Rocky Linux 9.1 新手入门指南

原创

ghostwritten 2023-05-03 10:42:52 博主文章分类：linux ©著作权

文章标签 linux 运维 bash rocky 网络 文章分类 Java 后端开发

©著作权归作者所有：来自51CTO博客作者ghostwritten的原创作品，请联系作者获取转载授权，否则将追究法律责任

Rocky Linux 9.1 新手入门指南_运维

文章目录

安装系统
配置网络

NetworkManager 配置
默认 ipaddress 配置文件
nmtui 配置 ipaddress
nmcli 配置 ipaddress
网络管理
网关配置
检查网络连接
配置 bond

设置主机名
路由转发
防火墙
selinux
配置时间和位置
修改最大文件句柄数和最大进程数
设置 swappiness
关闭透明大页面transparent_hugepage
启动或禁用服务
NTP时间同步
yum 与 dnf
dnf 更新软件库
安装软件
使用Moduler存储库
更新阿里云 yum 源
用户管理
给用户添加sudo权限

安装系统

下载 Rocky Linux 9.1 ISO

Rocky Linux 9.1 新手入门指南_bash_02

Rocky Linux 9.1 新手入门指南_运维_03

Rocky Linux 9.1 新手入门指南_bash_04

配置密码—— root/root
配置时间和日期——上海
安装目的地——默认盘

自动安装后，重启即可。

配置网络

NetworkManager 配置

从 Rocky Linux 9 开始，网络配置发生了很多变化。其中一个主要变化是从网络脚本（仍然可以安装但实际上已弃用）转向使用网络管理器和密钥文件，而不是基于文件ifcfg。NetworkManager从 9 开始，优先keyfiles于以前的ifcfg文件。由于这是现在的默认设置，因此配置网络的行为现在应该采用默认设置作为正确的做事方式，因为多年来的其他变化意味着最终会弃用和删除旧的实用程序。本指南将尝试引导您完成 Network Manager 的使用以及 Rocky Linux 9 中的最新更改。

$ systemctl status NetworkManager
● NetworkManager.service - Network Manager
     Loaded: loaded (/usr/lib/systemd/system/NetworkManager.service; enabled; vendor preset: enabled)
     Active: active (running) since Sat 2023-03-18 22:54:57 CST; 7min ago
       Docs: man:NetworkManager(8)
   Main PID: 935 (NetworkManager)
      Tasks: 3 (limit: 48882)
     Memory: 9.2M
        CPU: 293ms
     CGroup: /system.slice/NetworkManager.service
             └─935 /usr/sbin/NetworkManager --no-daemon

Mar 18 22:55:04 localhost.localdomain NetworkManager[935]: <info>  [1679151304.2070] policy: set 'ens192' (ens192) as d>
Mar 18 22:55:04 localhost.localdomain NetworkManager[935]: <info>  [1679151304.2225] device (ens192): state change: ip->
Mar 18 22:55:04 localhost.localdomain NetworkManager[935]: <info>  [1679151304.2359] device (ens192): state change: ip->
Mar 18 22:55:04 localhost.localdomain NetworkManager[935]: <info>  [1679151304.2365] device (ens192): state change: sec>
Mar 18 22:55:04 localhost.localdomain NetworkManager[935]: <info>  [1679151304.2399] manager: NetworkManager state is n>
Mar 18 22:55:04 localhost.localdomain NetworkManager[935]: <info>  [1679151304.2421] device (ens192): Activation: succe>
Mar 18 22:55:04 localhost.localdomain NetworkManager[935]: <info>  [1679151304.2451] manager: NetworkManager state is n>
Mar 18 22:55:04 localhost.localdomain NetworkManager[935]: <info>  [1679151304.2475] manager: startup complete
Mar 18 22:55:04 localhost.localdomain NetworkManager[935]: <info>  [1679151304.2483] policy: set-hostname: set hostname>
Mar 18 22:55:05 localhost.localdomain NetworkManager[935]: <info>

输出NetworkManager 配置文件

$ NetworkManager --print-config
# NetworkManager configuration: /etc/NetworkManager/NetworkManager.conf (run: 15-carrier-timeout.conf)

[main]
# plugins=
# rc-manager=auto
# auth-polkit=true
# dhcp=internal
# iwd-config-path=
configure-and-quit=no

[logging]
# backend=journal
# audit=false

[device]
# wifi.backend=wpa_supplicant

# no-auto-default file "/var/lib/NetworkManager/no-auto-default.state"

请注意配置文件顶部的引用，keyfile后跟ifcfg-rh. 这意味着这keyfile是默认值。任何时候您运行任何工具NetworkManager来配置接口（例如：nmcli或nmtui），它都会自动构建或更新密钥文件。

默认 ipaddress 配置文件

在 Rocky Linux 8 中，网络配置的存储位置在/etc/sysconfig/Network-Scripts/. 在 Rocky Linux 9 中，密钥文件的新默认存储位置是/etc/NetworkManager/system-connections

ipaddress 默认配置文件内容

$ cat /etc/NetworkManager/system-connections/ens192.nmconnection
[connection]
id=ens192
uuid=7895bdc1-c51e-3986-a805-96ac9b373f87
type=ethernet
autoconnect-priority=-999
interface-name=ens192
timestamp=1679149724

[ethernet]

[ipv4]
method=auto

[ipv6]
addr-gen-mode=eui64
method=auto

[proxy]

nmcli device show

Rocky Linux 9.1 新手入门指南_rocky_05

nmtui 配置 ipaddress

执行：nmtui

Rocky Linux 9.1 新手入门指南_网络_06

它已经在我们需要“编辑连接”的选择上，所以点击该TAB键以突出显示“确定”并点击ENTER；

这将打开一个屏幕，显示机器上的以太网连接，并允许您选择一个。在我们的例子中，只有一个，所以它已经高亮显示了，我们只需要按下TAB键直到“编辑”高亮显示，然后点击ENTER

Rocky Linux 9.1 新手入门指南_rocky_07

从“Automatic”切换到“manual”

Rocky Linux 9.1 新手入门指南_bash_08

Rocky Linux 9.1 新手入门指南_bash_09

Rocky Linux 9.1 新手入门指南_linux_10

选择 ”ok“，点击”enter“

Rocky Linux 9.1 新手入门指南_linux_11

您也可以停用和重新激活您的界面nmtui，但让我们使用nmcli. 这样我们就可以把接口的去激活和接口的重新激活串起来，这样接口就不会长时间宕机了：

nmcli con down ens192 && nmcli con up ens192

或者

ifdown ens192&& ifup ens192

查看 ipaddress

$ ip addr
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host
       valid_lft forever preferred_lft forever
2: ens192: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 1000
    link/ether 00:50:56:83:41:31 brd ff:ff:ff:ff:ff:ff
    altname enp11s0
    inet 192.168.10.17/24 brd 192.168.10.255 scope global noprefixroute ens192
       valid_lft forever preferred_lft forever
    inet6 fe80::250:56ff:fe83:4131/64 scope link noprefixroute
       valid_lft forever preferred_lft forever

$  nmcli device show ens192
GENERAL.DEVICE:                         ens192
GENERAL.TYPE:                           ethernet
GENERAL.HWADDR:                         00:50:56:83:41:31
GENERAL.MTU:                            1500
GENERAL.STATE:                          100 (connected)
GENERAL.CONNECTION:                     ens192
GENERAL.CON-PATH:                       /org/freedesktop/NetworkManager/ActiveConnection/2
WIRED-PROPERTIES.CARRIER:               on
IP4.ADDRESS[1]:                         192.168.10.17/24
IP4.GATEWAY:                            192.168.10.1
IP4.ROUTE[1]:                           dst = 192.168.10.0/24, nh = 0.0.0.0, mt = 100
IP4.ROUTE[2]:                           dst = 0.0.0.0/0, nh = 192.168.10.1, mt = 100
IP4.DNS[1]:                             8.8.8.8
IP6.ADDRESS[1]:                         fe80::250:56ff:fe83:4131/64
IP6.GATEWAY:                            --
IP6.ROUTE[1]:                           dst = fe80::/64, nh = ::, mt = 1024

nmcli 配置 ipaddress

nmcli con mod enp0s3 ipv4.gateway '192.168.10.1' && nmcli con mod enp0s3 ipv4.address '192.168.10.17' && nmcli con mod enp0s3 ipv4.method auto && nmcli con down enp0s3 && nmcli con up enp0s3

配置DNS

nmcli con mod enp0s3 ipv4.dns 8.8.8.8,8.8.4.4,192.168.1.1
nmcli con down enp0s3 && nmcli con up enp0s3

网络管理

启动或关闭接口

nmcli con down enp0s3 && nmcli con up enp0s3
ip link set enp0s3 down && ip link set enp0s3 up
ifdown ens192&& ifup ens192

分配一个静态地址

ip addr delete 192.168.1.151/24 dev enp0s3 && ip addr add 192.168.1.152/24 dev enp0s3

如果我们想要为接口分配第二个 IP 而不是删除 192.168.1.151 地址，我们只需添加第二个地址：

ip addr add 192.168.1.152/24 dev enp0s3

我们可以检查 IP 地址是否添加了

ip a show dev enp0s3

output：

2: enp0s3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000
link/ether 08:00:27:ba:ce:88 brd ff:ff:ff:ff:ff:ff
inet 192.168.1.151/24 brd 192.168.1.255 scope global noprefixroute enp0s3
   valid_lft forever preferred_lft forever
inet 192.168.1.152/24 scope global secondary enp0s3
   valid_lft forever preferred_lft forever
inet6 fe80::a00:27ff:feba:ce88/64 scope link noprefixroute 
   valid_lft forever preferred_lft forever

网关配置

ip route add default via 192.168.1.1 dev enp0s3

内核路由表可以显示为

ip route

或ip r简称。

这应该输出如下内容：

default via 192.168.1.1 dev enp0s3 
192.168.1.0/24 dev enp0s3 proto kernel scope link src 192.168.1.151 metric 100

检查网络连接

默认网关执行 ping 操作

ping -c3 192.168.1.1

ping 本地网络上的主机来测试您的 LAN 路由

ping -c3 192.168.1.10

ping 谷歌开放的 DNS 服务器

ping -c3 8.8.8.8

确保 DNS 解析正常工作

ping -c3 google.com

如果你的机器有多个接口，而你想从一个特定的接口进行测试，只需使用-Iping 选项：

ping -I enp0s3 -c3 192.168.1.10

配置 bond

$ cat /etc/sysconfig/network-scripts/ifcfg-ens160
TYPE=Ethernet
BOND_PORT_QUEUE_ID=0
NAME=ens160
UUID=f83c68e8-25e8-47a3-96a3-089999a3768d
DEVICE=ens160
ONBOOT=yes
MASTER=bond0
SLAVE=yes

$ cat /etc/sysconfig/network-scripts/ifcfg-ens224
TYPE=Ethernet
BOND_PORT_QUEUE_ID=0
NAME=ens224
UUID=7741f1bd-be25-4a5d-a6d9-de6682eaadbe
DEVICE=ens224
ONBOOT=yes
MASTER=bond0
SLAVE=yes


$ cat /etc/sysconfig/network-scripts/ifcfg-bond0
BONDING_OPTS="mode=active-backup miimon=100"
TYPE=Bond
BONDING_MASTER=yes
PROXY_METHOD=none
BROWSER_ONLY=no
BOOTPROTO=none
IPADDR=10.168.110.21
PREFIX=16
GATEWAY=10.168.1.1
DEFROUTE=yes
IPV4_FAILURE_FATAL=no
IPV6INIT=yes
IPV6_AUTOCONF=yes
IPV6_DEFROUTE=yes
IPV6_FAILURE_FATAL=no
IPV6_ADDR_GEN_MODE=default
NAME=bond0
DEVICE=bond0
ONBOOT=yes
DNS1=10.168.21.1
DNS2=10.168.1.1
RES_OPTIONS="single-request-reopen timeout:1 attempts:1 ndots:0 rotate"

#!/bin/bash
if [ $# -lt 3 ];
then
  echo "Missing arguments !!!"
  echo "Example: nmcli-bonding <BondMasterDevName> <BondSlaveDevName-1> <BondSlaveDevName-2>"
  exit 1
elif [ $# -gt 3 ];
then
  echo "$0: Too many arguments: $@"
  exit 1
else
  echo "We got some argument(s)"
  echo "=============================="
  echo "Bonding Master Device: $1"
  echo "Bonding Slave1 Device: $2"
  echo "Bonding Slave2 Device: $3"
  echo "=============================="
fi



master="$1"
slave1="$2"
slave2="$3"

#echo "Bond-master is : $master"
#echo "Bond-slave1 is : $slave1"
#echo "Bond-slave2 is : $slave2"


echo "---Prepare clean all connect......"
for i in `nmcli c | \
grep -o -- "[0-9a-fA-F]\{8\}-[0-9a-fA-F]\{4\}-[0-9a-fA-F]\{4\}-[0-9a-fA-F]\{4\}-[0-9a-fA-F]\{12\}"` ; \
do nmcli connection delete uuid $i ; \
done

#systemctl enable NetworkManager
#systemctl start NetworkManager

echo "---Create network bonding......"
nmcli connection add type bond con-name $master ifname $master miimon 100 mode 1 ip4 10.168.168.254/16 ipv4.gateway 10.168.1.1
nmcli connection modify $master ipv4.dns "10.168.21.1,10.168.1.1"
nmcli connection modify $master ipv4.dns-options "single-request-reopen timeout:1 attempts:1 ndots:0 rotate"

echo "---Add slave device......"
nmcli connection add type bond-slave con-name $slave1 ifname $slave1 master $master
nmcli connection add type bond-slave con-name $slave2 ifname $slave2 master $master

执行:

./nmcli-bonding.sh bond0 ens160 ens224

查看

$ cat /proc/net/bonding/bond0
Ethernet Channel Bonding Driver: v3.7.1 (April 27, 2011)

Bonding Mode: fault-tolerance (active-backup)
Primary Slave: None
Currently Active Slave: ens160
MII Status: up
MII Polling Interval (ms): 100
Up Delay (ms): 0
Down Delay (ms): 0
Peer Notification Delay (ms): 0

Slave Interface: ens160
MII Status: up
Speed: 10000 Mbps
Duplex: full
Link Failure Count: 0
Permanent HW addr: 00:50:56:81:17:43
Slave queue ID: 0

Slave Interface: ens224
MII Status: up
Speed: 10000 Mbps
Duplex: full
Link Failure Count: 0
Permanent HW addr: 00:50:56:81:f0:53
Slave queue ID: 0

查看link

$ ip -o link
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000\    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: ens160: <BROADCAST,MULTICAST,SLAVE,UP,LOWER_UP> mtu 1500 qdisc mq master bond0 state UP mode DEFAULT group default qlen 1000\    link/ether 00:50:56:81:17:43 brd ff:ff:ff:ff:ff:ff\    altname enp3s0
3: ens224: <BROADCAST,MULTICAST,SLAVE,UP,LOWER_UP> mtu 1500 qdisc mq master bond0 state UP mode DEFAULT group default qlen 1000\    link/ether 00:50:56:81:17:43 brd ff:ff:ff:ff:ff:ff permaddr 00:50:56:81:f0:53\    altname enp19s0
4: bond0: <BROADCAST,MULTICAST,MASTER,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000\    link/ether 00:50:56:81:17:43 brd ff:ff:ff:ff:ff:ff

设置主机名

hostnamctl set-hostname master

路由转发

$ modprobe br_netfilter
$ cat <<EOF>> /etc/sysctl.conf
net.ipv4.ip_forward = 1
net.bridge.bridge-nf-call-iptables=1
net.bridge.bridge-nf-call-ip6tables = 1
EOF
$ sysctl -p

防火墙

systemctl stop firewalld
systemctl disable firewalld
systemctl status firewalld

selinux

setenforce 0 && getenforce
sed -i 's/SELINUX=enforcing/SELINUX=disabled/g' /etc/selinux/config

配置时间和位置

timedatectl set-timezone Asia/Shanghai

修改最大文件句柄数和最大进程数

$ vim /etc/security/limits.conf
......
* soft nofile 102400
* hard nofile 102400

$ sysctl -p 
$ ulimit -n

设置 swappiness

设置swappiness，控制运行时内存的相对权重，过多的交换空间会引起GC耗时的激增.
临时设置指令：

sysctl -w vm.swappiness=10
#临时设置查看指令
cat /proc/sys/vm/swappiness

永久设置指令：

echo vm.swappiness = 10 >> /etc/sysctl.conf

关闭透明大页面transparent_hugepage

临时关闭指令1：

echo never > /sys/kernel/mm/transparent_hugepage/enabled

临时关闭指令2：

echo never > /sys/kernel/mm/transparent_hugepage/defrag

永久关闭，配置信息落盘到配置文件，机器重新有效。

$ vim /etc/rc.d/rc.local
.......
if test -f /sys/kernel/mm/transparent_hugepage/enabled;
then echo never > /sys/kernel/mm/transparent_hugepage/enabled
fi
if test -f /sys/kernel/mm/transparent_hugepage/defrag;
then echo never > /sys/kernel/mm/transparent_hugepage/defrag
fi

$ chmod +x /etc/rc.d/rc.local

启动或禁用服务

显示活动的服务列表

$ systemctl -t service
  UNIT                                                                  LOAD   ACTIVE SUB     DESCRIPTION
  auditd.service                                                        loaded active running Security Auditing Service
  crond.service                                                         loaded active running Command Scheduler
  dbus.service                                                          loaded active running D-Bus System Message Bus
● dnf-makecache.service                                                 loaded failed failed  dnf makecache
  dracut-shutdown.service                                               loaded active exited  Restore /run/initramfs on>
  getty@tty1.service                                                    loaded active running Getty on tty1
  import-state.service                                                  loaded active exited  Import network configurat>
  irqbalance.service                                                    loaded active running irqbalance daemon
  kdump.service                                                         loaded active exited  Crash recovery kernel arm>
  kmod-static-nodes.service                                             loaded active exited  Create list of required s>
  ldconfig.service                                                      loaded active exited  Rebuild Dynamic Linker Ca>
  lvm2-monitor.service                                                  loaded active exited  Monitoring of LVM2 mirror>
  lvm2-pvscan@8:3.service                                               loaded active exited  LVM event activation on d>
  NetworkManager.service                                                loaded active running Network Manager
  nis-domainname.service                                                loaded active exited  Read and set NIS domainna>
  polkit.service                                                        loaded active running Authorization Manager
  rngd-wake-threshold.service                                           loaded 
  .....................

显示所有服务清单

systemctl list-unit-files -t service
UNIT FILE                                  STATE
auditd.service                             enabled
autovt@.service                            enabled
blk-availability.service                   disabled
console-getty.service                      disabled
container-getty@.service                   static
cpupower.service                           disabled
crond.service                              enabled
dbus-org.freedesktop.hostname1.service     static
dbus-org.freedesktop.locale1.service       static
dbus-org.freedesktop.login1.service        static
dbus-org.freedesktop.nm-dispatcher.service enabled
dbus-org.freedesktop.portable1.service     static
dbus-org.freedesktop.timedate1.service     static
dbus.service                               static
dbxtool.service                            disabled
debug-shell.service                        disabled
dm-event.service                           static
dnf-makecache.service                      static
dracut-cmdline.service                     static
dracut-initqueue.service                   static
dracut-mount.service                       static
dracut-pre-mount.service                   static
dracut-pre-pivot.service                   static
dracut-pre-trigger.service                 static
dracut-pre-udev.service                    static
dracut-shutdown.service                    static
ebtables.service                           disabled
emergency.service                          static

停止并关闭服务的自动启动设置

systemctl stop   smartd && systemctl disable  smartd
systemctl status  smartd

NTP时间同步

修改时区为本地时区

$ ln -sf /usr/share/zoneinfo/Asia/Shanghai /etc/localtime
$ yum -y install ntp
$ vim /etc/ntp.conf
#server 0.centos.pool.ntp.org iburst
#server 1.centos.pool.ntp.org iburst
#server 2.centos.pool.ntp.org iburst
#server 3.centos.pool.ntp.org iburst
server 192.168.10.56
fudge 192.168.10.56 stratum 10
$ systemctl start ntpd && systemctl enable ntpd
$ systemctl status ntpd

查看当前节点同步的时间服务器：ntpq -p
查看节点与时间同步服务器的偏差时间：ntpdc -c loopinfo
查看ntp状态：ntpstat

yum 与 dnf

RHEL 8 / CentOS 8上的软件包管理工具 DNF（Dandified YUM）已设置为默认值。
但是，[yum]命令也作为指向[dnf]的链接而存在，因此可以以相同的用法使用[yum]或[dnf]。

实际上，RedHat上的官方文档使用RHEL 8的[yum]命令给出了示例

$ which yum
/usr/bin/yum

$ ll /usr/bin/yum
lrwxrwxrwx. 1 root root 5 Apr 25  2020 /usr/bin/yum -> dnf-3

$ which dnf
/usr/bin/dnf

$ ll /usr/bin/dnf
lrwxrwxrwx. 1 root root 5 Apr 25  2020 /usr/bin/dnf -> dnf-3

$ ll /usr/bin/dnf-3
-rwxr-xr-x. 1 root root 1954 Apr 25  2020 /usr/bin/dnf-3

$ rpm -aq | grep yum
yum-4.2.17-6.el8.noarch

$ rpm -q yum
yum-4.2.17-6.el8.noarch

$ rpm -ql yum
/etc/dnf/protected.d/yum.conf
/etc/yum.conf
/etc/yum/pluginconf.d
/etc/yum/protected.d
/etc/yum/vars
/usr/bin/yum
/usr/share/man/man1/yum-aliases.1.gz
/usr/share/man/man5/yum.conf.5.gz
/usr/share/man/man8/yum-shell.8.gz
/usr/share/man/man8/yum.8.gz

$ ll  /etc/yum.conf
lrwxrwxrwx. 1 root root 12 Apr 25  2020 /etc/yum.conf -> dnf/dnf.conf

$ ll /etc/yum/vars
lrwxrwxrwx. 1 root root 11 Apr 25  2020 /etc/yum/vars -> ../dnf/vars

$ rpm -aq | grep dnf
libdnf-0.39.1-5.el8.x86_64
python3-dnf-4.2.17-6.el8.noarch
python3-dnf-plugins-core-4.0.12-3.el8.noarch
python3-libdnf-0.39.1-5.el8.x86_64
dnf-4.2.17-6.el8.noarch
dnf-plugins-core-4.0.12-3.el8.noarch
dnf-data-4.2.17-6.el8.noarch

$ rpm -ql dnf
/usr/bin/dnf
/usr/lib/systemd/system/dnf-makecache.service
/usr/lib/systemd/system/dnf-makecache.timer
/usr/share/bash-completion
/usr/share/bash-completion/completions
/usr/share/bash-completion/completions/dnf
/usr/share/locale/ar/LC_MESSAGES/dnf.mo
/usr/share/locale/bg/LC_MESSAGES/dnf.mo
/usr/share/locale/bn_IN/LC_MESSAGES/dnf.mo
/usr/share/locale/ca/LC_MESSAGES/dnf.mo
/usr/share/locale/cs/LC_MESSAGES/dnf.mo
/usr/share/locale/da/LC_MESSAGES/dnf.mo
/usr/share/locale/de/LC_MESSAGES/dnf.mo
/usr/share/locale/el/LC_MESSAGES/dnf.mo
/usr/share/locale/en_GB/LC_MESSAGES/dnf.mo
/usr/share/locale/eo/LC_MESSAGES/dnf.mo
/usr/share/locale/es/LC_MESSAGES/dnf.mo
/usr/share/locale/eu/LC_MESSAGES/dnf.mo
/usr/share/locale/fa/LC_MESSAGES/dnf.mo
/usr/share/locale/fi/LC_MESSAGES/dnf.mo
/usr/share/locale/fil/LC_MESSAGES/dnf.mo
/usr/share/locale/fr/LC_MESSAGES/dnf.mo
/usr/share/locale/fur/LC_MESSAGES/dnf.mo
/usr/share/locale/gd/LC_MESSAGES/dnf.mo
/usr/share/locale/gu/LC_MESSAGES/dnf.mo
/usr/share/locale/he/LC_MESSAGES/dnf.mo
/usr/share/locale/hi/LC_MESSAGES/dnf.mo
/usr/share/locale/hr/LC_MESSAGES/dnf.mo
/usr/share/locale/hu/LC_MESSAGES/dnf.mo
/usr/share/locale/id/LC_MESSAGES/dnf.mo
/usr/share/locale/it/LC_MESSAGES/dnf.mo
/usr/share/locale/ja/LC_MESSAGES/dnf.mo
/usr/share/locale/ka/LC_MESSAGES/dnf.mo
/usr/share/locale/kk/LC_MESSAGES/dnf.mo
/usr/share/locale/ko/LC_MESSAGES/dnf.mo
/usr/share/locale/lt/LC_MESSAGES/dnf.mo
/usr/share/locale/ml/LC_MESSAGES/dnf.mo
/usr/share/locale/mr/LC_MESSAGES/dnf.mo
/usr/share/locale/ms/LC_MESSAGES/dnf.mo
/usr/share/locale/nb/LC_MESSAGES/dnf.mo
/usr/share/locale/nl/LC_MESSAGES/dnf.mo
/usr/share/locale/or/LC_MESSAGES/dnf.mo
/usr/share/locale/pa/LC_MESSAGES/dnf.mo
/usr/share/locale/pl/LC_MESSAGES/dnf.mo
/usr/share/locale/pt/LC_MESSAGES/dnf.mo
/usr/share/locale/pt_BR/LC_MESSAGES/dnf.mo
/usr/share/locale/ru/LC_MESSAGES/dnf.mo
/usr/share/locale/sk/LC_MESSAGES/dnf.mo
/usr/share/locale/sq/LC_MESSAGES/dnf.mo
/usr/share/locale/sr/LC_MESSAGES/dnf.mo
/usr/share/locale/sr@latin/LC_MESSAGES/dnf.mo
/usr/share/locale/sv/LC_MESSAGES/dnf.mo
/usr/share/locale/th/LC_MESSAGES/dnf.mo
/usr/share/locale/tr/LC_MESSAGES/dnf.mo
/usr/share/locale/uk/LC_MESSAGES/dnf.mo
/usr/share/locale/ur/LC_MESSAGES/dnf.mo
/usr/share/locale/zh_CN/LC_MESSAGES/dnf.mo
/usr/share/locale/zh_TW/LC_MESSAGES/dnf.mo
/usr/share/man/man7/dnf.modularity.7.gz
/usr/share/man/man8/dnf.8.gz
/usr/share/man/man8/yum2dnf.8.gz
/var/cache/dnf

dnf 更新软件库

在CentOS服务器成为生产系统之后，可能很难更新系统，但是至少在安装后，将CentOS服务器更新为最新版本。

$ dnf -y upgrade
CentOS-8 - AppStream                                                                     92  B/s |  38  B     00:00
Error: Failed to download metadata for repo 'AppStream': Cannot prepare internal mirrorlist: No URLs in mirrorlist

如果您仍然在管理运行CentOS 8的系统，并且尝试使用dnf update或yum update更新包，您将遇到以下错误:Error: Failed to download metadata for repo 'appstream': Cannot prepare internal mirrorlist: No URLs in mirrorlist

现在CentOS已经转移到Stream(一种滚动发布的Linux发行版，介于Fedora的上游开发和RHEL的下游开发之间)，许多用户正在转向CentOS的替代方案。其他人则决定通过迁移到CentOS Stream 8来坚持使用CentOS。

CentOS Linux 8早死了，它在2021年12月31日达到了生命的终结(EOL)，因此它不再从官方CentOS项目获得开发资源。

这意味着在2021年12月31日之后，要更新您的CentOS安装，您需要将镜像更改为CentOS Vault Mirror，在那里它们将被永久存档。

从CentOS 8迁移到CentOS Stream 8，执行以下命令:

sed -i 's/mirrorlist/#mirrorlist/g' /etc/yum.repos.d/CentOS-*
sed -i 's|#baseurl=http://mirror.centos.org|baseurl=http://vault.centos.org|g' /etc/yum.repos.d/CentOS-*

或者，您也可以通过运行以下命令指向基于cloudflare的仓库存储库:

sed -i 's/mirrorlist/#mirrorlist/g' /etc/yum.repos.d/CentOS-Linux-*
sed -i 's|#baseurl=http://mirror.centos.org|baseurl=http://vault.epel.cloud|g' /etc/yum.repos.d/CentOS-Linux-*

继续更新软件

$ dnf -y upgrade
CentOS-8 - AppStream                                                                    2.1 MB/s | 8.4 MB     00:03
CentOS-8 - Base                                                                         1.8 MB/s | 4.6 MB     00:02
CentOS-8 - Extras                                                                       917  B/s |  10 kB     00:11
Dependencies resolved.
========================================================================================================================
 Package                                Architecture    Version                                Repository          Size
========================================================================================================================
Installing:
 centos-linux-release                   noarch          8.5-1.2111.el8                         BaseOS              22 k
     replacing  centos-release.x86_64 8.2-2.2004.0.1.el8
     replacing  centos-repos.x86_64 8.2-2.2004.0.1.el8
 fwupd                                  x86_64          1.5.9-1.el8_4                          BaseOS             2.8 M
     replacing  dbxtool.x86_64 8-5.el8
 kernel                                 x86_64          4.18.0-348.7.1.el8_5                   BaseOS             7.0 M
 kernel-core                            x86_64          4.18.0-348.7.1.el8_5                   BaseOS              38 M
 kernel-modules                         x86_64          4.18.0-348.7.1.el8_5                   BaseOS              30 M
Upgrading:
 NetworkManager                         x86_64          1:1.32.10-4.el8                        BaseOS             2.6 M
 NetworkManager-libnm                   x86_64          1:1.32.10-4.el8                        BaseOS             1.8 M
 NetworkManager-team                    x86_64          1:1.32.10-4.el8                        BaseOS             148 k
 NetworkManager-tui                     x86_64          1:1.32.10-4.el8                        BaseOS             336 k
 authselect                             x86_64          1.2.2-3.el8                            BaseOS             133 k
 authselect-libs                        x86_64          1.2.2-3.el8                            BaseOS             222 k
 bash                                   x86_64          4.4.20-2.el8                           BaseOS             1.5 M
 bind-export-libs                       x86_64          32:9.11.26-6.el8                       BaseOS             1.1 M

....................

Upgraded:
  NetworkManager-1:1.32.10-4.el8.x86_64                       NetworkManager-libnm-1:1.32.10-4.el8.x86_64
  NetworkManager-team-1:1.32.10-4.el8.x86_64                  NetworkManager-tui-1:1.32.10-4.el8.x86_64
  authselect-1.2.2-3.el8.x86_64                               authselect-libs-1.2.2-3.el8.x86_64
  bash-4.4.20-2.el8.x86_64                                    bind-export-libs-32:9.11.26-6.el8.x86_64
  brotli-1.0.6-3.el8.x86_64                                   ca-certificates-2021.2.50-80.0.el8_4.noarch
  centos-gpg-keys-1:8-3.el8.noarch                            chkconfig-1.19.1-1.el8.x86_64
  coreutils-8.30-12.el8.x86_64                                coreutils-common-8.30-12.el8.x86_64
  cpio-2.12-10.el8.x86_64                                     crontabs-1.11-17.20190603git.el8.noarch
  crypto-policies-20210617-1.gitc776d3e.el8.noarch            cryptsetup-libs-2.3.3-4.el8.x86_64
  curl-7.61.1-22.el8.x86_64                                   cyrus-sasl-lib-2.1.27-5.el8.x86_64
  dbus-1:1.12.8-14.el8.x86_64                                 dbus-common-1:1.12.8-14.el8.noarch
  dbus-daemon-1:1.12.8-14.el8.x86_64                          dbus-libs-1:1.12.8-14.el8.x86_64
  dbus-tools-1:1.12.8-14.el8.x86_64                           device-mapper-8:1.02.177-10.el8.x86_64
  device-mapper-event-8:1.02.177-10.el8.x86_64                device-mapper-event-libs-8:1.02.177-10.el8.x86_64
  device-mapper-libs-8:1.02.177-10.el8.x86_64                 device-mapper-persistent-data-0.9.0-4.el8.x86_64
  dhcp-client-12:4.3.6-45.el8.x86_64                          dhcp-common-12:4.3.6-45.el8.noarch
  dhcp-libs-12:4.3.6-45.el8.x86_64                            dmidecode-1:3.2-10.el8.x86_64
  dnf-4.7.0-4.el8.noarch                                      dnf-data-4.7.0-4.el8.noarch
  dnf-plugins-core-4.0.21-3.el8.noarch                        dracut-049-191.git20210920.el8.x86_64
  dracut-config-rescue-049-191.git20210920.el8.x86_64         dracut-network-049-191.git20210920.el8.x86_64
  dracut-squash-049-191.git20210920.el8.x86_64                e2fsprogs-1.45.6-2.el8.x86_64
  e2fsprogs-libs-1.45.6-2.el8.x86_64                          efi-filesystem-3-3.el8.noarch
  efivar-37-4.el8.x86_64                                      efivar-libs-37-4.el8.x86_64
  elfutils-default-yama-scope-0.185-1.el8.noarch              elfutils-libelf-0.185-1.el8.x86_64
  elfutils-libs-0.185-1.el8.x86_64                            ethtool-2:5.8-7.el8.x86_64
  expat-2.2.5-4.el8.x86_64                                    file-5.33-20.el8.x86_64
  file-libs-5.33-20.el8.x86_64                                filesystem-3.8-6.el8.x86_64
  firewalld-0.9.3-7.el8.noarch                                firewalld-filesystem-0.9.3-7.el8.noarch
  freetype-2.9.1-4.el8_3.1.x86_64                             gawk-4.2.1-2.el8.x86_64
  glib2-2.56.4-156.el8.x86_64                                 glibc-2.28-164.el8.x86_64
  glibc-all-langpacks-2.28-164.el8.x86_64                     glibc-common-2.28-164.el8.x86_64
  gnupg2-2.2.20-2.el8.x86_64                                  gnupg2-smime-2.2.20-2.el8.x86_64
  gnutls-3.6.16-4.el8.x86_64                                  gpgme-1.13.1-9.el8.x86_64
  grub2-common-1:2.02-106.el8.noarch                          grub2-efi-x64-1:2.02-106.el8.x86_64
  grub2-pc-1:2.02-106.el8.x86_64                              grub2-pc-modules-1:2.02-106.el8.noarch
  grub2-tools-1:2.02-106.el8.x86_64                           grub2-tools-extra-1:2.02-106.el8.x86_64
  grub2-tools-minimal-1:2.02-106.el8.x86_64                   grubby-8.40-42.el8.x86_64
  gzip-1.9-12.el8.x86_64                                      hdparm-9.54-4.el8.x86_64
  hwdata-0.314-8.10.el8.noarch                                ima-evm-utils-1.3.2-12.el8.x86_64
  initscripts-10.00.15-1.el8.x86_64                           iproute-5.12.0-4.el8.x86_64
  iprutils-2.4.19-1.el8.x86_64                                iptables-1.8.4-20.el8.x86_64
  iptables-ebtables-1.8.4-20.el8.x86_64                       iptables-libs-1.8.4-20.el8.x86_64
  iputils-20180629-7.el8.x86_64                               irqbalance-2:1.4.0-6.el8.x86_64
  iwl100-firmware-39.31.5.1-103.el8.1.noarch                  iwl1000-firmware-1:39.31.5.1-103.el8.1.noarch
  iwl105-firmware-18.168.6.1-103.el8.1.noarch                 iwl135-firmware-18.168.6.1-103.el8.1.noarch
  iwl2000-firmware-18.168.6.1-103.el8.1.noarch                iwl2030-firmware-18.168.6.1-103.el8.1.noarch
  iwl3160-firmware-1:25.30.13.0-103.el8.1.noarch              iwl3945-firmware-15.32.2.9-103.el8.1.noarch
  iwl4965-firmware-228.61.2.24-103.el8.1.noarch               iwl5000-firmware-8.83.5.1_1-103.el8.1.noarch
  iwl5150-firmware-8.24.2.2-103.el8.1.noarch                  iwl6000-firmware-9.221.4.1-103.el8.1.noarch
  iwl6000g2a-firmware-18.168.6.1-103.el8.1.noarch             iwl6050-firmware-41.28.5.1-103.el8.1.noarch
  iwl7260-firmware-1:25.30.13.0-103.el8.1.noarch              json-c-0.13.1-2.el8.x86_64
  kbd-2.0.4-10.el8.x86_64                                     kbd-legacy-2.0.4-10.el8.noarch
  kbd-misc-2.0.4-10.el8.noarch                                kernel-tools-4.18.0-348.7.1.el8_5.x86_64
  kernel-tools-libs-4.18.0-348.7.1.el8_5.x86_64               kexec-tools-2.0.20-57.el8_5.1.x86_64
  keyutils-libs-1.5.10-9.el8.x86_64                           kmod-25-18.el8.x86_64
  kmod-libs-25-18.el8.x86_64                                  kpartx-0.8.4-17.el8.x86_64
  krb5-libs-1.18.2-14.el8.x86_64                              libarchive-3.3.3-1.el8.x86_64
  libblkid-2.32.1-28.el8.x86_64                               libcap-2.26-5.el8.x86_64
  libcap-ng-0.7.11-1.el8.x86_64                               libcom_err-1.45.6-2.el8.x86_64
  libcomps-0.1.16-2.el8.x86_64                                libcroco-0.6.12-4.el8_2.1.x86_64
  libcurl-7.61.1-22.el8.x86_64                                libdb-5.3.28-42.el8_4.x86_64
  libdb-utils-5.3.28-42.el8_4.x86_64                          libdnf-0.63.0-3.el8.x86_64
  libfdisk-2.32.1-28.el8.x86_64                               libffi-3.1-22.el8.x86_64
  libgcc-8.5.0-4.el8_5.x86_64                                 libgcrypt-1.8.5-6.el8.x86_64
  libgomp-8.5.0-4.el8_5.x86_64                                libkcapi-1.2.0-2.el8.x86_64
  libkcapi-hmaccalc-1.2.0-2.el8.x86_64                        libldb-2.3.0-2.el8.x86_64
  libmodulemd1-1.8.16-0.2.13.0.1.x86_64                       libmount-2.32.1-28.el8.x86_64
  libndp-1.7-6.el8.x86_64                                     libnfsidmap-1:2.3.3-46.el8.x86_64
  libnghttp2-1.33.0-3.el8_2.1.x86_64                          libpcap-14:1.9.1-5.el8.x86_64
  libpsl-0.20.2-6.el8.x86_64                                  libpwquality-1.4.4-3.el8.x86_64
  librepo-1.14.0-2.el8.x86_64                                 libreport-filesystem-2.9.5-15.el8.x86_64
  libseccomp-2.5.1-1.el8.x86_64                               libselinux-2.9-5.el8.x86_64
  libselinux-utils-2.9-5.el8.x86_64                           libsemanage-2.9-6.el8.x86_64
  libsepol-2.9-3.el8.x86_64                                   libsmartcols-2.32.1-28.el8.x86_64
  libsolv-0.7.19-1.el8.x86_64                                 libss-1.45.6-2.el8.x86_64
  libssh-0.9.4-3.el8.x86_64                                   libssh-config-0.9.4-3.el8.noarch
  libsss_autofs-2.5.2-2.el8_5.3.x86_64                        libsss_certmap-2.5.2-2.el8_5.3.x86_64
  libsss_idmap-2.5.2-2.el8_5.3.x86_64                         libsss_nss_idmap-2.5.2-2.el8_5.3.x86_64
  libsss_sudo-2.5.2-2.el8_5.3.x86_64                          libstdc++-8.5.0-4.el8_5.x86_64
  libtalloc-2.3.2-1.el8.x86_64                                libtdb-1.4.3-1.el8.x86_64
  libteam-1.31-2.el8.x86_64                                   libtevent-0.11.0-0.el8.x86_64
  libtirpc-1.1.4-5.el8.x86_64                                 libusbx-1.0.23-4.el8.x86_64
  libuuid-2.32.1-28.el8.x86_64                                libxcrypt-4.1.1-6.el8.x86_64
  libxml2-2.9.7-9.el8_4.2.x86_64                              libzstd-1.4.4-1.el8.x86_64
  linux-firmware-20210702-103.gitd79c2677.el8.noarch          lshw-B.02.19.2-6.el8.x86_64
  lsscsi-0.32-3.el8.x86_64                                    lua-libs-5.3.4-12.el8.x86_64
  lvm2-8:2.03.12-10.el8.x86_64                                lvm2-libs-8:2.03.12-10.el8.x86_64
  lz4-libs-1.8.3-3.el8_4.x86_64                               man-db-2.7.6.1-18.el8.x86_64
  microcode_ctl-4:20210608-1.el8.x86_64                       mokutil-1:0.3.0-11.el8.x86_64
  ncurses-6.1-9.20180224.el8.x86_64                           ncurses-base-6.1-9.20180224.el8.noarch
  ncurses-libs-6.1-9.20180224.el8.x86_64                      nettle-3.4.1-7.el8.x86_64
  nftables-1:0.9.3-21.el8.x86_64                              numactl-libs-2.0.12-13.el8.x86_64
  openldap-2.4.46-18.el8.x86_64                               openssh-8.0p1-10.el8.x86_64
  openssh-clients-8.0p1-10.el8.x86_64                         openssh-server-8.0p1-10.el8.x86_64
  openssl-1:1.1.1k-5.el8_5.x86_64                             openssl-libs-1:1.1.1k-5.el8_5.x86_64
  os-prober-1.74-9.el8.x86_64                                 p11-kit-0.23.22-1.el8.x86_64
  p11-kit-trust-0.23.22-1.el8.x86_64                          pam-1.3.1-15.el8.x86_64
  parted-3.2-39.el8.x86_64                                    pciutils-libs-3.7.0-1.el8.x86_64
  pcre-8.42-6.el8.x86_64                                      pcre2-10.32-2.el8.x86_64
  platform-python-3.6.8-41.el8.x86_64                         platform-python-pip-9.0.3-20.el8.noarch
  platform-python-setuptools-39.2.0-6.el8.noarch              policycoreutils-2.9-16.el8.x86_64
  polkit-0.115-12.el8.x86_64                                  polkit-libs-0.115-12.el8.x86_64
  popt-1.18-1.el8.x86_64                                      procps-ng-3.3.15-6.el8.x86_64
  python3-dnf-4.7.0-4.el8.noarch                              python3-dnf-plugins-core-4.0.21-3.el8.noarch
  python3-firewall-0.9.3-7.el8.noarch                         python3-gobject-base-3.28.3-2.el8.x86_64
  python3-gpg-1.13.1-9.el8.x86_64                             python3-hawkey-0.63.0-3.el8.x86_64
  python3-libcomps-0.1.16-2.el8.x86_64                        python3-libdnf-0.63.0-3.el8.x86_64
  python3-libs-3.6.8-41.el8.x86_64                            python3-libselinux-2.9-5.el8.x86_64
  python3-libxml2-2.9.7-9.el8_4.2.x86_64                      python3-linux-procfs-0.6.3-1.el8.noarch
  python3-nftables-1:0.9.3-21.el8.x86_64                      python3-perf-4.18.0-348.7.1.el8_5.x86_64
  python3-pip-wheel-9.0.3-20.el8.noarch                       python3-rpm-4.14.3-19.el8.x86_64
  python3-setuptools-wheel-39.2.0-6.el8.noarch                python3-syspurpose-1.28.21-3.el8.x86_64
  rng-tools-6.13-1.git.d207e0b6.el8.x86_64                    rpm-4.14.3-19.el8.x86_64
  rpm-build-libs-4.14.3-19.el8.x86_64                         rpm-libs-4.14.3-19.el8.x86_64
  rpm-plugin-selinux-4.14.3-19.el8.x86_64                     rpm-plugin-systemd-inhibit-4.14.3-19.el8.x86_64
  sed-4.5-2.el8.x86_64                                        selinux-policy-3.14.3-80.el8_5.2.noarch
  selinux-policy-targeted-3.14.3-80.el8_5.2.noarch            setup-2.12.2-6.el8.noarch
  shadow-utils-2:4.6-14.el8.x86_64                            shim-x64-15-15.el8_2.x86_64
  snappy-1.1.8-3.el8.x86_64                                   sqlite-libs-3.26.0-15.el8.x86_64
  squashfs-tools-4.3-20.el8.x86_64                            sssd-client-2.5.2-2.el8_5.3.x86_64
  sssd-common-2.5.2-2.el8_5.3.x86_64                          sssd-kcm-2.5.2-2.el8_5.3.x86_64
  sssd-nfs-idmap-2.5.2-2.el8_5.3.x86_64                       sudo-1.8.29-7.el8_4.1.x86_64
  systemd-239-51.el8_5.2.x86_64                               systemd-libs-239-51.el8_5.2.x86_64
  systemd-pam-239-51.el8_5.2.x86_64                           systemd-udev-239-51.el8_5.2.x86_64
  teamd-1.31-2.el8.x86_64                                     trousers-0.3.15-1.el8.x86_64
  trousers-lib-0.3.15-1.el8.x86_64                            tuned-2.16.0-1.el8.noarch
  tzdata-2021e-1.el8.noarch                                   util-linux-2.32.1-28.el8.x86_64
  vim-minimal-2:8.0.1763-16.el8.x86_64                        virt-what-1.18-12.el8.x86_64
  which-2.21-16.el8.x86_64                                    xfsprogs-5.0.0-9.el8.x86_64
  yum-4.7.0-4.el8.noarch                                      zlib-1.2.11-17.el8.x86_64

Installed:
  ModemManager-glib-1.10.8-4.el8.x86_64                            bubblewrap-0.4.0-1.el8.x86_64
  centos-linux-release-8.5-1.2111.el8.noarch                       centos-linux-repos-8-3.el8.noarch
  crypto-policies-scripts-20210617-1.gitc776d3e.el8.noarch         elfutils-debuginfod-client-0.185-1.el8.x86_64
  fwupd-1.5.9-1.el8_4.x86_64                                       gdisk-1.0.3-6.el8.x86_64
  grub2-tools-efi-1:2.02-106.el8.x86_64                            json-glib-1.4.4-1.el8.x86_64
  kernel-4.18.0-348.7.1.el8_5.x86_64                               kernel-core-4.18.0-348.7.1.el8_5.x86_64
  kernel-modules-4.18.0-348.7.1.el8_5.x86_64                       libatasmart-0.19-14.el8.x86_64
  libblockdev-2.24-7.el8.x86_64                                    libblockdev-crypto-2.24-7.el8.x86_64
  libblockdev-fs-2.24-7.el8.x86_64                                 libblockdev-loop-2.24-7.el8.x86_64
  libblockdev-mdraid-2.24-7.el8.x86_64                             libblockdev-part-2.24-7.el8.x86_64
  libblockdev-swap-2.24-7.el8.x86_64                               libblockdev-utils-2.24-7.el8.x86_64
  libbpf-0.4.0-1.el8.x86_64                                        libbytesize-1.4-3.el8.x86_64
  libevent-2.1.8-5.el8.x86_64                                      libgcab1-1.1-1.el8.x86_64
  libgudev-232-4.el8.x86_64                                        libgusb-0.3.0-1.el8.x86_64
  libibverbs-35.0-1.el8.x86_64                                     libmbim-1.20.2-1.el8.x86_64
  libmodulemd-2.13.0-1.el8.x86_64                                  libqmi-1.24.0-3.el8.x86_64
  libsecret-0.18.6-1.el8.x86_64                                    libsmbios-2.4.1-2.el8.x86_64
  libudisks2-2.9.0-7.el8.x86_64                                    libxkbcommon-0.9.1-1.el8.x86_64
  libxmlb-0.1.15-1.el8.x86_64                                      lmdb-libs-0.9.24-1.el8.x86_64
  mdadm-4.2-rc2.el8.x86_64                                         memstrack-0.1.11-1.el8.x86_64
  nspr-4.32.0-1.el8_4.x86_64                                       nss-3.67.0-7.el8_5.x86_64
  nss-softokn-3.67.0-7.el8_5.x86_64                                nss-softokn-freebl-3.67.0-7.el8_5.x86_64
  nss-sysinit-3.67.0-7.el8_5.x86_64                                nss-util-3.67.0-7.el8_5.x86_64
  pciutils-3.7.0-1.el8.x86_64                                      pinentry-1.1.0-2.el8.x86_64
  python3-unbound-1.7.3-17.el8.x86_64                              rdma-core-35.0-1.el8.x86_64
  tpm2-tss-2.3.2-4.el8.x86_64                                      udisks2-2.9.0-7.el8.x86_64
  unbound-libs-1.7.3-17.el8.x86_64                                 volume_key-libs-0.3.11-5.el8.x86_64
  xkeyboard-config-2.28-1.el8.noarch

Complete!

安装软件

dnf -y install vim wget bash-completion net-tools zip bzip2 bind-utils

使用Moduler存储库

$ dnf module list
Last metadata expiration check: 0:01:21 ago on Tue 01 Nov 2022 10:10:32 PM CST.
CentOS Linux 8 - AppStream
Name                 Stream          Profiles Summary
389-ds               1.4                      389 Directory Server (base)
ant                  1.10 [d]        common [ Java build tool
                                     d]
container-tools      rhel8 [d]       common [ Most recent (rolling) versions of podman, buildah, skopeo, runc, conmon, r
                                     d]       unc, conmon, CRIU, Udica, etc as well as dependencies such as container-se
                                              linux built and tested together, and updated as frequently as every 12 wee
                                              ks.
container-tools      1.0             common [ Stable versions of podman 1.0, buildah 1.5, skopeo 0.1, runc, conmon, CRIU
                                     d]       , Udica, etc as well as dependencies such as container-
subversion           1.14            common [ Apache Subversion
                                     d], serv
                                     er
swig                 3.0 [d]         common [ Connects C/C++/Objective C to some high-level programming languages
                                     d], comp
                                     lete
swig                 4.0             common [ Connects C/C++/Objective C to some high-level programming languages
                                     d], comp
                                     lete
.......................
.......................
varnish              6 [d]           common [ Varnish HTTP cache
                                     d]
virt                 rhel [d]        common [ Virtualization module
                                     d]

Hint: [d]efault, [e]nabled, [x]disabled, [i]nstalled

要安装可用模块，请按如下所示进行配置。

$  dnf module list postgresql
Last metadata expiration check: 0:13:08 ago on Tue 01 Nov 2022 10:10:32 PM CST.
CentOS Linux 8 - AppStream
Name                   Stream             Profiles                       Summary
postgresql             9.6                client, server [d]             PostgreSQL server and client module
postgresql             10 [d]             client, server [d]             PostgreSQL server and client module
postgresql             12                 client, server [d]             PostgreSQL server and client module
postgresql             13                 client, server [d]             PostgreSQL server and client module

Hint: [d]efault, [e]nabled, [x]disabled, [i]nstalled


$ dnf module install -y postgresql:10
$  dnf module list postgresql
Last metadata expiration check: 0:15:17 ago on Tue 01 Nov 2022 10:10:32 PM CST.
CentOS Linux 8 - AppStream
Name                  Stream              Profiles                         Summary
postgresql            9.6                 client, server [d]               PostgreSQL server and client module
postgresql            10 [d][e]           client, server [d] [i]           PostgreSQL server and client module
postgresql            12                  client, server [d]               PostgreSQL server and client module
postgresql            13                  client, server [d]               PostgreSQL server and client module

Hint: [d]efault, [e]nabled, [x]disabled, [i]nstalled

如果您想更改为已安装模块的另一个版本，请按以下步骤进行配置。
例如，从上面[2]上安装的PostgreSQL 10切换到PostgreSQL 9.6。

$ dnf module reset -y  postgresql  
$ dnf module install  -y postgresql:9.6

＃[PostgreSQL 9.6]的状态变为[e]启用
$  dnf module list postgresql
Last metadata expiration check: 0:18:06 ago on Tue 01 Nov 2022 10:10:32 PM CST.
CentOS Linux 8 - AppStream
Name                  Stream             Profiles                          Summary
postgresql            9.6 [e]            client, server [d] [i]            PostgreSQL server and client module
postgresql            10 [d]             client, server [d]                PostgreSQL server and client module
postgresql            12                 client, server [d]                PostgreSQL server and client module
postgresql            13                 client, server [d]                PostgreSQL server and client module

Hint: [d]efault, [e]nabled, [x]disabled, [i]nstalled

更新阿里云 yum 源

mv /etc/yum.repos.d /etc/yum.repos.d.bak # 先备份原有的 Yum 源
mkdir /etc/yum.repos.d
wget -O /etc/yum.repos.d/CentOS-Base.repo https://mirrors.aliyun.com/repo/Centos-vault-8.5.2111.repo
yum clean all && yum makecache

用户管理

要在CentOS服务器上添加普通用户帐户，请按以下步骤设置。

$ useradd centos
$ passwd centos
Changing password for user centos.
New password:                               ＃输入您要设置的任何密码  
Retype new password:
passwd: all authentication tokens updated successfully.$所有身份验证令牌已成功更新

如果您想从普通用户切换到root用户帐户，请使用[su]命令。

[root@localhost ~]# su - centos  $切换centos账号
[centos@localhost ~]$ su -       $切换root账号
Password:                       $输入root密码
[root@localhost ~]#              $切换到root账号

如果您想限制用户运行[su]命令，请进行如下设置。
在以下示例中，只有[wheel]组中的用户可以运行[su]命令。

[root@localhost ~]# usermod -G wheel centos
[root@localhost ~]# vi /etc/pam.d/su
[root@localhost ~]# cat  /etc/pam.d/su
#%PAM-1.0
auth            required        pam_env.so
auth            sufficient      pam_rootok.so
# Uncomment the following line to implicitly trust users in the "wheel" group.
#auth           sufficient      pam_wheel.so trust use_uid  $我们添加的配置项
# Uncomment the following line to require a user to be in the "wheel" group.
auth            required        pam_wheel.so use_uid
auth            substack        system-auth
auth            include         postlogin
account         sufficient      pam_succeed_if.so uid = 0 use_uid quiet
account         include         system-auth
password        include         system-auth
session         include         system-auth
session         include         postlogin
session         optional        pam_xauth.so
auth          sufficient      pam_rootok.so debug

[root@localhost ~]# groups centos  $查看账号所在的组
centos : centos wheel

我们可以创建一个账号user01没有在wheel组，并尝试切换到root账号

[root@localhost ~]# useradd user01
[root@localhost ~]# passwd user01
Changing password for user user01.
New password:
Retype new password:
passwd: all authentication tokens updated successfully.
[root@localhost ~]#
[root@localhost ~]# su - user01
[user01@localhost ~]$
[user01@localhost ~]$ su -
Password:
su: Permission denied  $通常是被拒绝的
[user01@localhost ~]$

如果您要删除用户帐户，请按以下步骤设置。

[root@localhost ~]# userdel -r user01  ＃删除用户[user01]（仅删除的用户帐户）
userdel: user 'user01' does not exist
[root@localhost ~]# ll /home/
total 4
drwxr-xr-x.  3 admin    admin      78 Sep 28 10:09 admin
drwx------.  4 centos   centos    113 Dec  4 13:56 centos
drwx------. 15 localhost localhost 4096 Sep 27 16:42 localhost
drwx------.  3 tddev    users      78 Sep 28 10:09 tddev
drwx------.  5 tdops    users     143 Oct 15 16:10 tdops
drwx------.  3 tdsec    users      78 Sep 28 10:09 tdsec
drwx------.  4     1006     1006  113 Dec  4 14:16 user01
＃删除用户[user01]（已删除的用户帐户和他的主目录）
[root@localhost ~]# userdel -r user01
userdel: user 'user01' does not exist
[root@localhost ~]# userdel -r localhost

添加到wheel组用户免密切换root账号设置步骤。

[root@localhost ~]#  vi /etc/sudoers

## Same thing without a password
%wheel        ALL=(ALL)       NOPASSWD: ALL $添加这段内容后，wheel组用户，切换到root不需要知道root密码。



[root@localhost ~]# su - centos
[centos@localhost ~]$ id
uid=1005(centos) gid=1005(centos) groups=1005(centos),10(wheel) context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023
[centos@localhost ~]$
[centos@localhost ~]$ sudo su - $#免密切换到root账号。
[root@localhost ~]#

给用户添加sudo权限

$ sed -i '/^root.*ALL=(ALL).*ALL/a\going\tALL=(ALL) \tALL' /etc/sudoers

$ cat /etc/sudoers
root    ALL=(ALL)       ALL
going   ALL=(ALL)       ALL

参考：

上一篇：kind & kubernetes 集群内如何通过 helm 部署定制化 Prometheus-Operator？

下一篇：如何在 macOS 美化 iterm2 ？

提问和评论都可以，用心的回复会被更多人看到评论

发布评论

相关文章

官方博客	全部文章	热门标签	班级博客
了解我们	网站地图	意见反馈

鸿蒙开发者社区	51CTO学堂
51CTO	软考资讯