• FreeBSD ¹⁾
• 15.1

• Alira = VPS ²⁾

uname -aKU

FreeBSD Alira 15.1-RELEASE-p2 FreeBSD 15.1-RELEASE-p2 releng/15.1-n283596-aadd58dddcbc GENERIC amd64 1501000 1501000

• https://download.freebsd.org/releases/ISO-IMAGES/15.1/

FreeBSD-15.1-RELEASE-amd64-bootonly.iso

• Packages (Tech Preview)

• https://docs.freebsd.org/en/books/handbook/bsdinstall/#bsdinstall-partitioning
• Auto (UFS)
• MBR

DEVICE         MAJ:MIN  SIZE TYPE                                    LABEL MOUNT
vtbd0            0:83    10G MBR                                         - -
  <FREE>         -:-     512 -                                           - -
  vtbd0s1        0:84    10G BSD                               gpt/freebsd -
    vtbd0s1a     0:86   9.5G freebsd-ufs                                 - /
    vtbd0s1b     0:87   512M freebsd-swap                                - SWAP
    <FREE>       -:-    992K -                                           - -

• https://docs.freebsd.org/en/books/handbook/bsdinstall/#bsdinstall-components
• [x] base
• [x] optional

• https://docs.freebsd.org/en/books/handbook/bsdinstall/#bsdinstall-sysconf
• [x] sshd

• https://docs.freebsd.org/en/books/handbook/bsdinstall/#bsdinstall-hardening
• [x] Everything

• Invite to other groups: wheel
• Shell: sh

• Manual Ethernet (vtnet0)
• Static IPv4
• No IPv6

• Continue from ssh

su -

ntpd -g -q

su -

pkg update -f

pkg upgrade

su -

pkg install htop libressl

su -

ee '/boot/loader.conf'

security.bsd.allow_destructive_dtrace="0"
console="nullconsole"
autoboot_delay="1"

su -

ee '/etc/rc.conf'

clear_tmp_enable="YES"
syslogd_flags="-ss"
hostname="Alira"
ifconfig_vtnet0="x"
defaultrouter="x"
sshd_enable="YES"
moused_nondefault_enable="NO"
# Set dumpdev to "AUTO" to enable crash dumps, "NO" to disable
dumpdev="NO"
nginx_enable="YES"
php_fpm_enable="YES"
moused_enable="NO"
moused_type="NO"
mixer_enable="NO"

• TODO

su -

mkdir -p '/usr/local/etc/profile.d' && echo "export LD_BIND_NOW='1'" | tee '/usr/local/etc/profile.d/general-tweaks.sh' > '/dev/null'

• malloc.conf

su -

echo 'abort:false,confirm_conf:false,abort_conf:false,percpu_arena:phycpu,dirty_decay_ms:-1,muzzy_decay_ms:-1,stats_print:false,junk:false,zero:false,utrace:false,xmalloc:false,zero_realloc:free,trust_madvise:true,retain:true' | tee '/etc/malloc.conf' > '/dev/null'

su -

ee '/etc/fstab'

,noatime

mkdir -p ~/'.local/scripts' && ee ~/'.local/scripts/freebsd-updater.sh' && chmod +x ~/'.local/scripts/freebsd-updater.sh'

#!/bin/sh

'/usr/sbin/ntpd' -g -q > '/dev/null'

'/usr/sbin/pkg' update -f
'/usr/sbin/pkg' upgrade -y
'/usr/sbin/pkg' autoremove -y

'/bin/sync'
'/sbin/shutdown' -r 'now' 'FreeBSD OS Updater'

# End

su 'root' -c ~/'.local/scripts/freebsd-updater.sh'

• Daily 06:00:00 AM (Alira)

su -

ee '/etc/cron.d/freebsd-updater'

#
SHELL=/bin/sh

0 6 * * * root '/home/espionage724/.local/scripts/freebsd-updater.sh'

# End

• See misc