Linux常用初始化操作

设置命令符号：

cat > ~/.bashrc << 'EOF'
PS1='[\[\e[31m\]\u\[\e[33m\]@\[\e[36m\]\h \[\e[32m\]\w\[\e[37m\]]\$ \[\e[m\]'
EOF
source ~/.bashrc

设置主机名：

[root@localhost ~]# hostnamectl set-hostname GuoJie-Server --static
[root@localhost ~]# bash
bash
[root@GuoJie-Server ~]#

设置时区：

[root@localhost ~]# ln -sf /usr/share/zoneinfo/Asia/Shanghai /etc/localtime
# 或者下面这个，建议用下面这个
[root@localhost ~]# timedatectl set-timezone 'Asia/Shanghai'

关闭selinux

[root@localhost ~]# setenforce 0
[root@localhost ~]# sed -i 's/SELINUX=enforcing/SELINUX=disabled/g' /etc/selinux/config

配置软件源：

centos7:

mkdir /etc/yum.repos.d/backup
mv /etc/yum.repos.d/CentOS-* /etc/yum.repos.d/backup
curl -o /etc/yum.repos.d/CentOS-Base.repo https://mirrors.huaweicloud.com/repository/conf/CentOS-7-anon.repo
curl -o /etc/yum.repos.d/epel.repo https://mirrors.aliyun.com/repo/epel-7.repo
sed -i "s/#baseurl/baseurl/g" /etc/yum.repos.d/epel.repo
sed -i "s/metalink/#metalink/g" /etc/yum.repos.d/epel.repo
sed -i "s@https?://download.fedoraproject.org/pub@https://mirrors.huaweicloud.com@g" /etc/yum.repos.d/epel.repo
yum clean all
yum makecache

ubuntu：

sudo cp -a /etc/apt/sources.list /etc/apt/sources.list.bak
sudo sed -i "s@http://.*archive.ubuntu.com@http://mirrors.huaweicloud.com@g" /etc/apt/sources.list
sudo sed -i "s@http://.*security.ubuntu.com@http://mirrors.huaweicloud.com@g" /etc/apt/sources.list
apt-get update

配置时间同步：

[root@localhost ~]# vi /etc/chrony.conf
# 注释其它，添加阿里云ntp
# server 0.centos.pool.ntp.org iburst
# server 1.centos.pool.ntp.org iburst
# server 2.centos.pool.ntp.org iburst
# server 3.centos.pool.ntp.org iburst
server ntp.aliyun.com iburst

#启动并设置开机自启动
[root@localhost ~]# systemctl start chronyd && systemctl enable chronyd

[root@localhost ~]# chronyc sources -c
210 Number of sources = 1
MS Name/IP address         Stratum Poll Reach LastRx Last sample
===============================================================================
^* 203.107.6.88                  2   6    17     6  -1062us[-3264us] +/-   38ms

防火墙开放端口：

firewalld：

# 开放3306端口
[root@localhost ~]# firewall-cmd --zone=public --add-port=3306/tcp --permanent
# 查看开了哪些端口
[root@localhost ~]# firewall-cmd --list-all
# 关闭端口
[root@localhost ~]# firewall-cmd --zone=public --remove-port=3306/tcp --permanent

#注意，做操作之后需要重新加载才生效
[root@localhost ~]# firewall-cmd --reload

ufw:

# 安装ufw并开启
apt-get install ufw
ufw enable 

# 查看状态（开放了哪些端口）
ufw status

#开放22号端口
ufw allow 22/tcp

#关闭8001端口
ufw delete allow 8001/tcp

#配置也是要重新加载才生效
ufw reload 

禁ping:

[root@Rocky ~]# echo 1 > /proc/sys/net/ipv4/icmp_echo_ignore_all
[root@Rocky ~]# cat <<EOF>> /etc/sysctl.conf
net.ipv4.icmp_echo_ignore_all=1
EOF
[root@Rocky ~]# sysctl -p
net.ipv4.icmp_echo_ignore_all = 1