StuRa:Server/Hauptsystem

Dicke Berta

ThinkServer

Fette Elke

Supermicro SuperServer 5016T-MTFB

Hardware:

• user angelegt
• ssh zugang configuriert/aktiviert
• Packetfilter aktiviert
• gateway aktiviert
• systemlog daemon aktiviert
• resolv.conf angelegt
• packetfilter configuriert
• packetfilter gestartet
• packetfilterlog gestartet
• auditd in rc.conf aktiviert und gestartet
• crontab eintäge getätigt für
  • audit
  • portaudit
  • portsnap
• /etc/src.. installiert
• einrichten der jails
  • srs1 (fertig)
  • srs3
  • srs4 (fertig)
  • srs5 (Vorbereitet)
  • srs6 (noch testen/dump ziehen)
  • srs8
  • srs21 (vorbereitet maildrop noch machen)

loader.conf

• für den apache22 Eintrag anlegen

accf_http_load="YES"

Ports

• emacs-nox11

[ ] CANNA       Canna support
[X] DBUS        DBus support
[X] GCONF       GConf support
[X] GIF         GIF images support
[X] GTK2        Use GTK+ widgets
[X] JPEG        JPEG images support
[X] M17N        M17N support for text-shaping
[ ] MOTIF       Use Motif widgets
[X] OTF         Opentype fonts support
[X] PNG         PNG images support
[X] SOUND       Sound support
[X] SOURCES     Install source code
[X] SVG         SVG images support
[X] TIFF        TIFF images support
[ ] XAW         Use Athena widgets
[ ] XAW3D       Use Athena3D widgets
[X] SYNC_INPUT  Synchronously process asynchronous input
[X] SCROLLBARS  Without toolkit scroll-bars
[X] XFT         Freetype fonts support
[X] XIM         X Input Method support
[X] XPM         XPM images support

• perl5.12

[ ] DEBUGGING      Build with debugging support
[X] GDBM           Build GDBM_File extension
[X] PERL_MALLOC    Use Perl malloc
[X] PERL_64BITINT  Use 64 bit integers (on i386)
[X] THREADS        Build threaded perl
[X] MULTIPLICITY   Use multiplicity
[ ] SITECUSTOMIZE  Run-time customization of @INC
[X] USE_PERL       Rewrite links in /usr/bin

• portupgrade

[X] BDB4  Use Berkeley DB >=2 as backend
[ ] BDB1  Use Berkeley DB 1.85 as backend 

• ruby18

[ ] ONIGURUMA  Build with oniguruma regular expressions lib
[X] RDOC       Build and install Rdoc indexes
[ ] DEBUG      Compile-in debug info

• screen

[ ] CJK           Treat CJK ambiguous characters as full width
[X] INFO          Build and install info documentation
[X] MAN           Build and install man pages
[X] NETHACK       Enable nethack-style messages
[ ] XTERM_256     Enable support for 256 colour xterm
[ ] HOSTINLOCKED  Print user@host in locked message
[ ] SHOWENC       Show encoding on the status line

• tmux

[ ] LIBEVENT2        Use libevent version 2
[ ] LIBEVENT_STATIC  Build with static libevent
[ ] BACKSPACE        Build with tty/keys patch

• wget

[ ] GNUTLS   Support for SSL via GnuTLS
[X] IPV6     Support for IPv6
[X] NLS      Native Language Support with gettext
[X] OPENSSL  Support for SSL via OpenSSL
[X] IDN      Support IDN (Internationalized Domain Names)

• zsh

[X] ZSH_GDBM       Enable GDBM support (GPL)
[X] ZSH_MEM        Enable zsh-mem and zsh-secure-free options
[X] ZSH_MAILDIR    Enable support for Maildirs in MAIL(PATH)
[X] ZSH_MULTIBYTE  Enable multibyte character support
[ ] ZSH_PCRE       Enable PCRE support
[ ] ZSH_STATIC     Build static executable

Jails

Standard installation

• libiconv

[X] EXTRA_ENCODINGS  Include extra character sets
[ ] EXTRA_PATCHES    Apply patches to fix CP932, add EUCJP-MS 

• m4

[ ] LIBSIGSEGV  Use libsigsegv for better diagnostics

• perl 5.12.4

[ ] DEBUGGING      Build with debugging support
[ ] GDBM           Build GDBM_File extension
[X] PERL_MALLOC    Use Perl malloc
[X] PERL_64BITINT  Use 64 bit integers (on i386)
[X] THREADS        Build threaded perl
[X] MULTIPLICITY   Use multiplicity
[ ] SITECUSTOMIZE  Run-time customization of @INC
[X] USE_PERL       Rewrite links in /usr/bin

• portupgrade

[X] BDB4  Use Berkeley DB >=2 as backend
[ ] BDB1  Use Berkeley DB 1.85 as backend 

• ruby18

[ ] ONIGURUMA  Build with oniguruma regular expressions lib
[X] RDOC       Build and install Rdoc indexes
[ ] DEBUG      Compile-in debug info

• zsh

[ ] ZSH_GDBM       Enable GDBM support (GPL)
[X] ZSH_MEM        Enable zsh-mem and zsh-secure-free options
[X] ZSH_MAILDIR    Enable support for Maildirs in MAIL(PATH)
[X] ZSH_MULTIBYTE  Enable multibyte character support
[ ] ZSH_PCRE       Enable PCRE support
[ ] ZSH_STATIC     Build static executable

weitere ohne config

• portaudit

SRS1

• die plone-kiste

Lauffähig noch nen Dump ziehen vom alten Plone4 und dann übertragen

Jail/SRS1

SRS3

• Samba

Jail/SRS3

SRS4

• altes Plone

Lauffähig

• noch portaudit installieren

Jail/SRS4

SRS5

• <VERWENDUNGSZWECK>

Jail/SRS5

SRS6

• für limesurvey/umfragen

Jail/SRS6

SRS13

• services für stura-dresden.de

Jail/SRS13

SRS21

• emails

Jail/SRS21