ubuntu 中科大源 https://mirrors.ustc.edu.cn/ubuntu/

一 搭建环境

1.1 初始化云服务器

#用云服务商提供的账户或平台连接主机，执行以下命令

groupadd mo
useradd -m -g mo -s /bin/bash moloom

#若moloom用户所属组还是moloom，执行如下命令
sudo usermod -g mo moloom

#给新建用户添加加入sudo权限 
EDITOR=vim visudo
%mo ALL=(ALL) ALL       #添加这行

#修改root和moloom的密码
passwd root
passwd moloom

#修改moloom的默认终端为bash，改完后可以ssh登录
#sudo sed -i '/^moloom:/ s|[^:]*$|/bin/bash|' /etc/passwd

1.2 SSH

#刚安装成功，需要同步下apt
sudo apt update
#安装ssh，没有的话就安装
#sudo apt install openssh-server

#复制已有机器的配置过来

#编辑配置文件
sudo vim /etc/ssh/sshd_config
#找到 Port ，修改端口号为 7777
Port 7777
#开启root账号登录
PermitRootLogin prohibit-password
#设置最大连接数
MaxSessions 10
#取消如下注释
AuthorizedKeysFile      .ssh/authorized_keys
#心跳机制
ClientAliveInterval 30
ClientAliveCountMax 5

#Ubuntu光在上面文件中改端口不会生效，需要修改以下文件中 ListenStream = 7777
sudo sed -i 's/ListenStream=22/ListenStream=7777/' /lib/systemd/system/ssh.socket

#重启电脑
reboot

#ssh命令
ssh HOST -p 7777

配置免密登录，主机A免密登录到云服务器主机B

# A：生成ssh密钥，
ssh-keygen -t rsa -C "moloom777@gmail.com"
# A：拷贝密钥到云服务器
ssh-copy-id -p 7777 moloom@moloom.com

#若ssh-copy-id 执行失败，则用scp拷贝文件
scp -P 7777 ~/.ssh/id_rsa.pub moloom@主机B:~/.ssh/authorized_keys

#后续如若有别的主机C也要免密登录 主机B ，则把主机C的~/.ssh/id_rsa.pub 追加到主机B ~/.ssh/authorized_keys 后即可

执行reboot时报permission denied

sudo chmod u+s /sbin/reboot

1.3 更换apt镜像源 选配；境外的主机不需要

镜像源配置文件地址 sudo vim /etc/apt/sources.list ，修改后 执行 sudo apt update 更新。

USTC源

deb https://mirrors.ustc.edu.cn/ubuntu/ focal main restricted universe multiverse
deb https://mirrors.ustc.edu.cn/ubuntu/ focal-updates main restricted universe multiverse
deb https://mirrors.ustc.edu.cn/ubuntu/ focal-backports main restricted universe multiverse
deb https://mirrors.ustc.edu.cn/ubuntu/ focal-security main restricted universe multiverse

# deb-src https://mirrors.ustc.edu.cn/ubuntu/ focal main restricted universe multiverse
# deb-src https://mirrors.ustc.edu.cn/ubuntu/ focal-updates main restricted universe multiverse
# deb-src https://mirrors.ustc.edu.cn/ubuntu/ focal-backports main restricted universe multiverse
# deb-src https://mirrors.ustc.edu.cn/ubuntu/ focal-security main restricted universe multiverse

## Pre-released source, not recommended.
# deb https://mirrors.ustc.edu.cn/ubuntu/ focal-proposed main restricted universe multiverse
# deb-src https://mirrors.ustc.edu.cn/ubuntu/ focal-proposed main restricted universe multiverse

清华源

deb https://mirrors.tuna.tsinghua.edu.cn/ubuntu/ focal main restricted universe multiverse
deb https://mirrors.tuna.tsinghua.edu.cn/ubuntu/ focal-updates main restricted universe multiverse
deb https://mirrors.tuna.tsinghua.edu.cn/ubuntu/ focal-backports main restricted universe multiverse
deb https://mirrors.tuna.tsinghua.edu.cn/ubuntu/ focal-security main restricted universe multiverse

# deb-src https://mirrors.tuna.tsinghua.edu.cn/ubuntu/ focal main restricted universe multiverse
# deb-src https://mirrors.tuna.tsinghua.edu.cn/ubuntu/ focal-updates main restricted universe multiverse
# deb-src https://mirrors.tuna.tsinghua.edu.cn/ubuntu/ focal-backports main restricted universe multiverse
# deb-src https://mirrors.tuna.tsinghua.edu.cn/ubuntu/ focal-security main restricted universe multiverse

## Pre-released source, not recommended.
# deb https://mirrors.tuna.tsinghua.edu.cn/ubuntu/ focal-proposed main restricted universe multiverse
# deb-src https://mirrors.tuna.tsinghua.edu.cn/ubuntu/ focal-proposed main restricted universe multiverse

配置apt代理 在 /etc/apt/apt.conf.d/55proxy 写入如下配置。注意：必须要在代理地址前面添加 http://

sudo tee /etc/apt/apt.conf.d/55proxy << EOF
Acquire::http::Proxy "http://192.168.0.104:7890/";
Acquire::https::Proxy "http://192.168.0.104:7890/";
EOF

附：代理配置文件位置

#安装时配置的代理，对应的配置文件
sudo vim /etc/systemd/system/snapd.service.d/snap_proxy.conf
sudo vim /etc/apt/apt.conf.d/90curtin-aptproxy

附：执行 sudo apt update 报如下错误

sudo vim /etc/apt/sources.list
#注释掉这行
deb [check-date=no] file:///cdrom mantic main restricted

1.4 配置主机名

#查看主机名
hostname
#修改主机名 为master
sudo hostnamectl set-hostname moloom-vps-us001

sudo vim /etc/hosts
127.0.1.1       moloom-vps-us001.localdomain moloom-vps-us001

#设置时区
cp /usr/share/zoneinfo/Asia/Shanghai /etc/localtime
#安装对时工具     可选
sudo apt install ntpdate
#同时时间  国家授时中心 NTP 服务器: ntp.ntsc.ac.cn
sudo ntpdate ntp.ntsc.ac.cn
crontab -e      
0-59/10 * * * * /usr/sbin/ntpdate ntp.ntsc.ac.cn | logger -t NTP 

1.5 安装ohmyzsh

#先更新apt
sudo apt update
#安装zsh，autojump
sudo apt install zsh autojump
#安装zsh
sh -c "$(wget https://raw.githubusercontent.com/robbyrussell/oh-my-zsh/master/tools/install.sh -O -)"
#autosuggestions插件
git clone https://github.com/zsh-users/zsh-autosuggestions ${ZSH_CUSTOM:-~/.oh-my-zsh/custom}/plugins/zsh-autosuggestions
#highlighting插件
git clone https://github.com/zsh-users/zsh-syntax-highlighting.git ${ZSH_CUSTOM:-~/.oh-my-zsh/custom}/plugins/zsh-syntax-highlighting
#启用插件，编辑.zshrc添加如下内容
vim ~/.zshrc

plugins=(git
    autojump
    zsh-autosuggestions
    zsh-syntax-highlighting)

#autojump 插件
source /usr/share/autojump/autojump.sh
[ -s "$HOME/.autojump/etc/profile.d/autojump.sh" ] && . "$HOME/.autojump/etc/profile.d/autojump.sh"

--------------------------------------
#应用配置，重启或者 
source ~/.zshrc
#切换zshWeb浏览器远程登录实例，常用于故障排查。注：VNC登录方式暂不支持复制粘贴、中文输入法。
chsh -s $(which zsh)

1.6 安装docker

安装必备的软件包以允许apt通过 HTTPS 使用存储库

sudo apt-get install ca-certificates curl gnupg lsb-release

添加Docker官方版本库的GPG密钥

sudo mkdir -p /etc/apt/keyrings &&
curl -fsSL https://download.docker.com/linux/ubuntu/gpg | sudo gpg --dearmor -o /etc/apt/keyrings/docker.gpg

添加官方源 境外vps用

echo "deb [arch=$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/docker.gpg] https://download.docker.com/linux/ubuntu $(lsb_release -cs) stable" | sudo tee /etc/apt/sources.list.d/docker.list > /dev/null

官方源被墙了，转用阿里源 境内vps用

#添加 Docker GPG key
curl -fsSL http://mirrors.aliyun.com/docker-ce/linux/ubuntu/gpg | sudo apt-key add -
#添加 apt 源:
sudo add-apt-repository "deb [arch=amd64] http://mirrors.aliyun.com/docker-ce/linux/ubuntu $(lsb_release -cs) stable"

安装docker

每个节点都必须安装docker

#更新库
sudo apt-get update
#安装
sudo apt-get install docker-ce docker-ce-cli containerd.io docker-compose-plugin
#将当前用户加入 docker 组
sudo usermod -aG docker $USER

#配置docker   国内的vps且有需求，可操作
sudo tee /etc/docker/daemon.json << EOF
{
        "exec-opts":["native.cgroupdriver=systemd"],
        "registry-mirrors":["https://ej8wpiko.mirror.aliyuncs.com"],
        "proxies": {
                "http-proxy": "http://192.168.0.104:7890",
                "https-proxy": "http://192.168.0.104:7890"
        }
}
EOF

#看下docker服务是不是开机自启，不是则设置自启
sudo systemctl daemon-reload && \
sudo systemctl enable docker --now

运行应用