CentOS7初始化与优化配置
2025-10-02 16:02:48 #CentOS7

CentOS7初始化与优化配置

1. 配置 YUM

1.1 仅安装 64 位软件包

1
echo "exclude=*.i386 *.i586 *.i686" >> /etc/yum.conf

1.2 强制 YUM 使用 IPv4

1
echo 'ip_resolve=4' >> /etc/yum.conf

2. 更新系统

2.1 YUM 换源

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
mv /etc/yum.repos.d/CentOS-Base.repo /etc/yum.repos.d/CentOS-Base.repo.bak

cat <<EOF > /etc/yum.repos.d/CentOS-Base.repo
[base]
name=CentOS-\$releasever - Base
baseurl=https://mirrors.aliyun.com/centos/\$releasever/os/\$basearch/
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-7

[updates]
name=CentOS-\$releasever - Updates
baseurl=https://mirrors.aliyun.com/centos/\$releasever/updates/\$basearch/
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-7

[extras]
name=CentOS-\$releasever - Extras
baseurl=https://mirrors.aliyun.com/centos/\$releasever/extras/\$basearch/
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-7
EOF

yum clean all
yum makecache

2.2 更新

1
yum update -y

3. EPEL 镜像设置

3.1 安装 EPEL 软件包

1
yum install -y epel-release

3.2 设置国内镜像服务器

1
2
3
4
5
sed -e 's!^metalink=!#metalink=!g' \
    -e 's!^#baseurl=!baseurl=!g' \
    -e 's!//download\.fedoraproject\.org/pub!//mirrors.aliyun.com!g' \
    -e 's!http://mirrors!https://mirrors!g' \
    -i /etc/yum.repos.d/epel*.repo

3.3 创建 YUM 缓存

1
yum makecache

4. 安装常用软件

1
yum install -y vim-enhanced wget curl yum-utils tree pwgen unzip expect tar xz bash-completion-extras

4.1 安装 Python 3.10+

4.1.1 安装依赖：OpenSSL 1.1+

  • 安装 OpenSSL 1.1+ 软件包
1
2
3
4
5
6
7
8
9
10
11
pkg_name=openssl
pkg_ver=1.1.1n
pkg_rel=1
pkg=${pkg_name}-${pkg_ver}
tar_name=${pkg_name}-${pkg_ver}-${pkg_rel}.el7.x86_64.tar.gz
url=http://dl.cdgeekcamp.com/centos/7/${pkg_name}/${pkg_ver}/${tar_name}
prefix=/usr/local/${pkg}

test -d ${prefix} || (wget ${url} -O /tmp/${tar_name} && tar xf /tmp/${tar_name} -C $(dirname ${prefix}))

rm -f /tmp/${tar_name}
  • 更新动态链接库配置
1
egrep "^${prefix}/lib" /etc/ld.so.conf || (echo "${prefix}/lib" >> /etc/ld.so.conf && ldconfig)
  • 确认配置
1
ldconfig -p | grep ${prefix}

终端输出

1
2
3
4
5
[root@localhost ~]# ldconfig -p | grep ${prefix}
        libssl.so.1.1 (libc6,x86-64) => /usr/local/openssl-1.1.1n/lib/libssl.so.1.1
        libssl.so (libc6,x86-64) => /usr/local/openssl-1.1.1n/lib/libssl.so
        libcrypto.so.1.1 (libc6,x86-64) => /usr/local/openssl-1.1.1n/lib/libcrypto.so.1.1
        libcrypto.so (libc6,x86-64) => /usr/local/openssl-1.1.1n/lib/libcrypto.so

4.1.2 安装 Python 3.10+

  • 设置 Python 3.10+ 安装变量
1
2
3
4
5
6
7
8
9
10
pkg_name=python
pkg_ver=3.10.5
pkg_short_num=3
pkg_ver_num=310
pkg_rel=1
pkg=${pkg_name}-${pkg_ver}
tar_name=${pkg_name}-${pkg_ver}-${pkg_rel}.el7.x86_64.tar.gz
url=http://dl.cdgeekcamp.com/centos/7/python/3/${tar_name}
prefix=/usr/local/${pkg}
bin_dir=${prefix}/bin
  • 安装 Python 3.10+ 软件包
1
2
3
test -d ${prefix} || (wget ${url} -O /tmp/${tar_name} && tar xf /tmp/${tar_name} -C $(dirname ${prefix}))

rm -f /tmp/${tar_name}
  • 设置环境变量
1
2
echo "export PATH=${bin_dir}:${PATH}" > /etc/profile.d/python${pkg_short_num}.sh
. /etc/profile
  • 确认设置
1
which python${pkg_short_num} | grep ${prefix}

终端输出

1
/usr/local/python-3.10.5/bin/python3
  • 设置软链接
1
2
3
4
5
cd ${bin_dir}
test -L pip${pkg_ver_num} || ln -v -s pip${pkg_short_num} pip${pkg_ver_num}
test -L python${pkg_ver_num} || ln -v -s python${pkg_short_num} python${pkg_ver_num}

echo -e "PIP软链接：pip${pkg_ver_num}\nPython3软链接：python${pkg_ver_num}"
  • 测试 pip 命令
1
echo -e "执行命令：pip${pkg_ver_num} list\n" && pip${pkg_ver_num} list

终端输出

1
2
3
4
5
6
7
8
9
执行命令：pip310 list

Package    Version
---------- -------
pip        22.1.2
setuptools 58.1.0

[notice] A new release of pip available: 22.1.2 -> 24.3.1
[notice] To update, run: pip install --upgrade pip

若出现 notice，说明 pip 版本过低，可以执行 pip install --upgrade pip 来升级。

注：可能会因为源的问题导致更新 pip 失败！

  • 配置 pip 换源
1
2
3
4
5
6
7
8
9
mkdir -p ~/.pip
cat > ~/.pip/pip.conf <<EOF
[global]
index-url = https://mirrors.aliyun.com/pypi/simple/
trusted-host = mirrors.aliyun.com

[install]
use-deprecated=legacy-resolver
EOF

4.2 安装命令行编辑工具

4.2.1 XML 编辑工具

1
yum install -y xmlstarlet

4.2.2 INI 与 Java Properties 编辑工具

1
yum install -y crudini

5. 设置系统时区

1
yes|cp /usr/share/zoneinfo/Asia/Shanghai /etc/localtime

6. 安装时间同步服务

1
2
3
yum install -y chrony
systemctl enable chronyd
systemctl start chronyd

7. 禁用 IPv6

1
2
echo "net.ipv6.conf.all.disable_ipv6 = 1" >>  /etc/sysctl.conf
echo "net.ipv6.conf.default.disable_ipv6 = 1" >>  /etc/sysctl.conf

8. 删除安装日志

1
rm -f ~/anaconda-ks.cfg  ~/install.log  ~/install.log.syslog

9. 禁用 SELinux

1
2
echo SELINUX=disabled>/etc/selinux/config
echo SELINUXTYPE=targeted>>/etc/selinux/config

10. 关闭防火墙

1
2
systemctl disable firewalld
systemctl stop firewalld

11. 设置最大文件句柄

1
2
echo "* soft nofile 65535" | sudo tee -a /etc/security/limits.conf
echo "* hard nofile 65535" | sudo tee -a /etc/security/limits.conf

12. 优化 SSH 服务

  • 修改 sshd_config
1
2
3
4
5
6
sed -i "s/#UseDNS yes/UseDNS no/" /etc/ssh/sshd_config
sed -i "s/GSSAPIAuthentication yes/GSSAPIAuthentication no/" /etc/ssh/sshd_config
sed -i "s/GSSAPICleanupCredentials yes/GSSAPICleanupCredentials no/" /etc/ssh/sshd_config
sed -i "s/#MaxAuthTries 6/MaxAuthTries 10/" /etc/ssh/sshd_config
sed -i "s/#ClientAliveInterval 0/ClientAliveInterval 30/" /etc/ssh/sshd_config
sed -i "s/#ClientAliveCountMax 3/ClientAliveCountMax 10/" /etc/ssh/sshd_config
  • 重载配置
1
systemctl reload sshd

13. 设置主机名

13.1 初始化本地解析设置

1
echo '127.0.0.1 localhost localhost.localdomain localhost4 localhost4.localdomain4' > /etc/hosts

14. 重启

1
reboot
2025-10-02 16:02:48 #CentOS7
下一页