首页 > 代码库 > 主机部署常用脚本

主机部署常用脚本

2024-11-19 09:05:02   203人阅读

一、系统参数配置
+++++++++++++++++++++++++++++++++++++++++++++++++++++++
 
修改主机名
--------------------------------------
vim /etc/sysconfig/network (重启永久生效)
 
ssh 端口修改，禁用root登陆
--------------------------------------
vim /etc/ssh/sshd_config     
 
修改如下选项
Port 2209
PermitRootLogin no
 
ClientAliveInterval 20
ClientAliveCountMax 300
 
修改后重载服务：/etc/init.d/sshd restart 
 
时间同步设置
------------------------
sudo vim /etc/crontab
0 * * * *  root  /usr/sbin/ntpdate time.nist.gov
10 * * * *   root    /etc/cron.daily/logrotate
sudo /etc/init.d/crond restart
 
需要检查命令是否有“/usr/sbin/ntpdate time.nist.gov”，如果没有则进行安装：
yum install -y ntp ntpdate
 
环境变量配置
-------------------------
vim ~/.profile
export LC_ALL=en_US.UTF-8
export LANG=en_HK.UTF-8
export TZ=‘Asia/Shanghai‘
 
设置最大打开文件数
-------------------------
sudo vim /etc/security/limits.conf
 
在文件尾部添加：
* soft nofile 400000
* hard nofile 400000
 
检查：ulimit -n
 
优化linux内核参数
-----------------------------
sudo vim /etc/sysctl.conf
 
新增在文件尾部
net.core.wmem_max=12582912
net.core.rmem_max=12582912
net.ipv4.tcp_rmem= 10240 87380 12582912
net.ipv4.tcp_wmem= 10240 87380 12582912
net.ipv4.tcp_mem=  10240 87380 12582912
net.ipv4.tcp_window_scaling = 1
net.ipv4.tcp_timestamps = 1
net.ipv4.tcp_sack = 0
#net.ipv4.tcp_sack = 1
net.ipv4.tcp_fack = 1
net.ipv4.tcp_no_metrics_save = 1
net.core.netdev_max_backlog = 30000
net.core.somaxconn = 30000
net.ipv4.tcp_fin_timeout = 8
net.ipv4.tcp_keepalive_intvl = 20
#net.ipv4.tcp_keepalive_intvl = 11
net.ipv4.tcp_keepalive_probes = 5
net.ipv4.tcp_keepalive_time = 60
#net.ipv4.tcp_keepalive_time = 20
#net.ipv4.tcp_keepalive_time = 8
net.ipv4.tcp_syncookies = 1
net.ipv4.tcp_tw_reuse = 1
net.ipv4.tcp_tw_recycle = 0
#net.ipv4.tcp_tw_recycle = 1
net.ipv4.ip_local_port_range = 32768 65535
net.ipv4.tcp_max_syn_backlog = 30000
net.ipv4.tcp_max_tw_buckets = 30000
net.ipv4.tcp_orphan_retries = 1
net.ipv4.tcp_max_orphans = 8192
vm.overcommit_memory = 1
 
fs.file-max = 600000
 
net.ipv4.ip_conntrack_max = 25000000
net.ipv4.netfilter.ip_conntrack_max = 25000000
net.ipv4.netfilter.ip_conntrack_tcp_timeout_established = 180
net.ipv4.netfilter.ip_conntrack_tcp_timeout_time_wait = 120
net.ipv4.netfilter.ip_conntrack_tcp_timeout_close_wait = 60
net.ipv4.netfilter.ip_conntrack_tcp_timeout_fin_wait = 120
 
 
sudo /sbin/sysctl -p （生效）
 
硬盘挂载
-------------------
第一步：分区
执行：/sbin/fdisk  /dev/vdc
依次输入“n”，“p”“1”，两次回车，“wq”
使用“fdisk -l”命令可以看到，新的分区/dev/vdc1已经建立完成了。、
 
第二步：格式化
mkfs.ext3 /dev/vdc1
 
第三部：挂载
echo ‘/dev/vdc1                   /data                ext3   defaults        0 0‘ >> /etc/fstab
mount -a 

主机部署常用脚本


联系
我们