系统级更新
sudo apt update && sudo apt upgrade -y # 升级所有软件包
sudo apt autoremove # 清理无用包
sudo yum update -y # 升级所有软件包
sudo yum autoremove # 清理无用包
sudo pacman -Syu # 同步并升级所有软件包
组件升级
# Ubuntu/Debian
sudo apt install --only-upgrade apache2
# CentOS/RHEL
sudo yum update httpd
sudo systemctl restart apache2 # 重启服务
# Ubuntu/Debian
sudo apt install --only-upgrade mysql-server # 或 mariadb-server
# CentOS/RHEL
sudo yum update mariadb-server
sudo mysql_secure_installation # 执行安全初始化
# Ubuntu/Debian
sudo apt install --only-upgrade php libapache2-mod-php php-mysql
# CentOS/RHEL
sudo yum update php php-mysqlnd
sudo systemctl restart php-fpm # 若使用PHP-FPM
安全加固
# Ubuntu/Debian (ufw)
sudo ufw allow 80,443/tcp # 开放HTTP/HTTPS端口
sudo ufw enable
# CentOS/RHEL (firewalld)
sudo firewall-cmd --add-service=http --permanent
sudo firewall-cmd --add-service=https --permanent
sudo firewall-cmd --reload
sudo systemctl disable [服务名] # 如 telnet、ftp 等非必要服务
mysqldump -u root -p --all-databases > backup.sql
/etc/apache2/
、/etc/php/
等目录sudo tail -f /var/log/apache2/error.log
logwatch
)定期分析日志MaxClients
参数(/etc/apache2/mods-available/mpm_prefork.conf
)php.ini
中设置 opcache.enable=1
)unattended-upgrades
sudo apt install unattended-upgrades
sudo dpkg-reconfigure unattended-upgrades
yum-cron
sudo yum install yum-cron
sudo systemctl enable --now yum-cron
注意:升级前务必备份重要数据,测试环境建议先验证配置兼容性。