# 1. 配置主机名
# hostnamectl set-hostname fgedudb01.fgedu.net.cn

# 2. 配置网络
# nmcli connection modify eth0 ipv4.addresses 192.168.1.51/24
# nmcli connection modify eth0 ipv4.gateway 192.168.1.1
# nmcli connection modify eth0 ipv4.dns “192.168.1.1,8.8.8.8”
# nmcli connection modify eth0 ipv4.method manual
# nmcli connection up eth0

# 3. 配置内核参数
# cat > /etc/sysctl.d/99-oracle.conf << EOF fs.file-max = 6815744 fs.aio-max-nr = 1048576 kernel.shmmax = 34359738368 kernel.shmall = 8388608 kernel.shmmni = 4096 kernel.sem = 250 32000 100 128 net.ipv4.ip_local_port_range = 9000 65500 net.core.rmem_default = 262144 net.core.rmem_max = 4194304 net.core.wmem_default = 262144 net.core.wmem_max = 1048576 vm.swappiness = 10 vm.dirty_background_ratio = 5 vm.dirty_ratio = 10 vm.nr_hugepages = 20480 EOF # sysctl -p /etc/sysctl.d/99-oracle.conf # 4. 配置用户限制 # cat > /etc/security/limits.d/99-oracle.conf << EOF oracle soft nproc 2047 oracle hard nproc 16384 oracle soft nofile 1024 oracle hard nofile 65536 oracle soft stack 10240 oracle hard stack 32768 oracle soft memlock 3145728 oracle hard memlock 3145728 EOF # 5. 禁用透明大内存页和NUMA # vi /etc/default/grub GRUB_CMDLINE_LINUX="rhgb quiet transparent_hugepage=never numa=off" # grub2-mkconfig -o /boot/grub2/grub.cfg # 6. 配置防火墙 # firewall-cmd --permanent --add-port=1521/tcp # firewall-cmd --reload # 7. 安装必要软件包 # dnf install -y oracle-database-preinstall-19c # 8. 创建目录结构 # mkdir -p /data/oracle/app/oracle # mkdir -p /backup/oracle # chown -R oracle:oinstall /data/oracle # chown -R oracle:oinstall /backup/oracle # 9. 验证配置 # sysctl -a | grep -E "shmmax|shmall|sem" kernel.sem = 250 32000 100 128 kernel.shmall = 8388608 kernel.shmmax = 34359738368 # grep HugePages /proc/meminfo HugePages_Total: 20480 HugePages_Free: 20480 HugePages_Rsvd: 0 HugePages_Surp: 0

# 1. 安装Nginx
# dnf install -y nginx

# 2. 配置Nginx
# vi /etc/nginx/nginx.conf
user nginx;
worker_processes auto;
worker_rlimit_nofile 65535;
error_log /var/log/nginx/error.log;
pid /run/nginx.pid;

events {
worker_connections 65535;
use epoll;
multi_accept on;
}

http {
log_format main ‘$remote_addr – $remote_user [$time_local] “$request” ‘
‘$status $body_bytes_sent “$http_referer” ‘
‘”$http_user_agent” “$http_x_forwarded_for”‘;
access_log /var/log/nginx/access.log main;
sendfile on;
tcp_nopush on;
tcp_nodelay on;
keepalive_timeout 65;
types_hash_max_size 2048;
include /etc/nginx/mime.types;
default_type application/octet-stream;
include /etc/nginx/conf.d/*.conf;
}

# 3. 启动Nginx
# systemctl enable nginx
# systemctl start nginx

# 4. 配置防火墙
# firewall-cmd –permanent –add-service=http
# firewall-cmd –permanent –add-service=https
# firewall-cmd –reload

# 5. 验证服务状态
# systemctl status nginx
● nginx.service – The nginx HTTP and reverse proxy server
Loaded: loaded (/usr/lib/systemd/system/nginx.service; enabled; vendor preset: disabled)
Active: active (running) since Mon 2026-04-04 10:00:00 CST; 5min ago
Process: 12345 ExecStartPre=/usr/bin/rm -f /run/nginx.pid (code=exited, status=0/SUCCESS)
Process: 12346 ExecStart=/usr/sbin/nginx (code=exited, status=0/SUCCESS)
Main PID: 12347 (nginx)
Tasks: 3 (limit: 63498)
Memory: 5.2M
CPU: 50ms
CGroup: /system.slice/nginx.service
├─12347 “nginx: master process /usr/sbin/nginx”
├─12348 “nginx: worker process”
└─12349 “nginx: worker process”

# 6. 测试访问
# curl -I http://localhost
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Mon, 04 Apr 2026 02:00:00 GMT
Content-Type: text/html
Content-Length: 3510
Last-Modified: Mon, 04 Apr 2026 01:00:00 GMT
Connection: keep-alive
ETag: “66666666-6b6”
Accept-Ranges: bytes