Linux系统的基础优化
-
进行网络配置
a 添加网卡
b 配置网卡
vim /etc/sysconfig/network-scripts/ifcfg-eth1
c 确认网络配置 -
系统优化
2. 模板机优化配置---更改yum源
更改yum源
mv /etc/yum.repos.d/CentOS-Base.repo /etc/yum.repos.d/CentOS-Base.repo.backup &&
curl -o /etc/yum.repos.d/CentOS-Base.repo http://mirrors.aliyun.com/repo/Centos-7.repo
yum install -y wget
wget -O /etc/yum.repos.d/epel.repo http://mirrors.aliyun.com/repo/epel-7.repo
PS:yum repolist 列出yum源信息;讲解什么是epel源- 模板机优化配置---关闭selinux
#关闭selinux sed -i.bak 's/SELINUX=enforcing/SELINUX=disabled/' /etc/selinux/config grep SELINUX=disabled /etc/selinux/config setenforce 0 getenforce
- 模板机优化配置---关闭iptables
#关闭iptables centos7 systemctl stop firewalld systemctl disable firewalld
- 模板机优化配置---提权test可以sudo (可选配置)
#提权test可以sudo(可选配置) useradd test echo 123456|passwd --stdin test \cp /etc/sudoers /etc/sudoers.ori echo "test ALL=(ALL) NOPASSWD: ALL " >>/etc/sudoers tail -1 /etc/sudoers visudo -c #加载/etc/sudoers
- 模板机优化配置---英文字符集
#英文字符集 localectl set-locale LANG="en_US.UTF-8"
- 模板机优化配置---时间同步
#时间同步 yum install -y ntpdate echo '#time sync by wish at 2021-08-09' >>/var/spool/cron/root echo '*/5 * * * * /usr/sbin/ntpdate ntp1.aliyun.com >/dev/null 2>&1' >>/var/spool/cron/root crontab -l 8. 模板机优化配置---加大文件描述 yum install -y lsof lsof -i:22 查看文件打开的多少:ulimit -a #加大文件描述 echo '* - nofile 65536' >>/etc/security/limits.conf tail -1 /etc/security/limits.conf 说明: 一个服务程序运行起来,会打开相应的文件 crond定时任务服务---systemctl start crond --- 打开相应文件 /var/spool/cron/root --- 加载打开配置文件 /var/log/cron --- 加载打开日志文件 9. 模板机优化配置---安装其他小软件 #安装其他小软件 yum install lrzsz nmap tree dos2unix nc telnet wget lsof ntpdate bash-completion bash-completion-extras -y 10. 模板机优化配置---ssh连接速度慢优化 #ssh连接速度慢优化 sed -i.bak 's@#UseDNS yes@UseDNS no@g;s@^GSSAPIAuthentication yes@GSSAPIAuthentication no@g' /etc/ssh/sshd_config systemctl restart sshd 11.关闭NetworkManager systemctl stop NetworkManager systemctl disable NetworkManager systemctl status NetworkManager
-
克隆后虚拟主机配置
a 修改主机名称
hostnamectl set-hostname backup
b 修改主机地址
sed -i 's#200#41#g' /etc/sysconfig/network-scripts/ifcfg-eth[01]
grep 41 /etc/sysconfig/network-scripts/ifcfg-eth[01]
sed -i '/UUID/d' /etc/sysconfig/network-scripts/ifcfg-eth[01]
grep UUID /etc/sysconfig/network-scripts/ifcfg-eth[01]
systemctl restart network
ping -c 6 www.baidu.com