LJKのBlog

s/要查找的内容/替换为的内容/修饰符

# 要查找的内容：可使用正则
# 替换为的内容：不能使用正则，但可以使用\1, \2, ...等后向引用符号；还可以使用“&”引用前面查找时查找到的整个内容
# 修饰符
# 	i 	忽略大小写
# 	g 	全局替换
# 	gc 	全局替换, 每次替换前询问

100iwang [ESC]

cut [OPTION]... [FILE]...

[19:22:09 root@centos7 data]#cut -d : -f1-3 --output-delimiter=. passwd   
root.x.0
bin.x.1
daemon.x.2
adm.x.3
lp.x.4
sync.x.5
shutdown.x.6
halt.x.7
mail.x.8
operator.x.11
games.x.12
ftp.x.14
nobody.x.99
systemd-network.x.192
dbus.x.81
polkitd.x.999
sshd.x.74
postfix.x.89
lujinkai.x.1000
test.x.1001
test2.x.1002
gentoo.x.1003
tomcat.x.1004
mysql.x.1005
[14:49:02 root@centos7 data]#cut -c1-3 passwd  
roo
bin
dae
adm
lp:
syn
shu
hal
mai
ope
gam
ftp
nob
sys
dbu
pol
ssh
pos
luj
tes
tes
gen
tom
mys

paste [OPTION]... [FILE]...

[21:18:38 root@centos7 data]#cat /etc/passwd | sort -n -t: -k 3    
root:x:0:0:root:/root:/bin/bash
bin:x:1:1:bin:/bin:/sbin/nologin
daemon:x:2:2:daemon:/sbin:/sbin/nologin
adm:x:3:4:adm:/var/adm:/sbin/nologin
lp:x:4:7:lp:/var/spool/lpd:/sbin/nologin
sync:x:5:0:sync:/sbin:/bin/sync
shutdown:x:6:0:shutdown:/sbin:/sbin/shutdown
halt:x:7:0:halt:/sbin:/sbin/halt
mail:x:8:12:mail:/var/spool/mail:/sbin/nologin
operator:x:11:0:operator:/root:/sbin/nologin
games:x:12:100:games:/usr/games:/sbin/nologin
ftp:x:14:50:FTP User:/var/ftp:/sbin/nologin
sshd:x:74:74:Privilege-separated SSH:/var/empty/sshd:/sbin/nologin
dbus:x:81:81:System message bus:/:/sbin/nologin
postfix:x:89:89::/var/spool/postfix:/sbin/nologin
nobody:x:99:99:Nobody:/:/sbin/nologin
systemd-network:x:192:192:systemd Network Management:/:/sbin/nologin
polkitd:x:999:998:User for polkitd:/:/sbin/nologin
lujinkai:x:1000:1000:lujinkai:/home/lujinkai:/bin/bash
test:x:1001:1001::/home/test:/bin/bash
test2:x:1002:1002::/home/test2:/bin/bash
gentoo:x:1003:1003:Gentoo Distribution:/home/gentoo:/bin/csh
tomcat:x:1004:1006::/home/tomcat:/sbin/nologin
mysql:x:1005:1009::/home/mysql:/bin/bash

uniq [OPTION]... [FILE]...

sort userlist.txt | uniq -c	

diff -u foo.conf foo2.conf > foo.patch
patch -b foo.conf foo.patch

[root@47105171233 wwwlogs]# cut -d' ' -f1 lujinkai.cn_nginx.log | sort -t' ' -k1 | uniq -c | sort -nr | head -n10       
    276 112.64.64.36
    186 183.136.190.62
    184 112.64.64.47
    184 112.64.64.40
    184 112.64.64.33
    121 176.9.32.203
     94 47.92.207.41
     92 112.64.64.43
     92 112.64.64.39
     92 112.64.64.35

apt update
apt-get install python3 –y

[root@k8s-master1 ~]$apt-get install git python3-pip -y
# 优化pip
[root@k8s-master1 ~]$vim ~/.pip/pip.conf		# 没有就创建
[global]
index-url = https://mirrors.aliyun.com/pypi/simple/

[install]
trusted-host=mirrors.aliyun.com

[root@k8s-master1 ~]$pip3 install ansible		# 这一步时间很长，建议更改为阿里的pip源

function ssh_push_key() {
    ips=(
        10.0.1.2
        10.0.1.3
        10.0.1.4
        10.0.2.1
        10.0.2.2
        10.0.2.3
    )
    [ "$1" ] && ips=($@)
    apt install -y sshpass
    [ -f ~/.ssh/id_rsa ] || ssh-keygen -t rsa -f ~/.ssh/id_rsa -P '' >/dev/null 2>&1
    export SSHPASS=ljkk
    for ip in ${ips[@]}; do
        (
            timeout 5 ssh $ip echo "$ip: SSH has passwordless access!"
            if [ $? != 0 ]; then
                sshpass -e ssh-copy-id -o StrictHostKeyChecking=no root@$ip >/dev/null 2>&1
                timeout 5 ssh $ip echo "$ip: SSH has passwordless access!" || echo "$ip: SSH has no passwordless access!"
            fi
        ) &
    done
    wait
}
ssh_push_key

# 安装
$apt install keepalived -y
$vim /etc/keepalived/keepalived.conf
global_defs {
    router_id keepalived1
    vrrp_skip_check_adv_addr
    vrrp_garp_interval 0
    vrrp_gna_interval 0
    vrrp_mcast_group4 224.0.0.18
}

vrrp_instance VI_1 {
    state MASTER
    interface eth0
    virtual_router_id 1		# 另一个keepalived设置为2
    priority 100			# 另一个keepalived设置为120
    advert_int 1
    authentication {
        auth_type PASS
        auth_pass 123456
    }
    virtual_ipaddress {
        10.0.2.188 dev eth0 label eth0:0
    }
}
$systemctl restart keepalived.service

# 编译安装lua，过程略...
# 编译安装haproxy
$wget http://www.haproxy.org/download/2.2/src/haproxy-2.2.6.tar.gz
$apt install make gcc build-essential libssl-dev zlib1g-dev libpcre3 libpcre3-dev libsystemd-dev libreadline-dev -y
$useradd -r -s /sbin/nologin -d /var/lib/haproxy haproxy
$mkdir /usr/local/haproxy
$tar zxvf haproxy-2.2.6.tar.gz
$cd haproxy-2.2.6/
$make ARCH=x86_64 TARGET=linux-glibc USE_PCRE=1 USE_OPENSSL=1 USE_ZLIB=1 USE_SYSTEMD=1 USE_LUA=1 LUA_INC=/usr/local/lua/src/ LUA_LIB=/usr/local/lua/src/
$make install PREFIX=/usr/local/haproxy
$vim /etc/profile	# export PATH=/usr/local/haproxy/sbin:$PATH
$. /etc/profile
$haproxy -v
$haproxy -V
$haproxy -vv

# 配置文件
$mkdir /var/lib/haproxy
$mkdir /etc/haproxy
$vim /etc/haproxy/haproxy.cfg
global
    chroot /usr/local/haproxy
    stats socket /var/lib/haproxy/haproxy.sock mode 600 level admin
    user haproxy
    group haproxy
    daemon
    nbproc 1
    maxconn 100000
    pidfile /var/lib/haproxy/haproxy.pid

defaults
    option redispatch
    option abortonclose
    option http-keep-alive
    option forwardfor
    maxconn 100000
    mode http
    timeout connect 120s
    timeout server 120s
    timeout client 120s
    timeout check 5s

listen stats
    stats enable
    mode http
    bind 0.0.0.0:9999
    log global
    stats uri /haproxy-status
    stats auth admin:123456

listen k8s-api-8443
    bind 10.0.2.188:6443
    mode tcp 
    server master1 10.0.2.1:8443 check inter 2000 fall 3 rise 5
    server master2 10.0.2.2:8443 check inter 2000 fall 3 rise 5

# 启动文件
$mkdir /etc/haproxy/conf.d/
$vim /lib/systemd/system/haproxy.service
[Unit]
Description=HAProxy Load Balancer
After=syslog.target network.target

[Service]
ExecStartPre=/usr/local/haproxy/sbin/haproxy -f /etc/haproxy/haproxy.cfg -f /etc/haproxy/conf.d/ -c -q
ExecStart=/usr/local/haproxy/sbin/haproxy -Ws -f /etc/haproxy/haproxy.cfg -f /etc/haproxy/conf.d/ -p /var/lib/haproxy/haproxy.pid
ExecReload=/bin/kill -USR2 $MAINPID

[Install]
WantedBy=multi-user.target

$systemctl start haproxy.service 

$export release=2.2.4
$curl -C- -fLO --retry 3 https://github.com/easzlab/kubeasz/releases/download/${release}/easzup
$chmod +x ./easzup
# 使用工具脚本下载
$./easzup -D

cd /etc/ansible
cp example/hosts.multi-node hosts

# 'etcd' cluster should have odd member(s) (1,3,5,...)
# variable 'NODE_NAME' is the distinct name of a member in 'etcd' cluster
[etcd]
10.0.2.1 NODE_NAME=etcd1
10.0.2.2 NODE_NAME=etcd2
10.0.2.3 NODE_NAME=etcd3

# master node(s)
[kube-master]
10.0.1.1
10.0.1.2

# work node(s)
[kube-node]
10.0.1.3
#10.0.1.4

# [optional] harbor server, a private docker registry
# 'NEW_INSTALL': 'yes' to install a harbor server; 'no' to integrate with existed one
# 'SELF_SIGNED_CERT': 'no' you need put files of certificates named harbor.pem and harbor-key.pem in directory 'down'
[harbor]
#192.168.1.8 HARBOR_DOMAIN="harbor.yourdomain.com" NEW_INSTALL=no SELF_SIGNED_CERT=yes

# [optional] loadbalance for accessing k8s from outside
[ex-lb]
10.0.2.1 LB_ROLE=backup EX_APISERVER_VIP=10.0.2.188 EX_APISERVER_PORT=8443
10.0.2.2 LB_ROLE=master EX_APISERVER_VIP=10.0.2.188 EX_APISERVER_PORT=8443

# [optional] ntp server for the cluster
[chrony]
#192.168.1.1

[all:vars]
# --------- Main Variables ---------------
# Cluster container-runtime supported: docker, containerd
CONTAINER_RUNTIME="docker"

# Network plugins supported: calico, flannel, kube-router, cilium, kube-ovn
CLUSTER_NETWORK="calico"

# Service proxy mode of kube-proxy: 'iptables' or 'ipvs'
PROXY_MODE="ipvs"

# K8S Service CIDR, not overlap with node(host) networking
SERVICE_CIDR="192.168.0.0/16"

# Cluster CIDR (Pod CIDR), not overlap with node(host) networking
CLUSTER_CIDR="10.10.0.0/16"

# NodePort Range
NODE_PORT_RANGE="30000-60000"

# Cluster DNS Domain
CLUSTER_DNS_DOMAIN="ljk.local."

# -------- Additional Variables (don't change the default value right now) ---
# Binaries Directory
bin_dir="/usr/local/bin"

# CA and other components cert/key Directory
ca_dir="/etc/kubernetes/ssl"

# Deploy Directory (kubeasz workspace)
base_dir="/etc/ansible"

$ansible all -m ping    
[WARNING]: Invalid characters were found in group names but not replaced, use -vvvv to see details		# 这个警告是因为[kube-master]、[kube-node]、[ex-lb]组名有非法字符 “-”
10.0.1.2 | SUCCESS => {
    "ansible_facts": {
        "discovered_interpreter_python": "/usr/bin/python3"
    },
    "changed": false,
    "ping": "pong"
}
10.0.2.2 | SUCCESS => {
    "ansible_facts": {
        "discovered_interpreter_python": "/usr/bin/python3"
    },
    "changed": false,
    "ping": "pong"
}
10.0.2.3 | SUCCESS => {
    "ansible_facts": {
        "discovered_interpreter_python": "/usr/bin/python3"
    },
    "changed": false,
    "ping": "pong"
}
10.0.2.1 | SUCCESS => {
    "ansible_facts": {
        "discovered_interpreter_python": "/usr/bin/python3"
    },
    "changed": false,
    "ping": "pong"
}
10.0.1.1 | SUCCESS => {
    "ansible_facts": {
        "discovered_interpreter_python": "/usr/bin/python3"
    },
    "changed": false,
    "ping": "pong"
}
10.0.1.3 | SUCCESS => {
    "ansible_facts": {
        "discovered_interpreter_python": "/usr/bin/python3"
    },
    "changed": false,
    "ping": "pong"
}
10.0.1.4 | SUCCESS => {
    "ansible_facts": {
        "discovered_interpreter_python": "/usr/bin/python3"
    },
    "changed": false,
    "ping": "pong"
}

kubectl [command] [TYPE] [NAME] [flags]

kubectl get pod pod1
kubectl get pods pod1
kubectl get po pod1

# 类型相同的资源 TYPE1 name1 name2 name3...
kubectl get pod example-pod1 example-pod2
# 多个资源类型 TYPE1/name1 TYPE1/name2 TYPE2/name3 ...
kubectl get pod/example-pod1 replicationcontroller/example-rc1
# 用一个或多个文件指定资源 -f file1 -f file2 -f file3...
kubectl get -f ./pod.yaml

create        # Create a resource from a file or from stdin.
expose        # Take a replication controller, service, deployment or pod and expose it as a new Kubernetes Service
run           # Run a particular image on the cluster
set           # Set specific features on objects
explain       # 资源的详细信息
get           # 显示一个或多个资源
edit          # Edit a resource on the server
delete        # Delete resources by filenames, stdin, resources and names, or by resources and label selector

kubectl get
[(-o|--output=)json|yaml|wide|custom-columns=...|custom-columns-file=...|go-template=...|go-template-file=...|jsonpath=...|jsonpath-file=...]
(TYPE[.VERSION][.GROUP] [NAME | -l label] | TYPE[.VERSION][.GROUP]/NAME ...) [flags] [options]

rollout       Manage the rollout of a resource
scale         Set a new size for a Deployment, ReplicaSet or Replication Controller
autoscale     Auto-scale a Deployment, ReplicaSet, or ReplicationController

certificate   Modify certificate resources.
cluster-info  Display cluster info
top           Display Resource (CPU/Memory/Storage) usage.
cordon        Mark node as unschedulable
uncordon      Mark node as schedulable
drain         Drain node in preparation for maintenance
taint         Update the taints on one or more nodes

describe      Show details of a specific resource or group of resources
logs          Print the logs for a container in a pod
attach        Attach to a running container
exec          Execute a command in a container
port-forward  Forward one or more local ports to a pod
proxy         Run a proxy to the Kubernetes API server
cp            Copy files and directories to and from containers.
auth          Inspect authorization
debug         Create debugging sessions for troubleshooting workloads and nodes

diff          Diff live version against would-be applied version
apply         Apply a configuration to a resource by filename or stdin
patch         Update field(s) of a resource
replace       Replace a resource by filename or stdin
wait          Experimental: Wait for a specific condition on one or many resources.
kustomize     Build a kustomization target from a directory or a remote url.

label         Update the labels on a resource
annotate      Update the annotations on a resource
completion    Output shell completion code for the specified shell (bash or zsh)

api-resources Print the supported API resources on the server
api-versions  Print the supported API versions on the server, in the form of "group/version"
config        Modify kubeconfig files
plugin        Provides utilities for interacting with plugins.
version       Print the client and server version information

kubectl [command] [TYPE] [NAME] -o <output_format>

kubectl [command] [TYPE] [NAME] --sort-by=<jsonpath_exp>

kubectl api-resources

kubeadm [command] [flags]

alpha           # kubeadm 处于测试阶段的命令，尽量不要用，`kubeadm alpha --help`查看有哪些命令
certs           # 处理kubernetes证书
completion      # bash 命令补全，需要安装 bash-completion
config          # 管理 kubeadm 集群的配置，该配置保留在集群的 ConfigMap 中
help            # Help about any command
init            # 设置一个Kubernetes控制平面
join            # 将节点加入到k8s集群
reset           # 还原使用`kubeadm init`或者`kubeadm join`对系统产生的环境变化
token           # 管理 token
upgrade         # 升级 k8s 版本
version         # 查看版本信息

--add-dir-header	# 如果为true，则将文件目录添加到日志消息的头部
-h, --help		
--log-file string	# 如果非空，则使用此日志文件
--log-file-max-size uint	# 定义日志文件可以增长到的最大大小。单位是字节。当该值为0时，表示不限制文件的最大大小。1800(默认)
--one-output		# 如果为真，则只将日志写入其本机的严重级别(vs也写入每个较低的严重级别)
--rootfs string		# 到“真实的”主机根文件系统的路径。
--skip-headers		# 如果为true，则避免在日志消息中使用头前缀
--skip-log-headers	# 如果为true，在打开日志文件时避免头文件
-v, --v Level		# 日志级别详细程度的编号

yum install bash-completion -y
touch /etc/profile.d/kubeadm_completion.sh
kubeadm completion bash > /etc/profile.d/kubeadm_completion.sh
exit	# 重新登录终端

[root@master01 ~]$kubeadm 	# tab键就会出现命令提示
alpha  certs  completion  config  help  init  join  reset  token  upgrade  version 

kubeadm init [command]
kubeadm init [flags]

phase	# 使用此命令调用init工作流的单个阶段

kubeadm init phase [command]
# command：
addon              # Install required addons for passing Conformance tests
bootstrap-token    # Generates bootstrap tokens used to join a node to a cluster
certs              # Certificate generation
control-plane      # 生成建立控制平面所需的所有静态pod清单文件
etcd               # Generate static Pod manifest file for local etcd
kubeconfig         # 生成建立控制平面所需的所有kubeconfig文件和管理kubeconfig文件
kubelet-finalize   # Updates settings relevant to the kubelet after TLS bootstrap
kubelet-start      #　Write kubelet settings and (re)start the kubelet
mark-control-plane # Mark a node as a control-plane
preflight          # Run pre-flight checks
upload-certs       # Upload certificates to kubeadm-certs
upload-config      # Upload the kubeadm and kubelet configuration to a ConfigMap

# 每个命令都可以使用--help查询帮助，例如：`kubeadm init phase addon --help`

★ --apiserver-advertise-address string	# K8S API Server 将要监听的监听的 IP 地址，设置为master的IP，默认自动探测
★ --apiserver-bind-port int32	# API Server 绑定的端口,默认为 6443
--apiserver-cert-extra-sans strings	# 可选的证书额外信息，用于指定 API Server 的服务器证书。可以是 IP 地址也可以是 DNS 名称
--cert-dir string	# 证书的存储路径，缺省路径为 /etc/kubernetes/pki
--certificate-key string	# 定义一个用于加密 kubeadm-certs Secret 中的控制平台证书的密钥
--config string	# kubeadm 配置文件的路径
★ --control-plane-endpoint string	# 为控制平面指定一个稳定的 IP 地址或 DNS 名称，即配置一个可以长期使用且是高可用的 VIP 或者域名，k8s 多 master 高可用基于此参数实现
--cri-socket string	# 要连接的 CRI（容器运行时接口：Container Runtime Interface）套接字的路径。如果为空，则 kubeadm 将尝试自动检测此值；仅当安装了多个 CRI 或具有非标准 CRI 插槽时，才使用此选项
--dry-run	# 不要应用任何更改；只是输出将要执行的操作，其实就是测试运行
--experimental-patches string	# 用于存储 kustomize 为静态 pod 清单所提供的补丁的路径
--feature-gates string	# 一组用来描述各种功能特性的键值（key=value）对。选项是：IPv6DualStack=true|false (ALPHA - default=false)
--ignore-preflight-errors strings	# 可以忽略检查过程 中出现的错误信息，比如忽略 swap，如果为 all 就忽略所有
★ --image-repository string	# 设置用于拉取控制平面镜像的容器仓库，默认为 k8s.gcr.io
★ --kubernetes-version string	# 为控制平面选择一个特定的 Kubernetes 版本，默认为 stable-1
--node-name string	# 指定master节点的名称，默认使用hostname
★ --pod-network-cidr string	# 设置 pod ip 地址范围， control plane 会自动将 网络发布到其他节点的node，让其上启动的容器使用此网络，flannel插件的默认值是 10.244.0.0/16
★ --service-cidr string	# 指定service 的IP 范围. (default "10.96.0.0/12")
--service-dns-domain string	# 指定 service 的 dns 后缀, e.g. "myorg.internal". (default "cluster.local")
--skip-certificate-key-	# 不打印 control-plane 用于加密证书的key.
--skip-phases strings	# 跳过指定的阶段（phase）
--skip-token-print	# 不打印 kubeadm init 生成的 default bootstrap token 
--token string	# 指定 node 和control plane 之间，简历双向认证的token ，格式为 [a-z0-9]{6}\.[a-z0-9]{16} - e.g. abcdef.0123456789abcdef
 --token-ttl duration	# token 自动删除的时间间隔。 (e.g. 1s, 2m, 3h). 如果设置为 '0', token 永不过期 (default 24h0m0s)
 --upload-certs	# 上传 control-plane 证书到 kubeadm-certs Secret

# 多控制平面（多个master节点）
# 多个master通过HAProxy配置的负载均衡，再通过keepalived配置HAProxy的高可用，假设VIP为 10.0.0.1/24
kubeadm init --apiserver-advertise-address=10.0.0.71 \
	--control-plane-endpoint=10.0.0.1 \
	--apiserver-bind-port=6443 \
	--kubernetes-version=v1.20.2 \
	--pod-network-cidr=10.244.0.0/16 \
	--service-cidr=10.10.0.0/16 \
	--image-repository=registry.aliyuncs.com/google_containers

# 单控制平面（一个master节点）
# 对于单控制平面，controller-plane-endpoint默认同apiserver-advertise-address
kubeadm init --apiserver-advertise-address=10.0.0.71 \
	--apiserver-bind-port=6443 \
	--kubernetes-version=v1.20.2 \
	--pod-network-cidr=10.244.0.0/16 \
	--service-cidr=10.10.0.0/16 \
	--image-repository=registry.aliyuncs.com/google_containers

kubeadm join [api-server-endpoint] [flags]
kubeadm join [command]

phase	# 使用此命令可以调用连接工作流的单个阶段

kubeadm certs [command]

certificate-key		# 生成证书密钥
check-expiration	# 检查Kubernetes集群的证书过期情况
generate-csr		# 生成密钥和证书签名请求
renew				# 为Kubernetes集群更新证书

kubeadm certs check-expiration [flags]
# flags：
--cert-dir string
--config string
--kubeconfig string

kubeadm certs generate-csr [flags]
# flags：
--cert-dir string
--config string
--kubeconfig-dir string

kubeadm certs renew [command]
# command：
admin.conf					# 更新嵌入在kubeconfig文件中的证书，供管理员和kubeadm本身使用
all							# 续期所有可用证书
apiserver					# 更新服务Kubernetes API的证书
apiserver-etcd-client		# 更新apiserver访问etcd时使用的证书
apiserver-kubelet-client 	# 更新证书以便API服务器连接到kubelet
controller-manager.conf  	# 更新嵌入在kubeconfig文件中的证书，以便控制器管理器使用
etcd-healthcheck-client  	# 将活动探测的证书更新到healthcheck etcd
etcd-peer					# 为etcd节点之间的通信更新证书
etcd-server					# 续证供etcd使用
front-proxy-client			# 更新前端代理客户端证书
scheduler.conf				# 更新kubeconfig文件中嵌入的证书，以便调度器管理器使用

# 每个命令都可以使用 --help 查询帮助，例如：`kubeadm certs renew admin.conf --help`

kubeadm config [command]
kubeadm config [flags]

images	# 与kubeadm使用的容器镜像交互
migrate # 将本地旧版本的配置对象转换为最新支持的版本，而无需变更集群中的任何内容
print   # 打印对象

kubeadm config images [command]	[flags]
# command：
list	# 打印 kubeadm 要使用的镜像列表。配置文件用于自定义任何镜像或镜像存储库。
pull	# 拉取 kubeadm 使用的镜像

kubeadm config images list [flags]
# flags
--allow-missing-template-keys
--config string
-o, --experimental-output string
--feature-gates string
--image-repository string
--kubernetes-version string

kubeadm config images pull [flags]
# flags
--config string					# kubeadm 配置文件的路径
--cri-socket string
--feature-gates string
--image-repository string
--kubernetes-version string

kubeadm config migrate [flags]
# flags：
--new-config string		# 使用新的 API 版本生成的 kubeadm 配置文件的路径。默认输出到stdout。
--old-config string		# 使用旧 API 版本且应转换的 kubeadm 配置文件的路径。此参数是必需的

kubeadm config print [command]
# command：
init-defaults	# 打印默认的初始化配置，可以用于`kubeadm init`
join-defaults	# 打印默认连接配置，可以用于`kubeadm join`

kubeadm config print init-defaults [flags]
kubeadm config print join-defaults [flags]
# flags
--component-configs strings

--kubeconfig string		# 与集群通信时要使用的kubeconfig文件。(默认/etc/kubernetes/admin.conf)

preflight              Run reset pre-flight checks
update-cluster-status  Remove this node from the ClusterStatus object.
remove-etcd-member     Remove a local etcd member.
cleanup-node           Run cleanup node.

kubeadm reset [command]
kubeadm reset [flags]

phase	# 调用重置工作流的单个阶段

kubeadm reset phase [command]
# command
cleanup-node          # Run cleanup node.
preflight             # Run reset pre-flight checks
remove-etcd-member    # Remove a local etcd member.
update-cluster-status # Remove this node from the ClusterStatus object.

--cert-dir string	# 存储证书的目录路径。需要清空此目录。默认"/etc/kubernetes/pki"
--cri-socket string	# 要连接的 CRI 套接字的路径。如果为空，则 kubeadm 将尝试自动检测此值；仅当安装了多个CRI 或具有非标准 CRI 插槽时，才使用此选项
-f, --force	# 	在不提示确认的情况下重置节点
--ignore-preflight-errors strings	# 忽略检查过程中出现的错误信息，比如swap，如果为all就忽略所有
--kubeconfig string	# 与集群通信时使用的 kubeconfig 文件，默认 /etc/kubernetes/admin.conf
--skip-phases strings	# 要跳过的阶段列表，四个阶段

# 生成新 token
$kubeadm token create --print-join-command 
kubeadm join 10.0.0.171:6443 --token mud4vy.ygs3zdmuz6rwggrt     --discovery-token-ca-cert-hash sha256:83da17177796380c6038dd8a76bc7050fd9c3c6b55d53a7f7a652817cc73c8e6 
# 查看目前有效的token
$kubeadm token list 
TOKEN                     TTL         EXPIRES                     USAGES                   DESCRIPTION                                                EXTRA GROUPS
mud4vy.ygs3zdmuz6rwggrt   23h         2021-01-23T23:46:03+08:00   authentication,signing   <none>                                                     system:bootstrappers:kubeadm:default-node-token
# 查看 hash
$openssl x509 -pubkey -in /etc/kubernetes/pki/ca.crt | openssl rsa -pubin -outform der 2>/dev/null | openssl dgst -sha256 -hex | sed 's/^.* //'
83da17177796380c6038dd8a76bc7050fd9c3c6b55d53a7f7a652817cc73c8e6

yum install -y yum-utils device-mapper-persistent-data lvm2
yum-config-manager --add-repo https://mirrors.aliyun.com/docker-ce/linux/centos/docker-ce.repo
yum makecache fast
yum list docker-ce.x86_64 --showduplicates | sort -r	# 搜索可用版本
yum install -y docker-ce-19.03.9	# 安装指定版本
# 加速 和 优化
mkdir -p /etc/docker
tee /etc/docker/daemon.json <<-'EOF'
{
  "registry-mirrors": ["https://3417nt4m.mirror.aliyuncs.com"],
  "exec-opts":["native.cgroupdriver=systemd"]
}
EOF
systemctl enable --now docker.service

cat <<EOF > /etc/yum.repos.d/kubernetes.repo
[kubernetes]
name=Kubernetes
baseurl=https://mirrors.aliyun.com/kubernetes/yum/repos/kubernetes-el7-x86_64/
enabled=1
gpgcheck=1
repo_gpgcheck=1
gpgkey=https://mirrors.aliyun.com/kubernetes/yum/doc/yum-key.gpg https://mirrors.aliyun.com/kubernetes/yum/doc/rpm-package-key.gpg
EOF
setenforce 0
yum install -y kubelet kubeadm kubectl
systemctl enable --now kubelet

# cat /etc/hosts
...
10.0.0.71 master01.ljk.cn
10.0.0.72 node01.ljk.cn
10.0.0.73 node02.ljk.cn

# 提前下载组件镜像，这一步可以不用执行，init的时候会自动下载，但是下载时间一般很长，最好还是提前下载
kubeadm config images pull --image-repository=registry.aliyuncs.com/google_containers --kubernetes-version=v1.20.2
# 预检查一下，出现问题则修复
[root@master01 docker]$kubeadm init phase preflight   

# 方式一
[root@master01 ~]$kubeadm init --apiserver-advertise-address=10.0.0.71 \
	--apiserver-bind-port=6443 \
	--kubernetes-version=v1.20.2 \
	--pod-network-cidr=10.244.0.0/16 \
	--service-cidr=10.10.0.0/16 \
	--image-repository=registry.aliyuncs.com/google_containers \
	--ignore-preflight-errors=NumCPU	# 学习环境，忽略cpu数量的检查

# 方式二
[root@master01 ~]$kubeadm config print init-defaults > /etc/kubernetes/kubeadmin-init.yaml
# 修改advertiseAddress、imageRepository、kubernetesVersion、dnsDomain、serviceSubnet
[root@master01 ~]$cat /etc/kubernetes/kubeadmin-init.yaml
apiVersion: kubeadm.k8s.io/v1beta2
bootstrapTokens:
- groups:
  - system:bootstrappers:kubeadm:default-node-token
  token: abcdef.0123456789abcdef
  ttl: 24h0m0s
  usages:
  - signing
  - authentication
kind: InitConfiguration
localAPIEndpoint:
  advertiseAddress: 10.0.0.71
  bindPort: 6443
nodeRegistration:
  criSocket: /var/run/dockershim.sock
  name: master01.ljk.cn
  taints:
  - effect: NoSchedule
    key: node-role.kubernetes.io/master
---
apiServer:
  timeoutForControlPlane: 4m0s
apiVersion: kubeadm.k8s.io/v1beta2
certificatesDir: /etc/kubernetes/pki
clusterName: kubernetes
#controlPlaneEndpoint: 10.0.0.1:6443 #多控制平面开启此项，基于 VIP 的 Endpoint
controllerManager: {}
dns:
  type: CoreDNS
etcd:
  local:
    dataDir: /var/lib/etcd
imageRepository: registry.aliyuncs.com/google_containers
kind: ClusterConfiguration
kubernetesVersion: v1.20.2
networking:
  dnsDomain: ljk.local
  podSubnet: 10.244.0.0/16
  serviceSubnet: 10.10.0.0/16
scheduler: {}

[root@master01 docker]$kubeadm init --config=/etc/kubernetes/kubeadmin-init.yaml --ignore-preflight-errors=NumCPU	# 忽略检查cpu核心数，生产环境不要忽略
...
...
...
Your Kubernetes control-plane has initialized successfully!

To start using your cluster, you need to run the following as a regular user:

  mkdir -p $HOME/.kube
  sudo cp -i /etc/kubernetes/admin.conf $HOME/.kube/config
  sudo chown $(id -u):$(id -g) $HOME/.kube/config

Alternatively, if you are the root user, you can run:

  export KUBECONFIG=/etc/kubernetes/admin.conf

You should now deploy a pod network to the cluster.
Run "kubectl apply -f [podnetwork].yaml" with one of the options listed at:
  https://kubernetes.io/docs/concepts/cluster-administration/addons/

Then you can join any number of worker nodes by running the following on each as root:

kubeadm join 10.0.0.71:6443 --token abcdef.0123456789abcdef \
    --discovery-token-ca-cert-hash sha256:b794ecc7f2fc825b58e4e2108eab0dfa603c3d861de55bcc8c437949bed83fec 

# 按照init成功后的提示
mkdir -p $HOME/.kube
sudo cp -i /etc/kubernetes/admin.conf $HOME/.kube/config
sudo chown $(id -u):$(id -g) $HOME/.kube/config
# 如果是root用户，也可以
export KUBECONFIG=/etc/kubernetes/admin.conf

# 安装网络插件 flannel，参考：https://github.com/coreos/flannel
# 这个链接可能需要科学上网
kubectl apply -f https://raw.githubusercontent.com/coreos/flannel/master/Documentation/kube-flannel.yml

[root@master01 ~]$kubeadm init --apiserver-advertise-address=10.0.0.71 \
	--control-plane-endpoint=10.0.0.1 \
	--apiserver-bind-port=6443 \
	--kubernetes-version=v1.20.2 \
	--pod-network-cidr=10.244.0.0/16 \
	--service-cidr=10.10.0.0/16 \
	--image-repository=registry.aliyuncs.com/google_containers \
	--ignore-preflight-errors=NumCPU

# node1
[root@node01 kubernetes]$kubeadm join 10.0.0.71:6443 \
	--token abcdef.0123456789abcdef \
	--discovery-token-ca-cert-hash sha256:b794ecc7f2fc825b58e4e2108eab0dfa603c3d861de55bcc8c437949bed83fec 
# node2
[root@node02 ~]$kubeadm join 10.0.0.71:6443 \
	--token abcdef.0123456789abcdef	\
	--discovery-token-ca-cert-hash sha256:b794ecc7f2fc825b58e4e2108eab0dfa603c3d861de55bcc8c437949bed83fec

[root@master01 ~]$kubectl get nodes
NAME              STATUS   ROLES                  AGE     VERSION
master01.ljk.cn   Ready    control-plane,master   53m     v1.20.2
node01.ljk.cn     Ready    <none>                 6m24s   v1.20.2
node02.ljk.cn     Ready    <none>                 10m     v1.20.2

# 在每个节点上都生成一个flannel网卡，或者说是网络隧道，保障集群内部的通信
[root@master01 ~]$ip a		# master
...
4: flannel.1: <BROADCAST,MULTICAST> mtu 1450 qdisc noop state DOWN group default 
    link/ether 26:69:fd:2f:7a:3f brd ff:ff:ff:ff:ff:ff
[root@node01 kubernetes]$ip a	# node1
...
4: flannel.1: <BROADCAST,MULTICAST> mtu 1450 qdisc noop state DOWN group default 
    link/ether a2:74:d6:61:d5:5c brd ff:ff:ff:ff:ff:ff
[root@node02 ~]$ip a	# node2
...
4: flannel.1: <BROADCAST,MULTICAST> mtu 1450 qdisc noop state DOWN group default 
    link/ether fe:83:2b:fc:1e:01 brd ff:ff:ff:ff:ff:ff

# 1.下载配置清单
$wget https://raw.githubusercontent.com/kubernetes/dashboard/v2.1.0/aio/deploy/recommended.yaml
# 2.修改配置清单
$vim recommended.yaml 
...
spec:
  type: NodePort	# 添加此行
  ports:
    - port: 443 
      targetPort: 8443
      nodePort: 30002		# 添加此行
  selector:
    k8s-app: kubernetes-dashboard
 ...
 # 3.创建资源对象
 kubectl apply -f ./recommended.yaml
 # 4.查看
$kubectl get pod -n kubernetes-dashboard   
NAME                                         READY   STATUS    RESTARTS   AGE
dashboard-metrics-scraper-79c5968bdc-5dv7w   1/1     Running   0          88m
kubernetes-dashboard-7448ffc97b-rg77t        1/1     Running   0          88m
# 5.创建管理 dashboard 的 service 账号
$cat admin-user.yml 
apiVersion: v1
kind: ServiceAccount
metadata:
  name: admin-user
  namespace: kubernetes-dashboard

---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: admin-user
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: cluster-admin
subjects:
- kind: ServiceAccount
  name: admin-user
  namespace: kubernetes-dashboard
$kubectl apply -f admin-user.yml
# 6.查看 admin-user 的 token
$kubectl get secrets -A | grep admin-user
$kubectl describe secrets -n kubernetes-dashboard admin-user-token-wpz7j 
Name:         admin-user-token-wpz7j
Namespace:    kubernetes-dashboard
Labels:       <none>
Annotations:  kubernetes.io/service-account.name: admin-user
              kubernetes.io/service-account.uid: 613c9277-f124-4622-88c9-714dc2479602

Type:  kubernetes.io/service-account-token

Data
====
ca.crt:     1066 bytes
namespace:  20 bytes
token:      eyJhbGciOiJSUzI1NiIsImtpZCI6IjJ2THVKYzd4Q3hVeVI5QWVCMk5YUU5kbE9lRzJjZ1hHZkV0WndQUGczWmcifQ.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.N7Hcf9JIgV5p_j8-YYJHMDrqGkGtsalTxbabTjXASyoR63gmvNmekPACQ9EDwu1MF2du3wkyReVb_aYD11tHw4XsNbfnoaytYqcQ9U8lhLXd8A7wlBnK8_EBa5-XP0-nRRSw7gUsG6s7xvrviWcndNO0nIUPgS--B1G8S-AR_Y0CJRzFF4FL0zhZvxCxSDwHO2OrjKpbxhuZOgzhOI_CXCEMghsCyUUFeNlRj2F-YulzVNLdJSzIh0UMyvoKVv6ylesRtyUJK8lo3tpcC0K4hTKsWYXHgibto024tT4D1KtYLqNhEhI4PkYogZQTsG3-ggVo5Nry5m8AL0CKCD0xoA

domain:6643/apis/$GROUP_NAME/$VERSION/namespaces/$NAMESPACE/$NAME/$API_RESOURCE_NAME

domain:6643/api/$VERSION/namespaces/$NAMESPACE/$NAME/$API_RESOURCE_NAME
# 范例：
domain:6643/api/v1/namespaces/default/pods/demoapp-5f7d8f9847-tjn4v

kubectl api-resources							# 打印所有API资源
kubectl api-resources -o wide					# 打印更多信息
kubectl api-resources --sort-by=name			# 按“name"列排序
kubectl api-resources --namespaced=true			# 过滤，namespaced 为true
kubectl api-resources --api-group=extensions	# 过滤，api group 为 extensions

# 方式一，这种方式最方便
kubectl get pods net-tes1 -o json|yaml
# 方式二
kubectl get --raw /api/v1/namespaces/default/pods/net-test1
# 方式三
kubectl proxy
curl 127.0.0.1:8001/api/v1/namespaces/default/pods/net-test1	# 另起一终端

$kubectl get pods net-test1 -o yaml
 apiVersion: v1
 kind: Pod
>metadata:
>spec:
>status:

kubectl explain <type>.<fieldName>[.<fieldName>]

$kubectl explain pod.apiVersion
KIND:     Pod
VERSION:  v1

FIELD:    apiVersion <string>

DESCRIPTION:
     APIVersion defines the versioned schema of this representation of an
     object. Servers should convert recognized schemas to the latest internal
     value, and may reject unrecognized values. More info:
     https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources

# 范例
$kubectl explain pod.kind
$kubectl explain pod.metadata
$kubectl explain pod.spec
$kubectl explain pod.status
$kubectl explain pod.status.conditions
$kubectl explain pod.status.conditions.lastProbeTime

wget [OPTION]... [URL]...

#启动
-V，-version 显示wget的版本后退出
-h，-help 打印语法帮助
-b，-background 启动后转入后台执行
-e，-execute=COMMAND 执行`.wgetrc'格式的命令，wgetrc格式参见/etc/wgetrc或~/.wgetrc

#记录和输入文件
-o，-output-file=FILE 把记录写到FILE文件中
-a，-append-output=FILE 把记录追加到FILE文件中
-d，-debug 打印调试输出
-q，-quiet 安静模式(没有输出)
-v，-verbose 冗长模式(这是缺省设置)
-nv，-non-verbose 关掉冗长模式，但不是安静模式
-i，-input-file=FILE 下载在FILE文件中出现的URLs
-F，-force-html 把输入文件当作HTML格式文件对待
-B，-base=URL 将URL作为在-F -i参数指定的文件中出现的相对链接的前缀
-sslcertfile=FILE 可选客户端证书
-sslcertkey=KEYFILE 可选客户端证书的KEYFILE
-egd-file=FILE 指定EGD socket的文件名

#下载
-bind-address=ADDRESS 指定本地使用地址(主机名或IP，当本地有多个IP或名字时使用)
-t，-tries=NUMBER 设定最大尝试链接次数(0 表示无限制).
-O -output-document=FILE 把文档写到FILE文件中
-nc，-no-clobber 不要覆盖存在的文件或使用.#前缀
-c，-continue 接着下载没下载完的文件
-progress=TYPE 设定进程条标记
-N，-timestamping 不要重新下载文件除非比本地文件新
-S，-server-response 打印服务器的回应
-spider 不下载任何东西
-T，-timeout=SECONDS 设定响应超时的秒数
-w，-wait=SECONDS 两次尝试之间间隔SECONDS秒
-waitretry=SECONDS 在重新链接之间等待1…SECONDS秒
-random-wait 在下载之间等待0…2*WAIT秒
-Y，-proxy=on/off 打开或关闭代理
-Q，-quota=NUMBER 设置下载的容量限制
-limit-rate=RATE 限定下载输率
#目录
-nd -no-directories 不创建目录
-x，-force-directories 强制创建目录
-nH，-no-host-directories 不创建主机目录
-P，-directory-prefix=PREFIX 将文件保存到目录 PREFIX/…
-cut-dirs=NUMBER 忽略 NUMBER层远程目录
#HTTP 选项
-http-user=USER 设定HTTP用户名为 USER.
-http-passwd=PASS 设定http密码为 PASS.
-C，-cache=on/off 允许/不允许服务器端的数据缓存 (一般情况下允许).
-E，-html-extension 将所有text/html文档以.html扩展名保存
-ignore-length 忽略 'Content-Length'头域
-header=STRING 在headers中插入字符串 STRING
-proxy-user=USER 设定代理的用户名为 USER
-proxy-passwd=PASS 设定代理的密码为 PASS
-referer=URL 在HTTP请求中包含 `Referer: URL'头
-s，-save-headers 保存HTTP头到文件
-U，-user-agent=AGENT 设定代理的名称为 AGENT而不是 Wget/VERSION.
-no-http-keep-alive 关闭 HTTP活动链接 (永远链接).
-cookies=off 不使用 cookies.
-load-cookies=FILE 在开始会话前从文件 FILE中加载cookie
-save-cookies=FILE 在会话结束后将 cookies保存到 FILE文件中

#FTP 选项
-nr，-dont-remove-listing 不移走 `.listing'文件
-g，-glob=on/off 打开或关闭文件名的 globbing机制
-passive-ftp 使用被动传输模式 (缺省值).
-active-ftp 使用主动传输模式
-retr-symlinks 在递归的时候，将链接指向文件(而不是目录)

#递归下载
-r，-recursive 递归下载－－慎用!
-l，-level=NUMBER 最大递归深度 (inf 或 0 代表无穷).
-delete-after 在现在完毕后局部删除文件
-k，-convert-links 转换非相对链接为相对链接
-K，-backup-converted 在转换文件X之前，将之备份为 X.orig
-m，-mirror 等价于 -r -N -l inf -nr.
-p，-page-requisites 下载显示HTML文件的所有图片

#递归下载中的包含和不包含(accept/reject)
-A，-accept=LIST 分号分隔的被接受扩展名的列表
-R，-reject=LIST 分号分隔的不被接受的扩展名的列表
-D，-domains=LIST 分号分隔的被接受域的列表
-exclude-domains=LIST 分号分隔的不被接受的域的列表
-follow-ftp 跟踪HTML文档中的FTP链接
-follow-tags=LIST 分号分隔的被跟踪的HTML标签的列表
-G，-ignore-tags=LIST 分号分隔的被忽略的HTML标签的列表
-H，-span-hosts 当递归时转到外部主机
-L，-relative 仅仅跟踪相对链接
-I，-include-directories=LIST 允许目录的列表
-X，-exclude-directories=LIST 不被包含目录的列表
-np，-no-parent 不要追溯到父目录

-q 静默模式
-c 断点续传
-P /path 保存在指定目录
-O filename 保存为指定文件名，filename 为 - 时，发送至标准输出
--limit-rate= 指定传输速率，单位K，M等

curl [options] [URL...]

-A/--user-agent <string> 设置用户代理发送给服务器
-e/--referer <URL> 来源网址
--cacert <file> CA证书 (SSL)
-k/--insecure 允许忽略证书进行 SSL 连接
--compressed 要求返回是压缩的格式
-H/--header "key:value” 自定义首部字段传递给服务器
-i 显示页面内容，包括报文首部信息
-I/--head 只显示响应报文首部信息
-D/--dump-header <file>将url的header信息存放在指定文件中
--basic 使用HTTP基本认证
-u/--user <user[:password]>设置服务器的用户和密码
-L 如果有3xx响应码，重新发请求到新位置
-O 使用URL中默认的文件名保存文件到本地
-o <file> 将网络文件保存为指定的文件中
--limit-rate <rate> 设置传输速度
-0/--http1.0 数字0，使用HTTP 1.0
-v/--verbose 更详细
-C 选项可对文件使用断点续传功能
-c/--cookie-jar <file name> 将url中cookie存放在指定文件中
-x/--proxy <proxyhost[:port]> 指定代理服务器地址
-X/--request <command> 向服务器发送指定请求方法
-U/--proxy-user <user:password> 代理服务器用户和密码
-T 选项可将指定的本地文件上传到FTP服务器上
--data/-d 方式指定使用POST方式传递数据
-s --silent Silent mode
-b name=data 从服务器响应set-cookie得到值，返回给服务器
-w <format> 显示相应的指定的报文信息，如：%{http_code}，%{remote_ip}等
-m, --max-time <time> 允许最大传输时间

[root@centos7 ~]#yum install httpie -y

# 显示信息（包含响应头200）
http www.magedu.com

# 显示详细的请求（包含请求和返回头200）
http -v www.magedu.com

# 只显示Header
http -h www.magedu.com
http --head www.magedu.com
http --header www.magedu.com
http --headers www.magedu.com

# 只显示Body
http -b www.magedu.com
http --body magedu.com

# 下载文件
http -d www.magedu.com

# 模拟提交表单
http -f POST www.magedu.com username='wang'

# 请求删除的方法
http DELETE www.magedu.com

# 传递JSON数据请求(默认就是JSON数据请求)
http PUT www.magedu.com username='wang' password='magedu'

# 如果JSON数据存在不是字符串则用:=分隔，例如
http PUT www.magedu.com username='wang' password='magedu' age:=30 a:=true streets:='["a", "b"]'

# 模拟Form的Post请求, Content-Type: application/x-www-form-urlencoded;
charset=utf-8
http --form POST www.magedu.com username='wang'

# 模拟Form的上传, Content-Type: multipart/form-data
http -f POST www.magedu.com/jobs username='wang' file@~/test.pdf

# 修改请求头, 使用:分隔
http www.magedu.com User-Agent:magedu-agent/1.0 'Cookie:a=b;b=c' Referer:http://www.google.com/

# 认证
http -a username:password www.magedu.com
http -A basic -a username:password www.magedu.com

# 使用http代理
http --proxy=http:http://172.16.0.100:8081 proxy.magedu.com
http --proxy=http:http://user:pass@172.16.0.100:8081 proxy.magedu.com
http --proxy=https:http://172.16.0.100:8118 proxy.magedu.com
http --proxy=https:http://user:pass@172.16.0.100:8118 proxy.magedu.com

[root@centos7 ~]#http 192.168.8.8/test.html
HTTP/1.1 200 OK
Accept-Ranges: bytes
Connection: Keep-Alive
Content-Length: 30
Content-Type: text/html; charset=UTF-8
Date: Thu, 07 Nov 2019 09:09:34 GMT
ETag: "1e-596be05bc9a34"
Keep-Alive: timeout=5, max=100
Last-Modified: Thu, 07 Nov 2019 09:09:27 GMT
Server: Apache/2.4.37 (centos)
<strong>马哥教育</strong>

[root@centos7 ~]#http -v 192.168.8.8/test.html
GET /test.html HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
Connection: keep-alive
Host: 192.168.8.8
User-Agent: HTTPie/0.9.4

HTTP/1.1 200 OK
Accept-Ranges: bytes
Connection: Keep-Alive
Content-Length: 30
Content-Type: text/html; charset=UTF-8
Date: Thu, 07 Nov 2019 09:09:39 GMT
ETag: "1e-596be05bc9a34"
Keep-Alive: timeout=5, max=100
Last-Modified: Thu, 07 Nov 2019 09:09:27 GMT
Server: Apache/2.4.37 (centos)
<strong>马哥教育</strong>

[root@centos7 ~]#http HEAD http://www.magedu.com
HTTP/1.1 200 OK
Connection: keep-alive
Content-Encoding: gzip
Content-Type: text/html; charset=UTF-8
Date: Thu, 07 Nov 2019 08:09:49 GMT
Link: <http://www.magedu.com/wp-json/>; rel="https://api.w.org/"
Link: <http://www.magedu.com/>; rel=shortlink
Server: Tengine
Vary: Accept-Encoding
Vary: Accept-Encoding, Cookie

[root@centos7 ~]#http -p Hh http://www.magedu.com
GET / HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
Connection: keep-alive
Host: www.magedu.com
User-Agent: HTTPie/0.9.4

HTTP/1.1 200 OK
Cache-Control: max-age=3, must-revalidate
Connection: keep-alive
Content-Encoding: gzip
Content-Type: text/html; charset=UTF-8
Date: Thu, 07 Nov 2019 03:44:14 GMT
Server: Tengine
Transfer-Encoding: chunked
Vary: Accept-Encoding
Vary: Accept-Encoding, Cookie

[root@centos7 ~]#http -p H http://www.magedu.com User-Agent:wangtest
Referer:http://www.baidu.com
GET / HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
Connection: keep-alive
Host: www.magedu.com
Referer: http://www.baidu.com
User-Agent: wangtest

#方法1
[root@centos7 ~]#http http://www.magedu.com/wp-content/uploads/2018/12/2018122312035677.png > logo.png
#方法2
[root@centos7 ~]#file logo.png
logo.png: PNG image data, 411 x 127, 8-bit/color RGBA, non-interlaced
[root@centos7 ~]#http --download http://www.magedu.com/wp-content/uploads/2018/12/2018122312035677.png
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=604800
Connection: keep-alive
Content-Length: 8983
Content-Type: image/png
Date: Thu, 07 Nov 2019 08:20:44 GMT
ETag: "5c1f79ac-2317"
Expires: Thu, 14 Nov 2019 08:20:44 GMT
Last-Modified: Sun, 23 Dec 2018 12:03:56 GMT
Server: Tengine
Vary: Accept-Encoding

Downloading 8.77 kB to "2018122312035677.png"
Done. 8.77 kB in 0.00091s (9.46 MB/s)

[root@centos7 ~]#http http://www.magedu.com user=wang password=magedu

[root@centos7 ~]#http -f POST http://www.magedu.com user=wang password=magedu

ab [OPTIONS] URL