### rsync常见问题及解决办法

使用rsync往服务器上传文件时，client报如下异常：

```
@ERROR: auth failed on module XXX

rsync error: error starting client-server protocol (code 5) at main.c(1503) [Receiver=3.0.6]
```



#### 排查步骤：
1. 检查server端和client端的用户名和密码确认都无误；
   - 服务器端检查 `/etc/rsync.pass` 密码文件
   - 客户端检查 `--password-file` 配置的密码文件

2. 检查server端rsync日志
   - 可以通过rsync配置来查看日志文件位置

### 服务端(rsync)问题

#### 问题一：
```
@ERROR: chroot failed
rsync error: error starting client-server protocol (code 5) at main.c(1522) [receiver=3.0.3]
```

**原因：**
服务器端的目录不存在或无权限，创建目录并修正权限可解决问题。

#### 问题二：
```
@ERROR: auth failed on module tee
rsync error: error starting client-server protocol (code 5) at main.c(1522) [receiver=3.0.3]
```

**原因：**
服务器端该模块（tee）需要验证用户名密码，但客户端没有提供正确的用户名密码，认证失败。提供正确的用户名密码解决此问题。

#### 问题三：
```
@ERROR: Unknown module ‘tee_nonexists’
rsync error: error starting client-server protocol (code 5) at main.c(1522) [receiver=3.0.3]
```

**原因：**
服务器不存在指定模块。提供正确的模块名或在服务器端修改成你要的模块以解决问题。

#### 问题四：
```
password file must not be other-accessible
continuing without password file
Password:
```

**原因：**
这是因为 `rsyncd.pwd` 或 `rsyncd.secrets` 的权限不对，应该设置为600。如：`chmod 600 rsyncd.pwd`

#### 问题五：
```
rsync: failed to connect to 218.107.243.2: No route to host (113)
rsync error: error in socket IO (code 10) at clientserver.c(104) [receiver=2.6.9]
```

**原因：**
对方没开机、防火墙阻挡、通过的网络上有防火墙阻挡，都有可能。关闭防火墙，其实就是把tcp udp的873端口打开。

#### 问题六：
```
rsync error: error starting client-server protocol (code 5) at main.c(1524) [Receiver=3.0.7]
```

**原因：**
`/etc/rsyncd.conf` 配置文件内容有错误。请正确核对配置文件。

#### 问题七：
```
rsync: chown "" failed: Invalid argument (22)
```

**原因：**
权限无法复制。去掉同步权限的参数即可。(这种情况多见于Linux向Windows的时候)

#### 问题八：
```
@ERROR: daemon security issue -- contact admin
rsync error: error starting client-server protocol (code 5) at main.c(1530) [sender=3.0.6]
```

**原因：**
同步的目录里面有软连接文件，需要服务器端的 `/etc/rsyncd.conf` 打开 `use chroot = yes`。掠过软连接文件。

#### 问题九：
```
ERROR: module is read only
rsync error: syntax or usage error (code 1) at main.c(747) [receiver=2.6.8]
rsync: connection unexpectedly closed (4 bytes received so far) [sender]
rsync error: error in rsync protocol data stream (code 12) at io.c(600) [sender=3.0.6]
```

**解决：**
提示打开了read only，将配置文件 `read only = no`

#### 问题十：
```
cat /var/log/rsyncd.log
2011/12/14 11:58:37 [22377] name lookup failed for XX.XX.XX.XX: Name or service not known
2011/12/14 11:58:37 [22377] connect from UNKNOWN (XX.XX.XX.XX)
2011/12/14 11:58:37 [22377] rsync to html/ from unknown (XX.XX.XX.XX)
```

**解决：**
需要在服务端这台机上的 `/etc/hosts` 里面添加客户端机的ip和机器名

#### 问题十一：
```
[root@Dell-R710 ~]# rsync -artuz -R --delete ./ 192.168.1.233::gex
rsync: failed to connect to 61.145.118.206: Connection refused (111)
rsync error: error in socket IO (code 10) at clientserver.c(124) [sender=3.0.6]
```

**解决：**
1. 查看防火墙
2. 查看服务端是否开启守护进程

```
ps ax|grep rsync
rsync --daemon --config=/etc/rsyncd.conf
```

### 客户端(client)问题

#### 问题1：
**错误信息：**
```
rsync -auzv --progress --password-file=/etc/rsync.pas root@192.168.133.128::backup /home/
rsync: could not open password file "/etc/rsync.pas": No such file or directory (2)
Password: 
@ERROR: auth failed on module backup
rsync error: error starting client-server protocol (code 5) at main.c(1506) [Receiver=3.0.7]
```

**解决方案：**
- 确保客户端存在 `/etc/rsync.pas` 文件，或者修改命令中的文件路径为正确的密码文件路径。

#### 问题2：
**错误信息：**
```
rsync -auzv --progress --password-file=/etc/rsync.pas root@192.168.133.128::backup /home/
@ERROR: auth failed on module backup
rsync error: error starting client-server protocol (code 5) at main.c(1506) [Receiver=3.0.7]
```

**解决方案：**
- 确保服务器端设置了正确的密码文件路径和格式，如 `/etc/rsync.pas` 内容为 `root:111111`。

#### 问题3：
**错误信息：**
```
rsync -auzv --progress --password-file=/etc/rsync.pas root@192.168.133.128::backup /home/
@ERROR: chdir failed
rsync error: error starting client-server protocol (code 5) at main.c(1506) [Receiver=3.0.7]
```

**解决方案：**
- 确保服务器端的目录存在并设置正确的权限，如 `/home/backup` 目录是否存在。

#### 问题4：
**错误信息：**
```
rsync: write failed on "/home/backup2010/wensong": No space left on device (28)
rsync error: error in file IO (code 11) at receiver.c(302) [receiver=3.0.7]
rsync: connection unexpectedly closed (2721 bytes received so far) [generator]
rsync error: error in rsync protocol data stream (code 12) at io.c(601) [generator=3.0.7]
```

**解决方案：**
- 检查磁盘空间是否足够，使用 `df /home/backup2010` 查看可用空间。

### 网络收集问题

1. **权限问题：**
    - 错误信息：
      ```
      rsync: opendir "/kexue" (in dtsChannel) failed: Permission denied (13)
      ```
    - 解决方案：检查同步目录权限是否为755。

2. **Time out：**
    - 错误信息：
      ```
      rsync: failed to connect to 203.100.192.66: Connection timed out (110)
      rsync error: error in socket IO (code 10) at clientserver.c(124) [receiver=3.0.5]
      ```
    - 解决方案：检查服务器的端口 `netstat –tunlp`，远程 `telnet` 测试。

3. **服务未启动：**
    - 错误信息：
      ```
      rsync: failed to connect to 10.10.10.170: Connection refused (111)
      rsync error: error in socket IO (code 10) at clientserver.c(124) [receiver=3.0.5]
      ```
    - 解决方案：启动服务：`rsync --daemon --config=/etc/rsyncd.conf`

4. **磁盘空间满：**
    - 错误信息：
      ```
      rsync: recv_generator: mkdir "/teacherclubBackup/rsync……" failed: No space left on device (28)
      *** Skipping any contents from this failed directory ***
      ```
    - 解决方案：释放磁盘空间。

5. **Ctrl+C或者大量文件：**
    - 错误信息：
      ```
      rsync error: received SIGINT, SIGTERM, or SIGHUP (code 20) at rsync.c(544) [receiver=3.0.5]
      rsync error: received SIGINT, SIGTERM, or SIGHUP (code 20) at rsync.c(544) [generator=3.0.5]
      ```
    - 解决方案：处理中断信号或减少文件数量。

6. **xnetid启动：**
    - 错误信息：
      ```
      rsync: read error: Connection reset by peer (104)
      rsync error: error in rsync protocol data stream (code 12) at io.c(759) [receiver=3.0.5]
      rsync: unable to open configuration file "/etc/rsyncd.conf": No such file or directory
      ```
    - 解决方案：查看rsync日志或更改配置文件路径。例如：
      ```bash
      ln -s /etc/rsyncd/rsyncd.conf /etc/rsyncd.conf
      ```
      或者在 `/etc/xinetd.d/rsync` 配置文件中指定默认的配置文件路径。

RSYNC @ERROR: AUTH FAILED ON MODULE XXX 解决思路及附录RSYNC常见问题及解决办法 

# 1.先重启系统，在此界面时迅速按Ctrl+G(或者鼠标单击虚拟机内部)并按一下键盘上的方向键↑或↓，因为系统2秒后会自动进入，我们第一步做的就是先阻止它自动进入系统。

![image.png](/static/img/3b45a11e3ded8c68082d1d1e469f2bc7.image.webp)





# 2. 然后按下键盘上的e进入编辑模式，如下图

![image.png](/static/img/57cbfe833d99d134195c3e40c86e1718.image.webp)

# 3.不断按键盘↓找到以linux开头的行，然后继续移动光标至该段落的最后，比如这边我应该移动到loglevel=3 queit 后面，在它后面添加一个空格并输入init=/bin/sh

![image.png](/static/img/e2b1564ca7761c8b81420d0550e165a1.image.webp)

# 4. 键盘按下CTRL+X进行引导启动，成功后会进入新界面,如图依次输入以下命令

![image.png](/static/img/5cd87217196d16ec32cbf002ca8eb33c.image.webp)

- 在单用户模式下，使用 `passwd root` 命令重置密码
- 输入 `exec /sbin/init` 等待系统自动重启就修改完成啦

VMware Linux 虚拟机忘记密码

# 为什么要学习使用archlinux和安装archlinux

![image.png](/static/img/977a2da6b1f3bed996b334999ba12e7d.image.webp)
- 在众多的Linux发行版中, archlinux的软件和内核策略一直是较为激进的(追求最新的软件发行版本) —— 滚动跟新软件和Linux内核, 在使用archlinux可以使用到几乎最新的软件和Linux内核.
- 而众多的Linux发行版中例如: redhat系列和Debian系列均提供较为友好的图形化安装界面, 但随之而的问题是Linux的底层是命令行, Linux通过终端或者说命令行来与用户交互, 而archlinux的默认安装方式即是通过键入命令来进行分区、选择时区、语言、引导程序的安装等, 通过安装archlinux可以更加直观的看到使用linux命令带来的效果, 更加深入的理解linux和linux的哲学 —— "Everything is a file"



# 安装前的准备
# archlinux镜像的获取
- [archlinux官网](https://archlinux.org/)
- [阿里云archlinux镜像站](https://mirrors.aliyun.com/archlinux/iso/)
- [西安交通大学archlinux镜像站](https://mirrors.xjtu.edu.cn/archlinux/iso/)

## VMware的相关设置
1. 新建虚拟机后选择自定义
 
![image.png](/static/img/b21b0703dbf8af2d246754a0fe17c4c5.image.webp)

2. 将版本选择为Linux6.x 内核版本

![image.png](/static/img/db22a6234ae50f2dc90f72f3747535b1.image.webp)

3. 为方便使用和安装快一点可以将配置给高一点

![image.png](/static/img/d537a1a6af505041778d972cf1aab483.image.webp)

![image.png](/static/img/851290abb494dc40bb249ce7e79630d1.image.webp)

4. 在CD/DVD 将 ISO 镜像选择下载好的archlinux.iso镜像

![image.png](/static/img/ce65e875abc5211a6c08a3cee519ff9f.image.webp)

5. 最终配置

![image.png](/static/img/1d8ad68e3ca078a8c9d6c49617fafea4.image.webp)

# 安装过程
## 选择第一个选项即可开始安装

![image.png](/static/img/7a641fd85568bd3f55a7ec615cd455ef.image.webp)

- 安装界面

![image.png](/static/img/3f20018031fe854d5b669a33824fec52.image.webp)

## 检查一下网络
- **这里我使用了ssh连接**
```zsh
root@archiso ~ # ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host noprefixroute
       valid_lft forever preferred_lft forever
2: ens33: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000
    link/ether 00:0c:29:13:7d:5a brd ff:ff:ff:ff:ff:ff
    altname enp2s1
    inet 192.168.12.135/24 metric 100 brd 192.168.12.255 scope global dynamic ens33
       valid_lft 1523sec preferred_lft 1523sec
    inet6 fe80::20c:29ff:fe13:7d5a/64 scope link proto kernel_ll
       valid_lft forever preferred_lft forever
root@archiso ~ # ping www.baidu.com
PING www.baidu.com (198.18.0.124) 56(84) bytes of data.
64 bytes from 198.18.0.124: icmp_seq=1 ttl=128 time=0.778 ms
64 bytes from 198.18.0.124: icmp_seq=2 ttl=128 time=1.10 ms
64 bytes from 198.18.0.124: icmp_seq=3 ttl=128 time=1.30 ms
64 bytes from 198.18.0.124: icmp_seq=4 ttl=128 time=1.04 ms
^C
--- www.baidu.com ping statistics ---
4 packets transmitted, 4 received, 0% packet loss, time 3008ms
rtt min/avg/max/mdev = 0.778/1.055/1.304/0.187 ms
```
- 安装一下网络工具
```zsh
root@archiso ~ # pacman -Sy net-tools
```

## 更新系统时钟
```zsh
root@archiso ~ # timedatectl set-ntp true
root@archiso ~ # timedatectl status
               Local time: Thu 2024-05-30 04:20:26 UTC
           Universal time: Thu 2024-05-30 04:20:26 UTC
                 RTC time: Thu 2024-05-30 04:20:26
                Time zone: UTC (UTC, +0000)
System clock synchronized: yes
              NTP service: active
          RTC in local TZ: no
```

## 查看启动模式
- 命令行输入`ls /sys/firmware/efi/efivars`
- 若列出了efivars目录则为UEFI启动，若提示该目录不存在则为BIOS启动，要记住自己是哪种启动类型，后面操作不同的启动类型方法不同
- 我的是BIOS启动
```zsh
root@archiso ~ # ls /sys/firmware/efi/efivars
ls: cannot access '/sys/firmware/efi/efivars': No such file or directory
```

## 分区
### 查看分区情况
```zsh
root@archiso ~ # lsblk
NAME  MAJ:MIN RM   SIZE RO TYPE MOUNTPOINTS
loop0   7:0    0 788.9M  1 loop /run/archiso/airootfs
sda     8:0    0    40G  0 disk
sr0    11:0    1   1.1G  0 rom  /run/archiso/bootmnt
```

### 进行分区
#### 磁盘转换类型
:::tip{title="提示"}
如果是UEFI启动请选择gpt，如果是BIOS启动请选择dos
:::
```zsh
root@archiso ~ # parted /dev/sda
GNU Parted 3.6
Using /dev/sda
Welcome to GNU Parted! Type 'help' to view a list of commands.
(parted) help
  align-check TYPE N                       check partition N for TYPE(min|opt) alignment
  help [COMMAND]                           print general help, or help on COMMAND
  mklabel,mktable LABEL-TYPE               create a new disklabel (partition table)
  mkpart PART-TYPE [FS-TYPE] START END     make a partition
  name NUMBER NAME                         name partition NUMBER as NAME
  print [devices|free|list,all]            display the partition table, or available devices, or free space, or all
        found partitions
  quit                                     exit program
  rescue START END                         rescue a lost partition near START and END
  resizepart NUMBER END                    resize partition NUMBER
  rm NUMBER                                delete partition NUMBER
  select DEVICE                            choose the device to edit
  disk_set FLAG STATE                      change the FLAG on selected device
  disk_toggle [FLAG]                       toggle the state of FLAG on selected device
  set NUMBER FLAG STATE                    change the FLAG on partition NUMBER
  toggle [NUMBER [FLAG]]                   toggle the state of FLAG on partition NUMBER
  type NUMBER TYPE-ID or TYPE-UUID         type set TYPE-ID or TYPE-UUID of partition NUMBER
  unit UNIT                                set the default unit to UNIT
  version                                  display the version number and copyright information of GNU Parted
(parted) mklabel msdos
```

#### 使用cfdisk进行分区
`root@archiso ~ # cfdisk`

![image.png](/static/img/5ec7c1678952dc13db8c0c39698ec0b1.image.webp)

- 选择Write输入yes
- 查看分区情况
```zsh
root@archiso ~ # lsblk
NAME   MAJ:MIN RM   SIZE RO TYPE MOUNTPOINTS
loop0    7:0    0 788.9M  1 loop /run/archiso/airootfs
sda      8:0    0    40G  0 disk
├─sda1   8:1    0     8G  0 part
└─sda2   8:2    0    32G  0 part
sr0     11:0    1   1.1G  0 rom  /run/archiso/bootmnt
```

#### 格式化分区
- 命令行输入mkswap /dev/sda1，格式化swap分区
```zsh
root@archiso ~ # mkswap /dev/sda1
Setting up swapspace version 1, size = 8 GiB (8589930496 bytes)
no label, UUID=403dec77-10b0-4549-a258-29e57803cd32
```
- 命令行输入mkfs.ext4 /dev/sda2，格式化系统分区
```zsh
root@archiso ~ # mkfs.ext4 /dev/sda2
mke2fs 1.47.0 (5-Feb-2023)
Creating filesystem with 8388352 4k blocks and 2097152 inodes
Filesystem UUID: 3368f08d-2ca8-47c1-823d-8ce569c4f6ed
Superblock backups stored on blocks:
        32768, 98304, 163840, 229376, 294912, 819200, 884736, 1605632, 2654208,
        4096000, 7962624

Allocating group tables: done
Writing inode tables: done
Creating journal (32768 blocks): done
Writing superblocks and filesystem accounting information: done
```

- 命令行输入swapon /dev/sda1，激活swap分区
```zsh
root@archiso ~ # swapon /dev/sda1
```

#### 挂载分区
- 命令行输入mount /dev/sda2 /mnt，将系统分区/dev/sda2挂载到/mnt目录。
```zsh
32 root@archiso ~ # mount /dev/sda2 /mnt
root@archiso ~ # lsblk
NAME   MAJ:MIN RM   SIZE RO TYPE MOUNTPOINTS
loop0    7:0    0 788.9M  1 loop /run/archiso/airootfs
sda      8:0    0    40G  0 disk
├─sda1   8:1    0     8G  0 part [SWAP]
└─sda2   8:2    0    32G  0 part /mnt
sr0     11:0    1   1.1G  0 rom  /run/archiso/bootmnt
root@archiso ~ # df -h
Filesystem      Size  Used Avail Use% Mounted on
dev             1.9G     0  1.9G   0% /dev
run             1.9G   11M  1.9G   1% /run
/dev/sr0        1.1G  1.1G     0 100% /run/archiso/bootmnt
cowspace        256M  9.8M  247M   4% /run/archiso/cowspace
/dev/loop0      789M  789M     0 100% /run/archiso/airootfs
airootfs        256M  9.8M  247M   4% /
tmpfs           1.9G     0  1.9G   0% /dev/shm
tmpfs           1.9G     0  1.9G   0% /tmp
tmpfs           1.9G  2.6M  1.9G   1% /etc/pacman.d/gnupg
tmpfs           389M  8.0K  389M   1% /run/user/0
/dev/sda2        32G  2.1M   30G   1% /mnt
```

## 安装系统
### 必须的基础包
```zsh
root@archiso ~ # pacstrap /mnt base base-devel linux linux-headers linux-firmware
```

### 必须的功能性软件
```zsh
root@archiso ~ # pacstrap /mnt dhcpcd iwd vim bash-completion
```

## 生成文件系统表
```zsh
root@archiso ~ # genfstab -U /mnt >> /mnt/etc/fstab
root@archiso ~ # cat /mnt/etc/fstab
# Static information about the filesystems.
# See fstab(5) for details.

# <file system> <dir> <type> <options> <dump> <pass>
# /dev/sda2
UUID=3368f08d-2ca8-47c1-823d-8ce569c4f6ed       /               ext4            rw,relatime     0 1

# /dev/sda1
UUID=403dec77-10b0-4549-a258-29e57803cd32       none            swap            defaults        0 0
```

## 进入系统进行相关配置
### 进入系统
```zsh
root@archiso ~ # arch-chroot /mnt
[root@archiso /]# 
```

### 设置时区
```bash
[root@archiso /]# ln -sf /usr/share/zoneinfo/Asia/Shanghai /etc/localtime
```
- 同步硬件时钟
```bash
[root@archiso /]# hwclock --systohc
```

### 本地化设置
```bash
[root@archiso /]# vim /etc/locale.gen
#en_SG.UTF-8 UTF-8
#en_SG ISO-8859-1
en_US.UTF-8 UTF-8
#en_US ISO-8859-1
#en_ZA.UTF-8 UTF-8
#en_ZA ISO-8859-1
#en_ZM UTF-8
```
- 将en_US.UTF-8 UTF-8前的注释取消
- 输入locale-gen生成locale信息
```bash
[root@archiso /]# locale-gen
Generating locales...
  en_US.UTF-8... done
Generation complete.
```
- 输入locale -a列出所有启用的locale
```bash
[root@archiso /]# locale -a
C
C.utf8
POSIX
en_US.utf8
```
- 创建 locale.conf文件，编辑设定 LANG 变量, 输入locale，查看一下
```bash
[root@archiso /]# echo LANG=en_US.UTF-8 > /etc/locale.conf
[root@archiso /]# local
bash: local: can only be used in a function
[root@archiso /]# local
local       locale      locale-gen  localectl   localedef
[root@archiso /]# locale
LANG=C.UTF-8
LC_CTYPE="C.UTF-8"
LC_NUMERIC="C.UTF-8"
LC_TIME="C.UTF-8"
LC_COLLATE="C.UTF-8"
LC_MONETARY="C.UTF-8"
LC_MESSAGES=
LC_PAPER="C.UTF-8"
LC_NAME="C.UTF-8"
LC_ADDRESS="C.UTF-8"
LC_TELEPHONE="C.UTF-8"
LC_MEASUREMENT="C.UTF-8"
LC_IDENTIFICATION="C.UTF-8"
LC_ALL=
```

## 设置主机名
- 在/etc/hostname设置主机名
- 在/etc/hosts设置与其匹配的条目。
```
[root@archiso /]# vim /etc/hostname
arch01
[root@archiso /]# vim /etc/hosts
# Static table lookup for hostnames.
# See hosts(5) for details.
127.0.0.1   localhost
::1         localhost
127.0.1.1   arch01
```

## 安装引导程序
```bash
# grub是启动引导器，efibootmgr被 grub 脚本用来将启动项写入 NVRAM。
[root@archiso /]# pacman -S grub efibootmgr
[root@archiso /]# grub-install /dev/sda
```
### 生成grub的配置文件
- 输入`grub-mkconfig -o /boot/grub/grub.cfg`，生成grub的配置文件
```bash
[root@archiso /]# grub-mkconfig -o /boot/grub/grub.cfg
Generating grub configuration file ...
Found linux image: /boot/vmlinuz-linux
Found initrd image: /boot/initramfs-linux.img
Found fallback initrd image(s) in /boot:  initramfs-linux-fallback.img
Warning: os-prober will not be executed to detect other bootable partitions.
Systems on them will not be added to the GRUB boot configuration.
Check GRUB_DISABLE_OS_PROBER documentation entry.
Adding boot menu entry for UEFI Firmware Settings ...
done
```
>这里出现了警告，按照提示处理一下在grub文件中取消GRUB_DISABLE_OS_PROBER=false注释
```bash
[root@archiso /]# vim /etc/default/grub
GRUB_DISABLE_OS_PROBER=false
```
- 再次执行命令
```bash
[root@archiso /]# grub-mkconfig -o /boot/grub/grub.cfg
Generating grub configuration file ...
Found linux image: /boot/vmlinuz-linux
Found initrd image: /boot/initramfs-linux.img
Found fallback initrd image(s) in /boot:  initramfs-linux-fallback.img
Adding boot menu entry for UEFI Firmware Settings ...
done
```
- 没有警告出现

## 完成安装
```zsh
[root@archiso /]# exit           # 退回安装环境#
exit
root@archiso ~ # umount -R /mnt  # 卸载新分区
root@archiso ~ # reboot          # 重启
```

# 插曲忘记设置root密码😅
- [VMware Linux虚拟机忘记密码](https://www.gycblog.top/post/26)

# 参考资料
- [Arch Linux 安装使用教程 - ArchTutorial - Arch Linux Studio](https://archlinuxstudio.github.io/ArchLinuxTutorial/#/)
- [VMware安装Arch Linux](https://blog.csdn.net/qq_41290557/article/details/127967657)
<iframe src="//player.bilibili.com/player.html?aid=820922689&bvid=BV1J34y1f74E&cid=982870052&p=1&autoplay=0&high_quality=1" scrolling="no" border="0" frameborder="no" framespacing="0" allowfullscreen="true" style="width:100%;aspect-ratio:16/10;"> </iframe>

安装ArchLinux

# 1、两台VM虚拟机，分别添加用户 nebula，配置两台服务器能使用nebula 用户做相互的无密码登录ssh登录（即A主机上可以无密码使用nebula用户登录到B，B也能使用nebula用户无密码登录到A）


1. 新建两台虚拟机node01和node02
```bash
[root@node01 ~]# rpm -q --qf '%{INSTALLTIME} (%{INSTALLTIME:date}) %{NAME}\n' basesystem
1716963602 (Wed 29 May 2024 02:20:02 PM CST) basesystem

[root@node02 ~]# rpm -q --qf '%{INSTALLTIME} (%{INSTALLTIME:date}) %{NAME}\n' basesystem
1716963663 (Wed 29 May 2024 02:21:03 PM CST) basesystem
```

2. 关闭selinux
```bash
[root@node01 ~]# vim /etc/selinux/config
# This file controls the state of SELinux on the system.
# SELINUX= can take one of these three values:
#     enforcing - SELinux security policy is enforced.
#     permissive - SELinux prints warnings instead of enforcing.
#     disabled - No SELinux policy is loaded.
SELINUX=disabled
# SELINUXTYPE= can take one of three values:
#     targeted - Targeted processes are protected,
#     minimum - Modification of targeted policy. Only selected processes are protected.
#     mls - Multi Level Security protection.
SELINUXTYPE=targeted
[root@node01 ~]# reboot

[root@node02 ~]# vim /etc/selinux/config
# This file controls the state of SELinux on the system.
# SELINUX= can take one of these three values:
#     enforcing - SELinux security policy is enforced.
#     permissive - SELinux prints warnings instead of enforcing.
#     disabled - No SELinux policy is loaded.
SELINUX=disabled
# SELINUXTYPE= can take one of three values:
#     targeted - Targeted processes are protected,
#     minimum - Modification of targeted policy. Only selected processes are protected.
#     mls - Multi Level Security protection.
SELINUXTYPE=targeted
[root@node02 ~]# reboot
```


3. 给两台虚拟机各自添加用户nebula并设置密码
```bash
[root@node01 ~]# useradd nebula
[root@node01 ~]# passwd nebula
Changing password for user nebula.
New password:
BAD PASSWORD: The password is shorter than 8 characters
Retype new password:
passwd: all authentication tokens updated successfully.

[root@node02 ~]# useradd nebula
[root@node02 ~]# passwd nebula
Changing password for user nebula.
New password:
BAD PASSWORD: The password is shorter than 8 characters
Retype new password:
passwd: all authentication tokens updated successfully.
```

4. 分别切换到nebula用户并创建ssh公钥和私钥
```bash
[root@node01 ~]# su - nebula
[nebula@node01 ~]$ ls
[nebula@node01 ~]$ ssh-keygen
Generating public/private rsa key pair.
Enter file in which to save the key (/home/nebula/.ssh/id_rsa):
Created directory '/home/nebula/.ssh'.
Enter passphrase (empty for no passphrase):
Enter same passphrase again:
Your identification has been saved in /home/nebula/.ssh/id_rsa.
Your public key has been saved in /home/nebula/.ssh/id_rsa.pub.
The key fingerprint is:
SHA256:z958W8JSCuZCexViLJVbVWtiMY04TcJI8k6Rhv36biw nebula@node01
The key's randomart image is:
+---[RSA 2048]----+
|       .+o=o+=+..|
|       .oBo+ooo..|
|        oo=ooo o |
|        oo.o..o  |
|        S.+ . .  |
|       . B o +   |
|        o B o o .|
|         E * ..o |
|          =.o... |
+----[SHA256]-----+
[nebula@node01 ~]$ cd .ssh/
[nebula@node01 .ssh]$ ls
id_rsa  id_rsa.pub

[root@node02 ~]# su - nebula
[nebula@node02 ~]$ ssh-keygen
Generating public/private rsa key pair.
Enter file in which to save the key (/home/nebula/.ssh/id_rsa):
Created directory '/home/nebula/.ssh'.
Enter passphrase (empty for no passphrase):
Enter same passphrase again:
Your identification has been saved in /home/nebula/.ssh/id_rsa.
Your public key has been saved in /home/nebula/.ssh/id_rsa.pub.
The key fingerprint is:
SHA256:gs0yhzh3dYuuf23FrtpEbbeO0z+SXF+9ezWmm5vCWlc nebula@node02
The key's randomart image is:
+---[RSA 2048]----+
|                 |
|                 |
|        . .      |
|   . = . o . .   |
|  o * * S . ..oEo|
|   o = o   . .+==|
|        . .oo+*.*|
|       .  o=+**+o|
|      ...ooo+B=o*|
+----[SHA256]-----+
[nebula@node02 ~]$ cd .ssh/
[nebula@node02 .ssh]$ ls
id_rsa  id_rsa.pub
```

5. 分别将node1和node2的ssh公钥互相传给对方
```bash
[nebula@node01 .ssh]$ ssh-copy-id -i id_rsa.pub nebula@192.168.12.134
/bin/ssh-copy-id: INFO: Source of key(s) to be installed: "id_rsa.pub"
The authenticity of host '192.168.12.134 (192.168.12.134)' can't be established.
ECDSA key fingerprint is SHA256:3BDpWdiCL2UTGz/489JwVoRQDodw6rsm23ZEwAj2Kiw.
ECDSA key fingerprint is MD5:cb:3e:dd:3a:86:7f:1d:fd:47:7c:a4:cd:7f:84:5b:eb.
Are you sure you want to continue connecting (yes/no)? yes
/bin/ssh-copy-id: INFO: attempting to log in with the new key(s), to filter out any that are already installed
/bin/ssh-copy-id: INFO: 1 key(s) remain to be installed -- if you are prompted now it is to install the new keys
nebula@192.168.12.134's password:

Number of key(s) added: 1

Now try logging into the machine, with:   "ssh 'nebula@192.168.12.134'"
and check to make sure that only the key(s) you wanted were added.

[nebula@node02 .ssh]$ ssh-copy-id -i id_rsa.pub nebula@192.168.12.133
/bin/ssh-copy-id: INFO: Source of key(s) to be installed: "id_rsa.pub"
The authenticity of host '192.168.12.133 (192.168.12.133)' can't be established.
ECDSA key fingerprint is SHA256:itBAPXVOUAtA108MHSR1DPhckHRHKUNZ4tD2JgRyoTU.
ECDSA key fingerprint is MD5:9e:a3:46:02:7d:20:61:b5:0c:14:4e:fc:2c:e8:83:39.
Are you sure you want to continue connecting (yes/no)? yes
/bin/ssh-copy-id: INFO: attempting to log in with the new key(s), to filter out any that are already installed
/bin/ssh-copy-id: INFO: 1 key(s) remain to be installed -- if you are prompted now it is to install the new keys
nebula@192.168.12.133's password:

Number of key(s) added: 1

Now try logging into the machine, with:   "ssh 'nebula@192.168.12.133'"
and check to make sure that only the key(s) you wanted were added.
```

- 测试
```bash
[nebula@node01 .ssh]$ ssh nebula@192.168.12.134
Last login: Wed May 29 14:31:35 2024
[nebula@node02 ~]$

[nebula@node02 .ssh]$ ssh nebula@192.168.12.133
Last login: Wed May 29 14:32:19 2024
[nebula@node01 ~]$
```

# 2、在其中一台VM上搭建rsync服务端，创建两个模块儿，用来管理两个目录（分别为/data/html 和/data/database）.   
> **要求1：** /data/html 这个模块使用root用户管理，/data/database 这个模块需要使用nebula用户管理  
 **要求2：** rsync需要限制只能允许另外一台VM这唯一的一台主机能够访问，其他主机都需要拒绝  
 **要求3：** 分别创建两个rsync的客户端用户，使用密码认证，用于向这两个模块中上传文件，上传目录，
下载文件。但不允许这两个rsync的客户端用户对这两个目录的文件进行删除。

1. 在node01和node02上安装rsync服务
```bash
[root@node01 ~]# yum install rsync -y
[root@node01 ~]# rsync --version
rsync  version 3.1.2  protocol version 31
Copyright (C) 1996-2015 by Andrew Tridgell, Wayne Davison, and others.
Web site: http://rsync.samba.org/
Capabilities:
    64-bit files, 64-bit inums, 64-bit timestamps, 64-bit long ints,
    socketpairs, hardlinks, symlinks, IPv6, batchfiles, inplace,
    append, ACLs, xattrs, iconv, symtimes, prealloc

rsync comes with ABSOLUTELY NO WARRANTY.  This is free software, and you
are welcome to redistribute it under certain conditions.  See the GNU
General Public Licence for details.

[root@node02 yum.repos.d]# yum install rsync -y
[root@node02 yum.repos.d]# rsync --version
rsync  version 3.1.2  protocol version 31
Copyright (C) 1996-2015 by Andrew Tridgell, Wayne Davison, and others.
Web site: http://rsync.samba.org/
Capabilities:
    64-bit files, 64-bit inums, 64-bit timestamps, 64-bit long ints,
    socketpairs, hardlinks, symlinks, IPv6, batchfiles, inplace,
    append, ACLs, xattrs, iconv, symtimes, prealloc

rsync comes with ABSOLUTELY NO WARRANTY.  This is free software, and you
are welcome to redistribute it under certain conditions.  See the GNU
General Public Licence for details.
```

2. 配置rsyncd.conf
```bash
# 全局配置
uid = root
gid = root
fake super = yes
use chroot = yes
max connections = 4
log file = /var/log/rsync.log
pid file = /var/run/rsyncd.pid
lock file = /var/run/rsync.lock

# 允许的主机
hosts allow = 192.168.12.137  # 允许访问的主机IP地址
hosts deny = *  # 拒绝所有其他主机访问

refuse options = delete delete-before delete-after delete-excluded delete-delay max-delete remove-source-files force partial

# /data/html 模块
[html]
path = /data/html
comment = HTML Directory
read only = no
auth users = htmlUser
secrets file = /etc/rsyncd.secrets

# /data/database 模块
[database]
path = /data/database
comment = Database Directory
read only = no
auth users = dbUser
secrets file = /etc/rsyncd.secrets
```

3. 创建目录并设置目录所属用户和用户组
```bash
[root@node01 ~]# mkdir -p /data/html /data/database
[root@node01 ~]# chown root:root /data/html
[root@node01 ~]# chown nebula:nebula /data/database
[root@node01 ~]# ll /data/
total 0
drwxr-xr-x. 2 nebula nebula 6 May 30 16:52 database
drwxr-xr-x. 2 root   root   6 May 30 16:52 html
```

4. 配置rsyncd.secrets
```bash
[root@node01 ~]# touch /etc/rsyncd.secrets
[root@node01 ~]# ll /etc/rsyncd.secrets
-rw-r--r--. 1 root root 0 May 30 16:54 /etc/rsyncd.secrets
[root@node01 ~]# chmod 600 /etc/rsyncd.secrets
[root@node01 ~]# ll /etc/rsyncd.secrets
-rw-------. 1 root root 0 May 30 16:54 /etc/rsyncd.secrets
[root@node01 ~]# cat /etc/rsyncd.secrets
htmlUser:123456
dbUser:123456
```

5. 防火墙开放873端口
```bash
[root@node01 ~]# firewall-cmd --add-port=873/tcp --per
success
[root@node01 ~]# firewall-cmd --reload
success
[root@node01 ~]# firewall-cmd --list-all
public (active)
  target: default
  icmp-block-inversion: no
  interfaces: ens33
  sources:
  services: ssh dhcpv6-client
  ports: 873/tcp
  protocols:
  masquerade: no
  forward-ports:
  source-ports:
  icmp-blocks:
  rich rules:
```

6. 启动rsync服务
```bash
[root@node01 ~]# systemctl start rsyncd
[root@node01 ~]# systemctl status rsyncd
● rsyncd.service - fast remote file copy program daemon
   Loaded: loaded (/usr/lib/systemd/system/rsyncd.service; disabled; vendor preset: disabled)
   Active: active (running) since Thu 2024-05-30 16:58:10 CST; 5s ago
 Main PID: 14078 (rsync)
   CGroup: /system.slice/rsyncd.service
           └─14078 /usr/bin/rsync --daemon --no-detach

May 30 16:58:10 node01 systemd[1]: Started fast remote file copy program daemon.
May 30 16:58:10 node01 rsyncd[14078]: rsyncd version 3.1.2 starting, listening on port 873
```

7. 在node02上，创建密码文件并设置权限
```bash
[root@node02 ~]# echo "123456" > rsyncd.db.secrets
[root@node02 ~]# echo "123456" > rsyncd.html.secrets
[root@node02 ~]# chmod 600 rsyncd.html.secrets  rsyncd.db.secrets
```

- **测试**
1. 上传
```bash
[root@node02 ~]# touch test11
[root@node02 ~]# rsync -avz --password-file=rsyncd.html.secrets test11 htmlUser@192.168.12.136::html
sending incremental file list
test11
sent 83 bytes  received 35 bytes  10.26 bytes/sec
total size is 0  speedup is 0.00
[root@node02 ~]#
[root@node02 ~]#
[root@node02 ~]#
[root@node02 ~]# rsync -avz --password-file=rsyncd.db.secrets[C.sec^Cts test11 dbUser@192.168.12.136::db
[root@node02 ~]# rsync -avz --password-file=rsyncd.db.secrets test11 dbUser@192.168.12.136::database
sending incremental file list
test11
sent 83 bytes  received 35 bytes  11.24 bytes/sec
total size is 0  speedup is 0.00
```

2. 下载
```bash
[root@node02 ~]# rsync -avz dbUser@192.168.12.136::database/test11 /tmp/
Password:
receiving incremental file list
test11

sent 43 bytes  received 83 bytes  8.13 bytes/sec
total size is 0  speedup is 0.00
[root@node02 ~]# rsync -avz htmlUser@192.168.12.136::html/test1 /tmp/
Password:
receiving incremental file list
test1

sent 43 bytes  received 84 bytes  9.41 bytes/sec
total size is 0  speedup is 0.00
```

3. 删除
```bash
[root@node02 ~]# rsync -avz --delete --password-file=rsyncd.html.secrets test htmlUser@192.168.12.136::html
sending incremental file list
rsync: read error: Connection reset by peer (104)
rsync error: error in socket IO (code 10) at io.c(792) [sender=3.1.2]
```




# 提示 
> **提示:**
>   1. 请把自己的虚拟机重装成英文的，英文的，英文的。服务搭建的过程中，会出现很多问题，请各
位同学能够自己先参考讲义，自己折腾一下，并能把错误信息整理和记录下来，这将是你未来走向巅峰
的财富   
>    2. 改系统的最大pid限制到 102400，修改系统最大文件描述限制到 655360   
>    3. 以上服务搭建的过程中，需要每一步去查看进程是否存在、该进程的limits 信息、端口、进程打开的
文件描述符   
>    4. 假设，注意是假设 你在 1 中发现从服务器A 登录服务器B 的过程中，登录过程如果非常的卡，非常的
卡，要卡很久偶尔可以登录上，大部分时间都因为卡的时间太久了，服务器A等不及超时。那请你分析一
下可能有哪些原因。   
> - 如果一直登录不上，又可能有哪些原因   
>    **提示1：** 按照我交给大家的套路，按照自己的理解，整理成自己的笔记，最后把你整理的笔记分享给我，
或者直接粘贴到作业中。   
>    **提示2：** 从网络 , 端口，还有服务器上进程/服务器资源【pid/fd/cpu/磁盘等等】。注意整理cpu的 us sy
wait idle si 等CPU消耗

Linux练习小结_06

# 前提
> django默认不支持websocket，需要安装组件：
```shell
pip install channels daphne
```
- 在较新版本的Django框架下还需要安装daphne



# 配置
## 注册channels 
```Python
INSTALLED_APPS = [
    "daphne",
    "channels",
    "django.contrib.admin",
    "django.contrib.auth",
    "django.contrib.contenttypes",
    "django.contrib.sessions",
    "django.contrib.messages",
    "django.contrib.staticfiles",
    "web.apps.WebConfig"
]
```

![image.png](/static/img/936735bef6c1249ca0eaac7ac0fd9112.image.webp)

## 在settings.py中添加 asgi_application
```Python
ASGI_APPLICATION = "ws_demo.asgi.application"
```
![](https://www.gycblog.cn/static/img/c32ee4bb2d72526ee00ed11a8c7b6eb6.image.webp)

## 修改asgi.py文件
```Python
import os
from django.core.asgi import get_asgi_application
from channels.routing import ProtocolTypeRouter, URLRouter

from . import routing

os.environ.setdefault('DJANGO_SETTINGS_MODULE', 'ws_demo.settings')

# application = get_asgi_application()

application = ProtocolTypeRouter({
    "http": get_asgi_application(),
    "websocket": URLRouter(routing.websocket_urlpatterns),
})
```

## 在settings.py的同级目录创建 routing.py 
```Python
from django.urls import re_path

from app01 import consumers

websocket_urlpatterns = [
    re_path(r'ws/(?P<group>\w+)/$', consumers.ChatConsumer.as_asgi()),
]
```

## 在app目录下创建 consumers.py，编写处理处理websocket的业务逻辑。
```Python
from channels.generic.websocket import WebsocketConsumer
from channels.exceptions import StopConsumer


class ChatConsumer(WebsocketConsumer):
    def websocket_connect(self, message):
        # 有客户端来向后端发送websocket连接的请求时，自动触发。
        # 服务端允许和客户端创建连接。
        self.accept()

    def websocket_receive(self, message):
        # 浏览器基于websocket向后端发送数据，自动触发接收消息。
        print(message)
        self.send("不要回复不要回复")
        # self.close()

    def websocket_disconnect(self, message):
        # 客户端与服务端断开连接时，自动触发。
        print("断开连接")
        raise StopConsumer()
```

## 启动效果

- **传统启动:**

![image-20210627142144020.png](/static/img/751754f98b1ed4d528c8dcfbd258c5ea.image-20210627142144020.webp)

- **实现了WebSocket启动:**

![image.png](/static/img/f73ffdf3142464aa70108b602b1358ce.image.webp)

## 学习视频
<iframe src="//player.bilibili.com/player.html?aid=979090858&bvid=BV1J44y1p7NX&cid=510022749&p=1&autoplay=0&high_quality=1" scrolling="no" border="0" frameborder="no" framespacing="0" allowfullscreen="true" style="width:100%;aspect-ratio:16/10;"> </iframe>