# centos7
lxc launch images:centos/7/amd64 centos7
lxc exec centos7 -- /bin/bash
# 驗證centos7版本
lxc exec centos7 -- cat /etc/redhat-release
# 顯示網絡配置
lxc exec centos7 -- ip addr
# 查看公網IP ifconfig.me網站可顯示本機公網IP https://ip8.com/
curl ifconfig.me
# 網絡路徑追蹤
tracepath www.baidu.com
# MariaDB (兼容MYSQL)前綴 lxc exec centos7 --
yum -y install mariadb mariadb-server
systemctl start mariadb
systemctl enable mariadb
mysql_secure_installation
# 密碼：123456
create user test IDENTIFIED by '123456';
grant select on testdb. to sytest;
grant show view on testdb. to test;
select host,user,password from user;
# 實現遠程連接（改表法）
use mysql;
update user set host = '%' where user = 'test';
# 修改root遠程訪問
GRANT ALL PRIVILEGES ON . TO 'root'@'%' IDENTIFIED BY '123456' WITH GRANT OPTION;
# 數據傳輸報Got a packet bigger than‘max_allowed_packet’bytes臨時修改：
# 修改 #512M,在mysq下輸入
set global max_allowed_packet=524288000;
# 刷新權限
flush privileges;
# 重新配置參照https://www.linuxidc.com/Linux/2016-03/128880.htm 和 服務器my.cnf
systemctl restart mariadb
# 安裝 OpenJDK (WEB開發兼容Orcle JDK)前綴 lxc exec centos7 --
yum -y install java-1.8.0-openjdk java-1.8.0-openjdk-devel
# 獲取openjdk真實路徑
dirname $(readlink $(readlink $(whereis java)))
# 配置java系統變量寫入/etc/profile.d/java_env_export.sh
echo -e "\n export JAVA_HOME=/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.171-7.b10.el7.x86_64\n \
export PATH=$PATH:$JAVA_HOME/bin\n \
export CLASSPATH=.:$JAVA_HOME/jre/lib:$JAVA_HOME/lib:$JAVA_HOME/lib/tools.jar\n" \
> /etc/profile.d/java_env_export.sh
# 應用系統變量
source /etc/profile.d/java_env_export.sh
# 永久打開，重啓依然有效
vi /etc/sysctl.conf文件，將net.ipv4.ip_forward=1前面的#註釋去掉，保存文件，然後執行sudo sysctl -p使其生效
# 在centos的之外的宿主操作系統臨時保存端口轉發，重啓失效
sudo iptables -t nat -A PREROUTING -p tcp --dport 3306 -j DNAT --to 10.138.129.43:3306
sudo iptables -t nat -A PREROUTING -p tcp -s 192.168.188.0/24 --dport 80 -j DNAT --to 10.138.129.43:80
sudo iptables -t nat -A PREROUTING -p tcp -s 192.168.188.0/24 --dport 80 -j DNAT --to 10.138.129.43:80
# 保存當前iptables的所有規則
sudo iptables-save
# 共享主機用戶目錄
lxc config device add centos7 mntdir disk source=/home/ubuntu path=/mnt/outter
# 移除主機用戶目錄
lxc config device remove centos7 mntdir
# 查看容器配置
lxc config device show centos7
# 永久配置自腳本，無需登錄，自建/etc/init.d/add-rules並在末尾添加，將/etc/init.d/add-rules鏈接加入到/etc/rcX.d/下,參考https://blog.csdn.net/apple_llb/article/details/50293179
echo 123456 | sudo -S iptables -t nat -A PREROUTING -p tcp --dport 80 -d 192.168.1.1/24 -j DNAT --to 10.0.3.26:80
echo 123456 | sudo -S iptables -t nat -A PREROUTING -p tcp --dport 3306 -d 192.168.1.1/24 -j DNAT --to 10.0.3.26:3306