centos7最小安装初始化脚本

#!/bin/bash
#zhangsen
#lovexlzs@qq.com

if [[ "$(whoami)" != "root" ]]; then

    echo "please run this script as root ." >&
    exit
fi

echo -e "\033[31m 这个是centos7系统初始化脚本，请慎重运行！Please continue to enter or ctrl+C to cancel \033[0m"
sleep 

#configure yum source
yum_config(){
    yum install wget epel-release -y
    cd /etc/yum.repos.d/ && mkdir bak && mv -f *.repo bak/
    wget -O /etc/yum.repos.d/CentOS-Base.repo http://mirrors.aliyun.com/repo/Centos-7.repo
    wget -O /etc/yum.repos.d/epel.repo http://mirrors.aliyun.com/repo/epel-7.repo
    yum clean all && yum makecache
    yum -y install iotop iftop net-tools lrzsz gcc gcc-c++ make cmake libxml2-devel openssl-devel curl curl-devel unzip sudo ntp libaio-devel wget vim ncurses-devel autoconf automake zlib-devel  python-devel bash-completion
}
#firewalld
iptables_config(){
    systemctl stop firewalld.service
    systemctl disable firewalld.service
    yum install iptables-services -y
    systemctl enable iptables
    systemctl start iptables
    iptables -F
    service iptables save
}
#system config
system_config(){
    sed -i "s/SELINUX=enforcing/SELINUX=disabled/g" /etc/selinux/config
    timedatectl set-local-rtc  && timedatectl set-timezone Asia/Shanghai
    yum -y install chrony && systemctl start chronyd.service && systemctl enable chronyd.service
}
ulimit_config(){
    echo "ulimit -SHn 102400" >> /etc/rc.local
    cat >> /etc/security/limits.conf << EOF
    *           soft   nofile
    *           hard   nofile
    *           soft   nproc
    *           hard   nproc        102400
EOF
}

#set sysctl
sysctl_config(){
    cp /etc/sysctl.conf /etc/sysctl.conf.bak
    cat > /etc/sysctl.conf << EOF
    net.ipv4.ip_forward =
    net.ipv4.conf.default.rp_filter =
    net.ipv4.conf.default.accept_source_route =
    kernel.sysrq =
    kernel.core_uses_pid =
    net.ipv4.tcp_syncookies =
    kernel.msgmnb =
    kernel.msgmax =
    kernel.shmmax =
    kernel.shmall =
    net.ipv4.tcp_max_tw_buckets =
    net.ipv4.tcp_sack =
    net.ipv4.tcp_window_scaling =
    net.ipv4.tcp_rmem =
    net.ipv4.tcp_wmem =
    net.core.wmem_default =
    net.core.rmem_default =
    net.core.rmem_max =
    net.core.wmem_max =
    net.core.netdev_max_backlog =
    net.core.somaxconn =
    net.ipv4.tcp_max_orphans =
    net.ipv4.tcp_max_syn_backlog =
    net.ipv4.tcp_timestamps =
    net.ipv4.tcp_synack_retries =
    net.ipv4.tcp_syn_retries =
    net.ipv4.tcp_tw_recycle =
    net.ipv4.tcp_tw_reuse =
    net.ipv4.tcp_mem =
    net.ipv4.tcp_fin_timeout =
    net.ipv4.tcp_keepalive_time =
    net.ipv4.ip_local_port_range =
EOF
    /sbin/sysctl -p
    echo "sysctl set OK!!"
}

main(){
    yum_config
    iptables_config
    system_config
    ulimit_config
    sysctl_config
}
main