centossshlocalhostrefused_centos配置高可用环境

#第一步&＃xff1a; 停止firewall
systemctl stop firewalld.service
#第二步&＃xff1a;禁止firewall开机启动
systemctl disable firewalld.service
#第三步&＃xff1a;查看防火墙状态
systemctl status firewalld.service

[root&＃64;localhost ~]# ls /etc/sysconfig/network-scripts/ifcfg-*
/etc/sysconfig/network-scripts/ifcfg-ens33
/etc/sysconfig/network-scripts/ifcfg-lo
[root&＃64;localhost ~]# ifconfig
ens33: flags&＃61;4163 mtu 1500inet 192.168.x.xx netmask 255.255.255.0 broadcast 192.168.x.xxxinet6 xxxx::xxxx:xxxx:xxxx:xxxx prefixlen 64 scopeid 0x20ether xx:xx:xx:xx:xx:xx txqueuelen 1000 (Ethernet)RX packets 271715 bytes 379958418 (362.3 MiB)RX errors 0 dropped 0 overruns 0 frame 0TX packets 79173 bytes 5679903 (5.4 MiB)TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0lo: flags&＃61;73 mtu 65536inet 127.0.0.1 netmask 255.0.0.0inet6 ::1 prefixlen 128 scopeid 0x10loop txqueuelen 1000 (Local Loopback)RX packets 166 bytes 13876 (13.5 KiB)RX errors 0 dropped 0 overruns 0 frame 0TX packets 166 bytes 13876 (13.5 KiB)TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0ifcfg-ens33就是网卡需要修改&＃xff0c;先备份然后修改
cp /etc/sysconfig/network-scripts/ifcfg-ens33 /etc/sysconfig/network-scripts/ifcfg-enp0s8vi /etc/sysconfig/network-scripts/ifcfg-enp0s8
具体修改如下&＃xff1a;
TYPE&＃61;Ethernet
PROXY_METHOD&＃61;none
BROWSER_ONLY&＃61;no
#修改为static
BOOTPROTO&＃61;static
DEFROUTE&＃61;yes
IPV4_FAILURE_FATAL&＃61;no
IPV6INIT&＃61;yes
IPV6_AUTOCONF&＃61;yes
IPV6_DEFROUTE&＃61;yes
IPV6_FAILURE_FATAL&＃61;no
IPV6_ADDR_GEN_MODE&＃61;stable-privacy
#调整name和device
NAME&＃61;enp0s8
#uuid是唯一值
UUID&＃61;xxxxxxxx-xxxx-xxxx-xxxx-xxxxxx
DEVICE&＃61;enp0s8
ONBOOT&＃61;yes#配置静态ip地址自己指定该ip段的地址
IPADDR&＃61;192.168.1x.xxx

3、重启机器前可以修改机器的主机名称&＃xff0c;方便知道用途和环境阶段&＃xff1a;
[root&＃64;localhost ~]# hostnamectl set-hostname 主机名称

1、生成公钥、私钥&＃xff1a;
ssh-keygen -t rsa
然后敲&＃xff08;三个回车&＃xff09;&＃xff0c;就会生成两个文件id_rsa&＃xff08;私钥&＃xff09;、id_rsa.pub&＃xff08;公钥&＃xff09;[root&＃64;localhost ~]# ssh-keygen -t rsa
Generating public/private rsa key pair.
Enter file in which to save the key (/root/.ssh/id_rsa):
Created directory &＃39;/root/.ssh&＃39;.
Enter passphrase (empty for no passphrase):
Enter same passphrase again:
Your identification has been saved in /root/.ssh/id_rsa.
Your public key has been saved in /root/.ssh/id_rsa.pub.
The key fingerprint is:
SHA256:GuRRqM5vxTH9U64Mv7nUgCyZjEbOjkGzpASPbw8FnEU root&＃64;sql_01
The key&＃39;s randomart image is:
&＃43;---[RSA 2048]----&＃43;
|...&＃43;E .. |
| &＃43;o. .. |
|. o &＃61;.&＃43; . |
| o &＃61;.O &＃43;o&＃43;.. . |
| &＃61;oo B.Soo..o |
| . oo&＃61; oo.. oo. |
| o.o. &＃43;.o. |
| o .&＃43;. |
| . &＃43;o |
&＃43;----[SHA256]-----&＃43;
[root&＃64;localhost ~]# ls -a
. .bashrc .gnupg .mozilla 模板 桌面
.. .cache google-chrome.desktop .pki 视频
anaconda-ks.cfg .config .ICEauthority .ssh 图片
.bash_history .cshrc initial-setup-ks.cfg .tcshrc 文档
.bash_logout .dbus .java .viminfo 下载
.bash_profile .esd_auth .local 公共 音乐
[root&＃64;localhost ~]# ls .ssh
id_rsa id_rsa.pub
[root&＃64;localhost ~]#

#localhost也可以是目标机器ip
[root&＃64;localhost ~]# ssh-copy-id localhost
/usr/bin/ssh-copy-id: INFO: Source of key(s) to be installed: "/root/.ssh/id_rsa.pub"
The authenticity of host &＃39;localhost (::1)&＃39; can&＃39;t be established.
ECDSA key fingerprint is SHA256:&＃43;G6UXSGpkFozRiVjxksLUQJt3glI4CZa4xrmFV7vThY.
ECDSA key fingerprint is MD5:51:19:c1:fc:1a:52:76:94:b0:36:48:66:bc:06:d7:9b.
Are you sure you want to continue connecting (yes/no)? yes
/usr/bin/ssh-copy-id: INFO: attempting to log in with the new key(s), to filter out any that are already installed
/usr/bin/ssh-copy-id: INFO: 1 key(s) remain to be installed -- if you are prompted now it is to install the new keys
root&＃64;localhost&＃39;s password: Number of key(s) added: 1Now try logging into the machine, with: "ssh &＃39;localhost&＃39;"
and check to make sure that only the key(s) you wanted were added.#拷贝到目标机器后使用ssh登录&＃xff1b;
[root&＃64;localhost ~]# ssh localhost
Last login: Mon Feb 3 11:50:47 2020 from 192.168.x.xx
[root&＃64;sql_01 ~]#
可以看到登录后机器名称是有所变化的&＃xff1b;