shell学习二十八--centos7初始化脚本

你的名字 2022-06-04 03:10 192阅读 0赞

\#!/bin/bash  
declare run\_time\_1=\`date "+%Y.%m.%d-%H:%M:%S"\`  
  
if \[\[ "$(whoami)" != "root" \]\]; then  
    echo "please run this script as root ." >&2  
    exit 1  
fi  
   
echo -e "\\033\[31m 这个是centos7系统初始化脚本，请慎重运行！Please continue to enter or ctrl+C to cancel \\033\[0m"  
sleep 5  
  
\#hostname  
hostname\_config()\{   
    HostName=$(echo "ip"-$(ip addr|grep inet|grep brd|grep scope|awk '\{print $2\}'|awk -F '/' '\{print $1\}'|sed 's/\\./-/g'))   
    sed -i -e '/HOSTNAME/d' /etc/sysconfig/network  
    echo "HOSTNAME=$HostName" >>/etc/sysconfig/network  
    echo "127.0.0.1 $HostName" >> /etc/hosts  
    hostname $HostName    
\}  
  
\#configure yum source  
yum\_config()\{  
    yum install wget epel-release -y  
    cd /etc/yum.repos.d/ && mkdir bak && mv -f \*.repo bak/  
    wget -O /etc/yum.repos.d/CentOS-Base.repo http://mirrors.aliyun.com/repo/Centos-7.repo  
    wget -O /etc/yum.repos.d/epel.repo http://mirrors.aliyun.com/repo/epel-7.repo  
    yum clean all && yum makecache  
    yum -y install iotop iftop net-tools lrzsz gcc gcc-c++ make cmake libxml2-devel openssl-devel curl curl-devel unzip sudo ntp libaio-devel wget vim ncurses-devel autoconf automake zlib-devel  python-devel bash-completion lsof  
\}  
  
\#firewalld  
firewalld\_config()\{  
    systemctl stop firewalld.service  
    systemctl disable firewalld.service  
    touch /etc/sysconfig/selinux.$run\_time\_1  
    cat /etc/sysconfig/selinux >> /etc/sysconfig/selinux.$run\_time\_1  
    echo "SELINUX=disabled">/etc/sysconfig/selinux  
    echo "SELINUXTYPE=targeted">>/etc/sysconfig/selinux

\#system config  
system\_config()\{  
    sed -i "s/SELINUX=enforcing/SELINUX=disabled/g" /etc/selinux/config  
    timedatectl set-local-rtc 1 && timedatectl set-timezone Asia/Shanghai  
    yum -y install chrony && systemctl start chronyd.service && systemctl enable chronyd.service   
\}  
ulimit\_config()\{  
    echo "ulimit -SHn 102400" >> /etc/rc.local  
    chmod +x /etc/rc.d/rc.local  
    cat >> /etc/security/limits.conf << EOF  
    \*           soft   nofile       102400  
    \*           hard   nofile       102400  
    \*           soft   nproc        102400  
    \*           hard   nproc        102400  
    \*           soft   stack        8192  
    \*           hard   stack        8192  
EOF  
    sed -i -e '/\\\*/d' /etc/security/limits.d/90-nproc.conf  
    echo "\* soft nproc 300000" >>/etc/security/limits.d/90-nproc.conf  
\}  
  
\#set sysctl  
sysctl\_config()\{  
    cp /etc/sysctl.conf /etc/sysctl.conf.$run\_time\_1  
    cat > /etc/sysctl.conf << EOF  
    net.ipv4.ip\_forward = 0  
    net.ipv4.conf.default.rp\_filter = 1  
    net.ipv4.conf.default.accept\_source\_route = 0  
    kernel.sysrq = 0  
    kernel.core\_uses\_pid = 1  
    net.ipv4.tcp\_syncookies = 1  
    kernel.msgmnb = 65536  
    kernel.msgmax = 65536  
    kernel.shmmax = 68719476736  
    kernel.shmall = 4294967296  
    net.ipv4.tcp\_max\_tw\_buckets = 6000  
    net.ipv4.tcp\_sack = 1  
    net.ipv4.tcp\_window\_scaling = 1  
    net.ipv4.tcp\_rmem = 4096 87380 4194304  
    net.ipv4.tcp\_wmem = 4096 16384 4194304  
    net.core.wmem\_default = 8388608  
    net.core.rmem\_default = 8388608  
    net.core.rmem\_max = 16777216  
    net.core.wmem\_max = 16777216  
    net.core.netdev\_max\_backlog = 262144  
    net.core.somaxconn = 262144  
    net.ipv4.tcp\_max\_orphans = 3276800  
    net.ipv4.tcp\_max\_syn\_backlog = 262144  
    net.ipv4.tcp\_timestamps = 0  
    net.ipv4.tcp\_synack\_retries = 1  
    net.ipv4.tcp\_syn\_retries = 1  
    net.ipv4.tcp\_tw\_recycle = 1  
    net.ipv4.tcp\_tw\_reuse = 1  
    net.ipv4.tcp\_mem = 94500000 915000000 927000000  
    net.ipv4.tcp\_fin\_timeout = 1  
    net.ipv4.tcp\_keepalive\_time = 30  
    net.ipv4.ip\_local\_port\_range = 1024 65000  
EOF  
    /sbin/sysctl -p  
    echo "sysctl set OK!!"  
\}  
  
\#ssh  
ssh\_config()\{  
    touch /etc/ssh/sshd\_config.$run\_time\_1  
    cat /etc/ssh/sshd\_config >> /etc/ssh/sshd\_config.$run\_time\_1  
    sed -i 's%\#UseDNS yes%UseDNS no%' /etc/ssh/sshd\_config  
    sed -i 's%GSSAPIAuthentication yes%GSSAPIAuthentication no%' /etc/ssh/sshd\_config  
\}  
  
\#ntp  
ntp\_config()\{  
    ln -sf /usr/share/zoneinfo/posix/Asia/Shanghai /etc/localtime  
    service ntpd stop  
    chkconfig ntpd off  
    ntpdate time.windows.com  
    clock --systohc  
  
    cat >> /etc/cron.daily/ntp.sh <<'EOF'  
    \#!/bin/bash  
    ntplog=/tmp/wmbak.log  
    ntpdate ntp.wumart.com 2>&1 >>$ntplog   
     clock --systohc  
EOF  
    chmod 755 /etc/cron.daily/ntp.sh  
\}  
  
  
\#zabbix  
zabbix\_config()\{  
    sed -i 's/^Defaults.\*.requiretty/\#Defaults requiretty/' /etc/sudoers  
    echo 'zabbix ALL=(root) NOPASSWD:/bin/netstat'>/etc/sudoers.d/zabbix  
    echo 'zabbix ALL=(root) NOPASSWD:/usr/sbin/ss'>>/etc/sudoers.d/zabbix  
    chmod 400 /etc/sudoers.d/zabbix  
\}  
  
\#\#Disable Transparent Huge Pages  
other\_config()\{  
    if test -f /sys/kernel/mm/transparent\_hugepage/enabled; then    
       echo never > /sys/kernel/mm/transparent\_hugepage/enabled    
    fi    
    if test -f /sys/kernel/mm/transparent\_hugepage/defrag; then    
       echo never > /sys/kernel/mm/transparent\_hugepage/defrag    
    fi    
    cat << EOF >> /etc/rc.local  
    if test -f /sys/kernel/mm/transparent\_hugepage/enabled; then  
       echo never > /sys/kernel/mm/transparent\_hugepage/enabled  
    fi  
    if test -f /sys/kernel/mm/transparent\_hugepage/defrag; then  
       echo never > /sys/kernel/mm/transparent\_hugepage/defrag  
    fi  
EOF  
    echo 1 > /proc/sys/vm/swappiness  
\}  
  
main()\{  
    hostname\_config  
    yum\_config  
    iptables\_config  
    system\_config  
    ulimit\_config  
    sysctl\_config  
    ssh\_config  
    ntp\_config  
    zabbix\_config  
    other\_config  
\}  
main