• CentOS 7

• https://www.centos.org/download

sudo yum clean 'all' && sudo yum update -y && sync

sudo yum install htop p7zip unar aria2 hdparm nano unzip

sudo nano '/etc/sudoers.d/nano'

Defaults editor = /usr/bin/nano

• Connect with ssh 'user@IP' -p 'x'

sudo -e '/etc/ssh/sshd_config'

Port x

sudo firewall-cmd --permanent --add-port='x/tcp' && sudo firewall-cmd --reload

sudo firewall-cmd --permanent --remove-service='ssh' && sudo systemctl reboot

sudo -e '/etc/sysctl.d/harden.conf'

kernel.dmesg_restrict = 1
kernel.kptr_restrict = 1

sudo -e '/etc/default/grub'

GRUB_TIMEOUT=3

sudo grub2-mkconfig -o '/boot/grub2/grub.cfg'

sudo -e '/etc/systemd/system/centos-up.service'

[Service]
Type=oneshot
ExecStart='/usr/bin/yum' clean 'all'
ExecStart='/usr/bin/yum' update -y
ExecStart='/usr/bin/sync'
ExecStart='/usr/bin/systemctl' reboot

sudo -e '/etc/systemd/system/centos-up.timer' && sudo systemctl daemon-reload && sudo systemctl enable 'centos-up.timer' --now && sudo systemctl start 'centos-up' && sudo systemctl status 'centos-up' -l

[Unit]
Description=Software Package Maintenance and Updater
Wants=network-online.target

[Timer]
OnCalendar=*-*-* 06:00:00
Persistent=true

[Install]
WantedBy=timers.target

sudo -e '/etc/systemd/system/hosts-up.service'

[Service]
Type=oneshot
ExecStart='/usr/bin/wget' 'https://github.com/StevenBlack/hosts/archive/master.zip' -O '/tmp/master.zip'
ExecStart='/usr/bin/unzip' '/tmp/master.zip' -d '/tmp'
ExecStart='/usr/bin/python' '/tmp/hosts-master/updateHostsFile.py' --auto --replace
ExecStart='/usr/bin/rm' -R '/tmp/master.zip' '/tmp/hosts-master'
ExecStart='/usr/bin/sync'

sudo -e '/etc/systemd/system/hosts-up.timer' && sudo systemctl daemon-reload && sudo systemctl enable 'hosts-up.timer' --now && sudo systemctl start 'hosts-up' && sudo systemctl status 'hosts-up' -l

[Unit]
Description=Hosts File Protection Updater
Wants=network-online.target

[Timer]
OnCalendar=weekly
Persistent=true

[Install]
WantedBy=timers.target

grep 'MHz' '/proc/cpuinfo'

watch -n 0.1 grep \'cpu MHz\' '/proc/cpuinfo'

df -hT

gcc -v -E -x c -march=native -mtune=native - < /dev/null 2>&1 | grep cc1 | perl -pe 's/ -mno-\S+//g; s/^.* - //g;'

exiftool -all= *.* -overwrite_original

sudo firewall-cmd --list-all

sudo firewall-cmd --get-service

sudo firewall-cmd --reload

• Add --permanent as-needed to allow the rule to persist

sudo firewall-cmd --add-service=x

sudo firewall-cmd --remove-service=x

• Add --permanent as-needed to allow the rule to persist
• Change tcp to udp as-needed

sudo firewall-cmd --add-port=x/tcp

sudo firewall-cmd --remove-port=x/tcp