centos_6.7_系统初始化
#!/bin/bash #****************************************************************# # ScriptName: acfuninit.sh # version 1.1 # Author: ***** # Create Date: 2015-7-31 # Modify Author:****** # Modify Date: 2015-12-23 # Function: acfun CentOS 6.7 init shell (use on kickstart) #***************************************************************# # 设置颜色参数 GC="\033[1;32m" BC="\033[1;34m" RC="\033[1;31m" EC="\033[0m" __detect_result() { if [ $? -eq 0 ]; then echo -e "${GC}[ OK ]${EC}" echo "" else echo -e "${RC}[FAILED]${EC}" echo "" fi } # 关闭图形界面 clear;echo -en "${BC}Linux X11 is disabled... ${EC}";sleep 1 sed -i 's/id:5:initdefault:/id:3:initdefault:/g' /etc/inittab __detect_result # SSH 配置 echo -en "${BC}SSH is config... ${EC}";sleep 1 sed -i 's/#ServerKeyBits 1024/ServerKeyBits 4096/g' /etc/ssh/sshd_config sed -i 's/#PermitRootLogin yes/PermitRootLogin without-password/g' /etc/ssh/sshd_config sed -i 's/#PermitEmptyPasswords no/PermitEmptyPasswords no/g' /etc/ssh/sshd_config sed -i 's/#UseDNS yes/UseDNS no/g' /etc/ssh/sshd_config sed -i 's/#Protocol 2,1/Protocol 2/g' /etc/ssh/sshd_config sed -i 's/GSSAPIAuthentication yes/GSSAPIAuthentication no/g' /etc/ssh/sshd_config rm -fr /root/.ssh/ 2>/dev/null __detect_result # 添加系统管理员组 echo -en "${BC}group & user is created... ${EC}";sleep 1 getent group xxadmin > /dev/null || groupadd -g 1000 xxadmin 2>/dev/null if [ $(grep -c "%xxadmin" /etc/sudoers) == 0 ]; then echo "%xxadmin ALL=(ALL) NOPASSWD: ALL" >> /etc/sudoers fi if [ $(grep -c "hostkeeper" /etc/passwd) == 0 ]; then useradd -u 1000 -g xxadmin -p '123456' -c "hostkeeper user" hostkeeper fi mkdir /home/hostkeeper/.ssh/ && echo 'ssh-rsa ******************************************** -----END RSA PRIVATE KEY-----' > /home/hostkeeper/.ssh/id_rsa && chown -R hostkeeper:xxadmin /home/hostkeeper/.ssh && chmod 400 /home/hostkeeper/.ssh/* __detect_result # 字符编码设置为 UTF-8 echo -en "${BC}LANG is en_US.UTF8... ${EC}";sleep 1 sed -i 's/LANG=.*/LANG="en_US.UTF-8"/g' /etc/sysconfig/i18n __detect_result # 清空 iptables 规则 echo -en "${BC}iptables is optimize... ${EC}";sleep 1 iptables='/etc/sysconfig/iptables' if [ ! -f ${iptables} ] || [ $(grep -c '\-F' ${iptables}) == 0 ]; then sed -i 's/\-A FORWARD \-j REJECT \-\-reject\-with icmp\-host\-prohibited/\-A FORWARD \-j REJECT \-\-reject\-with icmp\-host\-prohibited\n\-F/g' $iptables fi __detect_result # 关闭 SElinux echo -en "${BC}Selinux is disabled... ${EC}";sleep 1 if [ $(getenforce) != 'Diabled' ]; then sed -i 's/SELINUX=.*/SELINUX=disabled/g' /etc/sysconfig/selinux sed -i 's/SELINUX=.*/SELINUX=disabled/g' /etc/selinux/config fi __detect_result # 配置 VIM #echo -en "${BC}vimrc is config... ${EC}";sleep 1 #echo "set paste" >> /etc/vimrc #echo "filetype on" >> /etc/vimrc # #__detect_result # 配置 security bash echo -en "${BC}acfun_bashenv.sh is config... ${EC}";sleep 1 cat > /etc/profile.d/acfun_bashenv.sh <<EOF # for security set alias chgrp='chgrp --preserve-root' alias chown='chown --preserve-root' alias chmod='chmod --preserve-root' alias rm='rm -i --preserve-root' # for history set HISTTIMEFORMAT='[%F %T] ' HISTSIZE=2000 # set vim set export EDITOR=vim alias vi='vim' EOF __detect_result # 配置 limit.conf echo -en "${BC}limits.conf is optimize... ${EC}";sleep 1 login='/etc/pam.d/login' if [ $(grep -c "pam_limits.so" ${login}) == 0 ]; then echo "session required pam_limits.so" >> ${login} fi limits='/etc/security/limits.conf' if [ $(grep -c "* soft nofile 655360" ${limits}) == 0 ]; then echo "* soft nofile 655360" >> ${limits} echo "* hard nofile 655360" >> ${limits} echo "* soft nproc 131072" >> ${limits} echo "* hard nproc 131072" >> ${limits} echo "# End of file" >> ${limits} fi nproc='/etc/security/limits.d/90-nproc.conf' if [ ! -f ${nproc} ] || [ $(grep -c 'nproc' ${nproc}) == 0 ];then echo '* soft nproc 131072' >> ${nproc} else sed -i 's/*.*soft.*nproc.*/* soft nproc 131072/g' ${nproc} fi __detect_result # 配置 sysctl.conf #echo -en "${BC}sysctl.conf is optimize... ${EC}";sleep 1 #sysctl='/etc/sysctl.conf' #if [ $(grep -c "net.ipv4.tcp_syncookies = 0" ${sysctl}) == 0 ]; then # { # sed -i 's/net.ipv4.tcp_syncookies = 1/net.ipv4.tcp_syncookies = 0/g' ${sysctl} # echo "net.ipv4.conf.all.arp_ignore = 1" >> ${sysctl} # echo "net.ipv4.conf.all.arp_announce = 2" >> ${sysctl} # echo "net.ipv4.conf.lo.arp_ignore = 1" >> ${sysctl} # echo "net.ipv4.conf.lo.arp_announce = 2" >> ${sysctl} # echo "net.core.rmem_default = 262144" >> ${sysctl} # echo "net.core.wmem_default = 262144" >> ${sysctl} # echo "net.core.netdev_max_backlog = 10000" >> ${sysctl} # echo "net.core.rmem_max = 16777216" >> ${sysctl} # echo "net.core.wmem_max = 16777216" >> ${sysctl} # echo "net.ipv4.tcp_rmem = 8192 87380 16777216" >> ${sysctl} # echo "net.ipv4.tcp_wmem = 8192 65536 16777216" >> ${sysctl} # echo "net.ipv4.tcp_mem = 8388608 12582912 16777216" >> ${sysctl} # echo "net.ipv4.tcp_max_syn_backlog = 4096" >> ${sysctl} # echo "net.ipv4.tcp_synack_retries = 2" >> ${sysctl} # echo "net.nf_conntrack_max = 8553600" >> ${sysctl} # echo "net.netfilter.nf_conntrack_max = 8553600" >> ${sysctl} # echo "net.netfilter.nf_conntrack_tcp_timeout_established = 60" >> ${sysctl} #} #fi #__detect_result # 建立数据目录 echo -en "${BC}data file is create... ${EC}";sleep 1 mkdir -p /opt/logs mkdir -p /opt/package mkdir -p /opt/javaserver mkdir -p /opt/data/mysqldata mkdir -p /opt/data/redis mkdir -p /opt/data/zookeeper mkdir -p /opt/script mkdir -p /opt/backup __detect_result # 搭建rsync服务 echo -e "${BC}create rsync server... ${EC}";sleep 1 touch /etc/rsyncd.conf if [ $(grep -c "rsync" /etc/rsyncd.conf) == 0 ]; then cat > /etc/rsyncd.conf <<EOF uid = root gid = root use chroot = no max connections = 10 strict modes = yes pid file = /var/run/rsyncd.pid lock file = /var/run/rsync.lock log file = /opt/logs/rsyncd.log EOF fi if [ $(grep -c "/usr/bin/rsync --daemon" /etc/rc.local) == 0 ]; then echo '/usr/bin/rsync --daemon' >> /etc/rc.local fi /usr/bin/rsync --daemon __detect_result # 安装java服务 echo -e "${BC}install oracle java... ${EC}";sleep 1 wget -P /tmp/ --no-check-certificate --no-cookies --header "Cookie: oraclelicense=accept-securebackup-cookie" http://download.oracle.com/otn-pub/java/jdk/8u45-b14/jdk-8u45-linux-x64.rpm rpm -ivh /tmp/jdk-8u45-linux-x64.rpm echo "" >>/etc/profile echo "# java jdk config" >> /etc/profile echo "JAVA_HOME=/usr/java/jdk1.8.0_45" >> /etc/profile echo "PATH=\$JAVA_HOME/bin:\$JAVA_HOME/jre/bin:\$PATH" >> /etc/profile echo "CLASSPATH=.:\$JAVA_HOME/lib/dt.jar:\$JAVA_HOME/lib/tools.jar:\$JAVA_HOME/jre/lib/rt.jar" >> /etc/profile echo "export JAVA_HOME PATH CLASSPATH" >> /etc/profile source /etc/profile __detect_result # 关闭服务 echo -e "${BC}services is optimize... ${EC}";sleep 1 chkconfig --level 35 abrt-ccpp off 2>/dev/null chkconfig --level 35 abrtd off 2>/dev/null chkconfig --level 35 acpid off 2>/dev/null chkconfig --level 35 atd off 2>/dev/null chkconfig --level 35 certmonger off 2>/dev/null chkconfig --level 35 cpuspeed off 2>/dev/null chkconfig --level 35 cups off 2>/dev/null chkconfig --level 35 mcelogd off 2>/dev/null chkconfig --level 35 mdmonitor off 2>/dev/null chkconfig --level 35 nfslock off 2>/dev/null chkconfig --level 35 ip6tables off 2>/dev/null chkconfig --level 35 postfix off 2>/dev/null service abrt-ccpp stop 2>/dev/null service abrtd stop 2>/dev/null service acpid stop 2>/dev/null service atd stop 2>/dev/null service certmonger stop 2>/dev/null service cpuspeed stop 2>/dev/null service cups stop 2>/dev/null service mcelogd stop 2>/dev/null service mdmonitor stop 2>/dev/null service nfslock stop 2>/dev/null service ip6tables stop 2>/dev/null service postfix stop 2>/dev/null __detect_result # 添加 yum 软件源 echo -en "${BC}yum source is install... ${EC}";sleep 1 rpm -Uvh http://dl.fedoraproject.org/pub/epel/6/x86_64/epel-release-6-8.noarch.rpm yum install yum-priorities -y epel='/etc/yum.repos.d/epel.repo' if [ $(grep -c "priority=10" ${epel}) == 0 ]; then sed -i 's/enabled = 1/enabled = 1\npriority = 10/g' ${epel} fi __detect_result # YUM 安装相关服务 echo -e "${BC}packages is installed... ${EC}";sleep 1 yum -e 0 -d 0 -y -q install iftop iotop ipmitool wget telnet vim xinetd dmidecode redhat-lsb ntp openssl bash man gcc gcc-c++ make sysstat nc lrzsz parted mtr iptraf strace 2>/dev/null __detect_result # 初始安装关闭DHCP引导 echo -e "${BC}DHCP BOOT is disabled... ${EC}";sleep 1 ipmitool -I open chassis bootdev disk options=persistent,efiboot __detect_result echo "system init finished!" echo "" echo "reboot after 1 minutes!" shutdown -r +1
centos_6.7_系统初始化的更多相关文章
- centos7 系统初始化脚本
现在自己的本地虚拟机系统,直接安装的是centos7.2 mini版,安装完成发现好多东西都没有安装,所以写了一个简单的系统初始化脚本,让自己可以省一些力气,哈哈 人懒主要是. 下面贴出写的脚本,脚本 ...
- ssh下:系统初始化实现ServletContextListener接口时,获取spring中数据层对象无效的问题
想要实现的功能:SSH环境下,数据层都交由Spring管理:在服务启动时,将数据库中的一些数据加载到ServletContext中缓存起来. 系统初始化类需要实现两个接口: ServletContex ...
- 详解linux系统的启动过程及系统初始化
一.linux系统的启动流程 关于linux系统的启动流程我们可以按步进行划分为如下: POST加电自检 -->BIOS(Boot Sequence)-->加载对应引导上的MBR(boot ...
- Ztack学习笔记(2)-系统初始化分析
main函数先执行初始化工作,包括硬件.网络层.任务等的初始化. 一 系统初始化 系统初始化函数主要完成内存分配.消息队列头.定时器.电源管理.任务系统及内存栈等的初始化,具体如下代码所示: //os ...
- Linux安装系统注意事项及系统初始化
Linux安装系统注意事项 1.分区 学习用途: /boot:200M /swap :内存的1到2倍 /:根据需要分配大小,比如虚拟机下总空间是15G,那么可以分配8——10G跟/分区,如果是生产 ...
- ucos系统初始化及启动过程
之前在ucos多任务切换中漏掉了一个变量, OSCtxSwCtr标识系统任务切换次数 主要应该还是用在调试功能中 Ucos系统初始化函数为OSInit(),主要完成以下功能 全局变量初始化 就绪任务表 ...
- centos系统初始化流程及实现系统裁剪
Linux系统的初始化流程: POST:ROM+RAM BIOS: Boot Sequence MBR: 446:bootloader 64: 分区表 2: 5A kernel文件:基本磁盘分区 /s ...
- 【linux】系统初始化的shell脚本
根据参考网上的一些文章,总结出来一个系统初始化的shell脚本 1.初始化脚本 #!/bin/bash cat << EOF +------------------------------ ...
- Saltstack生产案例之系统初始化
把之前的配置打个包 zip -r salt.zip * 拷贝到/root/tools目录 博客园文件里面也保留一份,删除之前所有的salt配置文件重新开始 想 1,系统初始化 2,功能模块:设置单独的 ...
随机推荐
- POJ_1088 滑雪(记忆型DP+DFS)
Description Michael喜欢滑雪,这并不奇怪, 因为滑雪的确很刺激.可是为了获得速度,滑的区域必须向下倾斜,而且当你滑到坡底,你不得不再次走上坡或者等待升降机来载你.Michael想知道 ...
- MFC error C2065: “IDD_DIALOG1” : 未声明的标识符 转载
error C2065: “IDD_DIALOG1” : 未声明的标识符 1.编译时提示error C2065: “IDD_DIALOG1” : 未声明的标识符 2.错误的可能原因及解决方法如下: 原 ...
- [转] 小tip: 使用CSS将图片转换成黑白(灰色、置灰) ---张鑫旭
by zhangxinxu from http://www.zhangxinxu.com本文地址:http://www.zhangxinxu.com/wordpress/?p=2547 //zxx: ...
- 搭建Tornado+Nginx
Tornado一个高效的异步非阻塞式的实时Web服务器,是Facebook旗下的 FriendFeed 网站开源Web服务器版本.但是它内置的HTTP服务器功能有限,不能在生产环境下使用. 在 Fri ...
- Java操作Oracle数据库以及调用存储过程
操作Oracle数据库 publicclass DBConnection { //jdbc:oracle:thin:@localhost:1521:orcl publicstaticf ...
- CSS3随笔系列之transform(一)—— transform-origin
transform-origin属性平时似乎用得很少,它决定了变换时依赖的原点.基本的属性特性可以参考CSS手册. 如果在H5动画项目中,用到旋转的话,它还是不能小觑的. 假如我们做一个秋千效果 其实 ...
- hexo 适合前端 geek 的博客
原文出自:http://www.qiangji.tk/hexo%E9%80%82%E5%90%88%E5%89%8D%E7%AB%AFgeek%E7%9A%84%E5%8D%9A%E5%AE%A2/ ...
- Guava学习
Guava学习笔记目录 Guava 是一个 Google 的基于java1.6的类库集合的扩展项目,包括 collections, caching, primitives support, concu ...
- [转帖]自动调整TextView字体大小以适应文字长度
package com.test.android.textview; import android.content.Context; import android.graphics.Paint; im ...
- Error: opening registry key 'Software\JavaSoft\Java Runtime Environment' Error: could not find java.dll
java -jar yxCollector-1.1.0.jarError: opening registry key 'Software\JavaSoft\Java Runtime Environme ...