使用Nginx制作内网yum镜像代理

迈不过友情╰ 2022-06-09 05:55 433阅读 0赞

# 使用Nginx制作内网yum镜像代理 #

*  使用Nginx制作内网yum镜像代理
    
     *  背景
     *  环境需求
     *  Nginx安装配置

## 1. 背景 ##

公司内网服务器不能直接通过Internet上网，但为了与外网通信和同步时间等，会指定那么几台服务器可以访问Internet。这里就是通过能上网的机器作为代理，制作内网使用的yum仓库。

## 2. 环境需求 ##

1.  内网dns（推荐，非必须，因为可使用IP代替）
2.  一台能上Internet的服务器A
3.  不能上Internet的服务器能与A服务器通信
4.  这里示例为CentOS7和Ubuntu16

## 3. Nginx安装配置 ##

Nginx安装在能上网的A服务器上，安装过程略。  
具体一个nginx server配置如下：

# mirrors
    server
        {
            listen 80;
            #listen [::]:80;
            server_name mirrors.yourdomain.com;
            index index.html index.htm index.php default.html default.htm default.php;
            root  /home/wwwroot/html;
    
            location /ubuntu/ {
                proxy_pass http://mirrors.aliyun.com/ubuntu/ ;
            }
    
            location /centos/ {
                proxy_pass http://mirrors.aliyun.com/centos/ ;
            }
    
            location /epel/ {
                proxy_pass http://mirrors.aliyun.com/epel/ ;
            }
    }

> 以上使用阿里云镜像，其镜像版本很全，速度也很快。  
> [http://mirrors.aliyun.com/][http_mirrors.aliyun.com]

CentOS7系统镜像源：  
`cat /etc/yum.repos.d/CentOS-7.repo`

[base]
    name=CentOS-$releasever - Base - mirrors.yourdomain.com
    failovermethod=priority
    baseurl=http://mirrors.yourdomain.com/centos/$releasever/os/$basearch/
            http://mirrors.yourdomain.com/centos/$releasever/os/$basearch/
    #mirrorlist=http://mirrorlist.centos.org/?release=$releasever&arch=$basearch&repo=os
    gpgcheck=1
    gpgkey=http://mirrors.yourdomain.com/centos/RPM-GPG-KEY-CentOS-7
    
    #released updates 
    [updates]
    name=CentOS-$releasever - Updates - mirrors.yourdomain.com
    failovermethod=priority
    baseurl=http://mirrors.yourdomain.com/centos/$releasever/updates/$basearch/
            http://mirrors.yourdomain.com/centos/$releasever/updates/$basearch/
    #mirrorlist=http://mirrorlist.centos.org/?release=$releasever&arch=$basearch&repo=updates
    gpgcheck=1
    gpgkey=http://mirrors.yourdomain.com/centos/RPM-GPG-KEY-CentOS-7
    
    #additional packages that may be useful
    [extras]
    name=CentOS-$releasever - Extras - mirrors.yourdomain.com
    failovermethod=priority
    baseurl=http://mirrors.yourdomain.com/centos/$releasever/extras/$basearch/
            http://mirrors.yourdomain.com/centos/$releasever/extras/$basearch/
    #mirrorlist=http://mirrorlist.centos.org/?release=$releasever&arch=$basearch&repo=extras
    gpgcheck=1
    gpgkey=http://mirrors.yourdomain.com/centos/RPM-GPG-KEY-CentOS-7
    
    #additional packages that extend functionality of existing packages
    [centosplus]
    name=CentOS-$releasever - Plus - mirrors.yourdomain.com
    failovermethod=priority
    baseurl=http://mirrors.yourdomain.com/centos/$releasever/centosplus/$basearch/
            http://mirrors.yourdomain.com/centos/$releasever/centosplus/$basearch/
    #mirrorlist=http://mirrorlist.centos.org/?release=$releasever&arch=$basearch&repo=centosplus
    gpgcheck=1
    enabled=0
    gpgkey=http://mirrors.yourdomain.com/centos/RPM-GPG-KEY-CentOS-7
    
    #contrib - packages by Centos Users
    [contrib]
    name=CentOS-$releasever - Contrib - mirrors.yourdomain.com
    failovermethod=priority
    baseurl=http://mirrors.yourdomain.com/centos/$releasever/contrib/$basearch/
            http://mirrors.yourdomain.com/centos/$releasever/contrib/$basearch/
    #mirrorlist=http://mirrorlist.centos.org/?release=$releasever&arch=$basearch&repo=contrib
    gpgcheck=1
    enabled=0
    gpgkey=http://mirrors.yourdomain.com/centos/RPM-GPG-KEY-CentOS-7

EPEL第三方扩展源：  
`cat /etc/yum.repos.d/epel.repo`

[epel]
    name=Extra Packages for Enterprise Linux 7 - $basearch
    baseurl=http://mirrors.yourdomain.com/epel/7/$basearch
    failovermethod=priority
    enabled=1
    gpgcheck=1
    gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL-7
    
    [epel-debuginfo]
    name=Extra Packages for Enterprise Linux 7 - $basearch - Debug
    baseurl=http://download.yourdomain.com/epel/7/$basearch/debug
    failovermethod=priority
    enabled=0
    gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL-7
    gpgcheck=1
    
    [epel-source]
    name=Extra Packages for Enterprise Linux 7 - $basearch - Source
    baseurl=http://download.yourdomain.com/epel/7/SRPMS
    failovermethod=priority
    enabled=0
    gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL-7

Ubuntu16 apt镜像源：  
`cat /etc/apt/sources.list`

deb http://mirrors.yourdomain.com/ubuntu/ xenial main restricted universe multiverse
    deb http://mirrors.yourdomain.com/ubuntu/ xenial-security main restricted universe multiverse
    deb http://mirrors.yourdomain.com/ubuntu/ xenial-updates main restricted universe multiverse
    deb http://mirrors.yourdomain.com/ubuntu/ xenial-proposed main restricted universe multiverse
    deb http://mirrors.yourdomain.com/ubuntu/ xenial-backports main restricted universe multiverse
    deb-src http://mirrors.yourdomain.com/ubuntu/ xenial main restricted universe multiverse
    deb-src http://mirrors.yourdomain.com/ubuntu/ xenial-security main restricted universe multiverse
    deb-src http://mirrors.yourdomain.com/ubuntu/ xenial-updates main restricted universe multiverse
    deb-src http://mirrors.yourdomain.com/ubuntu/ xenial-proposed main restricted universe multiverse
    deb-src http://mirrors.yourdomain.com/ubuntu/ xenial-backports main restricted universe multiverse

[http_mirrors.aliyun.com]: http://mirrors.aliyun.com/