实验用虚拟机环境初始化

tar -cf - init_vhost.sh | ssh node102 "tar -xf -; sh init_vhost.sh"

# hostnameecho -e "\n 1. hostname"echo ===========sed -i -r ‘s/(HOSTNAME=).*/\1node‘$(ip addr list|grep inet|grep -v ‘\blo\b‘|cut -d‘ ‘ -f 6|cut -d‘.‘ -f4|cut -d‘/‘ -f1)‘.linux.com/‘ /etc/sysconfig/network# gatewayecho -e "\n 2. gateway"echo ===========sed -i ‘/GATEWAY/d‘ /etc/sysconfig/networksed -i ‘$a GATEWAY=192.168.80.1‘ /etc/sysconfig/network# restart networkecho -e "\n 3. restart network"echo ===================service network restartcat /etc/sysconfig/network# dnsecho -e "\n 4. resolv.conf for dns"echo ===================cat > /etc/resolv.conf <<EOFsearch linux.comnameserver 192.168.1.175EOFecho -e "\n 5. NTP"echo ======cat > /etc/ntp.conf <<EOF# Permit time synchronization with our time source, but do not# permit the source to query or modify the service on this system.#restrict default kod nomodify notrap nopeer noquery#restrict -6 default kod nomodify notrap nopeer noqueryrestrict 192.168.1.175 mask 255.255.255.255 nomodify notrap nopeer noquery# Permit all access over the loopback interface.  This could# be tightened as well, but to do so would effect some of# the administrative functions.restrict 127.0.0.1 restrict -6 ::1# Hosts on local network are less restricted.#restrict 192.168.1.0 mask 255.255.255.0 nomodify notrap# Use public servers from the pool.ntp.org project.# Please consider joining the pool (http://www.pool.ntp.org/join.html).server 192.168.1.175#broadcast 192.168.1.255 key 42        # broadcast server#broadcastclient            # broadcast client#broadcast 224.0.1.1 key 42        # multicast server#multicastclient 224.0.1.1        # multicast client#manycastserver 239.255.254.254        # manycast server#manycastclient 239.255.254.254 key 42    # manycast client# Undisciplined Local Clock. This is a fake driver intended for backup# and when no outside source of synchronized time is available. server    127.127.1.0    # local clockfudge    127.127.1.0 stratum 10    # Drift file.  Put this in a directory which the daemon can write to.# No symbolic links allowed, either, since the daemon updates the file# by creating a temporary in the same directory and then rename()‘ing# it to the file.driftfile /var/lib/ntp/drift# Key file containing the keys and key identifiers used when operating# with symmetric key cryptography. keys /etc/ntp/keys# Specify the key identifiers which are trusted.#trustedkey 4 8 42# Specify the key identifier to use with the ntpdc utility.#requestkey 8# Specify the key identifier to use with the ntpq utility.#controlkey 8EOFntpdate dns# servicesecho -e "\n 6. services"echo ===========for s in atd bluetooth cups ip6tables iptables rhnsd ; doservice $s stopchkconfig $s offdone# SELinuxecho -e "\n 7. SELinux"echo =======sed -i -r ‘s/(SELINUX=)enforcing/\1permissive/‘ /etc/selinux/config# authorized_keys for sshecho -e "\n 8. authorized_keys for ssh"echo ==========================cat > .ssh/authorized_keys <<EOFssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA+lexExdw90eqWl6zpLIejL76xIx6LFCBM65tDyL4Pu3IxHoyzKhtD5jK6C3mXIjFCI7YLseDvdVMOkVb8KtPMqsYkiLtQHb2uwNy94XpIzAl0BSDfxWM5/icXr+dnCupDNHMZjcFI6kUU4wZNhzI4Xt+/cFv7+U7Qj6Ij1WJUJGZcxc8F4iVb4n9Ldeukkvc+UQ5j8iMrIykz9aqF31toFgBDMq5ORyKATKRShsU2BKFSkubaEYxOeaNfPFLi2Ycq703yTTCVFRlJkDdZs5J3++uOAcH9mVoeWmYZH4ooN0VE6ILTb0Y8LJOzOSYoYx6nyTG13Ulx0BmOry7rt7ygw== root@dns.linux.comEOF