1 #!/bin/bash 2 #添加epel和rpmforge的外部yum扩展源 3 cd /usr/local/src 4 wget http://mirrors.ustc.edu.cn/fedora/epel//5/x86_64/epel-release-5-4.noarch.rpm 5 rpm -ivh epel-release-5-4.noarch.rpm 6 wget http://packages.sw.be/rpmforge-release/rpmforge-release-0.5.2-2.el5.rf.x86_64.rpm 7 rpm -ivh rpmforge-release-0.5.2-2.el5.rf.x86_64.rpm 8 #安装gcc基础库文件以及sysstat工具 9 yum -y install gcc gcc-c++ vim-enhanced unzip unrar sysstat 10 #配置ntpdate自动对时 11 yum -y install ntp 12 echo "01 01 * * * /usr/sbin/ntpdate ntp.api.bz >> /dev/null 2>&1" >> /etc/crontab 13 ntpdate ntp.api.bz 14 service crond restart 15 #配置文件的ulimit值 16 ulimit -SHn 65535 17 echo "ulimit -SHn 65535" >> /etc/rc.local 18 cat >> /etc/security/limits.conf << EOF 19 * soft nofile 60000 20 * hard nofile 65535 21 EOF 22 #tune kernel parametres(基础系统内核优化) 23 cat >> /etc/sysctl.conf << EOF 24 net.ipv4.tcp_syncookies = 1 25 net.ipv4.tcp_syn_retries = 1 26 net.ipv4.tcp_tw_recycle = 1 27 net.ipv4.tcp_tw_reuse = 1 28 net.ipv4.tcp_fin_timeout = 1 29 net.ipv4.tcp_keepalive_time = 1200 30 net.ipv4.ip_local_port_range = 1024 65535 31 EOF 32 /sbin/sysctl -p 33 #禁用control-alt-delete组合键以防止误操作 34 sed -i 's@ca::ctrlaltdel:/sbin/shutdown -t3 -r now@#ca::ctrlaltdel:/sbin/shutdown -t3 -r now@' /etc/inittab 35 #关闭SElinux 36 sed -i 's@SELINUX=enforcing@SELINUX=disabled@' /etc/selinux/config 37 #ssh服务配置优化 38 sed -i -e '74 s/^/#/' -i -e '76 s/^/#/' /etc/ssh/sshd_config 39 sed -i 's@#UseDNS yes@UseDNS no@' /etc/ssh/sshd_config 40 service sshd restart 41 #禁用ipv6地址 42 echo "alias net-pf-10 off" >> /etc/modprobe.conf 43 echo "alias ipv6 off" >> /etc/modprobe.conf 44 echo "install ipv6 /bin/true" >> /etc/modprobe.conf 45 echo "IPV6INIT=no" >> /etc/sysconfig/network 46 sed -i 's@NETWORKING_IPV6=yes@NETWORKING_IPV6=no@' /etc/sysconfig/network 47 chkconfig ip6tables off 48 #vim基础语法优化 49 echo "syntax on" >> /root/.vimrc 50 echo "set nohlsearch" >> /root/.vimrc 51 #停用系统中不必要的服务 52 chkconfig bluetooth off 53 chkconfig sendmail off 54 chkconfig kudzu off 55 chkconfig nfslock off 56 chkconfig portmap off 57 chkconfig iptables off 58 chkconfig autofs off 59 chkconfig yum-updatesd off 60 #重启服务器 61 reboot