{"id":295,"date":"2025-03-03T21:18:35","date_gmt":"2025-03-03T13:18:35","guid":{"rendered":"https:\/\/solost.cn\/?p=295"},"modified":"2025-03-03T21:18:35","modified_gmt":"2025-03-03T13:18:35","slug":"ubuntu-initialization-configuration-1wfwmr","status":"publish","type":"post","link":"https:\/\/solost.cn\/?p=295","title":{"rendered":"Ubuntu\u521d\u59cb\u5316\u914d\u7f6e"},"content":{"rendered":"

Ubuntu\u521d\u59cb\u5316\u914d\u7f6e<\/h1>\n

\u9632\u706b\u5899<\/h2>\n

1. \u68c0\u67e5ufw<\/code>\u200b\u662f\u5426\u5df2\u5b89\u88c5<\/h3>\n

\u200bufw<\/code>\u200b\u901a\u5e38\u5728Ubuntu\u4e2d\u9ed8\u8ba4\u5b89\u88c5\u3002\u4f60\u53ef\u4ee5\u901a\u8fc7\u4ee5\u4e0b\u547d\u4ee4\u68c0\u67e5\u662f\u5426\u5df2\u5b89\u88c5\uff1a<\/p>\n

sudo ufw status<\/code><\/pre>\n
\u5982\u679c\u672a\u5b89\u88c5\uff0c\u53ef\u4ee5\u4f7f\u7528\u4ee5\u4e0b\u547d\u4ee4\u5b89\u88c5\uff1a<\/p>\n
sudo apt update\nsudo apt install ufw<\/code><\/pre>\n
2. \u542f\u7528ufw<\/code>\u200b<\/h3>\n
\u5982\u679cufw<\/code>\u200b\u5c1a\u672a\u542f\u7528\uff0c\u53ef\u4ee5\u4f7f\u7528\u4ee5\u4e0b\u547d\u4ee4\u542f\u7528\u5b83\uff1a<\/p>\n
sudo ufw enable<\/code><\/pre>\n
\u542f\u7528\u540e\uff0c\u9632\u706b\u5899\u5c06\u5f00\u59cb\u8fd0\u884c\uff0c\u5e76\u5728\u7cfb\u7edf\u542f\u52a8\u65f6\u81ea\u52a8\u542f\u7528\u3002<\/p>\n
3. \u68c0\u67e5\u9632\u706b\u5899\u72b6\u6001<\/h3>\n
\u4f60\u53ef\u4ee5\u4f7f\u7528\u4ee5\u4e0b\u547d\u4ee4\u68c0\u67e5\u9632\u706b\u5899\u7684\u72b6\u6001\uff1a<\/p>\n
sudo ufw status verbose<\/code><\/pre>\n
\u8fd9\u5c06\u663e\u793a\u5f53\u524d\u7684\u9632\u706b\u5899\u89c4\u5219\u548c\u72b6\u6001\u3002<\/p>\n
4. \u5141\u8bb8\u6216\u62d2\u7edd\u7279\u5b9a\u7aef\u53e3\u6216\u670d\u52a1<\/h3>\n
\u4f60\u53ef\u4ee5\u4f7f\u7528ufw<\/code>\u200b\u5141\u8bb8\u6216\u62d2\u7edd\u7279\u5b9a\u7684\u7aef\u53e3\u6216\u670d\u52a1\u3002\u4f8b\u5982\uff1a<\/p>\n
    \n
  • \n
    \u5141\u8bb8SSH\uff08\u9ed8\u8ba4\u7aef\u53e322\uff09\uff1a<\/p>\n
    sudo ufw allow ssh<\/code><\/pre>\n
    \u6216\u8005\u76f4\u63a5\u6307\u5b9a\u7aef\u53e3\uff1a<\/p>\n
    sudo ufw allow 22\/tcp<\/code><\/pre>\n<\/li>\n
  • \n
    \u5141\u8bb8HTTP\uff08\u7aef\u53e380\uff09\uff1a<\/p>\n
    sudo ufw allow http<\/code><\/pre>\n
    \u6216\u8005\uff1a<\/p>\n
    sudo ufw allow 80\/tcp<\/code><\/pre>\n<\/li>\n
  • \n
    \u5141\u8bb8HTTPS\uff08\u7aef\u53e3443\uff09\uff1a<\/p>\n
    sudo ufw allow https<\/code><\/pre>\n
    \u6216\u8005\uff1a<\/p>\n
    sudo ufw allow 443\/tcp<\/code><\/pre>\n<\/li>\n
  • \n
    \u62d2\u7edd\u67d0\u4e2a\u7aef\u53e3\uff1a<\/p>\n
    sudo ufw deny 8080\/tcp<\/code><\/pre>\n<\/li>\n<\/ul>\n
    5. \u5220\u9664\u89c4\u5219<\/h3>\n
    \u5982\u679c\u4f60\u60f3\u5220\u9664\u67d0\u6761\u89c4\u5219\uff0c\u53ef\u4ee5\u4f7f\u7528\u4ee5\u4e0b\u547d\u4ee4\uff1a<\/p>\n
    sudo ufw delete allow 80\/tcp<\/code><\/pre>\n
    \u6216\u8005\u901a\u8fc7\u89c4\u5219\u7f16\u53f7\u5220\u9664\uff1a<\/p>\n
    sudo ufw status numbered\nsudo ufw delete 2  # \u5220\u9664\u7f16\u53f7\u4e3a2\u7684\u89c4\u5219<\/code><\/pre>\n
    6. \u7981\u7528ufw<\/code>\u200b<\/h3>\n
    \u5982\u679c\u4f60\u60f3\u6682\u65f6\u7981\u7528\u9632\u706b\u5899\uff0c\u53ef\u4ee5\u4f7f\u7528\u4ee5\u4e0b\u547d\u4ee4\uff1a<\/p>\n
    sudo ufw disable<\/code><\/pre>\n
    7. \u91cd\u7f6eufw<\/code>\u200b<\/h3>\n
    \u5982\u679c\u4f60\u60f3\u91cd\u7f6e\u6240\u6709\u89c4\u5219\u5e76\u7981\u7528ufw<\/code>\u200b\uff0c\u53ef\u4ee5\u4f7f\u7528\u4ee5\u4e0b\u547d\u4ee4\uff1a<\/p>\n
    sudo ufw reset<\/code><\/pre>\n
    8. \u5141\u8bb8\u7279\u5b9aIP\u5730\u5740<\/h3>\n
    \u4f60\u53ef\u4ee5\u5141\u8bb8\u7279\u5b9aIP\u5730\u5740\u8bbf\u95ee\u6240\u6709\u7aef\u53e3\uff1a<\/p>\n
    sudo ufw allow from 192.168.1.100<\/code><\/pre>\n
    \u6216\u8005\u5141\u8bb8\u7279\u5b9aIP\u5730\u5740\u8bbf\u95ee\u7279\u5b9a\u7aef\u53e3\uff1a<\/p>\n
    sudo ufw allow from 192.168.1.100 to any port 22<\/code><\/pre>\n
    9. \u62d2\u7edd\u7279\u5b9aIP\u5730\u5740<\/h3>\n
    \u4f60\u53ef\u4ee5\u62d2\u7edd\u7279\u5b9aIP\u5730\u5740\u8bbf\u95ee\uff1a<\/p>\n
    sudo ufw deny from 192.168.1.200<\/code><\/pre>\n
    10. \u67e5\u770b\u65e5\u5fd7<\/h3>\n
    \u4f60\u53ef\u4ee5\u67e5\u770bufw<\/code>\u200b\u7684\u65e5\u5fd7\u4ee5\u76d1\u63a7\u9632\u706b\u5899\u6d3b\u52a8\uff1a<\/p>\n
    sudo ufw logging on\nsudo tail -f \/var\/log\/ufw.log<\/code><\/pre>\n
    \u200d<\/p>\n
    SSH<\/h2>\n
    \u5728Ubuntu\u4e0a\u5b89\u88c5SSH\uff08Secure Shell\uff09\u670d\u52a1\u975e\u5e38\u7b80\u5355\u3002\u4ee5\u4e0b\u662f\u5b89\u88c5\u548c\u914d\u7f6eSSH\u7684\u6b65\u9aa4\uff1a<\/p>\n
    \n
    1. \u5b89\u88c5SSH\u670d\u52a1\u5668<\/h3>\n
    \u9ed8\u8ba4\u60c5\u51b5\u4e0b\uff0cUbuntu\u53ef\u80fd\u6ca1\u6709\u5b89\u88c5SSH\u670d\u52a1\u5668\u3002\u4f60\u53ef\u4ee5\u901a\u8fc7\u4ee5\u4e0b\u547d\u4ee4\u5b89\u88c5\uff1a<\/p>\n
    sudo apt update\nsudo apt install openssh-server<\/code><\/pre>\n
    \n
    2. \u542f\u52a8SSH\u670d\u52a1<\/h3>\n
    \u5b89\u88c5\u5b8c\u6210\u540e\uff0cSSH\u670d\u52a1\u4f1a\u81ea\u52a8\u542f\u52a8\u3002\u4f60\u53ef\u4ee5\u901a\u8fc7\u4ee5\u4e0b\u547d\u4ee4\u68c0\u67e5SSH\u670d\u52a1\u7684\u72b6\u6001\uff1a<\/p>\n
    sudo systemctl status ssh<\/code><\/pre>\n
    \u5982\u679c\u670d\u52a1\u6ca1\u6709\u542f\u52a8\uff0c\u53ef\u4ee5\u4f7f\u7528\u4ee5\u4e0b\u547d\u4ee4\u624b\u52a8\u542f\u52a8\uff1a<\/p>\n
    sudo systemctl start ssh<\/code><\/pre>\n
    \n
    3. \u8bbe\u7f6eSSH\u670d\u52a1\u5f00\u673a\u81ea\u542f<\/h3>\n
    \u4e3a\u4e86\u786e\u4fddSSH\u670d\u52a1\u5728\u7cfb\u7edf\u91cd\u542f\u540e\u81ea\u52a8\u542f\u52a8\uff0c\u53ef\u4ee5\u8fd0\u884c\u4ee5\u4e0b\u547d\u4ee4\uff1a<\/p>\n
    sudo systemctl enable ssh<\/code><\/pre>\n
    \n
    4. \u914d\u7f6eSSH\uff08\u53ef\u9009\uff09<\/h3>\n
    SSH\u7684\u914d\u7f6e\u6587\u4ef6\u4f4d\u4e8e \/etc\/ssh\/sshd_config<\/code>\u200b\u3002\u4f60\u53ef\u4ee5\u7f16\u8f91\u6b64\u6587\u4ef6\u4ee5\u66f4\u6539\u9ed8\u8ba4\u8bbe\u7f6e\u3002\u4f8b\u5982\uff1a<\/p>\n
      \n
    • \n
      \u4fee\u6539SSH\u7aef\u53e3\uff08\u9ed8\u8ba4\u662f22\uff09\uff1a<\/p>\n
      sudo nano \/etc\/ssh\/sshd_config<\/code><\/pre>\n
      \u627e\u5230 Port 22<\/code>\u200b \u8fd9\u4e00\u884c\uff0c\u5c06\u5176\u4fee\u6539\u4e3a\u5176\u4ed6\u7aef\u53e3\u53f7\uff08\u5982 Port 2222<\/code>\u200b\uff09\uff0c\u7136\u540e\u4fdd\u5b58\u5e76\u9000\u51fa\u3002<\/p>\n<\/li>\n
    • \n
      \u7981\u7528root\u767b\u5f55\uff08\u589e\u5f3a\u5b89\u5168\u6027\uff09\uff1a<\/p>\n
      \u627e\u5230 PermitRootLogin yes<\/code>\u200b\uff0c\u5c06\u5176\u6539\u4e3a PermitRootLogin no<\/code>\u200b\u3002<\/p>\n<\/li>\n
    • \n
      \u9650\u5236\u5141\u8bb8\u767b\u5f55\u7684\u7528\u6237\uff1a<\/p>\n
      \u6dfb\u52a0\u4e00\u884c AllowUsers your_username<\/code>\u200b\uff0c\u53ea\u5141\u8bb8\u7279\u5b9a\u7528\u6237\u767b\u5f55\u3002<\/p>\n<\/li>\n<\/ul>\n
      \u4fee\u6539\u5b8c\u6210\u540e\uff0c\u91cd\u542fSSH\u670d\u52a1\u4ee5\u4f7f\u66f4\u6539\u751f\u6548\uff1a<\/p>\n
      sudo systemctl restart ssh<\/code><\/pre>\n
      \n
      5. \u5141\u8bb8SSH\u901a\u8fc7\u9632\u706b\u5899<\/h3>\n
      \u5982\u679c\u542f\u7528\u4e86ufw<\/code>\u200b\u9632\u706b\u5899\uff0c\u9700\u8981\u5141\u8bb8SSH\u7aef\u53e3\uff08\u9ed8\u8ba4\u662f22\uff09\u901a\u8fc7\u9632\u706b\u5899\uff1a<\/p>\n
      sudo ufw allow ssh<\/code><\/pre>\n
      \u5982\u679c\u4f60\u4fee\u6539\u4e86SSH\u7aef\u53e3\uff08\u4f8b\u5982\u6539\u4e3a2222\uff09\uff0c\u5219\u9700\u8981\u5141\u8bb8\u65b0\u7aef\u53e3\uff1a<\/p>\n
      sudo ufw allow 2222\/tcp<\/code><\/pre>\n
      \n
      6. \u8fde\u63a5\u5230SSH\u670d\u52a1\u5668<\/h3>\n
      \u5728\u53e6\u4e00\u53f0\u673a\u5668\u4e0a\uff0c\u4f60\u53ef\u4ee5\u4f7f\u7528\u4ee5\u4e0b\u547d\u4ee4\u8fde\u63a5\u5230SSH\u670d\u52a1\u5668\uff1a<\/p>\n
      ssh username@your_server_ip<\/code><\/pre>\n
      \u5982\u679c\u4fee\u6539\u4e86SSH\u7aef\u53e3\uff0c\u9700\u8981\u6307\u5b9a\u7aef\u53e3\u53f7\uff1a<\/p>\n
      ssh -p 2222 username@your_server_ip<\/code><\/pre>\n
      \n
      7. \u5378\u8f7dSSH\u670d\u52a1\u5668\uff08\u53ef\u9009\uff09<\/h3>\n
      \u5982\u679c\u4f60\u4e0d\u518d\u9700\u8981SSH\u670d\u52a1\u5668\uff0c\u53ef\u4ee5\u901a\u8fc7\u4ee5\u4e0b\u547d\u4ee4\u5378\u8f7d\uff1a<\/p>\n
      sudo apt remove openssh-server<\/code><\/pre>\n","protected":false},"excerpt":{"rendered":"
      Ubuntu\u521d\u59cb\u5316\u914d\u7f6e \u9632\u706b\u5899 1. \u68c0\u67e5ufw\u200b\u662f\u5426\u5df2\u5b89\u88c5 \u200bufw\u200b\u901a\u5e38\u5728Ubuntu\u4e2d\u9ed8\u8ba4\u5b89\u88c5\u3002\u4f60\u53ef\u4ee5\u901a\u8fc7\u4ee5\u4e0b\u547d\u4ee4\u68c0\u67e5\u662f\u5426\u5df2\u5b89\u88c5\uff1a sudo ufw status \u5982\u679c\u672a\u5b89\u88c5\uff0c\u53ef\u4ee5\u4f7f\u7528\u4ee5\u4e0b\u547d\u4ee4\u5b89\u88c5\uff1a sudo apt update sudo apt install ufw 2. \u542f\u7528ufw\u200b \u5982\u679cufw\u200b\u5c1a\u672a\u542f\u7528\uff0c\u53ef\u4ee5\u4f7f\u7528\u4ee5\u4e0b\u547d\u4ee4\u542f\u7528\u5b83\uff1a sudo ufw enable \u542f\u7528\u540e\uff0c\u9632\u706b\u5899\u5c06\u5f00\u59cb\u8fd0\u884c\uff0c\u5e76\u5728\u7cfb\u7edf\u542f\u52a8\u65f6\u81ea\u52a8\u542f\u7528\u3002 3. \u68c0\u67e5\u9632\u706b\u5899\u72b6\u6001 \u4f60\u53ef\u4ee5\u4f7f\u7528\u4ee5\u4e0b\u547d\u4ee4\u68c0\u67e5\u9632\u706b\u5899\u7684\u72b6\u6001\uff1a sudo ufw status verbose \u8fd9\u5c06\u663e\u793a\u5f53\u524d\u7684\u9632\u706b\u5899\u89c4\u5219\u548c\u72b6\u6001\u3002 4. \u5141\u8bb8\u6216\u62d2\u7edd\u7279\u5b9a\u7aef\u53e3\u6216\u670d\u52a1 \u4f60\u53ef\u4ee5\u4f7f\u7528ufw\u200b\u5141\u8bb8\u6216\u62d2\u7edd\u7279\u5b9a\u7684\u7aef\u53e3\u6216\u670d\u52a1\u3002\u4f8b\u5982\uff1a \u5141\u8bb8SSH\uff08\u9ed8\u8ba4\u7aef\u53e322\uff09\uff1a sudo ufw allow ssh \u6216\u8005\u76f4\u63a5\u6307\u5b9a\u7aef\u53e3\uff1a sudo ufw allow 22\/tcp \u5141\u8bb8HTTP\uff08\u7aef\u53e380\uff09\uff1a sudo ufw allow http \u6216\u8005\uff1a sudo ufw allow 80\/tcp \u5141\u8bb8HTTPS\uff08\u7aef\u53e3443\uff09\uff1a […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-295","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/solost.cn\/index.php?rest_route=\/wp\/v2\/posts\/295","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/solost.cn\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/solost.cn\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/solost.cn\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/solost.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=295"}],"version-history":[{"count":0,"href":"https:\/\/solost.cn\/index.php?rest_route=\/wp\/v2\/posts\/295\/revisions"}],"wp:attachment":[{"href":"https:\/\/solost.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=295"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/solost.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=295"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/solost.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=295"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}