2021年9月 – ページ 3 – 端くれプログラマの備忘録

MySQLのインストール

Webアプリの要件がMySQL 5.7なので。

MariaDBをアンインストール

# yum list installed | grep mariadb
mariadb-libs.x86_64 1:5.5.68-1.amzn2 installed
# yum remove mariadb-libs

# yum list installed | grep mariadb

mariadb-libs.x86_64 1:5.5.68-1.amzn2 installed

# yum remove mariadb-libs

mysql8.0リポジトリの追加 (mysql5.7も含まれている)

# yum localinstall https://dev.mysql.com/get/mysql80-community-release-el7-1.noarch.rpm

1	# yum localinstall https://dev.mysql.com/get/mysql80-community-release-el7-1.noarch.rpm

mysql8.0リポジトリの無効化

# yum-config-manager --disable mysql80-community

1	# yum-config-manager --disable mysql80-community

mysql5.7リポジトリの有効化

# yum-config-manager --enable mysql57-community

1	# yum-config-manager --enable mysql57-community

mysql5.7がインストールできるか確認

# yum info mysql-community-server
Available Packages
Name        : mysql-community-server
Arch        : x86_64
Version     : 5.7.35
Release     : 1.el7
Size        : 174 M
Repo        : mysql57-community/x86_64
Summary     : A very fast and reliable SQL database server
URL         : http://www.mysql.com/
License     : Copyright (c) 2000, 2021, Oracle and/or its affiliates. All rights  reserved. Under GPLv2 license as shown in the Description field.
Description : The MySQL(TM) software delivers a very fast, multi-threaded,  multi-user,
            : and robust SQL (Structured Query Language) database server. MySQL  Server
            : is intended for mission-critical, heavy-load production systems as  well
            : as for embedding into mass-deployed software. MySQL is a trademark  of
            : Oracle and/or its affiliates
            :
            : The MySQL software has Dual Licensing, which means you can use the  MySQL
            : software free of charge under the GNU General Public License
            : (http://www.gnu.org/licenses/). You can also purchase commercial  MySQL
            : licenses from Oracle and/or its affiliates if you do not wish to be  bound by the terms of
            : the GPL. See the chapter "Licensing and Support" in the manual for
            : further info.
            :
            : The MySQL web site (http://www.mysql.com/) provides the latest news  and
            : information about the MySQL software.  Also please see the  documentation
            : and the manual for more information.
            :
            : This package includes the MySQL server binary as well as related  utilities
            : to run and administer a MySQL server.

# yum info mysql-community-server

Available Packages

Name : mysql-community-server

Arch : x86_64

Version : 5.7.35

Release : 1.el7

Size : 174 M

Repo : mysql57-community/x86_64

Summary : A very fast and reliable SQL database server

URL : http://www.mysql.com/

Description : The MySQL(TM) software delivers a very fast, multi-threaded, multi-user,

: and robust SQL (Structured Query Language) database server. MySQL Server

: is intended for mission-critical, heavy-load production systems as well

: as for embedding into mass-deployed software. MySQL is a trademark of

: Oracle and/or its affiliates

: The MySQL software has Dual Licensing, which means you can use the MySQL

: software free of charge under the GNU General Public License

: (http://www.gnu.org/licenses/). You can also purchase commercial MySQL

: licenses from Oracle and/or its affiliates if you do not wish to be bound by the terms of

: the GPL. See the chapter "Licensing and Support" in the manual for

: further info.

: The MySQL web site (http://www.mysql.com/) provides the latest news and

: information about the MySQL software. Also please see the documentation

: and the manual for more information.

: This package includes the MySQL server binary as well as related utilities

: to run and administer a MySQL server.

インストール

# yum install mysql-community-server
# mysqld --version
mysqld Ver 5.7.35 for Linux on x86_64 (MySQL Community Server (GPL))

# yum install mysql-community-server

# mysqld --version

mysqld Ver 5.7.35 for Linux on x86_64 (MySQL Community Server (GPL))

起動

# systemctl start mysqld.service
# systemctl status mysqld.service

1 2	# systemctl start mysqld.service # systemctl status mysqld.service

デフォルトパスワードを調べる

# vi /var/log/mysqld.log
2021-09-01T05:33:58.488673Z 1 [Note] A temporary password is generated for root@localhost: xxxxxxxxxxxx

1 2	# vi /var/log/mysqld.log 2021-09-01T05:33:58.488673Z 1 [Note] A temporary password is generated for root@localhost: xxxxxxxxxxxx

パスワード変更

# mysql_secure_installation
New password: xxxxxxxxxxxx
Re-enter new password: xxxxxxxxxxxx

# mysql_secure_installation

New password: xxxxxxxxxxxx

Re-enter new password: xxxxxxxxxxxx

アクセス確認

# mysql -u root -p
Enter password: xxxxxxxxxxxx
mysql> show databases;
+--------------------+
| Database           |
+--------------------+
| information_schema |
| mysql              |
| performance_schema |
| sys                |
+--------------------+
4 rows in set (0.00 sec)
mysql> exit;

# mysql -u root -p

Enter password: xxxxxxxxxxxx

mysql> show databases;

+--------------------+

| Database |

+--------------------+

| information_schema |

| mysql |

| performance_schema |

| sys |

+--------------------+

4 rows in set (0.00 sec)

mysql> exit;

参考サイト

AWSのEC2で行うAmazon Linux2（MySQL5.7）環境構築 – Qiita
https://qiita.com/2no553/items/952dbb8df9a228195189

MySQLの初期パスワードのありか – Qiita
https://qiita.com/RyosukeSomeya/items/c695487588f5ac28d9f4

[AWS] EC2/LAMP環境を構築する(3) – Apache/PHP

2021年9月3日2021年9月5日 @84kure

(前回からの続き)

Apacheのインストール

# yum install httpd
# httpd -v
Server version: Apache/2.4.48 ()
Server built: Jun 25 2021 18:53:37

# yum install httpd

# httpd -v

Server version: Apache/2.4.48 ()

Server built: Jun 25 2021 18:53:37

PHPのインストール

Webアプリの要件がPHP 7.4なので。不足モジュールはWebアプリをセットアップする際に追加する。

# amazon-linux-extras install php7.4
# php-fpm -v
PHP 7.4.21 (fpm-fcgi) (built: Jul 7 2021 17:36:32)
Copyright (c) The PHP Group
Zend Engine v3.4.0, Copyright (c) Zend Technologies
# php -v
PHP 7.4.21 (cli) (built: Jul 7 2021 17:35:08) ( NTS )
Copyright (c) The PHP Group
Zend Engine v3.4.0, Copyright (c) Zend Technologies

# amazon-linux-extras install php7.4

# php-fpm -v

PHP 7.4.21 (fpm-fcgi) (built: Jul 7 2021 17:36:32)

Zend Engine v3.4.0, Copyright (c) Zend Technologies

# php -v

PHP 7.4.21 (cli) (built: Jul 7 2021 17:35:08) ( NTS )

Zend Engine v3.4.0, Copyright (c) Zend Technologies

Apacheの起動

起動前に念のため設定確認
# service httpd configtest
Syntax OK
# service php-fpm start
# service httpd start
Redirecting to /bin/systemctl start httpd.service

起動前に念のため設定確認

# service httpd configtest

Syntax OK

# service php-fpm start

# service httpd start

Redirecting to /bin/systemctl start httpd.service

IPアドレスでアクセスしてテストページが表示されることを確認
http://xxx.xxx.xxx.xxx/

ステータス確認

# service httpd status
# service php-fpm status

1 2	# service httpd status # service php-fpm status

(次回へ続く)

参考サイト

Amazon Linux 2 EC2 インスタンスに Extras Library からソフトウェアをインストールする
https://aws.amazon.com/jp/premiumsupport/knowledge-center/ec2-install-extras-library-software/

Install PHP 7.4|7.3|7.2 on Amazon Linux 2 – TechViewLeo
https://techviewleo.com/install-php-7-on-amazon-linux/

[AWS] EC2/LAMP環境を構築する(2) – 初期設定

2021年9月2日2021年9月5日 @84kure

(前回からの続き)

システム更新

# yum update

1	# yum update

タイムゾーン設定

変更前確認

# date
Wed Sep  1 05:04:58 UTC 2021
# timedatectl
      Local time: Wed 2021-09-01 05:05:13 UTC
  Universal time: Wed 2021-09-01 05:05:13 UTC
        RTC time: Wed 2021-09-01 05:05:13
       Time zone: n/a (UTC, +0000)
     NTP enabled: yes
NTP synchronized: yes
RTC in local TZ: no
      DST active: n/a

# date

Wed Sep 1 05:04:58 UTC 2021

# timedatectl

Local time: Wed 2021-09-01 05:05:13 UTC

Universal time: Wed 2021-09-01 05:05:13 UTC

RTC time: Wed 2021-09-01 05:05:13

Time zone: n/a (UTC, +0000)

NTP enabled: yes

NTP synchronized: yes

RTC in local TZ: no

DST active: n/a

設定変更

# timedatectl list-timezones | grep Los_Angeles
America/Los_Angeles
# timedatectl set-timezone America/Los_Angeles

# timedatectl list-timezones | grep Los_Angeles

America/Los_Angeles

# timedatectl set-timezone America/Los_Angeles

変更後確認

# date
Tue Aug 31 22:06:06 PDT 2021
# timedatectl
      Local time: Tue 2021-08-31 22:06:20 PDT
  Universal time: Wed 2021-09-01 05:06:20 UTC
        RTC time: Wed 2021-09-01 05:06:20
       Time zone: America/Los_Angeles (PDT, -0700)
     NTP enabled: yes
NTP synchronized: yes
RTC in local TZ: no
      DST active: yes
Last DST change: DST began at
                  Sun 2021-03-14 01:59:59 PST
                  Sun 2021-03-14 03:00:00 PDT
Next DST change: DST ends (the clock jumps one hour backwards) at
                  Sun 2021-11-07 01:59:59 PDT
                  Sun 2021-11-07 01:00:00 PST

# date

Tue Aug 31 22:06:06 PDT 2021

# timedatectl

Local time: Tue 2021-08-31 22:06:20 PDT

Universal time: Wed 2021-09-01 05:06:20 UTC

RTC time: Wed 2021-09-01 05:06:20

Time zone: America/Los_Angeles (PDT, -0700)

NTP enabled: yes

NTP synchronized: yes

RTC in local TZ: no

DST active: yes

Last DST change: DST began at

Sun 2021-03-14 01:59:59 PST

Sun 2021-03-14 03:00:00 PDT

Next DST change: DST ends (the clock jumps one hour backwards) at

Sun 2021-11-07 01:59:59 PDT

Sun 2021-11-07 01:00:00 PST

ホスト名設定

変更前確認

# hostname
ip-xxx-xxx-xxx-xxx.us-west-1.compute.internal
# hostnamectl
   Static hostname: ip-xxx-xxx-xxx-xxx.us-west-1.compute.internal
         Icon name: computer-vm
           Chassis: vm
        Machine ID: xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
           Boot ID: xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
    Virtualization: xen
  Operating System: Amazon Linux 2
       CPE OS Name: cpe:2.3:o:amazon:amazon_linux:2
            Kernel: Linux 4.14.243-185.433.amzn2.x86_64
      Architecture: x86-64

# hostname

ip-xxx-xxx-xxx-xxx.us-west-1.compute.internal

# hostnamectl

Static hostname: ip-xxx-xxx-xxx-xxx.us-west-1.compute.internal

Icon name: computer-vm

Chassis: vm

Machine ID: xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

Boot ID: xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

Virtualization: xen

Operating System: Amazon Linux 2

CPE OS Name: cpe:2.3:o:amazon:amazon_linux:2

Kernel: Linux 4.14.243-185.433.amzn2.x86_64

Architecture: x86-64

設定変更

# hostnamectl set-hostname myserver.mydomain.com

1	# hostnamectl set-hostname myserver.mydomain.com

変更後確認

# hostname
myserver.mydomain.com
# hostnamectl
   Static hostname: myserver.mydomain.com
         Icon name: computer-vm
           Chassis: vm
        Machine ID: xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
           Boot ID: xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
    Virtualization: xen
  Operating System: Amazon Linux 2
       CPE OS Name: cpe:2.3:o:amazon:amazon_linux:2
            Kernel: Linux 4.14.243-185.433.amzn2.x86_64
      Architecture: x86-64

# hostname

myserver.mydomain.com

# hostnamectl

Static hostname: myserver.mydomain.com

Icon name: computer-vm

Chassis: vm

Machine ID: xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

Boot ID: xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

Virtualization: xen

Operating System: Amazon Linux 2

CPE OS Name: cpe:2.3:o:amazon:amazon_linux:2

Kernel: Linux 4.14.243-185.433.amzn2.x86_64

Architecture: x86-64

chrony(時刻同期)のインストール

もしNTPサービスがインストールされていたらアンインストール

# yum erase 'ntp*'

1	# yum erase 'ntp*'

chronyをインストール

# yum install chrony

1	# yum install chrony

設定確認

# vi /etc/chrony.conf
以下の行が存在することを確認する
server 169.254.169.123 prefer iburst minpoll 4 maxpoll 4

# vi /etc/chrony.conf

以下の行が存在することを確認する

server 169.254.169.123 prefer iburst minpoll 4 maxpoll 4

起動

# service chronyd restart

1	# service chronyd restart

自動起動をオンにする

# chkconfig chronyd on

1	# chkconfig chronyd on

動作確認

# chronyc sources -v
  .-- Source mode  '^' = server, '=' = peer, '#' = local clock.
/ .- Source state '*' = current best, '+' = combined, '-' = not combined,
| /             'x' = may be in error, '~' = too variable, '?' = unusable.
||                                                 .- xxxx [ yyyy ] +/- zzzz
||      Reachability register (octal) -.           |  xxxx = adjusted offset,
||      Log2(Polling interval) --.      |          |  yyyy = measured offset,
||                                \     |          |  zzzz = estimated error.
||                                 |    |           \
MS Name/IP address         Stratum Poll Reach LastRx Last sample
===============================================================================
^* 169.254.169.123               3   4    17     7  +4251ns[+2773ns] +/-  462us
^- tick.srs1.ntfo.org            3   6    17     6  -1224us[-1224us] +/-  107ms
^- li1210-167.members.linod>     2   6    17     7    -88us[  -90us] +/-   42ms
^- 44.190.6.254                  1   6    17     7    +63us[  +61us] +/- 2319us
^- ntp2i.versadns.com            2   6    17     7  +4272us[+4271us] +/-   45ms

# chronyc tracking
Reference ID    : A9FEA97B (169.254.169.123)
Stratum         : 4
Ref time (UTC)  : Wed Sep 01 05:25:34 2021
System time     : 0.000002313 seconds fast of NTP time
Last offset     : +0.000003001 seconds
RMS offset      : 0.000006041 seconds
Frequency       : 1.454 ppm fast
Residual freq   : -0.053 ppm
Skew            : 0.959 ppm
Root delay      : 0.000397119 seconds
Root dispersion : 0.000269764 seconds
Update interval : 16.2 seconds
Leap status     : Normal

# chronyc sources -v

.-- Source mode '^' = server, '=' = peer, '#' = local clock.

/ .- Source state '*' = current best, '+' = combined, '-' = not combined,

| / 'x' = may be in error, '~' = too variable, '?' = unusable.

|| .- xxxx [ yyyy ] +/- zzzz

|| Reachability register (octal) -. | xxxx = adjusted offset,

|| Log2(Polling interval) --. | | yyyy = measured offset,

|| \ | | zzzz = estimated error.

|| | | \

MS Name/IP address Stratum Poll Reach LastRx Last sample

===============================================================================

^* 169.254.169.123 3 4 17 7 +4251ns[+2773ns] +/- 462us

^- tick.srs1.ntfo.org 3 6 17 6 -1224us[-1224us] +/- 107ms

^- li1210-167.members.linod> 2 6 17 7 -88us[ -90us] +/- 42ms

^- 44.190.6.254 1 6 17 7 +63us[ +61us] +/- 2319us

^- ntp2i.versadns.com 2 6 17 7 +4272us[+4271us] +/- 45ms

# chronyc tracking

Reference ID : A9FEA97B (169.254.169.123)

Stratum : 4

Ref time (UTC) : Wed Sep 01 05:25:34 2021

System time : 0.000002313 seconds fast of NTP time

Last offset : +0.000003001 seconds

RMS offset : 0.000006041 seconds

Frequency : 1.454 ppm fast

Residual freq : -0.053 ppm

Skew : 0.959 ppm

Root delay : 0.000397119 seconds

Root dispersion : 0.000269764 seconds

Update interval : 16.2 seconds

Leap status : Normal

(次回へ続く)

参考サイト

Set the time for your Linux instance
https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/set-time.html

[AWS] EC2/LAMP環境を構築する(1) – インスタンス作成

2021年9月1日2021年9月5日 @84kure

DigitalOceanで運用していたサイトをAWSに移すことになったので、AWSのEC2でLAMP環境を作る手順を覚え書き。

EC2インスタンスの作成

EC2インスタンスの要件は以下とする。

リージョン: N. California
OS: Amazon Linux 2
インスタンスタイプ: t2.micro (本稼働前にスケールアップする)
ストレージ: Rootボリューム(8GB)のみ
セキュリティグループ: HTTPとHTTPSは全許可、SSHは自分のIPのみ許可
Elastic IPで固定IP

インスタンスが作成できたら、インスタンス作成時に指定した鍵情報を使ってsshアクセスできることを確認する。

$ ssh ec2-user@xxx.xxx.xxx.xxx

__| __|_ )
_| ( / Amazon Linux 2 AMI
___|\___|___|

https://aws.amazon.com/amazon-linux-2/
4 package(s) needed for security, out of 16 available
Run "sudo yum update" to apply all updates.
[ec2-user@ip-xxx-xxx-xxx-xxx ~]$

$ ssh ec2-user@xxx.xxx.xxx.xxx

__| __|_ )

_| ( / Amazon Linux 2 AMI

___|\___|___|

https://aws.amazon.com/amazon-linux-2/

4 package(s) needed for security, out of 16 available

Run "sudo yum update" to apply all updates.

[ec2-user@ip-xxx-xxx-xxx-xxx ~]$

ユーザの作成

$ sudo su
# adduser user123
# passwd user123
Changing password for user user123.
New password: passwd123
Retype new password: passwd123
passwd: all authentication tokens updated successfully.

$ sudo su

# adduser user123

# passwd user123

Changing password for user user123.

New password: passwd123

Retype new password: passwd123

passwd: all authentication tokens updated successfully.

Root権限の付与

# gpasswd -a user123 wheel
Adding user user123 to group wheel

1 2	# gpasswd -a user123 wheel Adding user user123 to group wheel

公開鍵認証の追加

# su - user123
$ mkdir .ssh
$ chmod 700 .ssh
$ vi .ssh/authorized_keys
公開鍵をコピペ
$ chmod 600 .ssh/authorized_keys
$ exit

# su - user123

$ mkdir .ssh

$ chmod 700 .ssh

$ vi .ssh/authorized_keys

公開鍵をコピペ

$ chmod 600 .ssh/authorized_keys

$ exit

SSHデーモンの設定 – rootでのログインを禁止する。

# vi /etc/ssh/sshd_config
PermitRootLogin no
# systemctl reload sshd

# vi /etc/ssh/sshd_config

PermitRootLogin no

# systemctl reload sshd

ログイン確認 – 現在のセッションは維持したまま、新しいターミナルを開いて試す。

$ ssh user123@xxx.xxx.xxx.xxx
Last login: Wed Sep 1 04:57:42 2021

__| __|_ )
_| ( / Amazon Linux 2 AMI
___|\___|___|

https://aws.amazon.com/amazon-linux-2/
4 package(s) needed for security, out of 16 available
Run "sudo yum update" to apply all updates.
[user123@ip-xxx-xxx-xxx-xxx ~]$

$ ssh user123@xxx.xxx.xxx.xxx

Last login: Wed Sep 1 04:57:42 2021

__| __|_ )

_| ( / Amazon Linux 2 AMI

___|\___|___|

https://aws.amazon.com/amazon-linux-2/

4 package(s) needed for security, out of 16 available

Run "sudo yum update" to apply all updates.

[user123@ip-xxx-xxx-xxx-xxx ~]$

スーパーユーザになれることを確認

$ sudo su
We trust you have received the usual lecture from the local System
Administrator. It usually boils down to these three things:
#1) Respect the privacy of others.
#2) Think before you type.
#3) With great power comes great responsibility.
[sudo] password for user123: passwd123
#

$ sudo su

We trust you have received the usual lecture from the local System

Administrator. It usually boils down to these three things:

#1) Respect the privacy of others.

#2) Think before you type.

#3) With great power comes great responsibility.

[sudo] password for user123: passwd123

(次回へ続く)

端くれプログラマの備忘録

月: 2021年9月

[AWS] EC2/LAMP環境を構築する(4) – MySQL

MySQLのインストール

参考サイト

[AWS] EC2/LAMP環境を構築する(3) – Apache/PHP

Apacheのインストール

PHPのインストール

Apacheの起動

参考サイト

[AWS] EC2/LAMP環境を構築する(2) – 初期設定

システム更新

タイムゾーン設定

ホスト名設定

chrony(時刻同期)のインストール

参考サイト

[AWS] EC2/LAMP環境を構築する(1) – インスタンス作成

EC2インスタンスの作成

ユーザの作成