====== Information ======

  * FreeBSD ((https://www.freebsd.org/))
  * 14.2-RELEASE (([[https://www.freebsd.org/releases/14.2R/relnotes/|relnotes]], [[https://www.freebsd.org/releases/14.2R/announce/|announce]]))

  FreeBSD 14.2-RELEASE-p3

====== TODOs ======

  * [[bsd;notes;freebsd]]
  * Lastest pkgs [[bsd:freebsd_14.2_xfce#freebsd-latest]]
  * Oak = ASUS motherboard Legacy/MBR with Phenom II X4 (TODO: mobo name)
  * Alira = Dell Precision M6500 Legacy/MBR (UFS, no local-unbound; various notes need updating)

====== Download ======

  * https://download.freebsd.org/releases/amd64/amd64/ISO-IMAGES/14.2/

  FreeBSD-14.2-RELEASE-amd64-memstick.img

====== Installation Notes ======

===== Partitioning =====

  * https://docs.freebsd.org/en/books/handbook/bsdinstall/#bsdinstall-partitioning

  * ZFS
  * ''stripe'' (1 SATA SSD)
  * :!: Not forced 4K Sectors
  * GPT (BIOS)

===== System Configuration =====

  * https://docs.freebsd.org/en/books/handbook/bsdinstall/#bsdinstall-sysconf

  * [x] ''sshd''
  * [x] ''ntpd''
  * [x] ''ntpd_sync_on_start''

===== System Hardening =====

  * https://docs.freebsd.org/en/books/handbook/bsdinstall/#bsdinstall-hardening

  * [x] Everything

===== User =====

  * https://docs.freebsd.org/en/books/handbook/bsdinstall/#bsdinstall-addusers

  * Invite to other groups: ''wheel''
  * Shell: ''sh''

===== Network =====

  * Static on Ethernet (''em0'')

====== Update ======

  * Post-install

===== FreeBSD =====

  * https://docs.freebsd.org/en/books/handbook/cutting-edge/#freebsdupdate-security-patches

  su -

  freebsd-update fetch install

  sync && reboot

===== pkg =====

  su -

  pkg update --force

  pkg upgrade

===== AIO =====

  freebsd-update fetch install && pkg update --force && pkg upgrade

  su - 'root' -c 'freebsd-update fetch install && pkg update --force && pkg upgrade'

==== SSH ====

****

  ssh '192.168.1.152' -t "su - 'root' -c 'freebsd-update fetch install && pkg update --force && pkg upgrade'"

====== Software ======

===== General =====

  su -

  pkg install aria2 en-freebsd-doc htop libressl unar wget

====== Settings ======

===== Groups =====

  * ''operator'' to allow general reboot/power-off

  su -

  pw groupmod 'operator' -m 'espionage724'

===== loader.conf =====

==== Alira ====

  su -

  ee '/boot/loader.conf'

<code>
security.bsd.allow_destructive_dtrace=0

# General
autoboot_delay=2

# Ethernet
hw.bge.allow_asf=0

# End</code>

===== rc.conf =====

==== Alira ====

  su -

  ee '/etc/rc.conf'

<code>
clear_tmp_enable="YES"
syslogd_flags="-ss"
hostname="Alira"
ifconfig_bge0="inet 192.168.1.152 netmask 255.255.255.0"
defaultrouter="192.168.1.1"
ifconfig_bge0_ipv6="inet6 accept_rtadv"
sshd_enable="YES"
ntpd_enable="YES"
ntpd_sync_on_start="YES"
moused_nondefault_enable="NO"
# Set dumpdev to "AUTO" to enable crash dumps, "NO" to disable
dumpdev="NO"
nginx_enable="YES"
php_fpm_enable="YES"
mysql_enable="YES"</code>

===== Network =====

==== local-unbound DNS ====

  * https://docs.freebsd.org/en/books/handbook/network/#configuring-nameserver
  * Already done during install by ''local_unbound''

  cat '/etc/rc.conf' | grep 'local_unbound_enable'

  cat '/etc/resolv.conf'

  su -

  ee '/etc/resolv.conf'

<code>
nameserver 127.0.0.1
options edns0</code>

===== Secure Shell =====

  * TODO

===== Drive Maintenance =====

==== ZFS ====

  * TODO [[bsd:notes:zfs_nas_format]]

====== Notable Folders and Commands ======

  * See [[bsd;notes;misc]]