AWS CentOS Golden image (Centos 골든이미지 설정)

이번 포스팅은 AWS를 통해 OS별 골든이미지 설정법에 대해 다뤄보았습니다. 

AWS CentOS Golden Image 설정

필수 패키지 설치

bind-utils: dig, host, nslookup

sysstat: system resource monitoring

$ yum install wget vim sysstat bind-utils telnet lrzsz

SELINUX 설정

$ vi /etc/sysconfig/selinux

   SELINUX=disabled

NTP 설정

$ vi /etc/ntp.conf

driftfile /var/lib/ntp/drift

restrict default nomodify notrap nopeer noquery

restrict 127.0.0.1 

restrict ::1

server 10.40.0.3

includefile /etc/ntp/crypto/pw

keys /etc/ntp/keys

disable monitor

!wq

$ systemctl disable chronyd.service

$ systemctl enable ntpd.service

# 확인

$ systemctl list-unit-files

Root Password Lock

$ passwd -l root

$ cat /etc/shadow

Profile 설정

idle time out

shell logging

$ vi /etc/profile

TMOUNT=7200

HISTSIZE=500

HISTFILESIZE=0

SSH 설정

     Password 접근 제한

$ vi /etc/ssh/sshd_conf

  

   PasswordAuthentication no

Tortoise 설치     

subversion 설치

$ yum install subversion

SSH Key 삭제

 > /home/centos/.ssh/authorized_keys

  > /var/log/secure

  > /var/log/messages

  > /var/log/boot

  > ~/.bash_history

$ history -c