vmware模板机centos7.7制作
1、网卡模块
1>修改网卡名称为eth0
PEERDNS=no
这个选项可令 /etc/resolv.conf 在系统重启后不会被重写。
mv /etc/sysconfig/network-scripts/ifcfg-ens33 /etc/sysconfig/network-scripts/ifcfg-eth0
cat /etc/sysconfig/network-scripts/ifcfg-eth0
TYPE=Ethernet
PROXY_METHOD=none
BROWSER_ONLY=no
BOOTPROTO=dhcp
DEFROUTE=yes
IPV4_FAILURE_FATAL=no
IPV6INIT=yes
IPV6_AUTOCONF=yes
IPV6_DEFROUTE=yes
IPV6_FAILURE_FATAL=no
IPV6_ADDR_GEN_MODE=stable-privacy
NAME=eth0
DEVICE=eth0
ONBOOT=yes
PEERDNS=no
2>修改grub配置,添加net.ifnames=0 biosdevname=0 字段
[root@localhost ~]# cat /etc/sysconfig/grub
GRUB_TIMEOUT=5
GRUB_DISTRIBUTOR="$(sed 's, release .*$,,g' /etc/system-release)"
GRUB_DEFAULT=saved
GRUB_DISABLE_SUBMENU=true
GRUB_TERMINAL_OUTPUT="console"
GRUB_CMDLINE_LINUX="spectre_v2=retpoline rd.lvm.lv=centos/root rd.lvm.lv=centos/swap rhgb net.ifnames=0 biosdevname=0 quiet"
GRUB_DISABLE_RECOVERY="true"
3>生成grub启动菜单重启系统生效
grub2-mkconfig -o /boot/grub2/grub.cfg
reboot
2、防火墙、swap、swap，禁用开机启动项
systemctl stop firewalld && systemctl disable firewalld
setenforce 0 && sed -i 's/SELINUX=enforcing/SELINUX=disabled/' /etc/selinux/config
swapoff -a
注释fstab内swap挂载选项
cat /etc/fstab
#/dev/mapper/centos-swap swap swap defaults 0 0
systemctl disable dbus-org.freedesktop.NetworkManager.service
systemctl disable dbus-org.freedesktop.nm-dispatcher.service
systemctl disable NetworkManager-dispatcher.service
systemctl disable NetworkManager
systemctl disable postfix.service
3、优化ssh
echo 'UseDNS no'>>/etc/ssh/sshd_config
echo 'PermitRootLogin yes'>>/etc/ssh/sshd_config
sed -i '/GSSAPIAuthentication/a\\GSSAPIAuthentication no' /etc/ssh/sshd_config
4、修改默认dns
cat /etc/resolv.conf
# Generated by NetworkManager
search localdomain
#nameserver 192.168.121.2
nameserver 180.76.76.76
5、优化yum源、安装常用软件
mkdir -p /etc/yum.repos.d/old-repo
mv /etc/yum.repos.d/*.repo /etc/yum.repos.d/old-repo/
curl -o /etc/yum.repos.d/CentOS-Base.repo http://mirrors.aliyun.com/repo/Centos-7.repo
yum -y update
yum -y install epel-release git ntp ntpdate lrzsz lftp wget unzip zip bash-completion tree elinks nmap bind-utils net-tools tcptraceroute
yum clean all
6、调整文件描述符大小
cat /etc/security/limits.conf
* soft nofile 1024000
* hard nofile 1024000
7、调整字符集，使其支持中文
cat /etc/locale.conf
#LANG="en_US.UTF-8"
LANG="zh_CN.UTF-8"
8、内核参数调优
cp /etc/sysctl.conf /etc/sysctl.conf.bak
cat /etc/sysctl.conf
net.ipv4.tcp_syncookies = 1
net.ipv4.tcp_abort_on_overflow = 1
net.ipv4.tcp_max_tw_buckets = 6000
net.ipv4.tcp_sack = 1
net.ipv4.tcp_window_scaling = 1
net.ipv4.tcp_rmem = 4096 87380 4194304
net.ipv4.tcp_wmem = 4096 66384 4194304
net.ipv4.tcp_mem = 94500000 915000000 927000000
net.core.optmem_max = 81920
net.core.wmem_default = 8388608
net.core.wmem_max = 16777216
net.core.rmem_default = 8388608
net.core.rmem_max = 16777216
net.ipv4.tcp_max_syn_backlog = 1020000
net.core.netdev_max_backlog = 862144
net.core.somaxconn = 262144
net.ipv4.tcp_max_orphans = 327680
net.ipv4.tcp_timestamps = 0
net.ipv4.tcp_synack_retries = 1
net.ipv4.tcp_syn_retries = 1
net.ipv4.tcp_tw_reuse = 1
net.ipv4.tcp_fin_timeout = 15
net.ipv4.tcp_keepalive_time = 30
net.ipv4.ip_local_port_range = 1024 65535
net.netfilter.nf_conntrack_tcp_timeout_established = 180
net.netfilter.nf_conntrack_max = 1048576
net.nf_conntrack_max = 1048576
fs.file-max = 655350
使内核参数生效
modprobe nf_conntrack
sysctl -p /etc/sysctl.conf
sysctl -w net.ipv4.route.flush=1
9、优化history
cat /etc/profile
export HISTTIMEFORMAT="%F %T `whoami` "
export HISTFILESIZE=5000
export HISTSIZE=5000
echo "source /etc/profile" >>~/.bashrc
source /etc/profile
10、设置时区、同步时间
timedatectl set-timezone Asia/Shanghai
cat /etc/rc.local
ntpdate -u ntp1.aliyun.com
chmod +x /etc/rc.d/rc.local
chmod a+x /etc/rc.local
11、垃圾清理
yum clean headers
yum clean packages
yum clean metadata
12、历史记录清理
echo > /var/log/wtmp
echo > /var/log/btmp
echo>/var/log/lastlog
echo > /var/log/secure
echo > /var/log/messages
echo>/var/log/syslog
echo>/var/log/yum.log
echo > ~/.bash_history
history -cw
13、静态ip配置
cat /etc/sysconfig/network-scripts/ifcfg-eth0
TYPE=Ethernet
PROXY_METHOD=none
BROWSER_ONLY=no
BOOTPROTO=none
DEFROUTE=yes
IPV4_FAILURE_FATAL=no
IPV6INIT=yes
IPV6_AUTOCONF=yes
IPV6_DEFROUTE=yes
IPV6_FAILURE_FATAL=no
IPV6_ADDR_GEN_MODE=stable-privacy
NAME=eth0
DEVICE=eth0
IPADDR=192.168.121.5
PREFIX=24
GATEWAY=192.168.121.2
#DNS1=192.168.121.2
DNS1=8.8.8.8
ONBOOT=yes
PEERDNS=no