Linux/VPS 系统精简优化，给CentOS/Debian系统大瘦身

wellknow

请注意，本文编写于 1481 天前，最后修改于 742 天前，其中某些信息可能已经过时。
; ?+ v0 ^" R+ [6 a- b! \% ]$ H  u
说明：在安装 Linux 系统前我们需要顾虑到电脑硬件性能，选择最小化安装非常有必要，毕竟服务器资源一定的情况下，系统只会日益臃肿慢慢开始拖慢所有服务，这些因素在我们安装系统前就应该考虑的，分析哪些是服务器必需和非必需从而尽可能的精简系统。

CentOS 系统精简优化
删除不必要的自带软件包

3 C* a% L  a; x1 u+ iyum remove Deployment_Guide-en-US finger cups-libs cups ypbind
yum remove bluez-libs desktop-file-utils ppp rp-pppoe wireless-tools irda-utils
. j* a. ^% B* b4 Z+ }, cyum remove sendmail* samba* talk-server finger-server bind* xinetd
yum remove nfs-utils nfs-utils-lib rdate fetchmail eject ksh mkbootdisk mtools
yum remove syslinux tcsh startup-notification talk apmd rmt dump setserial portmap yp-tools
yum groupremove "Mail Server" "Games and Entertainment" "X Window System" "X Software Development"
; Z- v8 {" k0 c; {yum groupremove "Development Libraries" "Dialup Networking Support"
1 V; S7 o' v" L. C8 |yum groupremove "Games and Entertainment" "Sound and Video" "Graphics" "Editors"
$ e4 J0 m  l5 x; b4 V8 I7 ]# pyum groupremove "Text-based Internet" "GNOME Desktop Environment" "GNOME Software Development"
升级 centos 系统

1 Q. L% t5 d: ]9 d% Oyum update #更新系统
yum clean all #清理全部缓存文件
禁用 seLinux
2 @7 ~0 F( L0 x5 u: K
sestatus #先执行看seLinux状态，如果不是disabled，就需要执行下面步骤，否则不要执行
vi /etc/selinux/config
SELINUX=disabled #禁用SeLinux
0 J# i  J' H/ \& W/ x% ?SELINUX=enforcing #使用SeLinux
9 F; t5 b7 @5 V& w, l$ x禁止 IPV6（执行后需要 reboot 重启）

vi /etc/modprobe.conf #打开文件，把下面两行加到最后
alias net-pf-10 off
* Q* G1 j" V; walias ipv6 off
初始化防火墙
8 W+ |( M+ Q4 X% |
  K0 S! A4 ]! l; P8 ?4 Vtouch /etc/sysconfig/iptables
iptables -F
iptables -X
+ ]* b# [$ L- I1 h0 X- D% }- U, z4 I! W3 riptables -Z
/ g% m- D  C. Y% v5 ?: m$ iservice iptables save
0 s7 X. G+ M' g! R6 i8 L4 ~service iptables restart
( k2 r6 K3 d) @/ k禁止无用服务
" B0 m6 p/ A' O
#! /bin/bash
service acpid off
* m, T: n7 ~& Z( w( oservice atd stop
" |* D+ D& }7 f0 u* nservice auditd stop
3 S3 J% ]* i' Y6 L4 q- g6 }service avahi-daemon stop
service avahi-dnsconfd stop
service bluetooth stop
* @/ Y# i2 T) A/ ?+ Q9 Wservice conman stop
* ]" B: |" m  e4 s5 \( D5 Pservice cpuspeed stop
service cups stop
) G# W2 S1 C- d1 h3 J. F7 Fservice dnsmasq stop
9 r) I  C) [6 B% Jservice dund stop
service firstboot stop
service hidd stop
service httpd stop
5 U- r8 Y, H+ H4 I2 aservice ibmasm stop
service ip6tables stop
service irda stop
1 h; v: Q: Z" B2 E1 Sservice kdump stop
) E% s& Y3 c: l- m' N, P3 Rservice lm_sensors stop
service mcstrans stop
, y$ {3 s" }( a% N, o/ v6 zservice messagebus stop
( v- ?$ Z* e0 }& S' @service microcode_ctl stop
service netconsole stop
/ R9 l* e/ W1 `8 Qservice netfs stop
- `3 ]1 d8 F3 F  N! cservice netplugd stop
0 w6 |: _) ~8 n9 Z' Y9 mservice nfs stop
service nfslock stop
service nscd stop
- p1 Y) j9 }7 r3 L. }+ Dservice ntpd stop
* }$ ~+ f& P# n2 o+ `2 f- wservice oddjobd stop
; D$ R5 D5 s# W4 x! |service pand stop
& X( o0 D$ }+ J* @service pcscd stop
. i! F; t. C4 {/ {' Bservice portmap stop
service psacct stop
service rdisc stop
service restorecond stop
service rpcgssd stop
" N) F! E) g" B" f" z  Zservice rpcidmapd stop
service rpcsvcgssd stop
service saslauthd stop
2 y; w. |/ e7 j) g0 f$ ~: a! Sservice sendmail stop
8 R, n; K8 V; f2 r7 mservice setroubleshoot stop
service smb stop
  E  z1 I* q' k* Z7 mservice vncserver stop
4 h( D& q( H9 X; e! O/ r2 Wservice winbind stop
8 I5 y" g/ s9 E  B/ X6 H2 cservice wpa_supplicant stop
" m, Z' H0 M9 l( \6 Zservice xfs stop
service ypbind stop
3 a& N" o+ Z: x& Iservice yum-updatesd stop
3 g  T0 O8 _! u+ }& z7 O7 w9 K7 @$ \chkconfig acpid off
chkconfig atd off
chkconfig auditd off
# y- D- o% }' G, Z( Hchkconfig avahi-daemon off
chkconfig avahi-dnsconfd off
8 T/ [9 Z, K$ R! ^; gchkconfig bluetooth off
! l( V: z3 e6 X8 \chkconfig conman off
! @; ^9 b. e+ y. {1 u1 q8 ^chkconfig cpuspeed off
chkconfig cups off
chkconfig dnsmasq off
chkconfig dund off
* B! T3 d. J- p9 l: Q6 Gchkconfig firstboot off
chkconfig hidd off
. J- @6 ?0 _( [% Z8 H+ P. H; Hchkconfig httpd off
chkconfig ibmasm off
" d4 a& Z& Y% |/ Kchkconfig ip6tables off
+ l0 g& T2 E/ u! Schkconfig irda off
2 @+ t2 Z0 \, s4 e% R: }" |chkconfig kdump off
* S; ^+ R; g8 M2 Echkconfig lm_sensors off
% @$ U- L7 g5 L7 pchkconfig mcstrans off
chkconfig messagebus off
; c( x- M1 F2 T1 \# Achkconfig microcode_ctl off
chkconfig netconsole off
/ P6 Y1 @) W8 n5 B2 J5 u: jchkconfig netfs off
chkconfig netplugd off
chkconfig nfs off
chkconfig nfslock off
3 e4 Y  g$ e( D  ?" m2 N) p" Gchkconfig nscd off
chkconfig ntpd off
chkconfig oddjobd off
- o) r. [( C! E$ t6 o; kchkconfig pand off
chkconfig pcscd off
chkconfig portmap off
$ u: [9 |5 U5 v; x9 Rchkconfig psacct off
" j/ a4 P6 F+ ^. {' N& n2 _1 ^chkconfig rdisc off
chkconfig restorecond off
chkconfig rpcgssd off
- J) _* q+ A; @( ^8 P( \chkconfig rpcidmapd off
$ f3 d2 p) o* Q1 x2 K% Nchkconfig rpcsvcgssd off
% ^& W' @% U/ u2 t$ _chkconfig saslauthd off
0 i& @% ?% d! C9 L1 R5 U) ?chkconfig sendmail off
chkconfig setroubleshoot off
chkconfig smb off
chkconfig vncserver off
5 B8 ?) j3 F" g. s5 xchkconfig winbind off
chkconfig wpa_supplicant off
' T; z& N. Y+ _chkconfig xfs off
" P7 V8 e0 N( A/ w  g7 C4 g) Lchkconfig ypbind off
chkconfig yum-updatesd off
这样通过上述 6 步骤，就可以完成对 cen­tos 精简和优化。
( P# @! y  U# h6 B
来源：https://www.moewah.com/archives/2407.html