正文

最小化安装Linux的常用配置整理

IP云
IP云V管理员/1 阅读
09/19
提示：扫一扫查出行
【扫一扫了解最新限行尾号】
复制提示

基于安全性考虑，将服务器进行最小化安装，毕竟软件包越少，漏洞越少，相对来说就约安全，但是最小化安装会给运维带来一些问题和不便，下面是我总结的，常见的一些配置和工具的安装，仅供各位大神参考，如有新的idea，欢迎补充！

#yum配置
mv /etc/yum.repos.d/CentOS-Base.repo /etc/yum.repos.d/CentOS-Base.repo.backup
CentOS
wget -O /etc/yum.repos.d/CentOS-Base.repo http://mirrors.aliyun.com/repo/Centos-5.repo
CentOS
wget -O /etc/yum.repos.d/CentOS-Base.repo http://mirrors.aliyun.com/repo/Centos-6.repo
CentOS
wget -O /etc/yum.repos.d/CentOS-Base.repo http://mirrors.aliyun.com/repo/Centos-7.repo
yum clean all
yum makecache #时间同步
echo "*/5 * * * * /usr/sbin/ntpdate ntp.sjtu.edu.cn >> /home/timedate.log && hwclock -w && hwclock --show >> /home/timedate.log" >> /var/spool/cron/root #ctrlaltdel
sed -i '/ca::ctrlaltdel:/{s/^/#/}' /etc/inittab #initdefault
sed -r -i '/^id/s/.*/id:3:initdefault:/' /etc/inittab #lock file
chattr +i /etc/passwd /etc/inittab /etc/group /etc/shadow /etc/gshadow
mv /usr/bin/chattr /usr/bin/testchattr #常用工具安装：
yum -y install wget vim lsof lrzsz # GCC编译环境
yum -y install gcc-* zlib zlib-devel glibc-* libpcap libpcap-devel ncurses ncurses-devel libpcap-devel* unzip # 系统管理常用工具
yum -y install sysstate iotop state dstat htop iotop #性能监控工具
dstat iftop htop sysstat # setup命令
yum install setuptool ntsysv system-config-network-tui system-config-securitylevel-tui iptables -y #其他工具安装
yum -y install rsync git vsftpd httpd #桌面环境-右键没有terminal
yum -y install nautilus-open-terminal
reboot
shutdown -r now # 防火墙
iptables -F
service iptables save
service iptables restart
chkconfig iptables off #selinux
setenforce
sed -r -i '/^SELINUX=/s/.*/SELINUX=disabled/' /etc/selinux/config #history
echo "HISTFILESIZE=2000" >> /etc/bashrc
echo "HISTFILESIZE=2000" >> /etc/bashrc
echo "HISTSIZE=2000" >> /etc/bashrc
echo "HISTTIMEFORMAT='<%F %T> : '" >> /etc/bashrc #timeout ssh
echo "umask 022" >>/etc/profile
echo "export TMOUT=6000" >>/etc/profile #open files
echo "* soft nofile 65535" >> /etc/security/limits.conf
echo "* hard nofile 65535" >> /etc/security/limits.conf
echo "* - nproc unlimited" >> /etc/security/limits.conf
echo "* soft nproc unlimited" >>/etc/security/limits.d/-nproc.conf
echo "session required /lib64/security/pam_limits.so" >>/etc/pam.d/login