Born运维Checklist

线上服务器后端G1组机器下线，同时上线G22服务器 16/06/25 16:30已完成

1.编辑两台反向代理服务器的/etc/nginx/nginx.conf文件，注释掉upstream模块的G1组5台服务器 http {

   upstream www.52jiaoshi.com {
       #G1

#server 123.56.154.254:8089;

       #server 123.57.57.241:8089;
       #server 123.56.77.165:8089;
       #server 123.56.238.65:8089;
       #server 123.56.47.69:8089;
       #server 123.57.143.153:8089;

#G2

       #server 123.57.180.46:8089;
       server 123.57.26.145:8089;
       server 123.57.27.27:8089;
       server 123.56.253.188:8089;
       server 101.200.135.96:8089;
       server 123.56.75.106:8089;
       ip_hash;
   }

2.分别重启两台反向代理服务器的nginx服务 nginx -s reload

52jiaoshi线上代码发布脚本增加回滚机制 16/06/25 15:00已完成

1.在发布脚本中添加，将每次发布的最新commit版本号写入发布日志 git branch master git checkout master git pull origin master git log --pretty=format:'[%h] at [%cd] by [%ce] : [%s]' -n 1|xargs echo -e "`date`\n" >> /alidata/pub/jiaoshi/publish_master/publish.log

Fri Jun 24 16:15:04 CST 2016 [73764e9] at [Mon Jun 20 14:46:45 2016 +0800] by [qiaochenglei@52jiaoshi.com] : [ShellCommit 160620-144643]

2.在回滚脚本中新建rollback分支，并选择想要重新发布的版本号（此版本号为7位简短版，git可以自动搜索） git checkout -b rollback 73764e9

3.成功发布并测试正常后，删除rollback分支 git branch -d rollback

4.查看已经发布过的代码版本历史 ido pub log

52jiaoshi.com增加https接口 16/06/23 22:00已完成

1.上传api.52jiaohsi.com的证书和私钥到两台nginx反向代理服务器的/etc/nginx/ssl目录下 api.52jiaoshi.com_bundle.crt api.52jiaoshi.com.key 2.修改nginx配置文件，增加虚拟主机并添加ssl模块配置信息 vim /etc/nginx/nginx.conf

http模块增加（nginx主可以不用添加）： upstream alpha.52jiaoshi.com {

       ip_hash;
       server 10.172.220.56:8089;      #G22_alpha
       server 10.172.225.201:8089;     #zabbix_alpha
   }

   底部追加：

server {

       listen  443;
       server_name     api.52jiaoshi.com;
       ssl on;
       ssl_certificate /etc/nginx/ssl/wosign/api.52jiaoshi.com_bundle.crt;
       ssl_certificate_key /etc/nginx/ssl/wosign/api.52jiaoshi.com.key;

       location / {
               root    html;
               index   index.html index.htm;

       #access_log  logs/test.access.log  main;

       #proxy_set_header Host $host;
       #proxy_set_header X-Real-IP $remote_addr;
       #proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
       proxy_pass http://www.52jiaoshi.com;
       }
   }

   server {
       listen 80;
       server_name api.52jiaoshi.com;
       rewrite ^(.*) https://$server_name$1 permanent;
   }

   server {
       listen  80;
       server_name     www.52jiaoshi.com;

location / {

               root    html;
               index   index.html index.htm;

       #access_log  logs/test.access.log  main;

       proxy_set_header Host $host;
       proxy_set_header X-Real-IP $remote_addr;
       proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
       proxy_connect_timeout   600;
       proxy_send_timeout      600;
       proxy_read_timeout      600;
       proxy_pass http://www.52jiaoshi.com;
       }

       error_page  404         /404.html;
       location = /404.html {
               root   /usr/share/nginx/html;
       }

       #redirect server error pages to the static page /50x.html

       error_page  500 502 503 504  /50x.html;
       location = /50x.html {
               root   /usr/share/nginx/html;
       }
   }

   server {
       listen  80;
       server_name      52jiaoshi.com;
       return 301 $scheme://www.52jiaoshi.com$request_uri;
   }

   server {                                           #nginx主可以不用添加
       listen  443;
       server_name     alpha.52jiaoshi.com;
       ssl on;
       ssl_certificate /etc/nginx/ssl/wosign/alpha.52jiaoshi.com_bundle.crt;
       ssl_certificate_key /etc/nginx/ssl/wosign/alpha.52jiaoshi.com.key;

       location / {
               root    html;
               index   index.html index.htm;

       #access_log  logs/test.access.log  main;

       #proxy_set_header Host $host;
       #proxy_set_header X-Real-IP $remote_addr;
       #proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
       proxy_pass http://alpha.52jiaoshi.com;
       }
   }

3.重新载入nginx配置 nginx -s reload

52gongji添加硬盘 16/06/07 0:30已完成

1.关闭httpd服务 /alidata/server/httpd/bin/httpd -k stop 2.关闭php推送服务 killall php 3.关闭redis服务 redis-cli -a Born shutdown 4./alidata目录改名为/alidata-backup mv /alidata /alidata-backup 5.建立新的/alidata目录作为新磁盘挂载点 mkdir /alidata 6.挂载新磁盘到/alidata目录下 mount /dev/xvdb /alidata 7.将原目录数据拷贝到新的目录里 cp -a /alidata-backup/* /alidata/ 8.启动httpd服务 /alidata/server/httpd/bin/httpd -k start 9.启动php推送脚本 cd /alidata/server/httpd/htdocs/gongji/pushServer/ApnsPHP-master/ nohup php apnsServer.php & cd /alidata/server/httpd/htdocs/gongji/pushServer/umeng/ nohup php umengServer.php & 10.启动redis服务 redis-server /etc/redis.conf

REDIS加从 16/06/02 0:30 已完成 步骤参见WORD

1、停止线上redis主服务器的持久化功能 redis>config set save "" redis>config set appendonly 1. 停止线上redis主服务器的持久化功能 redis>config set save “” #关闭快照持久化 redis>config set appendonly no #关闭AOF持久化 2. 手动执行快照备份，备份线上redis数据 redis>bgsave cp dump.rdb /bak/dump.rdb.bak #快照文件同样复制一份，以防原文件有问题 3. 在redis从的配置文件中加入下面一行，启动redis从服务器，自动执行主从同步 slaveof 10.170.237.175 6379 4. 如果主库发生错误，重启redis服务即可（自动进行数据恢复） redis-cli redis>auth Born redis>shutdown redis-server /etc/redis.conf 5. 同步成功后，redis从开启持久化功能，redis主关闭持久化功能，减少主I/O压力 从（开启AOF持久化）： redis-cli -a Born config set appendonly yes 主（用计划任务完成快照持久化备份，每小时备份一次）： crontab –e 0 * * * * /usr/bin/redis-cli -a Born bgsave