Linux系统最小化安装之后的系统基础环境安装以及内核优化脚本

 #!/bin/bash
 #添加epel和rpmforge的外部yum扩展源
 cd /usr/local/src
 wget http://mirrors.ustc.edu.cn/fedora/epel//5/x86_64/epel-release-5-4.noarch.rpm
 rpm -ivh epel-release--.noarch.rpm
 wget http://packages.sw.be/rpmforge-release/rpmforge-release-0.5.2-2.el5.rf.x86_64.rpm
 rpm -ivh rpmforge-release-0.5.-.el5.rf.x86_64.rpm
 #安装gcc基础库文件以及sysstat工具
 yum -y install gcc gcc-c++ vim-enhanced unzip unrar sysstat
 #配置ntpdate自动对时
 yum -y install ntp
 echo "01 01 * * * /usr/sbin/ntpdate ntp.api.bz    >> /dev/null 2>&1" >> /etc/crontab
 ntpdate ntp.api.bz
 service crond restart
 #配置文件的ulimit值
 ulimit -SHn
 echo "ulimit -SHn 65535" >> /etc/rc.local
 cat >> /etc/security/limits.conf << EOF
 *                     soft     nofile
 *                     hard     nofile
 EOF
 #tune kernel parametres(基础系统内核优化)
 cat >> /etc/sysctl.conf << EOF
 net.ipv4.tcp_syncookies =
 net.ipv4.tcp_syn_retries =
 net.ipv4.tcp_tw_recycle =
 net.ipv4.tcp_tw_reuse =
 net.ipv4.tcp_fin_timeout =
 net.ipv4.tcp_keepalive_time =
 net.ipv4.ip_local_port_range =
 EOF
 /sbin/sysctl -p
 #禁用control-alt-delete组合键以防止误操作
 sed -i 's@ca::ctrlaltdel:/sbin/shutdown -t3 -r now@#ca::ctrlaltdel:/sbin/shutdown -t3 -r now@' /etc/inittab
 #关闭SElinux
 sed -i 's@SELINUX=enforcing@SELINUX=disabled@' /etc/selinux/config
 #ssh服务配置优化
 sed -i -e '74 s/^/#/' -i -e '76 s/^/#/' /etc/ssh/sshd_config
 sed -i 's@#UseDNS yes@UseDNS no@' /etc/ssh/sshd_config
 service sshd restart
 #禁用ipv6地址
 echo "alias net-pf-10 off" >> /etc/modprobe.conf
 echo "alias ipv6 off" >> /etc/modprobe.conf
 echo "install ipv6 /bin/true" >> /etc/modprobe.conf
 echo "IPV6INIT=no" >> /etc/sysconfig/network
 sed -i 's@NETWORKING_IPV6=yes@NETWORKING_IPV6=no@'    /etc/sysconfig/network
 chkconfig ip6tables off
 #vim基础语法优化
 echo "syntax on" >> /root/.vimrc
 echo "set nohlsearch" >> /root/.vimrc
 #停用系统中不必要的服务
 chkconfig bluetooth off
 chkconfig sendmail off
 chkconfig kudzu off
 chkconfig nfslock off
 chkconfig portmap off
 chkconfig iptables off
 chkconfig autofs off
 chkconfig yum-updatesd off
 #重启服务器
 reboot