#//把下面内容，做成init.sh文件，放到liunx任意目录下，用

bash ./init.sh

#//执行，或用

chmod -R 777 init.sh

#//赋权后，再用

./init.sh

#//执行

#!/bin/bash

#

# 初始centOS系统环境

# 1. 在线安装一些编译环境

# 2. 关闭防火墙

# 3. 修改内核参数

#

#

yuminst(){

#update yum

yum -y update

#install epel EPEL 是yum的一个软件源，里面包含了许多基本源里没有的软件

wget http://dl.fedoraproject.org/pub/epel/6/x86_64/epel-release-6-8.noarch.rpm

wget http://rpms.famillecollet.com/enterprise/remi-release-6.rpm

sudo rpm -Uvh remi-release-6*.rpm epel-release-6*.rpm

#install

yum install -y setuptool ntsysv iptables pcre-devel openssl-devel bzip2-devel xinetd lrzsz lsof system-config-securitylevel-tui system-config-network-tui apr-util xorg-x11-drv-penmount perl-DBD-MySQL bind-utils --nogpgcheck

yum install -y zip unzip --nogpgcheck

yum install -y libselinux-python python-devel

yum install -y net-snmp #net-snmp-perl net-snmp-utils net-snmp-devel

yum install -y mlocate --nogpgcheck

updatedb

yum install -y ncurses ncurses-devel bison

yum install -y glibc glibc-common glibc-devel gd gd-devel libtool libpcap libpcap-devel gdbm gdbm-devel zlib zlib-devel libxslt audit-libs-devel --nogpgcheck

yum install -y openssh openssh-server openssh-clients --nogpgcheck

yum install -y make cmake vim* gcc gcc-c++ --nogpgcheck

yum install -y nfs-utils nfs-utils-lib nfs4-acl-tools cifs-utils xfsprogs --nogpgcheck

yum install -y crontabs vixie-cron --nogpgcheck

yum install -y ntp --nogpgcheck

yum install -y telnet

}

ser(){

/etc/init.d/crond start

chkconfig crond on

/etc/init.d/iptables stop

chkconfig iptables off

/etc/init.d/sshd start

chkconfig sshd on

setenforce 0

sed -ri 's/SELINUX=enforcing/SELINUX=disabled/g' /etc/selinux/config

}

kernal(){

#内核参数修改

modprobe nf_conntrack

echo "modprobe nf_conntrack" >> /etc/rc.local

modprobe bridge

echo "modprobe bridge" >> /etc/rc.local

echo '

net.ipv4.tcp_fin_timeout = 60

net.ipv4.tcp_tw_reuse = 1

net.ipv4.tcp_tw_recycle = 1

net.ipv4.tcp_syncookies = 1

net.ipv4.tcp_max_syn_backlog = 16384

net.ipv4.tcp_max_tw_buckets = 36000

net.ipv4.route.gc_timeout = 100

net.ipv4.tcp_syn_retries = 2

net.ipv4.tcp_synack_retries = 1

net.core.somaxconn = 32768

net.core.netdev_max_backlog = 32768

net.ipv4.tcp_max_orphans = 327680

net.nf_conntrack_max = 102400

net.netfilter.nf_conntrack_max = 102400

net.netfilter.nf_conntrack_tcp_timeout_established = 180

net.netfilter.nf_conntrack_tcp_timeout_time_wait = 120

net.netfilter.nf_conntrack_tcp_timeout_close_wait = 60

net.netfilter.nf_conntrack_tcp_timeout_fin_wait = 120' >> /etc/sysctl.conf

sysctl -p

echo ''

}

filelimit(){

#修改打开文件限制

echo 'ulimit -n 65535' >> /etc/profile

source /etc/profile

echo '* soft nproc 65535

* hard nproc 65535

* soft nofile 65535

* hard nofile 65535' >> /etc/security/limits.conf

echo '* soft nproc 65535' >> /etc/security/limits.d/90-nproc.conf

echo -e "================= 修改打开文件限制完成 ================="

}

echo "1: yum安装基础环境"

echo "2: 修改内核参数及文件限制"

echo "3: all"

read -p "请选择：" num

if [ -z $num ];then

echo $num

elif [ $num -eq 1 ];then

yuminst

ser

elif [ $num -eq 2 ];then

kernal

filelimit

elif [ $num -eq 3 ];then

yuminst

ser

kernal

filelimit

else

echo "请输入正确选项"

exit

fi