FreeBSD

Installation template for FreeBSD RELEASE, STABLE and CURRENT.

Distribution Select

[ ] doc
[*] src (for building ports)

System Configuration

[*] sshd
[*] ntpd

System Hardening

[*] 0 hide_uids
[*] 1 hide_gids
[*] 2 hide_jail
[ ] 3 read_msgbuf
[ ] 4 proc_debug
[ ] 5 random_pid
[*] 6 clear_tmp
[*] 7 disable_syslogd
[*] 8 disable_sendmail
[*] 9 secure_console

Manual Configuration

zfs create zroot/usr/obj
zfs rename zroot/usr/home zroot/home
zfs set mountpoint=/home zroot/home
rm -f /home
exit

System Setup

Show system information.

echo | clang -E - -march=native -### |& sed 's/.*-target-cpu" "\([^"]*\).*/Target CPU: \1/g'
sysctl hw.machine hw.machine_arch hw.model hw.ncpu
pkg query -e '%a = 0' %o

Configure system.

printf "fdesc\t\t\t/dev/fd\t\tfdescfs\trw\t\t0\t0\n" >> /etc/fstab
printf "proc\t\t\t/proc\t\tprocfs\trw\t\t0\t0\n" >> /etc/fstab

System Backup

Create backup.

tar cvzf /home/qis/`hostname -s`.tgz --exclude "bundle/ycm" /boot/loader.conf \
  /etc/{{devfs,mail/mailer,make,ntp,rc,resolv,sysctl,src}.conf,mergemaster.rc,ssh/sshd_config} \
  /home/qis/{.config/nvim,.cshrc,.gitconfig,.tmux.conf,.ssh/authorized_keys,.ssh/config,.vim} \
  /root/{.config/nvim,.cshrc,.tmux.conf,.ssh/authorized_keys,.ssh/config,.vim}

Restore backup.

tar xvpf /home/qis/`hostname -s`.tgz -C /
rm -f /home/qis/{.login,.login_conf,.mail_aliases,.mailrc,.profile,.rhosts,.shrc,root.tar.gz}
rm -f /root/{.k5login,.login,.profile}
chown -R qis:qis /home/qis
reboot

Create svn(1) symlink when using official releases.

ln -s /usr/bin/svnlite /usr/bin/svn

System Update

Update RELEASE.

freebsd-update fetch
freebsd-update install

Update STABLE.

svn co https://svn.freebsd.org/base/stable/11 /usr/src && \
cd /usr/src && make -j8 buildworld kernel KERNCONF=GENERIC && reboot
cd /usr/src && make installworld

Update CURRENT.

svn co https://svn.freebsd.org/base/head /usr/src && \
cd /usr/src && make -j8 buildworld kernel KERNCONF=GENERIC-NODEBUG && reboot
cd /usr/src && make installworld

Merge configuration files.

mergemaster -Ui

Delete old files and libraries.

cd /usr/src
make check-old       # yes | make delete-old
make check-old-libs  # yes | make delete-old-libs

Create installation media.

cd /usr/src/release
set kernel=`/bin/ls /usr/obj/usr/src/sys | grep -v boot | head -1`
make cdrom memstick KERNCONF=${kernel} NODOC=yes NOPORTS=yes && \
mv memstick.img /home/qis/r`svn info | grep Revision | cut -w -f2`.img && \
mv disc1.iso /home/qis/r`svn info | grep Revision | cut -w -f2`.iso

Ports

Install portmaster.

portsnap fetch && portsnap extract > /dev/null && \
cd /usr/ports/ports-mgmt/portmaster && make install clean distclean

Install ports.

portmaster -GDy sysutils/{htop,tmux,tree} security/{ca_root_nss,sudo} ftp/wget editors/neovim \
  lang/{python,python3} devel/{boost-all,cmake,git-lite,nasm,ninja,py-pip,py3-pip} \
  databases/sqlite3 www/nginx-lite net/samba46 benchmarks/wrk

Update ports.

portsnap fetch update
portmaster -L
portmaster -GDay
portmaster --clean-distfiles

Packages

Switch to the latest packages branch.

sed -i .orig 's/quarterly/latest/' /etc/pkg/FreeBSD.conf
pkg update
pkg upgrade

Install packages.

pkg install htop tmux tree ca_root_nss sudo wget neovim \
  cmake git-lite nasm ninja samba46 nginx-lite \
  python python3 py-pip py3-pip samba46 wrk

Update packages.

pkg update
pkg upgrade

`neovim`

Create nvim(1) symlink and install python packages.

ln -s /usr/local/bin/nvim /usr/local/bin/vim
pip-2.7 install --upgrade neovim
pip-3.6 install --upgrade neovim

Install YouCompleteMe as user.

cd ~/.vim/bundle && git clone --recursive https://github.com/Valloric/YouCompleteMe ycm && rm -rf ycm/.git
cd ~/.vim/bundle/ycm && python2.7 install.py --clang-completer --system-boost

`sudo`

Configure sudo(1) with set EDITOR=vim; visudo.

# FreeBSD pkg and fetch.
Defaults env_keep += "PKG_CACHEDIR PKG_DBDIR FTP_PASSIVE_MODE"

# FreeBSD portupgrade.
Defaults env_keep += "PORTSDIR PORTS_INDEX PORTS_DBDIR PACKAGES PKGTOOLS_CONF"

# Locale settings.
Defaults env_keep += "LANG LANGUAGE LINGUAS LC_* _XKB_CHARSET MM_CHARSET"

# Applications.
Defaults env_keep += "EDITOR PAGER CLICOLOR LSCOLORS TMUX"

# User privilege specification.
root	ALL=(ALL) ALL
qis	ALL=(ALL) NOPASSWD: ALL

# See sudoers(5) for more information on "#include" directives:
#includedir /usr/local/etc/sudoers.d

`clang++`

Test C++ compiler and standard library fatures.

#include <experimental/filesystem>
#include <iostream>
#include <stdexcept>
#include <thread>

namespace fs = std::experimental::filesystem;

int main() {
  std::exception_ptr exception;
  auto thread = std::thread([&]() {
    try {
      std::cout << fs::current_path() << std::endl;
      throw std::runtime_error("success");
    }
    catch (...) {
      exception = std::current_exception();
    }
  });
  thread.join();
  try {
    std::rethrow_exception(exception);
  }
  catch (const std::exception& e) {
    std::cout << e.what() << std::endl;
  }
}

clang++ -std=c++17 -O3 -flto=thin -c main.cpp
clang++ -fuse-ld=lld main.o -pthread -lc++experimental

Development

Install development ports.

portmaster -GDy --update-if-newer devel/{googletest,libfmt} ftp/curl graphics/{libjpeg-turbo,png} print/freetype2

Install development packages.

pkg install googletest libfmt curl libjpeg-turbo png freetype2

qis/freebsd.md