دانلود کتاب Absolute FreeBSD

فهرست مطالب :

Brief Contents
Contents in Detail
Foreword
Acknowledgments
Introduction
What Is FreeBSD?
BSD: FreeBSD’s Granddaddy
The BSD License
The AT&T/CSRG/BSDi Iron Cage Match
The Birth of FreeBSD
FreeBSD Development
Committers
Contributors
Users
Other BSDs
NetBSD
OpenBSD
DragonFly BSD
macOS
FreeBSD’s Children
Other Unixes
Solaris
illumos
AIX
Linux
Other Unixes
FreeBSD’s Strengths
Portability
Power
Simplified Software Management
Customizable Builds
Advanced Filesystems
Who Should Use FreeBSD?
Who Should Run Another BSD?
Who Should Run a Proprietary Operating System?
How to Read This Book
What Must You Know?
For the New System Administrator
Desktop FreeBSD
How to Think About Unix
Notes on the Third Edition
Contents of This Book
Chapter 1: Getting More Help
Why Not Beg for Help?
The FreeBSD Attitude
Support Options
Man Pages
Manual Sections
Navigating Man Pages
Finding Man Pages
Section Numbers and Man
Man Page Contents
FreeBSD.org
Web Documents
The Mailing List Archives
The Forums
Other Websites
Using FreeBSD Problem-Solving Resources
Checking the Handbook and FAQ
Checking the Man Pages
Mailing Lists Archives and Forums
Using Your Answer
Asking for Help
Composing Your Message
Responding to Email
The Internet Is Forever
Chapter 2: Before You Install
Default Files
Configuration with UCL
FreeBSD Hardware
Proprietary Hardware
Hardware Requirements
BIOS versus EFI
Disks and Filesystems
FreeBSD Filesystems
Filesystem Encryption
Disk Partitioning Methods
Partitioning with UFS
Multiple Operating Systems
Multiple Hard Drives
Swap Space
Getting FreeBSD
FreeBSD Versions
Choosing Installation Images
Network Installs
Chapter 3: Installing
Core Settings
Distribution Selection
Disk Partitioning
UFS Installs
ZFS Installs
Network and Service Configuration
Finishing the Install
Chapter 4: Start Me Up! The Boot Process
Power-On
Unified Extensible Firmware Interface
Basic Input/Output System
The Loader
Boot Multi User [Enter]
Boot FreeBSD in Single-User Mode
Escape to loader prompt
Reboot
Single-User Mode
Disks in Single-User Mode
Programs Available in Single-User Mode
The Network in Single-User Mode
Uses for Single-User Mode
The Loader Prompt
Viewing Disks
Loader Variables
Reboot
Booting from the Loader
Loader Configuration
Boot Options
Startup Messages
Multiuser Startup
/etc/rc.conf, /etc/rc.conf.d, and /etc/defaults/rc.conf
The rc.d Startup System
The service(8) Command
System Shutdown
Serial Consoles
Serial Protocol
Physical Serial Console Setup
IPMI Serial Console Setup
Configuring FreeBSD’s Serial Console
Using Serial Consoles
Working at the Console
Chapter 5: Read This Before You Break Something Else! (Backup and Recovery)
System Backups
Backup Tapes
Tape Drive Device Nodes, Rewinding, and Ejecting
The $TAPE Variable
Tape Status with mt(1)
Other Tape Drive Commands
BSD tar(1)
tar Modes
Other tar Features
Compression
Permissions Restore
And More, More, More . . .
Recording What Happened
Repairing a Broken System
Chapter 6: Kernel Games
What Is the Kernel?
Kernel State: sysctl
sysctl MIBs
sysctl Values and Definitions
Viewing sysctls
Changing sysctls
Setting sysctls Automatically
The Kernel Environment
Viewing the Kernel Environment
Dropping Hints to Device Drivers
Kernel Modules
Viewing Loaded Modules
Loading and Unloading Modules
Loading Modules at Boot
Build Your Own Kernel
Preparations
Buses and Attachments
Back Up Your Working Kernel
Configuration File Format
Configuration Files
Building a Kernel
Booting an Alternate Kernel
Custom Kernel Configuration
Trimming a Kernel
Troubleshooting Kernel Builds
Inclusions, Exclusions, and Expanding the Kernel
NOTES
Inclusions and Exclusions
Skipping Modules
Chapter 7: The Network
Network Layers
The Physical Layer
Datalink: The Physical Protocol
The Network Layer
Heavy Lifting: The Transport Layer
Applications
The Network in Practice
Getting Bits and Hexes
Network Stacks
IPv4 Addresses and Netmasks
Computing Netmasks in Decimal
Unusable IP Addresses
Assigning IPv4 Addresses
IPv6 Addresses and Subnets
IPv6 Basics
Understanding IPv6 Addresses
IPv6 Subnets
Link-Local Addresses
Assigning IPv6 Addresses
TCP/IP Basics
ICMP
UDP
TCP
How Protocols Fit Together
Transport Protocol Ports
Understanding Ethernet
Protocol and Hardware
MAC Addresses
Chapter 8: Configuring Networking
Network Prerequisites
Configuring Changes with ifconfig(8)
Adding an IP to an Interface
Testing Your Interface
Set Default Route
Multiple IP Addresses on One Interface
Renaming Interfaces
DHCP
Reboot!
The Domain Name Service
Host/IP Information Sources
Local Names with /etc/hosts
Configuring Nameservice
Caching Nameserver
Network Activity
Current Network Activity
What’s Listening on Which Port?
Port Listeners in Detail
Network Capacity in the Kernel
Optimizing Network Performance
Optimizing Network Hardware
Memory Usage
Maximum Incoming Connections
Polling
Other Optimizations
Network Adapter Teaming
Aggregation Protocols
Configuring lagg(4)
Virtual LANs
Configuring VLAN Devices
Configuring VLANs at Boot
Chapter 9: Securing Your System
Who Is the Enemy?
Script Kiddies
Disaffected Users
Botnets
Motivated Skilled Attackers
FreeBSD Security Announcements
User Security
Creating User Accounts
Configuring Adduser: /etc/adduser.conf
Editing Users
Shells and /etc/shells
root, Groups, and Management
The root Password
Groups of Users
Using Groups to Avoid Root
Tweaking User Security
Restricting Login Ability
Restricting System Usage
File Flags
Setting and Viewing File Flags
Securelevels
Securelevel Definitions
Which Securelevel Do You Need?
What Won’t Securelevels and File Flags Accomplish?
Living with Securelevels
Network Targets
Putting It All Together
Chapter 10: Disks, Partitioning, and GEOM
Disks Lie
Device Nodes
The Common Access Method
What Disks Do You Have?
Non-CAM Devices
THE GEOM STORAGE ARCHITECTURE
GEOM Autoconfiguration
GEOM vs. Volume Managers
Providers, Consumers, and Slicers
GEOM Control Programs
GEOM Device Nodes and Stacks
Hard Disks, Partitions, and Schemes
The Filesystem Table: /etc/fstab
What’s Mounted Now?
Disk Labeling
Viewing Labels
Sample Labels
GEOM Withering
The gpart(8) Command
Viewing Partitions
Other Views
Removing Partitions
Scheming Disks
Removing the Disk Partitioning Scheme
Assigning the Partitioning Scheme
The GPT Partitioning Scheme
GPT Device Nodes
GPT Partition Types
Creating GPT Partitions
Resizing GPT Partitions
Changing Labels and Types
Booting on Legacy Hardware
Unified Extensible Firmware Interface and GPT
Expanding GPT Disks
The MBR Partitioning Scheme
What Is the Master Boot Record?
BSD Labels
MBR Device Nodes
MBR and Disklabel Alignment
Creating Slices
Removing Slices
Activating Slices
BSD Labels
Creating a BSD Label
Creating BSD Label Partitions
Assigning Specific Partition Letters
Chapter 11: The Unix File System
UFS Components
The Fast File System
How UFS Uses FFS
Vnodes
Mounting and Unmounting Filesystems
Mounting Standard Filesystems
Special Mounts
Unmounting a Partition
UFS Mount Options
UFS Resiliency
Soft Updates
Soft Updates Journaling
GEOM Journaling
Creating and Tuning UFS Filesystems
UFS Labeling
Block and Fragment Size
Using GEOM Journaling
Tuning UFS
Expanding UFS Filesystems
UFS Snapshots
Taking and Destroying Snapshots
Finding Snapshots
Snapshot Disk Usage
UFS Recovery and Repair
System Shutdown: The Syncer
Dirty Filesystems
File System Checking: fsck(8)
Forcing Read-Write Mounts on Dirty Disks
Background fsck, fsck -y, Foreground fsck, Oy Vey!
UFS Space Reservations
How Full Is a Partition?
Adding New UFS storage
Partitioning the Disk
Configuring /etc/fstab
Installing Existing Files onto New Disks
Stackable Mounts
Chapter 12: The Z File System
Datasets
Dataset Properties
Managing Datasets
ZFS Pools
Pool Details
Pool Properties
Viewing Pool Properties
Virtual Devices
VDEV Types and Redundancy
Managing Pools
ZFS and Disk Block Size
Creating and Viewing Pools
Multi-VDEV Pools
Destroying Pools
Errors and -f
Copy-On-Write
Snapshots
Creating Snapshots
Accessing Snapshots
Destroying Snapshots
Compression
Pool Integrity and Repair
Integrity Verification
Repairing Pools
Pool Status
Boot Environments
Viewing Boot Environments
Creating and Accessing Boot Environments
Activating Boot Environments
Removing Boot Environments
Boot Environments at Boot
Boot Environments and Applications
Chapter 13: Foreign Filesystems
FreeBSD Mount Commands
Supported Foreign Filesystems
Permissions and Foreign Filesystems
Using Removable Media
Ejecting Removable Media
Removable Media and /etc/fstab
Formatting FAT32 Media
Creating Optical Media
Writing Images to Thumb Drives
Memory Filesystems
tmpfs
Memory Disks
Mounting Disk Images
Filesystems in Files
devfs
/dev at Boot
Global devfs Rules
Dynamic Device Management with devd(8)
Miscellaneous Filesystems
The Network File System
NFS Versions
Configuring the NFS Server
Configuring NFS Exports
Enabling the NFS Client
The Common Internet File System
Prerequisites
Kernel Support
Configuring CIFS
nsmb.conf Keywords
CIFS Name Resolution
Other smbutil(1) Functions
Mounting a Share
Other mount_smbfs Options
nsmb.conf Options
CIFS File Ownership
Serving CIFS Shares
Chapter 14: Exploring /etc
/etc Across Unix Species
/etc/adduser.conf
/etc/aliases
/etc/amd.map
/etc/auto_master
/etc/blacklistd.conf
/etc/bluetooth, /etc/bluetooth.device.conf, and /etc/defaults/bluetooth.device.conf
/etc/casper
/etc/crontab and /etc/cron.d
/etc/csh.*
/etc/ddb.conf
/etc/devd.conf
/etc/devfs.conf, /etc/devfs.rules, and /etc/defaults/devfs.rules
/etc/dhclient.conf
/etc/disktab
/etc/dma/
/etc/freebsd-update.conf
/etc/fstab
/etc/ftp.*
/etc/group
/etc/hostid
/etc/hosts
/etc/hosts.allow
/etc/hosts.equiv
/etc/hosts.lpd
/etc/inetd.conf
/etc/libmap.conf
/etc/localtime
/etc/locate.rc
/etc/login.*
/etc/mail
/etc/mail.rc
/etc/mail/mailer.conf
/etc/make.conf
CFLAGS
COPTFLAGS
CXXFLAGS
/etc/master.passwd
/etc/motd
/etc/mtree
/etc/netconfig
/etc/netstart
/etc/network.subr
/etc/newsyslog.conf
/etc/nscd.conf
/etc/nsmb.conf
/etc/nsswitch.conf
/etc/ntp/, /etc/ntp.conf
/etc/opie*
/etc/pam.d/*
/etc/passwd
/etc/pccard_ether
/etc/periodic.conf and /etc/defaults/periodic.conf
daily_output=”root”
daily_show_success=”YES”
daily_show_info=”YES”
daily_show_badconfig=”NO”
daily_local=”/etc/daily.local”
/etc/pf.conf, /etc/pf.os
/etc/phones
/etc/portsnap.conf
/etc/ppp/
/etc/printcap
/etc/profile
/etc/protocols
/etc/pwd.db
/etc/rc*
/et/regdomain.xml
/etc/remote
/etc/resolv.conf
/etc/rpc
/etc/security/
/etc/services
/etc/shells
/etc/skel/
/etc/snmpd.config
/etc/spwd.db
/etc/src.conf
/etc/ssh/
/etc/ssl/
/etc/sysctl.conf
/etc/syslog.conf, /etc/syslog.conf.d/
/etc/termcap, /etc/termcap.small
/etc/ttys
/etc/unbound/
/etc/wall_cmos_clock
/etc/zfs/
Chapter 15: Making Your System Useful
Ports and Packages
Packages
Package Files
Introducing pkg(8)
Installing pkg(8)
Common pkg Options
Configuring pkg(8)
Finding Packages
Installing Software
The Package Cache
Package Information and Automatic Installs
Uninstalling Packages
Changing the Package Database
Locking Packages
Package Files
Package Integrity
Package Maintenance
Package Networking and Environment
Package Repositories
Repository Configuration
Repository Customization
Repository Inheritance
Package Branches
Upgrading Packages
Chapter 16: Customizing Software with Ports
Making Software
Source Code and Software
The Ports Collection
Ports
The Ports Index
Searching the Index
Legal Restrictions
What’s In a Port?
Installing a Port
Port Customization Options
Building Packages
Uninstalling and Reinstalling Ports
Tracking Port Build Status
Cleaning Up Ports
Read-Only Ports Tree
Changing the Install Path
Private Package Repositories
Poudriere Resources
Installing and Configuring Poudriere
Poudriere Jail Creation
Install a Poudriere Ports Tree
Configuring Poudriere Ports
Running Poudriere
Using the Private Repository
All Poudrieres, Large and Small
Small Systems
Large Systems
Updating Poudriere
More Poudriere
Chapter 17: Advanced Software Management
Using Multiple Processors: SMP
Kernel Assumptions
SMP: The First Try
Today’s SMP
Processors and SMP
Threads, Threads, and More Threads
Startup and Shutdown Scripts
rc Script Ordering
A Typical rc Script
Special rc Script Providers
Vendor Startup/Shutdown Scripts
Debugging Custom rc Scripts
Managing Shared Libraries
Shared Library Versions and Files
Attaching Shared Libraries to Programs
LD_LIBRARY_PATH and LD_PRELOAD
What a Program Wants
Remapping Shared Libraries
Running Software from the Wrong OS
Recompilation
Emulation
ABI Reimplementation
Binary Branding
Supported ABIs
Installing and Configuring the Linuxulator
Using Linux Mode
Debugging Linux Mode
Running Software from the Wrong Architecture or Release
Chapter 18: Upgrading FreeBSD
FreeBSD Versions
Releases
FreeBSD-current
FreeBSD-stable
Snapshots
FreeBSD Support Model
Testing FreeBSD
Which Version Should You Use?
Upgrade Methods
Binary Updates
/etc/freebsd-update.conf
Running freebsd-update(8)
Reverting Updates
Scheduling Binary Updates
Optimizing and Customizing FreeBSD Update
Upgrading via Source
Which Source Code?
Updating Source Code
Building FreeBSD from Source
Build the World
Build, Install, and Test a Kernel
Prepare to Install the New World
Installing the World
Customizing Mergemaster
Upgrades and Single-User Mode
Shrinking FreeBSD
Packages and System Upgrades
Updating Installed Ports
Chapter 19: Advanced Security Features
Unprivileged Users
The nobody Account
A Sample Unprivileged User
Network Traffic Control
Default Accept vs. Default Deny
TCP Wrappers
Configuring Wrappers
Wrapping Up Wrappers
Packet Filtering
Enabling PF
Default Accept and Default Deny in Packet Filtering
Basic Packet Filtering and Stateful Inspection
Configuring PF
Small-Server PF Rule Sample
Managing PF
Blacklistd(8)
PF and Blacklistd
Configuring Blacklistd
Configuring Blacklistd Clients
Managing Blacklistd
De-Blacklisting
Public-Key Encryption
OpenSSL
Certificates
TLS Trick: Connecting to TLS-Protected Ports
Global Security Settings
Install-Time Options
Secure Console
Nonexecutable Stack and Stack Guard
Other Security Settings
Preparing for Intrusions with mtree(1)
Running mtree(1)
mtree(1) Output: The Spec File
The Exclusion File
Saving the Spec File
Finding System Differences
Monitoring System Security
Package Security
If You’re Hacked
Chapter 20: Small System Services
Secure Shell
The SSH Server: sshd(8)
SSH Keys and Fingerprints
Configuring the SSH Daemon
Managing SSH User Access
SSH Clients
Email
mailwrapper(8)
The Dragonfly Mail Agent
The Aliases File and DMA
Network Time
Setting the Time Zone
Network Time Protocol
Name Service Switching
inetd
/etc/inetd.conf
Configuring inetd Servers
Starting inetd(8)
Changing inetd’s Behavior
DHCP
How DHCP Works
Configuring dhcpd(8)
Managing dhcpd(8)
Printing and Print Servers
/etc/printcap
Enabling LPD
TFTP
Root Directory
tftpd and Files
File Ownership
tftpd(8) Configuration
Scheduling Tasks
cron(8)
periodic(8)
Chapter 21: System Performance and Monitoring
Computer Resources
Checking the Network
General Bottleneck Analysis with vmstat(8)
Processes
Memory
Paging
Disks
Faults
CPU
Using vmstat
Continuous vmstat
Disk I/O
CPU, Memory, and I/O with top(1)
UFS and top(1)
ZFS and top(1)
Process List
top(1) and I/O
Following Processes
Paging and Swapping
Paging
Swapping
Performance Tuning
Memory Usage
Swap Space Usage
CPU Usage
Rescheduling
Reprioritizing with Niceness
Status Mail
Logging with syslogd
Facilities
Levels
Processing Messages with syslogd(8)
syslogd Customization
Log File Management
Log File Path
Owner and Group
Permissions
Count
Size
Time
Flags
Pidfile
Signal
Sample newsyslog.conf Entry
FreeBSD and SNMP
SNMP 101
Configuring bsnmpd
Chapter 22: Jails
Jail Basics
Jail Host Server Setup
Jail Host Storage
Jail Networking
Jails at Boot
Jail Setup
Jail Userland
/etc/jail.conf
Testing and Configuring a Jail
Jail Startup and Shutdown
Jail Dependencies
Managing Jails
Viewing Jails and Jail IDs
Jailed Processes
Running Commands in Jails
Installing Jail Packages
Updating Jails
More Jail Options
Jailing Ancient FreeBSD
Last Jail Notes
Chapter 23: The Fringe of FreeBSD
Terminals
/etc/ttys Format
Insecure Console
Managing Cloudy FreeBSD
LibXo
Universal Configuration Language
Diskless FreeBSD
Diskless Clients
DHCP Server Setup
tftpd and the Boot Loader
Diskless Security
The NFS Server and the Diskless Client Userland
Diskless Farm Configuration
Configuration Hierarchy
Diskless Remounting /etc
Finalizing Setup
Installing Packages
SSH Keys
Storage Encryption
Generating and Using a Cryptographic Key
Filesystems on Encrypted Devices
Chapter 24: Problem Reports and Panics
Bug Reports
Before Filing a Bug
Bad Bug Reports
The Fix
Filing Bugs
After Submitting
System Panics
Recognizing Panics
Responding to a Panic
Preparations
The Crash Dump in Action
Testing Crash Dumps
Crash Dump Types
Textdumps
Dumps and Security
Afterword
The FreeBSD Community
Why Do We Do It?
What Can You Do?
If Nothing Else . . .
Getting Things Done
Bibliography
References
Books I\'ve Written
Index