CentOS7系统初始化脚本2

发布网友 发布时间：2023-04-30 02:18

我来回答

共1个回答

热心网友 时间：2023-10-06 04:48

[root@linux-node1 ~]# cat optimize.sh

PASSWD=reid
NETIP=192.168.56.11
PROTOBOOT=static
HOSTNAME=linux-node1.example.com
DNS1=192.168.56.2
NTPSERVER=ntp1.aliyun.com
YUMREPO= http://mirrors.aliyun.com/repo/Centos-7.repo
EPELREPO= http://mirrors.aliyun.com/repo/epel-7.repo
SSH_PORT=22122

CHATTR=chenhao

PORTS=80,22,21,8088

HISTDIR=/usr/etc/.history

cat << EOF
+------------------------------------------------------------------+
| ********** Welcome to CentOS 7.x System init ********** |
+------------------------------------------------------------------+
EOF
[ whoami != "root" ] && echo "please use root" && exit 1
function format() {
echo -e "\033[32m Success!!!\033[0m\n"
echo "#########################################################"
}

echo "set root passwd"
echo $PASSWD | passwd root --stdin &> /dev/null
format

echo ""> /etc/sysconfig/network-scripts/ifcfg-eth0
echo "TYPE=Ethernet" >> /etc/sysconfig/network-scripts/ifcfg-eth0
echo "NAME=eth0" >> /etc/sysconfig/network-scripts/ifcfg-eth0
echo "DEVICE=eth0" >> /etc/sysconfig/network-scripts/ifcfg-eth0
echo "ONBOOT=yes" >> /etc/sysconfig/network-scripts/ifcfg-eth0
echo "BOOTPROTO= NETIP" >> /etc/sysconfig/network-scripts/ifcfg-eth0
echo "NETMASK=255.255.255.0" >> /etc/sysconfig/network-scripts/ifcfg-eth0

format

systemctl stop NetworkManager
systemctl diable NetworkManager
format

route add default gateway DNS1" >/etc/profile.d/add-route.sh
format

echo "set hostname"
hostname HOSTNAME" > /etc/hostname
format

echo "set DNS"
echo "" > /etc/resolv.conf
echo "nameserver $DNS1" > /etc/resolv.conf

ping -c 3 www.baidu.com &> /dev/null || echo "Network is unreachable" || exit 3
format

echo "disable selinux"
[ getenforce != "Disabled" ] && setenforce 0 &> /dev/null && sed -i s/"^SELINUX=.*$"/"SELINUX=disabled"/g /etc/sysconfig/selinux
format

echo "set yum mirrors"
cd /etc/yum.repos.d/
mv CentOS-Base.repo CentOS-Base.repo.bak
curl -o /etc/yum.repos.d/CentOS-Base.repo EPELREPO &> /dev/null
mv /var/cache/yum /tmp
yum clean all &> /dev/null && yum makecache &> /dev/null
format

yum install vim wget openssl-devel ntpdate make gcc-c++ ncurses-devel net-snmp sysstat lrzsz zip unzip tree net-tools lftp -y

format

echo "set LANG"

echo "set ntptime"
mv /etc/localtime /tmp
cp /usr/share/zoneinfo/Asia/Shanghai /etc/localtime
ntpdate NTPSERVER &>/dev/null" >> /etc/crontab
hwclock -w
format

echo "Set ulimit 65535"
cat << EOF > /etc/security/limits.conf

echo "set history"
cat >> /etc/profile.d/system-audit.sh << EOF
USER_IP= who -u am i 2>/dev/null| awk '{print $NF}'|sed -e 's/[()]//g'
if [ -z HISTDIR ]
then
mkdir -p HISTDIR
fi
if [ ! -d {LOGNAME} ]
then
mkdir -p {LOGNAME}
chmod 300 {LOGNAME}
fi
export HISTSIZE=2000
DT= date +%Y%m%d_%H%M%S
export HISTFILE=" {LOGNAME}/ DT"
export HISTTIMEFORMAT="[%Y.%m.%d %H:%M:%S] "
chmod 600 {LOGNAME}/ .history 2>/dev/null

ulimit -SHn 65535
ulimit -SHu unlimited
ulimit -SHd unlimited
ulimit -SHm unlimited
ulimit -SHs unlimited
ulimit -SHt unlimited
ulimit -SHv unlimited
EOF
source /etc/profile.d/system-audit.sh
format

echo "Set login message."
echo "This is Proct Server" > /etc/issue
format

echo "set iptables"
systemctl stop firewalld
systemctl disable firewalld
format

reboot