CentOS6.5 一键部署运行环境shell脚本

 ##################################################

#  CentOS6.5                                                                                         #

#  initialize the Linux system to deploy lnmp                                              #

#  2016/10/30 22:58                                                                              #

# author：kangjie                                                                                   #
# original article     　　　　　　　　　　　　　　　　　　　　　　　　              #

##################################################

#!/bin/sh

#向自动化运维迈进

#定义文件位置

LOG_PATH=/server/initlog

LOG_FILE=$LOG_PATH/init.log

i=0

#如果文件夹不存在，则创建

[ ! -d /server/tools ] && mkdir -p /server/tools

[ ! -d $LOG_PATH ] && mkdir -p $LOG_PATH

 

#判断命令执行是否成功

#check status then wirite to log

function check(){

if [ $? != 0 ] 

then

echo "××××-operate $1 Failed!!!-×××" >> $LOG_FILE 

else 

echo "√√√-operate $1 Success-√√√" >> $LOG_FILE

fi

}

 

#关闭防火墙，禁止开机启动（仅限于没有公网的情况）

#iptables

function iptable(){

/etc/init.d/iptables stop

check iptables

 

chkconfig iptables off 

check chkconfig-iptables

((i++))

}

 

#关闭selinux，修改配置文件后，同时设置临时生效

#selinux  disable the selinux

function selinux(){

status=`grep SELINUX= /etc/selinux/config | tail -1 | awk -F '='  '{print $2}'`

if [ $status != disabled ]

then

sed -i 's#SELINUX=enforcing#SELINUX=disabled#g' /etc/selinux/config

status=`grep SELINUX= /etc/selinux/config | tail -1 | awk -F '='  '{print $2}'`

if [ $status == disabled ]

then

echo "√√√-Modify selinux config success-√√√-" >> $LOG_FILE

else

echo "××××-Modify selinux config Failed!!!-××××" >> $LOG_FILE

fi

else

echo "Selinx config already Modified" >> $LOG_FILE

fi

setenforce 0  #关闭selinux

check setenfore

((i++))

}

#添加系统用户，修改密码

#add user and change password

function adduser(){

userdel -r kangjie  >/dev/null 2>&1

useradd kangjie

check adduser

echo "123456" | passwd --stdin kangjie && history -c 

check "change user password"

((i++))

}

#更新yum源为163yum源

#yum update 163

function yumsource(){

cd /etc/yum.repos.d/

/bin/mv CentOS-Base.repo CentOS-Base.repo.ori

wget http://mirrors.163.com/.help/CentOS6-Base-163.repo

/bin/mv CentOS6-Base-163.repo CentOS-Base.repo

check yum-update

((i++))

}

#安装系统监控软件

#software sysstat

function soft(){

yum install sysstat -y 

check sysstat

((i++))

}

#精简开机启动项，虚拟机上设置后无法开机，需要在真实环境中测试

#Msconfig   something the matter 

function Msconfig(){

for a in `chkconfig --list | grep "3:on" | awk '{print $1}' | grep -vE "crond|network|sshd|rsyslog"`;

do 

chkconfig $a off; 

done

check Msconfig

((i++))

}

#更改ssh登录端口、禁止root用户登录，禁止空密码，禁用DNS登录

#sshd

function changesshd(){

cp /etc/ssh/sshd_config /etc/ssh/sshd_config.ori 

sed -i 's%#Port 22%Port 22222%' /etc/ssh/sshd_config

sed -i 's%#PermitRootLogin yes%PermitRootLogin no%' /etc/ssh/sshd_config

sed -i 's%#PermitEmptyPasswords no%PermitEmptyPasswords no%' /etc/ssh/sshd_config

sed -i 's%#UseDNS yes%UseDNS no%' /etc/ssh/sshd_config

egrep "UseDNS|22222|RootLogin|EmptyPass" /etc/ssh/sshd_config >> $LOG_FILE

((i++))

}

 

#给kangjie用户赋予高的权限

#sudouser

function sudouser(){

cp /etc/sudoers /etc/sudoers.ori

echo "kangjie ALL=(ALL) ALL" >>/etc/sudoers

tail -1 /etc/sudoers >> $LOG_FILE

((i++))

}

#更改字符集，支持国标，鸡肋

#lang  something the matter

function lang(){

echo ' LANG="zh_CN.GB18030"'  >/etc/sysconfig/i18n 

source /etc/sysconfig/i18n

echo $LANG >> $LOG_FILE

((i++))

}

#定时任务校准时间 ，虚拟机无效，需要手动更改时区和时间

#crontab something the matter

function cron(){

echo '*/5 * * * * /usr/sbin/ntpdate time.windows.com >/dev/null 2>&1' >>/var/spool/cron/root

crontab -l >> $LOG_FILE

((i++))

}

#修改系统文件描述符

#limits

function limit(){

echo '*               -       nofile          65535 ' >>/etc/security/limits.conf

tail -1 /etc/security/limits.conf >> $LOG_FILE

((i++))

}

#修改vim配置，显示行号等内容

#注意：使用EOF时，其后不能跟多余的空格，否则报错

#vimrc

function vimrc(){

cp /etc/vimrc /etc/vimrc.ori

cat >>/etc/vimrc<<EOF

set nu

syntax on

set autoindent

set smartindent

set tabstop=4

set shiftwidth=4

set showmatch

set cursorline

EOF

check vimrc

((i++))

}

#修改系统内核参数,sysctl -p  使参数生效

#来源：oldboy51cto博客
#sysctl.conf 

function sys(){

cp /etc/sysctl.conf /etc/sysctl.conf.`date +"%Y-%m-%d_%H-%M-%S"` #备份

cat>>/etc/sysctl.conf<<EOF

net.ipv4.tcp_timestamps = 0

net.ipv4.tcp_synack_retries = 2

net.ipv4.tcp_syn_retries = 2

net.ipv4.tcp_mem = 94500000 915000000 927000000

net.ipv4.tcp_max_orphans = 3276800

net.core.wmem_default = 8388608

net.core.rmem_default = 8388608

net.core.rmem_max = 16777216

net.core.wmem_max = 16777216

net.ipv4.tcp_rmem=4096 87380 16777216

net.ipv4.tcp_wmem=4096 65536 16777216

net.core.netdev_max_backlog =  32768

net.core.somaxconn = 32768

net.ipv4.tcp_syncookies=1

net.ipv4.tcp_tw_reuse = 1

net.ipv4.tcp_tw_recycle = 1

net.ipv4.tcp_fin_timeout=1

net.ipv4.tcp_keepalive_time=1200

net.ipv4.tcp_max_syn_backlog = 65536

net.ipv4.ip_local_port_range = 1024  65535

EOF

 

sysctl -p 

check sysctl

((i++))

}

#配置邮件，使用126邮箱发送邮件

#mail

function mailset(){

cat >>/etc/mail.rc<<EOF

set from=13888888888@126.com 

set smtp=smtp.126.com 

set smtp-auth-user=13888888888@126.com

set smtp-auth-password=888888

set smtp-auth=login

EOF

 

#取得主机的IP地址

a=`ifconfig | grep 'inet addr:'|grep -v '127.0.0.1'|awk -F '[ :]+' '{print $4}'`

echo "This is a test mail from $a" | mail -s "deploy linux" 88888888@qq.com

}

#发邮件

function Mail(){

mail -s "***Linux Deploy Report***" 888888888@qq.com < $LOG_FILE

}

#主函数

#main

function main(){

echo "Deploy Linux *****`date +"%Y-%m-%d_%H-%M-%S"`*****">>$LOG_FILE

iptable

selinux

adduser

yumsource

soft

mailset

#Msconfig

changesshd

sudouser

#lang

cron

limit

vimrc

sys

#统计执行过的函数的个数

echo "ALL steps=$i" >> $LOG_FILE

Mail 

}

 

main