文章目录
- 镜像选择
- 虚拟机安装（VMware Workstation）
- 虚拟网络配置（NAT模式）
- 虚拟网卡配置
- 虚拟机配置
- 静态IP配置及测试
- 系统初始化及库安装
- 停止防火墙 & 关闭防火墙自启动
- 关闭 selinux 防火墙
- 更换镜像源并重建镜像源缓存
- 安装 ifconfig & Vim & Wget
- 修改hostname
- 更新yum软件包
镜像选择
选用CentOS-7-x86_64-Minimal-1810.iso最小化安装（此版本无GUI页面，仅命令行模式）
参考镜像源地址：http://mirrors.aliyun.com/centos/7/isos/x86_64/
虚拟机安装（VMware Workstation）
使用VMware Workstation 进行虚拟机创建安装，按照镜像指引进行系统安装（此部分略过，虚拟机配置可以再安装后进行调整配置）
使用192.168.2.0网段进行配置，设置好网关地址、网卡地址及子网掩码
虚拟网络配置（NAT模式）
虚拟网卡配置
虚拟机配置
静态IP配置及测试
进入系统目录：/etc/sysconfig/network-scripts/，修改如下参数并保存
BOOTPROTO=staticONBOOT=yesIPADDR=192.168.2.98（复制虚拟机后，仅修改此IP即可）NETMASK=255.255.255.0GATEWAY=192.168.2.2
[root@localhost ~]# cd /etc/sysconfig/network-scripts/
[root@localhost network-scripts]# vi ifcfg-ens33
[root@localhost network-scripts]# cat ifcfg-ens33
TYPE=Ethernet
PROXY_METHOD=none
BROWSER_ONLY=no
BOOTPROTO=static
DEFROUTE=yes
IPV4_FAILURE_FATAL=no
IPV6INIT=yes
IPV6_AUTOCONF=yes
IPV6_DEFROUTE=yes
IPV6_FAILURE_FATAL=no
IPV6_ADDR_GEN_MODE=stable-privacy
NAME=ens33
UUID=a1d937b7-1aa9-46eb-b0c0-0ce44311503a
DEVICE=ens33
ONBOOT=yes
IPADDR=192.168.2.98
NETMASK=255.255.255.0
GATEWAY=192.168.2.2
重启网络服务，查看ip addr
[root@localhost network-scripts]# service network restart
Restarting network (via systemctl): [ 确定 ]
[root@localhost network-scripts]# ip addr
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00inet 127.0.0.1/8 scope host lovalid_lft forever preferred_lft foreverinet6 ::1/128 scope host valid_lft forever preferred_lft forever
2: ens33: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000link/ether 00:0c:29:e2:a1:36 brd ff:ff:ff:ff:ff:ffinet 192.168.2.98/24 brd 192.168.2.255 scope global noprefixroute ens33valid_lft forever preferred_lft foreverinet6 fe80::f2bd:bd9d:9838:c35f/64 scope link noprefixroute valid_lft forever preferred_lft forever
配置DNS（/etc/resolv.conf）并测试（外网连通性），至此可以使用SSH终端工具进行连接
[root@localhost network-scripts]# vi /etc/resolv.conf
[root@localhost network-scripts]# cat /etc/resolv.conf
nameserver 114.114.114.114
nameserver 8.8.8.8
nameserver 8.8.4.4
[root@localhost network-scripts]# ping www.baidu.com
PING www.a.shifen.com (220.181.38.149) 56(84) bytes of data.
64 bytes from 220.181.38.149 (220.181.38.149): icmp_seq=1 ttl=128 time=19.8 ms
64 bytes from 220.181.38.149 (220.181.38.149): icmp_seq=2 ttl=128 time=13.7 ms
64 bytes from 220.181.38.149 (220.181.38.149): icmp_seq=3 ttl=128 time=17.5 ms
64 bytes from 220.181.38.149 (220.181.38.149): icmp_seq=4 ttl=128 time=15.8 ms
64 bytes from 220.181.38.149 (220.181.38.149): icmp_seq=5 ttl=128 time=14.5 ms
系统初始化及库安装
停止防火墙 & 关闭防火墙自启动
[root@localhost ~]# systemctl stop firewalld
[root@localhost ~]# systemctl disable firewalld.service
Removed symlink /etc/systemd/system/multi-user.target.wants/firewalld.service.
Removed symlink /etc/systemd/system/dbus-org.fedoraproject.FirewallD1.service.
关闭 selinux 防火墙
- 注释：
SELINUX=enforcing - 注释：
SELINUXTYPE=targeted - 添加：
SELINUX=disabled
[root@localhost ~]# vi /etc/selinux/config
[root@localhost ~]# cat /etc/selinux/config # This file controls the state of SELinux on the system.
# SELINUX= can take one of these three values:
# enforcing - SELinux security policy is enforced.
# permissive - SELinux prints warnings instead of enforcing.
# disabled - No SELinux policy is loaded.
#SELINUX=enforcing
# SELINUXTYPE= can take one of three values:
# targeted - Targeted processes are protected,
# minimum - Modification of targeted policy. Only selected processes are protected.
# mls - Multi Level Security protection.
#SELINUXTYPE=targeted
SELINUX=disabled
[root@localhost ~]# setenforce 0
[root@localhost ~]# reboot
更换镜像源并重建镜像源缓存
[root@localhost ~]# cd /etc/yum.repos.d/
[root@localhost yum.repos.d]# ls
CentOS-Base.repo CentOS-Debuginfo.repo CentOS-Media.repo CentOS-Vault.repo
CentOS-CR.repo CentOS-fasttrack.repo CentOS-Sources.repo
[root@localhost yum.repos.d]# mv CentOS-Base.repo CentOS-Base.repo.bak
[root@localhost yum.repos.d]# wget -O /etc/yum.repos.d/CentOS-Base.repo http://mirrors.aliyun.com/repo/Centos-7.repo
--2022-06-08 15:39:58-- http://mirrors.aliyun.com/repo/Centos-7.repo
正在解析主机 mirrors.aliyun.com (mirrors.aliyun.com)... 42.101.0.238, 42.101.0.242, 42.101.0.241, ...
正在连接 mirrors.aliyun.com (mirrors.aliyun.com)|42.101.0.238|:80... 已连接。
已发出 HTTP 请求，正在等待回应... 200 OK
长度：2523 (2.5K) [application/octet-stream]
正在保存至: “/etc/yum.repos.d/CentOS-Base.repo”100%[===============================================================================================>] 2,523 --.-K/s 用时 0.02s 2022-06-08 15:39:58 (157 KB/s) - 已保存 “/etc/yum.repos.d/CentOS-Base.repo” [2523/2523])[root@localhost yum.repos.d]# ls -ll
总用量 36
-rw-r--r-- 1 root root 2523 12月 26 2020 CentOS-Base.repo
-rw-r--r--. 1 root root 1664 11月 23 2018 CentOS-Base.repo.bak
-rw-r--r--. 1 root root 1309 11月 23 2018 CentOS-CR.repo
-rw-r--r--. 1 root root 649 11月 23 2018 CentOS-Debuginfo.repo
-rw-r--r--. 1 root root 314 11月 23 2018 CentOS-fasttrack.repo
-rw-r--r--. 1 root root 630 11月 23 2018 CentOS-Media.repo
-rw-r--r--. 1 root root 1331 11月 23 2018 CentOS-Sources.repo
-rw-r--r--. 1 root root 5701 11月 23 2018 CentOS-Vault.repo
[root@localhost yum.repos.d]# yum makecache
已加载插件：fastestmirror
Loading mirror speeds from cached hostfile* base: mirrors.aliyun.com* extras: mirrors.aliyun.com* updates: mirrors.aliyun.com
http://mirrors.aliyuncs.com/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#7 - "Failed connect to mirrors.aliyuncs.com:80; 没有到主机的路由"
正在尝试其它镜像。
http://mirrors.cloud.aliyuncs.com/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: mirrors.cloud.aliyuncs.com; 未知的错误"
正在尝试其它镜像。
base | 3.6 kB 00:00:00
extras | 2.9 kB 00:00:00
updates | 2.9 kB 00:00:00
(1/6): extras/7/x86_64/filelists_db | 277 kB 00:00:01
(2/6): updates/7/x86_64/other_db | 1.0 MB 00:00:04
(3/6): extras/7/x86_64/other_db | 148 kB 00:00:06
(4/6): base/7/x86_64/other_db | 2.6 MB 00:00:17
(5/6): base/7/x86_64/filelists_db | 7.2 MB 00:00:29
(6/6): updates/7/x86_64/filelists_db | 8.7 MB 00:00:32
元数据缓存已建立
安装 ifconfig & Vim & Wget
[root@localhost yum.repos.d]# yum install -y wget
[root@localhost yum.repos.d]# yum install -y vim-enhanced
[root@localhost yum.repos.d]# yum install -y iptables-services
[root@localhost sysconfig]# cat /etc/sysconfig/iptables
# sample configuration for iptables service
# you can edit this manually or use system-config-firewall
# please do not ask us to add additional ports/services to this default configuration
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -p icmp -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 22 -j ACCEPT
-A INPUT -j REJECT --reject-with icmp-host-prohibited
-A FORWARD -j REJECT --reject-with icmp-host-prohibited
COMMIT
修改hostname
[root@localhost ~]# hostnamectl set-hostname evm
更新yum软件包
[root@localhost ~]# yum update
