云计算专业期末RHEL8.6红帽网络操作系统考试(实操)

云计算专业期末RHEL8.6红帽网络操作系统考试

前言

本文介绍关于云计算专业期末RHEL8.6红帽操作系统考试内容题目详解

一、虚拟机环境配置

一般情况下虚拟机中的系统是已经安装好的，但以防万一还是加上在虚拟机中系统安装的步骤

1.确定镜像文件位置

（后缀为.iso的为镜像文件，下图这些文件都为iso镜像文件）

2. 在虚拟机主页中选择创建虚拟机

3. 选择典型（推荐）选项

4. 通过浏览选择我们在第一步时确定的镜像文件

5. 填写用户名全名和密码

（这里所填的用户名和密码在接下来登录中需要使用到）

6. 确定虚拟机名称和虚拟机文件安装位置

（在考试中会需要到两台虚拟机，所以可以使用rhel-1和rhel-2名称或者server和client名称来区分）

7. 磁盘空间大小和系统硬件配置我们保持默认即可满足要求

二、启动虚拟机至系统登陆界面

1.在正常情况下

虚拟机配置完成后会自行启动

2.未自行启动情况

三、系统基础配置内容及对应虚拟机环境部署

1. 主机名更改

[test@localhost~]#hostnamectl set-hostname 主机名  #这里注意题目要求对应的主机名
[test@localhost~]#bash  #刷新即可显示更改后的主机名
[主机名@localhost~]

2. 切换root管理员模式

[test@localhost~]#su root
password:  #这里的密码在考试时默认为123456，如果在虚拟机创建时配置过为之前配置的密码
[root@localhost test]cd ~  #切换
[root@localhost~]   #看到test用户变为root用户即为切换成功

3.IP地址的配置

需要注意的是，因为更改系统配置需要root用户的权限，所以在操作这一步时请务必确保当前为root用户

[root@localhost ~]# vi /etc/sysconfig/network-scripts/ifcfg-ens160

按i进入编辑模式 此处网卡配置文件中的编辑器操作模式在后面的编辑器操作都是一样的

TYPE=Ethernet
PROXY_METHOD=none
BROWSER_ONLY=no
BOOTPROTO=dhcp  #此处改为static为静态地址
DEFROUTE=yes
IPV4_FAILURE_FATAL=no
IPV6INIT=yes
IPV6_AUTOCONF=yes
IPV6_DEFROUTE=yes
IPV6_FAILURE_FATAL=no
IPV6_ADDR_GEN_MODE=stable-privacy
NAME=enp0s3
UUID=8257f116-d5e0-45f0-8c11-4b733f387d6f
DEVICE=enp0s3
ONBOOT=no  #此处改为on启用该网卡配置
#下面为需要添加的内容
IPADDR=192.168.56.2  #此处为IP地址，请根据题目具体更改
GATEWAY=192.168.56.1  #此处为网关，请根据题目具体更改
NETMASK=255.255.255.0  #此处为子网掩码，默认即可，如有要求可另行更改





  "/etc/sysconfig/network-scripts/ifcfg-enp0s3" 19L, 347C

编辑完按ESC,再输入:wq以保存退出

[root@localhost ~]# cat /etc/sysconfig/network-scripts/ifcfg-ens33  
#此处指令为检查刚刚的更改是否保存成功了，如果没有从第一行命令开始重新编辑保存
TYPE=Ethernet
PROXY_METHOD=none
BROWSER_ONLY=no
BOOTPROTO=static
DEFROUTE=yes
IPV4_FAILURE_FATAL=no
IPV6INIT=yes
IPV6_AUTOCONF=yes
IPV6_DEFROUTE=yes
IPV6_FAILURE_FATAL=no
IPV6_ADDR_GEN_MODE=stable-privacy
NAME=enp0s3
UUID=8257f116-d5e0-45f0-8c11-4b733f387d6f
DEVICE=enp0s3
ONBOOT=on
IPADDR=192.168.56.2
GATEWAY=192.168.56.1
NETMASK=255.255.255.0
[root@localhost~]systemctl restart NetworkManager.service  #重启网卡

下面需要注意截图IP地址配置

[root@localhost ~]# ip a  #此处可检查重启网卡后的配置文件是否生效
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host
       valid_lft forever preferred_lft forever
2: enp0s3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000
    link/ether 08:00:27:0f:9d:e7 brd ff:ff:ff:ff:ff:ff
    inet 192.168.56.2/24 brd 192.168.56.255 scope global noprefixroute enp0s3  #注意这一行
    #是否出现了刚刚我们在配置文件中添加的IP地址
    #如果没有请重新启动网卡或者回到第一行命令重新编辑保存
       valid_lft forever preferred_lft forever
    inet6 fe80::1819:9458:a80:e234/64 scope link noprefixroute
       valid_lft forever preferred_lft forever
3: virbr0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN group default qlen 1000
    link/ether 52:54:00:9a:6f:5d brd ff:ff:ff:ff:ff:ff
    inet 192.168.122.1/24 brd 192.168.122.255 scope global virbr0
       valid_lft forever preferred_lft forever
4: virbr0-nic: <BROADCAST,MULTICAST> mtu 1500 qdisc fq_codel master virbr0 state DOWN group default qlen 1000
    link/ether 52:54:00:9a:6f:5d brd ff:ff:ff:ff:ff:ff

4.本地YUM源配置

1.首先在虚拟机的光驱中挂载上镜像文件
右键后点击设置

使用ISO镜像文件并选择文件目录

在虚拟机右下角确保光驱启动

2.回到命令行界面

[root@localhost ~]# mkdir /opt/redhat
[root@localhost ~]# mount -o loop /dev/sr0 /opt/redhat
[root@localhost ~]# vi /etc/yum.repos.d/redhat.repo

#
# Certificate-Based Repositories
# Managed by (rhsm) subscription-manager
#
# *** This file is auto-generated.  Changes made here will be over-written. ***
# *** Use "subscription-manager repo-override --help" if you wish to make changes. ***
#
# If this file is empty and this system is subscribed consider
# a "yum repolist" to refresh available repos
#
[AppStream]
name=appstream
baseurl=file:///opt/redhat/AppStream
gpgcheck=0
enabled=1

[BaseOS]
name=baseos
baseurl=file:///opt/redhat/BaseOS
gpgcheck=0
enabled=1

下面需要注意截图YUM源配置

[root@localhost ~]# yum repolist  #如果下面两行的repo name值成功出现appstream和baseos则为YUM源配置完成
Updating Subscription Management repositories.
Unable to read consumer identity
This system is not registered to Red Hat Subscription Management. You can use subscription-manager to register.
Last metadata expiration check: 0:02:07 ago on Tue 26 Dec 2023 05:48:13 AM EST.
repo id                                                repo name                                               status
AppStream                                              appstream                                               4,795
BaseOS                                                 baseos                                                  1,662

四、六大服务配置

1.NFS(网络文件系统）

[root@server ~]# cd
[root@localhost ~]# dnf install nfs-utils  #检查NFS服务安装
Updating Subscription Management repositories.
Unable to read consumer identity

This system is not registered with an entitlement server. You can use subscription-manager to register.

Last metadata expiration check: 0:01:05 ago on Tue 26 Dec 2023 08:52:22 AM PST.
Package nfs-utils-1:2.3.3-51.el8.x86_64 is already installed.
Dependencies resolved.
Nothing to do.
Complete!

防火墙配置

注意截图

[root@localhost ~]# iptables -F  #防火墙配置
[root@localhost ~]# iptables-save
# Generated by iptables-save v1.8.4 on Tue Dec 26 09:05:21 2023
*filter
:INPUT ACCEPT [1447:1892001]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [1418:949630]
:LIBVIRT_INP - [0:0]
:LIBVIRT_OUT - [0:0]
:LIBVIRT_FWO - [0:0]
:LIBVIRT_FWI - [0:0]
:LIBVIRT_FWX - [0:0]
COMMIT
# Completed on Tue Dec 26 09:05:21 2023
# Generated by iptables-save v1.8.4 on Tue Dec 26 09:05:21 2023
*security
:INPUT ACCEPT [1351:1880992]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [1418:949630]
COMMIT
# Completed on Tue Dec 26 09:05:21 2023
# Generated by iptables-save v1.8.4 on Tue Dec 26 09:05:21 2023
*raw
:PREROUTING ACCEPT [1452:1893361]
:OUTPUT ACCEPT [1418:949630]
COMMIT
# Completed on Tue Dec 26 09:05:21 2023
# Generated by iptables-save v1.8.4 on Tue Dec 26 09:05:21 2023
*mangle
:PREROUTING ACCEPT [1452:1893361]
:INPUT ACCEPT [1447:1892001]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [1418:949630]
:POSTROUTING ACCEPT [1464:954880]
:LIBVIRT_PRT - [0:0]
-A POSTROUTING -j LIBVIRT_PRT
-A LIBVIRT_PRT -o virbr0 -p udp -m udp --dport 68 -j CHECKSUM --checksum-fill
COMMIT
# Completed on Tue Dec 26 09:05:21 2023
# Generated by iptables-save v1.8.4 on Tue Dec 26 09:05:21 2023
*nat
:PREROUTING ACCEPT [60:7379]
:INPUT ACCEPT [5:260]
:POSTROUTING ACCEPT [264:20448]
:OUTPUT ACCEPT [264:20448]
:LIBVIRT_PRT - [0:0]
-A POSTROUTING -j LIBVIRT_PRT
-A LIBVIRT_PRT -s 192.168.122.0/24 -d 224.0.0.0/24 -j RETURN
-A LIBVIRT_PRT -s 192.168.122.0/24 -d 255.255.255.255/32 -j RETURN
-A LIBVIRT_PRT -s 192.168.122.0/24 ! -d 192.168.122.0/24 -p tcp -j MASQUERADE --to-ports 1024-65535
-A LIBVIRT_PRT -s 192.168.122.0/24 ! -d 192.168.122.0/24 -p udp -j MASQUERADE --to-ports 1024-65535
-A LIBVIRT_PRT -s 192.168.122.0/24 ! -d 192.168.122.0/24 -j MASQUERADE
COMMIT
# Completed on Tue Dec 26 09:05:21 2023




[root@localhost ~]# firewall-cmd --permanent --zone=public --add-service=nfs
success
[root@localhost ~]# firewall-cmd --permanent --zone=public --add-service=rpc-bind
success
[root@localhost ~]# firewall-cmd --permanent --zone=public --add-service=mountd
success
[root@localhost ~]# firewall-cmd --reload
success

创建共享目录及分配权限

[root@localhost ~]# mkdir /nfsfile  #创建共享目录及分配权限
[root@localhost ~]# chmod -R 777 /nfsfile
[root@localhost ~]# echo "welcome" > /nfsfile/readme

NFS服务配置文件

[root@localhost ~]# vim /etc/exports

# 以下为文件编辑内容
/nfsfile 192.168.*.*(rw,sync,root_squash)
# IP地址请根据题目对应客户机（即第二台机）IP进行变更星号数字

启动服务

[root@localhost ~]# systemctl restart rpcbind
[root@localhost ~]# systemctl enable rpcbind
[root@localhost ~]# systemctl start nfs-server
[root@localhost ~]# systemctl enable nfs-server
Created symlink /etc/systemd/system/multi-user.target.wants/nfs-server.service → /usr/lib/systemd/system/nfs-server.service.

在客户机上检查并挂载

[root@localhost ~]#showmount -e 192.168.60.129  #此处IP填写第一台虚拟机ip
Export list for 192.168.60.129:
/nfsfile 192.168.*.*
[root@localhost ~]# mkdir /nfsfile
[root@localhost ~]# mount -t nfs 192.168.60.129:/nfsfile /nfsfile  #此处IP填写第一台虚拟机ip
[root@localhost ~]# df -h   #如成功此处注意截图！！！
Filesystem               Size  Used Avail Use% Mounted on
devtmpfs                 1.8G     0  1.8G   0% /dev
tmpfs                    1.9G     0  1.9G   0% /dev/shm
tmpfs                    1.9G  9.8M  1.8G   1% /run
tmpfs                    1.9G     0  1.9G   0% /sys/fs/cgroup
/dev/nvme0n1p3            18G  5.2G   13G  30% /
/dev/nvme0n1p1           295M  188M  107M  64% /boot
tmpfs                    371M   44K  371M   1% /run/user/0
192.168.60.129:/nfsfile   18G  5.3G   13G  30% /nfsfile  ##看到这一行出现第一台虚拟机ip则为该服务配置成功

2.Samba（文件共享服务）

安装Samba及客户端程序

[root@server ~]# cd
[root@localhost ~]# dnf install samba #第一台虚拟机
Is this ok [y/N]: y  #此处安装进程会暂停需要输入y以继续
# 当看到Complete！为安装成功


[root@localhost ~]# dnf install samba samba-client  #第二台虚拟机
Is this ok [y/N]: y  #此处安装进程会暂停需要输入y以继续
# 当看到Complete！为安装成功

建立Samba用户

回到第一台虚拟机

[root@localhost ~]# pdbedit -a -u root #root用户可改成题目需求的用户
new password: # 此处写密码，可设置为123456
retype new password:再次输入相同密码确认
Unix username:        root
NT username:
Account Flags:        [U          ]
User SID:             S-1-5-21-1401601119-1095323409-2156053322-1000
Primary Group SID:    S-1-5-21-1401601119-1095323409-2156053322-513
Full Name:            root
Home Directory:       \\LOCALHOST\root
HomeDir Drive:
Logon Script:
Profile Path:         \\LOCALHOST\root\profile
Domain:               LOCALHOST
Account desc:
Workstations:
Munged dial:
Logon time:           0
Logoff time:          Wed, 06 Feb 2036 07:06:39 PST
Kickoff time:         Wed, 06 Feb 2036 07:06:39 PST
Password last set:    Tue, 26 Dec 2023 09:38:05 PST
Password can change:  Tue, 26 Dec 2023 09:38:05 PST
Password must change: never
Last bad password   : 0
Bad password count  : 0
Logon hours         : FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF

创建共享目录

[root@localhost ~]# mkdir /home/database
[root@localhost ~]# chown -Rf root:root /home/database #更改权限，注意用户名是否对应上一步骤所创建的用户名
[root@localhost ~]# semanage fcontext -a -t samba_share_t /home/database
[root@localhost ~]# restorecon -Rv /home/database
Relabeled /home/database from unconfined_u:object_r:user_home_dir_t:s0 to unconfined_u:object_r:samba_share_t:s0

设置SELinux服务与策略

[root@localhost ~]# getsebool -a | grep samba
samba_create_home_dirs --> off
samba_domain_controller --> off
samba_enable_home_dirs --> off  #注意此行的off状态
samba_export_all_ro --> off
samba_export_all_rw --> off
samba_load_libgfapi --> off
samba_portmapper --> off
samba_run_unconfined --> off
samba_share_fusefs --> off
samba_share_nfs --> off
sanlock_use_samba --> off
tmpreaper_use_samba --> off
use_samba_home_dirs --> off
virt_use_samba --> off
[root@localhost ~]# setsebool -P samba_enable_home_dirs on

修改Samba主配置文件

[root@localhost ~]# vim /etc/samba/smb.conf  #编辑配置文件
#下面的内容添加至配置文件内
[database]
        comment = sharefile
        path = /home/database
        public = no
        writable = yes

防火墙配置

注意截图

[root@localhost ~]# systemctl restart smb
[root@localhost ~]# systemctl enable smb
Created symlink /etc/systemd/system/multi-user.target.wants/smb.service → /usr/lib/systemd/system/smb.service.
[root@localhost ~]# iptables -F
[root@localhost ~]# iptables-save
[root@localhost ~]# firewall-cmd --zone=public --permanent --add-service=samba
success
[root@localhost ~]# firewall-cmd --reload
success

客户端共享目录检查

[root@localhost ~]# dnf install cifs-utils
Updating Subscription Management repositories.
Unable to read consumer identity

This system is not registered with an entitlement server. You can use subscription-manager to register.

Last metadata expiration check: 0:19:29 ago on Tue 26 Dec 2023 09:34:47 AM PST.
Package cifs-utils-6.8-3.el8.x86_64 is already installed.
Dependencies resolved.
Nothing to do.
Complete!
[root@localhost ~]# mkdir /database
[root@localhost ~]# mount -t cifs -o username=root,password=123456 //192.168.60.129/database /database   
#username为一开始创建samba使用的用户名
#password为创建的密码
#IP地址注意根据第一台虚拟机实际IP更改一下
[root@localhost ~]# df -h  #此处注意截图
Filesystem                 Size  Used Avail Use% Mounted on
devtmpfs                   1.8G     0  1.8G   0% /dev
tmpfs                     1.9G     0  1.9G   0% /dev/shm
tmpfs                      1.9G  9.8M  1.8G   1% /run
tmpfs                      1.9G     0  1.9G   0% /sys/fs/cgroup
/dev/nvme0n1p3              18G  5.2G   13G  30% /
/dev/nvme0n1p1             295M  188M  107M  64% /boot
tmpfs                      371M   44K  371M   1% /run/user/0
192.168.60.129:/nfsfile     18G  5.3G   13G  30% /nfsfile
/dev/loop0                  11G   11G     0 100% /opt/redhat
//192.168.60.129/database   18G  5.3G   13G  30% /database #当看到这一行时为配置该服务成功

3.DNS（域名解析服务）

安装bind服务程序

该服务后续教程中第一台虚拟机主机名更名为server，第二台更名为client，注意命令所对应的虚拟机

[root@server ~]# cd
[root@server ~]# dnf install bind-chroot
Is this ok [y/N]: y  #此处安装进程会暂停需要输入y以继续
# 当看到Complete！为安装成功

修改主配置文件

[root@server ~]# vim /etc/named.conf


//
// named.conf
//
// Provided by Red Hat bind package to configure the ISC BIND named(8) DNS
// server as a caching only nameserver (as a localhost DNS resolver only).
//
// See /usr/share/doc/bind*/sample/ for example named configuration files.
//

options {
        listen-on port 53 { any; };  #注意此行更改为any！！！
        listen-on-v6 port 53 { ::1; };
        directory       "/var/named";
        dump-file       "/var/named/data/cache_dump.db";
        statistics-file "/var/named/data/named_stats.txt";
        memstatistics-file "/var/named/data/named_mem_stats.txt";
        secroots-file   "/var/named/data/named.secroots";
        recursing-file  "/var/named/data/named.recursing";
        allow-query     { any; };  #注意此行更改为any！！！

修改dns区域配置文件

[root@server ~]# vim /etc/named.rfc1912.zones  #修改dns区域配置文件
zone "szpt.com" IN {  #此处解析的域名需要根据题目需要更改
        type master;
        file "szpt.com.zone";  #此处是设置在named目录下dns的解析区域文件
        allow-update { none; };
};

创建正向解析文件

[root@server ~]# cd /var/named/  #切换目录
[root@server named]# ls -al named.localhost
-rw-r-----. 1 root named 152 Feb 16  2022 named.localhost
[root@server named]# cp -a named.localhost szpt.com.zone #复制一份正向解析的模板文件

[root@server named]# vim szpt.com.zone
##注意下面的配置中，如果有标红说明配置错误了，注意检查！

$TTL 1D
@       IN SOA szpt.com. root.szpt.com. ( #DNS区域地址
                                        0       ; serial
                                        1D      ; refresh
                                        1H      ; retry
                                        1W      ; expire
                                        3H )    ; minimum
@       IN NS   ns.szpt.com. #域名服务器记录
ns      IN A    192.168.86.129  #地址记录，指向dns服务器所在的IP地址，默认第一台虚拟机
www     IN A    192.168.86.129  #地址记录，指向web服务器所在的IP地址，默认第一台虚拟机


[root@server named]# systemctl restart named
[root@server named]# systemctl enable named
Created symlink /etc/systemd/system/multi-user.target.wants/named.service → /usr/lib/systemd/system/named.service.

域名解析器配置文件

[root@server ~]# cd
[root@server ~]# vim /etc/resolv.conf



# Generated by NetworkManager
search localdomain
nameserver 192.168.60.129 #第一台虚拟机IP地址

防火墙配置

[root@server named]# firewall-cmd --zone=public --permanent --add-service=dns
success
[root@server named]# firewall-cmd --reload
success
[root@server named]# systemctl restart named

[root@client ~]# nslookup  #注意截图！
> 192.168.60.129 #第一台虚拟机IP地址
129.60.168.192.in-addr.arpa     name = dns.szpt.com.
129.60.168.192.in-addr.arpa     name = client.szpt.com.
129.60.168.192.in-addr.arpa     name = www.szpt.com.
> www.szpt.com
Server:         192.168.60.129
Address:        192.168.60.129#53

检查服务

注意截图

[root@server ~]# nslookup
> www.szpt.com
Server:         192.168.60.129
Address:        192.168.60.129#53

Name:   www.szpt.com
Address: 192.168.60.129
> ns.szpt.com
Server:         192.168.60.129
Address:        192.168.60.129#53

Name:   ns.szpt.com
Address: 192.168.60.129

在主配置文件内添加反向解析参数

[root@server ~]# vim /etc/named.rfc1912.zones
zone "szpt.com" IN {
        type master;
        file "szpt.com.zone";
        allow-update { none; };
};
###下面为添加内容
zone "60.168.192.in-addr.arpa" IN {
        type master;
        file "192.168.60.arpa";
        allow-update {none;};
};

创建反向解析文件

[root@server ~]# cd /var/named
[root@server named]# cp -a named.loopback 192.168.60.arpa
[root@server named]# vim 192.168.60.arpa



$TTL 1D
@       IN SOA  szpt.com. root.szpt.com. ( #对应题目更改需要反向解析的域名
                                        0       ; serial
                                        1D      ; refresh
                                        1H      ; retry
                                        1W      ; expire
                                        3H )    ; minimum
        NS      ns.szpt.com.
ns      A       192.168.60.129
129  #注意为dns服务器第四段IP地址  IN PTR     www.szpt.com.
129   IN PTR     client.szpt.com. #解析的域名
129   IN PTR     dns.szpt.com.


[root@server named]# systemctl restart named
[root@server named]# nslookup
> 192.168.60.129  #刚刚在反向解析中所写的IP地址，默认为第一台虚拟机IP地址
129.60.168.192.in-addr.arpa     name = client.szpt.com.
129.60.168.192.in-addr.arpa     name = dns.szpt.com.
129.60.168.192.in-addr.arpa     name = www.szpt.com.

部署从服务器

[root@server ~]# vim /etc/named.rfc1912.zones



zone "szpt.com" IN {
        type master;
        file "szpt.com.zone";
        allow-update { 192.168.60.130; };  #修改为第二台机的IP地址
};

zone "60.168.192.in-addr.arpa" IN {
        type master;
        file "192.168.60.arpa";
        allow-update { 192.168.60.130; }; #修改为第二台机的IP地址
};


[root@server ~]# firewall-cmd --permanent --zone=public --add-service=dns
Warning: ALREADY_ENABLED: dns
success
[root@server ~]# firewall-cmd --reload
success

### 此处切换为第二台虚拟机操作
[root@client ~]# dnf install bind-chroot
[root@client ~]# vim /etc/named.conf


options {
        listen-on port 53 { any; };  #此行修改为any
        listen-on-v6 port 53 { ::1; };
        directory       "/var/named";
        dump-file       "/var/named/data/cache_dump.db";
        statistics-file "/var/named/data/named_stats.txt";
        memstatistics-file "/var/named/data/named_mem_stats.txt";
        secroots-file   "/var/named/data/named.secroots";
        recursing-file  "/var/named/data/named.recursing";
        allow-query     { any; };   #此行修改为any

[root@client ~]# vim /etc/named.rfc1912.zones


zone "szpt.com" IN {
        type slave;
        masters { 192.168.60.129; };
        file "slaves/szpt.com.zone";
};
zone "129.168.192.in-addr.arpa" IN {
        type slave;
        masters { 192.168.60.129; };
        file "slaves/192.168.60.arpa";
};

[root@client ~]# systemctl restart named
[root@client slaves]# nslookup   #测试，看到如下则为成功
> www.szpt.com
Server:         192.168.60.129
Address:        192.168.60.129#53

Name:   www.szpt.com
Address: 192.168.60.129

4.DHCP(动态主机配置协议)

虚拟机环境配置

1. 右键左栏虚拟机列表中的当前虚拟机，单击设置选项
   
   2.更改网络适配器一项为自定义VMnet1，然后确定保存
   
   3.单击虚拟机左上编辑选项卡，然后单击**“虚拟网络编辑器（N）…”**
   
   4.单击右下角更改设置选项，给予虚拟机管理员权限（单击“是”） #如果右下角没有该选项可以直接跳过这个步骤
   
   5.选中VMnet1，将**“VMnet信息”一项选择“仅主机模式”然后将“使用本地DHCP服务将IP地址分配给虚拟机”一项勾选掉**。详情见下图
   
   6.单击“应用”，接着单击“确定”保存设置。至此对应该服务的虚拟机环境配置完成

该服务后续教程中第一台虚拟机主机名更名为server，第二台更名为client，注意命令所对应的虚拟机

部署dhcpd服务程序

[root@server ~]# cd
[root@server ~]# dnf install -y dhcp-server
Complete!  #看到此行即为安装成功

注意如果题目提到了固定分配IP地址下一步骤请跳转至“分配固定IP地址”步骤开始操作

配置dhcpd主配置文件

#[root@server ~]# vim /etc/dhcp/dhcpd.conf

####注意下列dhcpd配置文件请务必严格格式编写，务必记住语句最后一句为分号结束
# DHCP Server Configuration file.
#   see /usr/share/doc/dhcp-server/dhcpd.conf.example
#   see dhcpd.conf(5) man page
#
ddns-update-style none;  #设置dns服务器不进行自动动态更新
ignore client-updates;
subnet 192.168.60.0 netmask 255.255.255.0 {  #作用网段，请根据题目给出的网段具体更改，例IP地址前三段
        range 192.168.60.50 192.168.60.150;  #IP地址池，根据题目给出的范围具体更改，例第四段地址范围
        option subnet-mask 255.255.255.0;  
        option routers 192.168.60.1;  #定义客户端的网关地址
        option domain-name "szpt.com"; #定义搜索域，可以在指定域中分配IP
        option domain-name-servers 192.168.60.1;  #定义客户端的DNS地址
        default-lease-time 21600;
        max-lease-time 43200;
 }

[root@localhost ~]# systemctl start dhcpd
[root@localhost ~]# systemctl enable dhcpd
Created symlink /etc/systemd/system/multi-user.target.wants/dhcpd.service → /usr/lib/systemd/system/dhcpd.service.

防火墙配置

注意截图

[root@server ~]# firewall-cmd --zone=public --permanent --add-service=dhcp
success
[root@server ~]# firewall-cmd --reload
success

注意下面的虚拟机变更情况!!!

[root@client ~]# vim /etc/sysconfig/network-scripts/ifcfg-ens160
TYPE=Ethernet
PROXY_METHOD=none
BROWSER_ONLY=no
BOOTPROTO=dhcp  #注意此行参数应确保为dhcp
DEFROUTE=yes
IPV4_FAILURE_FATAL=no
IPV6INIT=yes
IPV6_AUTOCONF=yes
IPV6_DEFROUTE=yes
IPV6_FAILURE_FATAL=no
NAME=ens160
UUID=4da7a282-5177-4f6b-9746-2cd3b239b0eb
DEVICE=ens160
ONBOOT=yes  #注意此行参数应确保为yes

[root@client ~]# reboot
[root@client ~]# ip a  #注意截图，如此处IP
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host
       valid_lft forever preferred_lft forever
2: ens160: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 1000
    link/ether 00:0c:29:34:a2:2b brd ff:ff:ff:ff:ff:ff
    inet 192.168.60.130/24 brd 192.168.60.255 scope global dynamic noprefixroute ens160
       valid_lft 21437sec preferred_lft 21437sec  ##注意此处获取的IP应为dhcpd服务分配的IP地址，注意截图
    inet6 fe80::20c:29ff:fe34:a22b/64 scope link noprefixroute
       valid_lft forever preferred_lft forever
3: virbr0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN group default qlen 1000
    link/ether 52:54:00:72:57:75 brd ff:ff:ff:ff:ff:ff

分配固定IP地址情况（题目极大概率）

[root@localhost ~]# ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host
       valid_lft forever preferred_lft forever
2: ens160: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 1000
    link/ether 00:0c:29:34:a2:2b brd ff:ff:ff:ff:ff:ff  #“00:0c:29:34:a2:2b”为第二台虚拟机MAC地址，在接下来会用到，请根据实际MAC地址记录
    inet 192.168.60.130/24 brd 192.168.60.255 scope global dynamic noprefixroute ens160
       valid_lft 21437sec preferred_lft 21437sec
    inet6 fe80::20c:29ff:fe34:a22b/64 scope link noprefixroute
       valid_lft forever preferred_lft forever
3: virbr0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN group default qlen 1000
    link/ether 52:54:00:72:57:75 brd ff:ff:ff:ff:ff:ff

[root@server ~]# vim /etc/dhcp/dhcpd.conf



#
# DHCP Server Configuration file.
#   see /usr/share/doc/dhcp-server/dhcpd.conf.example
#   see dhcpd.conf(5) man page
#
ddns-update-style none;  #设置dns服务器不进行自动动态更新
ignore client-updates;
subnet 192.168.60.0 netmask 255.255.255.0 {  #作用网段，请根据题目给出的网段具体更改，例IP地址前三段
        range 192.168.60.50 192.168.60.150;  #IP地址池，根据题目给出的范围具体更改，例第四段地址范围
        option subnet-mask 255.255.255.0;  
        option routers 192.168.60.1;  #定义客户端的网关地址
        option domain-name "szpt.com"; #定义搜索域，可以在指定域中分配IP
        option domain-name-servers 192.168.60.1;  #定义客户端的DNS地址
        default-lease-time 21600;
        max-lease-time 43200;
        host root { #主机名称
        		   hardware ethernet 00:0c:29:34:a2:2b; #第二台虚拟机网卡的MAC地址
        		   fixed-address 192.168.60.131;  #指定的IP地址，根据题目要求情况变更
        		  }
}

[root@server ~]# systemctl restart dhcpd

```powershell
[root@client ~]# reboot
[root@client ~]# ip a  #此处注意截图！！！
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host
       valid_lft forever preferred_lft forever
2: ens160: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 1000
    link/ether 00:0c:29:34:a2:2b brd ff:ff:ff:ff:ff:ff
    inet 192.168.60.131/24 brd 192.168.60.255 scope global dynamic noprefixroute ens160
       valid_lft 21561sec preferred_lft 21561sec #注意此行IP地址已经变化了，说明成功分配到固定IP，截图！
    inet6 fe80::20c:29ff:fe34:a22b/64 scope link noprefixroute
       valid_lft forever preferred_lft forever
3: virbr0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN group default qlen 1000
    link/ether 52:54:00:72:57:75 brd ff:ff:ff:ff:ff:ff
    inet 192.168.122.1/24 brd 192.168.122.255 scope global virbr0
       valid_lft forever preferred_lft forever

5.Apache(Web服务程序）

安装服务并启动

[root@server ~]# cd
[root@server ~]# dnf install httpd
Is this ok [y/N]: y  #此处安装进程会暂停需要输入y以继续
# 当看到Complete！为安装成功
[root@server ~]# systemctl start httpd
[root@server ~]# systemctl enable httpd
Created symlink /etc/systemd/system/multi-user.target.wants/httpd.service → /usr/lib/systemd/system/httpd.service.

服务启动测试

[root@server ~]# firefox

浏览器输入IP地址127.0.0.1，如看到下图则为通过测试

[root@server ~]# mkdir /home/wwwroot
[root@server ~]# echo "the new web directory" > /home/wwwroot/index.html
[root@server ~]# vim /etc/httpd/conf/httpd.conf

#在配置中找到下列参数进行更改
DocumentRoot "/home/wwwroot"  #122行

#
# Relax access to content within /var/www.
#
<Directory "/home/wwwroot"> #127行
    AllowOverride None
    # Allow open access:
    Require all granted
</Directory>

# Further relax access to the default document root:
<Directory "/home/wwwroot"> #134行


[root@server ~]# systemctl restart httpd
[root@server ~]# firefox

浏览器输入IP地址127.0.0.1，如看到下图则为通过测试

添加安全条文

回到命令行

[root@server ~]# semanage fcontext -a -t httpd_sys_content_t /home/wwwroot
[root@server ~]# semanage fcontext -a -t httpd_sys_content_t /home/wwwroot/*
[root@server ~]# restorecon -Rv /home/wwwroot/
Relabeled /home/wwwroot from unconfined_u:object_r:user_home_dir_t:s0 to unconfined_u:object_r:httpd_sys_content_t:s0
Relabeled /home/wwwroot/index.html from unconfined_u:object_r:user_home_t:s0 to unconfined_u:object_r:httpd_sys_content_t:s0
[root@server ~]# firefox

浏览器输入IP地址127.0.0.1，如看到下图则为通过测试

个人用户主页功能实现

[root@server ~]# vim /etc/httpd/conf.d/userdir.conf





#
# UserDir: The name of the directory that is appended onto a user's home
# directory if a ~user request is received.
#
# The path to the end user account 'public_html' directory must be
# accessible to the webserver userid.  This usually means that ~userid
# must have permissions of 711, ~userid/public_html must have permissions
# of 755, and documents contained therein must be world-readable.
# Otherwise, the client will only receive a "403 Forbidden" message.
#
<IfModule mod_userdir.c>
    #
    # UserDir is disabled by default since it can confirm the presence
    # of a username on the system (depending on home directory
    # permissions).
    #
    #UserDir disabled #在这一行前添加＃号

    #
    # To enable requests to /~user/ to serve the user's public_html
    # directory, remove the "UserDir disabled" line above, and uncomment
    # the following line instead:
    #
    UserDir public_html  #将这一行的＃号删除
</IfModule>

#
# Control access to UserDir directories.  The following is an example
# for a site where these directories are restricted to read-only.
#
<Directory "/home/*/public_html">
    AllowOverride FileInfo AuthConfig Limit Indexes
    Options MultiViews Indexes SymLinksIfOwnerMatch IncludesNoExec
    Require method GET POST OPTIONS
</Directory>

[root@server ~]# cd /home
[root@server home]# su - test
Last login: Thu Dec 28 17:06:12 PST 2023 on pts/1
[test@server ~]$ mkdir public_html
[test@server ~]$ echo "this is my website" > public_html/index.html  #编写个人网页展示内容
[test@server ~]$ chmod -R 755 /home/test  #更改权限
[test@server ~]$ exit
logout
[root@server home]# cd
[root@server ~]# systemctl restart httpd
[root@server ~]# setsebool -P httpd_enable_homedirs=on
[root@server ~]# firefox

浏览器输入IP地址192.168.60.129/~test 或者127.0.0.1/~test，如看到下图则为通过测试 #IP地址为第一台虚拟机IP地址

为网站添加密码

[root@server ~]# htpasswd -c /etc/httpd/passwd test  #这里使用的是test用户
New password: #输入网页登录的密码，密码为123456
Re-type new password: #重新输入相同密码确认，123456
Adding password for user test
[root@server ~]# vim /etc/httpd/conf.d/userdir.conf



#
# Control access to UserDir directories.  The following is an example
# for a site where these directories are restricted to read-only.
#
<Directory "/home/*/public_html">   ##更改下列参数如下
    AllowOverride all
    authuserfile "/etc/httpd/passwd" #验证文件路径
    authname "privately website" #提示信息
    authtype basic #密码模式
    require user tset  #登录用户
</Directory>



[root@server ~]# systemctl restart httpd
[root@server ~]# firefox

此时就可以看到如下的登录界面，此处注意截图
登录账户为test，密码为123456
文章来源地址https://www.toymoban.com/news/detail-815432.html

基于IP地址进行访问

[root@server ~]# mkdir -p /home/wwwroot/10
[root@server ~]# mkdir -p /home/wwwroot/20
[root@server ~]# mkdir -p /home/wwwroot/30
[root@server ~]# echo "ip10" > /home/wwwroot/10/index.html
[root@server ~]# echo "ip20" > /home/wwwroot/20/index.html
[root@server ~]# echo "ip30" > /home/wwwroot/30/index.html
[root@server ~]# vim /etc/httpd/conf/httpd.conf


###添加至文件中大致132行处
<VirtualHost 192.168.60.10> ###此处IP地址根据题目要求更改，或仿照教程第四段IP地址即可
　　ServerName www.test.com
　　DocumentRoot /home/wwwroot/10
    <Directory /home/wwwroot/10>
    AllowOverride None
    Require all granted
    </Directory>
</VirtualHost>

<VirtualHost 192.168.60.20> ###此处IP地址根据题目要求更改，或仿照教程第四段IP地址即可
　　ServerName www.test.com
　　DocumentRoot /home/wwwroot/20
    <Directory /home/wwwroot/20>
    AllowOverride None
    Require all granted
    </Directory>
</VirtualHost>

<VirtualHost 192.168.60.30> ###此处IP地址根据题目要求更改，或仿照教程第四段IP地址即可
　　ServerName www.test.com
　　DocumentRoot /home/wwwroot/30
    <Directory /home/wwwroot/30>
    AllowOverride None
    Require all granted
    </Directory>
</VirtualHost>

[root@server ~]# systemctl restart httpd
[root@server ~]# firefox ###打开后输入以上不同的IP地址来检查页面并截图

基于主机域名进行访问

[root@server ~]# mkdir -p /var/www/html/web1
[root@server ~]# mkdir -p /var/www/html/web2
[root@server ~]# echo "web1" > /var/www/html/web2/index.html
[root@server ~]# echo "web2" > /var/www/html/web2/index.html
[root@server ~]# vim /etc/httpd/conf/httpd.conf

[root@server ~]# vim /etc/httpd/conf/httpd.conf



<virtualhost 192.168.60.129> #为第一台虚拟机IP地址
  documentroot /var/www/html/web1
  servername www.web1.com
</virtualhost>
<virtualhost 192.168.60.129> #为第一台虚拟机IP地址
  documentroot /var/www/html/web2
  servername www.web2.com
</virtualhost>


[root@server ~]# systemctl restart httpd
[root@server ~]# firefox ###打开后输入网址www.web1.com和web2检查页面并截图

6. FTP(文件传输协议)

基本配置（防火墙）

[root@server ~]# dnf install vsftpd
[root@server ~]# iptables -F
[root@server ~]# iptables-save
[root@server ~]# firewall-cmd --permanent --zone=public --add-service=ftp
success
[root@server ~]# firewall-cmd --reload
success
[root@server ~]# setsebool -P ftpd_full_access=on   #SE策略
[root@server ~]# mv /etc/vsftpd/vsftpd.conf /etc/vsftpd/vsftpd.conf_bak
[root@server ~]# grep -v "#" /etc/vsftpd/vsftpd.conf_bak > /etc/vsftpd/vsftpd.conf

### 第二台虚拟机操作
[root@client slaves]# dnf install ftp

匿名模式

[root@server ~]# vim /etc/vsftpd/vsftpd.conf


anonymous_enable=YES
anon_umask=022
anon_upload_enable=YES
anon_mkdir_write_enable=YES
anon_other_write_enable=YES
### 添加以上五项
local_enable=YES
write_enable=YES
local_umask=022
dirmessage_enable=YES
xferlog_enable=YES
connect_from_port_20=YES
xferlog_std_format=YES
listen=NO
listen_ipv6=YES

pam_service_name=vsftpd
userlist_enable=YES



[root@server ~]# ls -ld /var/ftp/pub/
drwxr-xr-x. 2 root root 6 Jan  7  2022 /var/ftp/pub/
[root@server ~]# chown -R ftp /var/ftp/pub/
[root@server ~]# ls -ld /var/ftp/pub/
drwxr-xr-x. 2 ftp root 6 Jan  7  2022 /var/ftp/pub/
[root@server ~]# systemctl restart vsftpd
[root@server ~]# systemctl enable vsftpd
Created symlink /etc/systemd/system/multi-user.target.wants/vsftpd.service → /usr/lib/systemd/system/vsftpd.service.

###客户机测试
[root@client /]# ftp 192.168.60.129 #为第一台虚拟机IP地址
Connected to 192.168.60.129 (192.168.60.129).
220 (vsFTPd 3.0.3)
Name (192.168.60.129:root): anonymous
331 Please specify the password.
Password: #此处回车即可
230 Login successful.
Remote system type is UNIX.
Using binary mode to transfer files.
ftp>       ###注意截图

本地用户模式

[root@server ~]# vim /etc/vsftpd/vsftpd.conf


### 改为以下相同配置
anonymous_enable=NO
local_enable=YES
write_enable=YES
local_umask=022
dirmessage_enable=YES
xferlog_enable=YES
connect_from_port_20=YES
xferlog_std_format=YES
listen=NO
listen_ipv6=YES

pam_service_name=vsftpd
userlist_enable=YES

用户名单配置

[root@server ~]# vi /etc/vsftpd/user_list


# vsftpd userlist
# If userlist_deny=NO, only allow users in this file
# If userlist_deny=YES (default), never allow users in this file, and
# do not even prompt for a password.
# Note that the default vsftpd pam config also checks /etc/vsftpd/ftpusers
# for users that are denied.
root ###删去此行
bin
daemon
adm
lp
sync
shutdown
halt
mail
news
uucp
operator
games
nobody


[root@server ~]# vi /etc/vsftpd/ftpusers


# Users that are not allowed to login via ftp
root ###删去此行
bin
daemon
adm
lp
sync
shutdown
halt
mail
news
uucp
operator
games
nobody

防火墙配置

[root@server ~]# setsebool -P ftpd_full_access=on
[root@server ~]# systemctl restart vsftpd
[root@server ~]# systemctl enable vsftpd

客户机测试

[root@client ~]# ftp 192.168.60.129 #为第一台虚拟机IP地址
Connected to 192.168.60.129 (192.168.60.129).
220 (vsFTPd 3.0.3)
Name (192.168.60.129:root): root
331 Please specify the password.
Password: # 默认密码为123456
230 Login successful.
Remote system type is UNIX.
Using binary mode to transfer files.
ftp> mkdir files #
550 Create directory operation failed.
ftp> rename files database #
350 Ready for RNTO.
250 Rename successful.
ftp> rmdir database #
250 Remove directory operation successful.
ftp>

到了这里，关于云计算专业期末RHEL8.6红帽网络操作系统考试(实操)的文章就介绍完了。如果您还想了解更多内容，请在右上角搜索TOY模板网以前的文章或继续浏览下面的相关文章，希望大家以后多多支持TOY模板网！