基于阿里云的 ECS、RDS，将个人博客迁移升级至：Docker(基于预算考虑，最终未实现)、LNMP(CentOS 7.7、Nginx 1.16、MySQL 5.7、PHP 7.4)、HTTPS 的过程

由永夜 · 2019/12/06

浏览量： 156

1、基于 Xshell 6 进入 CentOS 服务器中，将网站程序目录压缩打包，执行压缩命令，执行结果如图1

图1

cd /data/wwwroot/shuijingwanwq.com
zip -r shuijingwanwq.com-20191203.zip /data/wwwroot/shuijingwanwq.com

2、基于 FlashFXP 连接至 FTP 服务器中，将压缩包：shuijingwanwq.com-20191203.zip 下载至本地，如图2

图2

3、基于 phpMyAdmin 连接至 MySQL 服务器，导出个人博客所使用的数据库：shuijingwanwq，文件名为：shuijingwanwq.sql，如图3

图3

4、在阿里云容器服务中创建集群，如图4、图5、图6、图7

图4

图5

图6

图7

5、发现费用严重超出预算(预算仅为4K)，即使按照 Master 实例的最低配置，2核4G，一年下来，费用总计也是接近 5 位数了，最终决定继续沿用原生 CentOS，仅重新升级一下硬件配置与软件版本

6、硬件配置上，决定将数据盘扩容，从 10 GiB 扩容至 40 GiB，如图8

图8

7、扩容后容量 40 GiB，如图9

图9

8、停止 ECS 实例，如图10

图10

9、更换操作系统，如图11

图11

10、更换操作系统，CentOS 7.7 64位，如图12

图12

11、停止 ECS 实例后，实例磁盘列表中，系统盘更换操作系统后，系统磁盘已经自动初始化。因此，仅需要数据盘重新初始化，如图13

图13

12、云数据库RDS，数据库类型：MySQL 5.7，其可用区与 ECS 是一致的，如图14

图14

13、挂载数据盘，打开网址：https://oneinstack.com/question/how-to-mount-a-data-disc/ ，挂载成功，如图15

图15

[root@iZ23wv7v5ggZ ~]# wget http://mirrors.linuxeye.com/scripts/auto_fdisk.sh
--2019-12-05 11:29:45--  http://mirrors.linuxeye.com/scripts/auto_fdisk.sh
Resolving mirrors.linuxeye.com (mirrors.linuxeye.com)... 61.160.200.234
Connecting to mirrors.linuxeye.com (mirrors.linuxeye.com)|61.160.200.234|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 5598 (5.5K) [text/x-json]
Saving to: ‘auto_fdisk.sh’

100%[=======================================================================================>] 5,598       --.-K/s   in 0.006s  

2019-12-05 11:29:45 (970 KB/s) - ‘auto_fdisk.sh’ saved [5598/5598]

[root@iZ23wv7v5ggZ ~]# chmod +x ./auto_fdisk.sh
[root@iZ23wv7v5ggZ ~]# ./auto_fdisk.sh

#######################################################################
#       OneinStack for CentOS/RedHat 5+ Debian 6+ and Ubuntu 12+      #
#                             Auto fdisk                              #
#       For more information please visit http://oneinstack.com       #
#######################################################################

Step 1.No lock file, begin to create lock file and continue

Step 2.Begin to check free disk
You have a free disk, Now will fdisk it and mount it
This system have free disk :
/dev/vdb

Step 3.Begin to fdisk free disk

Step 4.Begin to make directory

Please enter a location to mount (Default directory: /data): 

Step 5.Begin to write configuration to /etc/fstab and mount device

Filesystem      Size  Used Avail Use% Mounted on
devtmpfs        486M     0  486M   0% /dev
tmpfs           496M     0  496M   0% /dev/shm
tmpfs           496M  436K  496M   1% /run
tmpfs           496M     0  496M   0% /sys/fs/cgroup
/dev/vda1        20G  1.8G   17G  10% /
tmpfs           100M     0  100M   0% /run/user/0
/dev/vdb1        40G   49M   38G   1% /data

14、打开网址：https://oneinstack.com/auto/ ，基于 OneinStack 的自动安装，选择了 LNMP，PHP 版本 7.4，复制安装命令，如图16

图16

15、启动 ECS 实例后，基于 Xshell 6 进入 CentOS 服务器中，粘贴执行安装命令，如图17

图17

16、打开网址：http://121.40.248.29 ，其为 ECS 的公网IP：121.40.248.29，参考添加虚拟主机的文档教程，添加虚拟主机：www.shuijingwanwq.com，如图18

图18

[root@iZ23wv7v5ggZ ~]# ls
auto_fdisk.sh  oneinstack  oneinstack-full.tar.gz
[root@iZ23wv7v5ggZ ~]# cd oneinstack
[root@iZ23wv7v5ggZ oneinstack]# ./vhost.sh

#######################################################################
#       OneinStack for CentOS/RedHat 6+ Debian 8+ and Ubuntu 14+      #
#       For more information please visit https://oneinstack.com      #
#######################################################################

What Are You Doing?
	1. Use HTTP Only
	2. Use your own SSL Certificate and Key
	3. Use Let's Encrypt to Create SSL Certificate and Key
	q. Exit
Please input the correct option: 3

Please input domain(example: www.example.com): www.shuijingwanwq.com
domain=www.shuijingwanwq.com

Please input the directory for the domain:www.shuijingwanwq.com :
(Default directory: /data/wwwroot/www.shuijingwanwq.com): 
Virtual Host Directory=/data/wwwroot/www.shuijingwanwq.com

Create Virtul Host directory......
set permissions of Virtual Host directory......

Do you want to add more domain name? [y/n]: y

Type domainname or IP(example: example.com other.example.com): shuijingwanwq.com
domain list=shuijingwanwq.com

Do you want to redirect from shuijingwanwq.com to www.shuijingwanwq.com? [y/n]: y

Do you want to redirect all HTTP requests to HTTPS? [y/n]: y
[Thu Dec  5 13:42:04 CST 2019] Create account key ok.
[Thu Dec  5 13:42:04 CST 2019] Registering account
[Thu Dec  5 13:42:06 CST 2019] Registered
[Thu Dec  5 13:42:06 CST 2019] ACCOUNT_THUMBPRINT='YjoQ78tWzIgLHz3s7fhC7IoepTPjD3tKvXNrLwE417w'
[Thu Dec  5 13:42:06 CST 2019] Creating domain key
[Thu Dec  5 13:42:06 CST 2019] The domain key is here: /root/.acme.sh/www.shuijingwanwq.com/www.shuijingwanwq.com.key
[Thu Dec  5 13:42:06 CST 2019] Multi domain='DNS:www.shuijingwanwq.com,DNS:shuijingwanwq.com'
[Thu Dec  5 13:42:06 CST 2019] Getting domain auth token for each domain
[Thu Dec  5 13:42:09 CST 2019] Getting webroot for domain='www.shuijingwanwq.com'
[Thu Dec  5 13:42:09 CST 2019] Getting webroot for domain='shuijingwanwq.com'
[Thu Dec  5 13:42:10 CST 2019] Verifying: www.shuijingwanwq.com
[Thu Dec  5 13:42:13 CST 2019] Success
[Thu Dec  5 13:42:13 CST 2019] Verifying: shuijingwanwq.com
[Thu Dec  5 13:42:17 CST 2019] Success
[Thu Dec  5 13:42:17 CST 2019] Verify finished, start to sign.
[Thu Dec  5 13:42:17 CST 2019] Lets finalize the order, Le_OrderFinalize: https://acme-v02.api.letsencrypt.org/acme/finalize/73156074/1675742914
[Thu Dec  5 13:42:19 CST 2019] Download cert, Le_LinkCert: https://acme-v02.api.letsencrypt.org/acme/cert/03c589a531a1436b28e9162b53022c7e4bdd
[Thu Dec  5 13:42:20 CST 2019] Cert success.
-----BEGIN CERTIFICATE-----
MIIFdTCCBF2gAwIBAgISA8WJpTGhQ2so6RYrUwIsfkvdMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMDUwNDQyMThaFw0y
MDAzMDQwNDQyMThaMCAxHjAcBgNVBAMTFXd3dy5zaHVpamluZ3dhbndxLmNvbTCC
ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL5uSUG5EB2t482PVg3oXQ3W
1op5ZZph6c1Mgw+pugTM3GW7R+eR/au1FcSJUoSZhA9/Yvps27/B7jafVS6MrDYv
6l2vj9aqXuXqoto2DMrqCd7h11x3V+W55/pODaqTG3b8LPaWXcqoDQ1830R+XqDU
+/L29x0nunc6JYJmHrDMx1OU9cticXPaUV+/GLGvgh6JOF8Xn9IAIczvlJuu5Sak
umEEDsIft0GI78WSHgx2onT6KIBSBFWMWDtgOAhiaIjlUww/Qg11YjQMfDaaaFYo
Etg0b9qWz0MIZl7J+87dmy8uHvWlO3Ph7V5s4pdHCv+Y7AAXvn0SpRrb15RwYxMC
AwEAAaOCAn0wggJ5MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcD
AQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUP+gvTkg2uTXmuKEc
JvqozkFfXsMwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYB
BQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2Vu
Y3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2Vu
Y3J5cHQub3JnLzAzBgNVHREELDAqghFzaHVpamluZ3dhbndxLmNvbYIVd3d3LnNo
dWlqaW5nd2Fud3EuY29tMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8T
AQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIB
BAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYAb1N2rDHwMRnYmQCkURX/dxUcEdkCwQAp
Bo2yCJo32RMAAAFu1JSaBQAABAMARzBFAiEAjyN2kk8UHD+chH/Lpb0m0Ve0ORc6
tEwbx0/1rt0bBBYCIF3JMCisI70bNmHpIWcvirwBM0+1t6Yyy5b+xA65v6/BAHYA
B7dcG+V9aP/xsMYdIxXHuuZXfFeUt2ruvGE6GmnTohwAAAFu1JSZ/gAABAMARzBF
AiB4wGj9xD+Yj4Szu5yAb6/266KPSX2QxIL1J6YSyOSq+AIhAIZe0ii2cOvUn9Wb
gE2RmVXOKohPp8cmqR9OfRK7icBUMA0GCSqGSIb3DQEBCwUAA4IBAQB+8IQ0C4Zj
nDHy69nQ9hv2DnpWA20v8efPIr+mxmmESGZo3DlZBkzbuWgFB3ObpX2rYhzVm9gK
awDUZ4RI4CBG2JvzDhib7/C9OBSLQ4ZWxwPtwrGygACslBZ5t1hb531SawFd3PKf
CZBAa80oF52D//M2l0yoaCzoCcckih8t3MH1ehKQQMvYGaEjMuhtcBm1Z830YWzY
jmdIasyeSn5ErrgKW3asBgBnhO9U6fngot8HqUFU3stj0mAs5b2rumAHhgH1cvh3
AfXkQSnFh+MLErarwW92oxM7dDIiT3AHY4RAXM/uBMNTTMu8n01g9RW2zZo+a7wB
zyCDzi3YL8Bp
-----END CERTIFICATE-----
[Thu Dec  5 13:42:20 CST 2019] Your cert is in  /root/.acme.sh/www.shuijingwanwq.com/www.shuijingwanwq.com.cer 
[Thu Dec  5 13:42:20 CST 2019] Your cert key is in  /root/.acme.sh/www.shuijingwanwq.com/www.shuijingwanwq.com.key 
[Thu Dec  5 13:42:20 CST 2019] The intermediate CA cert is in  /root/.acme.sh/www.shuijingwanwq.com/ca.cer 
[Thu Dec  5 13:42:20 CST 2019] And the full chain certs is there:  /root/.acme.sh/www.shuijingwanwq.com/fullchain.cer 

Do you want to add hotlink protection? [y/n]: n

Allow Rewrite rule? [y/n]: y

Please input the rewrite of programme :
wordpress,opencart,magento2,drupal,joomla,codeigniter,laravel
thinkphp,pathinfo,discuz,typecho,ecshop,nextcloud,zblog,whmcs rewrite was exist.
(Default rewrite: other): wordpress
You choose rewrite=wordpress

Allow Nginx/Tengine/OpenResty access_log? [y/n]: y
You access log file=/data/wwwlogs/www.shuijingwanwq.com_nginx.log

nginx: the configuration file /usr/local/nginx/conf/nginx.conf syntax is ok
nginx: configuration file /usr/local/nginx/conf/nginx.conf test is successful
Reload Nginx......

#######################################################################
#       OneinStack for CentOS/RedHat 6+ Debian 8+ and Ubuntu 14+      #
#       For more information please visit https://oneinstack.com      #
#######################################################################
Your domain:                  www.shuijingwanwq.com
Virtualhost conf:             /usr/local/nginx/conf/vhost/www.shuijingwanwq.com.conf
Directory of:                 /data/wwwroot/www.shuijingwanwq.com
Rewrite rule:                 /usr/local/nginx/conf/rewrite/wordpress.conf
Let's Encrypt SSL Certificate:/usr/local/nginx/conf/ssl/www.shuijingwanwq.com.crt
SSL Private Key:              /usr/local/nginx/conf/ssl/www.shuijingwanwq.com.key

17、管理FTP帐号，添加FTP帐号：www.shuijingwanwq.com，如图19

图19

[root@iZ23wv7v5ggZ oneinstack]# ./pureftpd_vhost.sh

#######################################################################
#       OneinStack for CentOS/RedHat 6+ Debian 8+ and Ubuntu 14+      #
#                 FTP virtual user account management                 #
#       For more information please visit https://oneinstack.com      #
#######################################################################

What Are You Doing?
	1. UserAdd
	2. UserMod
	3. UserPasswd
	4. UserDel
	5. ListAllUser
	6. ShowUser
	q. Exit
Please input the correct option: 5
User was not existed! 

What Are You Doing?
	1. UserAdd
	2. UserMod
	3. UserPasswd
	4. UserDel
	5. ListAllUser
	6. ShowUser
	q. Exit
Please input the correct option: 1

Please input a username: www.shuijingwanwq.com

Please input the password: 

Please input the directory(Default directory: /data/wwwroot): /data/wwwroot/www.shuijingwanwq.com
Password: 
Enter it again: 
#####################################

[www.shuijingwanwq.com] create successful! 

You user name is : www.shuijingwanwq.com
You Password is : 
You directory is : /data/wwwroot/www.shuijingwanwq.com


What Are You Doing?
	1. UserAdd
	2. UserMod
	3. UserPasswd
	4. UserDel
	5. ListAllUser
	6. ShowUser
	q. Exit
Please input the correct option: q
[root@iZ23wv7v5ggZ oneinstack]#

18、管理 RDS，创建帐号：shuijingwanwq，如图20