How to optimize Linux systems

1. Compact installation When installing the system (minimized installation)

2. Configure the domestic high-speed Yum source.

3. Disable boot-up services that are not required.

4. Optimize system kernel parameter/etc/sysctl.conf.

5. Add configuration such as System file descriptor, stack, etc.

6. Disable root login, modify SSH port to special port, prohibit DNS, empty password

Machines with extranet IP to turn on configuring firewalls, only open ports that need to be serviced, configure or deactivate SELinux

7. Clear the unused default system account or group (the user who added the OPS member)

8 lock sensitive files, such as/etc/passwd (Chattr +i/etc/passwd and then no longer create users)

(LSATTR/ETC/PASSWD)

9 Configuring the server and Internet time synchronization (scheduled Tasks)

10 configuring sudo fine-grained control over normal user privileges (config sudo)

11 write the above 10 points as a one-click Optimization script.

How to optimize Linux systems