Table of Contents

Information

TODOs

Download

FreeBSD-14.1-RELEASE-amd64-memstick.img

Installation Notes

Partitioning

Notes

ZFS

System Configuration

System Hardening

User

Network

Network

Troubleshooting

su -l
/etc/netstart

Wireless

su -l
ee /etc/wpa_supplicant.conf
network={
 ssid="myssid" 
 psk="mypsk" 
}

USB Tethering

su -
sysrc ifconfig_ue0=SYNCDHCP
/etc/netstart

Update

su -
freebsd-update fetch install
sync && reboot
su -
pkg update --force
pkg upgrade

Xorg

su -
pkg install xorg drm-kmod
pw groupmod video -m espionage724
sysrc kld_list+=i915kms

Xfce

su -
pkg install xfce
ee /etc/fstab
# Xfce
proc /proc procfs rw 0 0
sysrc dbus_enable="YES"
echo '. /usr/local/etc/xdg/xfce4/xinitrc' > /home/espionage724/.xinitrc
chown espionage724:espionage724 /home/espionage724/.xinitrc
sync && reboot

Login

startx

Software

su -
pkg install firefox
pkg install evince-lite evolution filezilla foliate gbrainy gimp keepassxc libreoffice mate-calc mpv thunar-archive-plugin transmission-gtk xfce4-screensaver xfce4-screenshooter-plugin xfce4-whiskermenu-plugin android-tools aria2 cups en-freebsd-doc en-hunspell fluid-soundfont gnome-keyring gstreamer1-plugins-good gstreamer1-plugins-ugly gstreamer1-libav gtk-sharp30 htop icoutils libressl mesa-demos noto unar wget xarchiver xdg-user-dirs xrandr yt-dlp 

Test

TODO

VirtualBox

virtualbox-ose

Wine

wine wine-gecko wine-mono winetricks

Intel

libva-intel-driver

Games

devilutionx doomsday neverball xonotic

FlightGear

flightgear flightgear-data
fgfs --launcher
fgjs

Other

minecraft-client

Tor Browser

tor-browser

Settings

Groups

su -l
pw groupmod 'operator' -m 'espionage724'

XDG Dirs

xdg-user-dirs-update --force

32-bit Wine

'/usr/local/share/wine/pkg32.sh' install wine mesa-dri gstreamer1-plugins-good gstreamer1-plugins-ugly gstreamer1-libav libressl
'/usr/local/share/wine/pkg32.sh' update --force
'/usr/local/share/wine/pkg32.sh' upgrade

Xfce

Appearance

Panel Preferences

Terminal

Window Manager

loader.conf

Spinesnap

su -
ee '/boot/loader.conf'
ecurity.bsd.allow_destructive_dtrace=0
kern.geom.label.disk_ident.enable="0"
kern.geom.label.gptid.enable="0"
cryptodev_load="YES"
zfs_load="YES"
autoboot_delay="2"
hw.usb.usbhid.enable="1"

Unused

hw.acpi.osname="Windows 2017"
exec="gop set 0"

Boot Commands

boot
gop list

rc.conf

Spinesnap

su -
ee '/etc/rc.conf'
clear_tmp_enable="YES"
syslogd_flags="-ss"
hostname="Spinesnap"
ifconfig_em0="inet 192.168.1.150 netmask 255.255.255.0"
defaultrouter="192.168.1.1"
local_unbound_enable="YES"
ntpd_enable="YES"
ntpd_sync_on_start="YES"
moused_nondefault_enable="NO"
# Set dumpdev to "AUTO" to enable crash dumps, "NO" to disable
dumpdev="NO"
zfs_enable="YES"
kld_list="i915kms"
dbus_enable="YES"
cupsd_enable="YES"

sysctl.conf

Spinesnap

su -
ee '/etc/sysctl.conf'
security.bsd.see_other_uids=0
security.bsd.see_other_gids=0
security.bsd.see_jail_proc=0
security.bsd.unprivileged_read_msgbuf=0
security.bsd.unprivileged_proc_debug=0
kern.randompid=1
vfs.zfs.min_auto_ashift=12
dev.hwpstate_intel.0.epp=0

syslog.conf

all.log

Enable

su -l
ee '/etc/syslog.conf'
#*.*                                            /var/log/all.log

Permissions

su -l
touch '/var/log/all.log' && chmod '600' '/var/log/all.log'

View

su -l
ee '/var/log/all.log'

device.hints

Spinesnap

su -
ee '/boot/device.hints'
hint.hdac.0.cad0.nid20.config="as=1 seq=0"
hint.hdac.0.cad0.nid33.config="as=1 seq=15 device=Headphones"

Keyboard Shortcuts

bash -c "secret-tool lookup 'keepass' 'default' | keepassxc --pw-stdin ~/'Documents/keepass.kdbx'"
xfce4-terminal --title='FreeBSD Updater' --command "su -l 'root' -c 'pkg update --force && pkg upgrade && freebsd-update fetch install && sync && echo 'Done' && sleep '3''"
xfce4-popup-whiskermenu
mixer 'vol'='+5%' >> /dev/null 2>&1
mixer 'vol'='-5%' >> /dev/null 2>&1
mixer 'vol'='mute=toggle' >> /dev/null 2>&1

Keys

Network

local-unbound DNS

su -
ee '/etc/rc.conf'
local_unbound_enable="YES"
ee '/etc/resolv.conf'
nameserver 127.0.0.1
options edns0

Printer

CUPS

su -
ee '/etc/rc.conf'
cupsd_enable="YES"
service 'cupsd' start

Printer

ipp://192.168.1.164/ipp/print

Game Controllers

profile.d

SDL

su -
ee '/usr/local/etc/profile.d/SDL-tweaks.sh'
# SDL
export SDL_SOUNDFONTS='/usr/local/share/sounds/sf2/FluidR3_GM.sf2'
export SDL_AUDIODRIVER='dsp'

# End

VirtualBox

su -l
ee '/boot/loader.conf'
vboxdrv_load="YES"
ee '/etc/rc.conf'
vboxnet_enable="YES"
devfs_system_ruleset="system"
pw groupmod vboxusers -m 'espionage724'
ee '/etc/devfs.conf'
# VirtualBox

own vboxnetctl root:vboxusers
perm vboxnetctl 0660

[system=10]
add path 'usb/*' mode 0660 group operator

perm cd* 0660
perm xpt0 0660
perm pass* 0660

# End

Install Notes

Running VirtualBox as non-root user may fail with a fatal error
NS_ERROR_FACTORY_NOT_REGISTERED. In this case delete /tmp/.vbox-*-ipc file.

If you experience "Network: write Failed: Cannot allocate memory" errors
try to increase net.graph.maxdata in /boot/loader.conf

vm.max_user_wired
https://bugs.freebsd.org/252227

("RAM in GB" - max(1, "RAM in GB" / 32)) * 1024*1024*1024 / PAGE_SIZE
PAGE_SIZE on x86 is 4096.

https://bugs.freebsd.org/259399

KeePassXC

Settings

Add Database Password to GNOME Keyring

secret-tool store --label='KeePass' 'keepass' 'default'

mpv

mkdir -p ~/'.config/mpv' && ee ~/'.config/mpv/mpv.conf'
save-position-on-quit
sub-auto=fuzzy
force-window=yes
profile=gpu-hq
scale=ewa_lanczossharp
cscale=ewa_lanczossharp
video-sync=display-resample
interpolation
tscale=oversample
hwdec=vaapi
hwdec-codecs=all

Secure Shell

Drive Maintenance

Wine

Xorg

Full RGB HDMI

ee ~/'.xinitrc'
xrandr --output HDMI-1 --set "Broadcast RGB" Full
xrandr --output HDMI-1 --set "content type" Game
. /usr/local/etc/xdg/xfce4/xinitrc

Firefox

Notable Folders and Commands

Drive Wipe

gpart show
gpart destroy -F 'da0'

USB Flash Drive

camcontrol devlist
usbconfig -d '/dev/ugen0.6' power_off

User/Group

awk -F":" '{print $1}' /etc/passwd
awk -F":" '{print $1}' /etc/group

pkg

pkg info -l x
pkg autoremove

Handbook

pkg info -l 'en-freebsd-doc'
gio open '/usr/local/share/doc/freebsd/en/books/handbook'

CPU Frequency

su -l root -c "sysctl 'dev.cpu.0.freq' 'dev.cpu.1.freq' 'dev.cpu.2.freq' 'dev.cpu.3.freq' 'dev.cpu.4.freq' 'dev.cpu.5.freq' 'dev.cpu.6.freq' 'dev.cpu.7.freq'"

Network Restart

su -l
/etc/netstart

hw-probe

su -l
pkg install 'hw-probe'
hw-probe -all -upload

Crashdump Clean-up

rm -fv ~/*'.core'

Xfce Settings Reset

rm -fv ~/'.config/xfce4/xfconf/xfce-perchannel-xml/displays.xml'
gio open ~/'.config/xfce4/xfconf/xfce-perchannel-xml'

Audio Output Switch

mixer -a
echo ' Headphones ' && mixer -d 'pcm1' -f '/dev/mixer1'
echo ' Onboard ' && mixer -d 'pcm0' -f '/dev/mixer0'

Logs

newsyslog -v -CC -N
cat '/dev/null' > '/var/log/all.log'
cat '/dev/null' > '/var/log/Xorg.0.log'
gio open '/var/log'
ls -la '/var/log'

Other Files/Paths

5)
dvd1: Additionally, this can be written to a USB memory stick (flash drive) for the amd64 architecture and used to do an install on machines capable of booting off USB drives.
6)
mount -t ufs -o loop,ro,ufstype=ufs2 /dev/nvme0n1p2 /media/p2
7)
zfs module not found; some users mention it hasn't built since kernel 6.3
9)
2024/09/08: Intel Wireless-AC 9560: 30MB/s from NAS with wifibox, 2MB/s native, 15MB/s USB Tether
10)
pkg32.sh has echo “Don't run this script as root!”
11)
default app menu doesn't allow right-clicking desktop entries which prevents extra 2004scape and Wine launcher stuff
12)
seemingly resolves arrow-scrolling-commands text from sometimes getting stuck, and looks better
13)
when set from a USB keyboard, requires hw.usb.usbhid.enable=1
14)
presumably double-sided printing, flip-on-long-edge