有用的命令备份

Security Classification: 【C-1】 | Publish Time:2024-07-11 | Category:Test Notes | Edit
Old Version | Diff |
Expiry Notice: The article was published three months ago. Please independently assess the validity of the technical methods and code mentioned within. :)

AI Info

AI Point: 92
AI Summary: 本文档是一份实用的运维操作手册，涵盖腾讯云 Agent 卸载、Certbot 证书更新、Nginx 配置模板、CI/CD 流程、Docker 升级、JKS 自签名证书生成以及 Protobuf 编译等关键操作命令。内容结构清晰，包含代码块和配置示例，适用于系统管理员和 DevOps 工程师快速参考和执行。
AI Evaluation: 该文档内容详实、结构清晰，涵盖了多个实际运维场景中的关键操作，具有较高的实用价值。语法和格式经过优化，提升了可读性。图片链接正确保留，代码块格式规范。唯一可改进之处是部分命令可添加注释说明用途，进一步提升新手友好度。整体质量优秀，是一份高质量的运维速查手册。

## 腾讯云卸载agent

Yunjing 卸载
```bash
wget -qO- https://raw.githubusercontent.com/littleplus/TencentAgentRemove/master/remove.sh | bash
```

Tat卸载
```bash
curl https://tat-gz-1258344699.cos.ap-guangzhou.myqcloud.com/tat_agent_linux_x86_64.zip -o 1.zip 
```
解压后运行uninstall.sh

![](https://img.meituan.net/imgupload/e28d20b32e6c0ae9fde62c3c24e02bb525366.png)

## CERTBOT更新证书SOP
*仅个人记录，方便复制命令 ?*

### 安装certbot
yum install certbot

### 关闭容器
docker stop container
解除443端口占用

### 执行命令

certbot certonly --standalone -d auth.rce.ink

### 新增域名 nginx配置

#### 业务域名

``` bash
server {
    listen 80;
    listen 443 ssl http2;
    server_name domain;
    root "/app/domain/public";
    index index.php;

if ($server_port !~ 443){
        rewrite ^(/.*)$ https://$host$1 permanent;
    }

ssl_certificate /ssl/domain/fullchain1.pem;
    ssl_certificate_key /ssl/domain/privkey1.pem;

if (!-e $request_filename) {
        rewrite ^/index.php(.*)$ /index.php?s=$1 last;
        rewrite ^(.*)$ /index.php?s=$1 last;
    }

include /opt/docker/etc/nginx/vhost.common.d/*.conf;
}
```

#### 反代域名

差别在于 无需包含额外的配置文件（业务域名需要转发流量至指定处理引擎，反代包含会导致location冲突错误）

```bash 
server {
    listen 80;
    listen 443 ssl;
    server_name domain;
    root "/app/domain/public";
    index index.php;

if ($server_port !~ 443){
        rewrite ^(/.*)$ https://$host$1 permanent;
    }

ssl_certificate /ssl/domain/fullchain1.pem;
    ssl_certificate_key /ssl/domain/privkey1.pem;

location / {
        proxy_pass dest;
        proxy_set_header Host dest_host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
    }

}
```

## CI/CD SOP

1、git init
2、git config --global credential.helper store //后续只需要输入一次git密码
3、git fetch --all 获取git仓库所有更新
4、git reset --hard origin/master 用于将本地仓库的当前分支与远程仓库的master分支同步

## docker升级

https://blog.csdn.net/weixin_44534057/article/details/132544578

## jks自签文件生成

```
keytool -genkeypair -alias test -validity 36500 -keyalg RSA -dname "CN=jwt,OU=jtw,O=jwt,L=zurich,S=zurich, C=CH" -keypass qq123456 -keystore depy.jks -storepass qq123456
```

## protoc

protoc check.proto --cpp_out=./

Comment List

Comment

© Copyright: This article is an original work and the copyright belongs to the Depy's docs unless marked as Reproduced

Please contact the blogger for authorization to reprint

『📕Category 』

有用的命令备份

© Copyright: This article is an original work and the copyright belongs to the Depy's docs unless marked as ReproducedPlease contact the blogger for authorization to reprint

© Copyright: This article is an original work and the copyright belongs to the Depy's docs unless marked as Reproduced

Please contact the blogger for authorization to reprint