公有云配置

區(qū)域： 同一個(gè)區(qū)域中的云主機(jī)是可以互相連通的，不通區(qū)域云主機(jī)是不能使用內(nèi)部網(wǎng)絡(luò)互相通信的

選擇離自己比較近的區(qū)域，可以減少網(wǎng)絡(luò)延時(shí)卡頓

華為云yum源配置 https://support.huaweicloud.com/ecs_faq/ecs_faq_1003.html

跳板機(jī)配置

配置yum源，安裝軟件包

[root@ecs-proxy ~]# rm -rf /etc/yum.repos.d/*.repo

[root@ecs-proxy ~]# curl -o /etc/yum.repos.d/CentOS-Base.repo http://mirrors.myhuaweicloud.com/repo/CentOS-Base-7.repo

[root@ecs-proxy ~]# yum clean all

[root@ecs-proxy ~]# yum makecache

[root@ecs-proxy ~]# yum install -y net-tools lftp rsync psmisc vim-enhanced tree vsftpd? bash-completion createrepo lrzsz iproute

[root@ecs-proxy ~]# mkdir /var/ftp/localrepo

[root@ecs-proxy ~]# cd /var/ftp/localrepo

[root@ecs-proxy ~]# createrepo? .

[root@ecs-proxy ~]# createrepo --update . # 更新

[root@ecs-proxy ~]# systemctl enable --now vsftpd

優(yōu)化系統(tǒng)服務(wù)

[root@ecs-proxy ~]# systemctl stop postfix atd tuned

[root@ecs-proxy ~]# yum remove -y postfix at audit tuned kexec-tools firewalld-*

[root@ecs-proxy ~]# vim /etc/cloud/cloud.cfg

# manage_etc_hosts: localhost 注釋掉這一行

[root@ecs-proxy ~]# reboot

安裝配置ansible管理主機(jī)

[root@ecs-proxy ~]# tar zxf ansible_centos7.tar.gz

[root@ecs-proxy ~]# yum install -y ansible_centos7/*.rpm

[root@ecs-proxy ~]# ssh-keygen -t rsa -b 2048 -N '' -f /root/.ssh/id_rsa

[root@ecs-proxy ~]# chmod 0400 /root/.ssh/id_rsa

[root@ecs-proxy ~]# ssh-copy-id -i /root/.ssh/id_rsa.pub 模板主機(jī)IP

模板鏡像配置

配置yum源，安裝軟件包

[root@ecs-host ~]# rm -rf /etc/yum.repos.d/*.repo

[root@ecs-host ~]# curl -o /etc/yum.repos.d/CentOS-Base.repo http://mirrors.myhuaweicloud.com/repo/CentOS-Base-7.repo

[root@ecs-host ~]# vim /etc/yum.repos.d/local.repo?

[local_repo]

name=CentOS-$releasever – Localrepo

baseurl=ftp://192.168.1.252/localrepo

enabled=1

gpgcheck=0

[root@ecs-host ~]# yum clean all

[root@ecs-host ~]# yum makecache

[root@ecs-host ~]# yum repolist

[root@ecs-host ~]# yum install -y net-tools lftp rsync psmisc vim-enhanced tree lrzsz bash-completion iproute

優(yōu)化系統(tǒng)服務(wù)

[root@ecs-host ~]# systemctl stop postfix atd tuned

[root@ecs-host ~]# yum remove -y postfix at audit tuned kexec-tools firewalld-*

[root@ecs-host ~]# vim /etc/cloud/cloud.cfg

# manage_etc_hosts: localhost 注釋掉這一行

[root@ecs-host ~]# yum clean all?

[root@ecs-host ~]# poweroff