01-vagrant安装centos7

$ mkdir vagrant
$ cd vagrant
$ vagrant box add centos7 centos-7.0-x86_64.box
$ vagrant init centos7  #初始化（仅第一次需要）
$ vagrant up         #启动
$ vagrant ssh        #连接
$ vagrant halt       #关闭
$ vagrant reload     #重启
$ vagrant package    #导出镜像

config.vm.box = "centos7"            #该名称是再使用 vagrant init 中后面跟的名字。
config.vm.hostname = "for_work"       # hostname设置
config.vm.network "private_network", ip: "192.168.33.10"   #虚拟机网络设置
config.vm.synced_folder  "/Users/renxing/www", "/vagrant"  #同步目录设置

$ systemctl stop firewalld.service        #关闭自带的firewalld防火墙
$ systemctl disable firewalld.service #防止开机启动
$ yum install iptables-services       #安装iptables
$ systemctl start iptables.service    #启动iptables防火墙
$ systemctl enable iptables.service   #设置开机自动启动

*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -p icmp -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 22 -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 80 -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 3306 -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 6379 -j ACCEPT
-A INPUT -j REJECT --reject-with icmp-host-prohibited
-A FORWARD -j REJECT --reject-with icmp-host-prohibited
COMMIT