StuRa:Server/Hauptsystem

Dicke Berta

ThinkServer

Fette Elke

Supermicro SuperServer 5016T-MTFB

Hardware:

• user angelegt
• ssh zugang configuriert/aktiviert
• Packetfilter aktiviert
• gateway aktiviert
• systemlog daemon aktiviert
• resolv.conf angelegt
• packetfilter configuriert
• packetfilter gestartet
• packetfilterlog gestartet
• auditd in rc.conf aktiviert und gestartet
• crontab einträge getätigt für
  • audit
  • portaudit
  • portsnap
• /etc/src.. installiert
• einrichten der jails
  • srs1 (fertig)
  • srs2 (fertig)
  • srs3
  • srs4 (fertig)
  • srs5 (Vorbereitet)
  • srs6 (fertig)
  • srs8 (fertig)
  • srs9 (in bearbeitung)
  • srs10 (in bearbeitung)
  • srs13 (in bearbeitung)
  • srs17 (in bearbeitung)
  • srs21 (mailman problem virtuellhostname not found)

loader.conf

• für den apache22 Eintrag anlegen

accf_data_load=”YES” # Wait for data accept filter
accf_http_load=”YES” # Wait for full HTTP request accept filter

Ports

emacs-nox11

[ ] CANNA       Canna support
[X] DBUS        DBus support
[X] GCONF       GConf support
[X] GIF         GIF images support
[X] GTK2        Use GTK+ widgets
[X] JPEG        JPEG images support
[X] M17N        M17N support for text-shaping
[ ] MOTIF       Use Motif widgets
[X] OTF         Opentype fonts support
[X] PNG         PNG images support
[X] SOUND       Sound support
[X] SOURCES     Install source code
[X] SVG         SVG images support
[X] TIFF        TIFF images support
[ ] XAW         Use Athena widgets
[ ] XAW3D       Use Athena3D widgets
[X] SYNC_INPUT  Synchronously process asynchronous input
[X] SCROLLBARS  Without toolkit scroll-bars
[X] XFT         Freetype fonts support
[X] XIM         X Input Method support
[X] XPM         XPM images support

perl5.12

[ ] DEBUGGING      Build with debugging support
[X] GDBM           Build GDBM_File extension
[X] PERL_MALLOC    Use Perl malloc
[X] PERL_64BITINT  Use 64 bit integers (on i386)
[ ] THREADS        Build threaded perl
[X] PTHREAD        Build with -pthread
[X] MULTIPLICITY   Use multiplicity
[ ] SITECUSTOMIZE  Run-time customization of @INC
[X] USE_PERL       Rewrite links in /usr/bin

portupgrade

[X] BDB4  Use Berkeley DB >=2 as backend
[ ] BDB1  Use Berkeley DB 1.85 as backend 

ruby18

[ ] ONIGURUMA  Build with oniguruma regular expressions lib
[X] RDOC       Build and install Rdoc indexes
[ ] DEBUG      Compile-in debug info

tmux

[ ] LIBEVENT2        Use libevent version 2
[ ] LIBEVENT_STATIC  Build with static libevent
[ ] BACKSPACE        Build with tty/keys patch

wget

[ ] GNUTLS   Support for SSL via GnuTLS
[X] IPV6     Support for IPv6
[X] NLS      Native Language Support with gettext
[X] OPENSSL  Support for SSL via OpenSSL
[X] IDN      Support IDN (Internationalized Domain Names)

zsh

[X] ZSH_GDBM       Enable GDBM support (GPL)
[X] ZSH_MEM        Enable zsh-mem and zsh-secure-free options
[X] ZSH_SECURE_FREE  Enable zsh-secure-free 
[X] ZSH_MAILDIR    Enable support for Maildirs in MAIL(PATH)
[X] ZSH_MULTIBYTE  Enable multibyte character support
[ ] ZSH_PCRE       Enable PCRE support
[ ] ZSH_STATIC     Build static executable

Jails

Alle angelegten Jails im Wiki anzeigen.

Standard installation

libiconv

[X] EXTRA_ENCODINGS  Include extra character sets

m4

[ ] LIBSIGSEGV  Use libsigsegv for better diagnostics

pcre

[X] JIT      Enable Just-In-Time compiling support
[ ] LIBEDIT  Link pcretest against libedit

perl 5.12.4

[ ] DEBUGGING      Build with debugging support
[ ] GDBM           Build GDBM_File extension
[X] PERL_MALLOC    Use Perl malloc
[X] PERL_64BITINT  Use 64 bit integers (on i386)
[X] THREADS        Build threaded perl
[X] PTHREAD        Build with -pthread
[X] MULTIPLICITY   Use multiplicity
[ ] SITECUSTOMIZE  Run-time customization of @INC
[X] USE_PERL       Rewrite links in /usr/bin

portupgrade

[X] BDB4  Use Berkeley DB >=2 as backend
[ ] BDB1  Use Berkeley DB 1.85 as backend 

ruby18

[ ] ONIGURUMA  Build with oniguruma regular expressions lib
[X] RDOC       Build and install Rdoc indexes
[ ] DEBUG      Compile-in debug info

zsh

[ ] ZSH_GDBM       Enable GDBM support (GPL)
[X] ZSH_MEM        Enable zsh-mem option
[X] ZSH_SECURE_FREE  Enable zsh-secure-free 
[X] ZSH_MAILDIR    Enable support for Maildirs in MAIL(PATH)
[X] ZSH_MULTIBYTE  Enable multibyte character support
[X] ZSH_PCRE       Enable PCRE support
[ ] ZSH_STATIC     Build static executable

weitere ohne config

• portaudit

SRS1

• die plone-kiste

Jail/SRS1

SRS2

• rsync

Jail/SRS2

SRS3

• Samba
• vllt auf openthinclient

Jail/SRS3

SRS4

• altes Plone

Jail/SRS4

SRS5

• <VERWENDUNGSZWECK>

Jail/SRS5

SRS6

• für limesurvey/umfragen

Jail/SRS6

SRS8

• Redmind Ticketsystem

Jail/SRS8

SRS9

• FSR

Jail/SRS9

SRS10

• <VERWENDUNGSZWECK>

Jail/SRS10

SRS13

• services für stura-dresden.de

Jail/SRS13

SRS17

• Benutzerübersichtsverwaltung

Jail/SRS17

SRS21

• emails / Mailman

Jail/SRS21