RHCE 7.0考题及答案

1

2

3

4

5

mount -o remount,rw /sysroot

chroot /sysroot

passwd #密码

touch /.autorelabel

reboot

1

2

3

4

yum –y install xorg*

yum –y install gnome*

yum –y install glx*

startx #or init 5

1

2

3

4

5

6

7

hostnamectl  set-hostname station.domain11.example.com

nmcli connection modify eno16777736 ipv4.method  manual

nmcli connection modify eno16777736 ipv4.addresses  ‘172.24.11.10/24 172.24.11.254‘ 

nmcli connection modify eno16777736 ipv4.dns  ‘172.24.11.250‘

nmcli connection up eno16777736

nmcli con show eno16777736 | grep ipv4

host server.domain11.example.com

route -n

1

2

3

4

5

getenforce       #查看模式

setenforce 1    #设置为enforcing模式

getenforce       #查看

vim /etc/selinux/config    #永久修改

selinux=enforcing

1

2

3

4

5

6

vim/etc/yum.reopos/base.repo

[base]

name=base

baseurl=  http://server.domain11.example.com/pub/x86_64/Server

gpgcheck=0

enable=1

1

2

3

4

5

df –hT

lvextend -L +100M /dev/vg0/vo

lvscan

xfs_growfs /home/ #home为LVM挂载的目录 这步仅仅是在我们练习的环境中需要做，

考试的时候是EXT4不需要此步骤。

resize2fs /dev/vg0/vo #考试的时候用这条命令进行更新就可以了。 df –hT

1

2

3

4

5

6

e2fsck –f /dev/vg0/vo

umount /home

resize2fs  /dev/vg0/vo               #最终要求的分区容量 如100M

lvreduce –l 100M /dev/vg0/vo

mount /dev/vg0/vo /home

df -hT

1

2

3

4

cp /etc/fstab /var/tmp/

ll  /var/tmp/fstab           #查看所有者

setfacl –m u:natasha:rw- /var/tmp/fstab

setfacl –m u:haryy:--- /var/tmp/fstab

1

2

3

crontab –e –u natasha

23 14 * * * /bin/echo hiya

crontab –l –u natasha          

1

2

3

uname -r                             #查看当前内核版本

rpm –ivh kernel-*.rpm

vi /boot/grub/grub.conf       #查看

1

2

yum -y install auth*

system-config-authentication

1

2

3

4

5

6

7

8

9

yum install –y autofs

mkdir /home/rehome

vi /etc/auto.master

/home/rehome /etc/auto.ldap

cp /etc/auto.misc /etc/auto.ldap

vi /etc/auto.ldap

ldapuserX -fstype=nfs,rw  server.domain11.example.com:/home/guests/

systemctl start autofs

systemctl enable autofs

1

2

3

4

5

6

7

partx –a /dev/vda

mkswap /dev/vdax

swapon /dev/vdax

swapon –s

vi /etc/fstab

/dev/vdax swap swap defaults 0 0

mount -a

1

2

3

mkdir /root/findresults

find / -user iar –exec cp -rfp {}  /root/findresults \;

ls /root/findresults

1

2

3

4

cd /usr/local

tar –jcvf /root/backup.tar.bz2 *

mkdir /test

tar –jxvf /root/backup.tar.bz2 –C /test/ 解压看下类容是不是和/usr/local里面的一样

1

2

3

4

5

6

7

8

9

10

11

12

fdisk –cu /dev/vda  #创建一个1G的分区根据情况修改

partx –a /dev/vda

pvcreate /dev/vdax

vgcreate datastore /dev/vdax –s 16M

lvcreate – l 50 –n database datastore

mkfs.ext3 /dev/datastore/database

mkdir /mnt/database

mount /dev/datastore/database /mnt/database/

df –Th

vi /etc/fstab

/dev/datastore /database /mnt/database/ ext3  defaults 0 0

mount –a

1

2

3

4

5

6

7

vim /etc/selinux

getenforce #查看当前SELINUX模式

setenforce 1 #将selinux临时这只为enforcing模式

vim /etc/selinux/config

SELINUX=enforcing

getenforce

enforcing

1

2

3

4

5

vim /etc/bashrc    #重启保持有效

alias qstat=’/bin/ps –Ao  pid,tt,user,fname,rsz’

source /etc/bashrc

alias    #看是否有qstat

qstat   #执行

1

2

3

4

5

6

7

8

nmcli connection add con-name team0 type team  ifname team0 config  ‘{"runner":{"name":"activebackup"}}‘

nmcli con modify team0 ipv4.addresses  ‘172.16.11.25/24‘

nmcli connection modify team0 ipv4.method manual

nmcli connection add type team-slave con-name  team0-p1 ifname eth1 master team0

nmcli connection add type team-slave con-name  team0-p2 ifname eth2 master team0

nmcli connection up team0

nmcli con up team0-p1

nmcli con up team0-p2

1

2

3

4

5

6

7

nmcli con mod eth0 ipv6.addresses “2003:ac18::305/64”

nmcli con mod eth0 ipv6.method manual

systemctl restart network

nmcli con mod eth0 ipv6.addresses  “2003:ac18::30a/64”

nmcli con mod eth0 ipv6.method manual

systemctl restart network

ping6 2003:ac18::30a

1

2

3

4

5

6

postconf -e local_transport=err:XX

vim /etc/postfix/main.cf

relayhost=[rhgls.domain11.exmaple.com]

postconf -e myorigin=domain11.example.com

systemctl restart postfix

echo aaa | mail -S hello dave

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

yum -y install samba samba-client

firewall-cmd --add-service=samba --permanent

firewall-cmd --add-service=mountd –permanent

systemctl restart firewalld

vim /etc/samba/smb.conf

workgroup = STAFF

[common]

path = /common

hosts allow = 172.24.11.

browseable = yes

mkdir /common

chcon –R –t samba_share_t /common/

smbpasswd -a andy

systemctl start smb

systemctl enable samba

1

yum install –y cifs-utils samba-client

1

2

3

4

5

6

7

8

9

10

11

12

13

mkdir /devops

chcon -R -t samba_share_t /devops/

chmod o+w /devops/

vim /etc/samba/smb.conf

[devops]

path = /devops

hosts allow = 172.24.11.

browseable = yes

writable = no

write list = akira

systemctl restart smb

smbpasswd -a silene

smbpasswd -a akira

1

2

3

4

5

mkdir /mnt/dev

smbclient -L /system1/ -U silene

vim /etc/fstab

/system1/devops /mnt/dev cifs  defaults,multiuser,username=silene,password=redhat,sec=ntlmssp 0 0

df –hT

1

2

3

4

su akira

cd /mnt/dev

cifscreds add system1

touch 1

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

vim /etc/exports

/protected 172.24.11.0/24(rw,sync,sec=krb5p)

/public 172.24.11.0/24(ro,sync)

wget -O /etc/krb5.keytab

vim /etc/sysconfig/nfs

RPCNFSDARGS="-V 4.2 "

systemctl restart nfs

systemctl start nfs-secure-server

systemctl enable nfs-secure-server

exportfs –ra

showmount –e

firewall-cmd --add-service=nfs –permanent

firewall-cmd --add-service=rpc-bind –permanent

firewall-cmd --add-service=mountd–permanent

systemc tl restart fiewalld

mkdir -p /protected/project

chown deepak /protected/project/

ll /protected/

chcon -R -t public_content_t /protected/project/

1

2

3

4

5

6

7

8

9

10

showmount -e system1

mkdir -p /mnt/nfsmount

vim /etc/fstab

system1:/public /mnt/nfsmount nfs defaults  0 0

mount –a

mkdir /mnt/nfssecure

wget -O /etc/krb5.keytab

vim /etc/fstab

system1:/protected /mnt/nfssecure nfs  defaults,sec=krb5p,v4.2 0 0 :wq

mount -a

1

2

3

4

5

6

7

8

9

10

yum groupinstall web\* -y

systemctl start httpd

systemctl enable httpd

vim /etc/httpd/conf/httpd.conf

/ServerName

ServerName server1.domain11.example.com:80

systemctl restart httpd

wget -O index.html

firewall-config 然后

systemctl restart firewalld

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

<virtualhost *:80>

documentroot /var/www/html

servername system1.domain11.example.com

</virtualhost>

<virtualhost *:443>

documentroot /var/www/html

servername system1.domain11.example.com

SSLEngine on

SSLCertificateFile /etc/pki/tls/certs/server1.crt

SSLCertificateKeyFile  /etc/pki/tls/private/server1.key

SSLCertificateChainFile  /etc/pki/tls/certs/domain11.crt

<virtualhost>

systemctl restart httpd

firewall-cmd --add-service=https –permanent

systemctl restart firewalld

1

2

3

4

5

6

7

8

9

10

mkdir –p /var/www/ virtual

cd /var/www/ virtual

wget –O index.html vim /etc/httpd/conf/httpd.conf

<virtualhost *:80>

documentroot /var/www/virtual

servername www.domain11.example.com

</virtualhost>

setfacl -m u:andy:rwx /var/www/virtual

su andy

touch /var/www/virtual/11.html

1

2

3

4

5

6

7

8

9

10

11

12

13

14

mkdir /var/www/virtual/private

mkdir /var/www/html/private

cd /var/www/virtual/private

wget -O index.html  http://rhgls.domain11.example.com/materials/private.html  cd /var/www/html/private

wget -O index.html  http://rhgls.domain11.example.com/materials/private.html <Directory  "/var/www/html/private">

AllowOverride none

Require all denied

Require local

</Directory>

<Directory  "/var/www/virtual/private">

AllowOverride none

Require local

Require all denied

</Directory>

1

2

3

4

5

6

7

8

9

10

11

12

13

yum -y install mod_wsgi

vim /etc/httpd/conf/httpd.conf

Listen 80

Listen 8909

<virtualhost *:8909>

servername dynamic.domain11.example.com

WSGIScriptAlias /  /var/www/html/webapp.wsgi    #注意大小写

</virtualhost>

cd /var/www/html

wget  http://rhgls.domain11.example.com/materials/webapp.wsgi

systemctl restart firewalld

semanage port -a -t http_port_t -p tcp 8909

systemctl restart httpd

1

2

3

4

5

6

7

8

9

10

11

12

vim foo.sh

#~/bin/bash

case $1 in

redhat)

echo fedora

fedora)

echo redhat

echo ‘root/foo.sh redhat:fedora‘

chmod +x foo.sh

./foo.sh redhat

./foo.sh fedora

./foo.sh 1

1

2

3

4

5

6

7

8

9

10

11

12

13

vim mkusers.sh    #注意空格

#! /bin/bash

if [ $# -eq 0 ];then

echo ‘Usage:/root/mkusers‘

exit 1

if [ ! -f $1 ]; then

echo ‘Input file not found‘

while read line

useradd -s /bin/false $line

done < $1

chmod +x mkusers.sh

wget  http://rhgls.domain11.example.com/materials/userlist

./mkusers.sh userlist

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

fdisk /dev/sda

partprobe /dev/sda

yum install -y targetcli\*

targetcli

cd backstores/

block/ create block1 /dev/sda3

cd /iscsi

create iqn.2014-09.com.example.domain11:system1

cd iqn.2014-09.com.example.domain11:system1/

cd tpg1/

acls/ create iqn.2014-09.com.example.domain11:system  luns/ create /backstores/block/block1

portals/ create system1.domain11.example.com

systemctl start target

systemctl enable target

firewall-config

systecmctl restart firewalld

1

2

3

4

5

6

7

8

9

10

11

12

yum install -y iscsi-initiator-utils.i686

vim /etc/iscsi/initiatorname.iscsi

InitiatorName=iqn.2014-09.com.example.domain11:system

systemctl start iscsid

systemctl is-active iscsid

iscsiadm --mode discoverydb --type sendtargets  --portal 172.24.11.10 –discover iscsiadm --mode node --targetname iqn.2014-09.com.example.domain11:system1  --portal 172.24.11.10:3260 –login fdisk –l

fdisk /dev/sdb

mkfs.ext4 /dev/sdb1

partprobe

mkdir /mnt/data

vim /etc/fstab

/dev/sdb1 /mnt/data ext4 _netdev 0 0

1

2

3

4

5

6

7

8

9

10

11

12

13

14

yum install -y mariadb*

systemctl start mariadb

systemctl enable mariadb

wget  http://rhgls.domain11.example.com/materials/users.mdb

mysql

create database Contacts;

show databases;

use Contacts

source /users.mdb

show tables;

grant select on Contacts .* to  Luigi@‘localhost‘ identified by ‘redhat‘; exit

mysqladmin -uroot -p password ‘redhat‘ #两个回车

mysql -uroot –p #密码输入redhat

mysql -uLuigi –p #密码输入redhat

1

2

3

4

5

6

7

mysql –uroot –p

show tables; #查看表结构

desc 表名;     #查看表字段

select bid,password from pass where  password=‘tangerine‘;    #查密码的ID号

select * from name where  aid=‘3‘ ;                       #通过密码id找名字

select * from name where  firstname=‘John‘;       #查找同名的人

select * from loc where loction=‘Santa  Clara‘;     #查找住在同一城市的人