1. echo "修改IP地址"
    2. # 修改IP地址
    3. sudo sed -i -e"s/BOOTPROTO=dhcp/BOOTPROTO=static/" /etc/sysconfig/network-scripts/ifcfg-ens192
    4. sudo sed -i -e"s/ONBOOT=no/ONBOOT=yes/" /etc/sysconfig/network-scripts/ifcfg-ens192
    5. sudo sed -i -e"16iIPADDR=192.168.72.122\nGATEWAY=192.168.72.254\nDNS1=114.114.114.114\nDNS2=8.8.8.8" /etc/sysconfig/network-scripts/ifcfg-ens192
    6. sudo service network restart
    8. echo "设置免密操作"
    9. #设置免密操作
    10. # 授权可编辑/etc/sudoers 文件
    11. sudo chmod -v u+w /etc/sudoers 
    12. # 在101行添加xcsoft ALL=(ALL) NOPASSWD:ALL
    13. sudo sed -i -e"101ixcsoft ALL=(ALL) NOPASSWD:ALL" /etc/sudoers
    14. # 替换
    15. sudo sed -i -e"s/%wheel\s*ALL=(ALL)\s*ALL/%wheel ALL=(ALL) NOPASSWD:ALL/" /etc/sudoers
    16. # 取消sudoers文件写权限
    17. sudo chmod -v u-w /etc/sudoers
    18. echo "禁root登录"
    19. # 禁root登录
    20. sudo sed -i -e"39iPermitRootLogin no" /etc/ssh/sshd_config
    21. echo "修改ssh端口号"
    22. # 修改ssh端口号
    23. sudo sed -i -e"17iPort 922" /etc/ssh/sshd_config
    25. sudo service sshd restart
    27. echo "配置系统yum源"
    28. # 备份系统旧配置文件
    29. sudo mv /etc/yum.repos.d/CentOS-Base.repo /etc/yum.repos.d/CentOS-Base.repo.backup
    31. # 编辑源
    32. cat >> /etc/yum.repos.d/CentOS-Base.repo << "EOF"
    33. # CentOS-Base.repo
    34. #
    35. # The mirror system uses the connecting IP address of the client and the
    36. # update status of each mirror to pick mirrors that are updated to and
    37. # geographically close to the client.  You should use this for CentOS updates
    38. # unless you are manually picking other mirrors.
    39. #
    40. # If the mirrorlist= does not work for you, as a fall back you can try the
    41. # remarked out baseurl= line instead.
    42. #
    43. #
    45. [os]
    46. name=Qcloud centos os - $basearch
    47. baseurl=http://mirrors.cloud.tencent.com/centos/$releasever/os/$basearch/
    48. enabled=1
    49. gpgcheck=1
    50. gpgkey=http://mirrors.cloud.tencent.com/centos/RPM-GPG-KEY-CentOS-7
    52. [updates]
    53. name=Qcloud centos updates - $basearch
    54. baseurl=http://mirrors.cloud.tencent.com/centos/$releasever/updates/$basearch/
    55. enabled=1
    56. gpgcheck=1
    57. gpgkey=http://mirrors.cloud.tencent.com/centos/RPM-GPG-KEY-CentOS-7
    59. [centosplus]
    60. name=Qcloud centosplus - $basearch
    61. baseurl=http://mirrors.cloud.tencent.com/centos/$releasever/centosplus/$basearch/
    62. enabled=0
    63. gpgcheck=1
    64. gpgkey=http://mirrors.cloud.tencent.com/centos/RPM-GPG-KEY-CentOS-7
    66. [cloud]
    67. name=Qcloud centos contrib - $basearch
    68. baseurl=http://mirrors.cloud.tencent.com/centos/$releasever/cloud/$basearch/openstack-kilo/
    69. enabled=0
    70. gpgcheck=1
    71. gpgkey=http://mirrors.cloud.tencent.com/centos/RPM-GPG-KEY-CentOS-7
    73. [cr]
    74. name=Qcloud centos cr - $basearch
    75. baseurl=http://mirrors.cloud.tencent.com/centos/$releasever/cr/$basearch/
    76. enabled=0
    77. gpgcheck=1
    78. gpgkey=http://mirrors.cloud.tencent.com/centos/RPM-GPG-KEY-CentOS-7
    80. [extras]
    81. name=Qcloud centos extras - $basearch
    82. baseurl=http://mirrors.cloud.tencent.com/centos/$releasever/extras/$basearch/
    83. enabled=1
    84. gpgcheck=1
    85. gpgkey=http://mirrors.cloud.tencent.com/centos/RPM-GPG-KEY-CentOS-7
    87. [fasttrack]
    88. name=Qcloud centos fasttrack - $basearch
    89. baseurl=http://mirrors.cloud.tencent.com/centos/$releasever/fasttrack/$basearch/
    90. enabled=0
    91. gpgcheck=1
    92. gpgkey=http://mirrors.cloud.tencent.com/centos/RPM-GPG-KEY-CentOS-7
    93. EOF
    96. sudo yum clean all
    97. sudo yum makecache
    98. sudo yum install -y vim wget
    100. # 安装 epel源
    102. sudo mv /etc/yum.repos.d/epel.repo /etc/yum.repos.d/epel.repo.backup
    103. sudo wget -O /etc/yum.repos.d/epel.repo http://mirrors.cloud.tencent.com/repo/epel-7.repo
    104. sudo yum clean all
    105. sudo yum makecache
    106. sudo yum update
    108. echo "安装Fail2ban防爆破"
    109. # 安装 Fail2ban
    110. sudo yum install -y fail2ban
    112. # 进入fail2ban目录
    113. cd /etc/fail2ban 
    115.  # 复制一份配置文件
    116. sudo cp fail2ban.conf fail2ban.local 
    117. sudo cp jail.conf jail.local 
    118. vim 
    119. sudo cat >> jail.d/sshd.local << "EOF"
    120. [sshd]
    121. enabled=true
    122. bandtime=1y
    123. findtime=1m
    124. maxretry=5
    125. EOF
    127. sudo service fail2ban restart
    128. sudo systemctl enable fail2ban
    129. echo "修改hostname"
    130. # 修改hostname
    131. sudo sed -i -e"s/\w*/demo/" /etc/hostname