实验用虚拟机环境初始化

 

实验用虚拟机环境初始化

 

1. 通过virt-viewer方式进入虚拟机, 配置对应的ip地址, 重启网络

2. 在宿主机中依次对每个虚拟机执行如下操作

tar -cf - init_vhost.sh | ssh node102 "tar -xf -; sh init_vhost.sh"

 

init_vhost.sh内容如下:

 

# hostname

echo -e "\n 1. hostname"

echo ===========

sed -i -r 's/(HOSTNAME=).*/\1node'$(ip addr list|grep inet|grep -v '\blo\b'|cut -d' ' -f 6|cut -d'.' -f4|cut -d'/' -f1)'.linux.com/' /etc/sysconfig/network



# gateway

echo -e "\n 2. gateway"

echo ===========

sed -i '/GATEWAY/d' /etc/sysconfig/network

sed -i '$a GATEWAY=192.168.80.1' /etc/sysconfig/network



# restart network

echo -e "\n 3. restart network"

echo ===================

service network restart



cat /etc/sysconfig/network



# dns

echo -e "\n 4. resolv.conf for dns"

echo ===================

cat > /etc/resolv.conf <<EOF

search linux.com

nameserver 192.168.1.175

EOF



echo -e "\n 5. NTP"

echo ======

cat > /etc/ntp.conf <<EOF

# Permit time synchronization with our time source, but do not

# permit the source to query or modify the service on this system.

#restrict default kod nomodify notrap nopeer noquery

#restrict -6 default kod nomodify notrap nopeer noquery

restrict 192.168.1.175 mask 255.255.255.255 nomodify notrap nopeer noquery



# Permit all access over the loopback interface.  This could

# be tightened as well, but to do so would effect some of

# the administrative functions.

restrict 127.0.0.1 

restrict -6 ::1



# Hosts on local network are less restricted.

#restrict 192.168.1.0 mask 255.255.255.0 nomodify notrap



# Use public servers from the pool.ntp.org project.

# Please consider joining the pool (http://www.pool.ntp.org/join.html).

server 192.168.1.175



#broadcast 192.168.1.255 key 42        # broadcast server

#broadcastclient            # broadcast client

#broadcast 224.0.1.1 key 42        # multicast server

#multicastclient 224.0.1.1        # multicast client

#manycastserver 239.255.254.254        # manycast server

#manycastclient 239.255.254.254 key 42    # manycast client



# Undisciplined Local Clock. This is a fake driver intended for backup

# and when no outside source of synchronized time is available. 

server    127.127.1.0    # local clock

fudge    127.127.1.0 stratum 10    



# Drift file.  Put this in a directory which the daemon can write to.

# No symbolic links allowed, either, since the daemon updates the file

# by creating a temporary in the same directory and then rename()'ing

# it to the file.

driftfile /var/lib/ntp/drift



# Key file containing the keys and key identifiers used when operating

# with symmetric key cryptography. 

keys /etc/ntp/keys



# Specify the key identifiers which are trusted.

#trustedkey 4 8 42



# Specify the key identifier to use with the ntpdc utility.

#requestkey 8



# Specify the key identifier to use with the ntpq utility.

#controlkey 8

EOF



ntpdate dns





# services

echo -e "\n 6. services"

echo ===========

for s in atd bluetooth cups ip6tables iptables rhnsd ; do

service $s stop

chkconfig $s off

done



# SELinux

echo -e "\n 7. SELinux"

echo =======

sed -i -r 's/(SELINUX=)enforcing/\1permissive/' /etc/selinux/config

setenforce 0



# authorized_keys for ssh (本地机器到虚拟机无密码连接)

echo -e "\n 8. authorized_keys for ssh"

echo ==========================

cat > .ssh/authorized_keys <<EOF

ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA+lexExdw90eqWl6zpLIejL76xIx6LFCBM65tDyL4Pu3IxHoyzKhtD5jK6C3mXIjFCI7YLseDvdVMOkVb8KtPMqsYkiLtQHb2uwNy94XpIzAl0BSDfxWM5/icXr+dnCupDNHMZjcFI6kUU4wZNhzI4Xt+/cFv7+U7Qj6Ij1WJUJGZcxc8F4iVb4n9Ldeukkvc+UQ5j8iMrIykz9aqF31toFgBDMq5ORyKATKRShsU2BKFSkubaEYxOeaNfPFLi2Ycq703yTTCVFRlJkDdZs5J3++uOAcH9mVoeWmYZH4ooN0VE6ILTb0Y8LJOzOSYoYx6nyTG13Ulx0BmOry7rt7ygw== [email protected]

EOF