centos系统初始化脚本
#!/bin/bash
echo "-----只用于新购服务器初始化,有需要的自己可以写进去-----"
echo "-----只用于CENTOS7.0版本---------------"
echo "-----其他版本差异，可以自行修改------"
read -p "是否继续 y/n": YN
if [ $YN != y ];then
exit 3
fi
#查看系统版本
linux_release=`cat /etc/redhat-release`
release_centos6="release 6."
release_centos7="release 7."
#关闭防火墙并禁止开机自启
if [[ $linux_release =~ $release_centos7 ]];then
systemctl stop firewalld.service && systemctl disable firewalld.service
elif [[ $linux_release =~ $release_centos6 ]];then
service iptables stop && chkconfig iptables off
fi
#关闭内核机制
#sed -i 's/SELINUX=enforcing/SELINUX=disabled/' /etc/sysconfig/selinux && setenforce 0
if [[ $linux_release =~ $release_centos6 ]];then
sed -i 's/SELINUX=enforcing/SELINUX=disabled/' /etc/sysconfig/selinux
elif [[ $linux_release =~ $release_centos7 ]];then
sed -i "s#SELINUX=enforcing#SELINUX=disabled#g" /etc/selinux/config
fi
#安装初始工具
yum install gcc* gcc-* zlib-devel pcre-devel openssh-clients net-tools ntp rsync -y
#修改ssh默认端口
netstat -anpt | grep 22
if [ $? = 0 ];then
sed -i 's/#Port 22/Port 12022/' /etc/ssh/sshd_config
if [[ $linux_release =~ $release_centos7 ]];then
systemctl restart sshd
elif [[ $linux_release =~ $release_centos6 ]];then
service sshd restart
fi
fi
#获取IP地址 (centos7版本网卡默认是ens33 阿里云已更改为eth,请根据实际更改)更改主机名
IP=$(ip add | grep -w "inet" | grep eth0 |sed 's/^.*inet //g'|sed 's/\/[0-9][0-9].*$//g')
NAME=$(echo $IP|awk -F"." '{print $3$4}')
if [[ $linux_release =~ $release_centos6 ]];then
sed -i "/HOSTNAME=*/c HOSTNAME=aliyun.${NAME}" /etc/sysconfig/network
elif [[ $linux_release =~ $release_centos7 ]];then
hostnamectl set-hostname aliyun${NAME}
fi
#安装zabbix-agent
wget http://10.168.10.16/add_zabbix.sh && bash add_zabbix.sh
#创建普通用户web
USER=`cat /etc/passwd |awk -F: '{print $1}'|grep web`
if [ -z ${USER} ];then
useradd web
fi
#设置密码
passwd web << EOF
AjDWgvx8z
AjDWgvx8z
EOF
#判断/home/web目录是否存在
if [ ! -d "/home/web" ]; then
/bin/mkdir /home/web/
chown -R web:web /home/web/
else
chown -R web:web /home/web/
fi
#判断/home/web/.ssh目录是否存在,不存在则创建
if [ ! -d "/home/web/.ssh" ]; then
/bin/mkdir /home/web/.ssh
chown -R web:web /home/web/.ssh
fi
#判断/home/web/.ssh/authorized_keys目录是否存在,不存在则创建
if [ ! -f "/home/web/.ssh/authorized_keys" ]; then
/bin/touch /home/web/.ssh/authorized_keys
/bin/chmod 600 /home/web/.ssh/authorized_keys
else
/bin/chmod 600 /home/web/.ssh/authorized_keys
fi
#把zabbix服务器上的web用户的key追加到认证文件中
/bin/grep web@zabbix /home/web/.ssh/authorized_keys || echo "ssh-rsa xxxxxxxx web@zabbix" >> /home/web/.ssh/authorized_keys
#创建读取日志用户
USER=readlog
/bin/grep ${USER} /etc/passwd || useradd ${USER}
#设置readlog用户密码
passwd ${USER} << EOF
MAqglc2Mqz
MAqglc2Mqz
EOF
#判断/home/readlog/.ssh目录是否存在,不存在则创建
if [ ! -d "/home/${USER}/.ssh" ]; then
/bin/mkdir "/home/${USER}/.ssh"
fi
#判断/home/web/.ssh/authorized_keys目录是否存在,不存在则创建
if [ ! -f "/home/${USER}/.ssh/authorized_keys" ]; then
/bin/touch /home/${USER}/.ssh/authorized_keys
chown -R ${USER}:${USER} /home/${USER}/.ssh/
/bin/chmod 600 /home/${USER}/.ssh/authorized_keys
fi
#把zabbix服务器上的readlog用户的key追加到认证文件中
/bin/grep ${USER}@zabbix /home/${USER}/.ssh/authorized_keys || echo "ssh-rsa xxxxxxx readlog@zabbix" >> /home/${USER}/.ssh/authorized_keys
#判断/root/.ssh目录是否存在,不存在则创建
if [ ! -d "/root/.ssh" ]; then
/bin/mkdir "/root/.ssh"
fi
#判断/root/.ssh/authorized_keys目录是否存在,不存在则创建
if [ ! -f "/root/.ssh/authorized_keys" ]; then
/bin/touch /root/.ssh/authorized_keys
/bin/chmod 600 /root/.ssh/authorized_keys
fi
#把zabbix服务器上的root用户的key追加到认证文件中
/bin/grep root@zabbix /root/.ssh/authorized_keys || echo "ssh-rsa xxxxxxxxxxxx root@zabbix" >> /root/.ssh/authorized_keys
echo "创建基础应用目录"
mkdir -pv /opt/deploy/tomcat
mkdir -pv /opt/deploy/service
mkdir -pv /opt/deploy/repository
mkdir -pv /opt/logs/service
mkdir -pv /opt/logs/tomcat
chown -R web.web /opt
#休眠三十秒，重启系统
sleep 10
shutdown -r now