Ubuntu20.04 Server初始化-北京尧图网络

Ubuntu20.04 Server初始化1. 命令提示符的修改rootubuntu2004:~# vim ~/.bashrc#在配置文件结尾添加以下内容PS1\[\e[1;33m\][\u\h \W]\$\[\e[0m\]#修改命令提示符的颜色为黄色exportHISTTIMEFORMAT%F %T #指定history时间格式exportEDITORvim#指定文本编辑器rootubuntu2004:~# . ~/.bashrc #让.bashrc配置文件生效2. 清空防火墙规则#Ubuntu20.04 Server默认没有开启防火墙但是默认安装了ufw防火墙推荐使用iptables防火墙[rootubuntu2004 ~]#ufw status #查看ufw防火墙状态Status: inactive[rootubuntu2004 ~]#ufw disable #关闭ufw防火墙Firewall stopped and disabled on system startup[rootubuntu2004 ~]#apt remove ufw #卸载ufw[rootubuntu2004 ~]#apt purge ufw #删除ufw依赖包[rootubuntu2004 ~]#whereis iptables #查看iptables文件的位置iptables: /usr/sbin/iptables /usr/share/iptables /usr/share/man/man8/iptables.8.gz[rootubuntu2004 ~]#dpkg -s iptables #列出iptables包的状态包括详细信息Package: iptables Status:installok installed Priority: optional Section: net Installed-Size:2639Maintainer: Ubuntu Developersubuntu-devel-discusslists.ubuntu.comArchitecture: amd64 Multi-Arch: foreign Version:1.8.4-3ubuntu2#启动iptables[rootubuntu2004 ~]#modprobe ip_tables#清空iptables防火墙规则[rootubuntu2004 ~]#iptables -F[rootubuntu2004 ~]#iptables -vnLChain INPUT(policy ACCEPT314packets,22966bytes)pkts bytes target prot optinoutsourcedestination Chain FORWARD(policy ACCEPT0packets,0bytes)pkts bytes target prot optinoutsourcedestination Chain OUTPUT(policy ACCEPT233packets,23322bytes)pkts bytes target prot optinoutsourcedestination3. 修改网卡名#修改配置文件为下面形式[rootubuntu2004 ~]#vim /etc/default/grubGRUB_CMDLINE_LINUXnet.ifnames0#或者sed修改#方法一替换[rootubuntu2004 ~]#sed -i.bak /^GRUB_CMDLINE_LINUX/c GRUB_CMDLINE_LINUXnet.ifnames0 /etc/default/grub#方法二搜索替换[rootubuntu2004 ~]#sed -i.bak /^GRUB_CMDLINE_LINUX/s#$#net.ifnames0# /etc/default/grub[rootubuntu2004 ~]#grep ^[a-Z] /etc/default/grubGRUB_DEFAULT0GRUB_TIMEOUT_STYLEhiddenGRUB_TIMEOUT0GRUB_DISTRIBUTORlsb_release-i-s2/dev/null||echoDebianGRUB_CMDLINE_LINUX_DEFAULTmaybe-ubiquityGRUB_CMDLINE_LINUXnet.ifnames0#生成新的grub.cfg文件[rootubuntu2004 ~]#grub-mkconfig -o /boot/grub/grub.cfg#重启生效[rootubuntu2004 ~]#reboot4. 配置静态IP[rootubuntu2004 ~]#vim /etc/netplan/01-netcfg.yaml# This file describes the network interfaces available on your system# For more information, see netplan(5).network: version:2renderer: networkd ethernets: eth0: addresses:[10.0.0.151/24]gateway4:10.0.0.2 nameservers: addresses:[223.5.5.5,180.76.76.76,8.8.8.8]#修改网卡配置文件后需执行命令生效[rootubuntu2004 ~]#netplan apply#查看IP[rootubuntu2004 ~]#ip a1: lo:LOOPBACK,UP,LOWER_UPmtu65536qdisc noqueue state UNKNOWN group default qlen1000link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet127.0.0.1/8 scopehostlo valid_lft forever preferred_lft forever inet6 ::1/128 scopehostvalid_lft forever preferred_lft forever2: eth0:BROADCAST,MULTICAST,UP,LOWER_UPmtu1500qdisc fq_codel state UP group default qlen1000link/ether 00:0c:29:88:18:c6 brd ff:ff:ff:ff:ff:ff inet10.0.0.151/24 brd10.0.0.255 scope global eth0 valid_lft forever preferred_lft forever inet6 fe80::20c:29ff:fe88:18c6/64 scopelinkvalid_lft forever preferred_lft forever#查看gateway[rootubuntu2004 ~]#route -nKernel IP routing table Destination Gateway Genmask Flags Metric Ref Use Iface0.0.0.010.0.0.20.0.0.0 UG000eth010.0.0.00.0.0.0255.255.255.0 U000eth0#查看DNS[rootubuntu1804 ~]#systemd-resolve --status[rootubuntu2004 ~]#resolvectl status ##Ubuntu 20.04新命令Global LLMNR setting: no MulticastDNS setting: no DNSOverTLS setting: no DNSSEC setting: no DNSSEC supported: no DNSSEC NTA:10.in-addr.arpa16.172.in-addr.arpa168.192.in-addr.arpa17.172.in-addr.arpa18.172.in-addr.arpa19.172.in-addr.arpa20.172.in-addr.arpa21.172.in-addr.arpa22.172.in-addr.arpa23.172.in-addr.arpa24.172.in-addr.arpa25.172.in-addr.arpa26.172.in-addr.arpa27.172.in-addr.arpa28.172.in-addr.arpa29.172.in-addr.arpa30.172.in-addr.arpa31.172.in-addr.arpa corp d.f.ip6.arpa home internal intranet lanlocalprivatetestLink2(eth0)Current Scopes: DNS DefaultRoute setting:yesLLMNR setting:yesMulticastDNS setting: no DNSOverTLS setting: no DNSSEC setting: no DNSSEC supported: no Current DNS Server:223.5.5.5 DNS Servers:223.5.5.5180.76.76.768.8.8.85. 关闭SELinux[rootubuntu2004 ~]#apt update[rootubuntu2004 ~]#apt -y install selinux-utils selinux[rootubuntu2004 ~]#getenforce #获取selinux当前状态Disabled[rootubuntu2004 ~]#vim /etc/selinux/configSELINUXdisabled[rootubuntu2004 ~]#reboot #重启生效6. 实现邮件通信[rootubuntu2004 ~]#apt install -y postfix bsd-mailx[rootubuntu2004 ~]#systemctl enable --now postfix# 邮件配置文件/etc/mail.rc7. 配置apt源[rootubuntu2004 ~]#vim /etc/apt/sources.list[rootubuntu2004 ~]#grep ^[a-Z] /etc/apt/sources.listdeb https://mirrors.aliyun.com/ubuntu/ focal main restricted deb https://mirrors.tencent.com/ubuntu/ focal main restricted deb https://mirrors.huaweicloud.com/ubuntu/ focal main restricted deb https://mirrors.aliyun.com/ubuntu/ focal-updates main restricted deb https://mirrors.tencent.com/ubuntu/ focal-updates main restricted deb https://mirrors.huaweicloud.com/ubuntu/ focal-updates main restricted deb https://mirrors.aliyun.com/ubuntu/ focal universe deb https://mirrors.tencent.com/ubuntu/ focal universe deb https://mirrors.huaweicloud.com/ubuntu/ focal universe deb https://mirrors.aliyun.com/ubuntu/ focal-updates universe deb https://mirrors.tencent.com/ubuntu/ focal-updates universe deb https://mirrors.huaweicloud.com/ubuntu/ focal-updates universe deb https://mirrors.aliyun.com/ubuntu/ focal multiverse deb https://mirrors.tencent.com/ubuntu/ focal multiverse deb https://mirrors.huaweicloud.com/ubuntu/ focal multiverse deb https://mirrors.aliyun.com/ubuntu/ focal-updates multiverse deb https://mirrors.tencent.com/ubuntu/ focal-updates multiverse deb https://mirrors.huaweicloud.com/ubuntu/ focal-updates multiverse deb https://mirrors.aliyun.com/ubuntu/ focal-backports main restricted universe multiverse deb https://mirrors.tencent.com/ubuntu/ focal-backports main restricted universe multiverse deb https://mirrors.huaweicloud.com/ubuntu/ focal-backports main restricted universe multiverse deb https://mirrors.aliyun.com/ubuntu/ focal-security main restricted deb https://mirrors.tencent.com/ubuntu/ focal-security main restricted deb https://mirrors.huaweicloud.com/ubuntu/ focal-security main restricted deb https://mirrors.aliyun.com/ubuntu/ focal-security universe deb https://mirrors.tencent.com/ubuntu/ focal-security universe deb https://mirrors.huaweicloud.com/ubuntu/ focal-security universe deb https://mirrors.aliyun.com/ubuntu/ focal-security multiverse deb https://mirrors.tencent.com/ubuntu/ focal-security multiverse deb https://mirrors.huaweicloud.com/ubuntu/ focal-security multiverse[rootubuntu2004 ~]#apt update8. chrony时间同步#服务器端配置[rootcentos7 ~]#hostname -I10.0.0.7[rootcentos7 ~]#yum -y install chrony[rootcentos7 ~]#vim /etc/chrony.confserver ntp.aliyun.com iburst server ntp1.aliyun.com iburst server ntp2.aliyun.com iburst server ntp3.aliyun.com iburst#allow 192.168.0.0/16allow0.0.0.0/0#加此行,指定允许同步的网段# Serve time even if not synchronized to a time source.localstratum10#删除此行注释,当互联网无法连接,仍然可以为客户端提供时间同步服务[rootcentos7 ~]#systemctl restart chronyd#服务启动后会打开端口123/udp[rootcentos7 ~]#ss -ntluNetid State Recv-Q Send-Q Local Address:Port Peer Address:Port udp UNCONN00*:123 *:* udp UNCONN00127.0.0.1:323 *:* udp UNCONN00[::1]:323[::]:* tcp LISTEN0100127.0.0.1:25 *:* tcp LISTEN0128*:22 *:* tcp LISTEN0100[::1]:25[::]:* tcp LISTEN0128[::]:22[::]:*#客户端配置[rootubuntu2004 ~]#hostname -I10.0.0.151[rootubuntu2004 ~]#apt install -y chrony[rootubuntu2004 ~]#vim /etc/chrony/chrony.confpool10.0.0.7 iburst[rootubuntu2004 ~]#systemctl restart chronyd.service#客户端确认同步成功[rootubuntu2004 ~]#chronyc sources -v210Number of sources1.-- Source mode^server,peer,#localclock. / .- Source state*current synced,combined ,-not combined,|/?unreachable,xtimemay beinerror,~timetoo variable.||.- xxxx[yyyy]/- zzzz||Reachability register(octal)-.|xxxxadjusted offset,||Log2(Polling interval)--.||yyyymeasured offset,||\||zzzzestimated error.||||\MS Name/IP address Stratum Poll Reach LastRx Last sample^*10.0.0.736171433us[114us]/- 35ms9 . shell脚本自动加注释[rootubuntu2004 ~]#vim ~/.vimrc[rootubuntu2004 ~]#cat ~/.vimrcsetts4setexpandtabsetignorecase autocmd BufNewFile *.shexec:call SetTitle()func SetTitle()ifexpand(%:e)shcall setline(1,#!/bin/bash)call setline(2,#)call setline(3,#*************************************************************)call setline(4,#Author: chen)call setline(5,#QQ: 2088346053)call setline(6,#Date: .strftime(%Y-%m-%d))call setline(7,#FileName: .expand(%))call setline(8,#Description: The test script)call setline(9,#Copyright (C): .strftime(%Y). All rights reserved)call setline(10,#*************************************************************)call setline(11,)endif endfunc autocmd BufNewFile * normal G[rootubuntu2004 ~]#. ~/.vimrc10. 修改时区[rootubuntu2004 ~]#timedatectlLocal time: Sat2022-07-2320:37:01 UTC Universal time: Sat2022-07-2320:37:01 UTC RTC time: Sat2022-07-2320:37:01 Time zone: Etc/UTC(UTC, 0000)System clock synchronized:yesNTP service: active RTCinlocalTZ: no[rootubuntu2004 ~]#timedatectl set-timezone Asia/Shanghai[rootubuntu2004 ~]#timedatectlLocal time: Sun2022-07-2422:48:09 CST Universal time: Sat2022-07-2320:48:09 UTC RTC time: Sat2022-07-2320:48:09 Time zone: Asia/Shanghai(CST, 0800)System clock synchronized:yesNTP service: active RTCinlocalTZ: no[rootubuntu2004 ~]#cat /etc/timezoneAsia/Shanghai[rootubuntu2004 ~]#vim /etc/default/localeLANGen_HK.UTF-8LANGUAGEen_HK:en[rootubuntu2004 ~]#reboot11. 设置允许root远程登录cloudubuntu2004:~$sudo-i[sudo]passwordforcloud:[rootubuntu2004 ~]#[rootubuntu2004 ~]#passwdNew password: Retype new password: passwd: password updated successfully[rootubuntu2004 ~]#[rootubuntu2004 ~]#vim /etc/ssh/sshd_configPermitRootLoginyes[rootubuntu2004 ~]#systemctl restart sshd.service

Ubuntu20.04 Server初始化

相关推荐

AI模型推理容器化实战：优化部署与性能调优

南大通用数据库-Gbase-8a-实战-绕过字段修改限制的四种曲线救国方案

【Java】IntelliJ IDEA 通过JDBC连接MySQL数据库实现数据增删改查

更多资讯

STM32基于CAN总线的IAP固件升级：Bootloader与Flash分区设计

HFSS S参数反演介电常数：从仿真设置到MATLAB实现

UNet眼底血管分割实战：从切片数据集到PyTorch训练推理

React Native列表在OpenHarmony上的高性能封装实践

深入解析 ESLint `space-before-keywords` 规则：关键字前置空格的强制规范与 `keyword-spacing` 演进之路

Crayfish容器引擎：桌面智能体安全运行的核心底座

今日更新

SpacetimeDB C++ 模块库实战：用 C++20 在数据库内构建 WebAssembly 模块

别踩雷！不是所有 AI 写作工具都靠谱，2026 高校认可工具精选

SSM+MySQL幼儿园管理系统源码解析：从部署到优化

本周精选

超人会飞不算本事：系统稳定依赖清晰规则与边界设计

超人VS蜘蛛侠：拆解超级IP的影响力与传播方法论

基于CNN的调制信号识别：MATLAB实现时频图分类实战

本月热门

基于YOLO的焊缝缺陷检测：从数据标注到工业部署全流程实践

分布式服务的决策记录

创业产品的首版范围

读完文章，想聊聊您的网站？