zhuibobo
/
EnforcementCode-2.0
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
718 Commits
10 Branches
0 Tags
245 MiB
 
 
 
 
 
 
Tree: 189fd044be
Branches Tags
${ item.name }
Create tag ${ searchTerm }
Create branch ${ searchTerm }
from '189fd044be'
${ noResults }
EnforcementCode-2.0/doc/部署说明/部署过程描述.md

13 KiB
Raw Blame History

地址

10.76.108.1

df -h

文件系统 容量 已用 可用 已用% 挂载点 备注
devtmpfs 7.1G 0 7.1G 0% /dev
tmpfs 7.3G 512K 7.3G 1% /dev/shm
tmpfs 7.3G 821M 6.5G 12% /run
tmpfs 7.3G 0 7.3G 0% /sys/fs/cgroup
/dev/mapper/klas_host--10--134--21--9-root 245G 54G 191G 23% /
tmpfs 7.3G 576K 7.3G 1% /tmp
/dev/vda2 1014M 217M 798M 22% /boot
/dev/vda1 200M 5.8M 195M 3% /boot/efi
tmpfs 1.5G 0 1.5G 0% /run/user/993
/dev/loop0 7.6G 7.6G 0 100% /mnt/cdrom
10.76.108.19:/data/upload 196G 30G 156G 17% /data/upload

Nginx

Nginx 是源码编译安装的，安装在 /usr/local/nginx/，可执行文件在 /usr/local/nginx/sbin/nginx

Nginx 信息确认：

项目 值
版本 1.26.3
安装路径 /usr/local/nginx/
编译参数 --with-stream（启用了四层代理/TCP 代理模块）
编译器 GCC 7.3.0
配置文件 /usr/local/nginx/conf/nginx.conf

TDSQL

  • 备份数据库
    • 备份1期库（排除市监表） 
      mysqldump -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 --single-transaction --triggers --events --ignore-table=zfjd.sszt_jbxx110497_new --ignore-table=zfjd.sszt_jbxx110497 zfjd > /efcode20/dbv1/zfjd_2026_08_05_ex_sszt_jbxx_utf8.sql
    • 单独备份市监表 
      mysqldump -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 --single-transaction --triggers --events zfjd sszt_jbxx110497 > /efcode20/dbv1/sszt_jbxx110497_20.sql
mysqldump -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 --single-transaction --triggers --events zfjd sszt_jbxx110497_new > /efcode20/dbv1/sszt_jbxx110497_new_20.sql
    • 压缩备份文件 zip -e -P 'xj.sdeweqwew222qwe.12345' /efcode20/dbv1/zfjdfile_0721.zip /efcode20/dbv1/zfjd_2026_07_21_ex_sszt_jbxx_utf8.sql
    • 导入1期库（排除市监表） 
      mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 zfjd_ef20_1 < /efcode20/dbv1/zfjd_2026_06_15_ex_sszt_jbxx_utf8.sql
    • 导入1期库（市监表）
      mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 zfjd_ef20_1 -e "update enterprise_pub_qrcode set create_by=0 where create_time>'2026-04-26';"
    • 升级到二期库
    mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 zfjd_ef20_1 < /efcode20/dbv2/upgrade/000.sql
mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 zfjd_ef20_1 < /efcode20/dbv2/upgrade/001.sql
mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 zfjd_ef20_1 < /efcode20/dbv2/upgrade/002.sql
mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 zfjd_ef20_1 < /efcode20/dbv2/upgrade/003.sql
mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 zfjd_ef20_1 < /efcode20/dbv2/upgrade/005-1.sql
mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 zfjd_ef20_1 < /efcode20/dbv2/upgrade/005-2.sql
mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 zfjd_ef20_1 < /efcode20/dbv2/upgrade/006.sql
mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 zfjd_ef20_1 < /efcode20/dbv2/upgrade/007.sql
mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 zfjd_ef20_1 < /efcode20/dbv2/upgrade/008.sql
mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 zfjd_ef20_1 < /efcode20/dbv2/upgrade/009.sql
mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 zfjd_ef20_1 < /efcode20/dbv2/upgrade/011-1.sql
mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 zfjd_ef20_1 < /efcode20/dbv2/upgrade/011-2.sql
mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 zfjd_ef20_1 < /efcode20/dbv2/upgrade/012.sql
mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 zfjd_ef20_1 < /efcode20/dbv2/upgrade/013.sql
mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 zfjd_ef20_1 < /efcode20/dbv2/upgrade/014.sql
mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 zfjd_ef20_1 < /efcode20/dbv2/upgrade/015.sql
mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 zfjd_ef20_1 < /efcode20/dbv2/upgrade/016.sql
mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 zfjd_ef20_1 < /efcode20/dbv2/upgrade/017.sql
mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 zfjd_ef20_1 < /efcode20/dbv2/upgrade/097.sql
mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 zfjd_ef20_1 < /efcode20/dbv2/upgrade/gh.sql
mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 zfjd_ef20_1 < /efcode20/dbv2/upgrade/0613.sql
mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 zfjd_ef20_1 < /efcode20/dbv2/upgrade/098.sql
mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 zfjd_ef20_1 < /efcode20/dbv2/upgrade/099.sql
mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 zfjd_ef20_prod < /efcode20/dbv2/upgrade/0726.sql
    • 备份2期库
      • 查询字符集 mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 zfjd_ef20_prod -e "SELECT SCHEMA_NAME, DEFAULT_CHARACTER_SET_NAME, DEFAULT_COLLATION_NAME FROM information_schema.SCHEMATA WHERE SCHEMA_NAME='zfjd_ef20_1';" mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 zfjd_ef20_prod -e "SHOW CREATE TABLE zdxt_file\G" mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 zfjd_ef20_prod -e "select * from zdxt_file where org_code is not null;" mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' zfjd -e "ALTER TABLE zdxt_file MODIFY COLUMN org_code varchar(100) NULL COMMENT '机构编号';" mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' -e "select count(*) from zfjd.sszt_jbxx110497_new"
      • 备份2期库（排除市监表）
      mysqldump -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 --single-transaction --triggers --events --ignore-table=zfjd_ef20_1.sszt_jbxx110497_new --ignore-table=zfjd_ef20_1.sszt_jbxx110497 zfjd_ef20_1 > /efcode20/dbv2/zfjd_ef20_1_2026_06_20_utf8.sql
mysqldump -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 --single-transaction --triggers --events zfjd_ef20_prod > /efcode20/dbv2/zfjd_ef20_prod_2026_08_05_utf8.sql
    • 单独备份市监表 
      mysqldump -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 --single-transaction --triggers --events zfjd_ef20_1 sszt_jbxx110497_new > /efcode20/dbv2/zfjd_ef20_1_2026_06_20_utf8_sszt_jbxx110497_new.sql
    • 压缩备份文件 zip -e -P 'xj.sdeweqwew222qwe.12345' /efcode20/dbv2/zfjd_ef20_prod_2026_08_05_utf8.zip /efcode20/dbv2/zfjd_ef20_prod_2026_08_05_utf8.sql
    • 导入2期库 
      mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd' --default-character-set=utf8mb4 zfjd_ef20_prod < /efcode20/dbv2/zfjd_ef20_1_2026_07_21_utf8.sql
  • sql客户端
    • mysql -h 10.134.89.36 -P 15144 -u zfjd -p'szsf@zfjd'

DATAX

10.76.108.2

10.76.108.3

配置文件在：

/usr/local/nginx/conf/nginx.conf 日志在 /usr/local/nginx/logs/。

/usr/local/nginx/sbin/nginx -t && /usr/local/nginx/sbin/nginx -s reload

firewall-cmd --add-port={12001,12002,12003,12004}/tcp --permanent firewall-cmd --reload firewall-cmd --list-all

新版(1.26.0) /usr/local/nginx_new/conf/nginx.conf /usr/local/nginx_new/sbin/nginx /usr/local/nginx_new/sbin/nginx -t && /usr/local/nginx_new/sbin/nginx -s reload

10.76.108.4

10.76.108.5

10.76.108.6

10.76.108.7 企业端后台服务

  • 初次部署

    • df -h
    • mkdir -p /data/upload
    • 挂载文件存储目录 
      mount -t nfs 10.76.108.19:/data/upload /data/upload

      配置 fstab（重启不会丢挂载）：

      vim /etc/fstab

      在末尾加一行：

      10.76.108.19:/data/upload /data/upload nfs defaults 0 0

      保存后验证：

      mount -a
df -h | grep upload
    • 安装 JDK 17 包已经传上来了，直接解压安装： 
      cd /efcode20/sdk
tar -zxvf bisheng-jdk-17.0.18-b13-linux-aarch64.tar.gz -C /usr/local/
ls /usr/local/ | grep jdk

      添加环境变量，编辑 /etc/profile：

      cat >> /etc/profile << 'EOF'

export JAVA_HOME=/usr/local/bisheng-jdk-17.0.18
export PATH=$JAVA_HOME/bin:$PATH
EOF

      source /etc/profile
java -version

      输出 17 就 OK 了。 开放防火墙端口

    • firewall-cmd --add-port=18002/tcp --permanent
    • firewall-cmd --reload
    • firewall-cmd --list-all 启动jar nohup java -jar /efcode20/zdxt-ent-ep.jar --spring.profiles.active=prod,prod-ent-ep > /efcode20/zdxt-ent-ep.log 2>&1 &

  • 日常维护 好的

10.76.108.8 执法端后台服务

10.76.108.9 监督端后台服务

10.76.108.10 定时/接口服务

10.76.108.11 服务网关

安装jdk17 开放防火墙端口

10.76.108.12 Redis

  • 初次安装
    • 安装 Redis 
      yum info redis
yum install redis -y
systemctl start redis
systemctl enable redis
    • 编辑配置 /etc/redis.conf 
      vim /etc/redis.conf

      改三个地方：

      1. 允许远程连接，找到 bind 127.0.0.1，改成： 
        bind 0.0.0.0

        或者只放行指定 IP：

        bind 10.76.108.1 10.76.108.7 10.76.108.12
      2. 设置密码，找到 # requirepass foobared，去掉注释并改成： 
        requirepass 你的密码
    • 重启生效 
      systemctl restart redis
    • 查看状态 
      systemctl status redis

    firewall-cmd --state 或查看完整规则： firewall-cmd --list-all 放行 Redis 端口： firewall-cmd --add-port=6379/tcp --permanent firewall-cmd --reload firewall-cmd --list-all

10.76.108.13

10.76.108.14 企业/执法/移动监督前端

# 1. 安装 Nginx 和 stream 模块
yum install nginx nginx-mod-stream -y

# 2. 启动并设置开机自启
systemctl start nginx
systemctl enable nginx
nginx -t && systemctl reload nginx
# 3. 确认 stream 模块已加载
nginx -V 2>&1 | grep stream

# 4. 防火墙放行（如果 firewalld 开着）
firewall-cmd --add-port=80/tcp --permanent
firewall-cmd --add-port=443/tcp --permanent
firewall-cmd --reload

查看ng状态 systemctl status nginx 防火墙设置 firewall-cmd --state firewall-cmd --list-all firewall-cmd --add-port={80,85,445,81,12001,12002,12003,12004,12005}/tcp --permanent firewall-cmd --reload firewall-cmd --list-all

ng配置文件路径 /etc/nginx/nginx.conf 日志在 /var/log/nginx/

10.76.108.15 监督端前端

10.76.108.16 文件存储备份服务器

  • 初次部署
    • 挂载文件存储目录
    • 创建备份目录 
      mkdir -p /data/backup
    • 备份脚本 
      cat > /data/backup/backup_upload.sh << 'EOF'
#!/bin/bash
DATE=$(date +%Y%m%d_%H%M%S)
LOG=/data/backup/backup_${DATE}.log

echo "备份开始: $DATE" >> $LOG
rsync -av /data/upload/ /data/backup/upload/ >> $LOG 2>&1
echo "备份结束: $(date +%Y%m%d_%H%M%S)" >> $LOG
EOF

chmod +x /data/backup/backup_upload.sh
    • 定时备份 
      crontab -e
0 2 * * * /data/backup/backup_upload.sh

10.76.108.17

10.76.108.18

10.76.108.19 文件存储主服务器

  1. 配置允许访问的 IP（仅允许业务服务器查询） cat >> /etc/hosts.allow << 'EOF' mountd: 10.76.108.1, 10.76.108.7, 10.76.108.8, 10.76.108.9, 10.76.108.10, 10.76.108.16 EOF

2. 拒绝所有其他主机

cat >> /etc/hosts.deny << 'EOF' mountd: ALL EOF

NFS 挂载设置

/data/upload 10.76.108.1(rw,sync,no_root_squash) 10.76.108.7(rw,sync,no_root_squash) 10.76.108.8(rw,sync,no_root_squash) 10.76.108.9(rw,sync,no_root_squash) 10.76.108.10(rw,sync,no_root_squash) 10.76.108.16(rw,sync,no_root_squash)