RockyLinux初始化

1
[root@localhost ~]# ls /etc/NetworkManager/system-connections/
2
ens160.nmconnection  ens192.nmconnection
3
[root@localhost ~]# vi /etc/NetworkManager/system-connections/ens160.nmconnection
4
[root@localhost ~]# systemctl restart NetworkManager # 重启生效

1
# Rocky 系统软件源更换
2
sed -e 's|^mirrorlist=|#mirrorlist=|g' \
3
    -e 's|^#baseurl=http://dl.rockylinux.org/$contentdir|baseurl=https://mirrors.aliyun.com/rockylinux|g' \
4
    -i.bak \
5
    /etc/yum.repos.d/[Rr]ocky*.repo
6
# 更新软件缓存，让刚才的国内源立刻生效。
7
dnf makecache

1
# 防火墙修改 firewalld 为 iptables
2
systemctl stop firewalld
3
systemctl disable firewalld
4

5
yum -y install iptables-services
6
systemctl start iptables
7
iptables -F
8
systemctl enable iptables
9
service iptables save

1
# 禁用 Selinux
2
setenforce 0
3
sed -i "s/SELINUX=enforcing/SELINUX=disabled/g" /etc/selinux/config
4
grubby --update-kernel ALL --args selinux=0
5

6
# 查看是否禁用，grubby --info DEFAULT
7
# 回滚内核层禁用操作，grubby --update-kernel ALL --remove-args selinux

1
# 设置时区
2
timedatectl set-timezone Asia/Shanghai

1
# 加载 bridge
2
yum install -y epel-release
3
yum install -y bridge-utils
4

5
modprobe br_netfilter
6
echo 'br_netfilter' >> /etc/modules-load.d/bridge.conf
7
echo 'net.bridge.bridge-nf-call-iptables=1' >> /etc/sysctl.conf
8
echo 'net.bridge.bridge-nf-call-ip6tables=1' >> /etc/sysctl.conf
9
echo 'net.ipv4.ip_forward=1' >> /etc/sysctl.conf
10
sysctl -p

1
# 使用 sed 命令自动注释掉 swap 行
2
swapoff -a
3
sed -i '/swap/s/^\(.*\)$/#\1/g' /etc/fstab