# 2. 创建安装U盘
dd if=rhel-9.3-x86_64-dvd.iso of=/dev/sdb bs=4M status=progress

# 3. 安装RHEL 9.3
# 启动服务器，从U盘启动
# 选择语言：中文
# 选择安装位置：自定义分区
# 配置网络：设置静态IP
# 配置用户：创建root用户和普通用户
# 开始安装

# 4. 安装后配置
# 注册系统
subscription-manager register –username=username –password=password

# 启用存储库
subscription-manager repos –enable=rhel-9-for-x86_64-appstream-rpms
subscription-manager repos –enable=rhel-9-for-x86_64-baseos-rpms

# 更新系统
dnf update -y

# 安装必要的包
dnf install -y vim wget curl net-tools

# 2. 配置Keepalived
cat > /etc/keepalived/keepalived.conf << 'EOF' global_defs { router_id LVS_DEVEL } vrrp_instance VI_1 { state MASTER interface eth0 virtual_router_id 51 priority 100 advert_int 1 authentication { auth_type PASS auth_pass 1111 } virtual_ipaddress { 192.168.1.100 } } EOF # 3. 启动Keepalived systemctl start keepalived systemctl enable keepalived # 4. 配置HAProxy cat > /etc/haproxy/haproxy.cfg << 'EOF' global log 127.0.0.1 local2 chroot /var/lib/haproxy pidfile /var/run/haproxy.pid maxconn 4000 user haproxy group haproxy daemon defaults mode http log global option httplog option dontlognull option http-server-close option forwardfor except 127.0.0.1 option redispatch retries 3 timeout http-request 10s timeout queue 1m timeout connect 10s timeout client 1m timeout server 1m timeout http-keep-alive 10s timeout check 10s maxconn 3000 frontend http-in bind *:80 default_backend servers backend servers balance roundrobin server server1 192.168.1.10:80 check server server2 192.168.1.11:80 check EOF # 5. 启动HAProxy systemctl start haproxy systemctl enable haproxy

# 2. 配置防火墙
firewall-cmd –permanent –add-service=http
firewall-cmd –permanent –add-service=https
firewall-cmd –permanent –add-service=ssh
firewall-cmd –reload

# 3. 配置密码策略
cat > /etc/security/pwquality.conf << 'EOF' minlen = 12 minclass = 4 dcredit = -1 ucredit = -1 lcredit = -1 ocredit = -1 EOF # 4. 配置SSH cat > /etc/ssh/sshd_config << 'EOF' PermitRootLogin no PasswordAuthentication no PubkeyAuthentication yes AuthorizedKeysFile .ssh/authorized_keys EOF systemctl restart sshd # 5. 配置定期更新 cat > /etc/cron.daily/update-system << 'EOF' #!/bin/bash dnf update -y systemctl restart necessary-services EOF chmod +x /etc/cron.daily/update-system

# 2. 初始化数据库
postgresql-setup –initdb

# 3. 启动PostgreSQL
systemctl start postgresql
systemctl enable postgresql

# 4. 配置PostgreSQL
cat > /var/lib/pgsql/data/pg_hba.conf << 'EOF' local all postgres peer local all all md5 host all all 127.0.0.1/32 md5 host all all ::1/128 md5 host all all 192.168.1.0/24 md5 EOF # 5. 重启PostgreSQL systemctl restart postgresql # 6. 创建数据库和用户 su - postgres -c "createdb fgedudb" su - postgres -c "createuser -P fgedu" su - postgres -c "psql -c 'GRANT ALL PRIVILEGES ON DATABASE fgedudb TO fgedu;'"

# 2. 启动Apache
systemctl start httpd
systemctl enable httpd

# 3. 下载Moodle
wget https://download.moodle.org/download.php/direct/stable402/moodle-latest-402.tgz

# 4. 解压Moodle
tar -xzf moodle-latest-402.tgz -C /var/www/html/

# 5. 配置Moodle
chown -R apache:apache /var/www/html/moodle
mkdir -p /var/www/moodledata
chown -R apache:apache /var/www/moodledata

# 6. 配置Apache虚拟主机
cat > /etc/httpd/conf.d/moodle.conf << 'EOF'
ServerName moodle.example.com
DocumentRoot /var/www/html/moodle

Options Indexes FollowSymLinks
AllowOverride All
Require all granted

ErrorLog /var/log/httpd/moodle_error.log
CustomLog /var/log/httpd/moodle_access.log combined

EOF

# 7. 重启Apache
systemctl restart httpd

# 8. 安装Moodle
# 访问 http://moodle.example.com
# 按照安装向导完成安装