系统优化脚本支持Ubuntu和CentOS
#!/bin/bash
os=$(cat /etc/os-release 2>/dev/null | grep ^ID= | awk -F= '{print $2}')
function selinuxset(){
selinux_status=$(grep -c "SELINUX=disabled" /etc/sysconfig/selinux)
echo "========================禁用SELINUX========================"
if [ "$selinux_status" -eq 0 ];then
sed -i "s#SELINUX=enforcing#SELINUX=disabled#g" /etc/sysconfig/selinux
setenforce 0
grep SELINUX=disabled /etc/sysconfig/selinux
getenforce
else
echo 'SELINUX已处于关闭状态'
grep SELINUX=disabled /etc/sysconfig/selinux
getenforce
fi
echo "完成禁用SELINUX"
echo "==========================================================="
sleep 3
}
function firewalldset(){
echo "========================关闭firewalld======================="
echo '关闭防火墙'
systemctl disable --now firewalld
echo '验证如下'
systemctl list-unit-files | grep firewalld
echo '生产环境下建议启用'
echo "==========================================================="
sleep 3
}
function ufwset(){
echo "========================关闭ufw============================"
echo '关闭防火墙'
systemctl disable --now ufw
echo '验证如下'
systemctl list-unit-files | grep ufw
echo '生产环境下建议启用'
echo "==========================================================="
sleep 3
}
function limitsset(){
echo "======================修改文件描述符========================"
echo '加大系统文件描述符最大值'
{
echo '* soft nofile 65536'
echo '* hard nofile 65536'
echo '* soft nproc 65536'
echo '* hard nproc 65536'
} >> /etc/security/limits.conf
echo '查看配置内容'
cat /etc/security/limits.conf
echo '设置软硬资源限制'
ulimit -Sn ; ulimit -Hn
echo "==========================================================="
sleep 3
}
function yumset(){
echo "======================开始修改YUM源========================"
echo '开始修改YUM源'
sudo sed -e 's|^mirrorlist=|#mirrorlist=|g' -e 's|^#baseurl=http://mirror.centos.org|baseurl=https://mirrors.tuna.tsinghua.edu.cn|g' -i.bak /etc/yum.repos.d/CentOS-*.repo
echo '开始安装常规软件'
yum update -y
yum install curl git wget ntpdate lsof net-tools telnet vim lrzsz tree nmap nc sysstat epel* -y
echo "==========================================================="
sleep 3
}
function aptset(){
echo "======================开始修改APT源========================"
echo '开始修改APT源'
apt_stat=$(cat /etc/apt/sources.list | grep