---
title: Standard Install for a New CentOS 7 Server
description: Standard Install for a New CentOS 7 Server
---

[![Exxa Managed IT Services Brisbane](https://blog.exxa.tech/hubfs/Exxa_June2019%20/Images/logo_Png_small_1.png)](https://exxa.tech)

- [Home](https://exxa.tech/)
- [Services](https://exxa.tech/services/it-services-inforgraphic) 
    - [All Services](https://exxa.tech/services/services)
    - [Managed IT Services](https://exxa.tech/services/it-managed-services)
    - [Compute and Email to Cloud Migrations](https://exxa.tech/services/compute-and-email-to-cloud-migrations)
    - [Automated Backups](https://exxa.tech/services/automated-backups)
    - [IT Security Services](https://exxa.tech/services/it-security-services)
    - [VOIP Hosted Phone Service](https://exxa.tech/services/pbx-voip-hosted-phone-service)
    - [Microsoft 365 Business & Office 365 Discounts](https://exxa.tech/services/office365-discounts)
    - [Surface Pro 6 for Business Tax Time offer!](https://exxa.tech/services/surface-pro-6-for-business-tax-time)
- [Insights](https://exxa.tech/insights/managed-it-services-insights) 
    - [News](https://exxa.tech/news)
    - [Articles](https://exxa.tech/table/articles/)
    - [LinkedIn](https://www.linkedin.com/company/exxa-tech)
- [Partners](https://exxa.tech/partners/partners)
- [STORE](https://store.exxa.tech/find/computer-systems)
- [FREE AUDIT](https://info.exxa.tech/audit)
- [CONTACT](https://exxa.tech/about/contact-us)

![Managed IT Services Brisbane Articles](https://blog.exxa.tech/hubfs/Exxa_June2019%20/Images/server_racks_blue.png "Managed IT Services Brisbane Articles")

# Exxa Articles

# Standard Install for a New CentOS 7 Server

# STANDARD INSTALL FOR A NEW CENTOS 7 SERVER

 

## A Checklist of Useful Commands to Setup CentOS Server

1. whilst installing CentOS 6 make sure to configure the NICs BEFORE the end of the setup process

2. Install with minimal setup.

2.1** yum upgrade -y**

3.** yum install screen telnet wget openssh-clients perl mlocate ntpdate make gcc net-tools open-vm-tools yum-plugin-security -y**

3.1 add to crontab -

**@daily /usr/bin/yum --security update -y**

NB - open-vm-tools on Centos 7 installs VM Tools without having to do it from the ESXi console in seconds.

4. Install Centrify 

Download it here:

www.**centrify**.com/**express**/linux-unix/**download**/

**cd centrify**

**./install-express.sh**

**(Follow the defaults)**

5. Install OSSEC agent

 

**[https://ossec.github.io/downloads.html](https://ossec.github.io/downloads.html)**

6. Disable Selinux and Flush firewall: 

**iptables -F**

**vi /etc/selinux/config**

change** enforcing **to** disabled**

8. Increase Ulimit: 

**ulimit -n 65535**

and for after reboot:

**vi /etc/security/limits.conf **

Add the following two lines with the number you require replacing 65535: (Put this as the last two lines before #End of File)

\* soft nofile 65535

\* hard nofile 65535

9. Run this command to ensure messages for root go to sysadmin: 

**echo "root:           youremail@address.com" >> /etc/aliases**

10.** I**nstall the Sun jdk - get it from here:

http://www.oracle.com/technetwork/java/javase/downloads/jdk8-downloads-2133151.html

**chmod 755 jdk-8u60-linux-x64.rpm**

**yum install -y jdk-8u60-linux-x64.rpm**

11. Uncomment the following line in /etc/sudoers changing the Group name to Developers:

**%developers ALL=(ALL) NOPASSWD: ALL**

12. Add the following line to the bottom of /etc/centrifydc/ssh/sshd\_config, again substituting hibis for Developers if it is to be a Developer server, leaving nagios to ensure passwordless ssh logon if required.

**echo "AllowGroups developers" >> /etc/centrifydc/ssh/sshd\_config**

13. If the server is a Dell physical server, install Openmanage:

 

Download the repo data:

**wget -q -O - [http://linux.dell.com/repo/hardware/latest/bootstrap.cgi](http://linux.dell.com/repo/hardware/latest/bootstrap.cgi) | bash**

Install the Packages:

**yum install srvadmin-all -y**

Start the Services:

**/opt/dell/srvadmin/sbin/srvadmin-services.sh start**

Access the server at [https://hostname:1311](http://https//hostname:1311)

Login with Root access details.

 

14. Make server reboot after 10 seconds if kernel panic.

**echo "kernel.panic = 10" >> /etc/sysctl.conf**

 

**15. Get rid of firewalld**

yum install -y iptables-services

Gimme my iptables back:

**systemctl mask firewalld**

**systemctl enable iptables**

 

(and if you need ip6tables, add an extra enable line for it)

Stop firewalld, start iptables

**systemctl stop firewalld**

**systemctl start iptables**

(and start ip6tables if you need it)

Do your iptables modification just like before and save with

**iptables-save>/etc/sysconfig/iptables**

### Articles

### NEVER MISS A NEWS UPDATE

- [Legal](https://exxa.tech/about/legal)
- [Privacy Policy](https://exxa.tech/about/privacy-policy)
- [Terms & Conditions](https://exxa.tech/about/terms-and-conditions)
- [Sitemap](https://exxa.tech/sitemap)

[LinkedIn](https://www.linkedin.com/company/exxa-tech)    |    [Twitter](https://twitter.com/exxatech)     |    [Facebook](https://www.facebook.com/Exxa.tech)                                            Copyright Exxa