Linux初始化模版系统配置

1、一、yum源配置1、挂在光驱到/media1. mount /dev/cdrom /media2、RHEL 6 yum源文件，名称为local.repo1. local-Server2. baseurl=file:/media/Server3. enabled=14. gpgcheck=05. local-HA6. baseurl=file:/media/HighAvailability7. enabled=18. gpgcheck=09. local=LB10. baseurl=file:/media/LoadBalancer11. enabled=112. gpgcheck=013. lo

2、cal-RS14. baseurl=file:/media/ResilientStorage15. enabled=116. gpgcheck=0二、开发程序、开发库1、使用yum安装Development Tools Development Libraries1. yum groupinstall Development Tools Development Librariesenabled=1三、新建账户shadm1（登录用户） was （应用账号 设uid 500）1、新建账户shadm1（登录用户）1. useradd shadm12. passwd shadm13. root1232、

3、was （应用账号 设uid 500）1. groupadd -g 500 wasgrp2. useradd -u 500 was -g wasgrp四、ntp服务配置1、编辑 /etc/ntp.conf添加两条代码1. server 62. restrict 62、配置启动1. /etc/rc.d/init.d/ntpd start2. chkconfig ntpd on五、socket最大连接数修改1.编辑/etc/security/limits.conf1. * soft nofile 2. * hard nofile 2./etc/pam.d

4、/login在后面加上1. session required pam_limits.so六、安装配置 x11 桌面1、安装 x11桌面1. yum install xorg*2、配置x11桌面vi /etc/inittab修改一条如下1. id:3:initdefault:七、停不必要的服务1. service abrt-ccpp stop2. service abrtd stop3. service acpid stop4. service atd stop5. ervice buletooth stop6. service caermanager stop7. service cpuspe

5、ed stop8. service cups stop9. service ip6tables stop10. service libvirt-guests stop 11. service mdmonitor stop12. service nfslock stop13. service NetworkManager stop14. chkconfig NetworkManager off八、删除不必要系统账号1. userdel adm2. userdel lp3. userdel shutdown4. userdel halt5. userdel uucp6. userdel opera

6、tor7. userdel games8. userdel gopher九、openssh 编译安装最新版本（OpenSSH 6.7）1、配置telnet服务1.1检查安装依赖包yum install zlib gcc make下载openssl-1.0.1j/source/openssl-1.0.1j.tar.gz1.2安装配置openssl1. # ./config -prefix=/usr -shared 2. # make 3. # make test4. # make install2、升级sshd到OpenSSH-6.72.1查看安装是否缺

7、包# rpm -qa | egrep gcc|make|perl|pam|pam-devel如果有配置yum了的话可以直接yum安装这些包，这样既可以检验是否装了，没装的直接装上。yum -y install gcc* make perl pam pam-devel/pub/OpenBSD/OpenSSH/portable/openssh-6.7p1.tar.gz2.2安装配置openssh备份ssh：5. # mv /etc/ssh /etc/ssh.bak6. # openssl version a7. # tar zxf openssh-6.7p

8、1.tar.gz & cd openssh-6.7p18. # ./configure -prefix=/usr -sysconfdir=/etc/ssh -with-pam -with-zlib -with-md5-passwords 9. # make10. # make install2.3复制启动脚本到/etc/init.d1. rootdqapp67#cp /opt/openssh-6.7p1/contrib/redhat/sshd.init /etc/init.d/sshd 2. cp: overwrite /etc/init.d/sshd? y2.4加入开机自启1. # chkconfig -add sshd十、ssh配置文件： 关掉 dns反查在server上/etc/ssh/sshd_config文件中修改或加入UseDNS=no十一、ssh配置文件：关闭root登录禁止root用户远程登陆：修改PermitRootLogin，默认为