sudo apt install isc-dhcp-server修改 DHCP 設定檔
default-lease-time 3600;
max-lease-time 28800;
subnet 192.168.1.0 netmask 255.255.255.0 {
range 192.168.1.121 192.168.1.220;
option subnet-mask 255.255.255.0;
option routers 192.168.1.254;
}
重啟 DHCP SERVER
sudo systemctl restart isc-dhcp-server isc-dhcp-server6檢查是否有啟動成功
sudo systemctl status isc-dhcp-server isc-dhcp-server6
sudo netstat -tulnp | grep dhcp
addgroup sftp-users確認 group 有正確被建立
grep 'sftp-users' /etc/group
useradd -g sftp-users -s /sbin/nologin sftp_user_XXX-g: 預設 group
grep sftp_user_XXX /etc/passwd如果使用者早已建立, 可直接更改使用者設定即可
usermod -g sftp-users -d /upload -s /sbin/nologin sftp_user_XXX建立使用者的目錄
install -d -o sftp_user_XXX -g sftp-users /home/sftp_user_XXX/www變更使用者的密碼
passwd sftp_user_XXX
nano /etc/ssh/sshd_config
#Subsystem sftp /usr/lib/openssh/sftp-server 《==加# Subsystem sftp internal-sftp PasswordAuthentication yes PermitRootLogin no Match Group sftp-users ChrootDirectory /home/%u X11Forwarding no AllowTcpForwarding no PermitTTY no ForceCommand internal-sftp
systemctl restart ssh
chown -R sftp_user_XXX:sftp-users www chmod -R 755 www
date或在 /etc/timezone 文件中查找當前時區。
cat /etc/timezone若想更改時區，可先用以下指俴取得 timezone 列表：
timedatectl list-timezones但 Timezone 列表十分長, 用 grep 過濾會較方便, 以下只會印出亞洲區的時區:
timedatectl list-timezones | grep Asia找到要設定的時區後，便可以設定： 台北時區：
timedatectl set-timezone Asia/Taipei香港時區：
timedatectl set-timezone Asia/Hong_Kong設定好後, 可以用 timedatectl 指令檢查時區是否設定正確，時鐘是否與網際網路同步。只需運行：
timedatectl如你所見，timedatectl 命令顯示本地時間、世界時、時區以及系統時鐘是否與網際網路伺服器同步，以及 systemd-timesyncd.service 是處於活動還是非活動狀態，等等。
sudo systemctl restart systemd-timesyncd.service然後檢查 timesyncd 服務狀態：
sudo systemctl status systemd-timesyncd.service如果此服務已啟用並處於活動狀態，那麼系統時鐘應與網際網路時間伺服器同步。 你可以使用命令驗證是否啟用了時間同步：
timedatectl如果仍然不起作用，請運行以下命令以啟用時間同步：
sudo timedatectl set-ntp true
sudo passwd root修改了 root 密碼後，開啟 sshd 的設定檔：
nano /etc/ssh/sshd_config找到以下一行：
sudo systemctl restart sshd重新啟動 sshd 後，便可以用 root 帳號發入 ssh。
sudo apt-get update安裝 MySQL 8.0
sudo apt-get install mysql-server這邊使用 netstat 指令來查看， netstat 的功用是顯示通訊協定統計資料以及目前的TCP/IP 網路連線，所以要使用它來查看已安裝好的 MySQL 是否有連線監聽。此指令要另外安裝，安裝指令如下：
sudo apt-get install net-tools安裝完成後就能透過 netstat 指令來查看 MySQL 是否安裝成功：
sudo netstat -tap | grep mysql設置 MySQL 允許遠端訪問
sudo nano /etc/mysql/mysql.conf.d/mysqld.cnf
# If MySQL is running as a replication slave, this should be # changed. Ref https://dev.mysql.com/doc/refman/8.0/en/server-system-variables.html#sysvar_tmpdir # tmpdir = /tmp # # Instead of skip-networking the default is now to listen only on # localhost which is more compatible and is not less secure. #bind-address = 127.0.0.1 <== 註解起來 # # * Fine Tuning # key_buffer_size = 16M # max_allowed_packet = 64M # thread_stack = 256K進入 MySQL 服務，一開始密碼為空值
mysql -u root -p
CREATE USER 'root'@'localhost' IDENTIFIED WITH mysql_native_password BY '12345678'; GRANT ALL PRIVILEGES ON *.* TO 'root'@'localhost'; CREATE USER 'root'@'%' IDENTIFIED WITH mysql_native_password BY '12345678'; ALTER USER 'root'@'%' IDENTIFIED WITH mysql_native_password BY '12345678'; GRANT ALL PRIVILEGES ON *.* TO 'root'@'%'; FLUSH PRIVILEGES;其他相關
chmod -R 700 /var/lib/mysql chown -R mysql:mysql /var/lib/mysql查詢mysql資料庫檔案的存放位置
show variables like '%datadir%';
sudo apt-get update sudo apt-get install nginx
sudo apt install php8.1-fpm php8.1-mysql php8.1-mbstring php8.1-gd php8.1-curl
sudo nano /etc/php/8.1/fpm/php.ini
sudo service php8.1-fpm restart
sudo nano /etc/nginx/sites-available/default
server {
listen 80 default_server;
listen [::]:80 default_server;
root /var/www/html;
index index.php index.html index.htm index.nginx-debian.html;
server_name _;
location / {
try_files $uri $uri/ =404;
}
location ~ \.php$ {
include snippets/fastcgi-php.conf;
fastcgi_pass unix:/run/php/php7.3-fpm.sock;
}
location ~ /\.ht {
deny all;
}
}
sudo nginx -t
sudo systemctl reload nginx
sudo apt update sudo apt install samba2. 修改samba設定檔
nano /etc/samba/smb.conf
[global] ## Browsing/Identification ### # Change this to the workgroup/NT-domain name your Samba server will part of workgroup = WORKGROUP security = user # 最小支援的SMBv2版本 server min protocol = SMB2 (or NT1) # server string is the equivalent of the NT Description field server string = %h server (Samba, Ubuntu) #### Networking #### # The specific set of interfaces / networks to bind to # This can be either the interface name or an IP address/netmask; # interface names are normally preferred ; interfaces = 127.0.0.0/8 eth0 interfaces = 127.0.0.0/8 192.168.0.0/16
# Cap the size of the individual log files (in KiB). ; max log size = 1000 max log size = 100
#======================= Share Definitions ======================= [root] comment = Root Directories path = / writeable = yes browseable = yes valid users = root [www] comment = www path = /var/www writeable = yes browseable = yes valid users = root # Un-comment the following (and tweak the other settings below to suit) # to enable the default home directory shares. This will share each # user's home directory as \\server\username並把以下註解掉
;[printers] ; comment = All Printers ; browseable = no ; path = /var/spool/samba ; printable = yes ; guest ok = no ; read only = yes ; create mask = 0700 # Windows clients look for this share name as a source of downloadable # printer drivers ;[print$] ; comment = Printer Drivers ; path = /var/lib/samba/printers ; browseable = yes ; read only = yes ; guest ok = no3. 重啟 samba 服務
sudo systemctl restart smbd nmbd4. 建立 Samba 使用者
sudo smbpasswd -a root其他相關用法
sudo systemctl reload smbd nmbd檢查設定檔是否有誤
testparm查看 samba 連線狀態
sudo smbstatus