CentOS 7 最小化安装及优化

2023-03-17 15:26:50

CentOS 7 最小化安装及优化

CentOS 7 最小化安装及优化

一、下载镜像文件

官方网站

新版本下载链接：https://wiki.centos.org/Download

旧版本下载链接：http://vault.centos.org/

CentO S7.6 ：http://vault.centos.org/7.6.1810/isos/x86_64/

国内镜像源

阿里云镜像：https://opsx.alibaba.com/mirror

网易镜像：http://mirrors.163.com/

搜狐镜像：http://mirrors.sohu.com/

科技大学：http://mirrors.ustc.edu.cn/

清华大学：https://mirrors.tuna.tsinghua.edu.cn/

一、VMware 配置虚拟网络

配置虚拟网络编辑器

选择VMnet8使用NAT模式
子网IP：10.0.0.0
子网掩码：255.255.255.0
NAT设置：

网关IP：10.0.0.2
完成后确定两次即可。

二、VMware 新建虚拟机

自定义模式

硬件兼容性：默认

安装来源：稍后安装操作系统

客户机操作系统：Linux;版本：CentOS7 64 位

虚拟机名称：Linux运维模版机；位置：不要放在C盘

处理器：默认

内存：2G

网络：NAT

选择I/O控制器类型：默认

虚拟磁盘类型：默认

选择磁盘：创建新虚拟磁盘

指定磁盘容量：20G 将虚拟磁盘拆分为多个文件

指定磁盘文件储存路径：不要放在C盘！

完成

挂载镜像文件

三、CentOS 7 最小化安装

开启虚拟机

进入虚拟机界面

安装选择

4. 修改网卡名称为ethX

1、传递内核参数 net.ifnames=0 biosdevname=0 以更改网卡名称为 ethX

出现安装界面时，使用键盘上下键移动到第一行，即 Install Centos Linux 7
然后按 tab 键，即可出现传递参数界面。
在最后输入：空格 net.ifnames=0 biosdevname-0
修改完成后，回车！

选择安装过程中使用的语言

配置日期时间

设置系统语言

软件选择

10. 安装磁盘选择（分区）

/boot 分区 200M 存放系统内核及引导程序
swap 分区 1G 交换分区把磁盘空间临时充当内存使用
- 一般设为内存的1-1.5倍，内存大于8G的设为8G
- 可以在安装系统时进行分配，也可以在系统中进行分配
/ 其他所有剩余分区根分区

KDUPB：不使用

12. 配置网络和主机名

开始安装

14. 用户配置

接下来就等待吧！

完成

四、优化

修改yum源

sudo mv /etc/yum.repos.d/CentOS-Base.repo /etc/yum.repos.d/CentOS-Base.repo.backup

curl -o /etc/yum.repos.d/CentOS-Base.repo https://mirrors.aliyun.com/repo/Centos-7.repo

安装常用软件

yum -y install wget make automake cmake gcc gcc-c++ kernel-devel pcre pcre-devel zlib-devel \

openssl openssl-devel patch libffi-devel python-devel bzip2-devel ncurses-devel \

sqlite-devel readline-devel tk-devel gdbm-devel db4-devel libpcap-devel xz-devel \

glibc glibc-devel systemd-devel libevent libevent-devel ntpdate yum-utils lrzsz \

net-tools sysstat htop nc iotop iftop lsof nmap glances nethogs bind-utils nfs-utils \

tcpdump vim mtr traceroute quagga bc tree telnet screen dos2unix mlocate ncompress \

psmisc zip unzip bash-completion bash-completion-extras

yum更新、清理、缓存

yum -y update

yum clean all

yum makecache

关闭防火墙firewalld，并设置为开机不启动

systemctl stop firewalld

systemctl disable firewalld

关闭网络管理NetworkManager，避免和network服务冲突，导致网络不通，或者网卡启动不成功等

systemctl stop NetworkManager

systemctl disable NetworkManager

关闭selinux，修改配置文件

[root@openstack network-scripts]# cat /etc/sysconfig/selinux

# This file controls the state of SELinux on the system.

# SELINUX= can take one of these three values:

#     enforcing - SELinux security policy is enforced.

#     permissive - SELinux prints warnings instead of enforcing.

#     disabled - No SELinux policy is loaded.

SELINUX=disabled

# SELINUXTYPE= can take one of three values:

#     targeted - Targeted processes are protected,

#     minimum - Modification of targeted policy. Only selected processes are protected.

#     mls - Multi Level Security protection.

SELINUXTYPE=targeted

配置内核参数优化

[root@openstack network-scripts]# cat /etc/sysctl.conf

# Controls source route verification

net.ipv4.conf.default.rp_filter = 1

net.ipv4.ip_nonlocal_bind = 1

net.ipv4.ip_forward = 1

# Do not accept source routing

net.ipv4.conf.default.accept_source_route = 0

# Controls the System Request debugging functionality of the kernel

kernel.sysrq = 0

# Controls whether core dumps will append the PID to the core filename.

# Useful for debugging multi-threaded applications.

kernel.core_uses_pid = 1

# Controls the use of TCP syncookies

net.ipv4.tcp_syncookies = 1

# Disable netfilter on bridges.

net.bridge.bridge-nf-call-ip6tables = 0

net.bridge.bridge-nf-call-iptables = 0

net.bridge.bridge-nf-call-arptables = 0

# Controls the default maxmimum size of a mesage queue

kernel.msgmnb = 65536

# Controls the maximum size of a message, in bytes

kernel.msgmax = 65536

# Controls the maximum shared segment size, in bytes

kernel.shmmax = 68719476736

# Controls the maximum number of shared memory segments, in pages

kernel.shmall = 4294967296

# TCP kernel paramater

net.ipv4.tcp_mem = 786432 1048576 1572864

net.ipv4.tcp_rmem = 4096        87380   4194304

net.ipv4.tcp_wmem = 4096        16384   4194304

net.ipv4.tcp_window_scaling = 1

net.ipv4.tcp_sack = 1

# socket buffer

net.core.wmem_default = 8388608

net.core.rmem_default = 8388608

net.core.rmem_max = 16777216

net.core.wmem_max = 16777216

net.core.netdev_max_backlog = 262144

net.core.somaxconn = 20480

net.core.optmem_max = 81920

# TCP conn

net.ipv4.tcp_max_syn_backlog = 262144

net.ipv4.tcp_syn_retries = 3

net.ipv4.tcp_retries1 = 3

net.ipv4.tcp_retries2 = 15

# tcp conn reuse

net.ipv4.tcp_tw_reuse = 1

net.ipv4.tcp_tw_recycle = 1

net.ipv4.tcp_fin_timeout = 1

net.ipv4.tcp_max_tw_buckets = 20000

net.ipv4.tcp_max_orphans = 3276800

net.ipv4.tcp_timestamps = 1 #?

net.ipv4.tcp_synack_retries = 1

net.ipv4.tcp_syncookies = 1

# keepalive conn

net.ipv4.tcp_keepalive_time = 300

net.ipv4.tcp_keepalive_intvl = 30

net.ipv4.tcp_keepalive_probes = 3

net.ipv4.ip_local_port_range = 10001    65000

# swap

vm.overcommit_memory = 0

vm.swappiness = 10

#net.ipv4.conf.eth1.rp_filter = 0

#net.ipv4.conf.lo.arp_ignore = 1

#net.ipv4.conf.lo.arp_announce = 2

#net.ipv4.conf.all.arp_ignore = 1

#net.ipv4.conf.all.arp_announce = 2

配置资源控制，每个用户可以同时打开的最大文件数nofile、最大进程数nproc ... ....

[root@openstack network-scripts]# cat /etc/security/limits.conf

... ...

*                soft    core          unlimited

*                hard    core          unlimited

*                soft    nproc         1000000

*                hard    nproc         1000000

*                soft    nofile        100000

*                hard    nofile        100000

*                soft    memlock       32000

*                hard    memlock       32000

*                soft    msgqueue      8192000

*                hard    msgqueue      8192000

poweroff关机，保存快照，此时centos7整个系统安装配置完成，可以使用了。

码农公寓

CentOS 7 最小化安装及优化

一、下载镜像文件

官方网站

国内镜像源

一、VMware 配置虚拟网络

二、VMware 新建虚拟机

三、CentOS 7 最小化安装

4. 修改网卡名称为ethX

10. 安装磁盘选择（分区）

12. 配置网络和主机名

14. 用户配置

四、优化

相关文章