Linux Cache

https://launchpad.net/~bitcoin/+archive/ubuntu/bitcoin
sudo add-apt-repository ppa:bitcoin/bitcoin
sudo apt-get update

添加软件仓库（软件仓库管理工具）

root@localhost:~# add-apt-repository ppa:bitcoin/bitcoin
The program 'add-apt-repository' is currently not installed. You can install it by typing:
apt install software-properties-common
root@localhost:~# apt-get install software-properties-common
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following packages were automatically installed and are no longer required:
linux-headers-4.4.0-87 linux-headers-4.4.0-87-generic
linux-image-4.4.0-87-generic linux-image-extra-4.4.0-87-generic
Use 'apt autoremove' to remove them.
The following additional packages will be installed:
python3-pycurl python3-software-properties unattended-upgrades
Suggested packages:
libcurl4-gnutls-dev python-pycurl-doc python3-pycurl-dbg bsd-mailx
The following NEW packages will be installed:
python3-pycurl python3-software-properties software-properties-common
unattended-upgrades
0 upgraded, 4 newly installed, 0 to remove and 80 not upgraded.
Need to get 104 kB of archives.
After this operation, 799 kB of additional disk space will be used.
Do you want to continue? [Y/n]

添加软件仓库

root@localhost:~# add-apt-repository ppa:bitcoin/bitcoin
Stable Channel of bitcoin-qt and bitcoind for Ubuntu, and their dependencies

Note that you should prefer to use the official binaries, where possible, to limit trust in Launchpad/the PPA owner.

No longer supports precise, due to its ancient gcc and Boost versions.
More info: https://launchpad.net/~bitcoin/+archive/ubuntu/bitcoin
Press [ENTER] to continue or ctrl-c to cancel adding it

gpg: keyring `/tmp/tmpn1f_v7v0/secring.gpg' created
gpg: keyring `/tmp/tmpn1f_v7v0/pubring.gpg' created
gpg: requesting key 8842CE5E from hkp server keyserver.ubuntu.com
gpg: /tmp/tmpn1f_v7v0/trustdb.gpg: trustdb created
gpg: key 8842CE5E: public key "Launchpad PPA for Bitcoin" imported
gpg: no ultimately trusted keys found
gpg: Total number processed: 1
gpg: imported: 1 (RSA: 1)
OK
root@localhost:~#

更新软件仓库索引

root@localhost:~# apt update
Hit:1 http://mirrors.cloud.aliyuncs.com/ubuntu xenial InRelease
Hit:2 http://mirrors.cloud.aliyuncs.com/ubuntu xenial-security InRelease
Hit:3 http://mirrors.cloud.aliyuncs.com/ubuntu xenial-updates InRelease
Hit:4 http://mirrors.cloud.aliyuncs.com/ubuntu xenial-proposed InRelease
Hit:5 http://mirrors.cloud.aliyuncs.com/ubuntu xenial-backports InRelease
Get:6 http://ppa.launchpad.net/bitcoin/bitcoin/ubuntu xenial InRelease [17.5 kB]
Get:7 http://ppa.launchpad.net/bitcoin/bitcoin/ubuntu xenial/main amd64 Packages [2,788 B]
Get:8 http://ppa.launchpad.net/bitcoin/bitcoin/ubuntu xenial/main i386 Packages [2,788 B]
Get:9 http://ppa.launchpad.net/bitcoin/bitcoin/ubuntu xenial/main Translation-en [1,712 B]
Fetched 24.8 kB in 3s (7,783 B/s)
Reading package lists... Done
Building dependency tree
Reading state information... Done
80 packages can be upgraded. Run 'apt list --upgradable' to see them.
root@localhost:~#

搜索软件包

root@localhost:~# apt search bitcoin
Sorting... Done
Full Text Search... Done
bfgminer/xenial 5.2.0+dfsg-1build1 amd64
multi-threaded multi-pool ASIC, FPGA and GPU bitcoin miner

bitcoin-qt/xenial 0.16.0-xenial1 amd64
peer-to-peer network based digital currency - Qt GUI

bitcoin-tx/xenial 0.16.0-xenial1 amd64
peer-to-peer digital currency - standalone transaction tool

bitcoind/xenial 0.16.0-xenial1 amd64
peer-to-peer network based digital currency - daemon

cgminer/xenial 4.9.2-1build1 amd64
multi-threaded multi-pool Bitcoin miner

libbase58-0/xenial 0.1.4-1 amd64
library for Bitcoin's base58 encoding

libbase58-dev/xenial 0.1.4-1 amd64
library for Bitcoin's base58 encoding -- development files

libbitcoin-dev/xenial 2.0-2.4 amd64
Bitcoin toolkit library for asynchronous apps - development headers

libbitcoin0v5/xenial 2.0-2.4 amd64
Bitcoin toolkit library for asynchronous apps

libbitcoin0v5-dbg/xenial 2.0-2.4 amd64
Bitcoin toolkit library for asynchronous apps - debugging symbols

libblkmaker-0.1-6/xenial 0.5.2-1 amd64
implementation of getblocktemplate protocol

libblkmaker-0.1-dev/xenial 0.5.2-1 amd64
C implementation of getblocktemplate protocol - development files

python-btchip/xenial,xenial 0.1.16-1 all
Python library to communicate with BTChip dongle

python-mnemonic/xenial,xenial 0.12-1 all
Implementation of Bitcoin BIP-0039

python-trezor/xenial,xenial 0.6.10-1 all
library for communicating with TREZOR Bitcoin HW wallet

root@localhost:~#

安装服务节点程序

root@localhost:~# apt-get install bitcoind
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following packages were automatically installed and are no longer required:
linux-headers-4.4.0-87 linux-headers-4.4.0-87-generic
linux-image-4.4.0-87-generic linux-image-extra-4.4.0-87-generic
Use 'apt autoremove' to remove them.
The following additional packages will be installed:
libboost-chrono1.58.0 libboost-filesystem1.58.0
libboost-program-options1.58.0 libdb4.8++ libevent-core-2.0-5
libevent-pthreads-2.0-5 libminiupnpc10 libsodium18 libzmq5
Suggested packages:
minissdpd
The following NEW packages will be installed:
bitcoind libboost-chrono1.58.0 libboost-filesystem1.58.0
libboost-program-options1.58.0 libdb4.8++ libevent-core-2.0-5
libevent-pthreads-2.0-5 libminiupnpc10 libsodium18 libzmq5
0 upgraded, 10 newly installed, 0 to remove and 80 not upgraded.
Need to get 2,994 kB of archives.
After this operation, 10.3 MB of additional disk space will be used.
Do you want to continue? [Y/n]

查看软件包安装结构

root@localhost:~# dpkg -L bitcoind
/.
/usr
/usr/bin
/usr/bin/bitcoind
/usr/bin/bitcoin-cli
/usr/share
/usr/share/lintian
/usr/share/lintian/overrides
/usr/share/lintian/overrides/bitcoind
/usr/share/doc
/usr/share/doc/bitcoind
/usr/share/doc/bitcoind/changelog.Debian.gz
/usr/share/doc/bitcoind/examples
/usr/share/doc/bitcoind/examples/bitcoin.conf.gz
/usr/share/doc/bitcoind/copyright
/usr/share/bash-completion
/usr/share/bash-completion/completions
/usr/share/bash-completion/completions/bitcoind
/usr/share/bash-completion/completions/bitcoin-cli
/usr/share/man
/usr/share/man/man1
/usr/share/man/man1/bitcoin-cli.1.gz
/usr/share/man/man1/bitcoind.1.gz
root@localhost:~#

配置启动脚本
不指定rpcallowip时，RPC仅监听127.0.0.1地址

root@localhost:~# mkdir -p /data/bitcoin
root@localhost:~# vi start.sh
#!/bin/bash
#

/usr/bin/bitcoind -daemon -datadir=/data/bitcoin -bind=192.168.199.100 -port=8333 \
-server -rpcbind=192.168.199.100 -rpcport=8332 -rpcallowip=192.168.199.0/24 \
-rpcthreads=4 -rpcuser=tom -rpcpassword=123456;

exit 0;
root@localhost:~# chmod 700 start.sh
root@localhost:~# ./start.sh
Bitcoin server starting
root@localhost:~#

查看监听

root@localhost:~# netstat -lnt
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address Foreign Address State
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN
tcp 0 0 127.0.0.1:32000 0.0.0.0:* LISTEN
tcp 0 0 192.168.199.100:8332 0.0.0.0:* LISTEN
tcp 0 0 192.168.199.100:8333 0.0.0.0:* LISTEN
tcp 0 0 0.0.0.0:42832 0.0.0.0:* LISTEN
tcp6 0 0 :::36003 :::* LISTEN
root@localhost:~# netstat -tn
Active Internet connections (w/o servers)
Proto Recv-Q Send-Q Local Address Foreign Address State
tcp 0 0 192.168.199.100:691 10.22.107.25:2049 ESTABLISHED
tcp 0 0 192.168.199.100:50502 144.76.98.163:8333 TIME_WAIT
tcp 0 164 192.168.199.100:22 10.22.100.1:33336 ESTABLISHED
tcp 0 0 192.168.199.100:44482 117.81.184.11:8333 ESTABLISHED
tcp 0 0 192.168.199.100:48848 163.172.186.236:8333 TIME_WAIT
tcp 0 0 127.0.0.1:32000 127.0.0.1:31000 ESTABLISHED
tcp 0 0 192.168.199.100:39614 78.46.177.74:8333 TIME_WAIT
tcp 0 0 192.168.199.100:40814 100.100.35.4:3128 ESTABLISHED
tcp 0 0 127.0.0.1:31000 127.0.0.1:32000 ESTABLISHED
tcp 0 127 192.168.199.100:45176 82.118.242.132:8333 FIN_WAIT1
tcp 0 0 192.168.199.100:56672 39.105.48.188:8333 ESTABLISHED
tcp 0 0 192.168.199.100:46430 47.75.168.155:8333 ESTABLISHED
tcp 0 0 192.168.199.100:55654 106.11.68.13:80 ESTABLISHED
root@localhost:~#

调试请求接口

[root@oms ~]# curl --user 'tom:123456' --data-binary '''
> {
> "method": "getblockhash",
> "params": [0],
> "id": "foo"
> }''' \
> --header 'Content-Type: text/plain;' 192.168.199.100:8332
{"result":"000000000019d6689c085ae165831e934ff763ae46a2a6c172b3f1b60a8ce26f","error":null,"id":"foo"}
[root@oms ~]#

NFS协议挂载NAS服务的性能调优

本地最小化镜像安装后的默认内核参数配置

[root@localhost ~]# sysctl -p
net.ipv4.conf.all.arp_notify = 1
[root@localhost ~]#
[root@localhost ~]# cat /etc/redhat-release
CentOS Linux release 7.4.1708 (Core)
[root@localhost ~]#

阿里云标准ECS镜像的默认内核参数配置

[root@oms ~]# sysctl -p
net.ipv6.conf.all.disable_ipv6 = 1
net.ipv6.conf.default.disable_ipv6 = 1
net.ipv6.conf.lo.disable_ipv6 = 1
vm.swappiness = 0
net.ipv4.neigh.default.gc_stale_time = 120
net.ipv4.conf.all.rp_filter = 0
net.ipv4.conf.default.rp_filter = 0
net.ipv4.conf.default.arp_announce = 2
net.ipv4.conf.lo.arp_announce = 2
net.ipv4.conf.all.arp_announce = 2
net.ipv4.tcp_max_tw_buckets = 5000
net.ipv4.tcp_syncookies = 1
net.ipv4.tcp_max_syn_backlog = 1024
net.ipv4.tcp_synack_retries = 2
kernel.sysrq = 1
[root@oms ~]#
[root@oms ~]# cat /etc/redhat-release
CentOS Linux release 7.4.1708 (Core)
[root@oms ~]#

NSF协议调优参数配置
cat /proc/sys/sunrpc/tcp_slot_table_entries

修改
echo “options sunrpc tcp_slot_table_entries=128” >> /etc/modprobe.d/sunrpc.conf
echo “options sunrpc tcp_max_slot_table_entries=128” >> /etc/modprobe.d/sunrpc.conf
sysctl -w sunrpc.tcp_slot_table_entries=128

查询镜像

[root@swarm4 ~]# curl -XGET http://192.168.50.216:5000/v2/_catalog
{"repositories":["centos","opensuse","ubuntu"]}
[root@swarm4 ~]#

查询镜像版本

[root@swarm4 ~]# curl -XGET http://192.168.50.216:5000/v2/ubuntu/tags/list
{"name":"ubuntu","tags":["16.04","18.04"]}
[root@swarm4 ~]# curl -XGET http://192.168.50.216:5000/v2/centos/tags/list
{"name":"centos","tags":["6.9","7.4.1708","6.7","6.6"]}
[root@swarm4 ~]# curl -XGET http://192.168.50.216:5000/v2/opensuse/tags/list
{"name":"opensuse","tags":["42.3"]}
[root@swarm4 ~]#

Docker Swarm集群管理节点的提升和降级

查看集群节点状态，仅有一个管理节点

[root@swarm1 ~]# docker node ls
ID HOSTNAME STATUS AVAILABILITY MANAGER STATUS ENGINE VERSION
rlle6k39z3xk82f1wqmjpd4m4 * swarm1 Ready Active Leader 18.03.1-ce
fzi0eoey60bd25cklvt5qg6p5 swarm2 Ready Active 18.03.1-ce
59optctp5n9zvv3lvaifel7bx swarm3 Ready Active 18.03.1-ce
ixqldqaby2jrgfqx7ckjpg0zs swarm4 Ready Active 18.03.1-ce
[root@swarm1 ~]#

查看工作节点仅监听7946端口

[root@swarm4 ~]# netstat -lnt
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address Foreign Address State
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN
tcp 0 0 127.0.0.1:25 0.0.0.0:* LISTEN
tcp6 0 0 :::7946 :::* LISTEN
tcp6 0 0 :::22 :::* LISTEN
tcp6 0 0 ::1:25 :::* LISTEN
[root@swarm4 ~]#

提升swarm4为管理节点

[root@swarm1 ~]# docker node promote swarm4
Node swarm4 promoted to a manager in the swarm.
[root@swarm1 ~]#

查看swarm4节点端口监听状态，新增监听2237端口

[root@swarm4 ~]# netstat -lnt
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address Foreign Address State
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN
tcp 0 0 127.0.0.1:25 0.0.0.0:* LISTEN
tcp6 0 0 :::2377 :::* LISTEN
tcp6 0 0 :::7946 :::* LISTEN
tcp6 0 0 :::22 :::* LISTEN
tcp6 0 0 ::1:25 :::* LISTEN
[root@swarm4 ~]#

在管理节点查看集群节点状态

降级为工作节点

[root@swarm1 ~]# docker node demote swarm4
Manager swarm4 demoted in the swarm.
[root@swarm1 ~]#

集群管理节点容错数量

Docker 软件源仓库及本地镜像仓库配置

https://dl.fedoraproject.org/pub/epel/epel-release-latest-7.noarch.rpm
https://download.docker.com/linux/centos/docker-ce.repo

修改docker-ce软件源仓库配置文件（使用清华或科大镜像服务器）

sed -i 's+download.docker.com+mirrors.tuna.tsinghua.edu.cn/docker-ce+' /etc/yum.repos.d/docker-ce.repo
sed -i 's+download.docker.com+mirrors.ustc.edu.cn/docker-ce+' /etc/yum.repos.d/docker-ce.rep

手动添加软件源仓库配置文件

[root@swarm1 ~]# vi /etc/yum.repos.d/docker-ce.repo
[docker-ce-stable]
name=Docker CE Stable - $basearch
baseurl=https://mirrors.ustc.edu.cn/docker-ce/linux/centos/7/$basearch/stable
enabled=1
gpgcheck=1
gpgkey=https://mirrors.ustc.edu.cn/docker-ce/linux/centos/gpg

[docker-ce-stable-debuginfo]
name=Docker CE Stable - Debuginfo $basearch
baseurl=https://mirrors.ustc.edu.cn/docker-ce/linux/centos/7/debug-$basearch/stable
enabled=0
gpgcheck=1
gpgkey=https://mirrors.ustc.edu.cn/docker-ce/linux/centos/gpg

[docker-ce-stable-source]
name=Docker CE Stable - Sources
baseurl=https://mirrors.ustc.edu.cn/docker-ce/linux/centos/7/source/stable
enabled=0
gpgcheck=1
gpgkey=https://mirrors.ustc.edu.cn/docker-ce/linux/centos/gpg

[docker-ce-edge]
name=Docker CE Edge - $basearch
baseurl=https://mirrors.ustc.edu.cn/docker-ce/linux/centos/7/$basearch/edge
enabled=0
gpgcheck=1
gpgkey=https://mirrors.ustc.edu.cn/docker-ce/linux/centos/gpg

[docker-ce-edge-debuginfo]
name=Docker CE Edge - Debuginfo $basearch
baseurl=https://mirrors.ustc.edu.cn/docker-ce/linux/centos/7/debug-$basearch/edge
enabled=0
gpgcheck=1
gpgkey=https://mirrors.ustc.edu.cn/docker-ce/linux/centos/gpg

[docker-ce-edge-source]
name=Docker CE Edge - Sources
baseurl=https://mirrors.ustc.edu.cn/docker-ce/linux/centos/7/source/edge
enabled=0
gpgcheck=1
gpgkey=https://mirrors.ustc.edu.cn/docker-ce/linux/centos/gpg

[docker-ce-test]
name=Docker CE Test - $basearch
baseurl=https://mirrors.ustc.edu.cn/docker-ce/linux/centos/7/$basearch/test
enabled=0
gpgcheck=1
gpgkey=https://mirrors.ustc.edu.cn/docker-ce/linux/centos/gpg

[docker-ce-test-debuginfo]
name=Docker CE Test - Debuginfo $basearch
baseurl=https://mirrors.ustc.edu.cn/docker-ce/linux/centos/7/debug-$basearch/test
enabled=0
gpgcheck=1
gpgkey=https://mirrors.ustc.edu.cn/docker-ce/linux/centos/gpg

[docker-ce-test-source]
name=Docker CE Test - Sources
baseurl=https://mirrors.ustc.edu.cn/docker-ce/linux/centos/7/source/test
enabled=0
gpgcheck=1
gpgkey=https://mirrors.ustc.edu.cn/docker-ce/linux/centos/gpg

[docker-ce-nightly]
name=Docker CE Nightly - $basearch
baseurl=https://mirrors.ustc.edu.cn/docker-ce/linux/centos/7/$basearch/nightly
enabled=0
gpgcheck=1
gpgkey=https://mirrors.ustc.edu.cn/docker-ce/linux/centos/gpg

[docker-ce-nightly-debuginfo]
name=Docker CE Nightly - Debuginfo $basearch
baseurl=https://mirrors.ustc.edu.cn/docker-ce/linux/centos/7/debug-$basearch/nightly
enabled=0
gpgcheck=1
gpgkey=https://mirrors.ustc.edu.cn/docker-ce/linux/centos/gpg

[docker-ce-nightly-source]
name=Docker CE Nightly - Sources
baseurl=https://mirrors.ustc.edu.cn/docker-ce/linux/centos/7/source/nightly
enabled=0
gpgcheck=1
gpgkey=https://mirrors.ustc.edu.cn/docker-ce/linux/centos/gpg

安装

[root@swarm1 ~]# yum makecache
[root@swarm1 ~]# yum install docker-ce

版本和依赖

================================================================================
Package Arch Version Repository Size
================================================================================
Installing:
docker-ce x86_64 18.03.1.ce-1.el7.centos docker-ce-stable 35 M
Installing for dependencies:
audit-libs-python x86_64 2.8.1-3.el7 base 75 k
checkpolicy x86_64 2.5-6.el7 base 294 k
container-selinux noarch 2:2.55-1.el7 extras 34 k
libcgroup x86_64 0.41-15.el7 base 65 k
libseccomp x86_64 2.3.1-3.el7 base 56 k
libsemanage-python x86_64 2.5-11.el7 base 112 k
libtool-ltdl x86_64 2.4.2-22.el7_3 base 49 k
pigz x86_64 2.3.4-1.el7 epel 81 k
policycoreutils-python x86_64 2.5-22.el7 base 454 k
python-IPy noarch 0.75-6.el7 base 32 k
setools-libs x86_64 3.3.8-2.el7 base 619 k

Transaction Summary
================================================================================
Install 1 Package (+11 Dependent packages)

启用并启动docker服务

[root@swarm1 ~]# systemctl enable docker
Created symlink from /etc/systemd/system/multi-user.target.wants/docker.service to /usr/lib/systemd/system/docker.service.
[root@swarm1 ~]# systemctl start docker
[root@swarm1 ~]#

增加本地公共仓库和本地非https镜像仓库的连接支持

[root@swarm1 ~]# vi /etc/docker/daemon.json
{
"registry-mirrors": ["https://docker.mirrors.ustc.edu.cn/"],
"insecure-registries": ["192.168.50.216:5000"]
}