Linux系统的基础优化

1. 进行网络配置
   a 添加网卡
   b 配置网卡
   vim /etc/sysconfig/network-scripts/ifcfg-eth1
   c 确认网络配置

2. 系统优化
   2. 模板机优化配置---更改yum源
   更改yum源
   mv /etc/yum.repos.d/CentOS-Base.repo /etc/yum.repos.d/CentOS-Base.repo.backup &&
   curl -o /etc/yum.repos.d/CentOS-Base.repo http://mirrors.aliyun.com/repo/Centos-7.repo
   yum install -y wget
   wget -O /etc/yum.repos.d/epel.repo http://mirrors.aliyun.com/repo/epel-7.repo
   PS：yum repolist 列出yum源信息；讲解什么是epel源

   3. 模板机优化配置---关闭selinux

   关闭selinux

   sed -i.bak 's/SELINUX=enforcing/SELINUX=disabled/' /etc/selinux/config
   grep SELINUX=disabled /etc/selinux/config
   setenforce 0
   getenforce

   4. 模板机优化配置---关闭iptables

   关闭iptables centos7

   systemctl stop firewalld
   systemctl disable firewalld

   5. 模板机优化配置---提权test可以sudo (可选配置)

   提权test可以sudo(可选配置)

   useradd test
   echo 123456|passwd --stdin test
   \cp /etc/sudoers /etc/sudoers.ori
   echo "test ALL=(ALL) NOPASSWD: ALL " >>/etc/sudoers
   tail -1 /etc/sudoers
   visudo -c #加载/etc/sudoers

   6. 模板机优化配置---英文字符集

   英文字符集

   localectl set-locale LANG="en_US.UTF-8"

   7. 模板机优化配置---时间同步

   时间同步

   yum install -y ntpdate
   echo '#time sync by wish at 2021-08-09' >>/var/spool/cron/root
   echo '*/5 * * * * /usr/sbin/ntpdate ntp1.aliyun.com >/dev/null 2>&1' >>/var/spool/cron/root
   crontab -l

   8. 模板机优化配置---加大文件描述
   yum install -y lsof
   lsof -i:22

   查看文件打开的多少：ulimit -a
   #加大文件描述
   echo '* - nofile 65536' >>/etc/security/limits.conf
   tail -1 /etc/security/limits.conf
   说明:
   一个服务程序运行起来,会打开相应的文件
   crond定时任务服务---systemctl start crond --- 打开相应文件
   /var/spool/cron/root --- 加载打开配置文件
   /var/log/cron --- 加载打开日志文件

   9. 模板机优化配置---安装其他小软件
   #安装其他小软件
   yum install lrzsz nmap tree dos2unix nc telnet wget lsof ntpdate bash-completion bash-completion-extras -y

   10. 模板机优化配置---ssh连接速度慢优化
   #ssh连接速度慢优化
   sed -i.bak 's@#UseDNS yes@UseDNS no@g;s@^GSSAPIAuthentication yes@GSSAPIAuthentication no@g' /etc/ssh/sshd_config
   systemctl restart sshd

   11.关闭NetworkManager
   systemctl stop NetworkManager
   systemctl disable NetworkManager
   systemctl status NetworkManager

3. 克隆后虚拟主机配置
   a 修改主机名称
   hostnamectl set-hostname backup
   b 修改主机地址
   sed -i 's#200#41#g' /etc/sysconfig/network-scripts/ifcfg-eth[01]
   grep 41 /etc/sysconfig/network-scripts/ifcfg-eth[01]
   sed -i '/UUID/d' /etc/sysconfig/network-scripts/ifcfg-eth[01]
   grep UUID /etc/sysconfig/network-scripts/ifcfg-eth[01]
   systemctl restart network
   ping -c 6 www.baidu.com