Differences

This shows you the differences between two versions of the page.


—openbsd [2020/11/09 09:12] (current) – created - external edit 127.0.0.1
Line 1: Line 1:
 +====== OpenBSD ======
 +
 +  * [[OpenBSD Apache]]
 +  * [[OpenBSD Bugzilla]]
 +  * [[OpenBSD Encrypted Filesystem]]
 +  * [[OpenBSD Install]]
 +  * [[OpenBSD LiveUSB]]
 +  * [[OpenBSD MySQL]]
 +  * [[OpenBSD nginx]]
 +  * [[OpenBSD PHP]]
 +  * [[OpenBSD VPN]]
 +
 +  * [[ksh]]
 +  * [[pkg_add]]
 +  * [[pkg_delete]]
 +  * [[pkg_info]]
 +  * [[pkg_mgr]]
 +  * [[xdm]]
 +
 +  * [[OpenBSD Packages]] - binary builds (recommended, [[http://openbsd.org/faq/faq15.html#PkgVsPorts|link]])
 +  * [[OpenBSD Ports]] - source builds
 +
 +  * [[https://wiki.boetes.org/start|#OpenBSD wiki]]
 +  * [[http://openports.se/|OpenBSD Ports]] - Search ports
 +  * [[http://openbsd.org/faq/upgrade53.html]] - Upgrade guide: 5.2 to 5.3
 +  * [[http://cromwell-intl.com/linux/openbsd-kernel.html|How to Upgrade OpenBSD and Build a Kernel]] - good for location kernel sources
 +  * [[https://www.openbsdhandbook.com/|OpenBSD Handbook]]
 +  * [[https://api.nephi.org/scriptures/?q=1+Nephi+1%3A1&format=human|OpenBSD Router Guide]]
 +
 +  * ''man afterboot'' - official docs are in man pages
 +==== Installation ====
 +
 +  * [[http://www.openbsd.org/faq/faq4.html|OpenBSD Installation Guide]]
 +  * [[http://en.wikipedia.org/wiki/OpenBSD_security_features|OpenBSD Security Features]]
 +
 +OpenBSD is a great OS to install for a system that relies on security, such as a public web server.  Some positive reasons for using OpenBSD are that it is proactively audited for security, it partitions the filesystem into different directories to limit access and permissions, it runs Apache 1.3 and nginx in a chroot, the system binaries are statically-linked, which makes setting up a root jail very simple.
 +
 +As of this writing, OpenBSD 5.5 is the latest version available.
 +
 +Installation is simple -- download the ''install55.iso'' as the main CD, and boot off it.  Use the defaults for each step.
 +
 +  * [[ftp://ftp.openbsd.org/pub/OpenBSD/5.5/amd64/|OpenBSD FTP mirror, 5.5 amd64]]
 +
 +I'd recommend giving the filesystem at least 24 GB of HDD space so that there's enough room for applications and some basic hosted services.  On a virtual machine, you can always add space later, if that's a consideration, but it's going to make life much simpler if you let the installer deal with modifying partitions and mount points.
 +
 +==== First Boot ====
 +
 +  * [[http://man.openbsd.org/OpenBSD-current/man8/afterboot.8|man afterboot]]
 +
 +After initial boot, there's some basics to go through: setting up networking, the shell parameters, and package management.
 +
 +=== Networking ===
 +
 +The OpenBSD installer will use DHCP by default for the primary network device, so you shouldn't need to worry there.
 +
 +The next step is to set the hostname for the server:
 +
 +<code>
 +echo openbsd.beandog.org > /etc/myname
 +</code>
 +
 +Then add the entries to ''/etc/hosts'' as well.
 +
 +=== ksh ===
 +
 +OpenBSD uses the [[ksh]] shell by default.  It is comparable to bash when it comes to features.
 +
 +On login, the shell will read the ''~/.profile'' file.  It //will not// read the ''~/.kshrc'' file by default -- the profile file must be updated.
 +
 +Add this to the file:
 +
 +<code>
 +ENV=$HOME/.kshrc; export ENV
 +</code>
 +
 +=== Package Management ===
 +
 +The preferred and recommended way to install packages on OpenBSD is through the binary packages.  Don't use the ports system -- you'll quickly use up all your space across the various partitions, and it's not worth it.  The packages are of good quality and have everything you'd need to get up and running.  Admittedly, the only drawback is that it's difficult finding which packages are available.
 +
 +The ''.kshrc'' file above will set the proper ''PKG_PATH'' variable so that the next step is to simply use ''pkg_add'' to install packages.  For the sake of verbosity, here is the command repeated again:
 +
 +<code>
 +export PKG_PATH=http://ftp.openbsd.org/pub/OpenBSD/`uname -r`/packages/`uname -p`
 +</code>
 +
 +From there, you can start installing some [[http://beandog.org/openbsd/packages/|base packages]].
 +
 +There are two guis you can use to browse the tree and see what's installed: webmin and pkg_mgr.  Webmin has to be installed traditionally, but you will need the SSLeay perl module first:
 +
 +<code>
 +pkg_add p5-Net-SSLeay
 +</code>
 +
 +The second option is pkg_mgr, which is a nice ncurses frontend to browse / search / install packages.
 +
 +<code>
 +pkg_add pkg_mgr
 +pkg_mgr
 +</code>
 +
 +==== Other ====
 +
 +== System Services ==
 +
 +All modifications from the defaults in ''/etc/rc.conf'' need to go into ''/etc/rc.conf.local''.  Do not edit the default ''rc.conf'' file.
 +
 +Add any manual scripts to run in ''/etc/rc.local''.
 +
 +== Users ==
 +
 +Run ''adduser'', an interactive script to create new users.
 +
 +Run ''rmuser'' to delete a user.  This will also delete their home directory, and any crontab entries.
 +
 +== Cron ==
 +
 +Cron logs are located at ''/var/cron/log''
 +
 +
 +=== Initial Setup ===
 +
 +These docs will follow the method of using the ''-stable'' branch, by rebuilding the sources with updates.
 +
 +== Releases ==
 +
 +  * RELEASE: What is on the CD.
 +  * STABLE: Release, plus security and reliability enhancements.
 +  * CURRENT: The development version of OpenBSD.
 +
 +== Hardware ==
 +
 +IDE drives are named starting with ''/dev/wd0''.  SCSI drives are named starting with ''/dev/sd0''.
 +
  

Trace:

Navigation
QR Code
QR Code openbsd (generated for current page)