低价低配VPS往往资源紧张，任何一点系统资源都要用在刀刃上，对于一些不常用和没必要的内容，能精简则精简，以下内容源于网络，保存在我本地的WORD中，原文地址已经找不到了，只记得作者好像叫“老左”。如有冒犯，还望见谅。
其中有一些服务和软件包，各位根据自己需要调整，如VPN，web,邮件等服务
开工!
=======================================================================
第一步、删除不必要的自带软件包
其中包含PPP，也就是做VPN要用的，另外还有sendmail，桌面环境，是否删除自行斟酌
|
1 2 3 4 5 6 7 8 9 |
yum remove Deployment_Guide-en-US finger cups-libs cups ypbind yum remove bluez-libs desktop-file-utils ppp rp-pppoe wireless-tools irda-utils yum remove sendmail* samba* talk-server finger-server bind* xinetd yum remove nfs-utils nfs-utils-lib rdate fetchmail eject ksh mkbootdisk mtools yum remove syslinux tcsh startup-notification talk apmd rmt dump setserial portmap yp-tools yum groupremove "Mail Server" "Games and Entertainment" "X Window System" "X Software Development" yum groupremove "Development Libraries" "Dialup Networking Support" yum groupremove "Games and Entertainment" "Sound and Video" "Graphics" "Editors" yum groupremove "Text-based Internet" "GNOME Desktop Environment" "GNOME Software Development" |
第二步、升级centos系统
|
1 2 |
yum update #更新系统 yum clean all #清理全部缓存文件 |
第三步、禁用seLinux
|
1 |
sestatus |
先执行看seLinux状态，如果不是disabled，就需要执行下面步骤，否则不要执行
|
1 |
vi /etc/selinux/config |
SELINUX=disabled #禁用SeLinux
SELINUX=enforcing #使用SeLinux
第四步、禁止IPV6（执行后需要reboot重启）
|
1 |
vi /etc/modprobe.conf |
打开文件，把下面两行加到最后
|
1 2 |
alias net-pf-10 off alias ipv6 off |
备注：如果是OpenVZ的VPS将不会有这个文件，请略过
第五步、初始化防火墙
|
1 2 3 4 5 6 |
touch /etc/sysconfig/iptables iptables -F iptables -X iptables -Z service iptables save service iptables restart |
第六步、禁止无用服务
|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 |
#! /bin/bash service acpid off service atd stop service auditd stop service avahi-daemon stop service avahi-dnsconfd stop service bluetooth stop service conman stop service cpuspeed stop service cups stop service dnsmasq stop service dund stop service firstboot stop service hidd stop service httpd stop service ibmasm stop service ip6tables stop service irda stop service kdump stop service lm_sensors stop service mcstrans stop service messagebus stop service microcode_ctl stop service netconsole stop service netfs stop service netplugd stop service nfs stop service nfslock stop service nscd stop service ntpd stop service oddjobd stop service pand stop service pcscd stop service portmap stop service psacct stop service rdisc stop service restorecond stop service rpcgssd stop service rpcidmapd stop service rpcsvcgssd stop service saslauthd stop service sendmail stop service setroubleshoot stop service smb stop service vncserver stop service winbind stop service wpa_supplicant stop service xfs stop service ypbind stop service yum-updatesd stop chkconfig acpid off chkconfig atd off chkconfig auditd off chkconfig avahi-daemon off chkconfig avahi-dnsconfd off chkconfig bluetooth off chkconfig conman off chkconfig cpuspeed off chkconfig cups off chkconfig dnsmasq off chkconfig dund off chkconfig firstboot off chkconfig hidd off chkconfig httpd off #无需建站可以关闭 chkconfig ibmasm off chkconfig ip6tables off chkconfig irda off chkconfig kdump off chkconfig lm_sensors off chkconfig mcstrans off chkconfig messagebus off chkconfig microcode_ctl off chkconfig netconsole off chkconfig netfs off chkconfig netplugd off chkconfig nfs off chkconfig nfslock off chkconfig nscd off chkconfig ntpd off chkconfig oddjobd off chkconfig pand off chkconfig pcscd off chkconfig portmap off chkconfig psacct off chkconfig rdisc off chkconfig restorecond off chkconfig rpcgssd off chkconfig rpcidmapd off chkconfig rpcsvcgssd off chkconfig saslauthd off chkconfig sendmail off chkconfig setroubleshoot off chkconfig smb off chkconfig vncserver off chkconfig winbind off chkconfig wpa_supplicant off chkconfig xfs off chkconfig ypbind off chkconfig yum-updatesd off |
这样通过上述6步骤，就可以完成对centos精简和优化。
原文链接：6步骤实现CentOS系统环境精简优化，转载请注明来源！