centos7.5下一键简单优化系统脚本

#!/usr/bin/bash

#替换yum源和epel源为阿里云，并安装常用软件
wget -O /etc/yum.repos.d/CentOS-Base.repo http://mirrors.aliyun.com/repo/Centos-7.repo
wget -O /etc/yum.repos.d/epel.repo http://mirrors.aliyun.com/repo/epel-7.repo
yum clean all && yum makecache && yum -y install wget vim lrzsz bash-completion dos2unix telnet tree net-tools namp sl nc psmisc ntpdate sysstat

#关闭防火墙和selinux
systemctl stop firewalld.service
systemctl disable firewalld.service
sed -i ‘s/SELINUX=enforcing/SELINUX=disabled/g‘ /etc/selinux/config
setenforce 0

#设置时间同步
echo "#time update by root" >>/var/spool/cron/root
echo "*/5 * * * * /usr/sbin/ntpdate ntp1.aliyun.com &>/dev/null" >>/var/spool/cron/root

#优化ssh链接(这里没有优化禁止root远程登录)
cp /etc/ssh/sshd_config /etc/ssh/sshd_config.$(date +%F).bak
sed -i ‘s/^GSSAPIAuthentication yes$/GSSAPIAuthentication no/‘ /etc/ssh/sshd_config
sed -i ‘s/#UseDNS yes/UseDNS no/‘ /etc/ssh/sshd_config
sed -i ‘s%#PermitEmptyPasswords no%PermitEmptyPasswords no%‘ /etc/ssh/sshd_config
systemctl restart sshd.service

#设置字符集为zh_CN.UTF-8
localectl set-locale LANG=zh_CN.UTF-8
source /etc/locale.conf

#加大linux文件描述符
echo ‘*	-	nofile 65535‘ >>/etc/security/limits.conf

#更改网卡名称为eth0，配置主机IP地址和DNS(根据自己需求改一下地址即可)
mv /etc/sysconfig/network-scripts/ifcfg-ens32 /etc/sysconfig/network-scripts/ifcfg-ens32.bak
cat > /etc/sysconfig/network-scripts/ifcfg-eth0 << EOF
TYPE=Ethernet
BOOTPROTO=static
DEFROUTE=yes
IPV4_FAILURE_FATAL=no
IPV6INIT=yes
IPV6_AUTOCONF=yes
IPV6_DEFROUTE=yes
IPV6_FAILURE_FATAL=no
NAME=eth0
DEVICE=eth0
ONBOOT=yes
PREFIX=24
IPV6_PEERDNS=yes
IPV6_PEERROUTES=yes
IPV6_PRIVACY=no
IPADDR=10.0.0.7
GATEWAY=10.0.0.254
NETMASK=255.255.255.0
DNS1=202.96.128.86
DNS2=114.114.114.114
EOF

#修改grub与网卡名称一致
cp /etc/sysconfig/grub /etc/sysconfig/grub.bak
sed -i ‘s/rhgb/& net.ifnames=0 biosdevname=0 /‘ /etc/sysconfig/grub
grub2-mkconfig -o /boot/grub2/grub.cfg && systemctl restart network.service

#以上是简单优化，注意优化完成需要重启一次系统网卡eth0才生效
reboot