docker

安装 engine

卸载旧版
sudo apt-get purge docker.io*

编辑 /etc/apt/sources.list.d/docker.list

1
echo 'deb https://apt.dockerproject.org/repo debian-jessie main'> /etc/apt/sources.list.d/docker.list

安装依赖: apt-transport-https

1
2
3
sudo apt-get install docker-engine
docker version
...permission问题

创建组

1
2
3
4
 cat /etc/group | grep ^docker  #不存在
sudo groupadd docker #存在忽略,创建组
sudo gpasswd -a ${USER} docker #添加当前用户到组
sudo restart #重启生效

安装elasticsearch

elasticsearch 目录结构

type description location
home Home of elasticsearch installation /usr/share/elasticsearch
bin Binary scripts including elasticsearch to start a node /usr/share/elasticsearch/bin
conf Configuration files elasticsearch.yml and logging.yml /etc/elasticsearch
conf Environment variables including heap size,file descriptors /etc/default/elasticsearch
data The location of the data files /var/lib/elasticsearch/
logs Log files location /var/log/elasticsearch
plugins Plugin files location /usr/share/elasticsearch/plugins

下载地址

2.4.1

window7

bin目录执行安装

1
2
3
4
F:\ELK\elasticsearch-2.4.1\bin>service install
Installing service : "elasticsearch-service-x64"
Using JAVA_HOME (64-bit): "F:\java\jdk8"
The service 'elasticsearch-service-x64' has been installed.

安装成功,如果启动失败(进logs目录,查看错误信息)

搭建hexo

准备工具

node https://nodejs.org/zh-cn/download/
git
hexo

node 安装

linux

1
2
3
4
5
$tar  -zxvf  node.tar.gz
$cd node
$./config --prefix=/opt/node
$sudo make
$sudo make install

添加环境变量

1
2
3
4
5
6
7
#set nodejs
export NODE_HOME=/opt/node
export PATH=$NODE_HOME/bin:$PATH
$node -v #显示版本号
$sudo node -v #当用root执行,commond not found
#mousepad ~/.bashrc
alias sudo='sudo env PATH=$PATH'

https签名

为服务器端和客户端准备公钥、私钥

1
2
#私钥
>openssl genrsa -out server.key 1024 -config E:\Git\mingw64\ssl\openssl.cnf
1
2
#公钥
>openssl rsa -in server.key -pubout -out server.pem

生成 CA 证书

1
2
3
 <!--more--> 
#ca私钥
>openssl genrsa -out ca.key 1024 -config E:\Git\mingw64\ssl\openssl.cnf

第一次填写信息

1
>openssl req -new -key ca.key -out ca.csr -config E:\Git\mingw64\ssl\openssl.cnf

Country Name (2 letter code) [AU]:
State or Province Name (full name) [Some-State]:
Locality Name (eg, city) []:
Organization Name (eg, company) [Internet Widgits Pty Ltd]:
Organizational Unit Name (eg, section) []:
Common Name (e.g. server FQDN or YOUR name) []:localhost
Email Address []:

Please enter the following ‘extra’ attributes
to be sent with your certificate request
A challenge password []:12345678
An optional company name []:cs

1
>openssl x509 -req -in ca.csr -signkey ca.key -out ca.crt -days 365

生成服务器端证书

服务器端需要向 CA 机构申请签名证书,在申请签名证书之前依然是创建自己的 CSR 文件 与第一次信息填写一样

1
>openssl req -new -key server.key -out server.csr -config E:\Git\mingw64\ssl\openssl.cnf

向自己的 CA 机构申请证书,签名过程需要 CA 的证书和私钥参与,最终颁发一个带有 CA 签名的证书

1
>openssl x509 -req -CA ca.crt -CAkey ca.key -CAcreateserial -in server.csr -out server.crt

Signature ok
subject=/C=AU/ST=Some-State/O=Internet Widgits Pty Ltd/CN=localhost
Getting CA Private Key

生成cer文件

使用openssl 进行转换

1
>openssl x509 -in server.crt -out server.cer -outform der

生成p12

1
2
3
4
5
F:\logs\http>openssl pkcs12 -export -clcerts -in server.crt -inkey server.key -out client.p12
WARNING: can't open config file: /usr/local/ssl/openssl.cnf
Loading 'screen' into random state - done
Enter Export Password:12345678
Verifying - Enter Export Password:12345678
载入天数...载入时分秒... ,