ubuntu的基本安装

ubuntu安装步骤:

1. sudo passwd root
2. userdel root-aaa
3. mv sources.list sources.list.bak
4. vim sources.list

debhttp://mirrors.163.com/ubuntu/jaunty main restricted universe multiverse
debhttp://mirrors.163.com/ubuntu/jaunty-security main restricted universe multiverse
debhttp://mirrors.163.com/ubuntu/jaunty-updates main restricted universe multiverse
debhttp://mirrors.163.com/ubuntu/jaunty-proposed main restricted universe multiverse
debhttp://mirrors.163.com/ubuntu/jaunty-backports main restricted universe multiverse
deb-srchttp://mirrors.163.com/ubuntu/jaunty main restricted universe multiverse
deb-srchttp://mirrors.163.com/ubuntu/jaunty-security main restricted universe multiverse
deb-srchttp://mirrors.163.com/ubuntu/jaunty-updates main restricted universe multiverse
deb-srchttp://mirrors.163.com/ubuntu/jaunty-proposed main restricted universe multiverse
deb-srchttp://mirrors.163.com/ubuntu/jaunty-backports main restricted universe multiverse

debhttp://security.ubuntu.com/ubuntujaunty-security main restricted
deb-srchttp://security.ubuntu.com/ubuntujaunty-security main restricted
debhttp://security.ubuntu.com/ubuntujaunty-security universe
deb-srchttp://security.ubuntu.com/ubuntujaunty-security universe
debhttp://security.ubuntu.com/ubuntujaunty-security multiverse
deb-srchttp://security.ubuntu.com/ubuntujaunty-security multiverse

1. sudo apt-get update
2. apt-get upgrade -y
3. edit iptables

iptables -F

iptables -X

iptables -A INPUT -p tcp --dport 22 -j ACCEPT

iptables -A OUTPUT -p tcp --sport 22 -j ACCEPT

iptables -A INPUT -p tcp --dport 80 -j ACCEPT

iptables -A OUTPUT -p tcp --sport 80 -j ACCEPT

iptables -A OUTPUT -p tcp --dport 80 -j ACCEPT

iptables -A INPUT -p tcp --sport 80 -j ACCEPT

iptables -A OUTPUT -p udp --dport 53 -j ACCEPT

iptables -A INPUT -p udp --sport 53 -j ACCEPT

iptables -A OUTPUT -p udp --dport 123 -j ACCEPT

iptables -A INPUT -p udp --sport 123 -j ACCEPT

iptables -A OUTPUT -p tcp --dport 3307 -j ACCEPT
iptables -A INPUT -p tcp --sport 3307 -j ACCEPT

iptables -P INPUT DROP

iptables -P OUTPUT DROP

iptables -P FORWARD DROP

iptables-save > /etc/iptables.up.rules

/etc/network/interfaces

auto eth0
iface eth0 inet dhcp
pre-up iptables-restore < /etc/iptables.up.rules

1. fix clock

crontab -e

0 12 * * * /usr/sbin/ntpdate cn.pool.ntp.org;/sbin/hwclock -w

1. vim interfaces

auto eth0

iface eth0 inet static

address 192.168.200.141

netmask 255.255.255.0

gateway 192.168.200.2

1. change computer name
   

vim hosts

vim hostname

1. install zend optimizer 3.3

wgethttp://downloads.zend.com/optimizer/3.3.3/ZendOptimizer-3.3.3-linux-glibc23-i386.tar.gz

wgethttp://downloads.zend.com/optimizer/3.3.3/ZendOptimizer-3.3.3-linux-glibc23-x86_64.tar.gz

tar zxvf ZendOptimizer-3.3.3-linux-glibc23-i386.tar.gz

/etc/php5/apache2

/etc/apache2/httpd.conf

1. modify php.ini

date.timzone=Asia/Shanghai
error_reporting = E_ALL & ~E_NOTICE
mysqli.default_port = 3307
mysql.default_port =3307

1. install vmware tools

apt-get install linux-headers-$(uname -r) build-essential gcc make

mount /dev/cdrom /cdrom

cp /cdrom/VMwareTools-5.5.1-19175.tar.gz /tmp

cd /tmp
wgethttp://forum.ubuntu.org.cn/files/vmware-tools-any-update1.tar_189.tar
wgethttp://forum.ubuntu.org.cn/files/patch_165.tar

tar -xf VMwareTools-5.5.1-19175.tar.gz
tar -xf vmware-tools-any-update1.tar_189.tar
tar -xf patch_165.tar

cd /tmp/vmware-tools-distrib

./vmware-install.pl
#当问你是否运行 vmware-config-tools.pl 时回答no

cd /tmp/vmware-tools-any-update1/
./runme.pl
#当问你是否运行 vmware-config-tools.pl 时回答no

cd /usr/bin
patch vmware-config-tools.pl /tmp/patch.txt
./vmware-config-tools.pl

1. modify apache2.conf

ServerLimit 10000
StartServers 5
MinSpareServers 10
MaxSpareServers 20
MaxClients 10000
MaxRequestsPerChild 1000

1. install eaccelerator

apt-get install php5-dev make

wgethttp://bart.eaccelerator.net/source/0.9.5.3/eaccelerator-0.9.5.3.tar.bz2
sudo tar xjvf eaccelerator-0.9.5.3.tar.bz2

export PHP_PREFIX="/usr"
sudo $PHP_PREFIX/bin/phpize
./configure \
--enable-eaccelerator=shared \
--with-php-config=$PHP_PREFIX/bin/php-config
sudo make

sudo make install

4,修改php.ini

zend_extension="/usr/lib/php5/20060613+lfs/eaccelerator.so"
eaccelerator.shm_size="16"
eaccelerator.cache_dir="/tmp/eaccelerator"
eaccelerator.enable="1"
eaccelerator.optimizer="1"
eaccelerator.check_mtime="1"
eaccelerator.debug="0"
eaccelerator.filter=""
eaccelerator.shm_max="0"
eaccelerator.shm_ttl="0"
eaccelerator.shm_prune_period="0"
eaccelerator.shm_only="0"
eaccelerator.compress="1"
eaccelerator.compress_level="9"

5,建立cache

sudo mkdir /tmp/eaccelerator
sudo chmod 0777 /tmp/eaccelerator

1. 删除mysql

sudo apt-get remove libdbd-mysql-perl libdbi-perl libnet-daemon-perl libplrpc-perl mysql-client mysql-client-5.0 mysql-server mysql-server-5.0

17,设置虚拟主机限制

<VirtualHost *:80>
ServerAdminwebmaster@localhost
ServerName 192.168.*.*
DocumentRoot /var/www/nosite/
<Directory />
Options FollowSymLinks
AllowOverride None
</Directory>
<Directory /var/www/nosite/>
Options -Indexes FollowSymLinks MultiViews
AllowOverride None
Order allow,deny
allow from all
</Directory>
ErrorLog /var/log/apache2/nosite-err.log
</VirtualHost>