centos系统初始化配置

时间:2023-12-16 12:44:32
.改主机名:
sed -i 's#HOSTNAME=.*#HOSTNAME=u05mix06.yaya.corp#g' /etc/sysconfig/network && hostname u05mix06.yaya.corp
sed -i 's#HOSTNAME=.*#HOSTNAME=u04es01' /etc/sysconfig/network && hostname u04es01 .修改服务器ssh端口
ucloud:
sed -i 's/#Port 22/Port 28290/' /etc/ssh/sshd_config
sed -i 's/^GSSAPIAuthentication yes$/GSSAPIAuthentication no/' /etc/ssh/sshd_config
service sshd restart aliyun:
sed -i 's/#Port 22/Port 38390/' /etc/ssh/sshd_config
sed -i 's/^GSSAPIAuthentication yes$/GSSAPIAuthentication no/' /etc/ssh/sshd_config
service sshd restart test:
sed -i 's/#Port 22/Port 48490/' /etc/ssh/sshd_config
sed -i 's/^GSSAPIAuthentication yes$/GSSAPIAuthentication no/' /etc/ssh/sshd_config
service sshd restart 修改root密码:
echo 'pass'|passwd --stdin root .添加chinasoft用户
uclod
mkdir -p /data/chinasoft
useradd chinasoft -d /data/chinasoft aliyun useradd chinasoft -d /home/chinasoft
# 配置密码
echo 'pass'|passwd --stdin chinasoft cp /etc/skel/{.bash_profile,.bashrc,.bash_logout} /data/chinasoft
cp /etc/skel/{.bash_profile,.bashrc,.bash_logout} /home/chinasoft chown -R chinasoft.chinasoft /data
# 验证
su - chinasoft 验证端口,密码是否修改ok 是否添加sudo权限
visudo chinasoft ALL=(ALL) NOPASSWD: ALL .安装jdk1.8_102
将jdk-8u102-linux-x64.rpm上传到对应的服务器上 具体步骤:
检查现有版本JDK
# java -version 查找java相关文件并卸载
# rpm -qa|grep -i java
tzdata-java-2016f-.el6.noarch
java-1.8.-openjdk-headless-1.8.0.101-.b13.el6_8.x86_64 卸载openjdk1.
rpm -e --nodeps java-1.8.-openjdk-headless-1.8.0.101-.b13.el7_2.x86_64
rpm -e --nodeps tzdata-java-2016f-.el7.noarch
rpm -e --nodeps java-1.8.-openjdk-1.8.0.101-.b13.el7_2.x86_64 scp -P -r /usr/lib/rpm/ u04dnsmgr02.yaya.corp:/usr/lib/rpm/ 安装jdk8
rpm -ivh jdk-8u102-linux-x64.rpm java环境所在目录:
/usr/java/jdk1..0_102/
/usr/java/jdk1..0_102/bin/java JAVA_HOME=/usr/java/jdk1..0_102/
JRE_HOME=/usr/java/jdk1..0_102/jre
PATH=$PATH:$JAVA_HOME/bin:$JRE_HOME/bin
CLASSPATH=.:$JAVA_HOME/lib/dt.jar:$JAVA_HOME/lib/tools.jar:$JRE_HOME/lib
export JAVA_HOME JRE_HOME PATH CLASSPATH vim /etc/profile
export JAVA_HOME=/usr/java/jdk1..0_111
export PATH=$JAVA_HOME/bin:$PATH vim /etc/profile
export JAVA_HOME=/usr/java/jdk1..0_102
export PATH=$JAVA_HOME/bin:$PATH 验证是否ok
java -version java version "1.8.0_102"
Java(TM) SE Runtime Environment (build 1.8.0_102-b14)
Java HotSpot(TM) -Bit Server VM (build 25.102-b14, mixed mode) .启动时间同步服务,
yum install -y ntp vim /etc/ntp.conf # ntp.conf driftfile /var/lib/ntp/drift
pidfile /var/run/ntpd.pid
logfile /var/log/ntp.log # Access Control Support
restrict default kod nomodify notrap nopeer noquery
restrict - default kod nomodify notrap nopeer noquery
restrict 127.0.0.1 # local clock
server 127.127.1.0
fudge 127.127.1.0 stratum server ntp1.aliyun.com iburst minpoll maxpoll
restrict ntp1.aliyun.com nomodify notrap nopeer noquery
server ntp1.cloud.aliyuncs.com iburst minpoll maxpoll
restrict ntp1.cloud.aliyuncs.com nomodify notrap nopeer noquery
server ntp10.cloud.aliyuncs.com iburst minpoll maxpoll
restrict ntp10.cloud.aliyuncs.com nomodify notrap nopeer noquery
server ntp11.cloud.aliyuncs.com iburst minpoll maxpoll
restrict ntp11.cloud.aliyuncs.com nomodify notrap nopeer noquery
server ntp12.cloud.aliyuncs.com iburst minpoll maxpoll
restrict ntp12.cloud.aliyuncs.com nomodify notrap nopeer noquery
server ntp2.aliyun.com iburst minpoll maxpoll
restrict ntp2.aliyun.com nomodify notrap nopeer noquery
server ntp2.cloud.aliyuncs.com iburst minpoll maxpoll
restrict ntp2.cloud.aliyuncs.com nomodify notrap nopeer noquery
server ntp3.aliyun.com iburst minpoll maxpoll
restrict ntp3.aliyun.com nomodify notrap nopeer noquery
server ntp3.cloud.aliyuncs.com iburst minpoll maxpoll
restrict ntp3.cloud.aliyuncs.com nomodify notrap nopeer noquery
server ntp4.aliyun.com iburst minpoll maxpoll
restrict ntp4.aliyun.com nomodify notrap nopeer noquery
server ntp4.cloud.aliyuncs.com iburst minpoll maxpoll
restrict ntp4.cloud.aliyuncs.com nomodify notrap nopeer noquery
server ntp5.aliyun.com iburst minpoll maxpoll
restrict ntp5.aliyun.com nomodify notrap nopeer noquery
server ntp5.cloud.aliyuncs.com iburst minpoll maxpoll
restrict ntp5.cloud.aliyuncs.com nomodify notrap nopeer noquery
server ntp6.aliyun.com iburst minpoll maxpoll
restrict ntp6.aliyun.com nomodify notrap nopeer noquery
server ntp6.cloud.aliyuncs.com iburst minpoll maxpoll
restrict ntp6.cloud.aliyuncs.com nomodify notrap nopeer noquery
server ntp7.cloud.aliyuncs.com iburst minpoll maxpoll
restrict ntp7.cloud.aliyuncs.com nomodify notrap nopeer noquery
server ntp8.cloud.aliyuncs.com iburst minpoll maxpoll
restrict ntp8.cloud.aliyuncs.com nomodify notrap nopeer noquery
server ntp9.cloud.aliyuncs.com iburst minpoll maxpoll
restrict ntp9.cloud.aliyuncs.com nomodify notrap nopeer noquery chkconfig ntpd on
service ntpd restart
service ntpd status aliyun_dns配置参考:
[]# cat /etc/resolv.conf
; generated by /sbin/dhclient-script
options timeout: attempts: rotate
nameserver 10.143.22.118
nameserver 10.143.22.116 如果是海外服务器需要调整时区 查看系统默认的时区: [root@u05mix06 Asia]# ll /etc/localtime
lrwxrwxrwx root root May : /etc/localtime -> /usr/share/zoneinfo/America/Los_Angeles .修改时区
将Asia/shanghai-上海时区写入当前时区 # cp -sf /usr/share/zoneinfo/Asia/Shanghai /etc/localtime
cp: overwrite `/etc/localtime'? y

# cat /etc/sysconfig/clock
ZONE="America/Los_Angeles"

# centos7设置洛杉矶时间

timedatectl set-timezone America/Los_Angeles

提示是否覆盖,输入Y回车,

然后#date
查看时区和时间(CST,中国时区)
# date -R
Fri, May :: + crontab -e
加入如下任务:
* * * /usr/sbin/ntpdate -u us.pool.ntp.org | logger -t NTP 表示每天6点进行同步一次也可以选择us.ntp.org.cn 这个美国的时间同步服务器 将时间写入硬件
hwclock -w .安装zabbix-agent配置开机自启动
针对:centos #!/bin/bash
######################
# date: --
# author: junjie.zheng
# about: auto_install zabbix-agent and salt-minion
####################### # check os version
platform=`uname -i`
if [ $platform != "x86_64" ];then
echo "this script is only for 64bit Operating System!"
exit
fi cat << EOF
+---------------------------------------+
| your system is CentOS x86_64 |
| start optimizing....... |
+---------------------------------------
EOF ZABBIX_SERVERIP=zbx.chinasoft.com echo "------ step 3: install zabbix_client------"
rpm -ivh http://mirrors.aliyun.com/zabbix/zabbix/3.0/rhel/6/x86_64/zabbix-release-3.0-1.el6.noarch.rpm
yum -y install zabbix zabbix-agent echo "------ step 4: modify zabbix-agent profile_file and port------" sed -i "s#Server=127.0.0.1#Server=$ZABBIX_SERVERIP#g" /etc/zabbix/zabbix_agentd.conf
sed -i "s#ServerActive=127.0.0.1#ServerActive=$ZABBIX_SERVERIP#g" /etc/zabbix/zabbix_agentd.conf
sed -i "s#Hostname=Zabbix server#Hostname=`hostname`#g" /etc/zabbix/zabbix_agentd.conf
sed -i "s/# ListenPort=10050/ListenPort=20050/g" /etc/zabbix/zabbix_agentd.conf echo "------ step 5: start zabbix-agent------"
chkconfig zabbix-agent on
/etc/init.d/zabbix-agent start netstat -lnt|grep && echo "zabbix agent is ok" 如果是香港或者海外的服务器需要修改参数,以免经常重复报警:主机不可达 两个参数配置:
RefreshActiveChecks=
Timeout= .安装添加监控模板 基本硬件监控:linux
tcp监控
tomcat或者nginx监控
端口、url监控 非root用户随机启动程序示例: -------------------------------------------------------------------------------
touch /var/lock/subsys/local
ulimit -SHn echo 'options timeout:2' > /etc/resolv.conf
echo 'nameserver 10.19.177.116' >> /etc/resolv.conf
echo 'nameserver 10.19.31.157' >> /etc/resolv.conf
echo 'nameserver 114.114.114.114' >> /etc/resolv.conf
bash /usr/local/bin/set_irq_affinity.sh
su chinasoft -c "cd /data/chinasoft/zookeeper-3.4.6/bin && bash zkServer.sh start"
su chinasoft -c "cd /data/chinasoft/voice-server1 && bash start.sh start"
su chinasoft -c "cd /data/chinasoft/voice-server2 && bash start.sh start"
"cd /data/troops_test/video-record-server && bash start.sh start"
------------------------------------------------------------------------------- .北京地区ucloud主机添加dns内网解析
# 改变serial,方便dns02即slave同步
; serial (d. adams) 添加解析:
vim /var/named/yaya.corp 如下示例:
u04elk02 IN A 10.19.9.156
u04elk03 IN A 10.19.67.56 重启使配置生效
service named restart .修改文件句柄数限制
vim /etc/security/limits.conf * hard nofile
* soft nofile vim /etc/security/limits.d/-nproc.conf
删除这行
* soft nproc 编辑/etc/sysctl.conf
net.ipv4.tcp_syncookies =
net.ipv4.tcp_tw_reuse =
net.ipv4.tcp_tw_recycle =
net.ipv4.tcp_fin_timeout = swapoff -a echo "fs.file-max = 1000000" >> /etc/sysctl.conf
echo "vm.max_map_count=262144" >> /etc/sysctl.conf
echo "vm.swappiness = 0" >> /etc/sysctl.conf .添加内网域名解析
dns域名服务器:u04dns01.yaya.corp 添加解析
vim /var/named/yaya.corp 示例:
u04ck01 IN A 10.19.33.185
u04ck02 IN A 10.19.170.118
ck01.sql IN A 10.19.150.242
ck01.rds IN A 10.19.130.29 注意:
需要修改,如果不修改从服务器无法同步 ; serial (d. adams) 重启服务
service named restart .yum源配置,国内可配置为阿里云,国外yum install -y epel-release

判断centos6和centos7安装zabbix-agent

#!/bin/bash
######################
# date: --
# author: junjie.zheng
# about: auto_install zabbix-agent and salt-minion
####################### # .check os version
platform=`uname -i`
if [ $platform != "x86_64" ];then
echo "this script is only for 64bit Operating System!"
exit
fi ZABBIX_SERVERIP=zbx.yunva.com # .judge centos6 or centos7
cat /etc/redhat-release |grep \..*|grep -i centos>/dev/null
if [ $? -eq ];then
cat << EOF
+---------------------------------------+
| your system is CentOS x86_64 |
| start optimizing....... |
+---------------------------------------
EOF echo "------ step 3: install zabbix_client------"
rpm -ivh http://mirrors.aliyun.com/zabbix/zabbix/3.0/rhel/6/x86_64/zabbix-release-3.0-1.el6.noarch.rpm
yum -y install zabbix zabbix-agent echo "------ step 4: modify zabbix-agent profile_file and port------" sed -i "s#Server=127.0.0.1#Server=$ZABBIX_SERVERIP#g" /etc/zabbix/zabbix_agentd.conf
sed -i "s#ServerActive=127.0.0.1#ServerActive=$ZABBIX_SERVERIP#g" /etc/zabbix/zabbix_agentd.conf
sed -i "s#Hostname=Zabbix server#Hostname=`hostname`#g" /etc/zabbix/zabbix_agentd.conf
sed -i "s/# ListenPort=10050/ListenPort=20050/g" /etc/zabbix/zabbix_agentd.conf echo "------ step 5: start zabbix-agent------"
chkconfig zabbix-agent on
/etc/init.d/zabbix-agent start netstat -lnt|grep && echo "zabbix agent is ok"
else cat << EOF
+---------------------------------------+
| your system is CentOS x86_64 |
| start optimizing....... |
+---------------------------------------
EOF ZABBIX_SERVERIP=zbx.yunva.com echo "------ step 3: install zabbix_client------"
rpm -ivh http://repo.zabbix.com/zabbix/2.4/rhel/7/x86_64/zabbix-release-2.4-1.el7.noarch.rpm
yum -y install zabbix zabbix-agent echo "------ step 4: modify zabbix-agent profile_file and port------" sed -i "s#Server=127.0.0.1#Server=$ZABBIX_SERVERIP#g" /etc/zabbix/zabbix_agentd.conf
sed -i "s#ServerActive=127.0.0.1#ServerActive=$ZABBIX_SERVERIP#g" /etc/zabbix/zabbix_agentd.conf
sed -i "s#Hostname=Zabbix server#Hostname=`hostname`#g" /etc/zabbix/zabbix_agentd.conf
sed -i "s/# ListenPort=10050/ListenPort=20050/g" /etc/zabbix/zabbix_agentd.conf echo "------ step 5: start zabbix-agent------"
systemctl enable zabbix-agent
systemctl start zabbix-agent ss -lnt|grep && echo "zabbix agent is ok" fi