centos6.2系统初始化线上脚本

zd6

• [Shell] 纯文本查看 复制代码

  #!/bin/bash  
  #update 163 yum  
  cd /etc/yum.repos.d  
  mv CentOS-Base.repo  CentOS-Base.repo.bak  
  wget [url]http://mirrors.163.com/.help/CentOS6-Base-163.repo[/url]  
  mv CentOS6-Base-163.repo  CentOS-Base.repo  
  yum clean metadata  
  yum makecache  
  #add epel  
  rpm -ivh [url]http://mirrors.sohu.com/fedora-epel/6/x86_64/epel-release-6-8.noarch.rpm[/url]  
  rpm  --import  /etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL-6  
  #add rpmforge  
  rpm -Uvh [url]http://packages.sw.be/rpmforge-release/rpmforge-release-0.5.2-2.el6.rf.x86_64.rpm[/url]  
  rpm --import  /etc/pki/rpm-gpg/RPM-GPG-KEY-rpmforge-dag  
  #update system pack  
  yum -y install gcc wget  make lsof gcc-c++ make autoconf libtool-ltdl-devel gd-devel freetype-devel libxml2-devel libjpeg-devel libpng-devel openssl-devel curl-devel bison patch unzip libmcrypt-devel libmhash-devel ncurses-devel sudo bzip2 mlocate flex lrzsz sysstat lsof setuptool  system-config-network-tui system-config-firewall-tui ntsysv ntp libaio-devel wget ntp  
   
  #set ntp  
  /usr/sbin/ntpdate ntp.api.bz  
  echo "*/5 * * * * /usr/sbin/ntpdate ntp.api.bz > /dev/null 2>&1" >> /var/spool/cron/root  
  service crond restart  
  #set clock  
  hwclock --set --date="`date +%D\ %T`" 
  hwclock --hctosys  
   
  #set ulimit  
  echo "ulimit -SHn 102400" >> /etc/rc.local  
  cat >> /etc/security/limits.conf << EOF 
   *           soft   nofile       102400  
   *           hard   nofile       102400  
   *           soft   nproc        102400  
   *           hard   nproc        102400  
  EOF  
  #set max user processes  
  sed -i 's/1024.*/102400/' /etc/security/limits.d/90-nproc.conf  
  # turnoff the control-alt-delete  
  sed -i 's#exec /sbin/shutdown -r now#\#exec /sbin/shutdown -r now#' /etc/init/control-alt-delete.conf  
  #close useless service  
  for i in `ls /etc/rc3.d/S*`  
  do  
     CURSRV=`echo $i|cut -c 15-`  
     echo $CURSRV  
  case $CURSRV in  
     crond | irqbalance | network | sshd | rsyslog | sysstat )  
     echo "Base services, Skip!"  
     ;;  
     *)  
     echo "change $CURSRV to off"  
     chkconfig --level 2345 $CURSRV off  
     service $CURSRV stop  
     ;;  
  esac  
  done  
  echo "service is init is ok.............."  
  #set LANG  
  :> /etc/sysconfig/i18n  
  cat >> /etc/sysconfig/i18n << EOF 
   LANG="en_US.UTF-8" 
  EOF  
  #set ssh  
  sed -i 's/^GSSAPIAuthentication yes$/GSSAPIAuthentication no/' /etc/ssh/sshd_config  
  sed -i 's/#UseDNS yes/UseDNS no/' /etc/ssh/sshd_config  
  #sed -i 's/#Port 22/Port 6343/' /etc/ssh/sshd_config  
  service sshd restart  
  #set sysctl  
  true > /etc/sysctl.conf  
  cat >> /etc/sysctl.conf << EOF 
   net.ipv4.ip_forward = 0 
   net.ipv4.conf.default.rp_filter = 1 
   net.ipv4.conf.default.accept_source_route = 0 
   kernel.sysrq = 0 
   kernel.core_uses_pid = 1 
   net.ipv4.tcp_syncookies = 1 
   kernel.msgmnb = 65536 
   kernel.msgmax = 65536 
   kernel.shmmax = 68719476736 
   kernel.shmall = 4294967296 
   net.ipv4.tcp_max_tw_buckets = 6000 
   net.ipv4.tcp_sack = 1 
   net.ipv4.tcp_window_scaling = 1 
   net.ipv4.tcp_rmem = 4096 87380 4194304  
   net.ipv4.tcp_wmem = 4096 16384 4194304  
   net.core.wmem_default = 8388608 
   net.core.rmem_default = 8388608 
   net.core.rmem_max = 16777216 
   net.core.wmem_max = 16777216 
   net.core.netdev_max_backlog = 262144 
   net.core.somaxconn = 262144 
   net.ipv4.tcp_max_orphans = 3276800 
   net.ipv4.tcp_max_syn_backlog = 262144 
   net.ipv4.tcp_timestamps = 0 
   net.ipv4.tcp_synack_retries = 1 
   net.ipv4.tcp_syn_retries = 1 
   net.ipv4.tcp_tw_recycle = 1 
   net.ipv4.tcp_tw_reuse = 1 
   net.ipv4.tcp_mem = 94500000 915000000 927000000  
   net.ipv4.tcp_fin_timeout = 1 
   net.ipv4.tcp_keepalive_time = 1200 
   net.ipv4.ip_local_port_range = 1024 65535  
  EOF  
  /sbin/sysctl -p  
  echo "sysctl set OK!!"  
  #disable ipv6  
  echo "alias net-pf-10 off" >> /etc/modprobe.conf  
  echo "alias ipv6 off" >> /etc/modprobe.conf  
  /sbin/chkconfig ip6tables off  
  echo "ipv6 is disabled!"  
  #disable selinux  
  sed -i '/SELINUX/s/enforcing/disabled/' /etc/selinux/config  
  setenforce 0  
  #vim setting  
  sed -i "8 s/^/alias vi='vim'/" /root/.bashrc  
  /etc/init.d/iptables stop  
  chkconfig iptables  off 35  
  echo 'syntax on' > /root/.vimrc  
  echo "###############################################################"  

  
  

lilingjie2015

长得真有创意，活得真有勇气!

leonheart

锻炼肌肉，防止挨揍！

beebe_3

在一辆拥挤的公车上，一位女郎忽然叫了起来：别挤啦！别挤啦！把人家的奶都挤出来啦！（她拿着酸奶呢）。

378

我本非随便的人，但如果你想随便，那我就随你的便好啦！

binghai03

修养的艺术,其实就是说谎的艺术。

torlee

学海无涯，回头是岸!