Post-install configuration for Centos 7.1 x86_64 minimal installation

Submitted by peter on Tue, 11/11/2014 - 15:55

The instructions below relate to the installation of CentOS 7.1 x86 from a Minimal ISO.

  1. Perform minimal installation of Centos 7.1 x86_64 from Minimal ISO,
  2. Remove installation media and reboot,
  3. Wait for background system processes to complete, i.e., for the system to become idle,
  4. Set "ONBOOT" to "yes" in /etc/sysconfig/network-scripts/ifcfg-eth0 (or whatever the interface is named),
  5. Edit /etc/default/grub to remove "rhgb" and "quiet", add "selinux=0" and "ipv6.disable=1" (and maybe "consoleblank=0"), then run grub2-mkconfig -o /boot/grub2/grub.cfg,
  6. Reboot,
  7. Remove packages: rpm -e firewalld tuned chrony iprutils avahi avahi-libs avahi-autoipd selinux-policy selinux-policy-targeted audit NetworkManager NetworkManager-tui NetworkManager-glib NetworkManager-libnm trousers wpa_supplicant kexec-tools gnutls glib-networking libsoup polkit polkit-pkla-compat irqbalance AND THEN rm -fr /etc/tuned /etc/chrony*
  8. Install net-tools to get ifconfig, netstat, etc.
  9. yum -y install bind-utils ntp deltarpm
  10. Disable IPv6 in /etc/ntp.conf and configure local NTP servers, then use systemctl to enable ntpd and ntpdate services
  11. May need to massage /etc/sysconfig/network-scripts/ifcfg-eth0
  12. yum -y update
  13. Disable IPv6 and set relay_host to smtp.cse.unsw.edu.au in /etc/postfix/main.cf and restart postfix.service. Fix root alias in /etc/aliases and run newaliases. See also Configuring outgoing email for sendmail and postfix,
  14. Reboot,
  15. Install cron job to poll for updates: 45 2 * * * yum check-update; yum list > yum.list.txt,
  16. Install additional packages: rsync, man-pages, lsof, strace, tcpdump, telnet, wget, bzip2
  17. Create directory /root/.ssh, copy in authorized_keys, and edit /etc/ssh/sshd_config and set to "no" both PasswordAuthentication and GSSAPIAuthentication. Restart sshd and check configuration using ssh -v ...,
  18. rm /root/anaconda-ks.cfg
  19. cd /var/log; rm -fr anaconda audit firewalld tuned

To configure networking for more than DHCP:

  • /etc/resolve.conf
  • /etc/sysconfig/network
  • /etc/sysconfig/network-scripts/ifcfg-eth0

Tags: