linux搭建http源【服务端和客户端详细说明】

Myth丶恋晨 2022-09-05 12:50 390阅读 0赞

### 文章目录 ###

*  说明
 *  服务端
 *   *  关闭防火墙和selinux
     *  配置http服务
     *  rpm安装包准备
     *  建立索引
     *  权限配置
     *  测试
 *  客户端
 *   *  yum文件配置
     *  清除缓存并验证
     *  完整流程
 *  总结

# 说明 #

*  搭建的HTTP源本质上和使用镜像搭建的本地源是一样的，我们平常搭建的http源的包一般也是用镜像里面的包，比如某台服务器升级ssh失败了，又没有搭建本地源，没有任何共享服务的包，那么这时候在另外一台服务器上搭建一个http源，在故障服务器上配置http源即可。
 *  我下面的HTTP配置使用的包就是iso镜像里面的包【同理，我们只要会这种方式以后，使用什么包都一样，可以自己在网上下载自己需要的包和依赖，然后通过这种方式配置成http源，然后就可以直接使用yum安装了，这样的好处是解决软件在安装的时候会有许多依赖包这个繁琐的过程，他将我们管理的软件包规整到一起，解决了安装时候各个软件的依赖问题。
 *  我这使用的是centos7.6的系统和centos7.6镜像中的包【我下面的搭建环境是没有外网的，所以无需担心没有外网弄不了】  
    【使用啥系统和镜像无所谓，配置方式都一样】

[root@master ~]# cat /etc/redhat-release 
    CentOS Linux release 7.6.1810 (Core) 
    [root@master ~]# 
    [root@master ~]# ls | grep *iso
    CentOS-7.6-x86_64-DVD-1810.iso
    [root@master ~]#

# 服务端 #

我服务端的ip为：`192.168.59.142`

[root@master ~]# ip a | grep 192
        inet 192.168.59.142/24 brd 192.168.59.255 scope global noprefixroute ens33
        inet 192.168.122.1/24 brd 192.168.122.255 scope global virbr0
    [root@master ~]#

## 关闭防火墙和selinux ##

*  firewall的话，直接`systemctl stop firewalld`即可  
    如果使用的是iptables，则吧firewalld替换成iptables

[root@master ~]# systemctl is-active firewalld
    active
    [root@master ~]# 
    [root@master ~]# systemctl stop firewalld
    [root@master ~]# 
    [root@master ~]# systemctl is-active firewalld
    inactive
    [root@master ~]#

*  selinux关闭：`setenforce 0`  
    使用`getenforce`查看结果为Disabled才行。

[root@master ~]# 
    [root@master ~]# getenforce 
    Disabled
    [root@master ~]# 
    [root@master ~]# #setenforce 0
    [root@master ~]#

## 配置http服务 ##

*  我们需要安装http服务，所以我们需要先搭建一个本地源  
    下面我简单说下过程【照着我的做就行】，如果有不能理解的，去我博客中翻翻yum源的搭建，学习一下

#先创建一个文件用来挂载镜像
    [root@master ~]# #mkdir /root/centos7.6
    # 挂载镜像到刚才创建的那个文件
    [root@master ~]# #mount CentOS-7.6-x86_64-DVD-1810.iso /root/centos7.6/
    # 配置文件如下
    [root@master ~]# cat /etc/yum.repos.d/centos.repo 
    [cenot-7.6]
    name=cenots7.6
    baseurl=file:///root/centos7.6
    gpgcheck=0
    enable=1
    [root@master ~]# 
    # 正常情况直接执行这个命令就可以看到镜像数量了，如果为0，则执行一下：yum clean all
    [root@master ~]# yum repolist
    Loaded plugins: fastestmirror, langpacks, product-id, search-disabled-repos,
                  : subscription-manager
    
    This system is not registered with an entitlement server. You can use subscription-manager to register.
    
    Repodata is over 2 weeks old. Install yum-cron? Or run: yum makecache fast
    Determining fastest mirrors
    repo id                              repo name                            status
    !cenot-7.6                           cenots7.6                            4,021
    repolist: 4,021
    [root@master ~]#

*  安装httpd服务  
    `yum install -y httpd`

[root@master ~]# yum install -y httpd
    Loaded plugins: fastestmirror, langpacks, product-id, search-disabled-repos,
                  : subscription-manager
    
    This system is not registered with an entitlement server. You can use subscription-manager to register.
    
    Loading mirror speeds from cached hostfile
    cenot-7.6                                                | 3.6 kB     00:00     
    Resolving Dependencies
    --> Running transaction check
    ---> Package httpd.x86_64 0:2.4.6-88.el7.centos will be installed
    --> Processing Dependency: httpd-tools = 2.4.6-88.el7.centos for package: httpd-2.4.6-88.el7.centos.x86_64
    --> Processing Dependency: /etc/mime.types for package: httpd-2.4.6-88.el7.centos.x86_64
    --> Processing Dependency: libaprutil-1.so.0()(64bit) for package: httpd-2.4.6-88.el7.centos.x86_64
    --> Processing Dependency: libapr-1.so.0()(64bit) for package: httpd-2.4.6-88.el7.centos.x86_64
    --> Running transaction check
    ---> Package apr.x86_64 0:1.4.8-3.el7_4.1 will be installed
    ---> Package apr-util.x86_64 0:1.5.2-6.el7 will be installed
    ---> Package httpd-tools.x86_64 0:2.4.6-88.el7.centos will be installed
    ---> Package mailcap.noarch 0:2.1.41-2.el7 will be installed
    --> Finished Dependency Resolution
    
    Dependencies Resolved
    
    ================================================================================
     Package           Arch         Version                   Repository       Size
    ================================================================================
    Installing:
     httpd             x86_64       2.4.6-88.el7.centos       cenot-7.6       2.7 M
    Installing for dependencies:
     apr               x86_64       1.4.8-3.el7_4.1           cenot-7.6       103 k
     apr-util          x86_64       1.5.2-6.el7               cenot-7.6        92 k
     httpd-tools       x86_64       2.4.6-88.el7.centos       cenot-7.6        90 k
     mailcap           noarch       2.1.41-2.el7              cenot-7.6        31 k
    
    Transaction Summary
    ================================================================================
    Install  1 Package (+4 Dependent packages)
    
    Total download size: 3.0 M
    Installed size: 10 M
    Downloading packages:
    --------------------------------------------------------------------------------
    Total                                               33 MB/s | 3.0 MB  00:00     
    Running transaction check
    Running transaction test
    Transaction test succeeded
    Running transaction
      Installing : apr-1.4.8-3.el7_4.1.x86_64                                   1/5 
      Installing : apr-util-1.5.2-6.el7.x86_64                                  2/5 
      Installing : httpd-tools-2.4.6-88.el7.centos.x86_64                       3/5 
      Installing : mailcap-2.1.41-2.el7.noarch                                  4/5 
      Installing : httpd-2.4.6-88.el7.centos.x86_64                             5/5 
      Verifying  : httpd-tools-2.4.6-88.el7.centos.x86_64                       1/5 
      Verifying  : apr-1.4.8-3.el7_4.1.x86_64                                   2/5 
      Verifying  : mailcap-2.1.41-2.el7.noarch                                  3/5 
      Verifying  : httpd-2.4.6-88.el7.centos.x86_64                             4/5 
      Verifying  : apr-util-1.5.2-6.el7.x86_64                                  5/5 
    
    Installed:
      httpd.x86_64 0:2.4.6-88.el7.centos                                            
    
    Dependency Installed:
      apr.x86_64 0:1.4.8-3.el7_4.1                 apr-util.x86_64 0:1.5.2-6.el7    
      httpd-tools.x86_64 0:2.4.6-88.el7.centos     mailcap.noarch 0:2.1.41-2.el7    
    
    Complete!
    [root@master ~]#

*  修改配置文件:`/etc/httpd/conf/httpd.conf`  
    我们httpd 中默认提供web 界面的位置是我们`/var/www/html` 目录，如果我们yum 源想指定目录，就需要修改2处内容

[root@master ~]# vim /etc/httpd/conf/httpd.conf
    # 下面是修改后的内容及行号
    
    119 DocumentRoot "/usr/local"
    131 <Directory "/usr/local/">

注：有2个directory，修改下面哪个  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2N1aWNob25neGlu_size_16_color_FFFFFF_t_70]

*  重启http服务

[root@master ~]# systemctl restart httpd
    [root@master ~]# 
    [root@master ~]# systemctl is-active httpd
    active
    [root@master ~]#

## rpm安装包准备 ##

*  需要新建一个目录，新建的目录是用来存放软件的安装包的【安装包格式为：rpm包】  
    在`/usr/local`下新建任意目录，我这使用`yumrepo`  
    创建这个目录的意义是：将rpm包放在这里面，也就是http的源包

[root@master ~]# mkdir /usr/local/yumrepo
    [root@master ~]#

*  然后我们去镜像的包里面，将全部rpm包拷贝到我们上面创建的这个文件中  
    如果你跟着我做的本地源，可以看到镜像是挂载到/root/centos7.6上的【如果你不是，自己挂载到哪，就进入到哪【下面命令应该看得懂吧】

[root@master ~]# df | grep centos7.6
    /dev/loop0                4480476  4480476         0 100% /root/centos7.6
    [root@master ~]# 
    [root@master ~]# cd /root/centos7.6/
    [root@master centos7.6]# ls
    CentOS_BuildTag  GPL       LiveOS    RPM-GPG-KEY-CentOS-7
    EFI              images    Packages  RPM-GPG-KEY-CentOS-Testing-7
    EULA             isolinux  repodata  TRANS.TBL
    [root@master centos7.6]# cd Packages/
    [root@master Packages]# ls | wc -l
    4022
    [root@master Packages]# cp * /usr/local/yumrepo/
    [root@master Packages]# cd /usr/local/yumrepo/
    [root@master yumrepo]# ls |wc -l
    4022
    [root@master yumrepo]#

## 建立索引 ##

*  createrepo 命令用于创建yum源（软件仓库），即为存放于本地特定位置的众多rpm包建立索引，描述各包所需依赖信息，并形成元数据。
 *  在`/usr/local/`目录下执行`createrepo -v yumrepo/`

[root@master yumrepo]# cd ..
    [root@master local]# pwd
    /usr/local
    [root@master local]# 
    [root@master local]# createrepo -v yumrepo/
    ...#正常情况4000多条会全部过一边，我只放了最后一部分
    Worker 0: reading xulrunner-31.6.0-2.el7.centos.x86_64.rpm
    Worker 1: reading xvattr-1.3-27.el7.x86_64.rpm
    Worker 2: reading xz-5.2.2-1.el7.x86_64.rpm
    Worker 3: reading xz-devel-5.2.2-1.el7.x86_64.rpm
    Worker 0: reading xz-libs-5.2.2-1.el7.x86_64.rpm
    Worker 1: reading yajl-2.0.4-4.el7.x86_64.rpm
    Worker 2: reading yelp-3.28.1-1.el7.x86_64.rpm
    Worker 3: reading yelp-libs-3.28.1-1.el7.x86_64.rpm
    Worker 0: reading yelp-tools-3.28.0-1.el7.noarch.rpm
    Worker 1: reading yelp-xsl-3.28.0-1.el7.noarch.rpm
    Worker 2: reading yp-tools-2.14-5.el7.x86_64.rpm
    Worker 3: reading ypbind-1.37.1-9.el7.x86_64.rpm
    Worker 0: reading ypserv-2.31-11.el7.x86_64.rpm
    Worker 1: reading yum-3.4.3-161.el7.centos.noarch.rpm
    Worker 2: reading yum-langpacks-0.4.2-7.el7.noarch.rpm
    Worker 3: reading yum-metadata-parser-1.1.4-10.el7.x86_64.rpm
    Worker 0: reading yum-plugin-aliases-1.1.31-50.el7.noarch.rpm
    Worker 1: reading yum-plugin-changelog-1.1.31-50.el7.noarch.rpm
    Worker 2: reading yum-plugin-fastestmirror-1.1.31-50.el7.noarch.rpm
    Worker 3: reading yum-plugin-tmprepo-1.1.31-50.el7.noarch.rpm
    Worker 0: reading yum-plugin-verify-1.1.31-50.el7.noarch.rpm
    Worker 1: reading yum-plugin-versionlock-1.1.31-50.el7.noarch.rpm
    Worker 2: reading yum-utils-1.1.31-50.el7.noarch.rpm
    Worker 3: reading zenity-3.28.1-1.el7.x86_64.rpm
    Worker 0: reading zip-3.0-11.el7.x86_64.rpm
    Worker 1: reading zlib-1.2.7-18.el7.x86_64.rpm
    Worker 2: reading zlib-devel-1.2.7-18.el7.x86_64.rpm
    Worker 3: reading zsh-5.0.2-31.el7.x86_64.rpm
    Worker 0: reading zziplib-0.13.62-9.el7.x86_64.rpm
    Workers Finished
    Saving Primary metadata
    Saving file lists metadata
    Saving other metadata
    Generating sqlite DBs
    Starting other db creation: Wed Aug 18 10:35:18 2021
    Ending other db creation: Wed Aug 18 10:35:20 2021
    Starting filelists db creation: Wed Aug 18 10:35:21 2021
    Ending filelists db creation: Wed Aug 18 10:35:26 2021
    Starting primary db creation: Wed Aug 18 10:35:26 2021
    Ending primary db creation: Wed Aug 18 10:35:29 2021
    Sqlite DBs complete
    [root@master local]#

## 权限配置 ##

给`/usr/local/yumrepo` 配置权限，因为我们的httpd 的服务使用的是`apache`用户，该目录需要有普通用户的执行权限

[root@master yumrepo]# chmod -R 755 /usr/local/yumrepo/
    [root@master yumrepo]#

## 测试 ##

正常情况，我们在本地浏览器上输入`ip/yumrepo`即可看到全部包的内容。  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2N1aWNob25neGlu_size_16_color_FFFFFF_t_70 1]

# 客户端 #

任意能和服务端通信的主机均可配置，包括服务端自己也是可以配置该http源的。

## yum文件配置 ##

如果是默认的yum源且没有外网可用，则进入到`/etc/yum.repos.d/` 目录下创建一个备份的目录，将我们`/etc/yum.repos.d/`下的yum 源 mv移动到我们的新建的备份目录下

[root@master yum.repos.d]# pwd
    /etc/yum.repos.d
    [root@master yum.repos.d]# mkdir bak_docker
    [root@master yum.repos.d]# mv CentOS-* bak_docker/
    [root@master yum.repos.d]# ls
    bak_docker

因为这台是我的服务端，这个自带一个本地源文件的，然后我又新建了一个http源：`http.repo`

[root@master yum.repos.d]# ls
    bak_docker  centos.repo  http.repo
    [root@master yum.repos.d]# 
    # 这是本地源代码
    [root@master yum.repos.d]# cat centos.repo 
    [cenot-7.6]
    name=cenots7.6
    baseurl=file:///root/centos7.6
    gpgcheck=0
    enable=1
    [root@master yum.repos.d]# 
    # 这就是http源，照着做就行，就修改ip即可，其他不要变
    [root@master yum.repos.d]# cat http.repo 
    [http]
    name=http
    enabled=1
    gpgcheck=0
    baseurl=http://192.168.59.142/yumrepo/
    [root@master yum.repos.d]#

*  代码解释：
    
     *  `name=http`　　　　　　　　　 \#我们yum 源命名
     *  `enabled=1`　　　　　　　　　　　　　　 　　 \#启用yum源，0为不启用，1为启用
     *  `gkgcheck=0`　　　　　　　　　　　　　　　　　 \#检查GPG-KEY，0为不检查，1为检查
     *  `baseurl=http://192.168.59.142/yumrepo`　　　　　　\#是服务器设置中最重要的部分，只有设置正确，才能从上面获取软件

## 清除缓存并验证 ##

*  下面3个代码按顺序执行一遍
    
     *  `yum clean all` \#清除yum缓存
     *  `yum makecache` \#缓存本地yum源中的软件包信息
     *  `yum repolist` \#查看源软件包
 *  正常情况呢，就是执行`yum repolist`以后有我们定义的http源名称，且有相应的数量，如果数量为0，则哪个步骤出问题了，如下，我有本地源和http源，所以总共是8000多个。

[root@master yum.repos.d]# yum clean all
    Loaded plugins: fastestmirror, langpacks, product-id, search-disabled-repos,
                  : subscription-manager
    
    This system is not registered with an entitlement server. You can use subscription-manager to register.
    
    Cleaning repos: cenot-7.6 http
    Cleaning up list of fastest mirrors
    Other repos take up 383 M of disk space (use --verbose for details)
    [root@master yum.repos.d]# yum makecache 
    Loaded plugins: fastestmirror, langpacks, product-id, search-disabled-repos,
                  : subscription-manager
    
    This system is not registered with an entitlement server. You can use subscription-manager to register.
    
    Determining fastest mirrors
    cenot-7.6                                                | 3.6 kB     00:00     
    http                                                     | 2.9 kB     00:00     
    (1/7): cenot-7.6/group_gz                                  | 166 kB   00:00     
    (2/7): cenot-7.6/filelists_db                              | 3.2 MB   00:00     
    (3/7): cenot-7.6/other_db                                  | 1.3 MB   00:00     
    (4/7): cenot-7.6/primary_db                                | 3.1 MB   00:00     
    (5/7): http/filelists_db                                   | 3.2 MB   00:00     
    (6/7): http/primary_db                                     | 3.1 MB   00:00     
    (7/7): http/other_db                                       | 1.3 MB   00:00     
    Metadata Cache Created
    [root@master yum.repos.d]# 
    [root@master yum.repos.d]# yum repolist
    Loaded plugins: fastestmirror, langpacks, product-id, search-disabled-repos,
                  : subscription-manager
    
    This system is not registered with an entitlement server. You can use subscription-manager to register.
    
    Loading mirror speeds from cached hostfile
    repo id                              repo name                            status
    cenot-7.6                            cenots7.6                            4,021
    http                                 http                                 4,021
    repolist: 8,042
    [root@master yum.repos.d]#

## 完整流程 ##

上面呢我是在服务端本身上配置的一个http，不具有客观表现，所以，我下面在另外一台主机上配置http源

[root@etcd2 ~]# ping -c 2 192.168.59.142
    PING 192.168.59.142 (192.168.59.142) 56(84) bytes of data.
    64 bytes from 192.168.59.142: icmp_seq=1 ttl=64 time=1.46 ms
    64 bytes from 192.168.59.142: icmp_seq=2 ttl=64 time=0.409 ms
    
    --- 192.168.59.142 ping statistics ---
    2 packets transmitted, 2 received, 0% packet loss, time 1001ms
    rtt min/avg/max/mdev = 0.409/0.938/1.467/0.529 ms
    [root@etcd2 ~]# 
    [root@etcd2 ~]# cd /etc/yum.repos.d/
    [root@etcd2 yum.repos.d]# ls
    CentOS-Base.repo  docker-ce.repo  epel.repo  k8s.repo
    [root@etcd2 yum.repos.d]# mkdir bak_docker
    [root@etcd2 yum.repos.d]# mv * bak_docker/
    mv: 无法将目录"bak_docker" 移动至自身的子目录"bak_docker/bak_docker" 下
    [root@etcd2 yum.repos.d]# ls
    bak_docker
    [root@etcd2 yum.repos.d]# vim http.repo 
    [root@etcd2 yum.repos.d]# cat http.repo
    [http]
    name=http
    enabled=1
    gpgcheck=0
    baseurl=http://192.168.59.142/yumrepo/
    [root@etcd2 yum.repos.d]# 
    [root@etcd2 yum.repos.d]# yum clean all
    已加载插件：fastestmirror
    正在清理软件源： http
    Cleaning up everything
    Maybe you want: rm -rf /var/cache/yum, to also free up space taken by orphaned data from disabled or removed repos
    [root@etcd2 yum.repos.d]# yum repolist
    已加载插件：fastestmirror
    http                                                     | 2.9 kB     00:00     
    http/primary_db                                            | 3.1 MB   00:00     
    Determining fastest mirrors
    源标识                                源名称                               状态
    http                                  http                                 4,021
    repolist: 4,021
    [root@etcd2 yum.repos.d]#

# 总结 #

*  根据http源的这个特性，实际上我们可以在一台通外网的服务器上，下载所有包到某一个目录里，然后拷贝这些全部rpm包到内网服务器上，以服务端的形式用这些包搭建一个http源，然后其他客户端配置这个http源，从某种角度上讲，也算是一台有外网的所有源了。

[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2N1aWNob25neGlu_size_16_color_FFFFFF_t_70]: /images/20220829/0763635efccf4222bd972e2273a218cd.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2N1aWNob25neGlu_size_16_color_FFFFFF_t_70 1]: /images/20220829/de4f4da387674321ba28959b1ab04ecb.png