Table of Contents

Information

TODOs

Download

FreeBSD-14.2-RELEASE-amd64-memstick.img

Installation Notes

Partitioning

System Configuration

System Hardening

User

Network

Network

USB Tethering

su -
sysrc ifconfig_ue0=SYNCDHCP
/etc/netstart

Time Sync

su -
ntpd -g -q

Update

FreeBSD

su -
freebsd-update fetch install
sync && reboot

pkg

su -
pkg update -f
pkg upgrade

Xorg

su -
pkg install xorg 'drm-515-kmod' 'gpu-firmware-intel-kmod-kabylake'
pw groupmod video -m espionage724
sysrc kld_list+=i915kms

Xfce

su -
pkg install xfce
ee /etc/fstab
# Xfce
proc /proc procfs rw 0 0
sysrc dbus_enable="YES"
echo '. /usr/local/etc/xdg/xfce4/xinitrc' > /home/espionage724/.xinitrc
chown espionage724:espionage724 /home/espionage724/.xinitrc
sync && reboot

Login

startx

Software

Repos

FreeBSD-latest

su -
mkdir -p '/usr/local/etc/pkg/repos' && ee '/usr/local/etc/pkg/repos/FreeBSD-latest.conf'
FreeBSD: { enabled: no }

FreeBSD-latest: {
  url: "pkg+https://pkg.freebsd.org/${ABI}/latest",
  enabled: yes,
  priority: 0,
  mirror_type: "SRV",
  signature_type: "FINGERPRINTS",
  fingerprints: "/usr/share/keys/pkg"
}

FreeBSD-kmods

su -
mkdir -p '/usr/local/etc/pkg/repos' && ee '/usr/local/etc/pkg/repos/FreeBSD-kmods-latest.conf'
FreeBSD-kmods-latest: {
  url: "pkg+https://pkg.freebsd.org/${ABI}/kmods_latest_${VERSION_MINOR}",
  enabled: yes,
  priority: 1,
  mirror_type: "SRV",
  signature_type: "FINGERPRINTS",
  fingerprints: "/usr/share/keys/pkg"
}

Initial

su -
pkg install xdg-user-dirs filezilla firefox

XDG Dirs

exit
xdg-user-dirs-update --force

General

su -
pkg install evince-lite thunderbird foliate gbrainy gimp keepassxc libreoffice mate-calc mpv ristretto thunar-archive-plugin transmission-gtk vlc xfce4-screensaver xfce4-screenshooter-plugin xfce4-whiskermenu-plugin android-tools aria2 cups en-freebsd-doc en-hunspell gnome-keyring gstreamer1-plugins-good gstreamer1-plugins-ugly gstreamer1-libav gtk-sharp30 htop icoutils libressl mesa-demos mesa-devel noto unar wget xarchiver xrandr yt-dlp 

Chicago95

chicago95

rox-filer

rox-filer

Fastfetch

fastfetch

Wine

wine-devel wine-gecko-devel wine-mono-devel winetricks

Intel

libva-intel-media-driver

Games

neverball

Doomsday Engine

doomsday fluid-soundfont

FlightGear

flightgear flightgear-data

Tor Browser

tor-browser

Settings

Groups

su -
pw groupmod 'operator' -m 'espionage724'

32-bit Wine

exit
'/usr/local/share/wine/pkg32.sh' update -f && '/usr/local/share/wine/pkg32.sh' upgrade
'/usr/local/share/wine/pkg32.sh' install wine-devel mesa-dri gstreamer1-plugins-good gstreamer1-plugins-ugly gstreamer1-libav libressl
'/usr/local/share/wine/pkg32.sh' autoremove

MIME

gio mime 'text/plain' 'org.xfce.mousepad.desktop'
gio mime 'image/jpeg' 'org.xfce.ristretto.desktop'
gio mime 'image/png' 'org.xfce.ristretto.desktop'
gio mime 'image/bmp' 'org.xfce.ristretto.desktop'
gio mime 'application/pdf' 'org.gnome.Evince.desktop'
gio mime 'application/epub+zip' 'com.github.johnfactotum.Foliate.desktop'

Xfce

Appearance

008080

Panel 1

Items

Whisker Menu

Window Buttons

Clock

%a, %b %d
%l:%M %P

Power Manager

Terminal

Window Manager

Window Manager Tweaks

Xfce Screensaver

Settings

xfconf-query --channel 'xfwm4' --property '/general/vblank_mode' --type 'string' --set 'off' --create
xfconf-query --channel 'thunar' --property '/misc-volume-management' --set 'false'
xfconf-query --channel 'thunar' --property '/misc-show-delete-action' --set 'true'
xfconf-query --channel 'xfce4-notifyd' --property '/theme' --type 'string' --set 'Chicago95' --create
xfconf-query --channel 'xfce4-terminal' --property '/misc-show-unsafe-paste-dialog' --set 'false'
xfconf-query --channel 'xfce4-terminal' --property '/font-use-system' --set 'true'

Keyboard

Behavior

Shortcuts

bash -c "secret-tool lookup 'keepass' 'default' | keepassxc --pw-stdin ~/'Documents/keepass.kdbx'"
xfce4-terminal --title='FreeBSD Updater' --command "su - 'root' -c 'freebsd-update fetch install && pkg update --force && pkg upgrade && sync && echo 'Done' && sleep '3''"
xfce4-popup-whiskermenu
mixer 'vol'='+5%' > '/dev/null'
mixer 'vol'='-5%' > '/dev/null'
mixer 'vol'='mute=toggle' > '/dev/null'
backlight incr '10'
backlight decr '10'

Keys

xfconf-query

xfconf-query --channel 'xfce4-keyboard-shortcuts' --property '/commands/custom/Super_L' --type 'string' --set 'xfce4-popup-whiskermenu' --create
xfconf-query --channel 'xfce4-keyboard-shortcuts' --property '/commands/custom/MonBrightnessUp' --type 'string' --set "backlight incr '10'" --create
xfconf-query --channel 'xfce4-keyboard-shortcuts' --property '/commands/custom/MonBrightnessDown' --type 'string' --set "backlight decr '10'" --create
xfconf-query --channel 'xfce4-keyboard-shortcuts' --property '/commands/custom/AudioRaiseVolume' --type 'string' --set "mixer 'vol'='+5%' > '/dev/null'" --create
xfconf-query --channel 'xfce4-keyboard-shortcuts' --property '/commands/custom/AudioLowerVolume' --type 'string' --set "mixer 'vol'='-5%' > '/dev/null'" --create
xfconf-query --channel 'xfce4-keyboard-shortcuts' --property '/commands/custom/AudioMute' --type 'string' --set "mixer 'vol'='mute=toggle' > '/dev/null'" --create

loader.conf

Spinesnap

su -
ee '/boot/loader.conf'
security.bsd.allow_destructive_dtrace=0
autoboot_delay=2
hw.usb.usbhid.enable=1
hw.acpi.video.lcd0.fullpower=100
hw.i915kms.enable_psr=0
hw.i915kms.enable_fbc=0
hw.i915kms.enable_dc=0
hw.i915kms.disable_power_well=0

Unused

hw.acpi.osname="Windows 2017"
exec="gop set 0"

Boot Commands

boot
gop list

rc.conf

Spinesnap

su -
ee '/etc/rc.conf'
clear_tmp_enable="YES"
syslogd_flags="-ss"
hostname="Spinesnap"
ifconfig_em0="inet 192.168.1.150 netmask 255.255.255.0"
defaultrouter="192.168.1.1"
ifconfig_em0_ipv6="inet6 accept_rtadv"
local_unbound_enable="YES"
moused_nondefault_enable="NO"
# Set dumpdev to "AUTO" to enable crash dumps, "NO" to disable
dumpdev="NO"
kld_list="i915kms acpi_video"
dbus_enable="YES"
webcamd_enable="YES"

sysctl.conf

Spinesnap

su -
ee '/etc/sysctl.conf'
dev.hwpstate_intel.0.epp=0
security.bsd.see_other_uids=0
security.bsd.see_other_gids=0
security.bsd.see_jail_proc=0
security.bsd.unprivileged_read_msgbuf=0
security.bsd.unprivileged_proc_debug=0
kern.randompid=1
dev.hwpstate_intel.0.epp=0

device.hints

Spinesnap

su -
ee '/boot/device.hints'
hint.hdac.0.cad0.nid20.config="as=1 seq=0"
hint.hdac.0.cad0.nid33.config="as=1 seq=15 device=Headphones"

Backlight

su -
sysrc kld_list+="acpi_video"

Network

local-unbound DNS

cat '/etc/rc.conf' | grep 'local_unbound_enable'
cat '/etc/resolv.conf'
su -
ee '/etc/resolv.conf'
nameserver 127.0.0.1
options edns0

Printer

CUPS

su - root -c 'service cupsd onestart'
su - root -c 'service cupsd onestop'

Printer

ipp://192.168.1.164/ipp/print
Kole

Game Controllers

mpv

mkdir -p ~/'.config/mpv' && ee ~/'.config/mpv/mpv.conf'
save-position-on-quit
sub-auto=fuzzy
force-window=yes
profile=gpu-hq
scale=ewa_lanczossharp
cscale=ewa_lanczossharp
video-sync=display-resample
interpolation
tscale=oversample
hwdec=vaapi
hwdec-codecs=all

OpenJDK

su -
ee '/etc/fstab'
# OpenJDK
fdesc /dev/fd fdescfs rw 0 0
mount | grep 'fdescfs on /dev/fd'
mount | grep 'procfs on /proc'

KeePassXC

Settings

Database Password on Keyring

secret-tool store --label='KeePass' 'keepass' 'default'

Secure Shell

Drive Maintenance

ZFS

Wine

Xorg

Full RGB HDMI

ee ~/'.xinitrc'
xrandr --output 'HDMI-1' --set 'Broadcast RGB' 'Full'
xrandr --output 'HDMI-1' --set 'content type' 'Game'
xrandr --output 'HDMI-1' --set 'Colorspace' 'opRGB'
'.' '/usr/local/etc/xdg/xfce4/xinitrc'

Tweaks

su -
ee '/usr/local/etc/profile.d/general-tweaks.sh'
# GTK
export GSK_RENDERER='gl'

# Mesa
export mesa_glthread='false'
export MESA_NO_ERROR='1'

# Intel
export ANV_PRIMITIVE_REPLICATION_MAX_VIEWS='0'
export ANV_NO_GPL='1'

# End

Firefox

Notable Folders and Commands

4)
random fastfetches might show p1 still; kernel update?
5)
Intel UHD 630, no TB, no dGPU
6)
when set from a USB keyboard, requires hw.usb.usbhid.enable=1
7)
Spinesnap requires acpi_video
8)
presumably double-sided printing, flip-on-long-edge