OpenSeaMap-dev:Server FreeBSD Base - Versionsgeschichte

Dom: Small hint about jail update.

2013-04-02T19:58:07Z

Small hint about jail update.

Markus: Markus verschob Seite Server FreeBSD Base nach OpenSeaMap-dev:Server FreeBSD Base, ohne dabei eine Weiterleitung anzulegen

2013-01-30T15:05:21Z

Markus verschob Seite Server FreeBSD Base nach OpenSeaMap-dev:Server FreeBSD Base, ohne dabei eine Weiterleitung anzulegen

Dom: Modify default ports.

2013-01-04T11:41:17Z

Modify default ports.

Dom: Correct ezjail name.

2012-12-29T00:15:33Z

Correct ezjail name.

Dom: /* Maintenance */

2012-12-28T19:24:09Z

‎Maintenance

Dom: /* Installation */

2012-12-24T14:33:05Z

‎Installation

Dom: Die Seite wurde neu angelegt: „== Installation == Set timezone to UTC. cp /usr/share/zoneinfo/UTC /etc/localtime Disable virtual terminals (ttyv1 .. ttyv8). vi /etc/ttys ttyv1 "/us…“

2012-12-24T13:22:24Z

Die Seite wurde neu angelegt: „== Installation == Set timezone to UTC. cp /usr/share/zoneinfo/UTC /etc/localtime Disable virtual terminals (ttyv1 .. ttyv8). vi /etc/ttys ttyv1 "/us…“

Neue Seite

== Installation ==

Set timezone to UTC.

cp /usr/share/zoneinfo/UTC /etc/localtime

Disable virtual terminals (ttyv1 .. ttyv8).
vi /etc/ttys
ttyv1 "/usr/libexec/getty Pc" cons25 off secure
...
ttyv8 "/usr/libexec/getty Pc" cons25 off secure

Reduce autoboot delay.
vi /boot/loader.conf
autoboot_delay="2"

Secure syslogd.
vi /etc/rc.conf
syslogd_flags="-ss"

/etc/rc.d/syslogd restart

Prevent building ports for X11.
vi /etc/make.conf
WITHOUT_X11=yes

Redirect mails for root.
vi /etc/aliases
root: <mail-address>

newaliases

Create an administrator account.

pw groupadd <username>
pw useradd <username> -g <username> -G wheel -m -s /bin/csh
install -d -g <username> -o <username> -m 700 /home/<username>/.ssh
install -g <username> -o <username> -m 400 /dev/null /home/<username>/.ssh/authorized_keys

Permit root login. Be sure to have a non root account which is allowed to login.
vi /etc/ssh/sshd_config
PermitRootLogin no
ChallengeResponseAuthentication no

/etc/rc.d/sshd restart

Configure freebsd update.

vi /etc/freebsd-update.conf
Components world kernel

Update base system.

freebsd-update fetch
freebsd-update install
(reboot)

Fetch and extract port files.

portsnap fetch
portsnap extract

All ports have to be managed with ''portmaster''.

cd /usr/ports/ports-mgmt/portmaster
make install clean
rehash

It is recommended to install ports in ''screen''.

portmaster -d -B sysutils/screen
rehash

Install these ports on every machine.

screen -S ports
portmaster -d -B editors/vim ports-mgmt/portaudit sysutils/ezjail net/openntpd
exit

Cronjob for freebsd update and portsnap.

vi /etc/crontab
0 7 * * * root /usr/sbin/freebsd-update cron
0 8 * * * root /usr/bin/portsnap cron

Configure packet filter.

'''TBD'''
vi /etc/pf.conf
nat on $ext_if proto {tcp udp icmp} from lo0 to any -> ($ext_if)
nat on $int_if proto {tcp udp icmp} from lo0 to any -> ($int_if)

pfctl -f /etc/pf.conf

Configure ntpd.

vi /usr/local/etc/ntpd.conf
listen on 127.0.0.1
server 0.nl.pool.ntp.org
server 1.nl.pool.ntp.org
server 2.nl.pool.ntp.org
server 3.nl.pool.ntp.org

vi /etc/rc.conf
openntpd_enable="YES"

service openntpd start

Install base jail.

ezjail-admin install

Enable ejzail.

vi /etc/rc.conf
ezjail_enable="YES"

Start ejzail.

service ejzail start

== Maintenance ==

Update base system (world).

screen -S update
freebsd-update fetch
freebsd-update install
exit

Release change. The install command has to be executed again after a reboot, to remove old files. Keep in mind to update all ports, jails and ports in jails, too.

screen -S update
freebsd-update -r 9.1-RELEASE upgrade
freebsd-update install
exit

(reboot)

screen -S update
freebsd-update install
exit

@@ Zeile 128: / Zeile 128: @@
   freebsd-update install
   exit
 Release change. The install command has to be executed again after a reboot, to remove old files. Keep in mind to update all ports, jails and ports in jails, too.

← Nächstältere Version	Version vom 30. Januar 2013, 15:05 Uhr
(kein Unterschied)

@@ Zeile 75: / Zeile 75: @@
   screen -S ports
-  portmaster -d -B editors/vim ports-mgmt/portaudit sysutils/ezjail net/openntpd
+  portmaster -d -B editors/vim ports-mgmt/portaudit sysutils/ezjail net/openntpd shells/zsh security/sudo
   exit

@@ Zeile 111: / Zeile 111: @@
   ezjail-admin install
-Enable ejzail.
+Enable ezjail.
   vi /etc/rc.conf
     ezjail_enable="YES"
-Start ejzail.
+Start ezjail.
-  service ejzail start
+  service ezjail start
 == Maintenance ==

← Nächstältere Version		Version vom 28. Dezember 2012, 19:24 Uhr
Zeile 141:		Zeile 141:
	freebsd-update install		freebsd-update install
	exit		exit
		+
		+	Add administrator account (host system).
		+
		+	pw groupadd <username>
		+	pw useradd <username> -g <username> -G wheel -m -s /bin/csh
		+	install -d -g <username> -o <username> -m 700 /home/<username>/.ssh
		+	install -g <username> -o <username> -m 400 /dev/null /home/<username>/.ssh/authorized_keys

@@ Zeile 82: / Zeile 82: @@
   vi /etc/crontab
 7 * * * root /usr/sbin/freebsd-update cron
-8 * * * root /usr/bin/portsnap cron
+8 * * * root /usr/sbin/portsnap cron
 Configure packet filter.