### docker部署mrdoc开源文档系统



#### 1. 安装docker
```SHELL
bash <(curl -sSL https://linuxmirrors.cn/docker.sh)
```
#### 2. 拉取代码
首先进入/opt目录
```SHELL
cd /opt
```
然后使用git拉取代码
```SHELL
git clone https://gitee.com/zmister/MrDoc.git
```

#### 3. 拉取docker镜像
```SHELL
docker pull zmister/mrdoc:v9.3
```

国内使用阿里源
```SHELL
docker pull registry.cn-hangzhou.aliyuncs.com/zmister/mrdoc:v9.3
```

#### 4. 启动镜像
```SHELL
docker run -d --name mrdoc --restart always -p 10086:10086 -v /opt/MrDoc:/app/MrDoc zmister/mrdoc:v9.3
```
阿里源的镜像用下面的命令
```SHELL
docker run -d --name mrdoc --restart always -p 10086:10086 -v /opt/MrDoc:/app/MrDoc registry.cn-hangzhou.aliyuncs.com/zmister/mrdoc:v9.3
```

#### 5. 设置管理员账号与密码
```SHELL
docker exec -it mrdoc python manage.py createsuperuser
```

修改用户密码的命令
```SHELL
docker exec -it mrdoc python manage.py changepassword 用户名
```

#### 6.设置nginx的反向代理
如果没有安装nginx，自行安装一下

修改默认的nginx网站配置
```SHELL
mv /etc/nginx/sites-enabled/default /etc/nginx/sites-enabled/default.bak && nano /etc/nginx/sites-enabled/default
```
在新文件里添加以下配置
```SHELL
server {
    listen 你的端口;
    server_name 你的域名或IP;

    location / {
        proxy_pass http://127.0.0.1:10086;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header REMOTE-HOST $remote_addr;
        proxy_set_header X-Forwarded-Proto  $scheme;
        #Set Nginx Cache
        add_header Cache-Control no-cache;
        add_header X-Cache $upstream_cache_status;
        proxy_ignore_headers Set-Cookie Cache-Control expires;
        proxy_read_timeout 300;
        # 流式视频处理
        proxy_set_header Range $http_range;
        proxy_set_header If-Range $http_if_range;
        add_header X-Accel-Buffering no;

    }
}
```

#### 7. 更新mrdoc
切换到安装目录
```SHELL
cd /opt/MrDoc
```
拉取代码
```SHELL
git fetch --all && git reset --hard origin/master && git pull
```
重启docker容器
```SHELL
docker restart mrdoc
```

docker部署mrdoc文档系统

net-box是一个集成资产管理、IP记录、机柜管理与一体的可视化web系统



### net-box的部署安装


#### 1.安装git


![image.png](/static/img/90ac7f5310634f9e35b3fafbf70d6a4e.image.webp)
#### 2.安装docker
```SHELL
bash <(curl -sSL https://linuxmirrors.cn/docker.sh)
```


#### 3.下载配置文件
```SHELL
cd /opt
git clone https://github.com/Songxwn/netbox-docker-cn.git
# https://gitee.com/songxwn/netbox-docker-cn.git
# 国内网络不稳定的，可克隆码云的。
cd /opt/netbox-docker-cn
```

![image.png](/static/img/a3a9c47d9d3779e6ba9e07cb64cd1933.image.webp)

#### 4.创建端口映射文件
```SHELL
tee docker-compose.override.yml <<EOF
services:
  netbox:
    ports:
      - 8000:8080
EOF
```

![image.png](/static/img/f8e739bff76b71b819228e1bfc43d99a.image.webp)

#### 5.拉取并启动镜像
```SHELL
docker compose pull
# 下载镜像
docker compose up -d
# 运行NetBox，第一次初始化数据库较慢，可能超时。如果失败等五分钟再重新执行一次即可。
```

![image.png](/static/img/59ddbe3c673b25c800a853658ff26078.image.webp)

![image.png](/static/img/4059ff772a65e662f2c1686d6f54ac8e.image.webp)
访问ip:8000端口验证

![image.png](/static/img/bd424a03e3bb2a321385b95b92f97061.image.webp)
#### 6.设置管理员账户
```SHELL
docker compose exec netbox /opt/netbox/netbox/manage.py createsuperuser
```
等web页面可以打开后再执行设置管理员的操作，避免未加载完成

![image.png](/static/img/b3c401cf5fc645321c111d2cf7b89c86.image.webp)

net-box搭建

rocky9.3升级openssh10



```SHELL
#!/bin/bash
set -e

OPENSSH_VERSION="10.0p1"
OPENSSH_TAR="openssh-${OPENSSH_VERSION}.tar.gz"
OPENSSH_URL="https://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/${OPENSSH_TAR}"
SRC_DIR="/usr/local/src"
BACKUP_DIR="/usr/local/openssh_backup"


setenforce 0 && sed -i 's/^SELINUX=.*/SELINUX=disabled/' /etc/selinux/config

echo "[1/9] 检测系统并安装依赖..."
if [ -f /etc/os-release ]; then
    . /etc/os-release
else
    echo "无法识别系统类型，退出"
    exit 1
fi

case "$ID" in
    ubuntu|debian)
        apt update
        apt install -y build-essential zlib1g-dev libssl-dev libpam0g-dev wget
        ;;
    centos|rocky|rhel)
        yum groupinstall -y "Development Tools"
        yum install -y gcc make zlib-devel openssl-devel pam-devel wget
        ;;
    *)
        echo "暂不支持该系统: $ID"
        exit 1
        ;;
esac

echo "[2/9] 下载并解压源码..."
mkdir -p "$SRC_DIR"
cd "$SRC_DIR"
rm -rf "openssh-${OPENSSH_VERSION}"
wget -c "$OPENSSH_URL"
tar -xf "$OPENSSH_TAR"
cd "openssh-${OPENSSH_VERSION}"

echo "[3/9] 备份旧版本ssh相关文件..."
mkdir -p "$BACKUP_DIR"
cp /usr/sbin/sshd "$BACKUP_DIR/sshd.bak.$(date +%s)" 2>/dev/null || true
cp /usr/bin/ssh "$BACKUP_DIR/ssh.bak.$(date +%s)" 2>/dev/null || true
cp -r /etc/ssh "$BACKUP_DIR/etc_ssh.bak.$(date +%s)" 2>/dev/null || true

echo "[3.5/9] 设置 OpenSSL 编译环境..."
export CPPFLAGS="-I/usr/include"
export LDFLAGS="-L/usr/lib64"


echo "[4/9] 编译安装OpenSSH..."
./configure --prefix=/usr --sysconfdir=/etc/ssh --with-pam --with-privsep-path=/var/lib/sshd
make -j"$(nproc)"
make install

echo "[5/9] 修复主机密钥权限..."
chmod 600 /etc/ssh/ssh_host_*_key 2>/dev/null || true

echo "[6/9] 清理不兼容配置..."
for file in /etc/ssh/sshd_config.d/*.conf; do
    [ -f "$file" ] || continue
    sed -i '/GSSAPIAuthentication/d;/GSSAPICleanupCredentials/d;/GSSAPIKexAlgorithms/d' "$file"
done

if [ -d /etc/sysconfig ]; then
    echo 'CRYPTO_POLICY=""' | tee /etc/sysconfig/sshd
fi

echo "[6.1] 设置加密策略为 LEGACY，防止不兼容配置..."
update-crypto-policies --set LEGACY

echo "[6.2] 移除 sshd_config 中对 crypto-policies 的引用（如果有）..."
sed -i '/crypto-policies.*opensshserver.config/s/^/#/' /etc/ssh/sshd_config
# 移除 /etc/crypto-policies/back-ends/opensshserver.config 中不兼容配置（如升级失败又被引用）
if [ -f /etc/crypto-policies/back-ends/opensshserver.config ]; then
    sed -i '/GSSAPIKexAlgorithms/d' /etc/crypto-policies/back-ends/opensshserver.config
fi
#修正sftp位置
sed -i 's|^Subsystem\s\+sftp\s\+/usr/libexec/openssh/sftp-server|Subsystem sftp /usr/libexec/sftp-server|' /etc/ssh/sshd_config

echo "[7/9] 检查配置文件语法..."
if ! /usr/sbin/sshd -t -f /etc/ssh/sshd_config; then
    echo "sshd 配置语法错误，请检查 /etc/ssh/sshd_config"
    exit 1
fi

echo "[8/9] 重启ssh服务..."
if systemctl list-units --type=service | grep -q sshd.service; then
    systemctl restart sshd
elif systemctl list-units --type=service | grep -q ssh.service; then
    systemctl restart ssh
else
    echo "未检测到 ssh 服务，请手动启动"
fi

echo "[9/9] 校验systemd运行的sshd版本..."
SSHD_BIN="/usr/sbin/sshd"
RUNNING_SSHD=$(readlink -f /proc/$(pgrep -x sshd | head -n 1)/exe)
BIN_HASH=$(sha256sum "$SSHD_BIN" | awk '{print $1}')
RUN_HASH=$(sha256sum "$RUNNING_SSHD" | awk '{print $1}')
VERSION=$($SSHD_BIN -V 2>&1 | head -n 1)

echo "当前sshd版本: $VERSION"
echo "systemd运行的sshd路径: $RUNNING_SSHD"
if [ "$BIN_HASH" = "$RUN_HASH" ]; then
    echo "sshd已成功替换为新版并正在运行"
else
    echo "警告：systemd仍在运行旧版sshd，可能需要重启或手动修改服务"
fi

echo "脚本执行完成。"
```

rocky9.3升级openssh10脚本备份

stress压测脚本备份

```SHELL
#!/bin/bash

# 检查依赖
for pkg in screen stress; do
    if ! command -v $pkg &>/dev/null; then
        echo "[ERROR] 未找到命令 '$pkg'，请先安装：sudo apt update && sudo apt install -y $pkg"
        exit 1
    fi
done

echo "===== 系统信息检测 ====="

# CPU 型号
CPU_MODEL=$(lscpu | grep "Model name" | awk -F: '{print $2}' | sed 's/^[ \t]*//')
echo "CPU 型号：$CPU_MODEL"

# CPU 线程数
CPU_THREADS=$(lscpu | awk '/^CPU$s$:/ {print $2}')
echo "CPU 线程数：$CPU_THREADS"

# CPU 物理核心数
CPU_CORES=$(lscpu | awk -F: '/^Core$s$ per socket:/ {cores=$2} /^Socket$s$:/ {sockets=$2} END {print cores * sockets}' | sed 's/^[ \t]*//')
echo "CPU 物理核心数：$CPU_CORES"

# 检查是否启用虚拟化
VIRT=$(lscpu | awk -F: '/Virtualization:/ {print $2}' | sed 's/^[ \t]*//')
if [[ "$VIRT" == "VT-x" || "$VIRT" == "AMD-V" ]]; then
    echo "虚拟化支持：已启用（$VIRT）"
else
    echo "虚拟化支持：未启用或不支持"
fi

# 获取总内存（MB），然后换算为 GB
TOTAL_MEM_MB=$(free -m | awk '/^Mem:/ {print $2}')
TOTAL_MEM_GB=$(awk "BEGIN {printf \"%.0f\", ${TOTAL_MEM_MB} / 1024}")
echo "总内存：${TOTAL_MEM_GB} GB"

# 计算压测资源
USE_CPU=$(awk "BEGIN {printf \"%d\", (${CPU_THREADS} * 0.75 + 0.999)}")  # 向上取整
USE_MEM_GB=$(awk "BEGIN {printf \"%.0f\", ${TOTAL_MEM_GB} * 0.75}")

echo
echo "===== 压测配置 ====="
echo "使用 CPU 核心数：$USE_CPU"
echo "使用 内存大小：${USE_MEM_GB} GB"
echo "压测将在名为 'stress' 的 screen 会话中后台运行"
echo "要停止压测，请运行：screen -r stress 然后 Ctrl+C 终止"
echo

# 启动 screen 压测（不限制时间）
screen -dmS stress stress --cpu "$USE_CPU" --vm 1 --vm-bytes "${USE_MEM_GB}G" --vm-keep

echo "压测已启动。你可以稍后通过以下命令进入查看："
echo "   screen -r stress"
```

stress压测脚本备份

建立hosts文本后一条命令批量生成多个yml文件


在targets文件夹下，对应目录，新建一个hosts.txt文件

在hosts.txt文件夹填入IP 主机名
```SHELL
10.202.3.1 ecs-jn-c1
10.202.3.2 ecs-jn-c2
10.202.3.8 ecs-h3c-3
```


然后输入以下脚本
```SHELL
while read ip name; do
  cat > "${name}.yml" <<EOF
- targets:
    - ${ip}:9100
  labels:
    instance: ${name}
EOF
done < hosts.txt
```
即可批量创建基于主机名为命名的yml文件