大佬教程收集整理的这篇文章主要介绍了Centos 7初始化脚本,大佬教程大佬觉得挺不错的,现在分享给大家,也给大家做个参考。
#!/bin/bash #modify some service demeon # 关闭不需要用到的一些服务 systemctl disable acpid systemctl disable iP6tables systemctl disable mcelogd systemctl disable mdmonitor systemctl disable netfs systemctl disable nfslock systemctl disable openct systemctl disable postfix systemctl disable rpcbind systemctl disable rpcgssd systemctl disable rpcidmapd systemctl disable auditd systemctl disable haldaemon systemctl disable lldpad systemctl disable atd systemctl disable kdump #Close selinux # 关闭selinux sed -i "s/SELINUX=enforcing/SELINUX=disabled/g" /etc/selinux/config sed -i ‘s/SELINUXTYPE=targeted/#&/‘ /etc/selinux/config setenforce 0 #Create new partitions # 创建分区,并格式化及挂载 NEWDISK="/dev/xvdb" FDK=`fdisk -l $NEWDISK | grep $NEWDISK | wc -l` if [ $FDK -eq 0 ] ; then echo "没有$NEWDISK设备,无法创建分区!" elif [ $FDK -eq 1 ] ; then fdisk $NEWDISK << EOF n p 1 w EOF partprobe sleep 2 file ${NEWDISK}1 if [ $? -eq 0 ] ; then mkfs -t ext4 ${NEWDISK}1 if [ $? -eq 0 ] && [ ! -d /data ] ; then mkdir /data mount ${NEWDISK}1 /data FST=`cat /etc/fstab | grep ${NEWDISK}1 | wc -l` if [ $FST -eq 0 ] ; then echo "${NEWDISK}1 /data ext4 defaults 0 0" >> /etc/fstab echo "成功创建${NEWDISK}1分区,已成功格式化,并已挂载至/data下,已添加至/etc/fstab开机挂载!" else echo "成功创建${NEWDISK}1分区,已成功格式化,并已挂载至/data下,请检查/etc/fstab文件是否已添加开机挂载!" fi else echo "格式化${NEWDISK}1失败;或者/data目录已存在,挂载失败!" fi else echo "没有找到${NEWDISK}1分区,未格式化!" fi else echo "${NEWDISK}1分区已存在,无须再创建!" fi #modify bashrc # 设置一个ip命令别名,用于查看本地IP地址 cat << EOF >>/etc/bashrc alias ip=‘/sbin/ifconfig | grep ‘\‘‘inet ‘\‘‘ | awk ‘\‘‘{print $2}‘\‘‘ | sed -e ‘\‘‘/127\.0\.0\.1/d‘\‘‘‘ EOF #Create an ordinary user # 创建一个xuad用户,并允许其用sudo命令时不需要输入密码,并禁止root用户登陆 NEWUSER="xuad" PASS="JKbL*u#E%317Y8c" id $NEWUSER if [ $? -eq 0 ] ; then echo "$NEWUSER账户已存在,无法创建!" else useradd $NEWUSER echo $PASS | passwd --stdin $NEWUSER if [ $? -eq 0 ] ; then echo "$NEWUSER账户创建成功!" sed -i "/^root/a\$NEWUSER\tALL=(ALL)\tNOPASSWD: ALL" /etc/sudoers sed -i ‘/^PermitRootLogin/s/^/#/g‘ /etc/ssh/sshd_config sed -i ‘/PermitRootLogin/a\PermitRootLogin no‘ /etc/ssh/sshd_config else echo "$NEWUSER账户创建失败!" fi fi #system setTings # 修改limit参数 cat << EOF >>/etc/security/limits.conf * soft nofile 65535 * hard nofile 65535 EOF #设置开机自动同步时间 cat << EOF >>/etc/rc.d/rc.local /usr/sbin/ntPDAte ntp.xuadup.net && hwclock -w EOF #modify ntp server # 每天早上6点自动同步时间 echo "00 */6 * * * /usr/sbin/ntPDAte ntp.xuadup.net && hwclock -w">/tmp/ntpcron.txt;crontab /tmp/ntpcron.txt #modify ssh port # 修改ssh端口号 sed -i ‘/Port 22/s/^/#/g‘ /etc/ssh/sshd_config sed -i ‘/Port 22/a\Port 5210‘ /etc/ssh/sshd_config sed -i ‘/^GSSAPI/s/^/#/g‘ /etc/ssh/sshd_config sed -i ‘/GSSAPI options/a\GSSAPIAuthentication no‘ /etc/ssh/sshd_config #service sshd restart # 重启sshd服务,并执行防火墙策略 if [ $? -eq 0 ] ; then systemctl restart sshd sh ./firewalld_linux echo "sshd服务重启成功,远程登陆端口已设置为55210" else echo "sshd服务配置有问题,请检查!" fi
firewalld防火墙脚本如下:
#!/bin/bash systemctl stop firewalld \cp -p /usr/lib/firewalld/zones/drop.xml /etc/firewalld/zones/ systemctl start firewalld firewall-cmd --set-default-zone=drop firewall-cmd --peRMANent --zone=drop --change-interface=eth0 firewall-cmd --peRMANent --zone=drop --add-protocol=icmp firewall-cmd --peRMANent --zone=drop --add-masquerade firewall-cmd --peRMANent --zone=drop --add-rich-rule="rule family="ipv4" source address="192.168.2.208" port protocol="tcp" port="5210" accept" firewall-cmd --peRMANent --zone=drop --add-rich-rule="rule family="ipv4" source address="192.168.2.206" port protocol="tcp" port="5210" accept" firewall-cmd --peRMANent --zone=drop --add-rich-rule="rule family="ipv4" source address="116.226.230.115" port protocol="tcp" port="8023" accept" firewall-cmd --reload
以上是大佬教程为你收集整理的Centos 7初始化脚本全部内容,希望文章能够帮你解决Centos 7初始化脚本所遇到的程序开发问题。
如果觉得大佬教程网站内容还不错,欢迎将大佬教程推荐给程序员好友。
本图文内容来源于网友网络收集整理提供,作为学习参考使用,版权属于原作者。
如您有任何意见或建议可联系处理。小编QQ:384754419,请注明来意。