************************* Core 2.0.2 *******************************
//1、安装dotnet环境
sudo rpm --import https://packages.microsoft.com/keys/microsoft.asc
sudo sh -c 'echo -e "[packages-microsoft-com-prod]\nname=packages-microsoft-com-prod \nbaseurl= https://packages.microsoft.com/yumrepos/microsoft-rhel7.3-prod\nenabled=1\ngpgcheck=1\ngpgkey=https://packages.microsoft.com/keys/microsoft.asc" > /etc/yum.repos.d/dotnetdev.repo'
//2、安装.NET SDK
sudo yum update
sudo yum install libunwind libicu
sudo yum install dotnet-sdk-2.0.2
//3、验证dotnet环境
dotnet --info
****************************** MySQL *****************************
//1、下载MySQL
wget https://repo.mysql.com//mysql57-community-release-el7-11.noarch.rpm
rpm -ivh mysql57-community-release-el7-11.noarch.rpm
yum install mysql-community-server
//2、重启MySQL服务 systemctl start mysqld.service
systemctl restart mysqld.service
//3、设置开机启动
systemctl enable mysqld
systemctl daemon-reload
//4、修改root本地登录密码
//mysql安装完成之后，在/var/log/mysqld.log文件中给root生成了一个临时的默认密码。
//在这里A temporary password is generated for root@localhost:
//5、MySQL需要输入刚才的临时默认密码
mysql -u root -p
//6、修改默认登陆密码
ALTER USER 'root'@'localhost' IDENTIFIED BY '自定义特殊密码';
//7、MySQL设置远程登陆
GRANT ALL PRIVILEGES ON *.* TO 'root'@'%' IDENTIFIED BY '自定义特殊密码' WITH GRANT OPTION;
//8、启用防火墙
systemctl start firewalld.service
//9、设置防火墙允许3306端口访问
firewall-cmd --zone=public --add-port=3306/tcp --permanent
//10、重启防火墙
firewall-cmd --reload
//11、修改默认编码配置 在[mysqld]下面直接添加
vim /etc/my.cnf
character_set_server=utf8
init_connect='SET NAMES utf8'
//12、重启mysql服务
systemctl restart mysqld.service
//13、创建MySQL用户（用户名，密码，权限）
CREATE USER 'admin'@'%' IDENTIFIED BY '自己的密码';
GRANT GRANT OPTION ON *.* TO 'admin'@'%';
GRANT SELECT, INSERT, UPDATE, DELETE, CREATE, DROP, RELOAD, SHUTDOWN, PROCESS, FILE, REFERENCES, INDEX, ALTER, SHOW DATABASES, SUPER, CREATE TEMPORARY TABLES, LOCK TABLES, EXECUTE, REPLICATION SLAVE, REPLICATION CLIENT, CREATE VIEW, SHOW VIEW, CREATE ROUTINE, ALTER ROUTINE, EVENT, TRIGGER ON *.* TO 'admin'@'%';
***************************** 防火墙配置 *********************************
//1、将接口添加到区域，默认接口都在public
firewall-cmd --zone=public --add-interface=eth0 --permanent
//2、设置默认接口区域
# firewall-cmd --set-default-zone=public --permanent
//3、将端口添加到区域
firewall-cmd --zone=public --add-port=5000/tcp --permanent
firewall-cmd --zone=public --add-port=80/tcp --permanent
************************* Nginx ***************************************
//1、下载
curl -o nginx.rpm http://nginx.org/packages/centos/7/noarch/RPMS/nginx-release-centos-7-0.el7.ngx.noarch.rpm
rpm -ivh nginx.rpm
yum install nginx
//2、启动nginx服务
systemctl start nginx
//3、开机启动nginx
systemctl enable nginx.service
//4、配置nginx
vim /etc/nginx/conf.d/default.conf
//修改以下内容
server {
listen 80;
location / {
proxy_pass http://localhost:5000;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection keep-alive;
proxy_set_header Host $host;
proxy_cache_bypass $http_upgrade;
}
}
//5、保存完执行nginx重新加载
nginx -s reload
//6、如遇到报错：nginx: [error] open() "/var/run/nginx.pid" failed (2: No such file or directory)，执行下面的
systemctl start nginx
nginx -s reload
//以下东西没有遇到，如果遇到可以执行
yum install policycoreutils-python
sudo cat /var/log/audit/audit.log | grep nginx | grep denied | audit2allow -M mynginx
sudo semodule -i mynginx.pp
****************** 配置守护服务（Supervisor） ******************
//1、安装守护服务
yum install python-setuptools
easy_install supervisor
//2、配置
mkdir /etc/supervisor
echo_supervisord_conf > /etc/supervisor/supervisord.conf
//3、修改supervisord.conf
vim /etc/supervisor/supervisord.conf
（将文件末尾的）
;[include]
;files = relative/directory/*.ini
改为
[include]
files = conf.d/*.conf
mkdir conf.d
cd conf.d
//4、新建守护文件(切记空格)
[program:myCore1]
command=dotnet run ; //运行程序的命令
directory=/mycore/first/ ; //命令执行的目录
autorestart=true ; //程序意外退出是否自动重启
stderr_logfile=/var/log/myCore1.err.log ; //错误日志文件
stdout_logfile=/var/log/myCore1.out.log ; 输出日志文件
environment=ASPNETCORE_ENVIRONMENT=Production ; //进程环境变量
user=root ; 进程执行的用户身份
stopsignal=INT
最后执行:wq myCore1.conf
//5、运行supervisord，查看是否生效
supervisord -c /etc/supervisor/supervisord.conf
（如果报以下错误）
Another program is already listening on a port that one of our HTTP servers is configured to use. Shut this program down first before starting supervisord.
//解决方法：（如果在失败，参见：https://segmentfault.com/a/1190000003955182）
sudo unlink /tmp/supervisor.sock
//6、查看是否启动成功
ps -ef
//7、配置Supervisor开机启动服务
vim /usr/lib/systemd/system/supervisord.service
# dservice for systemd (CentOS 7.0+)
# by ET-CS (https://github.com/ET-CS)
[Unit]
Description=Supervisor daemon
[Service]
Type=forking
ExecStart=/usr/bin/supervisord -c /etc/supervisor/supervisord.conf
ExecStop=/usr/bin/supervisorctl shutdown
ExecReload=/usr/bin/supervisorctl reload
KillMode=process
Restart=on-failure
RestartSec=42s
[Install]
WantedBy=multi-user.target
//8、开机启动
systemctl enable supervisord
//验证是否设置开机启动成功
systemctl is-enabled supervisord