linux-tutorial/codes/linux/sys/sys-settings.sh

134 lines
3.5 KiB
Bash
Raw Normal View History

2018-09-30 10:04:45 +08:00
#!/usr/bin/env bash
2019-03-04 20:41:51 +08:00
printHeadInfo() {
cat << EOF
2018-09-30 10:04:45 +08:00
###################################################################################
2019-03-04 20:41:51 +08:00
# Linux Centos7 系统配置脚本(根据需要选择)
2019-05-07 14:29:16 +08:00
# @author: Zhang Peng
2018-09-30 10:04:45 +08:00
###################################################################################
2019-03-04 20:41:51 +08:00
EOF
}
setLimit() {
2018-09-30 10:04:45 +08:00
cat >> /etc/security/limits.conf << EOF
* - nofile 65535
* - nproc 65535
EOF
}
2019-03-04 20:41:51 +08:00
setLang() {
2018-09-30 10:04:45 +08:00
cat > /etc/sysconfig/i18n << EOF
LANG="zh_CN.UTF-8"
EOF
}
2019-03-04 20:41:51 +08:00
closeShutdownShortkey() {
2018-09-30 10:04:45 +08:00
echo "关闭 Ctrl+Alt+Del 快捷键防止重新启动"
sed -i 's#exec /sbin/shutdown -r now#\#exec /sbin/shutdown -r now#' /etc/init/control-alt-delete.conf
}
2019-03-04 20:41:51 +08:00
closeSelinux() {
2018-09-30 10:04:45 +08:00
echo "关闭 selinux"
# see http://blog.51cto.com/13570193/2093299
sed -i 's/SELINUX=enforcing/SELINUX=disabled/' /etc/selinux/config
}
2019-03-04 20:41:51 +08:00
setBootMode() {
2018-09-30 10:04:45 +08:00
# 1. 停机(记得不要把 initdefault 配置为 0因为这样会使 Linux 不能启动)
# 2. 单用户模式,就像 Win9X 下的安全模式
# 3. 多用户,但是没有 NFS
# 4. 完全多用户模式,准则的运行级
# 5. 通常不用,在一些特殊情况下可以用它来做一些事情
# 6. X11即进到 X-Window 系统
# 7. 重新启动 (记得不要把 initdefault 配置为 6因为这样会使 Linux 不断地重新启动)
echo "设置 Linux 启动模式"
sed -i 's/id:5:initdefault:/id:3:initdefault:/' /etc/inittab
}
2019-03-04 20:41:51 +08:00
# 配置 IPv4
configIpv4(){
2018-09-30 10:04:45 +08:00
echo "配置 ipv4"
cat >> /etc/sysctl.conf << EOF
net.ipv4.tcp_tw_reuse = 1
net.ipv4.tcp_tw_recycle = 1
net.ipv4.tcp_fin_timeout = 2
net.ipv4.tcp_syncookies = 1
net.ipv4.tcp_keepalive_time = 1200
net.ipv4.tcp_max_syn_backlog = 16384
net.core.netdev_max_backlog = 16384
net.core.somaxconn = 32768
net.core.wmem_default = 8388608
net.core.rmem_default = 8388608
net.core.rmem_max = 16777216
net.core.wmem_max = 16777216
net.ipv4.tcp_timestamps = 0
net.ipv4.route.gc_timeout = 100
net.ipv4.tcp_synack_retries = 1
net.ipv4.tcp_syn_retries = 1
net.ipv4.tcp_mem = 94500000 915000000 927000000
net.ipv4.tcp_max_orphans = 3276800
net.ipv4.ip_local_port_range = 2000 65535
net.ipv4.tcp_max_tw_buckets = 5000
vm.swappiness=10
EOF
}
2019-03-04 20:41:51 +08:00
# 关闭 IPv6
closeIpv6() {
2018-09-30 10:04:45 +08:00
echo "关闭 ipv6"
cat > /etc/modprobe.d/ipv6.conf << EOF
alias net-pf-10 off
options ipv6 disable=1
EOF
echo "NETWORKING_IPV6=off" >> /etc/sysconfig/network
}
2019-03-04 20:41:51 +08:00
# 入口函数
main() {
PS3="请选择要执行的操作:"
select ITEM in "设置 DNS" "设置 NTP" "关闭防火墙" "配置 IPv4" "关闭 IPv6" "全部执行"
do
case ${ITEM} in
"设置 DNS")
2019-05-16 11:49:19 +08:00
curl -o- https://gitee.com/turnon/linux-tutorial/raw/master/codes/linux/sys/set-dns.sh | bash
2019-03-04 20:41:51 +08:00
;;
"设置 NTP")
2019-05-16 11:49:19 +08:00
curl -o- https://gitee.com/turnon/linux-tutorial/raw/master/codes/linux/sys/set-ntp.sh | bash
2019-03-04 20:41:51 +08:00
;;
"关闭防火墙")
2019-05-16 11:49:19 +08:00
curl -o- https://gitee.com/turnon/linux-tutorial/raw/master/codes/linux/sys/stop-firewall.sh | bash
2019-03-04 20:41:51 +08:00
;;
"配置 IPv4")
configIpv4
;;
"关闭 IPv6")
closeIpv6
;;
"全部执行")
2019-05-16 11:49:19 +08:00
curl -o- https://gitee.com/turnon/linux-tutorial/raw/master/codes/linux/sys/set-dns.sh | bash
curl -o- https://gitee.com/turnon/linux-tutorial/raw/master/codes/linux/sys/set-ntp.sh | bash
curl -o- https://gitee.com/turnon/linux-tutorial/raw/master/codes/linux/sys/stop-firewall.sh | bash
2019-03-04 20:41:51 +08:00
configIpv4
closeIpv6
;;
*)
echo -e "输入项不支持!"
main
;;
esac
break
done
}
2018-09-30 10:04:45 +08:00
2019-03-04 20:41:51 +08:00
######################################## MAIN ########################################
2019-02-22 18:57:46 +08:00
filepath=$(cd "$(dirname "$0")"; pwd)
2019-03-04 20:41:51 +08:00
printHeadInfo
main