1、将/etc/目录下所有以conf结尾的文件打包,压缩包名称为当天时间,复制到/usr/local/src目录下备份。找到/etc/-regex".*\.conf$"|xargstar-zcvf`date+%F`-confs.tar.gz&&cp`date+%F`-confs.tar.gz/usr/local/src2。查找在当前系统上没有所有者或组且在上周访问过的文件或目录find/-nouser-o-nogroup-mtime-7-ls3。在/etc目录下至少找到一类用户没有执行权限的文件find/etc/!-perm/111-ls4.自建网络yum源(通过httpd实现)自建网络yum源需要2台机器,一台用于server,一台用于clientserver操作,以huawei镜像为例#配置华为云wget-O/etc/yum.repos.d/CentOS-Base.repohttps://repo.huaweicloud.com/repository/conf/CentOS-8-reg.reposed-i"s/#baseurl/baseurl/g"/etc/yum.repos.d/CentOS-Base.reposed-i"s/mirrorlist=http/#mirrorlist=http/g"/etc/yum.repos.d/CentOS-Base。reposed-i"s@http://mirror.centos.org@https://repo.huaweicloud.com@g"/etc/yum.repos.d/CentOS-Base.repoyumrepolistall##使用httpd发布到LANdnf-yinstallhttpdsystemctlenable--nowhttpd#Repos需要同步BaseOSAppStreamextrasdnfreposync--repoid=BaseOS--download-metadata-p/var/www/html/centos/8dnfreposync--repoid=AppStream--download-metadata-p/var/www/html/centos/8dnfreposync--repoid=extras--download-metadata-p/var/www/html/centos#配置EPEL指定华为源touch/etc/yum.repo.d/epel.repo[epel]name=EPELbaseurl=https://repo.huaweicloud.com/epel/8/Everything/x86_64/gpgcheck=0#同步epeldnfreposync--repoid=epel--download-metadata-p/var/www/html#下载epelkeywget-P/var/www/html/epel/https://repo.huaweicloud.com/epel/RPM-GPG-KEY-EPEL-8#关闭防火墙systemctlstopfirewalld.serviceclient配置使用vim/etc/yum.repos.d/test.repo[BaseOS]name=BaseOSbaseurl=http://192.168.0.121/centos/8/BaseOSgpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-centosofficial[AppStream]name=Appstreambaseurl=http://192.168.0.121/centos/8/AppStream/gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-centosofficial[extras]name=extrasbaseurl=http://192.168.0.121/centos/extras/[epel]name=epelbaseurl=http://192.168.0.121/epel/gpgkey=http://192.168.0.121/epel/RPM-GPG-KEY-EPEL-8yumrepolistall5。在ifconfig命令中使用sed提取本地IPv4地址sed-rn'2s/^[^0-9]+([0-9.]+).*$/\1/p'6.删除/etc/fstab文件中所有#开头的文件,#和一行开头的空白字符后跟至少一个空白字符sed-Ei.bak"s/^#[[:space:]]+(.*)/\1/"/etc/fstab7,process/etc/fstab路径,用sed命令解压出它的目录名和基本名[root@localhost~]#echo"/etc/fstab"|sed-r's#^/(.*)/(.*)#\1#'etc[root@localhost~]#echo"/etc/fstab"|sed-r's#^/(.*)/(.*)#\2#'fstab
