##关闭selinux
sed
-i
's/enforcing/disabled/'
/etc/selinux/config
setenforce0
/usr/bin/systemctl
stopfirewalld.service
#关闭防火墙
/usr/bin/systemctl
disablefirewalld.service
#禁止开机启动
##安装一些必备软件
yum-y
install
gccgcc-c++lrzszvimwgetzlibcurlntpdate
##同步时间
ntpdate
time
.windows.com
cat
>>
/etc/crontab
<<EOF
>0010***
/udr/sbin/ntpdate
time
.windows.com;
/usr/sbin/hwclock
-w>
/dev/null
2>&
EOF
#打开文件数设置
ulimit
-SHn65530
echo
“*softnofile65535'>>
/etc/sysctl
.conf
echo
"*hardnofile65535"
>>
/etc/sysctl
.conf
echo
"*hardnproc1204000"
>>
/etc/security/limits
.conf
echo
"*softnproc1204000"
>>
/etc/security/limits
.conf
##修改默认字体为UTF-8
sed
-i
's@LANG=.*$@LANG=\"en_US.UTF-8\"@g'
/etc/sysconfig/i18n
##优化内核;
cat
>>
/etc/sysctl
.conf<<EOF
#michaelkangadd120724
net.ipv4.tcp_abort_on_overflow=1
net.ipv4.tcp_syncookies=1
net.ipv4.tcp_tw_reuse=1
net.ipv4.tcp_tw_recycle=1
net.ipv4.tcp_fin_timeout=20
net.ipv4.tcp_retries1=2
net.ipv4.tcp_retries2=5
net.ipv4.tcp_max_orphans=2000
net.ipv4.tcp_keepalive_time=1200
net.ipv4.tcp_keepalive_intvl=15
net.ipv4.tcp_keepalive_probes=5
net.ipv4.tcp_syn_retries=2
net.ipv4.tcp_synack_retries=3
net.ipv4.tcp_max_syn_backlog=8192
net.ipv4.tcp_max_tw_buckets=5000
EOF
sysctl-p
##锁定日志文件
chattr+a
/var/log/messages
版权声明:本文内容由互联网用户自发贡献,该文观点与技术仅代表作者本人。本站仅提供信息存储空间服务,不拥有所有权,不承担相关法律责任。如发现本站有涉嫌侵权/违法违规的内容, 请发送邮件至 dio@foxmail.com 举报,一经查实,本站将立刻删除。