Skip to content

Instantly share code, notes, and snippets.

@jbfriedrich
Created November 20, 2019 13:58
Show Gist options
  • Save jbfriedrich/2308b0c6360c83c64c931d874debddbc to your computer and use it in GitHub Desktop.
Save jbfriedrich/2308b0c6360c83c64c931d874debddbc to your computer and use it in GitHub Desktop.
Script to "sanitize" as CentOS VM to turn it into a template.
#!/bin/bash
#stop logging services
/sbin/service rsyslog stop
/sbin/service auditd stop
#remove old kernels
/bin/package-cleanup --oldkernels --count=1
#clean yum cache
/usr/bin/yum clean all
#force logrotate to shrink logspace and remove old logs as well as truncate logs
/usr/sbin/logrotate -f /etc/logrotate.conf
/bin/rm -f /var/log/*-???????? /var/log/*.gz
/bin/rm -f /var/log/dmesg.old
/bin/rm -rf /var/log/anaconda
/bin/cat /dev/null > /var/log/audit/audit.log
/bin/cat /dev/null > /var/log/wtmp
/bin/cat /dev/null > /var/log/lastlog
/bin/cat /dev/null > /var/log/grubby
#remove udev hardware rules
/bin/rm -f /etc/udev/rules.d/70*
#remove uuid from ifcfg scripts
/bin/sed -i".bak" '/UUID/d' /etc/sysconfig/network-scripts/ifcfg-e*
#remove SSH host keys
/bin/rm -f /etc/ssh/*key*
#remove root users shell history
/bin/rm -f /root/.bash_history
unset HISTFILE
#remove root users SSH history
#/bin/rm -rf /root/.ssh/
#this cant be done in a script, call it manually
/usr/bin/echo "Run 'history -c' and 'sys-unconfig' after running this script"
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment