2018-8-29 dynalist 配额
Linux系统是支持多用户的,即允许多个用户同时使用linux系统,普通用户在/home/目录下均有自己的家目录,在默认状态下,各个用户可以在自己的家目录下任意创建文件,而不用担心内存。作为系统管理员,为了防止各个用户占用太多的空间,可以为各个普通用户设置配置配额,即设置各个用户的文件占用的空间大小。
本文以硬盘/dev/sdb为例设置配置配额:
实验背景:
Linux是个多用户多任务系统,出于安全等原因,对不同的用户我们常常做一定的权限管理。空间配额限制就是其中一个需要考虑的点。配额是基于分区配置的,避免用户数据占用太多磁盘空间,我们常常把home目录单独划分一个分区,然后对不同用户设定配额。
提示有一个G的配额 就是使用的流量用光了.仅有1个G
1.添加一块硬盘/dev/sdb,大小20G,
也可以用大一点的硬盘,分区成20G
1. [root@linuxidc-pc ~]#lsblk /dev/sdb
2. NAME MAJ:MIN RM SIZE RO TYPE MOUNTPOINT
3. sdb 8:16 0 20G 0 disk
2. 格式化硬盘(如果你使用分区,就直接格式化分区)
1. [root@linuxidc-pc ~]#mkfs.ext4 /dev/sdb
3. 创建挂载目录
1. [root@linuxidc-pc ~]#mkdir /mnt/sdb
4. 挂载文件系统
修改/etc/fstab目录,把/dev/sdb
挂载上,注意添加usrquota挂载选项,该选项意为支持用户配额
1. UUID=fa2f12ad-6195-47fe-8792-a8a9000cd44c / ext4 defaults 1 1
2. UUID=cd3afad0-4731-442d-8fc2-d9ae95f1a1cc /boot ext4 defaults
1 2
3. UUID=6afc5ea4-27c7-4d52-bd0f-ca410a2da379 /home ext4 defaults
1 2
4. UUID=daaff10f-aa8b-43d8-bc06-e4b82a905886 /mnt/sdb ext4 usrquota
0 0
使用mount –a 让挂载生效,使用df –h 命令查看是否生效
1. [root@linuxidc-pc ~]#df -h
2. Filesystem Size Used Avail Use% Mounted on
3. /dev/sda6 166G 3.6G 154G 3% /
4. tmpfs 491M 72K 491M 1% /dev/shm
5. /dev/sda1 190M 34M 147M 19% /boot
6. /dev/sda2 20G 44M 19G 1% /data
7. /dev/sda3 9.8G 130M 9.1G 2% /home
8. /dev/sdb 20G 44M 19G 1% /mnt/sdb
//第8行显示 /dev/sdb文件系统已挂载在/mnt/sdb目录上
5. 对/mnt/sdb设置配置配额,终于快接近尾声了,-> ->
1. [root@linuxidc-pc ~]#quotacheck /mnt/sdb/
1. [root@linuxidc-pc sdb]#ls /mnt/sdb/
2. aquota.user lost+found
1. [root@linuxidc-pc sdb]#edquota linuxidc
1. Disk quotas for user linuxidc (uid 500):
2. Filesystem blocks soft hard inodes soft hard
3. /dev/sdb 0 50000 60000 0 30 40
#
设置:使用block数目到达50000kb时,发送警告,到达60000kb时,禁止添加内容
# 同样,当inode使用数目达到30,发送警告,达到40,禁止新建文件
Filesystem: 文件系统
blocks:已使用的块大小,以kb为单位
inode:已使用的inode个数
soft:块设备(或inode)使用数目,预警额度
hard: 块设备(或inode)使用数目,禁止额度
1. [root@linuxidc-pc sdb]#quotaon /dev/sdb
实验环境:
CentOS7.3
1. [linuxidc@linuxidc-pc sdb]$pwd # 查看当前目录
2. /mnt/sdb
3. [linuxidc@linuxidc-pc sdb]$whoami #
查看当前用户,必须是配置配额设定的用户
4. linuxidc
5. [linuxidc@linuxidc-pc sdb]$ll
6. #
查看linuxidc用户可以使用的目录,确保linuxidc可以在该目录或其子目录中写入数据
7. total 28
8. -rw——- 1 root root 7168 Apr 17 17:43 aquota.user
9. drwx—— 2 root root 16384 Apr 17 17:07 lost+found
drwxr-xr-x 2 linuxidc linuxidc 4096 Apr 17 18:05 linuxidc_f #
该目录属主为linuxidc
[linuxidc@linuxidc-pc sdb]$cd linuxidc_f/
1. [linuxidc@linuxidc-pc linuxidc_f]$edquota linuxidc
查看结果
1. Disk quotas for user linuxidc (uid 500):
2. Filesystem blocks soft hard inodes soft
hard
3. /dev/sdb 4 50000 60000 2 30
40
4. # block设备使用量为4kb
1.
[linuxidc@linuxidc-pc linuxidc_f]$dd if=/dev/zero of=file bs=1M count=40
2. 40+0 records in
3. 40+0 records out
4. 41943040 bytes (42 MB) copied, 0.0380665 s, 1.1 GB/s
5. ## 使用dd命令写文本,创建一个文本file,写入1M*40=40M文件,写入成功
查看配额限度和使用进度
5. Disk quotas for user linuxidc (uid 500):
6. Filesystem blocks soft hard inodes soft
hard
7. /dev/sdb 40964 50000 60000 2 30
40
8. ## 使用了40964kb
1.
[linuxidc@linuxidc-pc linuxidc_f]$dd if=/dev/zero of=file bs=1M count=50
2. sdb: warning, user block quota exceeded.
3. 50+0 records in
4. 50+0 records out
5. 52428800 bytes (52 MB) copied, 0.046946 s, 1.1 GB/s
6. # 写入1M*50=50M文件成功,但发出警告warning
查看配额限度和使用进度
1. Disk quotas for user linuxidc (uid 500):
2. Filesystem blocks soft hard inodes soft
hard
3. /dev/sdb 51204 50000 60000 2 30
40
4. ## 使用额度51204kb,超过预警额度 此时还是可以写入文件的
5.
1.
[linuxidc@linuxidc-pc linuxidc_f]$dd if=/dev/zero of=file bs=1M count=60
2. sdb: warning, user block quota exceeded.
3. sdb: write failed, user block limit reached.
4. dd: writing `file’: Disk quota exceeded
5. 59+0 records in
6. 58+0 records out
7. 61435904 bytes (61 MB) copied, 0.101161 s, 607 MB/s
8. # 显示写入60M数据失败
查看quota配额使用量:
1. Disk quotas for user linuxidc (uid 500):
2. Filesystem blocks soft hard inodes soft
hard
3. /dev/sdb 60000 50000 60000 2 30
40
尝试往file中写入内容:
1. [linuxidc@linuxidc-pc linuxidc_f]$echo “heih” >> file
2. -bash: echo: write error: Disk quota exceeded # 写入错误
3. [linuxidc@linuxidc-pc linuxidc_f]$touch a #
创建文件成功
4. [linuxidc@linuxidc-pc linuxidc_f]$
当然也可以测试inode使用数量,这里不再赘述。
实验内容:
一、迁移home到独立分区
二、对用户设定配额
本文永久更新链接地址:http://www.linuxidc.com/Linux/2017-10/148086.htm
实验命令:
先用lsblk命令看一下当前机器的硬盘使用情况:
[root@CentOS7 ~]#lsblk
NAME MAJ:MIN RM SIZE RO TYPE MOUNTPOINT
sda 8:0 0 200G 0 disk
├─sda1 8:1 0 1G 0 part /boot
├─sda2 8:2 0 97.7G 0 part /
├─sda3 8:3 0 48.8G 0 part /app
├─sda4 8:4 0 1K 0 part
└─sda5 8:5 0 2G 0 part [SWAP]
sr0 11:0 1 7.7G 0 rom
从上面可以看到,磁盘还有大概50G的空间未使用。可以利用这50G添加一个新分区。这里我划分一个10G的新分区作为home的独立分区:
[root@CentOS7 ~]#fdisk /dev/sda
Welcome to fdisk (util-linux 2.23.2).
Changes will remain in memory only, until you decide to write them.
Be careful before using the write command.
Command (m for help): n
All primary partitions are in use
Adding logical partition 6
First sector (313497600-419430399, default 313497600):
Using default value 313497600
Last sector, +sectors or +size{K,M,G} (313497600-419430399, default 419430399): +10G
Partition 6 of type Linux and of size 10 GiB is set
Command (m for help): w
The partition table has been altered!
Calling ioctl() to re-read partition table.
WARNING: Re-reading the partition table failed with error 16: Device or resource busy.
The kernel still uses the old table. The new table will be used at
the next reboot or after you run partprobe(8) or kpartx(8)
Syncing disks.
这里有个warming。我们按提示
使用partprobe /dev/sda
命令刷新一下内存的分区表。
[root@CentOS7 ~]#mkfs.ext4 /dev/sda6
mke2fs 1.42.9 (28-Dec-2013)
...
[root@CentOS7 ~]#blkid
/dev/sda1: UUID="4e02b896-3f74-4592-a44f-43a79a74627d" TYPE="xfs"
/dev/sda2: UUID="3b254514-1df1-4322-bf30-d14075937249" TYPE="xfs"
/dev/sda3: UUID="6b05345c-d2b7-42ed-bc15-411ffc962fe3" TYPE="xfs"
/dev/sda5: UUID="52074f6b-cdf3-49fd-bea2-09c0d5c92793" TYPE="swap"
/dev/sr0: UUID="2016-12-05-13-52-39-00" LABEL="CentOS 7 x86_64" TYPE="iso9660" PTTYPE="dos"
/dev/sda6: UUID="4530b0f0-a686-4dbe-80a1-5d425c40f3b9" TYPE="ext4"
新分区/dev/sda6,UUID=”4530b0f0-a686-4dbe-80a1-5d425c40f3b9″
备份/home目录到/app
[root@CentOS7 ~]#cp -a /home /app
[root@CentOS7 ~]#du -sh /home /app/home
3.7M /home
3.7M /app/home
[root@CentOS7 ~]#ls /app/home
hyma luo
[root@CentOS7 ~]#ls /home
hyma luo
[root@CentOS7 ~]#rm -rf /home
rm: cannot remove ‘/home’: Device or resource busy
删除/home目录时提示目录在使用中。这种情况我们可以切换到单用户模式操作。
注意!单用户模式会中断网络连接的终端,只能在机器前操作,请慎用。
[root@CentOS7 ~]#vim /etc/fstab
#
# /etc/fstab
# Created by anaconda on Wed May 17 14:26:36 2017
#
# Accessible filesystems, by reference, are maintained under '/dev/disk'
# See man pages fstab(5), findfs(8), mount(8) and/or blkid(8) for more info
#
UUID=3b254514-1df1-4322-bf30-d14075937249 / xfs defaults 0 0
UUID=6b05345c-d2b7-42ed-bc15-411ffc962fe3 /app xfs defaults 0 0
UUID=4e02b896-3f74-4592-a44f-43a79a74627d /boot xfs defaults 0 0
UUID=52074f6b-cdf3-49fd-bea2-09c0d5c92793 swap swap defaults 0 0
UUID=4e02b896-3f74-4592-a44f-43a79a74627d /boot xfs defaults 0 0
UUID=4530b0f0-a686-4dbe-80a1-5d425c40f3b9 /home ext4 defaults 0 0
[root@CentOS7 ~]#mount -a
[root@CentOS7 ~]#df
Filesystem 1K-blocks Used Available Use% Mounted on
/dev/sda2 102350000 4563984 97786016 5% /
devtmpfs 485296 0 485296 0% /dev
tmpfs 499968 4 499964 1% /dev/shm
tmpfs 499968 13524 486444 3% /run
tmpfs 499968 0 499968 0% /sys/fs/cgroup
/dev/sda3 51175000 36776 51138224 1% /app
/dev/sda1 1038336 172120 866216 17% /boot
tmpfs 99996 8 99988 1% /run/user/0
/dev/sr0 8086368 8086368 0 100% /run/media/root/CentOS 7 x86_64
/dev/sda6 10190100 36888 9612540 1% /home
[root@CentOS7 ~]#cp -a /app/home/* /home
我们通过配置/etc/fstab实现,格式如下:
UUID=4530b0f0-a686-4dbe-80a1-5d425c40f3b9 /home ext4 defaults,usrquota,grpquota 0 0
[luo@CentOS7 ~]$vim /etc/fstab
# /etc/fstab
# Created by anaconda on Wed May 17 14:26:36 2017
#
# Accessible filesystems, by reference, are maintained under '/dev/disk'
# See man pages fstab(5), findfs(8), mount(8) and/or blkid(8) for more info
#
UUID=3b254514-1df1-4322-bf30-d14075937249 / xfs defaults 0 0
UUID=6b05345c-d2b7-42ed-bc15-411ffc962fe3 /app xfs defaults 0 0
UUID=4e02b896-3f74-4592-a44f-43a79a74627d /boot xfs defaults 0 0
UUID=52074f6b-cdf3-49fd-bea2-09c0d5c92793 swap swap defaults 0 0
UUID=4e02b896-3f74-4592-a44f-43a79a74627d /boot xfs defaults 0 0
UUID=4530b0f0-a686-4dbe-80a1-5d425c40f3b9 /home ext4 defaults,usrquota,grpquota 0 0
[root@CentOS7 ~]#mount -o remount /home
[root@CentOS7 ~]#setenforce 0
[root@CentOS7 ~]#quotacheck -cug /home
[root@CentOS7 ~]#quotaon /home
[root@CentOS7 ~]#quotaon -p /home
group quota on /home (/dev/sda6) is on
user quota on /home (/dev/sda6) is on
这里我对用户luo设定配额,设定配额空间100M
[root@CentOS7 ~]#edquota luo
Disk quotas for user luo (uid 1001):
Filesystem blocks soft hard inodes soft hard
/dev/sda6 52 0 100000 13 0 0
请注意切换成用户luo,在/home目录下创建文件
[root@CentOS7 ~]#su - luo
Last login: Sat Jun 24 09:09:08 CST 2017 on pts/0
[luo@CentOS7 ~]$dd if=/dev/zero of=/home/luo/quotatest bs=1M count=50
50+0 records in
50+0 records out
52428800 bytes (52 MB) copied, 0.0537142 s, 976 MB/s
[luo@CentOS7 ~]$dd if=/dev/zero of=/home/luo/quotatest bs=1M count=110
sda6: write failed, user block limit reached.
dd: error writing ‘/home/luo/quotatest’: Disk quota exceeded
98+0 records in
97+0 records out
102346752 bytes (102 MB) copied, 1.56307 s, 65.5 MB/s
当用户luo写入50M时,写入正常
当用户luo写入100M时,提示“write failed, user block limit reached.”