Shulou(Shulou.com)05/31 Report--

This article introduces the relevant knowledge of "how to implement the docker Yearning+Inception SQL audit platform". In the operation of actual cases, many people will encounter such a dilemma, so let the editor lead you to learn how to deal with these situations. I hope you can read it carefully and be able to achieve something!

[1] installation

[1.1] system environment

System environment: CentOS Linux release 7.6.1708 (Core)

System memory: 4G

System kernel: 1

Python:3.6.4

Close iptables and selinux

This installation uses external MySQL 5.7,

[1.2] close iptables

[root@localhost ~] # systemctl stop firewalld.service// turn off iptables

[root@localhost ~] # systemctl disable firewalld.service// boot forbids starting iptables

[1.3] disable selinux and install Python

[root@localhost ~] # vim / etc/sysconfig/selinux

# This file controls the state of SELinux on the system.

# SELINUX= can take one of these three values:

# enforcing-SELinux security policy is enforced.

# permissive-SELinux prints warnings instead of enforcing.

# disabled-No SELinux policy is loaded.

Change SELINUX=disabled// to disabled

# SELINUXTYPE= can take one of three two values:

# targeted-Targeted processes are protected

# minimum-Modification of targeted policy. Only selected processes are protected.

# mls-Multi Level Security protection.

SELINUXTYPE=targeted

[1.3.1] Python installation

[root@localhost ~] # cd / root/software

[root@localhost software] # yum-y install zlib-*

[root@localhost software] # wget https://www.python.org/ftp/python/3.6.4/Python-3.6.4.tgz

[root@localhost software] # tar-zxvf Python-3.6.4.tgz

[root@localhost software] # mkdir-p / usr/local/python3

[root@localhost software] # cd Python-3.6.4/

[root@localhost Python-3.6.4] #. / configure-prefix=/usr/local/python3

[root@localhost Python-3.6.4] # make

[root@localhost Python-3.6.4] # make install

[root@localhost Python-3.6.4] # mv / usr/bin/python / usr/bin/python_bak// modifies the old version

[root@localhost Python-3.6.4] # ln-s / usr/local/python3/bin/python3 / usr/bin/python// create a new soft connection

[root@localhost Python-3.6.4] # python-Vamp / check the version of python

Python 3.6.4

[root@localhost Python-3.6.4] # vim ~ / .bash_profile// is configured successfully, pip3 is not available. Further configuration is needed to add / usr/local/python3/bin to PATH.

# .bash _ profile

# Get the aliases and functions

If [- f ~ / .bashrc]; then

. ~ / .bashrc

Fi

# User specific environment and startup programs

PATH=$PATH:$HOME/bin:/usr/local/python3/bin

Export PATH

[root@localhost Python-3.6.4] # source ~ / .bash_profile// let the environment variable take effect

[1.3.2] configure the yum source or yum is not available

[root@localhost Python-3.6.4] # yum-y update// obviously the above except is written in python2, and of course it cannot be executed using the default Python3. So replace #! / usr/bin/python in line 1 of this file with #! / usr/bin/python2.7

File "/ usr/bin/yum", line 30

Except KeyboardInterrupt, e: ^

SyntaxError: invalid syntax

[root@localhost Python-3.6.4] # vim / usr/bin/yum

So replace #! / usr/bin/python in line 1 of this file with #! / usr/bin/python2.7

[1.4] install MySQL

[root@localhost ~] # cd / etc/yum.repos.d/

[root@localhost yum.repos.d] # vim mysql.repos

[mysql5.7-community]

Name=MySQL 5.7 Community Server

Baseurl= http://repo.mysql.com/yum/mysql-5.7-community/el/7/$basearch/

Enabled=1

Gpgcheck=0

[root@localhost yum.repos.d] # yum-y install mysql-*// waits for installation to complete

[1.5] start MySQL service and set boot up

[root@localhost yum.repos.d] # systemctl start mysqld

[root@localhost yum.repos.d] # systemctl enable mysqld

[root@localhost yum.repos.d] # systemctl daemon-reload

[1.6] View the initial password of mysql

[root@localhost yum.repos.d] # grep 'temporary password' / var/log/mysqld.log

2019-06-25T03:27:20.334210Z 1 [Note] A temporary password is generated for root@localhost: GIutnKkR%7fe

[1.7] Log into the mysql environment to configure and modify parameters

[root@localhost yum.repos.d] # mysql-uroot-pGIutnKkR%7fe / / enter to the database

Mysql > set global validate_password_policy=0

Mysql > set global validate_password_length=1

Mysql > set global validate_password_mixed_case_count=2

Mysql > show variables like 'validate_password%'

+-+ +

| | Variable_name | Value |

+-+ +

| | validate_password_check_user_name | OFF |

| | validate_password_dictionary_file |

| | validate_password_length | 6 | |

| | validate_password_mixed_case_count | 2 | |

| | validate_password_number_count | 1 | |

| | validate_password_policy | LOW |

| | validate_password_special_char_count | 1 | |

+-+ +

7 rows in set (0.02 sec)

Mysql > alter user 'root'@'localhost' identified by' 123456'

Mysql > flush privileges

Mysql > quit

Create a Yearning database with users and passwords and authorize

[root@localhost yum.repos.d] # mysql-uroot-p123456

Mysql > create database Yearning charset utf8;// create Yearning library

Mysql > create user 'Yearning'@'%' identified by' Yearning';// to create Yearning users

Mysql > grant all on *. * to 'Yearning'@'%' identified by' Yearning'; / / authorize Yearning user rights

Mysql > flush privileges

Mysql > quit

[1.9] install docker

[root@localhost ~] # yum install-y yum-utils device-mapper-persistent-data lvm2// installs docker's dependency package

[1.9.1] set yum source

[root@localhost ~] # yum-config-manager-- add-repo https://download.docker.com/linux/centos/docker-ce.repo

[1.9.2] you can view all docker versions in all repositories and select a specific version to install

[root@localhost ~] # yum list docker-ce-- showduplicates | sort-r

Loaded plug-ins: fastestmirror, langpacks

Installed software packages

Installable software package

* updates: ap.stykers.moe

Loading mirror speeds from cached hostfile

* extras: ftp.sjtu.edu.cn

Docker-ce.x86_64 3Rank 18.09.6-3.el7 docker-ce-stable

Docker-ce.x86_64 3rig 18.09.6-3.el7 @ docker-ce-stable

Docker-ce.x86_64 3Rank 18.09.5-3.el7 docker-ce-stable

Docker-ce.x86_64 3Rank 18.09.4-3.el7 docker-ce-stable

Docker-ce.x86_64 3Rank 18.09.3-3.el7 docker-ce-stable

Docker-ce.x86_64 3Rank 18.09.2-3.el7 docker-ce-stable

Docker-ce.x86_64 3Rank 18.09.1-3.el7 docker-ce-stable

Docker-ce.x86_64 3Rank 18.09.0-3.el7 docker-ce-stable

Docker-ce.x86_64 18.06.3.ce-3.el7 docker-ce-stable

Docker-ce.x86_64 18.06.2.ce-3.el7 docker-ce-stable

Docker-ce.x86_64 18.06.1.ce-3.el7 docker-ce-stable

Docker-ce.x86_64 18.06.0.ce-3.el7 docker-ce-stable

Docker-ce.x86_64 18.03.1.ce-1.el7.centos docker-ce-stable

Docker-ce.x86_64 18.03.0.ce-1.el7.centos docker-ce-stable

Docker-ce.x86_64 17.12.1.ce-1.el7.centos docker-ce-stable

Docker-ce.x86_64 17.12.0.ce-1.el7.centos docker-ce-stable

Docker-ce.x86_64 17.09.1.ce-1.el7.centos docker-ce-stable

Docker-ce.x86_64 17.09.0.ce-1.el7.centos docker-ce-stable

Docker-ce.x86_64 17.06.2.ce-1.el7.centos docker-ce-stable

Docker-ce.x86_64 17.06.1.ce-1.el7.centos docker-ce-stable

Docker-ce.x86_64 17.06.0.ce-1.el7.centos docker-ce-stable

Docker-ce.x86_64 17.03.3.ce-1.el7 docker-ce-stable

Docker-ce.x86_64 17.03.2.ce-1.el7.centos docker-ce-stable

Docker-ce.x86_64 17.03.1.ce-1.el7.centos docker-ce-stable

Docker-ce.x86_64 17.03.0.ce-1.el7.centos docker-ce-stable

* base: ap.stykers.moe

[1.9.3] install docker and select the corresponding version

[root@localhost ~] # yum install docker-ce # since only stable repository is enabled by default in repo, the latest stable version of 18.03.1.ce is installed here.

[root@localhost ~] # yum install # for example: yum install docker-ce-18.03.1.ce

[root@localhost ~] # yum install-y docker-ce-18.03.1.ce// waits for installation to complete

[1.9.4] start and join boot boot

[root@localhost ~] # systemctl start docker

[root@localhost ~] # systemctl enable docker

[1.9.5] verify whether the installation is successful (both client and service indicate that the docker installation starts successfully)

[root@localhost ~] # docker version

Client:

Version: 18.09.6

API version: 1.39

Go version: go1.10.8

Git commit: 481bc77156

Built: Sat May 4 02:34:58 2019

OS/Arch: linux/amd64

Experimental: false

Server: Docker Engine-Community

Engine:

Version: 18.09.6

API version: 1.39 (minimum version 1.12)

Go version: go1.10.8

Git commit: 481bc77

Built: Sat May 4 02:02:43 2019

OS/Arch: linux/amd64

Experimental: false

[II] installation of Inception and Yearning

Download Yearning source code

[root@localhost] # mkdir-p / root/software

[root@localhost ~] # cd / root/software

[root@localhost software] # git clone https://github.com/cookieY/Yearning.git// get git Yearning source code

[root@localhost software] # cd Yearning/install/yearning-docker-compose/init-sql// go under the environment variable

[root@localhost init-sql] # mysql-uYearning-pYearning Yearning < install.sql// import environment variables into the database

[root@localhost ~] # cd / root/software/Yearning/install/// cd to the environment directory to extract the inception.tar package

[root@localhost install] # tar-xvf inception.tar

[root@localhost install] # cd inception/bin/

[root@localhost bin] # mkdir-p / var/log/inception/// create inception log directory

[root@localhost bin] # mkdir-p / var/run/inception/// create an inception.socket directory

[root@localhost bin] # vim inc.cnf// modify inception configuration file

[inception]

General_log=1

General_log_file=/var/log/inception/inception.log// inception log directory

Port=6669

Socket=/var/run/inception/inc.socket// inception.socket storage directory

Character-set-client-handshake=0

Character-set-server=utf8

Inception_support_charset=utf8mb4

Inception_enable_nullable=0

Inception_check_primary_key=1

Inception_check_column_comment=1

Inception_check_table_comment=1

Inception_enable_blob_type=1

Inception_check_column_default_value=1

Inception_support_charset=utf8

Inception_osc_on=OFF

Inception_check_column_default_value=OFF

Inception_check_column_comment=OFF

Inception_check_table_comment=OFF

Inception_enable_identifer_keyword=ON

Inception_remote_backup_host = 192.168.1.150max / IP of the backup database

Inception_remote_backup_port = 3306 / database default port

Inception_remote_system_user = the authorized user of the root// database _ can be defined according to yourself

Inception_remote_system_password = 123456 / database user password

[2.2] start the inception service

[root@localhost bin] # pwd

/ root/software/Yearning/install/inception/bin

[root@localhost bin] # nohup bin/Inception-- defaults-file=inc.cnf & / / background scheduling enabled

Run Yearning [Note: the parameters after HOST= native IP and MYSQL_ADDR= native IP do not need to be selected as long as you follow this document. By default, just follow mine.]

[root@localhost bin] # docker run-d-e HOST=192.168.1.150-e MYSQL_ADDR=192.168.1.150-e MYSQL_USER=Yearning-e MYSQL_PASSWORD=Yearning-p8080 MYSQL_USER=Yearning 80-p8000 MYSQL_ADDR=192.168.1.150 8000 registry.cn-hangzhou.aliyuncs.com/cookie/yearning:v1.3.0

[3] related configuration

[3.1] visit Yearning

Visit Yearning (access address is the IP address where you started docker)

Default value for login administrator: admin / Yearning_admin

This is the end of the content of "how to implement the docker Yearning+Inception SQL Audit platform". Thank you for reading. If you want to know more about the industry, you can follow the website, the editor will output more high-quality practical articles for you!

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.