Ubuntu20.04 Server初始化-拓冰建站

Ubuntu20.04 Server初始化

1. 命令提示符的修改

root@ubuntu2004:~# vim ~/.bashrc#在配置文件结尾添加以下内容：PS1='\[\e[1;33m\][\u@\h \W]\$\[\e[0m\]'#修改命令提示符的颜色为黄色exportHISTTIMEFORMAT="%F %T "#指定history时间格式exportEDITOR=vim#指定文本编辑器root@ubuntu2004:~# . ~/.bashrc #让.bashrc配置文件生效

2. 清空防火墙规则

#Ubuntu20.04 Server默认没有开启防火墙，但是默认安装了ufw防火墙，推荐使用iptables防火墙[root@ubuntu2004 ~]#ufw status #查看ufw防火墙状态Status: inactive[root@ubuntu2004 ~]#ufw disable #关闭ufw防火墙Firewall stopped and disabled on system startup[root@ubuntu2004 ~]#apt remove ufw #卸载ufw[root@ubuntu2004 ~]#apt purge ufw #删除ufw依赖包[root@ubuntu2004 ~]#whereis iptables #查看iptables文件的位置iptables: /usr/sbin/iptables /usr/share/iptables /usr/share/man/man8/iptables.8.gz[root@ubuntu2004 ~]#dpkg -s iptables #列出iptables包的状态，包括详细信息Package: iptables Status:installok installed Priority: optional Section: net Installed-Size:2639Maintainer: Ubuntu Developers<ubuntu-devel-discuss@lists.ubuntu.com>Architecture: amd64 Multi-Arch: foreign Version:1.8.4-3ubuntu2#启动iptables[root@ubuntu2004 ~]#modprobe ip_tables#清空iptables防火墙规则[root@ubuntu2004 ~]#iptables -F[root@ubuntu2004 ~]#iptables -vnLChain INPUT(policy ACCEPT314packets,22966bytes)pkts bytes target prot optinoutsourcedestination Chain FORWARD(policy ACCEPT0packets,0bytes)pkts bytes target prot optinoutsourcedestination Chain OUTPUT(policy ACCEPT233packets,23322bytes)pkts bytes target prot optinoutsourcedestination

3. 修改网卡名

#修改配置文件为下面形式[root@ubuntu2004 ~]#vim /etc/default/grubGRUB_CMDLINE_LINUX="net.ifnames=0"#或者sed修改#方法一：替换[root@ubuntu2004 ~]#sed -i.bak '/^GRUB_CMDLINE_LINUX=/c GRUB_CMDLINE_LINUX="net.ifnames=0"' /etc/default/grub#方法二：搜索替换[root@ubuntu2004 ~]#sed -i.bak '/^GRUB_CMDLINE_LINUX=/s#"$#net.ifnames=0"#' /etc/default/grub[root@ubuntu2004 ~]#grep "^[a-Z]" /etc/default/grubGRUB_DEFAULT=0GRUB_TIMEOUT_STYLE=hiddenGRUB_TIMEOUT=0GRUB_DISTRIBUTOR=`lsb_release-i-s2>/dev/null||echoDebian`GRUB_CMDLINE_LINUX_DEFAULT="maybe-ubiquity"GRUB_CMDLINE_LINUX="net.ifnames=0"#生成新的grub.cfg文件[root@ubuntu2004 ~]#grub-mkconfig -o /boot/grub/grub.cfg#重启生效[root@ubuntu2004 ~]#reboot

4. 配置静态IP

[root@ubuntu2004 ~]#vim /etc/netplan/01-netcfg.yaml# This file describes the network interfaces available on your system# For more information, see netplan(5).network: version:2renderer: networkd ethernets: eth0: addresses:[10.0.0.151/24]gateway4:10.0.0.2 nameservers: addresses:[223.5.5.5,180.76.76.76,8.8.8.8]#修改网卡配置文件后需执行命令生效：[root@ubuntu2004 ~]#netplan apply#查看IP[root@ubuntu2004 ~]#ip a1: lo:<LOOPBACK,UP,LOWER_UP>mtu65536qdisc noqueue state UNKNOWN group default qlen1000link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet127.0.0.1/8 scopehostlo valid_lft forever preferred_lft forever inet6 ::1/128 scopehostvalid_lft forever preferred_lft forever2: eth0:<BROADCAST,MULTICAST,UP,LOWER_UP>mtu1500qdisc fq_codel state UP group default qlen1000link/ether 00:0c:29:88:18:c6 brd ff:ff:ff:ff:ff:ff inet10.0.0.151/24 brd10.0.0.255 scope global eth0 valid_lft forever preferred_lft forever inet6 fe80::20c:29ff:fe88:18c6/64 scopelinkvalid_lft forever preferred_lft forever#查看gateway[root@ubuntu2004 ~]#route -nKernel IP routing table Destination Gateway Genmask Flags Metric Ref Use Iface0.0.0.010.0.0.20.0.0.0 UG000eth010.0.0.00.0.0.0255.255.255.0 U000eth0#查看DNS[root@ubuntu1804 ~]#systemd-resolve --status[root@ubuntu2004 ~]#resolvectl status ##Ubuntu 20.04新命令Global LLMNR setting: no MulticastDNS setting: no DNSOverTLS setting: no DNSSEC setting: no DNSSEC supported: no DNSSEC NTA:10.in-addr.arpa16.172.in-addr.arpa168.192.in-addr.arpa17.172.in-addr.arpa18.172.in-addr.arpa19.172.in-addr.arpa20.172.in-addr.arpa21.172.in-addr.arpa22.172.in-addr.arpa23.172.in-addr.arpa24.172.in-addr.arpa25.172.in-addr.arpa26.172.in-addr.arpa27.172.in-addr.arpa28.172.in-addr.arpa29.172.in-addr.arpa30.172.in-addr.arpa31.172.in-addr.arpa corp d.f.ip6.arpa home internal intranet lanlocalprivatetestLink2(eth0)Current Scopes: DNS DefaultRoute setting:yesLLMNR setting:yesMulticastDNS setting: no DNSOverTLS setting: no DNSSEC setting: no DNSSEC supported: no Current DNS Server:223.5.5.5 DNS Servers:223.5.5.5180.76.76.768.8.8.8

5. 关闭SELinux

[root@ubuntu2004 ~]#apt update[root@ubuntu2004 ~]#apt -y install selinux-utils selinux[root@ubuntu2004 ~]#getenforce #获取selinux当前状态Disabled[root@ubuntu2004 ~]#vim /etc/selinux/configSELINUX=disabled[root@ubuntu2004 ~]#reboot #重启生效

6. 实现邮件通信

[root@ubuntu2004 ~]#apt install -y postfix bsd-mailx[root@ubuntu2004 ~]#systemctl enable --now postfix# 邮件配置文件：/etc/mail.rc

7. 配置apt源

[root@ubuntu2004 ~]#vim /etc/apt/sources.list[root@ubuntu2004 ~]#grep "^[a-Z]" /etc/apt/sources.listdeb https://mirrors.aliyun.com/ubuntu/ focal main restricted deb https://mirrors.tencent.com/ubuntu/ focal main restricted deb https://mirrors.huaweicloud.com/ubuntu/ focal main restricted deb https://mirrors.aliyun.com/ubuntu/ focal-updates main restricted deb https://mirrors.tencent.com/ubuntu/ focal-updates main restricted deb https://mirrors.huaweicloud.com/ubuntu/ focal-updates main restricted deb https://mirrors.aliyun.com/ubuntu/ focal universe deb https://mirrors.tencent.com/ubuntu/ focal universe deb https://mirrors.huaweicloud.com/ubuntu/ focal universe deb https://mirrors.aliyun.com/ubuntu/ focal-updates universe deb https://mirrors.tencent.com/ubuntu/ focal-updates universe deb https://mirrors.huaweicloud.com/ubuntu/ focal-updates universe deb https://mirrors.aliyun.com/ubuntu/ focal multiverse deb https://mirrors.tencent.com/ubuntu/ focal multiverse deb https://mirrors.huaweicloud.com/ubuntu/ focal multiverse deb https://mirrors.aliyun.com/ubuntu/ focal-updates multiverse deb https://mirrors.tencent.com/ubuntu/ focal-updates multiverse deb https://mirrors.huaweicloud.com/ubuntu/ focal-updates multiverse deb https://mirrors.aliyun.com/ubuntu/ focal-backports main restricted universe multiverse deb https://mirrors.tencent.com/ubuntu/ focal-backports main restricted universe multiverse deb https://mirrors.huaweicloud.com/ubuntu/ focal-backports main restricted universe multiverse deb https://mirrors.aliyun.com/ubuntu/ focal-security main restricted deb https://mirrors.tencent.com/ubuntu/ focal-security main restricted deb https://mirrors.huaweicloud.com/ubuntu/ focal-security main restricted deb https://mirrors.aliyun.com/ubuntu/ focal-security universe deb https://mirrors.tencent.com/ubuntu/ focal-security universe deb https://mirrors.huaweicloud.com/ubuntu/ focal-security universe deb https://mirrors.aliyun.com/ubuntu/ focal-security multiverse deb https://mirrors.tencent.com/ubuntu/ focal-security multiverse deb https://mirrors.huaweicloud.com/ubuntu/ focal-security multiverse[root@ubuntu2004 ~]#apt update

8. chrony时间同步

#服务器端配置[root@centos7 ~]#hostname -I10.0.0.7[root@centos7 ~]#yum -y install chrony[root@centos7 ~]#vim /etc/chrony.confserver ntp.aliyun.com iburst server ntp1.aliyun.com iburst server ntp2.aliyun.com iburst server ntp3.aliyun.com iburst#allow 192.168.0.0/16allow0.0.0.0/0#加此行,指定允许同步的网段# Serve time even if not synchronized to a time source.localstratum10#删除此行注释,当互联网无法连接,仍然可以为客户端提供时间同步服务[root@centos7 ~]#systemctl restart chronyd#服务启动后会打开端口123/udp[root@centos7 ~]#ss -ntluNetid State Recv-Q Send-Q Local Address:Port Peer Address:Port udp UNCONN00*:123 *:* udp UNCONN00127.0.0.1:323 *:* udp UNCONN00[::1]:323[::]:* tcp LISTEN0100127.0.0.1:25 *:* tcp LISTEN0128*:22 *:* tcp LISTEN0100[::1]:25[::]:* tcp LISTEN0128[::]:22[::]:*#客户端配置[root@ubuntu2004 ~]#hostname -I10.0.0.151[root@ubuntu2004 ~]#apt install -y chrony[root@ubuntu2004 ~]#vim /etc/chrony/chrony.confpool10.0.0.7 iburst[root@ubuntu2004 ~]#systemctl restart chronyd.service#客户端确认同步成功[root@ubuntu2004 ~]#chronyc sources -v210Number of sources=1.-- Source mode'^'=server,'='=peer,'#'=localclock. / .- Source state'*'=current synced,'+'=combined ,'-'=not combined,|/'?'=unreachable,'x'=timemay beinerror,'~'=timetoo variable.||.- xxxx[yyyy]+/- zzzz||Reachability register(octal)-.|xxxx=adjusted offset,||Log2(Polling interval)--.||yyyy=measured offset,||\||zzzz=estimated error.||||\MS Name/IP address Stratum Poll Reach LastRx Last sample===============================================================================^*10.0.0.7361714+33us[+114us]+/- 35ms

9 . shell脚本自动加注释

[root@ubuntu2004 ~]#vim ~/.vimrc[root@ubuntu2004 ~]#cat ~/.vimrcsetts=4setexpandtabsetignorecase autocmd BufNewFile *.shexec":call SetTitle()"func SetTitle()ifexpand("%:e")=='sh'call setline(1,"#!/bin/bash")call setline(2,"#")call setline(3,"#*************************************************************")call setline(4,"#Author: chen")call setline(5,"#QQ: 2088346053")call setline(6,"#Date: ".strftime("%Y-%m-%d"))call setline(7,"#FileName: ".expand("%"))call setline(8,"#Description: The test script")call setline(9,"#Copyright (C): ".strftime("%Y")." All rights reserved")call setline(10,"#*************************************************************")call setline(11,"")endif endfunc autocmd BufNewFile * normal G"[root@ubuntu2004 ~]#. ~/.vimrc

10. 修改时区

[root@ubuntu2004 ~]#timedatectlLocal time: Sat2022-07-2320:37:01 UTC Universal time: Sat2022-07-2320:37:01 UTC RTC time: Sat2022-07-2320:37:01 Time zone: Etc/UTC(UTC, +0000)System clock synchronized:yesNTP service: active RTCinlocalTZ: no[root@ubuntu2004 ~]#timedatectl set-timezone Asia/Shanghai[root@ubuntu2004 ~]#timedatectlLocal time: Sun2022-07-2422:48:09 CST Universal time: Sat2022-07-2320:48:09 UTC RTC time: Sat2022-07-2320:48:09 Time zone: Asia/Shanghai(CST, +0800)System clock synchronized:yesNTP service: active RTCinlocalTZ: no[root@ubuntu2004 ~]#cat /etc/timezoneAsia/Shanghai[root@ubuntu2004 ~]#vim /etc/default/localeLANG="en_HK.UTF-8"LANGUAGE="en_HK:en"[root@ubuntu2004 ~]#reboot

11. 设置允许root远程登录

cloud@ubuntu2004:~$sudo-i[sudo]passwordforcloud:[root@ubuntu2004 ~]#[root@ubuntu2004 ~]#passwdNew password: Retype new password: passwd: password updated successfully[root@ubuntu2004 ~]#[root@ubuntu2004 ~]#vim /etc/ssh/sshd_configPermitRootLoginyes[root@ubuntu2004 ~]#systemctl restart sshd.service