前言 OpenEuler 作为面向数字基础设施的开源操作系统，越来越广泛地应用于金融、运营商、能源、物流、高校&科研、云计算等领域，1Panel 是新一代的 Linux 服务器运维管理面板，它们之间会擦出怎样的火花呢？ 准备工作 OpenEuler 服务器一台； 服务器架构：x86_64、aarch64、armv7l、ppc64le、s390x； 内存要求：建议可用内存在 1GB 以上； 浏览器要求：请使用 Chrome、FireFox、IE10+、Edge等现代浏览器； 可访问互联网。 安装步骤 手动安装 docker 与常规 RedHat / CentOS 发行版不同，docker 官方的一键安装脚本尚且不可以直接在 OpenEuler 服务器中运行，故需要手动安装 docker 。 sudo dnf install docker-engine 安装 1Panel 执行 1panel 官方的一键安装脚本 curl -sSL https://resource.fit2cloud.com/1panel/package/quick_start.sh -o quick_start.sh && sh quick_start.sh   1Panel 中的一些工具 进程守护 1.从 pip 安装 pip install supervisor 2.创建启动脚本 vi /etc/systemd/system/supervisor.service 填入 [Unit] Description=Supervisor process control system for UNIX Documentation=http://supervisord.org After=network.target [Service] ExecStart=/usr/local/bin/站长SEO导航网supervisord -n -c /etc/supervisor/supervisord.conf ExecStop=/usr/local/bin/supervisorctl $OPTIONS shutdown ExecReload=/usr/local/bin/supervisorctl -c /etc/supervisor/supervisord.conf $OPTIONS reload KillMode=process Restart=on-failure RestartSec=50s [Install] WantedBy=multi-user.target 3.创建必要文件夹 mkdir /etc/supervisor/ mkdir /var/log/supervisor/ 4.创建基本配置文件 vi /etc/supervisor/supervisord.conf 填入 ; supervisor config file [unix_http_server] ; (the path to the socket file) file = /var/run/supervisor.sock ; sockef file mode (default 0700) chmod = 0700 [supervisord] ; (main log file;default $CWD/supervisord.log) logfile = /var/log/supervisor/supervisord.log ; (supervisord pidfile;default supervisord.pid) pidfile = /var/run/supervisord.pid ; ('AUTO' child log dir, default $TEMP) childlogdir = /var/log/supervisor ; the below section must remain in the config file for RPC ; (supervisorctl/web interface) to work, additional interfaces may be ; added by defining them in separate rpcinterface: sections [rpcinterface:supervisor] supervisor.rpcinterface_factory = supervisor.rpcinterface:make_main_rpcinterface [supervisorctl] ; use a unix:// URL for a unix socket serverurl = unix:///var/run/supervisor.sock ; The [include] section can just contain the "files" setting. This ; setting can list multiple files (separated by whitespace or ; newlines). It can also contain wildcards. The filenames are ; interpreted as relative to this file. Included files *cannot* ; include files themselves. [include] files = /opt/1panel/tools/supervisord/supervisor.d/*.ini ;files = /etc/supervisor/conf.d/*.conf 5.设置开机自启 systemctl enable supervisor 6.在 1Panel 中进行初始化操作。 Fail2ban 1.安装 git dnf install git 2.从源码安装 git clone https://github.com/fail2ban/fail2ban.git cd fail2ban sudo python setup.py install 3.创建启动脚本 vi /etc/systemd/system/fail2ban.service 输入 [Unit] Description=Fail2Ban Service Documentation=man:fail2ban(1) After=network.target iptables.service firewalld.service ip6tables.service ipset.service nftables.service PartOf=iptables.service firewalld.service ip6tables.service ipset.service nftables.service [Service] User=root Type=simple Environment="PYTHONNOUSERSITE=1" Environment="PYTHONPATH=$PYTHONPATH:/usr/local/lib/python3.9/site-packages" ExecStartPre=/bin/mkdir -p /run/fail2ban ExecStart=/usr/local/bin/fail2ban-server -xf start ExecStop=/usr/local/bin/fail2ban-client stop ExecReload=/usr/local/bin/fail2ban-client reload PIDFile=/run/fail2ban/fail2ban.pid Restart=on-failure RestartPreventExitStatus=0 255 [Install] WantedBy=multi-user.target 4.在 1Panel 中启动Fail2ban 转自：https://www.anye.xyz/archives/GZwi2ZfQ