[{"data":1,"prerenderedAt":609},["ShallowReactive",2],{"content:\u002Fposts\u002Fcentos-setup":3,"surround:\u002Fposts\u002Fcentos-setup":598},{"id":4,"title":5,"body":6,"categories":573,"date":575,"description":576,"draft":577,"extension":578,"image":579,"meta":580,"navigation":582,"path":583,"permalink":584,"pinned":577,"published":584,"readingTime":585,"recommend":584,"references":584,"seo":590,"sitemap":591,"stem":592,"tags":593,"type":595,"updated":596,"__hash__":597},"content\u002Fposts\u002Fposts\u002Fcentos-setup.md","CentOS 安装与服务器初始化配置完整指南",{"type":7,"value":8,"toc":548},"minimark",[9,19,22,45,50,53,64,67,96,99,103,106,113,116,120,123,128,131,139,145,148,154,160,166,171,177,180,186,225,228,234,237,241,245,251,255,258,264,268,271,277,281,287],[10,11,15],"alert",{"title":12,"type":13,"icon":14},"AI 迁移提示","info","tabler:robot",[16,17,18],"p",{},"本文由 AI 协助从旧站迁移，尚未完成逐篇人工审校；内容如有疏漏，将在复核后修订。",[10,20],{"title":21,"type":13},"> 本文部分内容由 AI 辅助整理，已结合实际操作进行校验，请根据自身环境谨慎使用。",[23,24,25,32,35],"blockquote",{},[16,26,27,31],{},[28,29,30],"span",{},"!IMPORTANT"," CentOS停更说明",[16,33,34],{},"CentOS操作系统已全面停止维护（EOL），继续使用会使系统暴露在新的安全漏洞之下，成为攻击目标，并可能违反相关安全合规要求。",[16,36,37,38],{},"阿里云：",[39,40,44],"a",{"href":41,"rel":42},"https:\u002F\u002Fhelp.aliyun.com\u002Fzh\u002Fecs\u002Fuser-guide\u002Foptions-for-dealing-with-centos-linux-end-of-life",[43],"nofollow","CentOS 操作系统",[46,47,49],"h2",{"id":48},"一下载镜像","一、下载镜像",[16,51,52],{},"Centos7镜像包：",[54,55,61],"pre",{"className":56,"code":58,"language":59,"meta":60},[57],"language-sql","# 华为云镜像站\nhttps:\u002F\u002Fmirrors.huaweicloud.com\u002Fcentos\u002F7\u002Fisos\u002Fx86_64\u002FCentOS-7-x86_64-DVD-2009.iso\n","sql","",[62,63,58],"code",{"__ignoreMap":60},[16,65,66],{},"烧录镜像（二选一）",[68,69,70,79,86,93],"ul",{},[71,72,73,74],"li",{},"使用 ",[39,75,78],{"href":76,"rel":77},"https:\u002F\u002Fwww.ventoy.net\u002Fcn\u002Findex.html",[43],"Ventoy启动盘",[71,80,73,81],{},[39,82,85],{"href":83,"rel":84},"https:\u002F\u002Frufus.ie\u002Fzh\u002F",[43],"Rufus",[71,87,73,88],{},[39,89,92],{"href":90,"rel":91},"https:\u002F\u002Fetcher.balena.io\u002F",[43],"Balenaetcher",[71,94,95],{},"或者第三方镜像烧录工具",[16,97,98],{},"之后启动到U盘，进入安装流程，里面没什么可说的，都是可视化安装，下一步下一步即可。",[46,100,102],{"id":101},"二开始安装","二、开始安装",[16,104,105],{},"网络配置可以在安装界面配置，也可以使用 dhcp 在安装完成后配置，但是开关一定要打开，不然无法使用SSH连接，如果在安装的时候没有网络，也可以关闭，然后后面手动开启网卡服务。",[16,107,108],{},[109,110],"img",{"alt":111,"src":112},"网络配置 - 设置静态IP","https:\u002F\u002Fimg.olinl.com\u002Ffile\u002Fpost-img\u002Fcentos-setup\u002FH6ZhALpn.webp",[16,114,115],{},"如果root密码设置过于简单，需要点击两次完成才可继续安装。",[46,117,119],{"id":118},"三系统配置","三、系统配置",[16,121,122],{},"在我们安装完成一个系统后，通常需要进行一些必要的优化",[124,125,127],"h3",{"id":126},"_1-修改-ip-地址","1. 修改 IP 地址",[16,129,130],{},"可以先ping一下外网是否可以访问",[54,132,137],{"className":133,"code":135,"language":136,"meta":60},[134],"language-bash","ping baidu.com\n","bash",[62,138,135],{"__ignoreMap":60},[54,140,143],{"className":141,"code":142,"language":136,"meta":60},[134],"# 网络正常\n[root@harbor ~]# ping baidu.com\nPING baidu.com (110.242.74.102) 56(84) bytes of data.\n64 bytes from 110.242.74.102 (110.242.74.102): icmp_seq=1 ttl=51 time=20.2 ms\n64 bytes from 110.242.74.102 (110.242.74.102): icmp_seq=2 ttl=51 time=20.0 ms\n64 bytes from 110.242.74.102 (110.242.74.102): icmp_seq=3 ttl=51 time=26.6 ms\n64 bytes from 110.242.74.102 (110.242.74.102): icmp_seq=4 ttl=51 time=20.0 ms\n64 bytes from 110.242.74.102 (110.242.74.102): icmp_seq=5 ttl=51 time=20.0 ms\n^C\n--- baidu.com ping statistics ---\n5 packets transmitted, 5 received, 0% packet loss, time 4004ms\nrtt min\u002Favg\u002Fmax\u002Fmdev = 20.061\u002F21.424\u002F26.605\u002F2.595 ms\n",[62,144,142],{"__ignoreMap":60},[16,146,147],{},"如果没有打印延迟等信息，就说明网络是断开的。",[16,149,150],{},[151,152,153],"strong",{},"查看网卡名称",[54,155,158],{"className":156,"code":157,"language":136,"meta":60},[134],"#查看网卡，通常是ens开头的\nip addr\n",[62,159,157],{"__ignoreMap":60},[54,161,164],{"className":162,"code":163,"language":136,"meta":60},[134],"# 查看网卡名称为ens33\n[root@172-0-0-12 ~]# ip addr\n1: lo: \u003CLOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000\n    link\u002Floopback 00:00:00:00:00:00 brd 00:00:00:00:00:00\n    inet 127.0.0.1\u002F8 scope host lo\n       valid_lft forever preferred_lft forever\n    inet6 ::1\u002F128 scope host\n       valid_lft forever preferred_lft forever\n2: ens33: \u003CBROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000\n    link\u002Fether 00:0c:29:06:59:5c brd ff:ff:ff:ff:ff:ff\n    inet 172.0.0.12\u002F24 brd 172.0.0.255 scope global noprefixroute ens33\n       valid_lft forever preferred_lft forever\n    inet6 fe80::e1ff:d529:c8cb:6d1a\u002F64 scope link noprefixroute\n       valid_lft forever preferred_lft forever\n",[62,165,163],{"__ignoreMap":60},[16,167,168],{},[151,169,170],{},"修改网卡配置",[54,172,175],{"className":173,"code":174,"language":136,"meta":60},[134],"# 修改网卡配置\n# vi \u002Fetc\u002Fsysconfig\u002Fnetwork-scripts\u002Fifcfg-\u003C网卡名称>\nvi \u002Fetc\u002Fsysconfig\u002Fnetwork-scripts\u002Fifcfg-ens33\n",[62,176,174],{"__ignoreMap":60},[16,178,179],{},"修改关键字段：",[54,181,184],{"className":182,"code":183,"language":136,"meta":60},[134],"\nBOOTPROTO=static\nONBOOT=yes\nIPADDR=192.168.1.100\nNETMASK=255.255.255.0\nGATEWAY=192.168.1.1\nDNS1=8.8.8.8\n\n",[62,185,183],{"__ignoreMap":60},[23,187,188],{},[16,189,190,193,194,197,200,201,203,206,207,209,212,213,215,218,219,221,224],{},[62,191,192],{"code":192},"BOOTPROTO","=static - 静态ip",[195,196],"br",{},[62,198,199],{"code":199},"ONBOOT","=yes - 启动时自动激活",[195,202],{},[62,204,205],{"code":205},"IPADDR","=192.168.1.100 - ip地址",[195,208],{},[62,210,211],{"code":211},"NETMASK","=255.255.255.0 - 掩码，通常为255.255.255.0",[195,214],{},[62,216,217],{"code":217},"GATEWAY","=192.168.1.1 - 网关",[195,220],{},[62,222,223],{"code":223},"DNS1","=8.8.8.8 - DNS地址",[16,226,227],{},"修改完成后保存，重启network服务",[54,229,232],{"className":230,"code":231,"language":136,"meta":60},[134],"\nservice network restart\n\n# 对于使用旧版network服务的系统\n\u002Fetc\u002Finit.d\u002Fnetwork restart\n\u002Fetc\u002Finit.d\u002Fnetwork stop && \u002Fetc\u002Finit.d\u002Fnetwork start\n\n",[62,233,231],{"__ignoreMap":60},[16,235,236],{},"然后就可以正常联网了。",[124,238,240],{"id":239},"_2-更换yum源","2. 更换yum源",[10,242],{"title":243,"type":244},"> 由于centos7已经停止服务，部分源已经无法访问，如果显示404等问题，请自行寻找可用源","tip",[54,246,249],{"className":247,"code":248,"language":136,"meta":60},[134],"\n# 备份yum源\nmv \u002Fetc\u002Fyum.repos.d\u002FCentOS-Base.repo \u002Fetc\u002Fyum.repos.d\u002FCentOS-Base.repo.backup\n\n# 下载国内yum源配置文件\n## 如果无法使用可以手动创建文件然后复制进去\nvi \u002Fetc\u002Fyum.repos.d\u002FCentOS-Base.repo\n## 阿里源（推荐）：\nwget -O \u002Fetc\u002Fyum.repos.d\u002FCentOS-Base.repo http:\u002F\u002Fmirrors.aliyun.com\u002Frepo\u002FCentos-7.repo\n### 当wget无法使用时\n#curl -o \u002Fetc\u002Fyum.repos.d\u002FCentOS-Base.repo http:\u002F\u002Fmirrors.aliyun.com\u002Frepo\u002FCentos-7.repo\n## 网易源：\nwget -O \u002Fetc\u002Fyum.repos.d\u002FCentOS-Base.repo http:\u002F\u002Fmirrors.163.com\u002F.help\u002FCentOS7-Base-163.repo\n### 当wget无法使用时\n#curl -o \u002Fetc\u002Fyum.repos.d\u002FCentOS-Base.repo http:\u002F\u002Fmirrors.163.com\u002F.help\u002FCentOS7-Base-163.repo\n\n# 清理yum缓存，并生成新的缓存\nyum clean all\nyum makecache\n\n# 更新yum源\nyum update -y\n\n",[62,250,248],{"__ignoreMap":60},[124,252,254],{"id":253},"_3-硬盘操作","3. 硬盘操作",[16,256,257],{},"此操作可以借助lvm2工具，详细操作见另一篇文章：",[16,259,260],{},[39,261,263],{"href":262},"\u002Fposts\u002Flvm-setup","Olinl Blog - LVM 硬盘工具使用教程",[124,265,267],{"id":266},"_4-配置-selinux","4. 配置 SELinux",[16,269,270],{},"SELinux 是 CentOS 7 的安全模块，它可以提高系统的安全性。但是，如果不正确配置，它可能会导致一些问题。以下是一些常见的 SELinux 配置",[54,272,275],{"className":273,"code":274,"language":136,"meta":60},[134],"\n# 临时禁用SELinux\nsetenforce 0\n\n# 永久禁用SELinux\nvi \u002Fetc\u002Fselinux\u002Fconfig\n## 修改为下面内容\nSELINUX=disabled\n\n#注意！修改后需重启系统才能生效\n\n",[62,276,274],{"__ignoreMap":60},[46,278,280],{"id":279},"四-安装必要的软件包","四、 安装必要的软件包",[54,282,285],{"className":283,"code":284,"language":136,"meta":60},[134],"\nyum -y install  epel-release\nyum -y install wget vim net-tools telnet lsof tree htop zip unzip iperf3\n\n",[62,286,284],{"__ignoreMap":60},[10,288,290,316,320,323,329,332,337,343,348,354,359,365,370,376,381,387,392,398,402,407,413,417,421,427,431,437,441,444,451,458,462,467,470,476,481,484,490,495,498,504,509,512,518,522,528,532,538,542],{"title":289,"type":13},"> - wget：用于下载文件和网页",[68,291,292,295,298,301,304,307,310,313],{},[71,293,294],{},"vim：用于编辑文本文件",[71,296,297],{},"net-tools：用于管理网络配置",[71,299,300],{},"telnet：用于测试网络连接",[71,302,303],{},"lsof：用于查看系统打开的文件",[71,305,306],{},"tree：用于查看目录结构",[71,308,309],{},"htop：用于更好的查看进程",[71,311,312],{},"zip、unzip：用于解压缩zip文件",[71,314,315],{},"iperf3：内网测速工具",[46,317,319],{"id":318},"五防火墙操作","五、防火墙操作",[16,321,322],{},"通常情况下我们使用的是 vpc，云厂商会自带防火墙服务，我们可以将防火墙直接关闭。",[54,324,327],{"className":325,"code":326,"language":136,"meta":60},[134],"\n# 停止防火墙服务\nsystemctl stop firewalld.service\n# 停止开机自启\nsystemctl disable firewalld.service\n\n",[62,328,326],{"__ignoreMap":60},[16,330,331],{},"如果你认为系统的防火墙非常重要，想要使用，请往下看",[16,333,334],{},[151,335,336],{},"添加一个端口",[54,338,341],{"className":339,"code":340,"language":136,"meta":60},[134],"\n# 添加端口\n## --permanent永久生效，没有此参数重启后失效\nfirewall-cmd --zone=public --add-port=5005\u002Ftcp --permanent\n\n# 添加端口外部访问权限（这样外部才能访问）\nfirewall-cmd --add-port=5005\u002Ftcp\n\n# 更新防火墙规则\nfirewall-cmd --reload\n\n",[62,342,340],{"__ignoreMap":60},[16,344,345],{},[151,346,347],{},"查看端口是否开放",[54,349,352],{"className":350,"code":351,"language":136,"meta":60},[134],"firewall-cmd --zone=public --query-port=80\u002Ftcp\n",[62,353,351],{"__ignoreMap":60},[16,355,356],{},[151,357,358],{},"删除开放的端口",[54,360,363],{"className":361,"code":362,"language":136,"meta":60},[134],"firewall-cmd --zone=public --remove-port=80\u002Ftcp --permanent\n",[62,364,362],{"__ignoreMap":60},[16,366,367],{},[151,368,369],{},"查看firewall是否运行",[54,371,374],{"className":372,"code":373,"language":136,"meta":60},[134],"# 两个命令都可以\nsystemctl status firewalld\n\nfirewall-cmd --state\n",[62,375,373],{"__ignoreMap":60},[16,377,378],{},[151,379,380],{},"查看开启了哪些服务",[54,382,385],{"className":383,"code":384,"language":136,"meta":60},[134],"firewall-cmd --list-services\n",[62,386,384],{"__ignoreMap":60},[16,388,389],{},[151,390,391],{},"查看所有打开的端口",[54,393,396],{"className":394,"code":395,"language":136,"meta":60},[134],"firewall-cmd --zone=public --list-ports\n",[62,397,395],{"__ignoreMap":60},[46,399,401],{"id":400},"六一键运行脚本","六、一键运行脚本",[16,403,404],{},[151,405,406],{},"包含更新阿里yum源，安装软件包，关闭防火墙",[54,408,411],{"className":409,"code":410,"language":136,"meta":60},[134],"yum install wget -y\nmv \u002Fetc\u002Fyum.repos.d\u002FCentOS-Base.repo \u002Fetc\u002Fyum.repos.d\u002FCentOS-Base.repo.backup\ncurl -o \u002Fetc\u002Fyum.repos.d\u002FCentOS-Base.repo http:\u002F\u002Fmirrors.aliyun.com\u002Frepo\u002FCentos-7.repo\nyum clean all\nyum makecache\nyum update -y\nyum -y install  epel-release\nyum -y install wget vim net-tools telnet lsof tree htop zip unzip iperf3\nsystemctl stop firewalld.service\nsystemctl disable firewalld.service\n",[62,412,410],{"__ignoreMap":60},[46,414,416],{"id":415},"七常用命令","七、常用命令",[124,418,420],{"id":419},"_1-修改主机名","1. 修改主机名",[54,422,425],{"className":423,"code":424,"language":136,"meta":60},[134],"# 查看主机名\nhostname\n# 修改主机名\nhostnamectl set-hostname 主机名\n",[62,426,424],{"__ignoreMap":60},[124,428,430],{"id":429},"_2-配置免密登录","2. 配置免密登录",[54,432,435],{"className":433,"code":434,"language":136,"meta":60},[134],"# 在A客户端上生成公钥和私钥\nssh-keygen -t rsa\n\n\n# ====================================================\n# 拷贝及配置方案\nssh-copy-id -i ~\u002F.ssh\u002Fid_rsa.pub 'root@要拷贝到的机器ip'\n",[62,436,434],{"__ignoreMap":60},[124,438,440],{"id":439},"_3-配置hosts","3. 配置hosts",[16,442,443],{},"服务器多的时候可以配置hosts，直接通过关键字访问，避免使用ip访问，以免更换ip时还要修改配置",[54,445,449],{"className":446,"code":447,"language":136,"meta":448},[134],"\nvim \u002Fetc\u002Fhosts\n\n# 添加配置格式\n#ip地址 别名\n192.168.0.100 vm100\n\n","title=\"\u002Fetc\u002Fhosts\"",[62,450,447],{"__ignoreMap":60},[54,452,456],{"className":453,"code":454,"language":136,"meta":455},[134],"# 使用heredoc写入\nsudo tee -a \u002Fetc\u002Fhosts \u003C\u003C EOF\n192.168.0.100 vm100\nEOF\n","title=\"或者使用heredoc写入\"",[62,457,454],{"__ignoreMap":60},[124,459,461],{"id":460},"_4-使用scp传输文件","4. 使用scp传输文件",[16,463,464],{},[151,465,466],{},"从服务器上下载文件",[16,468,469],{},"例如：把 192.168.0.101 上的 \u002Fdata\u002Ftest.txt 的文件下载到 \u002Fhome（本地目录）",[54,471,474],{"className":472,"code":473,"language":136,"meta":60},[134],"#scp 用户名@服务器地址:要下载的文件路径 保存文件的文件夹路径\nscp root@192.168.0.101:\u002Fdata\u002Ftest.txt \u002Fhome\n",[62,475,473],{"__ignoreMap":60},[16,477,478],{},[151,479,480],{},"上传本地文件到服务器",[16,482,483],{},"例如：把本机 \u002Fhome\u002Ftest.txt 文件上传到 192.168.0.101 这台服务器上的 \u002Fdata\u002F 目录中",[54,485,488],{"className":486,"code":487,"language":136,"meta":60},[134],"#scp 要上传的文件路径 用户名@服务器地址:服务器保存路径\nscp \u002Fhome\u002Ftest.txt root@192.168.0.101:\u002Fdata\u002F\n",[62,489,487],{"__ignoreMap":60},[16,491,492],{},[151,493,494],{},"从服务器下载整个目录",[16,496,497],{},"例如：把 192.168.0.101 上的 \u002Fdata 目录下载到 \u002Fhome（本地目录）",[54,499,502],{"className":500,"code":501,"language":136,"meta":60},[134],"#scp -r 用户名@服务器地址:要下载的服务器目录 保存下载的目录\nscp -r root@192.168.0.101:\u002Fdata  \u002Fhome\u002F\n",[62,503,501],{"__ignoreMap":60},[16,505,506],{},[151,507,508],{},"上传目录到服务器",[16,510,511],{},"例如：把 \u002Fhome 目录上传到服务器的 \u002Fdata\u002F 目录",[54,513,516],{"className":514,"code":515,"language":136,"meta":60},[134],"#scp -r 要上传的目录 用户名@服务器地址:服务器的保存目录\nscp -r \u002Fhome root@192.168.0.101:\u002Fdata\u002F\n",[62,517,515],{"__ignoreMap":60},[124,519,521],{"id":520},"_5-安装rpm包","5. 安装rpm包",[54,523,526],{"className":524,"code":525,"language":136,"meta":60},[134],"# 批量安装rpm\nrpm -ivh *.rpm\n\n# 查询并过滤已安装的软件包\n## -qa 参数表示查询所有（-q）已安装的软件包（-a）grep表示过滤\nrpm -qa | grep firefox\n\n# 卸载\nrpm -e firefox\n\n# 带参数安装\nrpm -ivh *.rpm --nodeps --force\n",[62,527,525],{"__ignoreMap":60},[124,529,531],{"id":530},"_6-赋权","6. 赋权",[54,533,536],{"className":534,"code":535,"language":136,"meta":60},[134],"# 赋予读写权限\nchmod -R 777 文件或目录\n# chmod -R 777 \u002Fusr\u002Flocal\u002Fmysql\u002F*\n\n# 赋予可执行权限\nchmod +x 文件\n",[62,537,535],{"__ignoreMap":60},[124,539,541],{"id":540},"_7-查看端口占用","7. 查看端口占用",[54,543,546],{"className":544,"code":545,"language":136,"meta":60},[134],"yum -y install lsof\n\nlsof -i tcp:80\n\n# 关掉占用的服务\nkill pid\nkill -9 pid\n",[62,547,545],{"__ignoreMap":60},{"title":60,"searchDepth":549,"depth":549,"links":550},4,[551,553,554,561,562,563,564],{"id":48,"depth":552,"text":49},2,{"id":101,"depth":552,"text":102},{"id":118,"depth":552,"text":119,"children":555},[556,558,559,560],{"id":126,"depth":557,"text":127},3,{"id":239,"depth":557,"text":240},{"id":253,"depth":557,"text":254},{"id":266,"depth":557,"text":267},{"id":279,"depth":552,"text":280},{"id":318,"depth":552,"text":319},{"id":400,"depth":552,"text":401},{"id":415,"depth":552,"text":416,"children":565},[566,567,568,569,570,571,572],{"id":419,"depth":557,"text":420},{"id":429,"depth":557,"text":430},{"id":439,"depth":557,"text":440},{"id":460,"depth":557,"text":461},{"id":520,"depth":557,"text":521},{"id":530,"depth":557,"text":531},{"id":540,"depth":557,"text":541},[574],"Linux","2026-01-31 23:11:03","详述 CentOS 从零安装、分区到网络与防火墙配置全流程。助你快速构建稳定、安全的生产级 Web 服务器环境。",false,"md","https:\u002F\u002Fimg.olinl.com\u002Ffile\u002Fpost-img\u002Fcentos-setup\u002FyOVJbaKg.webp",{"slots":581},{},true,"\u002Fposts\u002Fcentos-setup",null,{"text":586,"minutes":587,"time":588,"words":589},"9 min read",8.885,533100,1777,{"title":5,"description":576},{"loc":583},"posts\u002Fposts\u002Fcentos-setup",[594],"系统安装","tech","2026-07-26 09:40:27","7q0cwlohC7q3ZB9Tvt96y-WyNuXf5fysd5VXWMuzPB8",[599,604],{"title":600,"path":601,"stem":602,"date":603,"type":595,"children":-1},"Docker Compose 常用命令","\u002Fposts\u002Fdocker-compose-commands","posts\u002Fposts\u002Fdocker-compose-commands","2026-01-29",{"title":605,"path":606,"stem":607,"date":608,"type":595,"children":-1},"Docker 卸载指南","\u002Fposts\u002Fdocker-uninstall","posts\u002Fposts\u002Fdocker-uninstall","2026-02-01",1788712224729]