一、之前有写过一篇管理定制CentOS5.6的文章,最近公司外网生产环境准备用CentOS6系列的,手动安装是在是太麻烦,所以就又研究了一些6系列的封装,其实和5系列的差不多,就是有几个文件不一样,还有就是ks.cfg这个文件我又更新了新内容。二、开始定制1、安装需要的用到的软件包[root@localhost ~]# yum -y install createrepo mkisofs2、生成安装系统所需要的rpm文件列表[root@localhost ~]# awk "/Installing/{print $2}" install.log |sed "s/^[0-9]*://g" >/root/packages.list3、创建工作目录[root@localhost ~]# mkdir -p /mnt/cdrom[root@localhost ~]# mkdir -p /data/OS[root@localhost ~]# mount /dev/cdrom /mnt/cdrom4、复制文件[root@localhost ~]# rsync -a --exclude=Packages /mnt/cdrom/* /data/OS/[root@localhost ~]# cp /mnt/cdrom/.discinfo /data/OS/5、复制精简后的rpm包
a、撰写脚本[root@localhost ~]# vi /data/cprmps.sh #!/bin/bash DEBUG=0 CentOS_DVD=/mnt/cdrom ALL_RPMS_DIR=/mnt/cdrom/Packages KOS_RPMS_DIR=/data/OS/Packages packages_list=/root/packages.list number_of_packages=`cat $packages_list | wc -l` i=1 while [ $i -le $number_of_packages ] ; do line=`head -n $i $packages_list | tail -n -1` name=`echo $line | awk "{print $1}"` version=`echo $line | awk "{print $3}" | cut -f 2 -d :` if [ $DEBUG -eq "1" ] ; then echo $i: $line echo $name echo $version fi if [ $DEBUG -eq "1" ] ; then ls $ALL_RPMS_DIR/$name-$version* if [ $? -ne 0 ] ; then echo "cp $ALL_RPMS_DIR/$name-$version* " fi else echo "cp $ALL_RPMS_DIR/$name-$version* $KOS_RPMS_DIR/" cp $ALL_RPMS_DIR/$name-$version* $KOS_RPMS_DIR/ # in case the copy failed if [ $? -ne 0 ] ; then echo "cp $ALL_RPMS_DIR/$name-$version* " cp $ALL_RPMS_DIR/$name* $KOS_RPMS_DIR/ fi
b、复制[root@localhost ~]# chmod +x /data/cprmps.sh [root@localhost ~]# sh /data/cprmps.sh 6、撰写ks.cfg文件[root@localhost ~]# vi /data/OS/isolinux/ks.cfg # Kickstart file automatically generated by anaconda. #Install OS instead of upgrade install #Use text mode install text #Use CDROM installation media cdrom lang en_US.UTF-8 keyboard us #Skip the X Configuration skipx #Network informationnetwork --bootproto=static --ip=172.28.26.100 --netmask=255.255.255.0 --gateway=172.28.28.1 --nameserver 8.8.8.8 --hostname=kingsoft-navy --noipv6 --onboot=yes#root -- 1q2w3e rootpw --iscrypted $1$UJlaGQFP$.Wf93SJYnar9yDIzS8YDr1 firewall --disabled #System authorization information authconfig --enableshadow --enablemd5 selinux --disabled timezone --utc Asia/Shanghai #System bootloader configuration bootloader --location=mbr #Clear the Master Boot Record zerombr yes #Partition clearing information bootloader --location=mbrclearpart --linuxpart /boot --fstype ext3 --size=200 --asprimarypart pv.4 --size=30000part swap --size=32000part pv.7 --size=100 --growvolgroup VolGroupRoot --pesize=32768 pv.4volgroup VolGroupData --pesize=32768 pv.7logvol /data/logs --fstype ext3 --name=LogVolLogs --vgname=VolGroupData --size=10240logvol /data --fstype ext3 --name=LogVolData --vgname=VolGroupData --size=59904logvol / --fstype ext3 --name=LogVolRoot --vgname=VolGroupRoot --size=29984 #--- Reboot the host after installation is done reboot %packages @additional-devel@base@core@development@emacs@server-policy@system-managementlibXinerama-develxorg-x11-proto-develstartup-notification-devellibgnomeui-devellibbonobo-develcmakerpmdevtoolsjpackage-utilsrpmlint%post # file descriptors ulimit -HSn 655350echo "* soft nofile 655350" >> /etc/security/limits.conf echo "* hard nofile 655350" >> /etc/security/limits.conf#set iptables/bin/cat > /etc/sysconfig/iptables << _iptables# Generated by iptables-save v1.3.5 on Sun Jul 22 18:22:41 2012*filter:INPUT ACCEPT [0:0]:FORWARD ACCEPT [0:0]:OUTPUT ACCEPT [458589544:2196099698813]:RH-Firewall-1-INPUT - [0:0]-A INPUT -j RH-Firewall-1-INPUT -A FORWARD -j RH-Firewall-1-INPUT -A RH-Firewall-1-INPUT -i lo -j ACCEPT -A RH-Firewall-1-INPUT -p icmp -m icmp --icmp-type any -j ACCEPT -A RH-Firewall-1-INPUT -p esp -j ACCEPT -A RH-Firewall-1-INPUT -p ah -j ACCEPT -A RH-Firewall-1-INPUT -d 224.0.0.251 -p udp -m udp --dport 5353 -j ACCEPT -A RH-Firewall-1-INPUT -p udp -m udp --dport 631 -j ACCEPT -A RH-Firewall-1-INPUT -p tcp -m tcp --dport 631 -j ACCEPT -A RH-Firewall-1-INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT -A RH-Firewall-1-INPUT -p tcp -m state --state NEW -m tcp --dport 22 -j ACCEPT -A RH-Firewall-1-INPUT -s 172.28.29.10 -p tcp -m state --state NEW -m tcp -j ACCEPT -A RH-Firewall-1-INPUT -s 100.100.100.100 -p tcp -m state --state NEW -m tcp -j ACCEPT -A RH-Firewall-1-INPUT -s 10.20.20.10 -p tcp -m state --state NEW -m tcp -j ACCEPT -A RH-Firewall-1-INPUT -j REJECT --reject-with icmp-host-prohibited COMMIT# Completed on Sun Jul 22 18:22:41 2012_iptables #start iptables/etc/init.d/iptables start #add route /sbin/route add -net 172.28.0.0 netmask 255.255.0.0 gw 172.28.29.1echo "route add -net 172.28.0.0 netmask 255.255.0.0 gw 172.28.29.1" >> /etc/rc.local #set DNS/bin/cat > /etc/resolv.conf << _resolvnameserver 114.114.115.115nameserver 114.114.114.114nameserver 8.8.4.4nameserver 8.8.8.8_resolv#set ntpntpdate 1.cn.pool.ntp.org && /sbin/hwclock --systohc /bin/cat > /etc/cron.daily/ntpdate << _ntpdate#!/bin/bash/sbin/ntpdate 1.cn.pool.ntp.org && /sbin/hwclock --systohc_ntpdate#set /etc/sysctl.conf/bin/cat > /etc/sysctl.conf << _sysctlfs.file-max = 1000000kernel.core_uses_pid = 1kernel.msgmax = 65536kernel.msgmnb = 65536kernel.shmall = 4294967296kernel.shmmax = 68719476736kernel.sysrq = 0net.core.netdev_max_backlog = 262144net.core.rmem_default = 2097152 net.core.rmem_max = 16777216net.core.somaxconn = 262144net.core.wmem_default = 2097152 net.core.wmem_max = 16777216net.ipv4.conf.default.accept_source_route = 0net.ipv4.conf.default.rp_filter = 1net.ipv4.ip_conntrack_max = 819200net.ipv4.ip_forward = 0net.ipv4.ip_local_port_range = 1024 65000net.ipv4.neigh.default.gc_thresh1 = 10240 net.ipv4.neigh.default.gc_thresh2 = 40960 net.ipv4.neigh.default.gc_thresh3 = 81920 net.ipv4.netfilter.ip_conntrack_max = 819200net.ipv4.netfilter.ip_conntrack_tcp_timeout_close_wait = 60net.ipv4.netfilter.ip_conntrack_tcp_timeout_fin_wait = 120net.ipv4.netfilter.ip_conntrack_tcp_timeout_time_wait = 120net.ipv4.tcp_fin_timeout = 1net.ipv4.tcp_keepalive_intvl = 15net.ipv4.tcp_keepalive_probes = 5net.ipv4.tcp_keepalive_time = 30net.ipv4.tcp_max_orphans = 3276800net.ipv4.tcp_max_syn_backlog = 262144net.ipv4.tcp_max_tw_buckets = 51200net.ipv4.tcp_mem = 94500000 915000000 927000000net.ipv4.tcp_orphan_retries = 3net.ipv4.tcp_reordering = 5net.ipv4.tcp_retrans_collapse = 0net.ipv4.tcp_retries2 = 5net.ipv4.tcp_rmem = 4096 87380 4194304net.ipv4.tcp_sack = 1net.ipv4.tcp_synack_retries = 1net.ipv4.tcp_syncookies = 1net.ipv4.tcp_syn_retries = 1net.ipv4.tcp_timestamps = 0net.ipv4.tcp_tw_recycle = 1net.ipv4.tcp_tw_reuse = 1net.ipv4.tcp_window_scaling = 1net.ipv4.tcp_wmem = 4096 16384 4194304net.ipv6.conf.all.disable_ipv6 = 1_sysctlsource /etc/profilesysctl -e -p /etc/init.d/avahi-daemon stop/etc/init.d/yum-updatesd stopchkconfig avahi-daemon offchkconfig yum-updatesd off7、生成comps.xml文件[root@localhost ~]# cd /data/OS[root@localhost ~]# createrepo -g repodata/0dae8d32824acd9dbdf7ed72f628152dd00b85e4bd802e6b46e4d7b78c1042a3-c6-x86_64-comps.xml /data/OS/8、让系统启动读开始,ks.cfg的内容修改lable linux [root@localhost ~]# vi /data/OS/isolinux/isolinux.cfg label linux menu label ^Install or upgrade an existing system menu default kernel vmlinuz append ks=cdrom:/isolinux/ks.cfg initrd=initrd.img9、生成ISO镜像文件[root@localhost ~]# declare -x discinfo=`head -1 .discinfo`[root@localhost ~]# createrepo -u "media://$discinfo" -g repodata/0dae8d32824acd9dbdf7ed72f628152dd00b85e4bd802e6b46e4d7b78c1042a3-c6-x86_64-comps.xml /data/OS/[root@localhost ~]# mkisofs -R -J -T -r -l -d -joliet-long -allow-multidot -allow-leading-dots -no-bak -o /data/kingsoft_centos6.3_1.0.iso -b isolinux/isolinux.bin -c isolinux/boot.cat -no-emul-boot -boot-load-size 4 -boot-info-table /data/OS10、生成MD5校验码[root@localhost ~]# /usr/bin/md5sum /data/kingsoft_centos6.3_1.0.iso 2de68609b36db23cca4956b2779465ed /data/kingsoft_centos6.3_1.0.iso三、到此已经完成了,现在你就可以把这个镜像文件刻录成安装安装系统了,只要你设置服务器从光驱启动就好了,一切自动完成。相关阅读:CentOS5.6下配置rsync内网同步数据到外网 http://www.linuxidc.com/Linux/2012-06/64070.htm使用Linux的/dev/shmSabayon Linux 安装 MPlayer-1.0rc3相关资讯 CentOS教程
- CentOS上使用Dropbox (02/07/2013 09:11:47)
- CentOS 网络设置修改 (02/04/2013 21:28:42)
- CentOS如何安装whois命令 (01/20/2013 14:33:29)
| - CentOS 下修改/dev/shm 大小解决 (02/04/2013 21:30:15)
- CentOS 注销在线用户, Linux 注销 (02/04/2013 21:24:06)
- CentOS安装完重启后不能进入终端 (01/02/2013 16:04:02)
|
本文评论 查看全部评论 (0)