使用Nginx制作内网yum镜像代理
使用Nginx制作内网yum镜像代理
[TOC]
1. 背景
公司内网服务器不能直接通过Internet上网，但为了与外网通信和同步时间等，会指定那么几台服务器可以访问Internet。这里就是通过能上网的机器作为代理，制作内网使用的yum仓库。
2. 环境需求
- 内网dns（推荐，非必须，因为可使用IP代替）
- 一台能上Internet的服务器A
- 不能上Internet的服务器能与A服务器通信
- 这里示例为CentOS7和Ubuntu16
3. Nginx安装配置
Nginx安装在能上网的A服务器上，安装过程略。
具体一个nginx server配置如下：
|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 |
# mirrors server { listen 80; #listen [::]:80; server_name mirrors.yourdomain.com; index index.html index.htm index.php default.html default.htm default.php; root /home/wwwroot/html; location /ubuntu/ { proxy_pass http://mirrors.aliyun.com/ubuntu/ ; } location /centos/ { proxy_pass http://mirrors.aliyun.com/centos/ ; } location /epel/ { proxy_pass http://mirrors.aliyun.com/epel/ ; } } |
以上使用阿里云镜像，其镜像版本很全，速度也很快。
http://mirrors.aliyun.com/
CentOS7系统镜像源：
cat /etc/yum.repos.d/CentOS-7.repo
|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 |
[base] name=CentOS-$releasever - Base - mirrors.yourdomain.com failovermethod=priority baseurl=http://mirrors.yourdomain.com/centos/$releasever/os/$basearch/ http://mirrors.yourdomain.com/centos/$releasever/os/$basearch/ #mirrorlist=http://mirrorlist.centos.org/?release=$releasever&arch=$basearch&repo=os gpgcheck=1 gpgkey=http://mirrors.yourdomain.com/centos/RPM-GPG-KEY-CentOS-7 #released updates [updates] name=CentOS-$releasever - Updates - mirrors.yourdomain.com failovermethod=priority baseurl=http://mirrors.yourdomain.com/centos/$releasever/updates/$basearch/ http://mirrors.yourdomain.com/centos/$releasever/updates/$basearch/ #mirrorlist=http://mirrorlist.centos.org/?release=$releasever&arch=$basearch&repo=updates gpgcheck=1 gpgkey=http://mirrors.yourdomain.com/centos/RPM-GPG-KEY-CentOS-7 #additional packages that may be useful [extras] name=CentOS-$releasever - Extras - mirrors.yourdomain.com failovermethod=priority baseurl=http://mirrors.yourdomain.com/centos/$releasever/extras/$basearch/ http://mirrors.yourdomain.com/centos/$releasever/extras/$basearch/ #mirrorlist=http://mirrorlist.centos.org/?release=$releasever&arch=$basearch&repo=extras gpgcheck=1 gpgkey=http://mirrors.yourdomain.com/centos/RPM-GPG-KEY-CentOS-7 #additional packages that extend functionality of existing packages [centosplus] name=CentOS-$releasever - Plus - mirrors.yourdomain.com failovermethod=priority baseurl=http://mirrors.yourdomain.com/centos/$releasever/centosplus/$basearch/ http://mirrors.yourdomain.com/centos/$releasever/centosplus/$basearch/ #mirrorlist=http://mirrorlist.centos.org/?release=$releasever&arch=$basearch&repo=centosplus gpgcheck=1 enabled=0 gpgkey=http://mirrors.yourdomain.com/centos/RPM-GPG-KEY-CentOS-7 #contrib - packages by Centos Users [contrib] name=CentOS-$releasever - Contrib - mirrors.yourdomain.com failovermethod=priority baseurl=http://mirrors.yourdomain.com/centos/$releasever/contrib/$basearch/ http://mirrors.yourdomain.com/centos/$releasever/contrib/$basearch/ #mirrorlist=http://mirrorlist.centos.org/?release=$releasever&arch=$basearch&repo=contrib gpgcheck=1 enabled=0 gpgkey=http://mirrors.yourdomain.com/centos/RPM-GPG-KEY-CentOS-7 |
EPEL第三方扩展源：
cat /etc/yum.repos.d/epel.repo
|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 |
[epel] name=Extra Packages for Enterprise Linux 7 - $basearch baseurl=http://mirrors.yourdomain.com/epel/7/$basearch failovermethod=priority enabled=1 gpgcheck=1 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL-7 [epel-debuginfo] name=Extra Packages for Enterprise Linux 7 - $basearch - Debug baseurl=http://download.yourdomain.com/epel/7/$basearch/debug failovermethod=priority enabled=0 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL-7 gpgcheck=1 [epel-source] name=Extra Packages for Enterprise Linux 7 - $basearch - Source baseurl=http://download.yourdomain.com/epel/7/SRPMS failovermethod=priority enabled=0 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL-7 |
Ubuntu16 apt镜像源：
cat /etc/apt/sources.list
|
1 2 3 4 5 6 7 8 9 10 11 |
deb http://mirrors.yourdomain.com/ubuntu/ xenial main restricted universe multiverse deb http://mirrors.yourdomain.com/ubuntu/ xenial-security main restricted universe multiverse deb http://mirrors.yourdomain.com/ubuntu/ xenial-updates main restricted universe multiverse deb http://mirrors.yourdomain.com/ubuntu/ xenial-proposed main restricted universe multiverse deb http://mirrors.yourdomain.com/ubuntu/ xenial-backports main restricted universe multiverse deb-src http://mirrors.yourdomain.com/ubuntu/ xenial main restricted universe multiverse deb-src http://mirrors.yourdomain.com/ubuntu/ xenial-security main restricted universe multiverse deb-src http://mirrors.yourdomain.com/ubuntu/ xenial-updates main restricted universe multiverse deb-src http://mirrors.yourdomain.com/ubuntu/ xenial-proposed main restricted universe multiverse deb-src http://mirrors.yourdomain.com/ubuntu/ xenial-backports main restricted universe multiverse |
微信扫描下方的二维码阅读本文
