Umhlahlandlela ophelele wokusetha nokuphatha i-Ubuntu Server

Isibuyekezo sokugcina: December 26 we-2025
  • I-Ubuntu Server inikeza ipulatifomu ezinzile, ephephile, nekhululekile yokusingatha amawebhusayithi, izinhlelo zokusebenza, izizindalwazi, kanye nezinsizakalo zenethiwekhi ezindaweni ezibonakalayo, ezingokoqobo, noma zamafu.
  • Izinguqulo ze-LTS, i-firewall ye-UFW, ukuqinisekiswa kokhiye we-SSH, kanye nezibuyekezo ezivamile kusiza ukuqinisa ukuphepha nokuthembeka kweseva esikhathini eside.
  • Umphakathi omkhulu, imibhalo eminingi, kanye nokulula kokufaka isofthiwe efana ne-Docker, i-NGINX, i-Apache, noma i-VNC kwenza i-Ubuntu Server ibe yisisombululo esiguquguqukayo nesiguquguqukayo kakhulu.
  • Ngokuhlela kahle amadiski, ama-backup, kanye nokuhlolwa kwezokuphepha kusetshenziswa amathuluzi afana neLynis, kungenzeka ukugcina amaseva e-Ubuntu elungiselelwe, evikelwe, futhi elungele ukukhula.

Iseva Yobuntu

Ukusetha iseva nge-Ubuntu Server sekuyindlela ethandwayo kokubili kumaphrojekthi omuntu siqu kanye nasezindaweni zobungcweti. Izinzile, iphephile, imahhala, futhi iguquguquka kakhulu, okwenza ifaneleke kakhulu ekusingatheni amawebhusayithi, izinhlelo zokusebenza, izizindalwazi, noma ngisho nengqalasizinda yamafu yonke ngaphandle kokuchitha imali eningi kumalayisense.

Kulo mhlahlandlela, uzothola konke okudingayo ukuze uqonde, ufake, uvikele, futhi wenze ngcono i-Ubuntu Server ku-VPS, iseva ezinikele, noma indawo evirtualized. Sizoxoxa ngqo ngokuthi iyini i-Ubuntu Server, izinzuzo zayo ngaphezu kwezinye izabelo , izidingo zesistimu, ukufakwa kokuqala kanye nokucushwa, ukusetshenziswa kwe-SSH, ama-firewall, ama-backups, ukufakwa kwesofthiwe eyisihluthulelo (i-Apache, i-NGINX, i-Docker, i-VNC, njll.), kanye namanye amathiphu okwenza ngcono kanye nokuxazulula izinkinga azokusindisa ezinkingeni eziningi.

Iyini i-Ubuntu Server futhi kungani isetshenziswa kakhulu kumaseva?

I-Ubuntu Server uhlelo oluqondene neseva lwe-Ubuntu , olusekelwe ku-kernel ye-Linux futhi olugcinwa yi-Canonical. Ngokungafani ne-Ubuntu Desktop, ayifaki indawo enezithombe futhi cishe njalo iphathwa kusuka kumugqa womyalo noma kusetshenziswa amathuluzi okuphatha akude.

Lokhu kuntuleka kwesixhumi esibonakalayo esinemifanekiso kusho ukuthi sisebenzisa izinsiza ezimbalwa futhi sisebenza kahle kakhulu emisebenzini efana nokusingatha amawebhusayithi, ukuphatha izizindalwazi, ukuhlinzeka ngezinsizakalo zenethiwekhi ( i-DNS , i-DHCP, i-imeyili, amafayela, njll.) noma ukufaka izinhlelo zokusebenza ezitsheni nasefwini.

Igama elithi “Ubuntu” ngokwalo livela kufilosofi yase-Afrika esho into efana nokuthi “Nginguye ngoba singu- ,” evumelana kahle nomqondo wesofthiwe yomphakathi kanye neyomthombo ovulekile. Kusukela enguqulweni yayo yokuqala ngo-2004, i-Ubuntu iye yazuza indawo kancane kancane, yaba enye yezindawo ezisetshenziswa kakhulu ekusabalalisweni kwe-Linux, futhi uhlelo lwayo lweseva manje seluyindinganiso yangempela ezikhungweni eziningi zedatha, emafwini omphakathi, kanye namaphrojekthi ebhizinisi.

Enye yamandla e-Ubuntu Server imodeli yayo yokukhishwa enezinguqulo ze-LTS (Long Term Support) , ezinikeza ukwesekwa okunwetshiwe kanye nezibuyekezo zokuphepha iminyaka eminingana, okunikeza ukuthula kwengqondo kubaphathi bezinhlelo kanye nabathuthukisi abafuna ukuzinza.

Ukufakwa kwe-Ubuntu Server

Izinzuzo zokusebenzisa iseva ye-Ubuntu

Esinye sezizathu ezinkulu zokukhetha i-Ubuntu Server ukuthi iyisofthiwe yamahhala nevulekile : awukhokhi noma yiziphi izimali zelayisensi noma izindleko zokubhalisa ukuze uyisebenzise ku-VPS yakho, i-VDS, noma iseva ezinikele. Lokhu kunciphisa izindleko ze-IT, ikakhulukazi uma ukhulisa amaseva amaningi noma iqoqo eligcwele.

I-Ubuntu inikeza izibuyekezo ezivamile kanye nezinguqulo ze-LTS (ezifana ne-20.04, 22.04, noma i-24.04) ezinama-patches okuphepha iminyaka eminingi. Lokhu kukuvumela ukuthi ugcine iseva yakho ivikelekile ezifweni ezaziwayo ngaphandle kokushintsha njalo uhlelo lwakho lokusebenza.

Umphakathi we-Ubuntu mkhulu kakhulu, futhi lokho kuhunyushwa kube amaforamu asebenzayo, imibhalo esemthethweni, izifundo kanye neziqondiso cishe zanoma yini ofuna ukuyenza: kusukela ekusetheni iseva yewebhu elula kuya ekwakheni ingqalasizinda eyinkimbinkimbi eneziqukathi kanye nokutholakala okuphezulu.

Ezingeni lobuchwepheshe, i-Ubuntu Server isebenza kahle kakhulu ngezingxenyekazi eziningi zehadiwe kanye nesofthiwe , kusukela kuma-VPS amancane kuya kumaseva amakhulu azinikele, okuhlanganisa nezinsizakalo zamafu njenge-AWS, i-Azure, kanye ne-Google Cloud. Ngaphezu kwalokho, igxile kakhulu ezitsheni nasefwini, ngokusekelwa kwemvelo kwe-Docker, i-Kubernetes, namathuluzi afanayo.

Elinye iphuzu elibalulekile ukuguquguquka nokwenza ngokwezifiso : ungafaka amaphakheji nezinsizakalo ozidingayo kuphela (isibonelo, i-NGINX ne-Docker kuphela, noma i-LAMP stack yakudala ene-Apache, i-MySQL ne-PHP), ugwema izinsizakalo ezingadingekile ezisebenzisa izinsiza kuphela futhi zandisa indawo yokuhlasela.

Izidingo zehadiwe zokuhlelwa kwe-Ubuntu Server kanye nediski

I-Ubuntu Server 24.04 LTS kanye nezinguqulo ezifanayo zinezidingo zehadiwe ezincane , okwenza zifaneleke ukusetshenziswa kumishini ebonakalayo noma kumaseva angabizi kakhulu. Njengesiqondiso esijwayelekile, i-1 GHz x86-64 CPU, i-1 GB ye-RAM (2 GB ingcono ukuze kube nokuguquguquka okwengeziwe), kanye nesitoreji esingaba ngu-10 GB ngokuvamile kunconywa ukusetshenziswa okuvamile.

Ezindaweni ze-virtualization njenge-VMware, i-Proxmox noma i-Hyper-V, izidingo ziyafana kakhulu , yize empeleni kuzodingeka ulinganise i-CPU, i-RAM kanye nediski ngokuya ngomthwalo wangempela wezinhlelo zakho zokusebenza, izizindalwazi kanye neziqukathi.

Ngesikhathi sokufaka, i-wizard izokubuza ukuthi ufuna ukusebenzisa idiski eyodwa egcwele noma izingxenye eziningi . Ezimweni eziningi, inketho enconywayo ukuvumela i-Ubuntu ukuthi isebenzise yonke idiski bese idala izingxenye ezidingekayo. Ngisho noma ukhetha ivolumu eyodwa "enkulu", umfakisi uzodala izingxenye ezincane ngaphakathi zesistimu , i-bootloader, nezinye izingxenye ezibalulekile.

  I-Linux kumodi ebukhoma kanye ne-USB ebukhoma: izinzuzo, ukusetshenziswa kanye nemikhawulo

Kamuva, uma udinga ukulungisa isikhala, ungasebenzisa imiyalo yokuphatha idiski efana ne-df -h ukuhlola ukusetshenziswa kwe-partition, noma amathuluzi afana ne -size2fs (kanye nokuphathwa kwe-partition okuhambisanayo) ukuze wandise izinhlelo zamafayela kumadivayisi afana ne-/dev/sdXY.

Ukulanda nokufaka okuyisisekelo kwe-Ubuntu Server

Ukuze uqale, isinyathelo sokuqala ukulanda i-Ubuntu Server ISO esemthethweni kuwebhusayithi ye-Ubuntu (isigaba sokulanda iseva). Noma nini lapho kungenzeka, khetha inguqulo yakamuva ye-LTS ukuqinisekisa iminyaka eminingana yokusekelwa kanye nezibuyekezo zokuphepha.

Uma usunefayela le-ISO, ungalifaka kuseva ebonakalayo (nge-USB noma ikhonsoli ekude yomhlinzeki) noma epulatifomu yakho ye-virtualization (isibonelo, ngokulihlanganisa njengedrayivu ye-CD/DVD ku-VMware, KVM, njll.). Ukusuka lapho, uqala umshini bese ulandela umfakisi.

Ngesikhathi senqubo, uzocelwa ukuthi ukhethe ulimi lwakho, indawo yesikhathi, igama lomsebenzisi lokuqala, iphasiwedi, izilungiselelo zenethiwekhi, kanye, okubaluleke kakhulu, ukwakheka kwediski . Ungayishiya kumodi eqondisiwe ukuze umthakathi akwazi ukudala izingxenye ezidingekayo, noma ukwenze ngesandla uma unezidingo ezithile (i-LVM, i-RAID, njll.).

Uma ukufakwa sekuqediwe, uhlelo luzoqala kabusha futhi uzoba ne- Ubuntu Server elungele ukuqala ukumisa , evame ukufinyeleleka nge-SSH nge-akhawunti yomsebenzisi oyidalile noma, kwezinye izindawo zomhlinzeki, ngokufinyelela okuqondile njengempande.

Indawo Yeseva Yobuntu: Isistimu Yezinto Eziphilayo, Umphakathi, kanye Nemibhalo

Enye yamandla amakhulu e-Ubuntu Server ukuthi yakhelwe kusofthiwe evulekile evivinywe kabanzi , enezindawo zokugcina ezisemthethweni eziphelele kanye nezinkulungwane zamaphakheji alungele ukufakwa nge-'apt install' elula. Lokhu kukunika ithuba elikhulu lokwenza ngokwezifiso uhlelo ngokwenhloso yalo.

Izungezwe umphakathi okhuthele kakhulu wabathuthukisi nabasebenzisi abanikela ngama-patches, ukuthuthukiswa, kanye namadokhumenti. Uzothola amabhukwana okuphatha, iziqondiso zokufaka zesinyathelo ngesinyathelo, izifundo zevidiyo, kanye nezinkundla ezikhethekile zokuxazulula imibuzo nezinkinga ezithile.

Ngenxa yalokhu kuguquguquka, unganikela iseva yakho ye-Ubuntu emisebenzini eminingi: iseva yewebhu, iseva yedatha, iseva yamafayela , iseva ye-imeyili , ipulatifomu yesitsha, i-node yamafu e-hybrid, ilebhu yokuhlola, njll. Uhlelo olufanayo lwesisekelo luzivumelanisa nezimo ezihlukene kakhulu ngaphandle kokuxubana.

Ngaphezu kwalokho, abahlinzeki bokusingatha kanye namafu bavame ukunikeza izifanekiso noma izithombe ze-Ubuntu Server ezifakwe ngaphambilini , ukuze ukwazi ukufaka i-VPS ene-Ubuntu elungiselelwe kusengaphambili futhi ugxile ngqo kuzinhlelo zakho zokusebenza.

Ukuphepha kanye nezibuyekezo kuseva ye-Ubuntu

Njenganoma yikuphi ukusatshalaliswa kwe-Linux yesimanje, ukuphepha kuyinsika eyisisekelo ye-Ubuntu Server. I-Canonical ikhipha izibuyekezo ezivamile ukulungisa ubuthakathaka kanye namaphutha, futhi izinguqulo ze-LTS zithola ukwesekwa okwengeziwe, okwenza kube lula ukugcina izinhlelo ezibalulekile ngaphandle kwezinguquko eziqhubekayo.

Ukuze kuqiniswe ukuphepha okuyisisekelo, kunconywa kakhulu ukuthi ubuyekeze wonke amaphakheji ngokushesha ngemva kokuqala iseva , usebenzisa imiyalo efana ne-`apt update` elandelwa yi-`apt upgrade -y`. Lokhu kuqinisekisa ukuthi lonke uhlelo lusesikhathini ngaphambi kokulifaka ekukhiqizweni.

I-Uncomplicated Firewall (UFW) ihlanganisiwe futhi yenza kube lula kakhulu ukuphathwa kwemithetho. Ungabhala amaphrofayili atholakalayo ngo -`ufw app list` , uvumele ithrafikhi ye-SSH ngo-`ufw vumela i-OpenSSH`, bese usebenzisa i-firewall ngo-`ufw enable`, uhlole isimo sayo ngo-`ufw status`.

Ngaphezu kwe-firewall, kungumqondo omuhle ukukhubaza izinsizakalo ezingasetshenziswanga , uqinise izilungiselelo zakho ze-SSH (isibonelo, ngokuvimbela ukufinyelela okuqondile kwezimpande noma ukuqinisekiswa kwephasiwedi), bese usebenzisa ukuqinisekiswa okusekelwe kukhiye womphakathi noma nini lapho kungenzeka.

Isipele kanye nezinsizakalo zifakiwe kumaseva ochwepheshe

Abahlinzeki abaningi beseva abazinikele bafaka isikhala esengeziwe sokugcina idatha (isb., 500 GB) esihlukile ngokomzimba emshinini oyinhloko. Umqondo uwukuthi ungagcina amafayela akho abaluleke kakhulu lapho: idatha yedathabheyisi, ukucushwa, okuqukethwe kwewebhu, amafayela e-imeyili, njll.

Ama-backup avamile akuvumela ukuthi ubuyisele ngokushesha isevisi uma kwenzeka ukwehluleka kwehadiwe, iphutha lomuntu, noma ukuhlaselwa, futhi, uma usebenzisa isitoreji samafu, uwabethele nge -Cryptomator . Nge-Ubuntu Server, ungenza ngokuzenzakalelayo lawa ma-backup usebenzisa amathuluzi afana ne-rsync, i-borg, i-duplicity, izikripthi ezenziwe ngokwezifiso, noma ukuhlanganiswa okuqondene nomthengisi.

Ngaphezu kwesikhala sokusekelayo, izinhlelo eziningi zeseva zinikeza amakheli e-IPv4 kanye ne-IPv6, ukuvikelwa kwe-DDoS, i-bandwidth eqinisekisiwe, kanye nezivumelwano zezinga lesevisi (ama-SLA) eziqinisekisa ukutholakala okuphezulu kwehadiwe. Konke lokhu kwenza i-Ubuntu Server ibe yingxenye ebalulekile yengqalasizinda enakekelwa kahle.

  Izici ze-Supercomputers kanye nokusebenza

Njengoba i-Ubuntu Server iyiphrojekthi yamahhala, evulekile, ozokhokha ngempela amandla okucubungula eseva ebonakalayo noma ebonakalayo : i-CPU, i-RAM, amadiski, i-bandwidth yenethiwekhi, njll. Ukufakwa kuvame ukwenziwa ngokuzenzakalela kusuka kuphaneli yokulawula yomhlinzeki, ngaphandle kwemali eyengeziwe yelayisensi yesistimu yokusebenza.

Izinyathelo zokuqala ngemuva kokufaka i-Ubuntu Server: abasebenzisi, i-SSH kanye ne-sudo

Uma udala iseva entsha ye-Ubuntu (isibonelo, i-Ubuntu 20.04 noma i-22.04), kubalulekile ukwenza ukucushwa okuyisisekelo kokuqala ukuze uthuthukise ukuphepha kanye nokulula kokusebenzisa. Ngokuvamile uzoxhuma nge-SSH usebenzisa ikheli le-IP lomphakathi leseva kanye ne-akhawunti yempande noma i-akhawunti yomsebenzisi yokuqala.

I-akhawunti eyinhloko inamalungelo ohlelo oluphelele , okusho ukuthi ukungazinaki kahle kungabangela izinkinga ezinkulu. Ngakho-ke, kuyinto evamile ukudala i-akhawunti yomsebenzisi ejwayelekile yemisebenzi yansuku zonke bese usebenzisa i-`sudo` kuphela uma udinga amalungelo omlawuli.

Ungangeza umsebenzisi omusha onomyalo ofana ne -adduser username , usethe iphasiwedi evikelekile, futhi, uma ufuna ukuyinika amandla okuphatha, yifake eqenjini le-sudo eline-usermod -aG sudo username.

Ukusuka lapho, ungenza imiyalo yokuphatha ngokwandulela umyalo nge-`sudo` , okukuvumela ukuthi uqhubeke nokusebenza nge-akhawunti yomsebenzisi evamile kodwa unekhono lokuphakamisa amalungelo njengoba kudingeka. Uhlelo luzokucela njalo iphasiwedi yomsebenzisi ukuqinisekisa ubuwena bakho.

Ukucushwa kokufinyelela kwe-SSH kanye nezinkinobho zomphakathi

Isevisi ye-SSH (i-OpenSSH Server) ikuvumela ukuthi uphathe i-Ubuntu Server ukude ngenethiwekhi. Iza ifakwe kusengaphambili kumaseva amaningi; uma kungenjalo, ungayingeza nge-`apt install openssh-server` bese uyivumela nge-`systemctl start ssh` kanye ne-`systemctl enable ssh`.

Uma uqala ukungena usebenzisa iphasiwedi, ungafinyelela iseva ngomyalo ofana no -`ssh user@server_ip` . Kodwa-ke, kubhekwa njengokuphephile kakhulu ukumisa ukuqinisekiswa okusekelwe kukhiye we-SSH, lapho umshini wakho wendawo ugcina ukhiye oyimfihlo kanti iseva igcina ukhiye womphakathi kuphela.

Ukuze ulungiselele le ndlela yokusebenza, ungasebenzisa amathuluzi afana ne -ssh-copy-id , akopisha ukhiye wakho womphakathi kufayela lomsebenzisi le-~/.ssh/authorized_keys kuseva. Uma ukhiye usuvele ulungiselelwe i-akhawunti yempande, ungakopisha nesakhiwo se-~/.ssh kumsebenzisi wakho omusha usebenzisa i-rsync enezimvume ezifanele kanye nobunikazi.

Kufayela elithi `/etc/ssh/sshd_config`, kunconywa ukuthi ukhubaze isinqamuleli sempande (`PermitRootLogin no`) futhi, uma usuvele unesiqiniseko sokhiye esisebenzayo, khubaza ukuqinisekiswa kwephasiwedi (`PasswordAuthentication no`). Ngemva kokushintsha lezi zilungiselelo, qala kabusha isevisi nge-`systemctl restart ssh`.

I-Firewall ene-UFW kanye nokulawulwa kwethrafikhi

I-Ubuntu Server ifaka i-UFW njengesendlalelo sokuphatha i-firewall esilula . Ifilosofi yayo iwukuthi, ngokuzenzakalelayo, yonke ithrafikhi engenayo ivinjiwe ngaphandle kwalokho okuvumelayo ngokusobala. Lokhu kunciphisa ingozi yokuthi isevisi engalungiselelwe kahle ivezwe ngengozi.

Ngaphambi kokusebenzisa i-UFW, kuyalulekwa ukuvumela ithrafikhi ye-SSH ene -`ufw ivumela i-OpenSSH` ukuthi igweme ukulahlekelwa ukufinyelela okukude. Ngemuva kwalokho, ungavumela i-firewall nge-`ufw enable` bese uqinisekisa ukuthi iyasebenza futhi ivumela ukuxhumana okudingekayo usebenzisa i-`ufw status`.

Njengoba ufaka amasevisi amasha (isibonelo, i-HTTP yeseva yewebhu, noma ama-port athile edathabheyisi), kuzodingeka uvule ama-port ahambisanayo ku-UFW usebenzisa imithetho eyengeziwe. Lokhu kufaneleka kahle kumaseva lapho ufuna kuphela ukuveza amasevisi ambalwa kwi-inthanethi.

Ukufakwa kwesofthiwe okuyinhloko: i-SSH, i-Docker, i-NGINX, ne-Apache

"I-arsenal" yeseva ejwayelekile ye-Ubuntu ivame ukufaka iseva ye-SSH, iseva yewebhu, ukwesekwa kwedathabheyisi , kanye namathuluzi amaningi okufaka. Ukufakwa kwenziwa ngokuyinhloko nge-apt, kusetshenziswa ama-repository asemthethweni e-Ubuntu.

Ukuqinisekisa ukufinyelela okukude, iphakheji ebalulekile yi -opensh-server . Uma isifakiwe futhi ivuliwe, ungaphatha iseva ngaphandle kokufinyelela ngqo ikhonsoli ebonakalayo noma ikhonsoli yewebhu yomhlinzeki.

Uma usebenza ngeziqukathi, indlela evamile ukufaka i-Docker nge-`apt install docker.io` (noma ngokulandela indawo yokugcina i-Docker esemthethweni yezinguqulo zakamuva). Ngemuva kwalokho ungaqala futhi unike amandla isevisi nge-`systemctl start docker` kanye ne-`systemctl enable docker`, bese wengeza umsebenzisi wakho eqenjini le-`docker` nge-`usermod -aG docker $USER` ukuphatha iziqukathi ngaphandle kokusebenzisa izimpande.

Ngokusebenzisa amakhasi ewebhu angaguquki noma izinhlelo zokusebenza ezilula, abaphathi abaningi bakhetha i-NGINX ngenxa yokusebenza kwayo kanye nobulula bayo. Ifakwe nge-`apt install nginx` futhi inikwe amandla ngendlela efanayo nezinye izinsizakalo ezine-`systemctl start` kanye ne-`systemctl enable`.

Uma ukhetha isitaki se-LAMP sakudala, ungasetha i-Apache njengeseva yakho yewebhu , kanye ne-MySQL noma i-PostgreSQL kanye nezilimi ezifana ne-PHP noma i-Python. Ukuhamba komsebenzi okuvamile kufaka phakathi ukufaka i-Apache, ukuhlola isimo sayo nge-`systemctl status apache2`, ukuvula imbobo ye-HTTP ku-firewall nge-`ufw vumela i-'Apache'`, ukumisa amafayela esayithi ku-`/etc/apache2/sites-available` nokuwavumela nge-`a2ensite`, bese uqala kabusha isevisi.

  Indlela yokuhlola ukusatshalaliswa kwe-Linux ku-inthanethi nge-DistroSea

Ukusetha iseva ye-VNC kanye nendawo enezithombe ezilula

Nakuba i-Ubuntu Server iqaliswa ngaphandle kwesixhumi esibonakalayo sezithombe, kwezinye izimo kungaba usizo ukufaka indawo yezithombe elula bese uyifinyelela nge-VNC , isibonelo, kubasebenzisi abakhululekile ngedeskithophu noma ukuphatha amathuluzi athile okubuka.

Inketho evamile ukusebenzisa i-XFCE njengendawo yedeskithophu elula, ukuyifaka ngomyalo owengeza kokubili indawo kanye nezingxenye zayo ezengeziwe (i-xfce4 kanye ne-xfce4-goodies). Lokhu kunikeza ideskithophu esebenzayo ngaphandle kokukhulisa kakhulu ukusetshenziswa kwezinsiza.

Ngemuva kwalokho ungafaka iseva ye-VNC efana ne-TightVNC , uyilungiselele ngephasiwedi yokufinyelela usebenzisa i-vncserver, bese udala iskripthi sokuqalisa ku-~/.vnc/xstartup esilayisha indawo yakho ye-XFCE lapho iseshini ye-VNC ivula.

Uma usuphawule iskripthi njengesisebenzisekayo futhi usuqalise i-vncserver ngesisombululo esifiselekayo (isibonelo, :1 -geometry 1280×800 -depth 24), uzokwazi ukuxhuma kusuka kuklayenti le-VNC emshinini wakho wendawo usebenzisa ikheli le-IP leseva kanye ne-port ehambisanayo, ngaleyo ndlela uphathe ideskithophu ekude ye-Ubuntu Server.

Ukwenza ngcono, ukuskena ubungozi, kanye nokusebenza

Ngaphandle nje kokwenza uhlelo "lusebenze," kubalulekile ukuzinika isikhathi sokwenza ngcono nokuhlola ukuphepha kwe-Ubuntu Server , ikakhulukazi ezindaweni ezivezwe ku-inthanethi noma eziqukethe idatha ebucayi. Elinye lamathuluzi asetshenziswa kakhulu ekuhlaziyeni ukuphepha ku-Linux yi-Lynis.

Ngemva kokufaka i-Lynis kusuka ezindaweni zokugcina ezifanele, ungayiqhuba ukuze uhlaziye ukucushwa kwesistimu futhi ukhiqize umbiko onezinkinga ezingaba khona, ubuthakathaka, noma izindawo zokuthuthukisa (izimvume, izinsizakalo ezisebenzayo, ukucushwa kwenethiwekhi, njll.).

Ngokuphathelene nokusebenza, kunezindlela eziningana ezisiza kakhulu: ukukhubaza izinsizakalo ezingasetshenziswanga , ukulungisa amapharamitha athile e-kernel (isibonelo, nge-/etc/sysctl.conf), ukulungiselela kahle ukusetshenziswa kwe-swap, kanye nokubuyekeza amapharamitha enethiwekhi njengemigqa, ama-buffer, noma imikhawulo yokuxhumeka ngokusekelwe kumthwalo olindelekile.

Lezi zinhlobo zokulungisa, kanye nesu elihle lokuqapha (amathuluzi anjenge-top, htop, iotop, journalctl noma izixazululo ezithuthukisiwe kakhulu), kuvumela iseva ye-Ubuntu ukuthi ihlale izinzile, iphephile futhi isebenza ngendlela ehlangabezana nezidingo zezinhlelo zakho zokusebenza.

Imiyalo ewusizo nokuxazulula izinkinga ezivamile

Emisebenzini yansuku zonke, kuvamile kakhulu ukuxilonga izinkinga zesikhala, izinsizakalo ezingaqali, noma ukwehluleka kwenethiwekhi . I-Ubuntu Server inesethi enhle yemiyalo esiza ngale misebenzi ngaphandle kwesidingo sokufaka noma yini engavamile.

Ukuze uhlole isikhala sediski esitholakalayo, uzovame ukusebenzisa i-`df -h` , kanti ukuze uthole ukuthi yiziphi iziqondisi ezithatha isikhala esiningi endleleni ethile, ungasebenzisa i-`du -sh * | sort -h`. Lokhu kukusiza ukuthi uthole ngokushesha izingodo eziqalisiwe noma amafolda amakhulu okufanele uwahlanze noma uwahambise.

Uma isevisi yehluleka ukuqala noma iziphatha ngendlela exakile, ngaphezu kwe-`systemctl status service_name`, kuvame ukuba wusizo kakhulu ukusebenzisa i -`journalctl -u service_name` ukuze ubuke imiyalezo yelogi ehlobene nokuqonda ukuthi yini ehlulekayo.

Kumanethiwekhi, imiyalo ye -ping kanye ne-traceroute (noma i-tracepath kwezinye izinhlelo zokusebenza) isetshenziselwa ukuhlola ukuxhumana kanye nemizila eya kwamanye ama-host, njenge-google.com noma amaseva angaphakathi. Futhi uma usola ukuthi i-firewall ivimba ithrafikhi esemthethweni, ungabuyekeza njalo imithetho yamanje ngesimo se-ufw.

Ngemva kokubuyekezwa kwe-kernel noma izinguquko kumphathi wokuqalisa, kungadingeka ukuthi uphinde uvuselele ukucushwa kwe-GRUB usebenzisa i-`update-grub` , ikakhulukazi uma ungeze noma ushintshe amadiski kanye nama-partition. Lokhu kuqinisekisa ukuthi uhlelo luyaqhubeka nokuqalisa kahle kusuka kunguqulo ye-kernel elindelekile.

Kusobala ukuthi i-Ubuntu Server iyipulatifomu ephelele kakhulu, eqinile, futhi eguquguqukayo yokusetha konke kusukela kumasevisi amancane emakhaya kuya kwingqalasizinda yebhizinisi eyinkimbinkimbi; inhlanganisela yayo yokuzinza, ukuphepha, umphakathi, ukusebenziseka kalula, kanye nezindleko zelayisensi ezingenazo kwenza kube ukukhetha okuqinile kunoma ubani ofuna ukusetha iseva yesimanje ye-Linux ngaphandle kokwenza izinto zibe nzima kakhulu.

Ubuntu
I-athikili ehlobene:
Ubuntu: Izidingo kanye nezici