Benutzer Diskussion:Matthias Jakobi

Beobachtungsseiten

• Server
• Diskussion:Server
• Server/Bacula
• Server/Dokumentation
• Diskussion:Server/Dokumentation
• Server/Hauptsystem
• Server/mailman
• Jail/SRS1 Plone 4
• Jail/SRS3 Samba
• Jail/SRS4 Plone (old)
• Jail/SRS5 Wikis
• Jail/SRS6 Umfragen
• Jail/SRS8 Test
• Jail/SRS13 Awesome Jail
• Jail/SRS21 Mail
• Website
• Diskussion:Website
• Notfallmanagment
• Datensicherung
• Bereich Administration Rechentechnik/zu erledigende Dinge
• Bereich Administration Website/zu erledigende Dinge
• Bereich Administration Wiki/zu erledigende Dinge
• PyConDE
• Doktorandenstammtisch
• FreeBSD/ThinkPad

weitere Admins

Benutzer:JohannesSchneemann

Laptop

Load Geli

Fixit> kldload geom_eli

Festplatte

Fixit> gpart create -s GPT ada0
Fixit> gpart add -s 64K -t freebsd-boot ada0
Fixit> gpart add -s 1G -t freebsd-zfs ada0
Fixit> gpart add -s 55G -t freebsd-zfs ada0
Fixit> gpart set -a active -1 ada0 # funzt nicht
Fixit> gpart bootcode -b /dist/boot/pmbr -p /dist/boot/gptzfsboot -i 1 ada0
Fixit> newfs -O2 /dev/ada0p2

• aktuelle Festplatten Einteilung

-ad0 GPT
    |-1 freebsd-boot 64K
    |-2 freebsd-zfs 1G /boot
    |-3 freebsd-zfs 55G / (crypto)

Encrypt

Fixit> geli init -b -s 4096 -l 256 /dev/ada0p3

Attach

Fixit> geli attach /dev/ada0p3

ZFS

Fixit> kldload zfs
Fixit> zpool create tank /dev/ad0p3.eli
# Fixit> zpool create home 
# Fixit> zpool set bootfs=tank tank
Fixit> mkdir /tank/bootdir
Fixit> mount /dev/ad0p2 /tank/bootdir
Fixit# zfs set checksum=fletcher4                                      zroot

Fixit# zfs create -o compression=on    -o exec=on      -o setuid=off   zroot/tmp
Fixit# chmod 1777 /zroot/tmp

Fixit# zfs create                                                      zroot/usr
Fixit# zfs create                                                      zroot/usr/home
Fixit# cd /zroot ; ln -s /usr/home home

Fixit# zfs create -o compression=lzjb                  -o setuid=off   zroot/usr/ports
Fixit# zfs create -o compression=off   -o exec=off     -o setuid=off   zroot/usr/ports/distfiles
Fixit# zfs create -o compression=off   -o exec=off     -o setuid=off   zroot/usr/ports/packages
Fixit# zfs create -o compression=lzjb  -o exec=off     -o setuid=off   zroot/usr/src

Fixit# zfs create                                                      zroot/var
Fixit# zfs create -o compression=lzjb  -o exec=off     -o setuid=off   zroot/var/crash
Fixit# zfs create                      -o exec=off     -o setuid=off   zroot/var/db
Fixit# zfs create -o compression=lzjb  -o exec=on      -o setuid=off   zroot/var/db/pkg
Fixit# zfs create                      -o exec=off     -o setuid=off   zroot/var/empty
Fixit# zfs create -o compression=lzjb  -o exec=off     -o setuid=off   zroot/var/log
Fixit# zfs create -o compression=gzip  -o exec=off     -o setuid=off   zroot/var/mail
Fixit# zfs create                      -o exec=off     -o setuid=off   zroot/var/run
Fixit# zfs create -o compression=lzjb  -o exec=on      -o setuid=off   zroot/var/tmp
Fixit# chmod 1777 /zroot/var/tmp

Install FreeBSD

Fixit> zfs set mountpoint=/tank/usr/home home
Fixit# cd /dist/8.2-*
Fixit# export DESTDIR=/zroot
Fixit# for dir in base catpages dict doc games info lib32 manpages ports; \
         do (cd $dir ; ./install.sh) ; done

• lib32 oder proflibs

Fixit# cd src ; ./install.sh all
Fixit# cd ../kernels ; ./install.sh generic
Fixit# cd /zroot/boot ; cp -Rlp GENERIC/* /zroot/boot/kernel/

Fixit# zfs set readonly=on zroot/var/empty

post install

Fixit# chroot /zroot

• rc.conf

zfs_enable="YES"
hostname="beastie.mydomain.local"
ifconfig_re0="DHCP"

• loader.conf

zfs_load="YES"
vfs.root.mountfrom="zfs:zroot"
geom_eli_load="YES"
geli_ad0p4_keyfile0_load="YES"
geli_ad0p4_keyfile0_type="ad0p4:geli_keyfile0"
geli_ad0p4_keyfile0_name="/boot/key/ad0.key"

• fstab

# Device                       Mountpoint              FStype  Options         Dump    Pass#
/dev/ad0s2                    /bootdir                ufs     rw              0       0

Fixit> passwd
Fixit> tzsetup
Fixit> cd /etc/mail
Fixit> make aliases
Fixit> umount /dev
Fixit> exit
Fixit# cp /boot/zfs/zpool.cache /zroot/boot/zfs/zpool.cache
Fixit> mkdir /tank/boot/key
Fixtit> cp /boot/key/* /tank/boot/key

Finish install

Fixit# cd /zroot
Fixit# mv boot bootdir/
Fixit# ln -s bootdir/boot /zroot/boot
Fixit# chflags -h sunlink /zroot/boot

Fixit# export LD_LIBRARY_PATH=/mnt2/lib 

Fixit# umount /zroot/bootdir
Fixit# zfs unmount -a

Fixit# zfs set mountpoint=legacy zroot
Fixit# zfs set mountpoint=/tmp zroot/tmp
Fixit# zfs set mountpoint=/usr zroot/usr
Fixit# zfs set mountpoint=/var zroot/var
Fixit# zfs set mountpoint=/usr/home home