1. System Administration HW1 huanghs

2. Computer Center, CS, NCTU 2 Requirements  Basic Install FreeBSD and upgrade to up-to-date –RELEASE Recompile your kernel with pf (Packet Filter) support and enable it (not by kernel module) Change kernel IDENT Set your machine to current time zone and adjust current time  Optional Enable sshd Customized kernel

3. Computer Center, CS, NCTU 3 Update FreeBSD (1/3)  Update source tree Backup original supfile or copy to other directory  Prepare /usr/local/etc/src-supfile && /usr/local/etc/ports-supfile /etc/make.conf  SUP_UPDATE= yes  SUP= /usr/bin/csup  SUPFLAGS= -L 2  SUPHOST= freebsd.cs.nctu.edu.tw  SUPFILE= /usr/local/etc/src-supfile  PORTSSUPFILE= /usr/local/etc/ports-supfile  KERNCONF= SABSD  CPUTYPE?= core2 Run “make update” in /usr/src

4. Computer Center, CS, NCTU 4 Update FreeBSD (2/3)  Edit kernel config (with pf support) Copy /usr/src/sys/arch/conf/GENERIC to name-you-want  arch maybe is i386, ia64, amd64…..depend on your cpu Change IDENT Add the following  device pf //Enable support for the “Packet Filter” firewall  device pflog //Can be used to store the logging information to disk  device pfsync //Monitor “state changes”  options ALTQ //Enable the ALTQ framework(not supported by all of the available network card drivers)  options ALTQ_CBQ //enables Class Based Queuing (CBQ) References  http://www.freebsd.org/doc/en/books/handbook/firewalls-pf.html  http://www.freebsd.org/doc/zh_TW/books/handbook/firewalls-pf.html  http://forum.icst.org.tw/phpbb/viewtopic.php?t=10404

5. Computer Center, CS, NCTU 5 Update FreeBSD (3/3)  Build new world & kernel http://www.freebsd.org/doc/en/books/handbook/makeworld.html http://www.freebsd.org/doc/zh_TW/books/handbook/makeworld.html

6. Computer Center, CS, NCTU 6 Timezone  tzsetup  sysinstall  Find right timezone file in /usr/share/zoneinfo and copy to /etc/localtime

7. Computer Center, CS, NCTU 7 Hint: Kernel Config  Customized kernel Remove unneeded kernel config  IPv6 support, scsi device, firewire …etc. What I need ?  /var/run/dmesg.boot  Don’t remove em in config file

8. Computer Center, CS, NCTU 8 FAQ (1/4)  make: don't know how to make buildworld. Stop in /usr/src Makefile Fetch source first (at least Makefile & Makefile.incl in /usr/src)  Copy Makefile & Makefile.incl from other host and make update  Use sysinstall -> Configure -> Distributions -> src -> all or base and choose installation media … update: # # do something when make update # kernel: buildkernel installkernel …

9. Computer Center, CS, NCTU 9 FAQ (2/4)  /usr is empty or Read-only file system in single user mode Only root filesystem will be mounted and is readonly Mount other fs manually by mount –a  Mount failed “Filesystem is not clean - run fsck” fsck –y //Filesystem check, -y is auto repair

10. Computer Center, CS, NCTU 10 FAQ (3/4)  Error when make buildkernel Some device/option is necessary or require by others Read comment before remove it # PCI Ethernet NICs that use the common MII bus controller code. # NOTE: Be sure to keep the 'device miibus' line in order to use these NICs! device miibus # MII bus support device ae # Attansic/Atheros L2 FastEthernet device age # Attansic/Atheros L1 Gigabit Ethernet device alc # Atheros AR8131/AR8132 Ethernet ….

11. Computer Center, CS, NCTU 11 FAQ (4/4)  Adjust current time ntpdate(8) //non-continuous or ntpd(8) //continuous  http://www.freebsd.org/doc/en/books/handbook/network-ntp.html Server  time.stdtime.gov.tw  tick.stdtime.gov.tw  tock.stdtime.gov.tw  watch.stdtime.gov.tw

12. Computer Center, CS, NCTU 12 Help!  Newsgroup cs.course.sysadm  BS2 board CS-SysAdmin  CSCC