CentOS 7基本配置
<p><span style="font-size: 14pt"><strong>1.</strong><strong>CentOS </strong><strong>7</strong><strong>网卡配置</strong><strong>：</strong></span></p><p align="justify"># <strong>vim /etc/syscon</strong><strong>fig/network-scrip</strong><strong>ts/ifcfg-eth0</strong></p>
<p align="justify"><strong><span style="font-family: 宋体">（</span>1<span style="font-family: 宋体">）</span><span style="font-family: 宋体">默认</span>DHCP<span style="font-family: 宋体">方式配置如下：</span></strong></p>
<p align="justify">TYPE="Ethernet"</p>
<p align="justify">BOOTPROTO="dhcp"</p>
<p align="justify">DEVICE="eth0"</p>
<p align="justify">ONBOOT="yes" </p>
<p align="justify"># <strong>systemctl restart network.service</strong></p>
<p align="justify"># <strong>service network restart # (centos6.x)</strong></p>
<p align="justify">DNS<span style="font-family: 宋体">默认已经自动获取，执行命令</span><strong>cat /etc/resolv.conf</strong>查看，可手动修改。</p>
<p align="justify"><strong><span style="font-family: 宋体">（</span>2<span style="font-family: 宋体">）</span><span style="font-family: 宋体">手动修改</span>IP<span style="font-family: 宋体">地址如下：</span></strong></p>
<p align="justify">TYPE="Ethernet" #<span style="font-family: 宋体">网卡类型</span></p>
<p align="justify">BOOTPROTO="static" #<span style="font-family: 宋体">【</span><span style="font-family: Calibri">static | none | bootp | dhcp</span><span style="font-family: 宋体">】</span></p>
<p align="justify">#<span style="font-family: 宋体">静态</span><span style="font-family: Calibri">ip |</span><span style="font-family: 宋体">不使用协议</span><span style="font-family: Calibri">| bootp</span><span style="font-family: 宋体">协议</span><span style="font-family: Calibri">| dhcp</span><span style="font-family: 宋体">协议 </span></p>
<p align="justify">DEVICE="eth0" #<span style="font-family: 宋体">物理设备名</span></p>
<p align="justify">ONBOOT="yes" #yes | no #<span style="font-family: 宋体">重启网卡是否激活网卡设备</span></p>
<p align="justify">IPADDR=192.168.1.123 #IP<span style="font-family: 宋体">地址</span></p>
<p align="justify">NETMASK=255.255.255.0 #<span style="font-family: 宋体">子网掩码</span></p>
<p align="justify">GATEWAY=192.168.1.1 #<span style="font-family: 宋体">网关地址</span></p>
<p align="justify">DNS1=202.106.195.68 #<span style="font-family: 宋体">首选</span><span style="font-family: Calibri">DNS </span><span style="font-family: 宋体">直接写入网卡配置文件</span></p>
<p align="justify">DNS2=114.114.114.114 #<span style="font-family: 宋体">备用</span><span style="font-family: Calibri">DNS</span></p>
<p align="justify"># <strong>systemctl restart network.service</strong></p>
<p><span style="font-size: 14pt"><strong>2.<span style="font-family: 微软雅黑">关闭防火墙和</span><span style="font-family: Calibri">SELinux</span><span style="font-family: 微软雅黑">方法：</span></strong></span></p>
<p align="justify"><strong>iptables -F </strong>#<span style="font-family: 宋体">临时清空防火墙规则（</span><span style="font-family: Calibri">-L </span><span style="font-family: 宋体">查看规则）</span></p>
<p align="justify"><strong>service iptables stop </strong>#<span style="font-family: 宋体">即时生效，重启后</span><span style="font-family: 宋体">失效（</span>centos6.x<span style="font-family: 宋体">）</span></p>
<p align="justify"><strong>chkconfig iptables off </strong>#<span style="font-family: Arial">永久性生效，重启后不会复原</span></p>
<p align="justify"><strong>systemctl stop firewalld </strong>#<span style="font-family: 宋体">关闭防火墙（</span><span style="font-family: Calibri">centos7.x</span><span style="font-family: 宋体">）</span></p>
<p align="justify"><strong>systemctl disable firewalld </strong><strong> </strong>#<span style="font-family: 宋体">禁止开机自启动</span><strong> </strong></p>
<p align="justify"><strong>getenforce 0</strong><strong> </strong>#<span style="font-family: 宋体">查看</span>SELinux<span style="font-family: 宋体">状态</span></p>
<p align="justify"><strong>setenforce 0 </strong>#<span style="font-family: 宋体">临时关闭</span><span style="font-family: Calibri">selinux</span></p>
<p align="justify"><strong>sed -i "s/SELINUX=enforcing/SELINUX=disabled/g" /etc/selinux/config</strong><strong> </strong>#<span style="font-family: 宋体">永久关闭</span></p>
<p align="justify"> </p>
<p><span style="font-size: 14pt"><strong>3.CentOS7<span style="font-family: 微软雅黑">网卡</span><span style="font-family: Calibri">ech0</span><span style="font-family: 微软雅黑">重命名：</span></strong></span></p>
<p align="justify"><span style="font-family: 宋体">（</span>1<span style="font-family: 宋体">）编辑</span><span style="font-family: Calibri">/etc/sysconfig/grub</span><span style="font-family: 宋体">文件，命令为</span>vim /etc/sysconfig/grub <span style="font-family: 宋体">在倒数第二行</span>quiet<span style="font-family: 宋体">后面加入代码如下：</span></p>
<p align="justify">net.ifnames=0 biosdevnmae=0</p>
<p align="justify"><span style="font-family: 宋体">（</span>2<span style="font-family: 宋体">）</span><span style="font-family: 宋体">执行命令</span>grub2-mkconfig -o /boot/grub2/grub.cfg <span style="font-family: 宋体">生成新的</span><span style="font-family: Calibri">grub.cfg</span><span style="font-family: 宋体">文件，如下：</span></p>
<p align="justify">grub2-mkconfig -o /boot/grub2/grub.cfg</p>
<p align="justify"><span style="font-family: 宋体">（</span>3<span style="font-family: 宋体">）</span>改网卡名称，执行命令如下：</p>
<p align="justify"># cd /etc/sysconfig/network-scripts/</p>
<p align="justify"># mv ifcfg-eno16777736 ifcfg-eth0</p>
<p align="justify"><span style="font-family: 宋体">（</span>4<span style="font-family: 宋体">）</span><span style="font-family: 宋体">修改</span> ifcfg-eth0 <span style="font-family: 宋体">文件中的 </span><span style="font-family: Calibri">DEVICE = eth0 NAME = eth0</span><span style="font-family: 宋体">如下：</span></p>
<p align="justify"># vim ifcfg-eth0</p>
<p align="justify"><span style="font-family: 宋体">（</span>5<span style="font-family: 宋体">）</span><span style="font-family: Calibri">reboot</span><span style="font-family: 宋体">重启服务器并验证网卡名称是否为</span><span style="font-family: Calibri">eth0</span></p>
<p><span style="font-size: 14pt"><strong>4.CentOS<span style="font-family: 微软雅黑">重置</span><span style="font-family: Calibri">root</span><span style="font-family: 微软雅黑">密码</span><span style="font-family: 微软雅黑">：</span></strong></span></p>
<p><strong><span style="font-family: 宋体">（</span>1<span style="font-family: 宋体">）</span><span style="font-family: Calibri">CentOS6</span><span style="font-family: 宋体">重置</span><span style="font-family: Calibri">root</span><span style="font-family: 宋体">密码：</span></strong></p>
<p align="justify"><span style="font-family: 宋体">第</span>1<span style="font-family: 宋体">步：启动系统时，</span>按任意键出现这个界面，然后<span style="font-family: 宋体">按</span>e<span style="font-family: 宋体">键</span> <span style="font-family: 宋体">进入</span></p>
<p align="justify"><span style="font-family: 宋体">第</span>2<span style="font-family: 宋体">步：</span><span style="font-family: 宋体">选择</span>kernel选项，再<span style="font-family: 宋体">按</span>e<span style="font-family: 宋体">键</span> <span style="font-family: 宋体">进入</span></p>
<p align="justify"><span style="font-family: 宋体">第</span>3<span style="font-family: 宋体">步：在</span><span style="font-family: Calibri">quiet</span><span style="font-family: 宋体">后面</span><span style="font-family: 宋体">加上</span>single<span style="font-family: 宋体">参数</span><span style="font-family: 宋体">或是加</span>1<span style="font-family: 宋体">（数字</span>1<span style="font-family: 宋体">），然后</span>按回车</p>
<p align="justify"><span style="font-family: 宋体">第</span>4<span style="font-family: 宋体">步：</span>返回下面界面<span style="font-family: 宋体">按</span>b<span style="font-family: 宋体">键</span>，进入到单用户模式 </p>
<p align="justify"><span style="font-family: 宋体">第</span>5<span style="font-family: 宋体">步：直接</span><strong>passwd root</strong><span style="font-family: 宋体">修改密码，</span>reboot<span style="font-family: 宋体">重启系统</span></p>
<p><strong><span style="font-family: 宋体">（</span></strong><strong>2</strong><strong>）</strong><strong>CentOS7<span style="font-family: 宋体">重置</span></strong><strong>root<span style="font-family: 宋体">密码：</span></strong></p>
<p align="justify"><span style="font-family: 宋体">第</span>1<span style="font-family: 宋体">步：</span>reboot<span style="font-family: 宋体">重启系统</span>，进入欢迎界面，加载内核时，<span style="font-family: 宋体">选中</span>CentOS Linux<span style="font-family: 宋体">（</span><span style="font-family: Calibri">3.10.0-327.e17.x86_64</span><span style="font-family: 宋体">）</span><span style="font-family: Calibri">7</span><span style="font-family: 宋体">（</span><span style="font-family: Calibri">Core</span><span style="font-family: 宋体">）</span><strong><span style="font-family: 宋体">按</span>E<span style="font-family: 宋体">键</span></strong></p>
<p align="justify"><span style="font-family: 宋体">第</span>2<span style="font-family: 宋体">步：</span>继续<strong><span style="font-family: 宋体">按</span>E<span style="font-family: 宋体">键</span></strong>进入编辑模式，<strong><span style="font-family: 宋体">找到</span>ro crashkernel = auto</strong> xxx<span style="font-family: 宋体">项，</span><strong><span style="font-family: 宋体">将</span>ro <span style="font-family: 宋体">改成</span><span style="font-family: Calibri">rw init = /sysroot/bin/sh</span></strong> <span style="font-family: 宋体"><br></span></p>
<p align="justify"><span style="font-family: 宋体">第</span>3<span style="font-family: 宋体">步：</span>按<strong>Ctrl +X<span style="font-family: 宋体">键</span></strong>进入单用户模式</p>
<p align="justify"><span style="font-family: 宋体">第</span>4<span style="font-family: 宋体">步：</span>执行命令<strong>chroot /sysroot </strong>访问系统，并<strong><span style="font-family: 宋体">使用</span>passwd<span style="font-family: 宋体">修改</span><span style="font-family: Calibri">root</span><span style="font-family: 宋体">密码</span></strong><span style="font-family: 宋体"><br></span></p>
<p align="justify">第五步：更新系统信息，<strong>touch /.autorelabel</strong><strong> </strong>,<span style="font-family: 宋体">如果在</span><span style="font-family: Calibri">/</span><span style="font-family: 宋体">目录下创建了一个文件</span><span style="font-family: Calibri">.autorelabel</span><span style="font-family: 宋体">文件，如果该文件存在，</span>系统重启<span style="font-family: 宋体">时会对整个文件系统进行</span>relabeling<span style="font-family: 宋体">重新标记，可以理解为对文件进行底层权限的控制和标记，如果</span><span style="font-family: Calibri">SELinux </span><span style="font-family: 宋体">属于</span><span style="font-family: Calibri">disabled</span><span style="font-family: 宋体">关闭状态，则不需要执行这条命令</span></p>
<p align="justify"><span style="font-family: 宋体">第</span>6<span style="font-family: 宋体">步：</span>重启系统</p>
<h2><strong>5.</strong><strong>Centos7 ssh端口的更改方法</strong></h2>
<p><strong>vi /etc/ssh/sshd_config</strong> <strong> #port 22 下一行增加 <strong>port 65222（以防万一，先增加port 65222端口，尝试成功后在删除22端口）</strong></strong><br>systemctl restart sshd</p>
<p>firewall-cmd --zone=public --add-port=65222/tcp --permanent #打开firewall商品<br>firewall-cmd --query-port=65222/tcp #<span style="font-family: 微软雅黑">查看</span>65222端口打开情况</p>
<p><span style="font-family: 微软雅黑">打开</span>SELINUX端口： <span style="font-family: 微软雅黑">要用到</span>semanage工具，如果没有安装可以<br>yum install net-tools </p>
<p>yum -y install policycoreutils-python <span style="font-family: 微软雅黑">进行安装</span></p>
<p><span style="font-family: 微软雅黑">安装完成后打开</span>65222端口<br>semanage port -a -t ssh_port_t -p tcp 65222<br><span style="font-family: 微软雅黑">查看</span>65222端口是否打开<br>semanage port -l | grep ssh<br><br><span style="font-family: 微软雅黑">如果一切正常，</span>SSH客户端用65222端口进行登录，如果能正常登录，<br>vi /etc/ssh/sshd_config <span style="font-family: 微软雅黑">删掉</span>22端口<br>systemctl restart sshd<br><span style="font-family: 微软雅黑">如果不能正常登录，再重新排查操作步骤</span></p>
<h2>6<span style="color: rgba(255, 255, 255, 1); background-color: rgba(255, 255, 255, 1)">.<span style="color: rgba(0, 0, 0, 1)"><strong> Centos7<span style="font-family: 微软雅黑">永久更改主机名</span>:</strong></span></span></h2>
<p class="p">方法一：<span style="font-family: 微软雅黑">使用</span>hostnamectl命令</p>
<p class="pre"> # hostnamectl set-hostname gyt</p>
<p class="p"><span style="font-family: 微软雅黑">方法二：修改配置文件</span> /etc/hostname 保存退出</p>
<p class="pre"> # vi /etc/hostname </p>
<p class="pre"> gyt 直接输入主机名 </p>
<p class="pre"> :wq 保存退出 <br> # reboot <span style="font-family: 微软雅黑">重启</span></p>
<p> </p>
<p><span style="font-size: 14pt"><strong>7</strong><strong>.<span style="font-family: 微软雅黑">外网</span><span style="font-family: Calibri">yum</span><span style="font-family: 微软雅黑">源搭建：</span></strong></span></p>
<p align="justify"><span style="font-family: 宋体">（</span>1<span style="font-family: 宋体">）</span><span style="font-family: 宋体">首先备份</span>/etc/yum.repos.d/CentOS-Base.repo</p>
<p align="justify">mv /etc/yum.repos.d/CentOS-Base.repo /etc/yum.repos.d/CentOS-Base.repo.backup</p>
<p align="justify"><span style="font-family: 宋体">（</span>2<span style="font-family: 宋体">）</span><span style="font-family: 宋体">下载对应版本</span>repo<span style="font-family: 宋体">文件</span><span style="font-family: Calibri">, </span><span style="font-family: 宋体">放入</span><span style="font-family: Calibri">/etc/yum.repos.d/(</span><span style="font-family: 宋体">操作前请做好相应备份</span><span style="font-family: Calibri">)</span></p>
<p align="justify">wget http://mirrors.163.com/.help/CentOS7-Base-163.repo</p>
<p align="justify">CentOS7</p>
<p align="justify">CentOS6</p>
<p align="justify">CentOS5</p>
<p align="justify"><span style="font-family: 宋体">（</span>3<span style="font-family: 宋体">）</span>运行以下命令生成缓存</p>
<p align="justify">yum clean all && yum makecache</p>
<p> </p><br><br>
来源：https://www.cnblogs.com/gytbolg/p/11013315.html
頁:
[1]