最小化安装Linux的常用配置整理

基于安全性考虑，将服务器进行最小化安装，毕竟软件包越少，漏洞越少，相对来说就约安全，但是最小化安装会给运维带来一些问题和不便，下面是我总结的，常见的一些配置和工具的安装，仅供各位大神参考，如有新的idea，欢迎补充！

 #yum配置
 mv /etc/yum.repos.d/CentOS-Base.repo /etc/yum.repos.d/CentOS-Base.repo.backup
 CentOS
 wget -O /etc/yum.repos.d/CentOS-Base.repo http://mirrors.aliyun.com/repo/Centos-5.repo
 CentOS
 wget -O /etc/yum.repos.d/CentOS-Base.repo http://mirrors.aliyun.com/repo/Centos-6.repo
 CentOS
 wget -O /etc/yum.repos.d/CentOS-Base.repo http://mirrors.aliyun.com/repo/Centos-7.repo
 yum clean all
 yum makecache

 #时间同步
 echo "*/5 * * * * /usr/sbin/ntpdate ntp.sjtu.edu.cn >> /home/timedate.log && hwclock -w && hwclock --show >> /home/timedate.log" >> /var/spool/cron/root

 #ctrlaltdel
 sed -i '/ca::ctrlaltdel:/{s/^/#/}' /etc/inittab

 #initdefault
 sed -r -i '/^id/s/.*/id:3:initdefault:/' /etc/inittab

 #lock file
 chattr +i /etc/passwd /etc/inittab /etc/group /etc/shadow /etc/gshadow
 mv /usr/bin/chattr /usr/bin/testchattr

 #常用工具安装：
 yum -y install wget vim lsof lrzsz

 # GCC编译环境
 yum -y install gcc-*  zlib zlib-devel glibc-* libpcap libpcap-devel ncurses ncurses-devel libpcap-devel* unzip

 # 系统管理常用工具
 yum -y install sysstate iotop state dstat htop iotop

 #性能监控工具
 dstat iftop htop sysstat

 # setup命令
 yum install setuptool ntsysv system-config-network-tui system-config-securitylevel-tui iptables -y

 #其他工具安装
 yum -y install rsync git vsftpd httpd

 #桌面环境-右键没有terminal
 yum -y install nautilus-open-terminal
 reboot
 shutdown -r now

 # 防火墙
 iptables -F
 service iptables save
 service iptables restart
 chkconfig iptables off

 #selinux
 setenforce
 sed -r -i '/^SELINUX=/s/.*/SELINUX=disabled/' /etc/selinux/config

 #history
 echo "HISTFILESIZE=2000" >> /etc/bashrc
 echo "HISTFILESIZE=2000" >> /etc/bashrc
 echo "HISTSIZE=2000" >> /etc/bashrc
 echo "HISTTIMEFORMAT='<%F %T> : '" >> /etc/bashrc

 #timeout ssh
 echo "umask 022" >>/etc/profile
 echo "export TMOUT=6000" >>/etc/profile

 #open files
 echo "*    soft    nofile    65535"    >> /etc/security/limits.conf
 echo "*    hard    nofile    65535"    >> /etc/security/limits.conf
 echo "*    -    nproc    unlimited"    >> /etc/security/limits.conf
 echo "*  soft  nproc  unlimited" >>/etc/security/limits.d/-nproc.conf
 echo "session    required    /lib64/security/pam_limits.so" >>/etc/pam.d/login