nmcli con show
nmcli con mod ens33 ipv4.addresses 192.168.1.100/24
nmcli con mod ens33 ipv4.gateway 192.168.1.1
nmcli con mod ens33 ipv4.method manual
nmcli con mod ens33 ipv4.dns "8.8.8.8,8.8.4.4"
nmcli connection modify ens32 ipv4.dns-search uenpay.com
nmcli con up ens33

##删掉home和swap默认逻辑卷并扩容根目录
sed -i s#' resume=/dev/mapper/rl-swap'##g /etc/grub2.cfg /boot/grub2/grub.cfg /boot/loader/entries/*.conf
sed -i s#' rd.lvm.lv=rl/swap'##g /etc/grub2.cfg /boot/grub2/grub.cfg /boot/loader/entries/*.conf
sed -i '/swap\|home/d' /etc/fstab
umount /home
swapoff -a
lvremove -f /dev/rl/swap
lvremove -f /dev/rl/home
#lvextend -l +100%free /dev/rl/root
xfs_growfs /dev/rl/root

#停止防火墙
systemctl disable firewalld
systemctl stop firewalld
default_if=$(ip route show default|head -n1|awk '{print $5}')
nmcli con mod ${default_if} ipv6.method disabled
nmcli connection modify ${default_if} autoconnect yes
systemctl restart NetworkManager
#禁用selinux
sed -i "s/SELINUX=enforcing/SELINUX=disabled/g" /etc/selinux/config
setenforce 0
#增强历史命令
echo 'UserIP=$(who -u am i | cut -d"(" -f 2 | sed -e "s/[()]//g")' | sudo tee -a /etc/profile
echo 'export HISTTIMEFORMAT="[%F %T] [${UserIP}] "' | sudo tee -a /etc/profile
#echo 'TMOUT=1800'|sudo tee -a /etc/profile
#配置yum源和工具
timedatectl set-timezone Asia/Shanghai
sed -e 's|^mirrorlist=|#mirrorlist=|g' \
    -e 's|^#baseurl=http://dl.rockylinux.org/$contentdir|baseurl=https://mirrors.aliyun.com/rockylinux|g' \
    -i.bak \
    /etc/yum.repos.d/rocky-*.repo
dnf makecache

dnf install zip unzip tar telnet wget lrzsz net-tools chrony bash-completion yum-utils nfs-utils tree dmidecode -y
yum-config-manager --add-repo http://mirrors.aliyun.com/docker-ce/linux/centos/docker-ce.repo
 
#时间同步
systemctl enable chronyd
sed -i '/^server/s/^/#/g' /etc/chrony.conf
sed -i  '/Please consider/a\server ntp.aliyun.com iburst\nserver ntp1.aliyun.com iburst\nserver ntp2.aliyun.com iburst\nserver ntp3.aliyun.com iburst'  /etc/chrony.conf
systemctl restart chronyd
chronyc sources -v
chronyc tracking
hwclock -w

#配置ssh
sed -i '/AddressFamily/iPort 22' /etc/ssh/sshd_config
sed -i '/AddressFamily/iPort 5837' /etc/ssh/sshd_config
systemctl restart sshd

#创建用户
sed -i '/Same thing without/{n;d}' /etc/sudoers
sed -i '/Same thing without/a\  %wheel        ALL=(ALL)       NOPASSWD: ALL' /etc/sudoers
sed -i '/Allows people in group/{n;d}' /etc/sudoers
sed -i '/Allows people in group/a# %wheel        ALL=(ALL)       ALL' /etc/sudoers
useradd yunwei -G wheel
#echo 'honojn0#UrpQ!UHj'|passwd --stdin root
echo 'Cptbtptp999gml'|passwd --stdin root
echo 'O2gff2KST@!mNTm$'|passwd --stdin yunwei
#私钥服务器192.168.3.1 root
mkdir -p /root/.ssh
echo 'ssh-rsa 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 root@jump' >>/root/.ssh/authorized_keys

#安装监控客户端
###d0-test
curl https://zhengyu1992.cn/file/exporter/script-exporter/script-exporter-install.sh|bash
curl https://zhengyu1992.cn/file/exporter/node_exporter/node_exporter-install.sh|bash
curl https://zhengyu1992.cn/file/deploy/monitoring/consul/d0-script-exporter-res.sh|bash
curl https://zhengyu1992.cn/file/deploy/monitoring/consul/d0-node-exporter-res.sh|bash

###d1-prod
curl https://zhengyu1992.cn/file/exporter/script-exporter/script-exporter-install.sh|bash
curl https://zhengyu1992.cn/file/exporter/node_exporter/node_exporter-install.sh|bash
curl https://zhengyu1992.cn/file/deploy/monitoring/consul/d1-script-exporter-res.sh|bash
curl https://zhengyu1992.cn/file/deploy/monitoring/consul/d1-node-exporter-res.sh|bash