强大的shell(一键redis，mysql，php，openresty，jdk)

前序

集成了一键安装离线包redis，mysql，php，openresty，jdk，系统优化等脚本， 一个shell搞掂。

JDK:自动识别本地安装包，自动解压，部署，配置环境变量。

REDIS:自动识别本地安装包，自动解压，部署，判断编译错误退出，修改配置文件加入后台，日志，快捷启动。

MYSQL:自动识别本地安装包，自动解压，部署, 自动修改配置文件，初始化，编译，启动， 修改新密码。

PHP:自动识别本地安装包，自动解压，部署, 使用yum跑依赖，自动编译输出，make输出，自动配置文件， 快捷启动。

OPENRESTY:自动识别本地安装包，自动解压，部署。

系统优化: yum缓存优化，ntpdate/lrzsz工具调用优化，安全设置，hosts安全优化。

注:OPENRESTY可以说是另一种形式的nginx了， 很强大？！第一个脚本属于安装脚本， 第二个脚本是优化脚本。

shell

#/usr/bin/env bash
currentDIR=$(cd `dirname $0`; pwd)
installDIR=/usr/local

#很大一块系统调优
#system optimize
function OPTIMIZE(){
    sh ./optimize.sh
}
#JDK
function JDK(){
    j=`whereis java`
    java=$(echo ${j} | grep "jdk")
    if [[ "$java" != "" ]]
    then
        echo;
        echo "JDK已安装"
    else
        echo;
        echo "正在部署JDK"
        cd Packages
        tar -zxvf jdk-*.tar.gz -C ${installDIR} >/dev/null 2>&1
        echo;
        cd ${installDIR}/jdk* && jdkname=`pwd | awk -F '/' '{print $NF}'`
        echo;
        sed -i '$a\export JAVA_HOME='${installDIR}'/'${jdkname}'\nexport JRE_HOME=${JAVA_HOME}/jre\nexport CLASSPATH=.:${JAVA_HOME}/lib:${JRE_HOME}/lib\nexport PATH=${JAVA_HOME}/bin:$PATH' /etc/profile
        echo "source /etc/profile"
    fi
}
#REDIS
function REDIS(){
    echo "正在部署REDIS"
    mkdir -p ${installDIR}/redis/{logs,nodes,conf,bin}
    cd ${currentDIR}/Packages
    tar -zxvf redis*.tar.gz >/dev/null 2>&1
    cd redis*/src && make >/dev/null 2>&1
    if [[ $? -ne 0 ]]; then
        echo "编译出错"
    else
        cp redis-cli redis-server ${installDIR}/redis/bin
        cp redis-trib.rb ${installDIR}/redis
        cp ../redis.conf ${installDIR}/redis/conf
        cd ${installDIR}/redis/conf
        #后台
        sed -i 's/daemonize no/daemonize yes/' redis.conf
        #日志
        sed -i 's/logfile ""/logfile "\/usr\/local\/redis\/logs\/redis.logs"/' redis.conf
        #启动
        cd ../
        echo "./bin/redis-server conf/redis.conf" > start.sh
        chmod +x start.sh
    fi
}
#MYSQL
function MYSQL(){
    echo "正在部署MYSQL"
    cd ${currentDIR}/Packages
    tar -zxvf mysql*.tar.gz -C ${installDIR} >/dev/null 2>&1
    cd ${installDIR} && mv mysql* mysql
    mkdir -p /data/mysql && mkdir ${installDIR}/mysql/logs
    touch ${installDIR}/mysql/logs/mysql.logs && touch ${installDIR}/mysql/logs/initialize.logs
    touch ${installDIR}/mysql/logs/start.logs
    useradd mysql -s /usr/sbin/nologin
    configfile="/etc/my.cnf"
    NdataDIR="/data/mysql"
    OdataDIR=`cat /etc/my.cnf | grep datadir | awk -F '=' '{print$2}'`
    Nsocket="/tmp/mysql.sock"
    Osocket=`cat /etc/my.cnf | grep socket | awk -F '=' '{print$2}'`
    Nlogerror="${installDIR}/mysql/logs/mysql.logs"
    Ologerror=`cat /etc/my.cnf | grep log-error | awk -F '=' '{print$2}'`
    Npidfile="${installDIR}/mysql/mysql.pid"
    Opidfile=`cat /etc/my.cnf | grep pid-file | awk -F '=' '{print$2}'`

    sed -i "s|${OdataDIR}|${NdataDIR}|g" ${configfile}
    sed -i "s|${Ologerror}|${Nlogerror}|g" ${configfile}
    sed -i "s|${Opidfile}|${Npidfile}|g" ${configfile}
    sed -i "s|${Osocket}|${Nsocket}|g" ${configfile}
    chown -R mysql:mysql /etc/my.cnf
    chown -R mysql:mysql ${installDIR}/mysql
    chown -R mysql:mysql /data/
    echo "初始化"
    ${installDIR}/mysql/bin/mysqld --initialize --user=mysql --basedir=${installDIR}/mysql --datadir=/data/mysql > ${installDIR}/mysql/logs/initialize.logs 2>&1
    echo "#!/bin/bash" > ${installDIR}/mysql/start.sh
    echo "./bin/mysqld_safe --user=mysql --basedir=${installDIR}/mysql --datadir=/data/mysql > logs/start.logs 2>&1 &" >> ${installDIR}/mysql/start.sh
    chmod +x ${installDIR}/mysql/start.sh
    echo "启动"
    cd ${installDIR}/mysql && ./start.sh
    echo "修改新的密码"
    ln -fs /usr/local/mysql/bin/mysql /usr/bin/mysql
    password1=`cat ${installDIR}/mysql/logs/initialize.logs | grep password | awk -F ' ' '{print$NF}'`
    #echo "旧的密码:${password1}"
    password2="123456"
    #炮灰牺牲品
    mysql --protocol=TCP -u root -p''${password1}'' --connect-expired-password -e "flush PRIVILEGES;" >/dev/null 2>&1
    /usr/bin/sleep 5
    #主力
    mysql --protocol=TCP -u root -p''${password1}'' --connect-expired-password -e "alter user 'root'@'localhost' identified by '${password2}';" >/dev/null 2>&1
    echo "新的密码:${password2}"
    echo "部署完成！"
}
function PHP(){
    echo "正在部署PHP"
    cd Packages
    wget https://mirrors.ustc.edu.cn/centos/7.5.1804/extras/x86_64/Packages/epel-release-7-11.noarch.rpm
    rpm -ivh epel-release*.rpm
    echo;
    echo "部署需要时间，请耐心稍等"
    mkdir -p ${installDIR}/php/logs && touch ${installDIR}/php/logs/{yum.logs,configure.logs,make.logs}
    tar -zxvf php*.tar.gz >/dev/null 2>&1
    cd php*
    #依赖
    yum install -y gcc gcc-c++ libmcrypt-devel mcrypt mhash gd-devel ncurses-devel libxml2-devel bzip2-devel libcurl-devel curl-devel libjpeg-devel libpng-devel freetype-devel net-snmp-devel openssl-deve python-devel zlib-devel freetype libxslt* bison autoconf re2c >${installDIR}/php/logs/yum.logs 2>&1
    #编译
    ./configure --prefix=/usr/local/php --exec-prefix=/usr/local/php --bindir=/usr/local/php/bin --sbindir=/usr/local/php/sbin --includedir=/usr/local/php/include --libdir=/usr/local/php/lib/php --mandir=/usr/local/php/php/man --with-config-file-path=/usr/local/php/etc --with-mysql-sock=/var/run/mysql/mysql.sock --with-mhash --with-openssl --with-mysqli=shared,mysqlnd --with-pdo-mysql=shared,mysqlnd --with-gd --with-iconv --with-zlib --enable-zip --enable-inline-optimization --disable-debug --disable-rpath --enable-shared --enable-xml --enable-bcmath --enable-shmop --enable-sysvsem --enable-mbregex --enable-mbstring --enable-ftp --enable-pcntl --enable-calendar --enable-exif --enable-sockets --with-xmlrpc --with-libxml-dir --enable-soap --without-pear --with-gettext --enable-session --with-curl --with-jpeg-dir --with-png-dir --with-freetype-dir --with-bz2 --enable-opcache --enable-fpm --with-fpm-user=nginx --with-fpm-group=nginx --without-gdbm --enable-fast-install --disable-fileinfo > ${installDIR}/php/logs/configure.logs 2>&1
    #安装
    make && make install > ${installDIR}/php/logs/make.logs 2>&1
    #配置
    cp php.ini-production ${installDIR}/php/etc/php.ini
    echo;
    M=`cat ${installDIR}/php/etc/php.ini | grep date.timezone | tail -n 1`
    datatime="date.timezone = Asia/shanghai"
    sed -i "s|${M}|${datatime}|g" ${installDIR}/php/etc/php.ini
    echo "zend_extension=opcache.so" >> ${installDIR}/php/etc/php.ini
    cp ${installDIR}/php/etc/php-fpm.conf.default ${installDIR}/php/etc/php-fpm.conf
    cp ${installDIR}/php/etc/php-fpm.d/www.conf.default ${installDIR}/php/etc/php-fpm.d/www.conf
    cp sapi/fpm/init.d.php-fpm /etc/init.d/php-fpm
    chmod +x /etc/rc.d/init.d/php-fpm
    #慎用(仅限centos&redhat)
    chkconfig --add php-fpm
    useradd nginx -s /usr/sbin/nologin
    echo "部署完成"
    echo;
    echo "启动PHP"
    service php-fpm start
}
function OPENRESTY(){
    echo "正在部署OPENRESTY"
    cd Packages
    yum install -y gcc gcc-c++ zlib-devel pcre-devel openssl-devel readline-devel > yum.logs 2>&1
    useradd www -s /usr/sbin/nologin
    mkdir /usr/local/openresty
    tar -zxvf openresty*.tar.gz >/dev/null 2>&1
    cd openresty*
    #编译
    ./configure --prefix=/usr/local/openresty --user=www --group=www --with-http_ssl_module --with-http_flv_module --with-http_stub_status_module --with-http_gzip_static_module --with-pcre --with-http_realip_module > configure.logs 2>&1
    gmake && gmake install >gmake.logs 2>&1
    echo "部署完成"
}

function main(){
    #OPTIMIZE
    #JDK
    #REDIS
    #MYSQL
    #PHP
    #OPENRESTY
}
main

shell2

#!/bin/bash
# Close SELINUX
setenforce 0
sed -i 's/^SELINUX=.*$/SELINUX=disabled/' /etc/selinux/config
# Custom profile
cat > /etc/profile.d/iot.sh << EOF
HISTSIZE=10000
PS1="\[\e[37;40m\][\[\e[32;40m\]\u\[\e[37;40m\]@\h \[\e[35;40m\]\W\[\e[0m\]]\\\\$ "
HISTTIMEFORMAT="%F %T \$(whoami) "

alias l='ls -AFhlt'
alias lh='l | head'
alias vi=vim

GREP_OPTIONS="--color=auto"
alias grep='grep --color'
alias egrep='egrep --color'
alias fgrep='fgrep --color'
EOF
source /etc/profile.d/iot.sh

[ -z "$(grep ^'PROMPT_COMMAND=' /etc/bashrc)" ] && cat >> /etc/bashrc << EOF
PROMPT_COMMAND='{ msg=\$(history 1 | { read x y; echo \$y; });logger "[euid=\$(whoami)]":\$(who am i):[\`pwd\`]"\$msg"; }'
EOF
# /etc/security/limits.conf
[ -e /etc/security/limits.d/*nproc.conf ] && rename nproc.conf nproc.conf_bk /etc/security/limits.d/*nproc.conf
sed -i '/^# End of file/,$d' /etc/security/limits.conf
cat >> /etc/security/limits.conf <<EOF
# End of file
* soft nproc 1000000
* hard nproc 1000000
* soft nofile 1000000
* hard nofile 1000000
EOF
# /etc/hosts
[ "$(hostname -i | awk '{print $1}')" != "127.0.0.1" ] && sed -i "s@127.0.0.1.*localhost@&\n127.0.0.1 $(hostname)@g" /etc/hosts
# Set timezone
rm -rf /etc/localtime
ln -s /usr/share/zoneinfo/Asia/Shanghai /etc/localtime
# ip_conntrack table full dropping packets
[ ! -e "/etc/sysconfig/modules/iptables.modules" ] && { echo -e "modprobe nf_conntrack\nmodprobe nf_conntrack_ipv4" > /etc/sysconfig/modules/iptables.modules; chmod +x /etc/sysconfig/modules/iptables.modules; }
modprobe nf_conntrack
modprobe nf_conntrack_ipv4
echo options nf_conntrack hashsize=131072 > /etc/modprobe.d/nf_conntrack.conf
# /etc/sysctl.conf
[ ! -e "/etc/sysctl.conf_bk" ] && /bin/mv /etc/sysctl.conf{,_bk}
cat > /etc/sysctl.conf << EOF
fs.file-max=1000000
net.ipv4.tcp_max_tw_buckets = 6000
net.ipv4.tcp_sack = 1
net.ipv4.tcp_window_scaling = 1
net.ipv4.tcp_rmem = 4096 87380 4194304
net.ipv4.tcp_wmem = 4096 16384 4194304
net.ipv4.tcp_max_syn_backlog = 16384
net.core.netdev_max_backlog = 32768
net.core.somaxconn = 32768
net.core.wmem_default = 8388608
net.core.rmem_default = 8388608
net.core.rmem_max = 16777216
net.core.wmem_max = 16777216
net.ipv4.tcp_timestamps = 1
net.ipv4.tcp_fin_timeout = 20
net.ipv4.tcp_synack_retries = 2
net.ipv4.tcp_syn_retries = 2
net.ipv4.tcp_syncookies = 1
#net.ipv4.tcp_tw_len = 1
net.ipv4.tcp_tw_reuse = 1
net.ipv4.tcp_mem = 94500000 915000000 927000000
net.ipv4.tcp_max_orphans = 3276800
net.ipv4.ip_local_port_range = 1024 65000
net.nf_conntrack_max = 6553500
net.netfilter.nf_conntrack_max = 6553500
net.netfilter.nf_conntrack_tcp_timeout_close_wait = 60
net.netfilter.nf_conntrack_tcp_timeout_fin_wait = 120
net.netfilter.nf_conntrack_tcp_timeout_time_wait = 120
net.netfilter.nf_conntrack_tcp_timeout_established = 3600
EOF
sysctl -p
#安全设置 centos 6
#sed -i 's@^ACTIVE_CONSOLES.*@ACTIVE_CONSOLES=/dev/tty[1-2]@' /etc/sysconfig/init
#sed -i 's@^start@#start@' /etc/init/control-alt-delete.conf
#sed -i 's@LANG=.*$@LANG="en_US.UTF-8"@g' /etc/sysconfig/i18n
# Update time
yum -y install ntpdate  lrzsz
ntpdate pool.ntp.org
[ ! -e "/var/spool/cron/root" -o -z "$(grep 'ntpdate' /var/spool/cron/root)" ] && { echo "*/20 * * * * $(which ntpdate) pool.ntp.org > /dev/null 2>&1" >> /var/spool/cron/root;chmod 600 /var/spool/cron/root; }
service iptables stop
service rsyslog restart
service crond restart
##set yum
sed -i 's@^exclude@#exclude@' /etc/yum.conf
yum clean all
yum makecachell