Centos6 系统初始化脚本

发表于 | 分类于

最近，因为业务需要，一下上架了27台服务器，这些服务器在交付之前，都要进行基础的系统初始化，如：修改密码、修改ssh端口、修改主机名、常见工具安装、yum源本地化、内核参数优化等。如果一台一台的手动操作，难免效率太低，所以偷了个懒，写了个小脚本来自动执行，废话少说，脚本内容如下：

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
#!/bin/bash
#
#by:wanglei
#date:20160823
#version:1.0

source /etc/profile
cat << EOF
+++++++++++++++++++++++++++++++++++++++++++++++
+                                             +
+          Start system initialization        +
+                                             +
+++++++++++++++++++++++++++++++++++++++++++++++
EOF

###修改主机名###
echo "===开始修改主机名.===" |tee -a init.log
echo -e "\033[31m请选择是否修改主机名.\033[0m"
echo "	1: change hostname"
echo "	2: not change"
echo "	Any other character (except 1,2) exits"

read -p "Select Options (1 or 2): " option
if [[ "$option" == "1" ]]; then
	read -p "Please input a new hostname: " hostName
	sed -i 's/^HOSTNAME=.*/HOSTNAME='$hostName'/g' /etc/sysconfig/network
	hostname $hostName
	echo -e "new hostname is \033[31m$hostName\033[0m "
elif [[ "$option" == "2" ]]; then
	exit
else
    echo -e "\033[31mUnknown Options.\033[0m"
    exit
fi

echo "===主机名修改完成===" | tee -a init.log

###修改DNS服务器###
echo "===开始修改DNS服务器.===" |tee -a init.log
echo -e "nameserver 223.5.5.5\nnameserver 8.8.8.8" > /etc/resolv.conf
echo "===DNS服务器修改完成.===" | tee -a init.log

###安装wget工具###
echo "===开始安装wget工具.===" |tee -a init.log
yum install -y wget && echo -e "\033[31mwget安装成功.\033[0m" |tee -a init.log || echo -e "\033[32mwget安装失败.\033[0m" |tee -a init.log
echo "===wget工具安装完成.===" |tee -a init.log

###安装YUM源###
echo "===开始安装epel源.===" |tee -a init.log
osVersion=$(cat /etc/redhat-release | awk -F. '{print $1}' | awk '{print $NF}')
if [[ "$osVersion" -lt 7 ]]; then
	wget -O /etc/yum.repos.d/epel.repo http://mirrors.aliyun.com/repo/epel-6.repo && echo -e "\033[31mepel源安装成功.\033[0m" |tee -a init.log || echo -e "\033[32mepel源安装失败.\033[0m" |tee -a init.log
else
	wget -O /etc/yum.repos.d/epel.repo http://mirrors.aliyun.com/repo/epel-7.repo && echo -e "\033[31mepel源安装成功.\033[0m" |tee -a init.log || echo -e "\033[32mepel源安装失败.\033[0m" |tee -a init.log
fi
yum makecache
echo "===epel源安装完成.===" | tee -a init.log

###升级系统yum update###
echo "===开始升级系统.===" |tee -a init.log
yum -y update && echo -e "\033[31m系统升级成功.\033[0m" |tee -a init.log || echo -e "\033[32m系统升级失败.\033[0m" |tee -a init.log
echo "===升级系统完成.===" |tee -a init.log

###安装常用工具软件###
echo "===开始安装常用软件.===" |tee -a init.log
yum install -y glances && echo -e "\033[31mglances安装成功.\033[0m" |tee -a init.log || echo -e "\033[32mglances安装失败.\033[0m" |tee -a init.log
yum install -y vim && echo -e "\033[31mvim安装成功.\033[0m" |tee -a init.log || echo -e "\033[32mvim安装失败.\033[0m" |tee -a init.log
yum install -y iftop && echo -e "\033[31miftop安装成功.\033[0m" |tee -a init.log || echo -e "\033[32miftop安装失败.\033[0m" |tee -a init.log
yum install -y ntp && echo -e "\033[31mntp安装成功.\033[0m" |tee -a init.log || echo -e "\033[32mntp安装失败.\033[0m" |tee -a init.log
yum install -y openssh* && echo -e "\033[31mopenssh安装成功.\033[0m" |tee -a init.log || echo -e "\033[32mopenssh安装失败.\033[0m" |tee -a init.log
echo "===常用软件安装完成.===" |tee -a init.log

###关闭selinux###
echo "===开始关闭SELINUX.===" |tee -a init.log
sed -i "s/SELINUX=enforcing/#SELINUX=enforcing\nSELINUX=disabled/g" /etc/selinux/config
setenforce 0
echo "===SELINUX已关闭完成.===" |tee -a init.log

###修改SSH配置###
echo "===开始修改SSH配置.===" |tee -a init.log
cp /etc/ssh/sshd_config /etc/ssh/sshd_config.bak-$(date +%Y%m%d%H%M)
read -p "Please input a new portnumber: " portNumber
sed -i "s/#Port 22/#Port 22\nPort $portNumber/g" /etc/ssh/sshd_config
sed -i 's/#UseDNS yes/#UseDNS yes\nUseDNS no/g' /etc/ssh/sshd_config
echo -e "new portnumber is \033[31m$portNumber\033[0m ." | tee -a init.log
iptables -I INPUT -p tcp --dport $portNumber -j ACCEPT
service iptables save
echo "===SSH配置修改完成.===" |tee -a init.log

###修改root密码###
echo "===开始修改root用户密码.===" |tee -a init.log
read -p "Please input new password: " passWord
echo $passWord | passwd --stdin root
echo "===root密码修改完成.===" |tee -a init.log

###修改文件句柄限制###
echo "===开始修改文件句柄限制.===" |tee -a init.log
cat >> /etc/security/limits.conf <<EOF  
* soft nproc 327675
* hard nproc 327675
* soft nofile 327675
* hard nofile 327675
EOF

echo "ulimit -SH 327675" >> /etc/rc.local
echo "===文件句柄限制修改完成.===" |tee -a init.log

###内核参数优化###
echo "===开始内核参数优化.===" |tee -a init.log
cat >> /etc/sysctl.conf <<EOF
fs.file-max = 327675
net.ipv4.tcp_fin_timeout = 30
net.ipv4.tcp_rmem = 4096 87380 8388608
net.ipv4.tcp_wmem = 4096 87380 8388608
net.core.rmem_max = 16777216
net.core.wmem_max = 16777216
net.ipv4.tcp_window_scaling = 1
net.ipv4.tcp_max_tw_buckets = 5000
net.ipv4.ip_local_port_range = 1024 65000
net.ipv4.tcp_tw_recycle = 1
net.core.netdev_max_backlog = 262144
net.ipv4.tcp_max_orphans = 262144
net.ipv4.tcp_max_syn_backlog = 4096
net.ipv4.tcp_timestamps = 0
net.ipv4.tcp_synack_retries = 2
net.ipv4.tcp_syn_retries = 2
net.ipv4.tcp_keepalive_time = 30
net.ipv4.tcp_mem = 94500000 915000000 927000000
EOF

sysctl -p
echo "===内核参数优化完成.===" |tee -a init.log

###同步系统时间###
echo "===开始同步系统时间.===" |tee -a init.log
rm -rf /etc/localtime  
cp /usr/share/zoneinfo/Asia/Shanghai /etc/localtime
ntpdate 2.cn.pool.ntp.org && echo -e "\033[31m同步系统时间成功.\033[0m" |tee -a init.log || echo -e "\033[32m同步系统时间失败.\033[0m" |tee -a init.log
hwclock --systohc
echo "===系统时间同步完成.===" |tee -a init.log

###重启SSH服务###
echo "===开始重启SSH服务.===" |tee -a init.log
/etc/init.d/sshd restart && echo -e "\033[31mSSH服务重启成功.\033[0m" |tee -a init.log || echo -e "\033[32mSSH服务重启失败.\033[0m" |tee -a init.log
echo "===SSH服务重启完成.===" |tee -a init.log

###输出初始化日志###
echo -e "===\033[31m系统初始化完成，日志如下:\033[0m \n==="
cat init.log

因为工作实际需要，脚本做成了交互式，在以后的工作中，可以考虑定义一个单独的变量文件，然后结合saltstack工具，实现服务器批量自动初始化。