README
## 一级目录
### kuboard
```
sudo docker run -d \
--restart=unless-stopped \
--privileged \
--name=kuboard \
-p 280:80/tcp \
-p 10081:10081/tcp \
-e KUBOARD_ENDPOINT="http://10.1.128.101:280" \
-e KUBOARD_AGENT_SERVER_TCP_PORT="10081" \
-e KUBOARD_ADMIN_DERAULT_PASSWORD="Greattimes601" \
-v /mnt/kuboard-data:/data \
swr.cn-east-2.myhuaweicloud.com/kuboard/kuboard:v3
718621799
159zxc
# 台式机
329 139 945
# 128跳板机
859 242 939
```
### ck
```
31123 31124是nodeport38123 39000是hostport
for pod in `kubectl get pod -n npds|grep -v NAME|awk '{print $1}'`;do kubectl delete pod -n npds $pod --grace-period=0 --force ;done
#虚拟机
https://10.1.128.62/ui/#/login
root
123.qwe
禅道：http://10.1.125.200:8080
gtdel-zgy
Gt2024
128----219.238.102.74
ssl_vpn_user1/Test@123
```
### rancher 更换证书
```
#1. 进 rancher server 器,执行相操作
docker exec -it rancher-server /bin/sh
kubectl --insecure-skip-tls-verify -n kube-system delete secrets k3s-serving
kubectl --insecure-skip-tls-verify delete secret serving-cert -n cattle-system
mv /var/lib/rancher/k3s/server/tls/dynamic-cert.json /var/lib/rancher/k3s/server/tls/dynamic-cert.json.bak
exit
#2. 请刷
curl --insecure -sfL https://localhost:443/v3
#果使用1443口动的rancher则使用下面这
curl --insecure -sfL https://localhost:1443/v3
#3. 重rancher server 器
docker restart rancher-server
```
### 红塔证券
```
https://vpn.hongtastock.com/
https://10.1.65.70/index.php
etl =>
http://10.1.69.202:8088/
api =>
http://10.1.69.202:8089/
202，203，204是centos
10.1.69.202-204
htuser
HTZQ741852,.
VPN的账号：zhangqj02 密码：zhangqj@802.com
堡垒机账号密码一样，堡垒机地址https://10.1.65.70/index.php
```
### 中银证券
### 东海证券
```
1、需要登录东海证券的VPN；
2、128.1.200.1 20021访问的地址，192.168.50.31
3、128.1.200.1 20022访问的地址，192.168.50.32
4、登录的账户及口令，root/Tcl+nftx123!@#
1、四台机器128.1.20.101-104
2、dhzq --->tcl+nftx123!@#
root--->Tcl+nftx123!@#
```
### 国金相关
```
https://vpn.gjzq.cn/prx/000/http/localhost/login/index.html
手机服务器地址: vpn.gjzq.cn
# 国金vpn
https://sslxbl.gjzq.cn
【国金证券】尊敬的管理员，账号的用户名：bpm_zqj
初始密码：u$2LmUTw
【国金证券】尊敬的管理员，账号zhou_gy重置后密码为u$2LmUTw
Hund112Sun358
172.24.48.39/40/41/42
root--->Gj600109zq
人大金仓
链接地址 172.24.61.101
端口 54321
数据库 easyviews
user system
password rootroot
类名 com.kingbase8.Driver
jdbcURL jdbc:kingbase8://172.24.61.101:54321/easyviews
# 测试环境---------------------------------------------------
172.24.61.101 captor bpmconsumer
172.24.61.102 ck
172.24.61.103 rancher ck kafka harbor
172.24.61.104 ck
rancher https://172.24.61.103:1443/g/clusters
etl http://172.24.61.104:8084/
api http://172.24.61.104:8083
# ----------------------------------------------------------
171-172三台，npds-client npds-pair 分别起了18个（每台起6个client、6个pair），每个内存给15G
191-196三台，npds-client npds-pair 分别起了18个（每台起3个client、3个pair），每个内存给20G
在191机器上操作 { # 191-196的解码操作
一键启动所有机器解码：cluster.sh start
一键关闭所有机器解码：cluster.sh stop
}
脚本应该在/usr/bin/cluster.sh
```
[dbeaver连接dm8](https://blog.csdn.net/u012063422/article/details/123759444)
### 申万相关
```
vpn
https://114.141.190.226:10443
zhouguanyu
Greattimes601@
```
```
http://172.16.130.130/ui/#/
WB00057
Swhy1234
```
```
192.168.144.126/127
root
Blacksheep.wow
192.168.144.167
Blacksheep.wow1
api => http://192.168.131.33:8089/
用户名/密码: admin/EasyViews-1234
etl => http://192.168.131.33:8088/
用户名/密码: admin/EasyViews-1234
192.168.131.33 captor bpmconsumer web
192.168.131.34 docker npds-cli/pair sw-indicator
192.168.131.23 docker ck redis npds-manager
192.168.131.22 docker npds-cli/pair kafka zookeeper
ssh 192.168.131.23 "/opt/npds/npds-manager.sh stop"
ssh 192.168.131.23 "/opt/npds/npds-manager.sh start"
ssh 192.168.131.22 "/opt/npds/npds.sh stop"
ssh 192.168.131.22 "/opt/npds/npds.sh start"
ssh 192.168.131.34 "/opt/npds/npds.sh stop"
ssh 192.168.131.34 "/opt/npds/npds.sh start"
```
```
223.83.4.254
root ssqj!QAZ
223.83.4.253
root--->Hello92102523
```
### 宝兰德
```
localIP="172.24.61.104"
echo "${localIP} $(hostname)" >> /etc/hosts
cat /etc/hosts
tar -xf BES-AppServer-Standard-9.5.5.7266.tar.gz
./iastool --user admin --passport B#2008_2108#es --password B#2008_2108#es --port 1900 start --server
( --user 用户名，默认已有admin用户
--passport 命令行工具密码，默认B#2008_2108#es
--password 管理控制台密码，默认B#2008_2108#es
)
./iastool --user admin --passport B#2008_2108#es --password B#2008_2108#es --port 1900 stop --server
( --user 用户名，默认已有admin用户
--passport 命令行工具密码，默认B#2008_2108#es
--password 管理控制台密码，默认B#2008_2108#es
--port 管理控制台端口
)
(
登录页面 http://172.24.61.104:1900/console
账号 admin
密码 B#2008_2108#es
)
(
# --创建虚拟主机
./iastool --user admin --passport B#2008_2108#es --password B#2008_2108#es create --virtual-server easyviews-eureka
./iastool --user admin --passport B#2008_2108#es --password B#2008_2108#es create --virtual-server easyviews-system
./iastool --user admin --passport B#2008_2108#es --password B#2008_2108#es create --virtual-server easyviews-etl
./iastool --user admin --passport B#2008_2108#es --password B#2008_2108#es create --virtual-server easyviews-indicator
./iastool --user admin --passport B#2008_2108#es --password B#2008_2108#es create --virtual-server easyviews-api
# --创建http监听器
./iastool --user admin --passport B#2008_2108#es --password B#2008_2108#es create --http-listener --threadpool http-thread-pool --listenerport 3001 --defaultvirtualserver easyviews-eureka http3001
./iastool --user admin --passport B#2008_2108#es --password B#2008_2108#es create --http-listener --threadpool http-thread-pool --listenerport 9999 --defaultvirtualserver easyviews-system http9999
./iastool --user admin --passport B#2008_2108#es --password B#2008_2108#es create --http-listener --threadpool http-thread-pool --listenerport 9998 --defaultvirtualserver easyviews-indicator http9998
./iastool --user admin --passport B#2008_2108#es --password B#2008_2108#es create --http-listener --threadpool http-thread-pool --listenerport 8084 --defaultvirtualserver easyviews-etl http8084
./iastool --user admin --passport B#2008_2108#es --password B#2008_2108#es create --http-listener --threadpool http-thread-pool --listenerport 8083 --defaultvirtualserver easyviews-api http8083
)
#启停应用
./iastool --user admin --passport B#2008_2108#es --password B#2008_2108#es start --application easyviews-indicator
./iastool --user admin --passport B#2008_2108#es --password B#2008_2108#es stop --application easyviews-indicator
```
3、导入正式 license
注意：针对集群版的 BES9.5.X 导入 license，需在管理服务及节点服务中，都导入 license
3.1 管理服务导入 license
管理服务的路径：/home/bes/BES952/AdminServer/bin （根据实际情况修改）
License 许可证路径：/home/bes/BES952/bes.lic.txt （根据实际情况修改）
执行命令:
./lmadm import-lic --sourcepath=/home/bes/BES952/bes.lic.txt
导入之后，查询确认，执行命令./lmadm view-lic 查询
### 人大金仓
```
#! /bin/bash
LANG=zh_CN.UTF-8
SELF_PATH=$(cd $(dirname $0);pwd)
iptables -P FORWARD ACCEPT
setenforce 0
if systemctl status firewalld > /dev/null 2>&1 ;then
systemctl disable firewalld
systemctl stop firewalld
fi
# 注意：安装数据库时，必须使用非root用户安装
useradd -m -U -s /bin/bash kingbase -d /home/kingbase
# 注：-m创建用户家目录,-U 创建用户同名用户组
echo "kingbase" | passwd --stdin kingbase
# 注：无论规划放到哪个目录，属主属组必须是安装用户。
#（1）数据库安装包及license文件存放存放目录：
mkdir /home/kingbase/install
chown -R kingbase.kingbase /home/kingbase/install
#（2）数据库软件目录：
mkdir -p /home/kingbase/KingbaseES/V8
chown -R kingbase.kingbase /home/kingbase/KingbaseES/V8
#（3）数据库数据目录（选择存储空间大的做数据目录）：
mkdir -p /dbdata/data
chown -R kingbase.kingbase /dbdata/data
#（4）数据库备份目录（选择存储空间大的做备份目录，最好不与数据目录在同一盘下）：
# A：物理备份路径
mkdir -p /dbbackup/kbbr_repo
chown -R kingbase.kingbase /dbbackup/kbbr_repo
# B:逻辑备份路径
mkdir -p /dbbackup/logical
chown -R kingbase.kingbase /dbbackup/logical
cat >> /etc/security/limits.conf << EOF
root soft nofile 655360
root hard nofile 655360
root soft nproc 655360
root hard nproc 655360
root soft memlock 50000000
root hard memlock 50000000
root soft core unlimited
root hard core unlimited
kingbase soft nofile 655360
kingbase hard nofile 655360
kingbase soft nproc 655360
kingbase hard nproc 655360
kingbase soft memlock 50000000
kingbase hard memlock 50000000
kingbase soft core unlimited
kingbase hard core unlimited
EOF
# 附参数详解：
# soft ——指当前系统生效的设置值。
# hard——指系统中所能设定的最大值。soft的限制不能比hard的限制高。
# nofile——指打开文件的最大数目
# nproc——指进程的最大数目
# core ——指限制内核文件的大小
cat >> /etc/sysctl.conf << EOF
kernel.sem = 50100 64128000 50100 1280
# 信号量, ipcs -l 或 -u 查看，每16个进程一组，每组信号量需要17个信号量。
kernel.shmall = 1073741824
# 所有共享内存段相加大小限制(建议内存的80%)
kernel.shmmax = 4398046511104
# 最大单个共享内存段大小(建议为内存一半)
kernel.shmmni = 4096
vm.dirty_background_ratio=2
vm.dirty_ratio = 40
vm.overcommit_memory = 2
vm.overcommit_ratio = 90
vm.swappiness = 10
fs.aio-max-nr = 40960000
fs.file-max = 7672460
fs.nr_open = 20480000
net.ipv4.tcp_keepalive_time = 1200
net.ipv4.tcp_keepalive_probes = 3
net.ipv4.tcp_keepalive_intvl = 30
net.ipv4.ip_local_port_range=9000 65500
net.ipv4.tcp_max_syn_backlog = 4096
net.ipv4.tcp_max_tw_buckets = 6000
net.core.somaxconn=1024
net.core.netdev_max_backlog = 32768
net.core.wmem_default=262144
net.core.rmem_default=262144
net.core.rmem_max=4194304
net.core.wmem_max=4194304
net.ipv4.tcp_synack_retries = 2
net.ipv4.tcp_fin_timeout = 30
net.ipv4.tcp_syn_retries = 2
net.ipv4.route.gc_timeout = 100
net.ipv4.tcp_wmem=8192 65536 16777216
net.ipv4.tcp_rmem=8192 87380 16777216
net.ipv4.tcp_mem = 94500000 91500000 92700000
net.ipv4.tcp_max_orphans = 3276800
net.ipv4.ip_forward = 1
EOF
sysctl -p
sed -i "s/#DefaultTasksAccounting=no/DefaultTasksAccounting=no/g" /etc/systemd/system.conf
systemctl daemon-reload
systemctl daemon-reexec
sed -i "s/#RemoveIPC=no/RemoveIPC=no/g" /etc/systemd/logind.conf
systemctl daemon-reload
systemctl restart systemd-logind
mkdir /home/kingbase/cdrom
cd /home/kingbase/install/
mount ${SELF_PATH}/KingbaseES_V008R006C006B0013PS003_Lin64_install.iso /home/kingbase/cdrom
if [[ $? != 0 ]];then
echo "挂载失败!" && exit 1
fi
cp -r /home/kingbase/cdrom/* /home/kingbase/install
cd /home/kingbase/install/
chown -R kingbase.kingbase *
mkdir /home/kingbase/license
cp ${SELF_PATH}/license_21592_0.dat /home/kingbase/license
# /home/kingbase/license/license_21592_0.dat
echo "#####################################################################$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$"
su - kingbase
cd /home/kingbase/install && bash setup.sh -i console
# 注：加-i console可直接使用命令行安装
su - root
cd /home/kingbase/KingbaseES/V8/Scripts/ && bash ./root.sh
if service kingbase8d status > /dev/null 2>&1 ;then
echo "KingbaseES 安装成功！"
else
echo "KingbaseES 安装失败！"
fi
##############################
function readme(){
su - kingbase
cd /home/kingbase/KingbaseES/V8/Server/bin/
./kingbase -V
#启动服务 sys_ctl -w start -D ${Data文件目录} -l "${Data文件目录}/sys_log/startup.log"
# sys_ctl -w start -D /dbdata/data -l /dbdata/data/sys_log/startup.log"
# 停止服务 sys_ctl stop -m fast -w -D ${Data文件目录}
# dbeaver 连接kingbase https://www.shuzhiduo.com/A/gAJGqRA1dZ/
./ksql -Usystem test
create database easyviews;
./ksql -Usystem easyviews
sed -i "s/ora_input_emptystr_isnull = on/ora_input_emptystr_isnull = off/g"
com.kingbase8.Driver
jdbc:kingbase8://192.168.111.128:54321/easyviews
jdbc:kingbase8://172.24.61.101:54321/easyviews?useSSL=false&characterEncoding=utf8&autoReconnect=true&allowPublicKeyRetrieval=true
}
```
### 国金二期
```
FAS-BigData5 192.168.80.171
[root@FAS-BigData5 mnt]# kubectl get deploy -n default
NAME READY UP-TO-DATE AVAILABLE AGE
busybox 1/1 1 1 263d
clickhouse-operator 1/1 1 1 238d
kafdrop 1/1 1 1 262d
kafka-manager 1/1 1 1 239d
prometheus-operator-grafana 1/1 1 1 263d
prometheus-operator-kube-state-metrics 1/1 1 1 263d
prometheus-operator-operator 1/1 1 1 263d
[root@FAS-BigData5 mnt]#
[root@FAS-BigData5 mnt]# kubectl get sts -n default
NAME READY AGE
alertmanager-prometheus-operator-alertmanager 1/1 263d
chi-gt-business-0-0 1/1 212d
chi-gt-business-1-0 1/1 212d
chi-gt-business-2-0 1/1 212d
prometheus-prometheus-operator-prometheus 1/1 263d
redis 1/1 262d
[root@FAS-BigData5 mnt]# kubectl get sts -n npds
NAME READY AGE
npds-client 6/6 261d
npds-manager 1/1 261d
npds-pair 6/6 261d
[root@FAS-BigData5 mnt]#
[root@FAS-BigData5 mnt]# kubectl get pod -n npds
NAME READY STATUS RESTARTS AGE
npds-client-0 1/1 Running 0 23d
npds-client-1 1/1 Running 0 23d
npds-client-2 1/1 Running 0 23d
npds-client-3 1/1 Running 0 23d
npds-client-4 1/1 Running 0 23d
npds-client-5 1/1 Running 0 23d
npds-manager-0 1/1 Running 0 23d
npds-pair-0 1/1 Running 0 23d
npds-pair-1 1/1 Running 0 23d
npds-pair-2 1/1 Running 0 23d
npds-pair-3 1/1 Running 0 23d
npds-pair-4 1/1 Running 0 23d
npds-pair-5 1/1 Running 0 23d
[root@FAS-BigData5 mnt]# kubectl -n bigdata get deploy
NAME READY UP-TO-DATE AVAILABLE AGE
alarmmanager 1/1 1 1 258d
alarmsimulation 1/1 1 1 258d
algorithm-clustering 1/1 1 1 258d
algorithm-threshold 1/1 1 1 258d
bpm-daily-statistics 1/1 1 1 258d
bpm-indicator 1/1 1 1 258d
clickhouse 2/2 2 2 258d
consul-config-loader 1/1 1 1 258d
consul-service-clean 1/1 1 1 258d
dbclear 1/1 1 1 202d
gateway 1/1 1 1 258d
npm-indicator 0/0 0 0 258d
peakdata 0/0 0 0 112d
schedule 1/1 1 1 258d
shenwan-indicator 0/0 0 0 138d
tidm-indicator 1/1 1 1 258d
tidm-zabbix 1/1 1 1 257d
[root@FAS-BigData5 mnt]# kubectl -n bigdata get sts
NAME READY AGE
alarmmanager-postgresql 1/1 258d
consul 3/3 258d
db-clear-postgresql 1/1 202d
gateway-postgresql 1/1 258d
schedule-postgresql 1/1 258d
[root@FAS-BigData5 mnt]#
[root@FAS-BigData5 mnt]# ss -tunpl |grep 5432
tcp LISTEN 0 288 0.0.0.0:54321 0.0.0.0:* users:(("kingbase",pid=13178,fd=3))
tcp LISTEN 0 288 [::]:54321 [::]:* users:(("kingbase",pid=13178,fd=4))
[root@FAS-BigData5 mnt]# ss -tunpl |grep 5432
tcp LISTEN 0 288 0.0.0.0:54321 0.0.0.0:* users:(("kingbase",pid=13178,fd=3))
tcp LISTEN 0 288 [::]:54321 [::]:* users:(("kingbase",pid=13178,fd=4))
[root@FAS-BigData5 mnt]# ss -tunpl |grep 9092
tcp LISTEN 0 50 *:9092 *:* users:(("java",pid=12104,fd=270))
[root@FAS-BigData5 mnt]# systemctl status kafka
● kafka.service - Apache Kafka server
Loaded: loaded (/usr/lib/systemd/system/kafka.service; enabled; vendor preset: disabled)
Active: active (running) since Thu 2023-05-25 21:16:02 CST; 2 months 14 days ago
Main PID: 12104 (java)
Tasks: 280
Memory: 91.7G
CGroup: /system.slice/kafka.service
└─12104 java -Xmx10G -Xms10G -server -XX:+UseG1GC -XX:MaxGCPauseMillis=20 -XX:InitiatingHeapOccupancyPercent=35 -XX:+ExplicitGCInvokesConcurrent -Djava.awt.headless=true -Xlogg>
May 25 21:16:02 FAS-BigData5 systemd[1]: Starting Apache Kafka server...
May 25 21:16:02 FAS-BigData5 systemd[1]: Started Apache Kafka server.
[root@FAS-BigData5 mnt]# ssh 192.168.80.172 "systemctl status kafka"
● kafka.service - Apache Kafka server
Loaded: loaded (/usr/lib/systemd/system/kafka.service; enabled; vendor preset: disabled)
Active: active (running) since Thu 2023-05-25 21:18:49 CST; 2 months 14 days ago
[root@FAS-BigData5 mnt]# ssh 192.168.80.173 "systemctl status kafka"
[root@FAS-BigData5 mnt]# ssh kingbase@192.168.80.171 "sys_monitor.sh start"
[root@FAS-BigData5 mnt]# ssh 192.168.80.191 " cluster.sh start/stop"
[root@FAS-BigData5 mnt]# ssh 192.168.80.136 "clickhouse-client --user admin --password ssqj@easyviews.pw -h 192.168.80.174 --port 39000 --query 'show databases;'"
INFORMATION_SCHEMA
default
easyviews
information_schema
system
[root@FAS-BigData5 mnt]# ssh 192.168.80.136 "clickhouse-client --user admin --password ssqj@easyviews.pw -h 192.168.80.175 --port 39000 --query 'show databases;' >/dev/null 2>&1"
[root@FAS-BigData5 mnt]# echo $?
0
[root@FAS-BigData5 mnt]# ssh 192.168.80.172 "systemctl status harbor > /dev/null 2>&1"
Authorized users only. All activities may be monitored and reported.
[root@FAS-BigData5 mnt]# echo $?
0
[root@FAS-BigData5 mnt]#
[root@FAS-BigData5 mnt]# ssh 192.168.80.136 "systemctl status captor"
● captor.service - captor server
Loaded: loaded (/usr/lib/systemd/system/captor.service; disabled; vendor preset: disabled)
Active: active (running) since Sun 2023-07-16 18:07:50 CST; 3 weeks 2 days ago
Process: 161052 ExecStart=/bin/bash /usr/bin/captor.sh start (code=exited, status=0/SUCCESS)
Main PID: 161053 (bash)
Tasks: 92
CGroup: /system.slice/captor.service
├─161053 /bin/bash /usr/bin/captor.sh start
└─161056 ./captor
Jul 16 18:07:50 FAS-NDPS-Manager2 systemd[1]: Starting captor server...
Jul 16 18:07:50 FAS-NDPS-Manager2 systemd[1]: Started captor server.
[root@FAS-BigData5 mnt]# ssh 192.168.80.136 "systemctl status captor-soft"
● captor-soft.service - captor_soft server
Loaded: loaded (/usr/lib/systemd/system/captor-soft.service; disabled; vendor preset: disabled)
Active: active (running) since Sun 2023-07-16 18:07:55 CST; 3 weeks 2 days ago
Process: 161238 ExecStart=/bin/bash /usr/bin/captor-soft.sh start (code=exited, status=0/SUCCESS)
Main PID: 161239 (bash)
Tasks: 92
CGroup: /system.slice/captor-soft.service
├─161239 /bin/bash /usr/bin/captor-soft.sh start
└─161242 ./captor_soft
Jul 16 18:07:55 FAS-NDPS-Manager2 systemd[1]: Starting captor_soft server...
Jul 16 18:07:55 FAS-NDPS-Manager2 systemd[1]: Started captor_soft server.
[root@FAS-BigData5 mnt]# echo $?
0
[root@FAS-BigData5 mnt]# echo $?
0
[root@FAS-BigData5 mnt]# ssh 192.168.80.173 "ls /mnt/BES/bin"
configserver
configserver.bat
encrypt
encrypt.bat
env.properties
gmkeytool
gmkeytool.bat
iastool
iastool.bat
start.sh
stop.sh
curl -s http://192.168.80.173:8084/easyviews/etl/api/component/specification/1
```