FreeBSD/インストール9.1-RC3

FreeBSD/インストール9.1-RC3

mount_nfs 192.168.0.146:/data /mnt

ssh †

cd $HOME
mkdir .ssh
cd .ssh
cp /mnt/src/authorized_keys ./
cp /mnt/src/id_dsa ./
cd ../
chown -R $LOGNAME .ssh
chmod 700 .ssh
chmod 600 .ssh/*

• key と id の作成方法は ssh-keygen に。

• rootでssh出来るようにするにはipfで外部からを塞いで

  cd  /etc/ssh
  cp  sshd_config  sshd_config.orig
  sed s/'#PermitRootLogin no'/'PermitRootLogin yes'/ < sshd_config.orig >  sshd_config
  diff sshd_config sshd_config.orig

hosts †

cp /etc/hosts /etc/hosts.orig
cat /mnt/src/hosts.txt >> /etc/hosts

• example ==> /etc/hosts <==

  ::1                     localhost localhost.zenno.net
  127.0.0.1               localhost localhost.zenno.net
  192.168.0.160           kenji.zenno.net kenji
  192.168.0.160           kenji.zenno.net.
  #--- host.txt ---
  192.168.0.135           www
  192.168.0.136           www2
  ...
  ..
  .

resolv.conf †

cp /etc/resolv.conf /etc/resolv.conf.orig
cp /mnt/src/resolv.conf /etc/resolv.conf

• example ==> /etc/resolv.conf <==

  domain  zenno.net
  nameserver      210.196.3.183
  nameserver      210.141.112.163

hosts.allow †

mv /etc/hosts.allow /etc/hosts.allow.orig
echo 'ALL : 127.0.0.1 : allow' >> /etc/hosts.allow
echo 'ALL : 192.168. : allow' >> /etc/hosts.allow
echo 'ALL : 125.53.25.128/255.255.255.192 : allow' >> /etc/hosts.allow
echo 'ALL : ALL : deny' >> /etc/hosts.allow

inetd †

cp /etc/rc.conf /etc/rc.conf.orig
echo 'inetd_enable="YES"' >> /etc/rc.conf
patch -p0 < /mnt/src/inetd.patch
patch -p0 < /mnt/src/rsh.patch
cp /mnt/src/rhosts.txt  /root/.rhosts

loader †

echo 'autoboot_delay="2"' >> /boot/loader.conf
hint.atkbd.0.flags="0x1"
geom_mirror_load="YES"
geom_stripe_load="YES"
kern.geom.label.gptid.enable=0

ntp †

echo 'ntpd_enable="YES"' >> /etc/rc.conf
echo 'ntpd_sync_on_start="YES"' >> /etc/rc.conf

# echo 'server ntp.jst.mfeed.ad.jp' > /etc/ntp.conf
ntpq -p

ifconfig †

keymap="jp.106.kbd"
ifconfig_re0="inet 192.168.0.170  netmask 255.255.255.0"
ifconfig_bge0="inet 125.53.25.170  netmask 255.255.255.192"
defaultrouter="125.53.25.130"
hostname="ayame.zenno.net"
sshd_enable="YES"
inetd_enable="YES"
ntpd_enable="YES"
ntpd_sync_on_start="YES"
static_routes="vpn"
  route_vpn="-net 192.168.2.0/24 192.168.0.140"

/etc/netstart

periodic †

echo 'daily_status_gmirror_enable="YES"' >> /etc/periodic.conf
echo 'daily_status_gstripe_enable="YES"' >> /etc/periodic.conf

shutdown -r now

FreeBSD