Centos7新功能

Centos7新功能

1.1 centos7安装

1.2 centos7单用户模式

1，在第一条内核条目上，按下“e”，进入edit模式，找到linux16开关的行，按“end”键到最后，输入"rd.break"
再按Ctrl+x进入系统；

mount -o remount,rw /sysroot/  # 进入后重新挂载/sysroot/,增加写的权限
chroot /sysroot/     # 切换到原始系统下
touch /.autorelabel/ # 为了selinux生效
ctrl+d # 退出单用户，然后reboot

1.3 centos7救援模式

1， 设置光驱启动
2，选择Troubleshooting
3，选择Rescure a centos system
4，选择continue
5，输入命令 chroot /mnt/sysimage

1.4 centos7设置ip

1.5 centos7设置主机名和命令参数补全

yum install -y net-tools
hostname melodylinux.com
hostnamectl set-hostname melodylinux
cat /etc/hostname
hostnamectl status
yum install -y bash-completion
source /etc/profile
hostnamectl set-hostname

1.6 centos7服务相关

service network restart 
systemctl restart network.service 
systemctl stop network.service  
chkconfig nginx on   
systemctl enable nginx.service  
systemctl disable nginx.service 
systemctl status network.service 
systemctl list-units --type=service
/usr/lib/systemd/system/

1.7 centos7 systemd-unit

1.8 centos7 systemd-target

1.9 centos7 target关联unit

2.0 centos7 继续使用centos6的iptables管理机制

systemctl status firewalld
systemctl list-units --type=service |grep firewalld
systemctl stop firewalld
systemctl disable firewalld
systemctl list-units --type=service |grep firewalld
yum install -y iptables-services
systemctl enable iptables.service
systemctl start iptables.service
iptables -nvL
iptables -nvL
iptables -t nat -nvL
service iptables save
service iptables restart
systemctl restart iptables.service

2.1 centos7 firewalld的zone

systemctl stop iptables
systemctl disable iptables
systemctl enable firewalld
systemctl start firewalld
firewall-cmd --get-default-zone
firewall-cmd --get-zones
work drop internal external trusted home dmz public block

2.2 centos7 firewalld的zone相关命令

firewall-cmd --get-default-zone
firewall-cmd --set-default-zone work
firewall-cmd --get-zone-of-interface=ens33
firewall-cmd --zone=public --add-interface=lo
firewall-cmd --get-zone-of-interface=lo
firewall-cmd --zone=home --change-interface=lo
firewall-cmd --zone=home --remove-interface=lo
firewall-cmd --get-active-zones

2.3 centos7 firewalld service操作

2.4 centos7 firewalld 增加规则

firewall-cmd --add-port=12222/tcp --permanent
firewall-cmd --reload
/etc/firewalld/zones
firewall-cmd --permanent --zone=home --add-forward-port=port=22:proto=tcp:toaddr=127.0.0.2
success

2.5 centos7 firewalld 更改配置文件

2.6 启动同步时间服务

# 启动同步时间服务
cd /etc/systemd/system/multi-user.target.wants/
ll /usr/lib/systemd/system/ |grep ntp
systemctl start ntpdate.service

2.7 查看时区命令

#查看时区命令
timedatectl status
#修改时区命令
timedatectl set-timezone Asia/Shanghai

ntpdate time.pool.aliyun.com
```