Centos7 系统初试化脚本

Posted 2021-01-29 root0

Centos7 系统初试化脚本

#!/bin/bash
yum install  -y wget && wget -O /etc/yum.repos.d/epel.repo http://mirrors.aliyun.com/repo/epel-7.repo && yum -y install vim wget bash-completion lrzsz nmap tree nc net-tools htop iotop iftop psmisc ntpdate && systemctl stop firewalld.service && systemctl disable firewalld.service 
#setenforce  0  && sed ‘7s#enforcing#disabled#g‘ /etc/selinux/config -i 
#优化文件描述符
echo ‘*               -       nofile          65535 ‘ >>/etc/security/limits.conf
ulimit -n 65535   
#内核优化
cat >>/etc/sysctl.conf<<EOF
net.ipv4.tcp_fin_timeout = 2
net.ipv4.tcp_tw_reuse = 1
net.ipv4.tcp_tw_recycle = 1
net.ipv4.tcp_syncookies = 1
net.ipv4.tcp_keepalive_time = 600
net.ipv4.ip_local_port_range = 4000    65000
net.ipv4.tcp_max_syn_backlog = 16384
net.ipv4.tcp_max_tw_buckets = 36000
net.ipv4.route.gc_timeout = 100
net.ipv4.tcp_syn_retries = 1
net.ipv4.tcp_synack_retries = 1
net.core.somaxconn = 16384
net.core.netdev_max_backlog = 16384
net.ipv4.tcp_max_orphans = 16384
EOF
sysctl -p
sed -i.bak ‘[email protected]#UseDNS [email protected] [email protected];[email protected]^GSSAPIAuthentication [email protected] [email protected]‘  /etc/ssh/sshd_config
systemctl restart sshd 
echo ‘* * * * *  root /usr/sbin/ntpdate ntp1.aliyun.com‘ >>/etc/crontab