分享个简易版Linux服务器初始化Shell脚本
程序员文章站
2023-01-08 19:55:43
该shell脚本主要用于新安装linux服务器系统的初始化工作,具体包括: 关闭ipv6模块 关闭selinux 让vim显示颜色 设置系统语言编码 优化系统服务 内核参数...
该shell脚本主要用于新安装linux服务器系统的初始化工作,具体包括:
关闭ipv6模块
关闭selinux
让vim显示颜色
设置系统语言编码
优化系统服务
内核参数优化等。
可以根据自己的实际情况修改,可用于生产环境。原作者是netseek,本人做了部分修改。
#!/bin/sh
# desc: lsm03624 modified by www.webnginx.com
#-------------------cut begin-------------------------------------------
#welcome
cat << eof
+--------------------------------------------------------------+
| === welcome to centos system init === |
+--------------http://www.linuxtone.org------------------------+
+----------------------author:netseek--------------------------+
eof
#disable ipv6
cat << eof
+--------------------------------------------------------------+
| === welcome to disable ipv6 === |
+--------------------------------------------------------------+
eof
echo "alias net-pf-10 off" >> /etc/modprobe.conf
echo "alias ipv6 off" >> /etc/modprobe.conf
/sbin/chkconfig --level 35 ip6tables off
echo "ipv6 is disabled!"
#disable selinux
sed -i '/selinux/s/enforcing/disabled/' /etc/selinux/config
echo "selinux is disabled,you must reboot!"
#vim
sed -i "8 s/^/alias vi='vim'/" /root/.bashrc
echo 'syntax on' > /root/.vimrc
#zh_cn
sed -i -e 's/^lang=.*/lang="zh_cn.utf-8"/' /etc/sysconfig/i18n
# configure file max to 52100
echo "* soft nofile 52100
* hard nofile 52100" >> /etc/security/limits.conf
#tunoff services
#--------------------------------------------------------------------------------
cat << eof
+--------------------------------------------------------------+
| === welcome to tunoff services === |
+--------------------------------------------------------------+
eof
#---------------------------------------------------------------------------------
for i in `ls /etc/rc3.d/s*`
do
cursrv=`echo $i|cut -c 15-`
echo $cursrv
case $cursrv in
cpuspeed | crond | irqbalance | microcode_ctl | mysqld | network | nginx | php-fpm | sendmail | sshd | syslog )
#这个启动的系统服务根据具体的应用情况设置,其中network、sshd、syslog是三项必须要启动的系统服务!
echo "base services, skip!"
*)
echo "change $cursrv to off"
chkconfig --level 235 $cursrv off
service $cursrv stop
esac
done
rm -rf /etc/sysctl.conf
echo "net.ipv4.ip_forward = 0
net.ipv4.conf.default.rp_filter = 1
net.ipv4.conf.default.accept_source_route = 0
kernel.sysrq = 0
kernel.core_uses_pid = 1
net.ipv4.tcp_syncookies = 1
kernel.msgmnb = 65536
kernel.msgmax = 65536
kernel.shmmax = 68719476736
kernel.shmall = 134217728
net.ipv4.ip_local_port_range = 1024 65536
net.core.rmem_max = 16777216
net.core.wmem_max = 16777216
net.ipv4.tcp_rmem = 4096 87380 16777216
net.ipv4.tcp_wmem = 4096 65536 16777216
net.ipv4.tcp_fin_timeout = 3
net.ipv4.tcp_tw_recycle = 1
net.core.netdev_max_backlog = 30000
net.ipv4.tcp_no_metrics_save = 1
net.core.somaxconn = 262144
net.ipv4.tcp_syncookies = 0
net.ipv4.tcp_max_orphans = 262144
net.ipv4.tcp_max_syn_backlog = 262144
net.ipv4.tcp_synack_retries = 2
net.ipv4.tcp_syn_retries = 2
vm.swappiness = 6" >> /etc/sysctl.conf
echo "optimizited kernel configure was done!"
关闭ipv6模块
关闭selinux
让vim显示颜色
设置系统语言编码
优化系统服务
内核参数优化等。
可以根据自己的实际情况修改,可用于生产环境。原作者是netseek,本人做了部分修改。
复制代码 代码如下:
#!/bin/sh
# desc: lsm03624 modified by www.webnginx.com
#-------------------cut begin-------------------------------------------
#welcome
cat << eof
+--------------------------------------------------------------+
| === welcome to centos system init === |
+--------------http://www.linuxtone.org------------------------+
+----------------------author:netseek--------------------------+
eof
#disable ipv6
cat << eof
+--------------------------------------------------------------+
| === welcome to disable ipv6 === |
+--------------------------------------------------------------+
eof
echo "alias net-pf-10 off" >> /etc/modprobe.conf
echo "alias ipv6 off" >> /etc/modprobe.conf
/sbin/chkconfig --level 35 ip6tables off
echo "ipv6 is disabled!"
#disable selinux
sed -i '/selinux/s/enforcing/disabled/' /etc/selinux/config
echo "selinux is disabled,you must reboot!"
#vim
sed -i "8 s/^/alias vi='vim'/" /root/.bashrc
echo 'syntax on' > /root/.vimrc
#zh_cn
sed -i -e 's/^lang=.*/lang="zh_cn.utf-8"/' /etc/sysconfig/i18n
# configure file max to 52100
echo "* soft nofile 52100
* hard nofile 52100" >> /etc/security/limits.conf
#tunoff services
#--------------------------------------------------------------------------------
cat << eof
+--------------------------------------------------------------+
| === welcome to tunoff services === |
+--------------------------------------------------------------+
eof
#---------------------------------------------------------------------------------
for i in `ls /etc/rc3.d/s*`
do
cursrv=`echo $i|cut -c 15-`
echo $cursrv
case $cursrv in
cpuspeed | crond | irqbalance | microcode_ctl | mysqld | network | nginx | php-fpm | sendmail | sshd | syslog )
#这个启动的系统服务根据具体的应用情况设置,其中network、sshd、syslog是三项必须要启动的系统服务!
echo "base services, skip!"
*)
echo "change $cursrv to off"
chkconfig --level 235 $cursrv off
service $cursrv stop
esac
done
rm -rf /etc/sysctl.conf
echo "net.ipv4.ip_forward = 0
net.ipv4.conf.default.rp_filter = 1
net.ipv4.conf.default.accept_source_route = 0
kernel.sysrq = 0
kernel.core_uses_pid = 1
net.ipv4.tcp_syncookies = 1
kernel.msgmnb = 65536
kernel.msgmax = 65536
kernel.shmmax = 68719476736
kernel.shmall = 134217728
net.ipv4.ip_local_port_range = 1024 65536
net.core.rmem_max = 16777216
net.core.wmem_max = 16777216
net.ipv4.tcp_rmem = 4096 87380 16777216
net.ipv4.tcp_wmem = 4096 65536 16777216
net.ipv4.tcp_fin_timeout = 3
net.ipv4.tcp_tw_recycle = 1
net.core.netdev_max_backlog = 30000
net.ipv4.tcp_no_metrics_save = 1
net.core.somaxconn = 262144
net.ipv4.tcp_syncookies = 0
net.ipv4.tcp_max_orphans = 262144
net.ipv4.tcp_max_syn_backlog = 262144
net.ipv4.tcp_synack_retries = 2
net.ipv4.tcp_syn_retries = 2
vm.swappiness = 6" >> /etc/sysctl.conf
echo "optimizited kernel configure was done!"