操作系统版本
CentOS7.2
内核版本
3.10.0-693.17.1.el7
小版本号
180501
更新软件
软件名 更新前版本号 更新后版本号augeas-libs.x86_64 1.4.0-2.el7 1.4.0-2.el7_4.2authconfig.x86_64 6.2.8-10.el7 6.2.8-30.el7bash.x86_64 4.2.46-19.el7 4.2.46-29.el7_4bind-libs-lite.x86_64 32:9.9.4-29.el7 32:9.9.4-51.el7_4.2bind-libs.x86_64 32:9.9.4-29.el7 32:9.9.4-51.el7_4.2bind-license.noarch 32:9.9.4-29.el7 32:9.9.4-51.el7_4.2bind-utils.x86_64 32:9.9.4-29.el7 32:9.9.4-51.el7_4.2curl.x86_64 7.29.0-25.el7.centos 7.29.0-42.el7_4.1dhclient.x86_64 12:4.2.5-42.el7.centos 12:4.2.5-58.el7.centos.1dhcp-common.x86_64 12:4.2.5-42.el7.centos 12:4.2.5-58.el7.centos.1dhcp-libs.x86_64 12:4.2.5-42.el7.centos 12:4.2.5-58.el7.centos.1dnsmasq.x86_64 2.66-14.el7_1 2.76-2.el7_4.2dracut-config-rescue.x86_64 033-359.el7 033-502.el7_4.1dracut-network.x86_64 033-359.el7 033-502.el7_4.1dracut.x86_64 033-359.el7 033-502.el7_4.1efibootmgr.x86_64 0.8.0-7.el7 15-2.el7efivar-libs.x86_64 0.11-1.el7 31-4.el7emacs-filesystem.noarch 1:24.3-18.el7 1:24.3-20.el7_4expat.x86_64 2.1.0-8.el7 2.1.0-10.el7_3firewalld.noarch 0.3.9-14.el7 0.4.4.4-6.el7glib2.i686 2.42.2-5.el7 2.50.3-3.el7glib2.x86_64 2.42.2-5.el7 2.50.3-3.el7glibc-common.x86_64 2.17-105.el7 2.17-196.el7_4.2glibc-devel.x86_64 2.17-105.el7 2.17-196.el7_4.2glibc-headers.x86_64 2.17-105.el7 2.17-196.el7_4.2glibc.i686 2.17-105.el7 2.17-196.el7_4.2glibc-static.i686 2.17-105.el7 2.17-196.el7_4.2glibc.x86_64 2.17-105.el7 2.17-196.el7_4.2gnutls.x86_64 3.3.8-12.el7_1.1 3.3.26-9.el7grub2-tools.x86_64 1:2.02-0.29.el7.centos 1:2.02-0.65.el7.centos.2grub2.x86_64 1:2.02-0.29.el7.centos 1:2.02-0.65.el7.centos.2iwl1000-firmware.noarch 1:39.31.5.1-43.el7 1:39.31.5.1-58.el7_4iwl100-firmware.noarch 39.31.5.1-43.el7 39.31.5.1-58.el7_4iwl105-firmware.noarch 18.168.6.1-43.el7 18.168.6.1-58.el7_4iwl135-firmware.noarch 18.168.6.1-43.el7 18.168.6.1-58.el7_4iwl2000-firmware.noarch 18.168.6.1-43.el7 18.168.6.1-58.el7_4iwl2030-firmware.noarch 18.168.6.1-43.el7 18.168.6.1-58.el7_4iwl3160-firmware.noarch 22.0.7.0-43.el7 22.0.7.0-58.el7_4iwl3945-firmware.noarch 15.32.2.9-43.el7 15.32.2.9-58.el7_4iwl4965-firmware.noarch 228.61.2.24-43.el7 228.61.2.24-58.el7_4iwl5000-firmware.noarch 8.83.5.1_1-43.el7 8.83.5.1_1-58.el7_4iwl5150-firmware.noarch 8.24.2.2-43.el7 8.24.2.2-58.el7_4iwl6000-firmware.noarch 9.221.4.1-43.el7 9.221.4.1-58.el7_4iwl6000g2a-firmware.noarch 17.168.5.3-43.el7 17.168.5.3-58.el7_4iwl6000g2b-firmware.noarch 17.168.5.2-43.el7 17.168.5.2-58.el7_4iwl6050-firmware.noarch 41.28.5.1-43.el7 41.28.5.1-58.el7_4iwl7260-firmware.noarch 22.0.7.0-43.el7 22.0.7.0-58.el7_4iwl7265-firmware.noarch 22.0.7.0-43.el7 22.0.7.0-58.el7_4jasper-libs.x86_64 1.900.1-29.el7 1.900.1-31.el7kernel-headers.x86_64 3.10.0-327.el7 3.10.0-693.17.1.el7kernel-tools-libs.x86_64 3.10.0-327.el7 3.10.0-693.17.1.el7kernel-tools.x86_64 3.10.0-327.el7 3.10.0-693.17.1.el7kernel.x86_64 3.10.0-327.el7 3.10.0-693.17.1.el7kexec-tools.x86_64 2.0.7-38.el7 2.0.14-17.2.el7kmod.x86_64 20-5.el7 20-15.el7_4.7krb5-libs.x86_64 1.13.2-10.el7 1.15.1-8.el7libblkid.x86_64 2.23.2-26.el7 2.23.2-43.el7_4.2libcurl.x86_64 7.29.0-25.el7.centos 7.29.0-42.el7_4.1libdrm.x86_64 2.4.60-3.el7 2.4.74-1.el7libffi.i686 3.0.13-16.el7 3.0.13-18.el7libffi.x86_64 3.0.13-16.el7 3.0.13-18.el7libgcc.i686 4.8.5-4.el7 4.8.5-16.el7_4.1libgcc.x86_64 4.8.5-4.el7 4.8.5-16.el7_4.1libgcrypt.x86_64 1.5.3-12.el7_1.1 1.5.3-14.el7libgudev1.x86_64 219-19.el7 219-42.el7_4.7libmount.x86_64 2.23.2-26.el7 2.23.2-43.el7_4.2libndp.x86_64 1.2-4.el7 1.2-7.el7libnl3-cli.x86_64 3.2.21-10.el7 3.2.28-4.el7libnl3.x86_64 3.2.21-10.el7 3.2.28-4.el7libpng.x86_64 2:1.5.13-5.el7 2:1.5.13-7.el7_2libselinux.i686 2.2.2-6.el7 2.5-11.el7libselinux-python.x86_64 2.2.2-6.el7 2.5-11.el7libselinux-utils.x86_64 2.2.2-6.el7 2.5-11.el7libselinux.x86_64 2.2.2-6.el7 2.5-11.el7libsemanage.x86_64 2.1.10-18.el7 2.5-8.el7libsepol.x86_64 2.1.9-3.el7 2.5-6.el7libsoup.x86_64 2.48.1-3.el7 2.56.0-4.el7_4libssh2.x86_64 1.4.3-10.el7 1.4.3-10.el7_2.1libsss_idmap.x86_64 1.13.0-40.el7 1.15.2-50.el7_4.8libsss_nss_idmap.x86_64 1.13.0-40.el7 1.15.2-50.el7_4.8libstdc++.i686 4.8.5-4.el7 4.8.5-16.el7_4.1libstdc++.x86_64 4.8.5-4.el7 4.8.5-16.el7_4.1libtasn1.x86_64 3.8-2.el7 4.10-1.el7libtiff.x86_64 4.0.3-14.el7 4.0.3-27.el7_3libuuid.x86_64 2.23.2-26.el7 2.23.2-43.el7_4.2libX11-common.noarch 1.6.3-2.el7 1.6.5-1.el7libX11.x86_64 1.6.3-2.el7 1.6.5-1.el7libxcb.x86_64 1.11-4.el7 1.12-1.el7libxml2-python.x86_64 2.9.1-5.el7_1.2 2.9.1-6.el7_2.3libxml2.x86_64 2.9.1-5.el7_1.2 2.9.1-6.el7_2.3linux-firmware.noarch 20150904-43.git6ebf5d5.el7 20170606-58.gitc990aae.el7_4mariadb-libs.x86_64 1:5.5.44-2.el7.centos 1:5.5.56-2.el7microcode_ctl.x86_64 2:2.1-12.el7 2:2.1-22.5.el7_4nettle.x86_64 2.7.1-4.el7 2.7.1-8.el7NetworkManager-libnm.x86_64 1:1.0.6-27.el7 1:1.8.0-11.el7_4NetworkManager-team.x86_64 1:1.0.6-27.el7 1:1.8.0-11.el7_4NetworkManager-tui.x86_64 1:1.0.6-27.el7 1:1.8.0-11.el7_4NetworkManager.x86_64 1:1.0.6-27.el7 1:1.8.0-11.el7_4nspr.x86_64 4.10.8-2.el7_1 4.13.1-1.0.el7_3nss-softokn-freebl.i686 3.16.2.3-13.el7_1 3.28.3-8.el7_4nss-softokn-freebl.x86_64 3.16.2.3-13.el7_1 3.28.3-8.el7_4nss-softokn.x86_64 3.16.2.3-13.el7_1 3.28.3-8.el7_4nss-sysinit.x86_64 3.19.1-18.el7 3.28.4-15.el7_4nss-tools.x86_64 3.19.1-18.el7 3.28.4-15.el7_4nss-util.x86_64 3.19.1-4.el7_1 3.28.4-3.el7nss.x86_64 3.19.1-18.el7 3.28.4-15.el7_4ntpdate.x86_64 4.2.6p5-22.el7.centos 4.2.6p5-25.el7.centos.2ntp.x86_64 4.2.6p5-22.el7.centos 4.2.6p5-25.el7.centos.2openldap.x86_64 2.4.40-8.el7 2.4.44-5.el7openssh-clients.x86_64 6.6.1p1-22.el7 7.4p1-13.el7_4openssh-server.x86_64 6.6.1p1-22.el7 7.4p1-13.el7_4openssh.x86_64 6.6.1p1-22.el7 7.4p1-13.el7_4openssl-libs.x86_64 1:1.0.1e-42.el7.9 1:1.0.2k-8.el7openssl.x86_64 1:1.0.1e-42.el7.9 1:1.0.2k-8.el7p11-kit-trust.x86_64 0.20.7-3.el7 0.23.5-3.el7p11-kit.x86_64 0.20.7-3.el7 0.23.5-3.el7pciutils-libs.x86_64 3.2.1-4.el7 3.5.1-2.el7pciutils.x86_64 3.2.1-4.el7 3.5.1-2.el7pcre.i686 8.32-15.el7 8.32-17.el7pcre.x86_64 8.32-15.el7 8.32-17.el7policycoreutils.x86_64 2.2.5-20.el7 2.5-17.1.el7polkit.x86_64 0.112-5.el7 0.112-12.el7_3python-libs.x86_64 2.7.5-34.el7 2.7.5-58.el7python-perf.x86_64 3.10.0-327.el7 3.10.0-693.17.1.el7python.x86_64 2.7.5-34.el7 2.7.5-58.el7selinux-policy.noarch 3.13.1-60.el7 3.13.1-166.el7_4.7selinux-policy-targeted.noarch 3.13.1-60.el7 3.13.1-166.el7_4.7sos.noarch 3.2-35.el7.centos 3.4-13.el7.centossssd-client.x86_64 1.13.0-40.el7 1.15.2-50.el7_4.8sudo.x86_64 1.8.6p7-16.el7 1.8.19p2-11.el7_4systemd-libs.x86_64 219-19.el7 219-42.el7_4.7systemd-python.x86_64 219-19.el7 219-42.el7_4.7systemd-sysv.x86_64 219-19.el7 219-42.el7_4.7systemd.x86_64 219-19.el7 219-42.el7_4.7tcpdump.x86_64 14:4.5.1-3.el7 14:4.9.0-5.el7util-linux.x86_64 2.23.2-26.el7 2.23.2-43.el7_4.2vim-common.x86_64 2:7.4.160-1.el7 2:7.4.160-2.el7vim-enhanced.x86_64 2:7.4.160-1.el7 2:7.4.160-2.el7vim-filesystem.x86_64 2:7.4.160-1.el7 2:7.4.160-2.el7vim-minimal.x86_64 2:7.4.160-1.el7 2:7.4.160-2.el7wget.x86_64 1.14-10.el7_0.1 1.14-15.el7_4.1wpa_supplicant.x86_64 1:2.0-17.el7_1 1:2.6-5.el7_4.1xfsprogs.x86_64 3.2.2-2.el7 4.5.0-12.el7zlib.i686 1.2.7-15.el7 1.2.7-17.el7zlib.x86_64 1.2.7-15.el7 1.2.7-17.el7
新增软件
软件名 版本号firewalld-filesystem.noarch 0.4.4.4-6.el7fontconfig.x86_64 2.10.95-11.el7fontpackages-filesystem.noarch 1.44-8.el7gd.x86_64 2.0.35-26.el7GeoIP.x86_64 1.5.0-11.el7glibc-static.x86_64 2.17-196.el7_4.2glibc-utils.x86_64 2.17-196.el7_4.2grub2-common.noarch 1:2.02-0.65.el7.centos.2grub2-efi-x64-modules.noarch 1:2.02-0.65.el7.centos.2grub2-efi-x64.x86_64 1:2.02-0.65.el7.centos.2grub2-pc-modules.noarch 1:2.02-0.65.el7.centos.2grub2-pc.x86_64 1:2.02-0.65.el7.centos.2grub2-tools-extra.x86_64 1:2.02-0.65.el7.centos.2grub2-tools-minimal.x86_64 1:2.02-0.65.el7.centos.2ipset-libs.x86_64 6.29-1.el7ipset.x86_64 6.29-1.el7libblkid.i686 2.23.2-43.el7_4.2libmount.i686 2.23.2-43.el7_4.2libsepol.i686 2.5-6.el7libuuid.i686 2.23.2-43.el7_4.2libXpm.x86_64 3.5.12-1.el7NetworkManager-ppp.x86_64 1:1.8.0-11.el7_4nscd.x86_64 2.17-196.el7_4.2nss-pem.x86_64 1.0.3-4.el7python-firewall.noarch 0.4.4.4-6.el7stix-fonts.noarch 1.1.0-5.el7
删除软件
软件名 版本号grub2-efi-modules.x86_64 1:2.02-0.29.el7.centosgrub2-efi.x86_64 1:2.02-0.29.el7.centosxz-libs.i686 5.1.2-12alpha.el7
配置修改
1、调长 rcu_cpu_stall_timeout,由60改为300。2、去掉 ssh 的弱 MAC 和弱 Ciphers,保留:ciphers aes128-ctr,aes192-ctr,aes256-ctrMacs hmac-sha1,umac-64@openssh.com,hmac-ripemd160,hmac-sha2-256,hmac-sha2-5123、不自动加载 nouveau 驱动。在使用 GPU 时,防止对 CUDA 驱动造成干扰。4、添加 irqaffinity。优化中断处理。