Notes on Installing and Configuring FreeBSD 5.3 RELEASE on my Thinkpad

This weekend FreeBSD 5.3 was released. I decided to install both FreeBSD 5.3 and Windows 2000 on a new laptop hard drive. (Here is how I handled dual-booting.) I'm writing these notes to keep track of the little tweaks needed to get the system running as I want it to run. I did the same in January 2004 when I installed FreeBSD 5.2 on the same system.

Rather than wipe out my existing software installation, I bought a new 2.5 laptop hard drive. Whenever I decide to reinstall an operation system from scratch on an important system, I usually buy a new hard drive and place the old one in a safe place. Hard drives are very cheap compared to the data on them. Although I do back up my data to other systems, you never know what you might need off the old hard drive. I usually forget some item in the boot loader or some configuration script, neither of which are found in /home.

My typical partitioning strategy is a variation of the following:

/        2048 MB
swap     twice RAM
/usr     4096 MB
/var     10240 MB
/home    1024 MB (more for workstations, enough for servers)
/tmp     1024 MB
/nsm     remainder (if needed)

That strategy works well on a 20 GB HDD, which is comfortable in today's computing world.

When I installed FreeBSD 5.3, I didn't install any packages beyond the defaults. I didn't see bash3 in the list of available packages in the /stand/sysinstall menu, so I decided I would add that later. I am glad to be using bash3 and not bash2, as I noticed an infrequent problem with bash2 core dumping if I tried to cancel an operation and then quickly scroll back through the command history.

Before I install any software I like to run ntpdate to set the time on the system:

janney:/root# ntpdate clock.isc.org
Looking for host clock.isc.org and service ntp
host found : clock.isc.org
 8 Nov 16:28:24 ntpdate[1298]: step time
 server 204.152.184.72 offset -18014.552297 sec

These are the sorts of packages I installed immediately after the OS was ready. I ended up with a lot more software than listed here, because some of the applications (like gedit or gimp) require lots of supporting libraries.

- bash (which is bash3)
- fluxbox-devel (my no-nonsense window manager)
- firefox (Web browser)
- thunderbird (mail client)
- mutt (mail client, good for system mail)
- aterm (I like this client better than xterm)
- cmdwatch (dynamically watch shell command output, like ls -al)
- portaudit (security application to check for vulnerable installed applications)
- portupgrade (upgrade software installed via port or package)
- pkg_cutleaves (delete packages, starting from end "leaves" and moving toward the core)
- xv (simple image viewer)
- gtksee (more complex image viewer)
- gedit2 (good GTK text editor)
- gimp (image editor)
- cdrtools (CD burning application)

I was able to install all of these applications using precomplied packages. However, in some cases I had to install applications via port because the package was not available in the ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-5.3-release/Latest/ directory. Examples include mplayer, a media viewer, and screen, providing multiple screens within a single terminal.

I was able to use the basic xorg.conf file created by running 'startx', but had to tweak it. I saved an example of it at xorg.conf.orr. I actually built this file with xorgconfig and then modified it by hand. I uncommented the xtt and glx sections but found dri was broken. I also uncommented the TrueType and freefont Fontpaths. My .xinitrc for my user accounts has a single line:

exec startfluxbox

My .xserverrc enables 100x100 dpi and no listening X server:

exec X :0 -dpi 100 -nolisten tcp

I add the following to my .profile to give a prompt with present working directory for bash3 users:

PS1='`hostname -s`:$PWD$ '; export PS1

I replace the 'set prompt' in root's .cshrc with the following to show present working directory for csh users like root:

set prompt = "%m:%/# "

I also enable tab completion with this:

set autolist

To ensure I read important mail for the root user, like portaudit results, I edit /etc/aliases as shown:

# root: me@my.domain
root:

I then run 'newaliases':

orr:/etc# newaliases
/etc/mail/aliases: 27 aliases, longest 23 bytes, 293 bytes total

I installed Sguil from CVS and tested the new install documentation I wrote.

Previously I avoided using acpi with FreeBSD 5.2. I am currently able to use acpi in this manner. To suspend the laptop I issue as root 'acpiconf -s 3'. I can resume the laptop by hitting the 'Fn' key. At this point moused is dead, so I have to 'killall -HUP moused' to bring it back. I also have to re-config the network interfaces. I've combined some of these actions into scripts I run upon resuming the laptop.

Comments

Post a Comment

Popular posts from this blog

Zeek in Action Videos

Image
This is a quick note to point blog readers to my Zeek in Action YouTube video series for the Zeek network security monitoring project .  Each video addresses a topic that I think might be of interest to people trying to understand their network using Zeek and adjacent tools and approaches, like Suricata, Wireshark, and so on.  I am especially pleased with Video 6 on monitoring wireless networks . It took me several weeks to research material for this video. I had to buy new hardware and experiment with a Linux distro that I had not used before -- Parrot .  Please like and subscribe, and let me know if there is a topic you think might make a good video.
Read more

MITRE ATT&CK Tactics Are Not Tactics

Image
Just what are "tactics"? Introduction MITRE ATT&CK  is a great resource, but something about it has bothered me since I first heard about it several years ago. It's a minor point, but I wanted to document it in case it confuses anyone else. The MITRE ATT&CK Design and Philosophy document from March 2020 says the following: At a high-level, ATT&CK is a behavioral model that consists of the following core components: • Tactics, denoting short-term, tactical adversary goals during an attack; • Techniques, describing the means by which adversaries achieve tactical goals; • Sub-techniques, describing more specific means by which adversaries achieve tactical goals at a lower level than techniques; and • Documented adversary usage of techniques, their procedures, and other metadata. My concern is with MITRE's definition of "tactics" as "short-term, tactical adversary goals during an attack," which is oddly recursive. The key word in the tacti...
Read more

New Book! The Best of TaoSecurity Blog, Volume 4

Image
  I've completed the TaoSecurity Blog book series . The new book is  The Best of TaoSecurity Blog, Volume 4: Beyond the Blog with Articles, Testimony, and Scholarship .  It's available now for Kindle , and I'm working on the print edition.  I'm running a 50% off promo on Volumes 1-3 on Kindle through midnight 20 April. Take advantage before the prices go back up. I described the new title thus: Go beyond TaoSecurity Blog with this new volume from author Richard Bejtlich. In the first three volumes of the series, Mr. Bejtlich selected and republished the very best entries from 18 years of writing and over 18 million blog views, along with commentaries and additional material.  In this title, Mr. Bejtlich collects material that has not been published elsewhere, including articles that are no longer available or are stored in assorted digital or physical archives. Volume 4 offers early white papers that Mr. Bejtlich wrote as a network defender, either for technica...
Read more