Aliyun差异

Debian 8.9

软件包

1. 多了irqbalance（卸载掉）
2. 无usbutils
3. 有fireware-linux-free（卸载掉）
4. 使用busybox-static而非busybox
5. apt-get install popularity-contest
6. curl vim sudo
7. ethtool systemtap sysstat dstat
8. strace
9. nscd resolvconf ntp
10. fio iperf
11. lsb-core（Debian9不支持）

配置

/etc/sysctl.conf

# 差异：结尾增加
vm.swappiness = 0
net.ipv4.neigh.default.gc_stale_time=120


# see details in https://help.aliyun.com/knowledge_detail/39428.html
net.ipv4.conf.all.rp_filter=0
net.ipv4.conf.default.rp_filter=0
net.ipv4.conf.default.arp_announce = 2
net.ipv4.conf.lo.arp_announce=2
net.ipv4.conf.all.arp_announce=2


# see details in https://help.aliyun.com/knowledge_detail/41334.html
net.ipv4.tcp_max_tw_buckets = 5000
net.ipv4.tcp_syncookies = 1
net.ipv4.tcp_max_syn_backlog = 1024
net.ipv4.tcp_synack_retries = 2
net.ipv6.conf.all.disable_ipv6 = 1
net.ipv6.conf.default.disable_ipv6 = 1
net.ipv6.conf.lo.disable_ipv6 = 1

注意：
net.ipv4.conf.default.rp_filter
net.ipv4.conf.all.rp_filter
默认值就是如此
net.ipv4.tcp_syncookies不确定

/etc/security/limits.conf

# 差异：结尾增加
root soft nofile 65535
root hard nofile 65535
* soft nofile 65535
* hard nofile 65535

/etc/initramfs-tools/modules

# 差异：结尾增加
xen-blkfront
virtio_blk

/etc/ssh/sshd_config

SyslogFacility AUTHPRIV
UseDNS no(考虑使用)

Other

/etc/init.d/.depend.start
增加
aegis: rsyslog
TARGETS增加agentwatch aegis
rc.local,rmnologin也增加

文件

rm /etc/backup/1/hosts
rmdir /etc/backup
rm /etc/ntp.conf.backup
rmdir /etc/apt/sources.backupxxxx
rm /etc/apt/sources.list.d/xxx

其它

pip使用了Aliyun仓库
pip-list

argparse (1.2.1)
cffi (0.8.6)
chardet (2.3.0)
Cheetah (2.4.4)
cloud-init (0.7.6)
colorama (0.3.2)
configobj (5.0.6)
cryptography (0.6.1)
defusedxml (0.4.1)
docutils (0.12)
html5lib (0.999)
Jinja2 (2.9.6)
jsonpatch (1.16)
jsonpointer (1.10)
Markdown (2.6.9)
MarkupSafe (1.0)
ndg-httpsclient (0.3.2)
oauth (1.0.1)
Pillow (2.6.1)
pip (1.5.6)
ply (3.4)
prettytable (0.7.2)
pyasn1 (0.1.7)
pycparser (2.10)
Pygments (2.0.1)
pyOpenSSL (0.14)
python-apt (0.9.3.12)
python-debian (0.1.27)
python-debianbts (1.11)
PyYAML (3.12)
reportbug (6.6.3)
requests (2.4.3)
roman (2.0.0)
setuptools (5.5.1)
six (1.8.0)
SOAPpy (0.12.22)
urllib3 (1.9.1)
wheel (0.24.0)
wsgiref (0.1.2)
wstools (0.4.3)

pip-list差异

Cheetah (2.4.4)
cloud-init (0.7.6)
configobj (5.0.6)
Jinja2 (2.9.6)
jsonpatch (1.16)
jsonpointer (1.10)
Markdown (2.6.9)
MarkupSafe (1.0)
oauth (1.0.1)
prettytable (0.7.2)
PyYAML (3.12)

注意：使用pip安装的是egg版，但是Aliyun装的是wheel版？