Floe

Install

Burn 5.4 ISO, boot from it.

Installer

• Standard
• Delete existing partition
• "a" for use entire disk
• Standard - no boot manager
• A - auto defaults for paritions
• "User" installation set
• "Yes" to ports
• CD / DVD install
• Yes to procede with installation

Initial configuration with sysinstall

• Can run later with:

/usr/sbin/sysinstall

• Yes to create ethernet device
• No to IPv6
• No to DHCP
• Configure as desired
• Yes to bring it up
• Yes to function as a gateway
• No to configure inetd
• Yes to enable SSH
• No to FTP
• No to NFS
• No to NFS Client
• No to customize console settings
• Yes to set time zone
• No
• 2 for America
• 45 - United States
• 16 - Pacific time
• Yes to PDT (or as applicable)
• Yes to linux binary compatability
• No to mouse
• No to browse ports
• Yes to add user account, configure as desired
• Set r00t password
• No to general config menu
• Exit install, remove CD

Ports

Updating Ports with cvsup

• Install the cvsup port

floe# cd /usr/ports/net/cvsup-without-gui
floe# make install clean

• As root:

cp /usr/share/examples/cvsup/ports-supfile ~

Edit the ports-supfile

• local mirror, such as freebsd.isc.org
• Comment ports-all, uncomment desired ports

Update:

cvsup -g -L 2 /root/ports-supfile

Automating port upgrades

This is probably a good idea. Last thing you want is some horrendous sshd vuln when you're out of the country or something... On the other hand, this represents a leap of faith that we won't end up with broken dependencies during a portupgrade due to some wacky change / failure... We'll cron a cvsup to keep the ports db recent, and use a tool called portupgrade to upgrade our installed ports.

Install portupgrade

cd /usr/ports/sysutils/portupgrade
make install clean

Create a package database for portupgrade

pkgdb -u

Run portupgrade

portupgrade -a

Create a script to do it all for us

#!/bin/sh
cvsup -g -L 2 /root/ports-supfile
pkgdb -u
portupgrade -a

Add it to cron

echo "20 4 * * 7 /root/upgrade.sh" > mycron
crontab mycron

Set up a forward for root

echo "foo@you.com" > .forward

References

• FreeBSD Handbook
• IPSec Certificate Basics