Linux/VPS 系统精简优化，给CentOS/Debian系统大瘦身

wellknow

请注意，本文编写于 1481 天前，最后修改于 742 天前，其中某些信息可能已经过时。
  C- _- q4 c, a! r5 q7 }
说明：在安装 Linux 系统前我们需要顾虑到电脑硬件性能，选择最小化安装非常有必要，毕竟服务器资源一定的情况下，系统只会日益臃肿慢慢开始拖慢所有服务，这些因素在我们安装系统前就应该考虑的，分析哪些是服务器必需和非必需从而尽可能的精简系统。

1 U* |0 m- X5 j' G6 k6 E& RCentOS 系统精简优化
删除不必要的自带软件包
5 \& Y  k' M$ s! J9 _1 \, u( i
4 g0 U3 m1 [' I; e0 {  x$ d2 A$ ?yum remove Deployment_Guide-en-US finger cups-libs cups ypbind
yum remove bluez-libs desktop-file-utils ppp rp-pppoe wireless-tools irda-utils
yum remove sendmail* samba* talk-server finger-server bind* xinetd
2 k- Y( J- V, j/ cyum remove nfs-utils nfs-utils-lib rdate fetchmail eject ksh mkbootdisk mtools
/ U) ^2 c' F; e; F* h9 Jyum remove syslinux tcsh startup-notification talk apmd rmt dump setserial portmap yp-tools
4 [0 U' [0 }5 G( A& b+ m4 K1 qyum groupremove "Mail Server" "Games and Entertainment" "X Window System" "X Software Development"
( L6 v. U- I9 y5 ?yum groupremove "Development Libraries" "Dialup Networking Support"
yum groupremove "Games and Entertainment" "Sound and Video" "Graphics" "Editors"
5 O3 i' F3 r9 k9 Fyum groupremove "Text-based Internet" "GNOME Desktop Environment" "GNOME Software Development"
$ N. I$ e* B3 p6 L3 U升级 centos 系统
& p* ], O) z9 s% ?; a9 {
" E) T3 E8 o, @4 ?: e' U, M5 {9 fyum update #更新系统
yum clean all #清理全部缓存文件
, s( L4 ?8 z- b3 N' t禁用 seLinux
" b$ C, y& n6 w. @& t
- s" f3 f5 \* b6 L# ?% f8 Psestatus #先执行看seLinux状态，如果不是disabled，就需要执行下面步骤，否则不要执行
vi /etc/selinux/config
% `9 ~/ K! ~. u% _' R9 CSELINUX=disabled #禁用SeLinux
( T- c1 a4 Z" L( w' pSELINUX=enforcing #使用SeLinux
% b5 K0 d" V* e4 B  m禁止 IPV6（执行后需要 reboot 重启）

5 B+ f! t+ |1 C% A; F- Qvi /etc/modprobe.conf #打开文件，把下面两行加到最后
alias net-pf-10 off
" p! k/ P: G2 m: U8 |: }0 J# Valias ipv6 off
初始化防火墙

touch /etc/sysconfig/iptables
' ]$ g! J5 s8 n, v0 v. Q" Diptables -F
iptables -X
iptables -Z
: O2 V$ \! K  Q- ^, K( O) dservice iptables save
: {- W$ G/ b- i5 w* z% Y" B% nservice iptables restart
  m6 ~4 }0 W6 n) O* `禁止无用服务
- A& E  z$ ~1 [2 Q9 u: x
' u& u9 n! q/ M* v4 l- K#! /bin/bash
service acpid off
* \' q/ L7 p1 p0 g. R9 |# Kservice atd stop
service auditd stop
8 H' f' Y: [# o, L9 _$ Yservice avahi-daemon stop
service avahi-dnsconfd stop
service bluetooth stop
+ g: T. V0 s, G2 n# L5 [5 Zservice conman stop
service cpuspeed stop
0 U  b8 }6 f0 v9 R, Cservice cups stop
service dnsmasq stop
9 Y- N& b, u5 m2 q4 }9 y# A, K( @service dund stop
; D2 ?- z/ A9 v$ x7 x, q! rservice firstboot stop
service hidd stop
- ~/ w5 z5 r, U; Fservice httpd stop
9 ^3 W* I3 Q' v9 i, Q7 F" b& Yservice ibmasm stop
service ip6tables stop
6 s, s' q* H$ z) Q* aservice irda stop
service kdump stop
service lm_sensors stop
service mcstrans stop
service messagebus stop
service microcode_ctl stop
. H' Y7 k8 ~7 |! c: ]5 Vservice netconsole stop
service netfs stop
6 p: I+ d% a4 [service netplugd stop
$ r1 ?3 k$ |1 M: H* P/ {service nfs stop
8 `: _& n; g: [8 \/ lservice nfslock stop
- m* Q  _# T' U2 f1 Z; qservice nscd stop
service ntpd stop
service oddjobd stop
service pand stop
service pcscd stop
3 ]& `5 O2 V; M7 w( U( eservice portmap stop
" P  A. m% U: m3 l7 Z" D4 Iservice psacct stop
# N8 ]( U; n! z* d1 aservice rdisc stop
service restorecond stop
! N) e: S% o1 C' E% @8 hservice rpcgssd stop
service rpcidmapd stop
service rpcsvcgssd stop
5 [6 y" K' I, Q3 Mservice saslauthd stop
service sendmail stop
service setroubleshoot stop
# k) Z8 h: q  A% ?' X' Z$ M4 Bservice smb stop
- B; A7 k% T' Z  N3 j7 a& Y% k5 a4 Pservice vncserver stop
8 R# K, w3 k% Nservice winbind stop
# y6 C) J% w5 o$ vservice wpa_supplicant stop
service xfs stop
service ypbind stop
/ s, k- t7 s3 h* u; |, D1 P  y9 Uservice yum-updatesd stop
chkconfig acpid off
chkconfig atd off
chkconfig auditd off
/ a6 ~; I  _  N. g* S1 schkconfig avahi-daemon off
7 i2 U: r! c4 b. ]chkconfig avahi-dnsconfd off
  ]  O. t  D% t$ v7 ychkconfig bluetooth off
chkconfig conman off
chkconfig cpuspeed off
chkconfig cups off
chkconfig dnsmasq off
chkconfig dund off
chkconfig firstboot off
6 j$ N3 \% {8 I) W& |! m4 i# Y" gchkconfig hidd off
2 L+ D$ d5 J- ]+ G4 Y. Z4 P- Pchkconfig httpd off
9 Z9 V# G( |9 \" f3 I- cchkconfig ibmasm off
+ ^3 p6 X" F2 T* M* _4 }3 Kchkconfig ip6tables off
chkconfig irda off
; b4 i: E& O+ N- H% H, Schkconfig kdump off
( U4 V2 R" V, d. R% n- T) R& _! mchkconfig lm_sensors off
9 H' h/ @4 g/ s6 W9 p7 X. Qchkconfig mcstrans off
/ G$ x; V+ v5 J$ P9 h5 M' K6 h3 [chkconfig messagebus off
chkconfig microcode_ctl off
1 }8 H8 }( s- A1 s- schkconfig netconsole off
chkconfig netfs off
# k! [' R% i  `) q1 i- s* a. zchkconfig netplugd off
chkconfig nfs off
! ?! t+ \" q/ N+ n+ z1 Ochkconfig nfslock off
chkconfig nscd off
. X; z0 K: a8 S6 Nchkconfig ntpd off
chkconfig oddjobd off
chkconfig pand off
chkconfig pcscd off
chkconfig portmap off
chkconfig psacct off
6 X+ D/ ~2 y$ _& echkconfig rdisc off
6 z& a, K- _0 }6 echkconfig restorecond off
, t  _! h; X; p% W  O1 X* E. ychkconfig rpcgssd off
  ~4 C0 Q. W4 Z! P% Echkconfig rpcidmapd off
( y4 t8 h$ P7 ?! e6 N2 gchkconfig rpcsvcgssd off
chkconfig saslauthd off
. B* l9 V; ^/ F, p" J% achkconfig sendmail off
5 A+ c6 |# |  Y$ N# m- h5 U- Schkconfig setroubleshoot off
. u1 M/ P$ B1 Q% _+ Mchkconfig smb off
chkconfig vncserver off
chkconfig winbind off
chkconfig wpa_supplicant off
chkconfig xfs off
chkconfig ypbind off
: X; o9 ], a" W/ h& qchkconfig yum-updatesd off
这样通过上述 6 步骤，就可以完成对 cen­tos 精简和优化。

! @. N2 J; Y' O- y来源：https://www.moewah.com/archives/2407.html