Centos7.9 安装

demonlamei

已于 2024-02-28 07:57:06 修改

阅读量561

点赞数 7

分类专栏：操作系统文章标签： linux centos

于 2024-02-27 16:55:18 首次发布

本文链接：https://blog.youkuaiyun.com/demonlamei/article/details/136325845

版权

操作系统专栏收录该内容

1 篇文章

订阅专栏

本文详细介绍了在CentOS系统中安装EPEL源，以及一系列常见的系统优化措施，包括关闭SELinux、防火墙、修改时区、swap分区、限制文件数量、SSH配置、服务启动优化、开机自启脚本和字符集设置。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

epel源安装

yum install epel-release -y

常用工具包安装

yum install telnet lrzsz nc nmap dos2unix tcpdump pstree lsof make zlib-devel pcre-devel sysstat yum-utils vim wget git zip unzip net-tools htop iotop bc httpd-tools gcc gcc-c++  bash-completion -y

常用优化项

1、关闭selinux

[root@localhost ~]# sed -i 's#SELINUX=enforcing#SELINUX=disabled#g' /etc/selinux/config
[root@localhost ~]# more /etc/sysconfig/selinux 

# This file controls the state of SELinux on the system.
# SELINUX= can take one of these three values:
#     enforcing - SELinux security policy is enforced.
#     permissive - SELinux prints warnings instead of enforcing.
#     disabled - No SELinux policy is loaded.
SELINUX=**disabled**
# SELINUXTYPE= can take one of three values:
#     targeted - Targeted processes are protected,
#     minimum - Modification of targeted policy. Only selected processes are protected. 
#     mls - Multi Level Security protection.
SELINUXTYPE=targeted

2、清空系统版本信息

echo > /etc/issue
echo > /etc/issue.net

3、关闭防火墙

systemctl stop firewalld.service      # 停止firewalld服务
systemctl disable firewalld.service   # 关闭开机自启动

4、修改时区为上海时区

timedatectl set-timezone Asia/Shanghai

5、关闭swap分区

#临时性
swapoff -a 

#永久性
sed -ri 's/.*swap.*/#&/' /etc/fstab

6、修改limit.conf限制

#备份
cp /etc/security/limits.conf /etc/security/limits.conf.`date "+%Y-%m-%d-%H:%M:%S"`

*       soft    nofile  65535
*       hard    nofile  65535
*       soft    nproc   65535
*       hard    nproc   65535
*       soft    memlock unlimited
*       hard    memlock unlimited

7、sshd服务优化

PermitRootLogin no  #拒绝root用户直接登录
Port 10022  #根据具体情况修改
PermitEmptyPasswords no #拒绝空密码
UseDNS no  #防止ssh登录缓慢
GSSAPIAuthentication no

8、服务启动优化

# 关闭网卡图形化模式
systemctl stop NetworkManager.service 
systemctl disable NetworkManager.service 
# 关闭postfix服务
systemctl stop postfix.service 
systemctl disable postfix.service

9、开机自启脚本

#/etc/rc.d/rc.local需赋予执行权限，默认无执行权限
chmod +x /etc/rc.d/rc.local

10、修改字符集

#修改字符集为zh_CN.UTF-8
localectl set-locale LANG=zh_CN.UTF-8