。
参考资料
5.5 - 安装配置sftp
在ubuntu server上安装sftp
准备group和user
sudo addgroup sftpgroup
sudo useradd -m sftpuser -g sftpgroup
sudo passwd sftpuser
sudo chmod 700 /home/sftpuser/
配置 ssh service
修改 /etc/ssh/sshd_config
Match group sftpgroup
ChrootDirectory /home
X11Forwarding no
AllowTcpForwarding no
ForceCommand internal-sftp
6 - 内核配置
Ubuntu Server内核更新配置工作
6.1 - 更新Linux内核
更新Linux内核
简单更新小版本
在ssh登录到ubuntu server时，有时会看到类似的提示：
10 updates can be applied immediately.
To see these additional updates run: apt list --upgradable
查看具体内容:
sudo apt list --upgradable
[sudo] password for sky:
Listing... Done
linux-generic/focal-proposed 5.4.0.97.101 amd64 [upgradable from: 5.4.0.96.100]
linux-headers-generic/focal-proposed 5.4.0.97.101 amd64 [upgradable from: 5.4.0.96.100]
linux-image-generic/focal-proposed 5.4.0.97.101 amd64 [upgradable from: 5.4.0.96.100]
linux-libc-dev/focal-proposed 5.4.0-97.110 amd64 [upgradable from: 5.4.0-96.109]
通常这种都是小版本的更新提示，比如我这里就是安装了 5.4.0-96 然后提示有 5.4.0-97 版本的更新。
升级也非常简单：
sudo apt upgrade
过程中相对复杂的已有的 dkms 模块要在新内核上重新编译，一般时间会比较长。
升级晚之后重启，然后检查一下 dkms：
dkms status
iser, 4.9, 5.4.0-94-generic, x86_64: installed
iser, 4.9, 5.4.0-96-generic, x86_64: installed
iser, 4.9, 5.4.0-97-generic, x86_64: installed
isert, 4.9, 5.4.0-94-generic, x86_64: installed
isert, 4.9, 5.4.0-96-generic, x86_64: installed
isert, 4.9, 5.4.0-97-generic, x86_64: installed
kernel-mft-dkms, 4.15.1, 5.4.0-94-generic, x86_64: installed
kernel-mft-dkms, 4.15.1, 5.4.0-96-generic, x86_64: installed
kernel-mft-dkms, 4.15.1, 5.4.0-97-generic, x86_64: installed
knem, 1.1.4.90mlnx1, 5.4.0-94-generic, x86_64: installed
knem, 1.1.4.90mlnx1, 5.4.0-96-generic, x86_64: installed
knem, 1.1.4.90mlnx1, 5.4.0-97-generic, x86_64: installed
mlnx-ofed-kernel, 4.9, 5.4.0-94-generic, x86_64: installed
mlnx-ofed-kernel, 4.9, 5.4.0-96-generic, x86_64: installed
mlnx-ofed-kernel, 4.9, 5.4.0-97-generic, x86_64: installed
rshim, 1.18, 5.4.0-94-generic, x86_64: installed
rshim, 1.18, 5.4.0-96-generic, x86_64: installed
rshim, 1.18, 5.4.0-97-generic, x86_64: installed
srp, 4.9, 5.4.0-94-generic, x86_64: installed
srp, 4.9, 5.4.0-96-generic, x86_64: installed
srp, 4.9, 5.4.0-97-generic, x86_64: installed
我这里因为有多个内核版本，所以模块比较多，后面会删除不用的旧版本内核。
手动更新大版本
对于大版本更新，需要手工。
考虑到 22.04 版本不稳定，试用之下发现有一些莫名其妙的问题，不想折腾，继续试用 20.04版本，但是希望可以把内核从 5.4 升级到更新的版本，比如 5.15.
先看一下有哪些版本可以选择：
sudo apt update
# 下面这个 apt list 命令要在 bash 下才能成功，先临时切换到 bash
bash
sudo apt list linux-headers-5.15.*-*-generic linux-image-5.15.*-*-generic
linux-headers-5.15.0-33-generic/focal-updates,focal-security 5.15.0-33.34~20.04.1 amd64
linux-headers-5.15.0-41-generic/focal-updates,focal-security 5.15.0-41.44~20.04.1 amd64
linux-headers-5.15.0-43-generic/focal-updates,focal-security 5.15.0-43.46~20.04.1 amd64
linux-headers-5.15.0-46-generic/focal-updates,focal-security 5.15.0-46.49~20.04.1 amd64
linux-headers-5.15.0-48-generic/focal-updates,focal-security 5.15.0-48.54~20.04.1 amd64
linux-headers-5.15.0-50-generic/focal-updates,focal-security 5.15.0-50.56~20.04.1 amd64
linux-headers-5.15.0-52-generic/focal-updates,focal-security 5.15.0-52.58~20.04.1 amd64
linux-headers-5.15.0-53-generic/focal-updates,focal-security 5.15.0-53.59~20.04.1 amd64
linux-headers-5.15.0-56-generic/focal-updates,focal-security 5.15.0-56.62~20.04.1 amd64
linux-headers-5.15.0-57-generic/focal-updates,focal-security 5.15.0-57.63~20.04.1 amd64
linux-headers-5.15.0-58-generic/focal-updates,focal-security 5.15.0-58.64~20.04.1 amd64
linux-image-5.15.0-33-generic/focal-updates,focal-security 5.15.0-33.34~20.04.1 amd64
linux-image-5.15.0-41-generic/focal-updates,focal-security 5.15.0-41.44~20.04.1 amd64
linux-image-5.15.0-43-generic/focal-updates,focal-security 5.15.0-43.46~20.04.1 amd64
linux-image-5.15.0-46-generic/focal-updates,focal-security 5.15.0-46.49~20.04.1 amd64
linux-image-5.15.0-48-generic/focal-updates,focal-security 5.15.0-48.54~20.04.1 amd64
linux-image-5.15.0-50-generic/focal-updates,focal-security 5.15.0-50.56~20.04.1 amd64
linux-image-5.15.0-52-generic/focal-updates,focal-security 5.15.0-52.58~20.04.1 amd64
linux-image-5.15.0-53-generic/focal-updates,focal-security 5.15.0-53.59~20.04.1 amd64
linux-image-5.15.0-56-generic/focal-updates,focal-security 5.15.0-56.62~20.04.1 amd64
linux-image-5.15.0-57-generic/focal-updates,focal-security 5.15.0-57.63~20.04.1 amd64
linux-image-5.15.0-58-generic/focal-updates,focal-security 5.15.0-58.64~20.04.1 amd64
试试最新的 5.15.0-58
sudo apt install linux-headers-5.15.0-58-generic linux-image-5.15.0-58-generic
安装完成后重启，检查：
uname -a
Linux skyserver 5.15.0-58-generic #64~20.04.1-Ubuntu SMP Fri Jan 6 16:42:31 UTC 2023 x86_64 x86_64 x86_64 GNU/Linux
可以看到 linux 内核已经更新到 5.15。
但这只是升级内核，发行版本还是会继续保持不变：
lsb_release -a
$ lsb_release -a
No LSB modules are available.
Distributor ID: Ubuntu
Description: Ubuntu 20.04.5 LTS
Release: 20.04
Codename: focal
参考资料：
6.2 - 删除Linux内核
删除不用的Linux内核
多次升级之后，系统内就会累计有多个内核版本，可以考虑删除旧的不用的内核。
参考：
https://askubuntu.com/questions/1253347/how-to-easily-remove-old-kernels-in-ubuntu-20-04-lts
vi remove_old_kernels.sh
新建一个文件内容如下：
#!/bin/bash
# Run this script without any param for a dry run
# Run the script with root and with exec param for removing old kernels after checking
# the list printed in the dry run
uname -a
IN_USE=$(uname -a | awk '{ print $3 }')
if [[ $IN_USE == *-generic ]]
then
IN_USE=${IN_USE::-8}
fi
echo "Your in use kernel is $IN_USE"
OLD_KERNELS=$(
dpkg --list |
grep -v "$IN_USE" |
grep -v "linux-headers-generic" |
grep -v "linux-image-generic" |
grep -Ei 'linux-image|linux-headers|linux-modules' |
awk '{ print $2 }'
)
echo "Old Kernels to be removed:"
echo "$OLD_KERNELS"
if [ "$1" == "exec" ]; then
for PACKAGE in $OLD_KERNELS; do
yes | apt purge "$PACKAGE"
done
fi
执行
bash ./remove_old_kernels.sh
看查看到要删除的内核版本和相关的包，确认没有问题之后再通过
sudo bash ./remove_old_kernels.sh exec
进行实际删除。
之后重启，执行：
dpkg --list | grep -Ei 'linux-image|linux-headers|linux-modules'
检查现有的内核：
ii linux-headers-5.4.0-97 5.4.0-97.110 all Header files related to Linux kernel version 5.4.0
ii linux-headers-5.4.0-97-generic 5.4.0-97.110 amd64 Linux kernel headers for version 5.4.0 on 64 bit x86 SMP
ii linux-headers-generic 5.4.0.97.101 amd64 Generic Linux kernel headers
ii linux-image-5.4.0-97-generic 5.4.0-97.110 amd64 Signed kernel image generic
ii linux-image-generic 5.4.0.97.101 amd64 Generic Linux kernel image
ii linux-modules-5.4.0-97-generic 5.4.0-97.110 amd64 Linux kernel extra modules for version 5.4.0 on 64 bit x86 SMP
ii linux-modules-extra-5.4.0-97-generic 5.4.0-97.110 amd64 Linux kernel extra modules for version 5.4.0 on 64 bit x86 SMP
7 - 硬件配置
Ubuntu Server硬件相关配置工作
7.1 - 查看cpu频率
查看当前cpu各个核心的实时频率
cpufreq-info
需要安装 cpufrequtils :
sudo apt-get install cpufrequtils
然后执行:
$ cpufreq-info
cpufrequtils 008: cpufreq-info (C) Dominik Brodowski 2004-2009
Report errors and bugs to cpufreq@vger.kernel.org, please.
analyzing CPU 0:
driver: intel_pstate
CPUs which run at the same hardware frequency: 0
CPUs which need to have their frequency coordinated by software: 0
maximum transition latency: 4294.55 ms.
hardware limits: 1.20 GHz - 3.50 GHz
available cpufreq governors: performance, powersave
current policy: frequency should be within 1.20 GHz and 3.50 GHz.
The governor "powersave" may decide which speed to use
within this range.
current CPU frequency is 1.20 GHz.
analyzing CPU 1:
driver: intel_pstate
CPUs which run at the same hardware frequency: 1
CPUs which need to have their frequency coordinated by software: 1
maximum transition latency: 4294.55 ms.
hardware limits: 1.20 GHz - 3.50 GHz
available cpufreq governors: performance, powersave
current policy: frequency should be within 1.20 GHz and 3.50 GHz.
The governor "powersave" may decide which speed to use
within this range.
current CPU frequency is 1.20 GHz.
......
如果想快速概括的查看所有内核的实时频率，可以这样：
$ cpufreq-info | grep "current CPU frequency"
current CPU frequency is 1.38 GHz.
current CPU frequency is 1.23 GHz.
current CPU frequency is 1.20 GHz.
current CPU frequency is 1.20 GHz.
current CPU frequency is 1.20 GHz.
current CPU frequency is 1.20 GHz.
current CPU frequency is 1.20 GHz.
......
也可以这样每秒钟刷新一下：
watch -n1 "lscpu | grep MHz | awk '{print $1}'";
auto-cpufreq
https://snapcraft.io/auto-cpufreq
参考资料
7.2 - cpu压力测试
对cpu进行压力测试
主要是想看一下压力测试时cpu的频率，看是否工作在性能模式。
备注： 对于x99主板，则同时可以检验一下鸡血bios是否生效
sysbench
安装sysbench：
sudo apt install sysbench
执行cpu压力测试：
sysbench cpu --threads=40 run
很欣喜的看到x99双路主板上两个e5 2666 v3 cpu在鸡血bios之后都可以跑在全核3.5G的频率：
cpufreq-info | grep "current CPU"
current CPU frequency is 3.49 GHz.
current CPU frequency is 3.49 GHz.
current CPU frequency is 3.49 GHz.
current CPU frequency is 3.49 GHz.
current CPU frequency is 3.49 GHz.
current CPU frequency is 3.49 GHz.
current CPU frequency is 3.49 GHz.
current CPU frequency is 3.49 GHz.
current CPU frequency is 3.49 GHz.
current CPU frequency is 3.49 GHz.
current CPU frequency is 3.49 GHz.
current CPU frequency is 3.49 GHz.
current CPU frequency is 3.49 GHz.
current CPU frequency is 3.49 GHz.
current CPU frequency is 3.49 GHz.
current CPU frequency is 3.49 GHz.
current CPU frequency is 3.49 GHz.
current CPU frequency is 3.49 GHz.
current CPU frequency is 3.49 GHz.
current CPU frequency is 3.49 GHz.
current CPU frequency is 3.49 GHz.
current CPU frequency is 3.49 GHz.
current CPU frequency is 3.49 GHz.
current CPU frequency is 3.49 GHz.
current CPU frequency is 3.49 GHz.
current CPU frequency is 3.49 GHz.
current CPU frequency is 3.49 GHz.
current CPU frequency is 3.49 GHz.
current CPU frequency is 3.49 GHz.
current CPU frequency is 3.49 GHz.
current CPU frequency is 3.49 GHz.
current CPU frequency is 3.49 GHz.
current CPU frequency is 3.49 GHz.
current CPU frequency is 3.49 GHz.
current CPU frequency is 3.49 GHz.
current CPU frequency is 3.49 GHz.
current CPU frequency is 3.49 GHz.
current CPU frequency is 3.49 GHz.
current CPU frequency is 3.49 GHz.
current CPU frequency is 3.49 GHz.
stress
参考资料
7.3 - 电源模式
设置CPU电源模式
查看电源模式
$ cpufreq-info
cpufrequtils 008: cpufreq-info (C) Dominik Brodowski 2004-2009
Report errors and bugs to cpufreq@vger.kernel.org, please.
analyzing CPU 0:
driver: intel_pstate
CPUs which run at the same hardware frequency: 0
CPUs which need to have their frequency coordinated by software: 0
maximum transition latency: 4294.55 ms.
hardware limits: 1.20 GHz - 3.50 GHz
available cpufreq governors: performance, powersave
current policy: frequency should be within 1.20 GHz and 3.50 GHz.
The governor "powersave" may decide which speed to use
within this range.
current CPU frequency is 1.20 GHz.
设置电源模式
设置电源模式为 “performance”:
sudo bash -c 'for i in {0..31}; do cpufreq-set -c $i -g performance; done'
设置电源模式为 “powersave”:
sudo bash -c 'for i in {0..31}; do cpufreq-set -c $i -g powersave; done'
设置电源模式为 “ondemand”:
sudo bash -c 'for i in {0..31}; do cpufreq-set -c $i -g ondemand; done'