Ubuntu Apache MySQL PHP

1
mkdir -p /media/apt
2

3
mount -o loop /data/ubuntu-10.04-server-amd64.iso /media/apt
4

5
cat >> /etc/fstab <<EOF
6
# Mount the APT source to /media/apt.
7
/data/ubuntu-10.04-server-amd64.iso /media/apt iso9660 loop,ro 0 0
8
EOF
9

10
cat > /etc/apt/sources.list <<EOF
11
deb file:///media/apt lucid main restricted
12
EOF
13

14
apt-get update

1
cat >> /etc/ssh/sshd_config <<EOF
2
UseDNS no
3
EOF
4

5
service ssh restart

1
ufw default deny incoming
2
ufw default allow outgoing
3
ufw allow 22/tcp
4
ufw allow 80/tcp
5
ufw allow 443/tcp
6
ufw enable

1
cat > /etc/sysctl.conf <<EOF
2
# ========== 文件句柄 & 内存优化 ==========
3
# 系统最大打开文件句柄数
4
fs.file-max = 655350
5
# 避免 OOM killer 误杀进程
6
vm.overcommit_memory = 1
7
# 降低 swap 使用优先级
8
vm.swappiness = 10
9

10
# ========== 网络高并发优化 ==========
11
# 网卡接收队列最大值
12
net.core.netdev_max_backlog = 65535
13
# TCP 连接队列最大值
14
net.core.somaxconn = 65535
15
# TCP 孤儿连接上限
16
net.ipv4.tcp_max_orphans = 655350
17
# TCP 读/写缓冲区最大值
18
net.core.rmem_max = 16777216
19
net.core.wmem_max = 16777216
20
# TCP 保活时间
21
net.ipv4.tcp_keepalive_time = 600
22
# 启用 TCP 时间戳
23
net.ipv4.tcp_timestamps = 1
24
# 复用 TIME_WAIT 状态的连接
25
net.ipv4.tcp_tw_reuse = 1
26
# 回收 TIME-WAIT 状态的连接
27
net.ipv4.tcp_tw_recycle = 1
28
# TIME_WAIT 超时时间
29
net.ipv4.tcp_fin_timeout = 30
30
# TIME_WAIT 最大数量
31
net.ipv4.tcp_max_tw_buckets = 60000
32
# SYN 队列最大值
33
net.ipv4.tcp_max_syn_backlog = 65535
34
# 启用 SYN Cookie
35
net.ipv4.tcp_syncookies = 1
36
# 可用端口范围
37
net.ipv4.ip_local_port_range = 1024 65535
38

39
# ========== MySQL ==========
40
# 禁用透明大页
41
vm.nr_hugepages = 0
42
# 优先回收不活跃内存
43
vm.dirty_ratio = 20
44
vm.dirty_background_ratio = 10
45
# 增大内存映射区
46
vm.max_map_count = 262144
47
# 内核最小空闲内存
48
vm.min_free_kbytes = 65536
49
EOF
50

51
sysctl -p

1
cat >> /etc/security/limits.conf <<EOF
2
* soft nofile 65535
3
* hard nofile 65535
4
* soft nproc 65535
5
* hard nproc 65535
6
EOF

1
cat >> /etc/fstab <<EOF
2
# Temporary Filesystem Hardening
3
tmpfs /tmp tmpfs defaults,noexec,nosuid 0 0
4
tmpfs /var/tmp tmpfs defaults,noexec,nosuid 0 0
5
EOF

1
apt-get install -y apache2 mysql-server php5 php5-mysql libapache2-mod-php5
2

3
cat >> /etc/apache2/apache2.conf <<EOF
4
ServerName localhost
5
EOF
6

7
sed -i '/ServerSignature On/d' /etc/apache2/conf.d/security
8
sed -i 's/#ServerSignature Off/ServerSignature Off/g' /etc/apache2/conf.d/security
9
sed -i '/#ServerTokens /d' /etc/apache2/conf.d/security
10
sed -i 's/ServerTokens OS/ServerTokens Prod/g' /etc/apache2/conf.d/security
11

12
/etc/init.d/apache2 restart