西部开源学习笔记BOOK2-《unit 4》

Posted 2020-08-19

##############################

##### unit4.管理系统存储 #####

##############################

#########1.分区划分##########

[[email protected] ~]# fdisk /dev/vdb

Welcome to fdisk (util-linux 2.23.2).

Changes will remain in memory only, until you decide to write them.

Be careful before using the write command.

Device does not contain a recognized partition table

Building a new DOS disklabel with disk identifier 0x2f15e742.

Command (m for help): m              ##帮助

Command action

 a     toggle a bootable flag

 b     edit bsd disklabel

 c     toggle the dos compatibility flag

 d     delete a partition                 ##删除分区

 g     create a new empty GPT partition table

 G     create an IRIX (SGI) partition table

 l     list known partition types         ##列出系统可用的分区类型

 m     print this menu

 n     add a new partition                ##新建分区

 o     create a new empty DOS partition table

 p     print the partition table          ##显示分区

 q     quit without saving changes        ##退出

 s     create a new empty Sun disklabel

 t     change a partition‘s system id     ##修改分区功能id

 u     change display/entry units

 v     verify the partition table

 w     write table to disk and exit       ##保存更改到分区表

 x     extra functionality (experts only)

Command (m for help): n

Partition type:

p primary (0 primary, 0 extended, 4 free)            ##分区类型为主分区

e extended                                           ##分区类型为扩展分区

Select (default p): p                                ##默认选p

Partition number (1-4, default 1):                   ##主分区id

First sector (2048-20971519, default 2048):          ##此分区起始位置

Using default value 2048

Last sector, +sectors or +size{K,M,G} (2048-20971519, default 20971519): +100M ##分区大小

Partition 1 of type Linux and of size 100 MiB is set

Command (m for help): p

Disk /dev/vdb: 10.7 GB, 10737418240 bytes, 20971520 sectors

Units = sectors of 1 * 512 = 512 bytes

Sector size (logical/physical): 512 bytes / 512 bytes

I/O size (minimum/optimal): 512 bytes / 512 bytes

Disk label type: dos

Disk identifier: 0x2f15e742

Device Boot     Start     End     Blocks     Id     System

/dev/vdb1       2048      206847   102400    83     Linux

Command (m for help): wq                             ##保存退出，如果按q表示放弃更改退出

The partition table has been altered!

Calling ioctl() to re-read partition table.

Syncing disks.

[[email protected] ~]# partprobe                        ##同步分区表（更新分区表）

[[email protected] ~]# cat /proc/partitions             ##格式化

major minor #blocks name

253     0     10485760  vda

253     1     10484142  vda1

253     16    10485760  vdb

253     17    102400    vdb1

253     20    1         vdb4

注意：扩展分区的分区起始位置和分区大小都选择建议选择默认。

扩展分区的大小显示为1

###########2.磁盘分区格式化##########

[[email protected] ~]# blkid                      ##显示可用的磁盘分区

/dev/vda1: UUID="9bf6b9f7-92ad-441b-848e-0257cbb883d1" TYPE="xfs"

[[email protected] ~]# mount /dev/vdb1 /mnt/      ##挂载分区

mount: /dev/vdb1 is write-protected, mounting read-only

mount: unknown filesystem type ‘(null)‘        ##该磁盘分区不可挂载，因为文件系统无法识别

[[email protected] ~]# mkfs.                     ##按tab之后会显示该系统可格式化的文件系统类型

mkfs.btrfs mkfs.ext2 mkfs.ext4 mkfs.minix mkfs.vfat

mkfs.cramfs mkfs.ext3 mkfs.fat mkfs.msdos mkfs.xfs

[[email protected] ~]# mkfs.xfs /dev/vdb1         ##linux一般选择xfs文件系统

meta-data=/dev/vdb1     isize=256     agcount=4, agsize=6400 blks

         =              sectsz=512    attr=2, projid32bit=1

         =              crc=0

data     =              bsize=4096    blocks=25600, imaxpct=25

         =              sunit=0       swidth=0 blks

naming   =version 2     bsize=4096    ascii-ci=0 ftype=0

log      =internal log  bsize=4096    blocks=853, version=2

         =              sectsz=512    sunit=0 blks, lazy-count=1

realtime =none          extsz=4096    blocks=0, rtextents=0

注意：扩展分区不用修改文件系统

###########3.swap分区###########

[[email protected] ~]# vim /etc/fstab

#

# /etc/fstab

# Created by anaconda on Wed May 7 01:22:57 2014

#

# Accessible filesystems, by reference, are maintained under ‘/dev/disk‘

# See man pages fstab(5), findfs(8), mount(8) and/or blkid(8) for more info

#

UUID=9bf6b9f7-92ad-441b-848e-0257cbb883d1 / xfs defaults 1 1

/dev/vdb6     swap     swap     defaults     0     0

/dev/vdb5     /mnt     xfs      defaults     0     0

    ||         ||       ||         ||        ||    ||

设备名称     挂载点  设备类型  挂载参数  是否备份 是否检测

#########4.磁盘加密##########

1.磁盘加密

（1）.创建一个磁盘

[[email protected] ~]# fdisk /dev/vdb

....                     ##此过程参照第一小节

[[email protected] ~]# cat /proc/partitions

major minor #blocks name

253     0     10485760     vda

253     1     10484142     vda1

253     16    10485760     vdb

253     17    102400       vdb1

（2）.加密

[[email protected] ~]# cryptsetup luksFormat /dev/vdb1

WARNING!

========

This will overwrite data on /dev/vdb1 irrevocably.

Are you sure? (Type uppercase yes): YES

Enter passphrase:                              ##密码必须是大于8位的字符数字组合

Verify passphrase:

[[email protected] ~]# mount /dev/vdb1 /mnt/

mount: unknown filesystem type ‘crypto_LUKS‘   ##无法挂载，因为无法识别该分区的文件系统

（3）.打开锁

[[email protected] ~]# cryptsetup open /dev/vdb1 tbr

Enter passphrase for /dev/vdb1:

[[email protected] ~]# ll /dev/mapper/

total 0

crw-------. 1 root root 10, 236 11月 5 20:58 control

lrwxrwxrwx. 1 root root 7 11月 5 21:27 tbr -> ../dm-0

（4）.创建文件系统

[[email protected] ~]# mkfs.xfs /dev/mapper/tbr

meta-data=/dev/mapper/tbr     isize=256     agcount=4, agsize=6272 blks

         =                    sectsz=512 attr=2, projid32bit=1

         =                    crc=0

data     =                    bsize=4096 blocks=25088, imaxpct=25

         =                    sunit=0 swidth=0 blks

naming   =version 2           bsize=4096 ascii-ci=0 ftype=0

log      =internal log        bsize=4096 blocks=853, version=2

         =                    sectsz=512 sunit=0 blks, lazy-count=1

realtime =none                extsz=4096 blocks=0, rtextents=0

(5).挂载

[[email protected] ~]# mount /dev/mapper/tbr /mnt/

============这之后就可以在挂载好的/mnt/路径下作操作了===========

(6).卸载

[[email protected] ~]# cryptsetup close tbr

device-mapper: remove ioctl on tbr failed: Device or resource busy

[[email protected] ~]# umount /dev/mapper/tbr

（7）.关闭锁

[[email protected] ~]# df

Filesystem 1K-blocks Used Available Use% Mounted on

/dev/vda1 10473900 3809024 6664876 37% /

devtmpfs 927072 0 927072 0% /dev

tmpfs 942660 84 942576 1% /dev/shm

tmpfs 942660 17092 925568 2% /run

tmpfs 942660 0 942660 0% /sys/fs/cgroup

2.加密磁盘的永久挂载

[[email protected] ~]# df                 ##当前状态/dev/mapper/tbr并未挂载到/mnt下

Filesystem     1K-blocks     Used     Available     Use%     Mounted on

/dev/vda1      10473900     3809024     6664876     37%       /

devtmpfs       927072       0            927072     0%        /dev

tmpfs          942660       84           942576     1%        /dev/shm

tmpfs          942660       17092        925568     2%        /run

tmpfs          942660       0            942660     0%        /sys/fs/cgroup

[[email protected] ~]# vim /etc/crypttab

tbr                 /dev/vdb1     /root/lukspsfile

||                     ||             ||

解密后设备管理文件     设备         加密字符存放文件

[[email protected] ~]# vim /root/lukspsfile     ##配置加密字符存放文件

tbr952q8                                     ##加密时用的密码

[[email protected] ~]# chmod 600 /root/lukspsfile      ##修改加密配置文件的权限为只有root可rw

[[email protected] ~]# cryptsetup luksAddKey /dev/vdb1 /root/lukspsfile

Enter any passphrase:

                                                    ##关联磁盘，加密文件

[[email protected] ~]# vim /etc/fstab                  ##设置开机自动挂载

/dev/mapper/tbr /mnt xfs defaults 0 0

[[email protected] ~]# reboot                          ##重启

[[email protected] ~]# df                              ##当重启之后/dev/mapper/tbr就已经挂载到/mnt下了

Filesystem     1K-blocks     Used     Available     Use%     Mounted on

/dev/vda1     10473900     3808176     6665724     37%         /

devtmpfs       927072       0          927072      0%          /dev

tmpfs          942660       84          942576     1%          /dev/shm

tmpfs          942660       17036       925624     2%          /run

tmpfs          942660       0           942660     0%          /sys/fs/cgroup

/dev/mapper/tbr 96940       5176         91764     6%          /mnt

3.加密清除

[[email protected] ~]# vim /etc/fstab          ##删除开机自动挂载的配置

/dev/mapper/tbr     /mnt     xfs     defaults     0     0         ##删除该行

[[email protected] ~]# > /etc/crypttab         ##删除

[roo[email protected] ~]# rm -fr /root/lukspsfile

[[email protected] ~]# umount /mnt/

[[email protected] ~]# cryptsetup close tbr

[[email protected] ~]# mkfs.xfs /dev/vdb1

mkfs.xfs: /dev/vdb1 appears to contain an existing filesystem (crypto_LUKS).

mkfs.xfs: Use the -f option to force overwrite.

[[email protected] ~]# mkfs.xfs /dev/vdb1 -f

meta-data=/dev/vdb1     isize=256     agcount=4, agsize=6400 blks

         =              sectsz=512    attr=2, projid32bit=1

         =              crc=0

data     =              bsize=4096    blocks=25600, imaxpct=25

         =              sunit=0       swidth=0 blks

naming   =version 2     bsize=4096    ascii-ci=0 ftype=0

log      =internal log  bsize=4096    blocks=853, version=2

         =              sectsz=512    sunit=0 blks, lazy-count=1

realtime =none          extsz=4096    blocks=0, rtextents=0

###########5.磁盘阵列############

软raid====硬raid

raid 0 1 5

0:2块磁盘同时存1份数据

1:2块磁盘同时存两份数据

5:0+1

1.创建磁盘阵列

监控命令：

[[email protected] ~]# watch -n 1 cat /proc/mdstat

Personalities : [raid1]

md0 : active raid1 vdb3[2](S) vdb2[1] vdb1[0]     ##（S）-spare表示该设备闲置

      102272 blocks super 1.2 [2/2] [UU]

(1).先创建3个磁盘，并依次将其id改为fd

Command (m for help): t

Partition number (1-3, default 3): 1

1e Hidden W95 FAT1 80 Old Minix

Hex code (type L to list all codes): fd         ##在L中查看id号是：fd Linux raid auto

Changed type of partition ‘Linux‘ to ‘Linux raid autodetect‘

（2）.创建磁盘阵列

[[email protected] ~]# mdadm -C /dev/md0 -a yes -l 1 -n 2 -x 1 /dev/vdb{1..3}

##-C 创建磁盘阵列     ##-a 如果文件不存在则自动创建     ##-l 磁盘阵列level（raid 0，1，5）

##-n 设备个数         ##-x 闲置设备个数

mdadm: Note: this array has metadata at the start and

    may not be suitable as a boot device. If you plan to

    store ‘/boot‘ on this device please ensure that

    your boot-loader understands md/v1.x metadata, or use

    --metadata=0.90

Continue creating array?

Continue creating array? (y/n) y

mdadm: Defaulting to version 1.2 metadata

mdadm: array /dev/md0 started.

[[email protected] ~]# mkfs.xfs /dev/md0

meta-data=/dev/md0     isize=256 agcount=4, agsize=6392 blks

         =             sectsz=512 attr=2, projid32bit=1

         =             crc=0

data     =             bsize=4096 blocks=25568, imaxpct=25

         =             sunit=0 swidth=0 blks

naming   =version 2    bsize=4096 ascii-ci=0 ftype=0

log      =internal log bsize=4096 blocks=853, version=2

         =             sectsz=512 sunit=0 blks, lazy-count=1

realtime =             none extsz=4096 blocks=0, rtextents=0

[[email protected] ~]# mount /dev/md0 /mnt/

2.删除磁盘阵列

（1）.破坏md0中的vdb1，2--->删除md0中的vdb1，2---->注意：剩下最后一个vdb3只能用（2）之后的步骤来删除了

[[email protected] ~]# mdadm -f /dev/md0 /dev/vdb1 ##-f（faulty） 破坏md0的vdb1

[[email protected] ~]# mdadm -D /dev/md0      ##-D 显示md0的使用情况

/dev/md0:

    Version : 1.2

    Creation Time : Sat Nov 5 22:59:22 2016

    Raid Level : raid1

    Array Size : 102272 (99.89 MiB 104.73 MB)

    Used Dev Size : 102272 (99.89 MiB 104.73 MB)

    Raid Devices : 2

    Total Devices : 3

    Persistence : Superblock is persistent

    Update Time : Sat Nov 5 23:32:37 2016

    State : clean

    Active Devices : 2

    Working Devices : 2

    Failed Devices : 1

    Spare Devices : 0

    Name : desktop19.example.com:0 (local to host desktop19.example.com)

    UUID : 111646c2:8aa85c7a:c5f0b2c6:23a93cdc

    Events : 36

    Number     Major     Minor     RaidDevice     State

    2          253         19         0         active sync /dev/vdb3

    1          253         18         1         active sync /dev/vdb2

    0          253         17         -         faulty /dev/vdb1

[[email protected] ~]# mdadm -r /dev/md0 /dev/vdb1 ##-r（remove） 删除md0中的vdb1

[[email protected] ~]# mdadm -D /dev/md0

    Number     Major     Minor     RaidDevice     State

    2          253         19         0         active sync /dev/vdb3

    1          253         18         1         active sync /dev/vdb2

（补充：

[[email protected] ~]# mdadm -a /dev/md0 /dev/vdb1     ##-a（add） 添加vdb1到md0

[[email protected] ~]# mdadm -D /dev/md0

Number Major Minor RaidDevice State

2 253 19 0 active sync /dev/vdb3

1 253 18 1 active sync /dev/vdb2

3 253 17 - spare /dev/vdb1

）

[[email protected] ~]# mdadm -f /dev/md0 /dev/vdb3

mdadm: set device faulty failed for /dev/vdb3: Device or resource busy

##当破坏到vdb3的时候报错，只能使用以下步骤来继续删除

（2）.卸载md0

[[email protected] ~]# umount /mnt/

（3）.停止磁盘阵列md0

[[email protected] ~]# mdadm -S /dev/md0

mdadm: stopped /dev/md0

（4）.依次删除磁盘阵列所用的磁盘

[[email protected] ~]# fdisk /dev/vdb

Command (m for help): d ##删除分区

Partition number (1-3, default 3):

Command (m for help): p ##显示该磁盘分区

Disk /dev/vdb: 10.7 GB, 10737418240 bytes, 20971520 sectors

Units = sectors of 1 * 512 = 512 bytes

Sector size (logical/physical): 512 bytes / 512 bytes

I/O size (minimum/optimal): 512 bytes / 512 bytes

Disk label type: dos

Disk identifier: 0x27721115

    

    Device  Boot     Start     End     Blocks     Id     System

Command (m for help): wq      ##保存退出

The partition table has been altered!

Calling ioctl() to re-read partition table.

Syncing disks.

[[email protected] ~]# partprobe  ##注意：做完之后不要忘记同步分区表

###########6.配额#############

超出的限额会在7天后清除。

注意：配额是针对于分区的，只在该分区里生效。是该用户在该分区下的限额。