CentOS 7 優化腳本
阿新 • • 發佈:2018-12-10
vncserver log 反向解析 開始 net-tools rpcidmapd rtm 安裝 isa CentOS 7 優化腳本
#!/bin/bash #this script is only for CentOS 7.x platform=`uname -i` if [ $platform != "x86_64" ];then echo "腳本僅適合64位CentOS 7系統" exit 1 fi echo "----------CentOS 7 64位系統,開始優化----------" #添加公網DNS地址 cat >> /etc/resolv.conf << EOF nameserver 114.114.114.114 EOF #修改字符集 sed -i ‘s/LANG="en_US.UTF-8"/LANG="zh_CN.UTF-8"/‘ /etc/locale.conf #Yum源更換為國內阿裏源 yum install wget telnet -y mv /etc/yum.repos.d/CentOS-Base.repo /etc/yum.repos.d/CentOS-Base.repo.backup wget -O /etc/yum.repos.d/CentOS-Base.repo http://mirrors.aliyun.com/repo/Centos-7.repo #添加阿裏的epel源 #add the epel wget -O /etc/yum.repos.d/epel.repo http://mirrors.aliyun.com/repo/epel-7.repo # rpm -ivh http://dl.Fedoraproject.org/pub/epel/7/x86_64/e/epel-release-7-8.noarch.rpm #yum重新建立緩存 yum clean all yum makecache #同步時間 yum -y install ntp /usr/sbin/ntpdate cn.pool.ntp.org echo "* 4 * * * /usr/sbin/ntpdate cn.pool.ntp.org > /dev/null 2>&1" >> /var/spool/cron/root systemctl restart crond.service #安裝vim,可適當添加vim配置 yum -y install vim tree wget lrzsz net-tools bash-completion #設置最大打開文件描述符數 echo "ulimit -SHn 102400" >> /etc/rc.local cat >> /etc/security/limits.conf << EOF * soft nofile 655350 * hard nofile 655350 EOF #禁用selinux sed -i ‘s/SELINUX=enforcing/SELINUX=disabled/‘ /etc/selinux/config setenforce 0 #關閉防火墻 systemctl disable firewalld.service systemctl stop firewalld.service #配置 ssh sed -i ‘s/#UseDNS yes/UseDNS no/‘ /etc/ssh/sshd_config #禁止DNS反向解析客戶端 sed -i ‘s/#Port 22/Port 2223/‘ /etc/ssh/sshd_config systemctl restart sshd.service #內核參數優化 cat >> /etc/sysctl.conf << EOF vm.overcommit_memory = 1 net.ipv4.ip_local_port_range = 1024 65536 net.ipv4.tcp_fin_timeout = 1 net.ipv4.tcp_keepalive_time = 1200 net.ipv4.tcp_mem = 94500000 915000000 927000000 net.ipv4.tcp_tw_reuse = 1 net.ipv4.tcp_tw_recycle = 1 net.ipv4.tcp_timestamps = 0 net.ipv4.tcp_synack_retries = 1 net.ipv4.tcp_syn_retries = 1 net.ipv4.tcp_abort_on_overflow = 0 net.core.rmem_max = 16777216 net.core.wmem_max = 16777216 net.core.netdev_max_backlog = 262144 net.core.somaxconn = 262144 net.ipv4.tcp_max_orphans = 3276800 net.ipv4.tcp_max_syn_backlog = 262144 net.core.wmem_default = 8388608 net.core.rmem_default = 8388608 net.ipv4.netfilter.ip_conntrack_max = 2097152 net.nf_conntrack_max = 655360 net.netfilter.nf_conntrack_tcp_timeout_established = 1200 EOF /sbin/sysctl -p #系統服務優化,可適當選擇下列服務 SERVICES="acpid atd auditd avahi-daemon avahi-dnsconfd bluetooth conman cpuspeed cups dnsmasq dund firstboot hidd httpd ibmasm ip6tables irda kdump lm_sensors mcstrans messagebus microcode_ctl netconsole netfs netplugd nfs nfslock nscd oddjobd pand pcscd portmap psacct rdisc restorecond rpcgssd rpcidmapd rpcsvcgssd saslauthd sendmail setroubleshoot smb vncserver winbind wpa_supplicant ypbind" for service in $SERVICES do #關閉所選服務隨系統啟動 systemctl disable $SERVICES #停止所選的服務 systemctl stop $SERVICES done echo "------------------優化完成--------------------"
CentOS 7 優化腳本