• FreeBSD ¹⁾
• 16.0

• Alira = VPS ²⁾

uname -aKU

FreeBSD Alira 16.0-CURRENT FreeBSD 16.0-CURRENT main-n289153-77535f91f623 GENERIC-NODEBUG amd64 1600025 1600025

• https://download.freebsd.org/snapshots/amd64/amd64/ISO-IMAGES/16.0/

FreeBSD-16.0-CURRENT-amd64-20260907-nullhash-nullcount-bootonly.iso

• Packages

• Manual (vtnet0)
• Static IPv4 ³⁾
• No IPv6

• https://docs.freebsd.org/en/books/handbook/bsdinstall/#bsdinstall-partitioning
• Auto (UFS)
• MBR

DEVICE         MAJ:MIN  SIZE TYPE                                    LABEL MOUNT
vtbd0            0:85    25G MBR                                         - -
  <FREE>         -:-     512 -                                           - -
  vtbd0s1        0:86    25G BSD                               gpt/freebsd -
    vtbd0s1a     0:88    24G freebsd-ufs                                 - /
    vtbd0s1b     0:89  1024M freebsd-swap                                - SWAP

• https://docs.freebsd.org/en/books/handbook/bsdinstall/#bsdinstall-components
• [x] base
• [x] optional

• https://docs.freebsd.org/en/books/handbook/bsdinstall/#bsdinstall-sysconf
• [x] sshd
• [x] ntpd
• [x] ntpd_sync_on_start

• https://docs.freebsd.org/en/books/handbook/bsdinstall/#bsdinstall-hardening
• [x] Everything

• Invite to other groups: wheel
• Shell: sh

• Continue from ssh

su -

pkg update -f

pkg upgrade

su -

pkg install 'FreeBSD-kernel-generic-nodebug'

su -

ee '/boot/loader.conf'

kernel="kernel.GENERIC-NODEBUG"

su -

pkg remove 'FreeBSD-kernel-generic'

su -

pkg install htop libressl

su -

ee '/boot/loader.conf'

security.bsd.allow_destructive_dtrace="0"
console="nullconsole"
autoboot_delay="1"

su -

ee '/etc/rc.conf'

clear_tmp_enable="YES"
syslogd_flags="-ss"
hostname="Alira"
ifconfig_vtnet0="x"
defaultrouter="x"
sshd_enable="YES"
moused_nondefault_enable="NO"
# Set dumpdev to "AUTO" to enable crash dumps, "NO" to disable
dumpdev="NO"
nginx_enable="YES"
php_fpm_enable="YES"
moused_enable="NO"
moused_type="NO"
mixer_enable="NO"

• TODO

su -

mkdir -p '/usr/local/etc/profile.d' && echo "export LD_BIND_NOW='1'" | tee '/usr/local/etc/profile.d/general-tweaks.sh' > '/dev/null'

• malloc.conf

su -

echo 'abort:false,confirm_conf:false,abort_conf:false,percpu_arena:phycpu,dirty_decay_ms:-1,muzzy_decay_ms:-1,stats_print:false,junk:false,zero:false,utrace:false,xmalloc:false,zero_realloc:free,trust_madvise:true,retain:true' | tee '/etc/malloc.conf' > '/dev/null'

su -

ee '/etc/fstab'

,noatime

mkdir -p ~/'.local/scripts' && ee ~/'.local/scripts/freebsd-updater.sh' && chmod +x ~/'.local/scripts/freebsd-updater.sh'

#!/bin/sh

'/usr/sbin/ntpd' -g -q > '/dev/null'

'/usr/sbin/pkg' update -f
'/usr/sbin/pkg' upgrade -y
'/usr/sbin/pkg' autoremove -y

'/bin/sync'
'/sbin/shutdown' -r 'now' 'FreeBSD OS Updater'

# End

su 'root' -c ~/'.local/scripts/freebsd-updater.sh'

• Daily 06:00:00 AM (Alira)

su -

ee '/etc/cron.d/freebsd-updater'

#
SHELL=/bin/sh

0 6 * * * root '/home/espionage724/.local/scripts/freebsd-updater.sh'

# End

• See misc