Centos7优化

2022/07/21 · 611 words · 3 minutes to read

Categories: 工具

替换源 🔗

sudo sed -e 's|^mirrorlist=|#mirrorlist=|g' -e 's|^#baseurl=http://mirror.centos.org|baseurl=https://mirrors.aliyun.com|g' -i.bak /etc/yum.repos.d/CentOS-*.repo

sudo yum makecache

无法远程SSH 🔗

/etc/ssh/sshd_config的PermitRootLogin的参数为yes

安装增强 🔗

yum install -y gcc gcc-devel gcc-c++ gcc-c++-devel make kernel kernel-devel bzip2 vim wget  #需要的安装包
shutdown -r now  #重启电脑
ln -s /usr/src/kernels/3.10.0(内核版本号/ /usr/src/linux　   ## 增加软连接
#点击虚拟机设备->安装增强
mount /dev/cdrom /mnt  #挂载增强光盘到系统，提示只读不用管
cd /mnt &&  ./VBoxLinuxAdditions.run

挂载 🔗

mkdir /root/www && chmod -R 777 /root/www
mount -t vboxsf docker /root/www   #手动挂载
### 此时如果提示/sbin/mount.vboxsf: mounting failed with the error: No such device，说明内核模块vboxsf未加载，可通过lsmod | grep vboxsf查看（无结果说明未加载）。
modprobe vboxsf #加载vboxsf模块
#自动挂载
vim /etc/fstab
docker /root/www   vboxsf rw,gid=100,uid=1000,auto /0 0

修改主机名 🔗

vim /etc/sysconfig/network
vim ~/.bash_profile
export PS1='[\u@\H \W]$'
source ~/.bash_profile

永久关闭防火墙 🔗

systemctl stop firewalld service

selinux关闭 🔗

修改/etc/selinux/config
将SELINUX=enforcing改为SELINUX=disabled,
状态 /usr/sbin/sestatus -v

SSH客户端超时 🔗

cd /etc/ssh
cp sshd_config sshd_config.bak
sed -i "s/#ClientAliveInterval 0/ClientAliveInterval 60/g" sshd_config
sed -i "s/#ClientAliveCountMax 3/ClientAliveCountMax 3/g" sshd_config
grep ClientAlive sshd_config
diff sshd_config sshd_config.bak

dnf包管理器 🔗

yum install epel-release && yum install dnf

mysql安装 🔗

源:sudo yum localinstall https://repo.mysql.com/mysql80-community-release-el7-1.noarch.rpm
安装：sudo yum install mysql-community-server
启动：systemctl start  mysqld.service
查看初始密码：sudo grep 'temporary password' /var/log/mysqld.log
#mysql 设置
1.mysql -u root -p ，因为首次安装没有密码直接回车登录
2. 修改密码   ALTER USER 'root'@'localhost' IDENTIFIED BY 'su123456';
3.  创建远程访问    
    CREATE USER 'root'@'%' IDENTIFIED BY '123456';
    GRANT ALL ON *.* TO 'root'@'%';
    ALTER USER 'root'@'%' IDENTIFIED WITH mysql_native_password BY '123456';

防火墙端口：firewall-cmd --zone=public --add-port=3306/tcp --permanent  
重启防火墙：systemctl restart firewalld  
设置开机启动：systemctl enable mysqld  
配置文件：/etc/my.cnf   数据存放：/var/lib/mysql  Log：/var/log

redis安装 🔗

安装：sudo yum install redis
启动：sudo systemctl start redis  启动
防火墙端口：firewall-cmd --zone=public --add-port=6379/tcp --permanent && systemctl restart firewalld.service
开机启动：sudo systemctl enable redis 
配置文件：/etc/redis.conf
日志：/var/log/redis/redis.log 
开启远程：bind 注释  ，protected-mode 改no ,设置密码  requirepass foobared

nodejs 🔗

curl -sL https://rpm.nodesource.com/setup_12.x | bash -
yum install -y nodejs

memcached 🔗

yum install libevent libevent-devel memcached
systemctl enable memcached
firewall-cmd --zone=public --add-port=11211/tcp --permanent && systemctl restart firewalld.service

nginx 🔗

sudo rpm -Uvh http://nginx.org/packages/centos/7/noarch/RPMS/nginx-release-centos-7-0.el7.ngx.noarch.rpm
sudo yum install -y nginx
sudo systemctl enable nginx
firewall-cmd --zone=public --add-port=80/tcp --permanent && systemctl restart firewalld.service
# nginx默认配置位置
/etc/nginx/nginx.conf  
# 403问题，修改配置user=root ,关闭selinux（修改/etc/selinux/config 文件将SELINUX=enforcing改为SELINUX=disabled） ，开启html的目录读取权限
/etc/nginx/conf.d/default.conf
# 默认wwwroot位置
/usr/share/nginx/html

php 🔗

sudo yum -y install https://dl.fedoraproject.org/pub/epel/epel-release-latest-7.noarch.rpm
sudo yum -y install https://rpms.remirepo.net/enterprise/remi-release-7.rpm
sudo yum-config-manager --enable remi-php74
sudo yum -y install yum-utils
sudo yum update

# yum list | grep redis #查看扩展
yum -y install php php-cli  php-fpm php-common php-gd php-intl php-soap php-xsl php-xmlrpc php-bz2 php-zip php-pcntl php-pdo_mysql php-mysqli php-mbstring php-exif php-bcmath php-calendar php-sockets php-gettext php-shmop php-sysvmsg php-sysvsem php-sysvshm php-opcache php-pecl-xdebug3 php-pecl-redis5  php-pecl-memcached php-pecl-mongodb php-pecl-swoole4 php-pecl-protobuf  php-pecl-amqp

sudo systemctl enable php-fpm

rabbitmq 🔗

sudo rpm -Uvh https://packages.erlang-solutions.com/erlang-solutions-1.0-1.noarch.rpm
sudo yum install erlang socat
wget https://github.com/rabbitmq/rabbitmq-server/releases/download/v3.8.19/rabbitmq-server-3.8.19-1.el7.noarch.rpm
sudo rpm --import https://www.rabbitmq.com/rabbitmq-signing-key-public.asc
sudo rpm -Uvh rabbitmq-server-3.8.19-1.el7.noarch.rpm
systemctl enable rabbitmq-server
sudo /sbin/service rabbitmq-server start #启动服务

#安装web界面
sudo rabbitmq-plugins enable rabbitmq_management
sudo firewall-cmd --zone=public --permanent --add-port=4369/tcp --add-port=25672/tcp --add-port=5671-5672/tcp --add-port=15672/tcp  --add-port=61613-61614/tcp --add-port=1883/tcp --add-port=8883/tcp && systemctl restart firewalld.service
默认的用户名和密码为guest / guest，登录后进入管理界面,3.8版本后guest必须修改配置文件才能远程
#添加用户
#./rabbitmqctl add_user 账号 密码
./rabbitmqctl add_user admin rabbitmq@666
#分配用户标签(admin为要赋予administrator权限的刚创建的那个账号的名字)
./rabbitmqctl set_user_tags admin administrator
#设置权限<即开启远程访问>(如果需要远程连接,例如java项目中需要调用mq,则一定要配置,否则无法连接到mq,admin为要赋予远程访问权限的刚创建的那个账号的名字,必须运行着rabbitmq此命令才能执行)
./rabbitmqctl set_permissions -p "/" admin ".*" ".*" ".*"

SSR 🔗

ssr安装 🔗

yum -y install wget
wget -N --no-check-certificate https://raw.githubusercontent.com/ToyoDAdoubi/doubi/master/ssr.sh
chmod +x ssr.sh
./ssr.sh

SSR客户端下载 🔗

Windows客户端：下载地址
Mac客户端：下载地址
安卓客户端：下载地址
iPhone客户端：需要切换北美账号商店，ssr或者potatso Lite客户端等
docker搭建：地址

u盘刻录 🔗

sudo dd if=/Users/root/Downloads/ubuntu-14.04.6-server-amd64.iso of=/dev/rdisk2 bs=1m; sync

安装wifi （bcm4312） 🔗

1、查看网卡型号，确认无线网卡型号为博通BCMXXX
yum install pciutils
lspci | grep Network # 无线网卡型号
lspci | grep Ethernet # 有线网卡型号

2、查看网卡型号，确认无线网卡型号为BCMXXX
sudo yum install https://download1.rpmfusion.org/free/el/rpmfusion-free-release-7.noarch.rpm
sudo yum install https://download1.rpmfusion.org/nonfree/el/rpmfusion-nonfree-release-7.noarch.rpm
重启电脑

3、查看内核
sudo yum install kernel-devel-$(uname -r) 

4、安装驱动
sudo yum install broadcom-wl akmod-wl akmods
sudo akmods  #这一步很慢
sudo yum update

5、链接
扫描：nmcli dev wifi list
链接：nmcli device wifi connect "olivia" password "makeit458"

笔记本优化 🔗

1.合盖挂起关闭
vi /etc/systemd/logind.conf
HandleLidSwitch=lock（锁屏模式）   
systemctl restart systemd-logind

挂载win||mac 共享文件 🔗

yum install cifs-utils -y
mount -t cifs //192.168.0.6/work /work -o username=abner,password=xuch@n,nounix,sec=ntlmssp,rw,dir_mode=0777,file_mode=0777


# echo "//192.168.0.6/work /work -o username=abner,password=xuch@n,nounix,sec=ntlmssp,rw,dir_mode=0777,file_mode=0777"  >  /etc/fstab   #开机自动 wifi 模式有问题，会导致挂载失败无法进入系统
mount -o remount,rw /

延迟脚本

#!/bin/bash
sleep 60
mount -t cifs //192.168.0.6/work /work -o username=abner,password=xuch@n,nounix,sec=ntlmssp

firewall-cmd --zone=public --add-masquerade  --permanent    （permanent永久生效）
systemctl restart firewalld

Linux安装go 🔗

# 下载源码包
wget https://dl.google.com/go/go1.13.5.linux-amd64.tar.gz
# 解压目录
tar -C /usr/local/ -xzf go1.13.5.src.tar.gz

# 设置环境变量
vi ~/.bashrc
# 内容追加
export PATH=$PATH:/usr/local/go/bin
# 保存文件，执行使其生效
source ~/.bashrc

Centos7优化

替换源 🔗

无法远程SSH 🔗

安装增强 🔗

挂载 🔗

修改主机名 🔗

永久关闭防火墙 🔗

selinux关闭 🔗

SSH客户端超时 🔗

dnf包管理器 🔗

mysql安装 🔗

redis安装 🔗

nodejs 🔗

memcached 🔗

nginx 🔗

php 🔗

rabbitmq 🔗

SSR 🔗

ssr安装 🔗

SSR客户端下载 🔗

u盘刻录 🔗

安装wifi （bcm4312） 🔗

笔记本优化 🔗

挂载win||mac 共享文件 🔗

Linux安装go 🔗

Categories

Recent Llm

Recent Go

Recent Tool

Recent Android

Recent Note

Tags