继续共享线上脚本,本脚本主要用于新装linux系统初始化工作.
- #!/bin/sh
- # desc: coralzd modified by www.freebsdsystem.org www.linuxtone.org
- #-------------------cut begin-------------------------------------------
- #welcome
- cat << EOF
- --------------------------------------------------------------
- | === Welcome to Centos System init === |
- --------------http:
- ----------------------Author:NetSeek--------------------------
- EOF
-
- #disable ipv6
- cat << EOF
- --------------------------------------------------------------
- | === Welcome to Disable IPV6 === |
- --------------------------------------------------------------
- EOF
- echo "alias net-pf-10 off" >> /etc/modprobe.conf
- echo "alias ipv6 off" >> /etc/modprobe.conf
- /sbin/chkconfig --level 35 ip6tables off
- echo "ipv6 is disabled!"
-
- #disable selinux
- sed -i ''/SELINUX/s/enforcing/disabled/'' /etc/selinux/config
- echo "selinux is disabled,you must reboot!"
-
- #vim
- sed -i "8 s/^/alias vi=''vim''/" /root/.bashrc
- echo ''syntax on'' > /root/.vimrc
-
- #zh_cn
- sed -i -e ''s/^LANG=.*/LANG="zh_CN.UTF-8"/'' /etc/sysconfig/i18n
- # configure file max to 52100
- echo "* soft nofile 52100
- * soft nofile 52100" >> /etc/security/limits.conf
-
- #tunoff services
- #--------------------------------------------------------------------------------
- cat << EOF
- --------------------------------------------------------------
- | === Welcome to Tunoff services === |
- --------------------------------------------------------------
- EOF
- #---------------------------------------------------------------------------------
- for i in `ls /etc/rc3.d/S*`
- do
- CURSRV=`echo $i|cut -c 15-`
-
- echo $CURSRV
- case $CURSRV in
- crond | irqbalance | microcode_ctl | network | random | sendmail | sshd | syslog | local | mysqld )
- echo "Base services, Skip!"
- ;;
- *)
- echo "change $CURSRV to off"
- chkconfig --level 235 $CURSRV off
- service $CURSRV stop
- ;;
- esac
- done
- rm -rf /etc/sysctl.conf
- echo "net.ipv4.ip_forward = 0
- net.ipv4.conf.default.rp_filter = 1
- net.ipv4.conf.default.accept_source_route = 0
- kernel.sysrq = 0
- kernel.core_uses_pid = 1
- net.ipv4.tcp_syncookies = 1
- kernel.msgmnb = 65536
- kernel.msgmax = 65536
- kernel.shmmax = 68719476736
- kernel.shmall = 134217728
- net.ipv4.ip_local_port_range = 1024 65536
- net.core.rmem_max = 16777216
- net.core.wmem_max = 16777216
- net.ipv4.tcp_rmem = 4096 87380 16777216
- net.ipv4.tcp_wmem = 4096 65536 16777216
- net.ipv4.tcp_fin_timeout = 3
- net.ipv4.tcp_tw_recycle = 1
- net.core.netdev_max_backlog = 30000
- net.ipv4.tcp_no_metrics_save = 1
- net.core.somaxconn = 262144
- net.ipv4.tcp_syncookies = 0
- net.ipv4.tcp_max_orphans = 262144
- net.ipv4.tcp_max_syn_backlog = 262144
- net.ipv4.tcp_synack_retries = 2
- net.ipv4.tcp_syn_retries = 2
- vm.swappiness = 3" >> /etc/sysctl.conf
- echo "optimizited kernel configure was done!"
|