Basic FreeBSD Setup (FreeBSD占有率99.8% ^_^)

11842阅读　2评论2011-10-03　ulovko
分类：BSD

官方简体中文安装手册：
官方en_US安装手册：
官方简体中文安装手册 下载： 

1: 使用 USB 安装 FreeBSD（设备编号自行修改）

  1. # dd if=9.1-RELEASE-amd64-memstick.img of=/dev/da1 bs=10240 conv=sync
Tips: Windows环境下如何将 *.img 写入USB ？ 
Image Writer for Windows:  https://launchpad.net/win32-image-writer/+download

安装source 和 ports
  1. 等待重启完成 ...
  2. # vi /boot/loader.conf
  3. loader_logo="beastie" (boot menu logo)
  4. autoboot_delay="3" (boot delay)
  5. :wq

  7. # vi /etc/rc.conf
  8. blanktime="600"
  9. saver="daemon"
  10. hald_enable="YES"
  11. dbus_enable="YES"
  12. powerd_enable="YES"
  13. powerd_flags="-a adaptive -b adaptive -n adaptive"  # 保持温度不会过高就是了
  14. :wq

  16. # kldload coretemp
  17. # sysctl -a |grep temper
  18. hw.acpi.thermal.tz0.temperature: 60.0C
  19. dev.cpu.0.temperature: 59.0C
  20. dev.cpu.1.temperature: 59.0C
  21. dev.cpu.2.temperature: 59.0C
  22. dev.cpu.3.temperature: 59.0C
  23. dev.cpu.4.temperature: 61.0C
  24. dev.cpu.5.temperature: 62.0C
  25. dev.cpu.6.temperature: 59.0C
  26. dev.cpu.7.temperature: 59.0C
检查一下硬件信息

  1. # dmesg | grep attached （列出没有被驱动的硬件） 
  2. # pciconf -lv （更加详细）   /var/run/dmesg.boot (see also)
  3. （找到声卡 和 显卡加载相应驱动）
声卡 驱动


  2. # kldload snd_driver （加载所有声卡驱动自动匹配）
  3. # cat /dev/sndstat (查看声卡驱动信息）
  4. # dmesg | grep hdac
  5. # cat filename > /dev/dsp (测试声卡，filename为任意文件产生噪音说明正常工作）

  7. # vi /boot/device.hints
  8. hint.pcm.0.vol="50" (pcm Module加载时，音量默认为50）
  9. :wq

  11. # Microphone     (话筒)
  12. # mixer

  14. # sysctl dev.pcm.0.play.vchans=4
  15. # sysctl dev.pcm.0.rec.vchans=4 ( 虚拟声道(Virtual Sound Channels)4个音源能够同时播放)
  16. # sysctl hw.snd.maxautovchans=4

 # less /boot/defaults/loader.conf
 /snd (找到所有声卡驱动支持项)
 # pciconf -lv | egrep -i -A3 -B5 'audio|multimedia' (查看device 类型)
 # vi /boot/loader.conf
 snd_hda_load="YES" (启动时加载 声卡驱动/添加自己的声卡驱动)
:wq



2: 时间校准 （很重要）

  1. # tzsetup （时区设置 CST）
  2. # ntpdate cn.pool.ntp.org （校准）

  4. # vi /etc/rc.conf
  5. ntpd_enable="YES" （配置开机启动 ntpd）
  6. ntpd_sync_on_start="YES"
  7. :wq
  8. # /etc/rc.d/ntpd start

  10. # vi /etc/ntp.conf
  11. server 1.cn.pool.ntp.org
  12. server 1.asia.pool.ntp.org
  13. server 2.asia.pool.ntp.org （配置time server）
  14. :wq
  15. # /etc/rc.d/ntpd restart


3：更新 source 和 doc

  1. # cp /usr/share/examples/cvsup/standard-supfile /etc
  2. # cd /etc/; vi standard-supfile
  3. *default host=cvsup.tw.freebsd.org （修改此项）
  4. *default base=/var/db
  5. *default prefix=/usr
  6. *default release=cvs tag=RELENG_9_0
  7. *default delete use-rel-suffix
  8. *default compress
  9. src-all
  10. doc-all tag=.   （添加此项）
  11. :wq
 # csup /etc/standard-supfile

4：ports 和 package 文件下载地址设置

  1. # vi /etc/make.conf (详情：man make.conf)
  2. MASTER_SITE_BACKUP?= \
  3. ftp://ftp.hk.freebsd.org/pub/FreeBSD/distfiles/${DIST_SUBDIR}/\
  4. ftp://ftp.tw.freebsd.org/pub/FreeBSD/distfiles/${DIST_SUBDIR}/\
  5. ftp://ftp.freebsd.org/pub/FreeBSD/distfiles/${DIST_SUBDIR}/ (注意这里没换行了)
  6. MASTER_SITE_OVERRIDE?= ${MASTER_SITE_BACKUP}
  7. CPUTYPE?=core2 (根据情况调整，起到优化作用：me -> i7)
  8. # sysctl hw.model (more /usr/share/example/etc/make.conf)
  9. # dmidecode (DMI table decoder)
  10. INSTALL=install -C (比对已安装文件与最新文件 版本号，低于新版本才安装)
  11. :wq

  1. tcsh/csh:
  2. # vi ~/.cshrc
  3. setenv        PACKAGEROOT        ftp://ftp.tw.freebsd.org
  4. setenv        PKG_TMPDIR        /var/garbage        (package安装后来这里看看：/var/db/pkg)
  5. :wq
  6. # exit            (注销生效)


  9. sh/bash:
  10. $ vi ~/.profile
  11. export PACKAGEROOT=ftp://ftp.tw.freebsd.org
  12. export PKG_TMPDIR=/var/garbage
  13. :wq
  14. # exit            (注销生效)

 #
 # pkg_add -r vim (使用远程服务器安装)
 # pkg_version -v  (list outdated ports that have a newer version available in the Ports)

 # pkg_version -v |grep vim (首先查出版本号)
 # pkg_delete vim-7.3.81
 或者：
 # pkg_delete /var/db/pkg/vim-7.3.81
 # pkg_delete xchat\* (使用通配符)

 # pkg_info |grep -i vim (首先查出版本号)
 # pkg_info -L vim-7.3.81 |less (显示这个软件包安装的所有文件)
 # pkg_info vim-7.3.81
 
查看CPU支持指令集合：
  1. # grep -i features /var/run/dmesg.boot
  2. Features=0xbfebfbff
  3.   Features2=0x98e3fd
  4.   AMD Features=0x28100800
  5.   AMD Features2=0x1

查看当前操作系统开启的指令集合：

  1. # cd /usr/share/mk
  2. # make -V CPUTYPE
  3. core2
  4. # make -V MACHINE_CPU
  5. ssse3 sse3 amd64 sse2 sse mmx


5: 更新 ports ( portmaster)

  1. # portsnap fetch extract   （首次更新port使用此命令）
  2. # portsnap fetch update （日后更新port使用此命令）
  3. vi /etc/crontab
  4. 0 5 * * * root /usr/sbin/portsnap cron update  （自动更新port）
  5. :wq

  7. 安装 portmaster 用于更新 软件包：
  8. # cd /usr/ports/ports-mgmt/portmaster && make install clean
  9. ---------------------------------------------------------------------
  10. # ls /usr/local/etc/portmaster.rc.sample
  11. # vim /usr/local/etc/portmaster.rc
  12. # Do not create temporary backup packages before pkg_delete (-B)
  13. NO_BACKUP=Bopt

  15. # Always delete stale distfiles without prompting (-d)
  16. ALWAYS_SCRUB_DISTFILES=dopt

  18. # Do not run 'make config' for ports that need updating (-G)
  19. PM_NO_MAKE_CONFIG=Gopt

  21. # Be verbose (-v)
  22. PM_VERBOSE=vopt

  24. # Save copies of old shared libraries (recommended) (-w)
  25. SAVE_SHARED=wopt
  26. :wq
  27. ----------------------------------------------------------------------
  28. # /usr/local/sbin/portmaster -L > portmaster.out (列出可更新的软件)
  29. ===>>> linux_base-fc-4_8
  30. ===>>> New version available: linux_base-fc-4_9

  32. # /usr/local/sbin/portmaster linux_base-fc-4_8 (更新 某软件)
  33. # /usr/local/sbin/portmaster -e openoffice.org-2.2.0 (卸载某软件与其依赖)
  34. #
  35. # portmaster -a (升级所有已安装的 ports)
  36. # portmaster -af (always rebuild ports overrides -i)
  37. # portmaster -aG -x ? --no-confirm
  1. # portmaster -r

    [-R] -r name/glob of port directory in /var/db/pkg
             rebuild the specified port, and all ports that depend on it.  The
             list of dependent ports is built according to origin (i.e.,
             category/portname) not by the version number of the installed port.
             So if you do portmaster -r fooport-1.23 and it is necessary to
             restart using -R but the newly installed port is now fooport-1.24 you
             can do portmaster -R -r fooport-1.24 and it should pick up where you
             left off.  The -r option can be specified more than once.

    # cd /usr/ports/sysutils/bsdadminscripts/ && make install clean
    > pkg_libchk                   (检查缺失的动态库，找出有问题的 ports)
    Thunar-1.3.0: /usr/local/lib/thunarx-2/thunar-sbr.so misses libpng.so.6
    Thunar-1.3.0: /usr/local/lib/thunarx-2/thunar-sbr.so misses libpng.so.6
    Thunar-1.3.0: /usr/local/lib/thunarx-2/thunar-uca.so misses libpng.so.6
    Thunar-1.3.0: /usr/local/lib/thunarx-2/thunar-uca.so misses libpng.so.6
    Thunar-1.3.0: /usr/local/lib/thunarx-2/thunar-uca.so misses libpng.so.6
    Thunar-1.3.0: /usr/local/lib/thunarx-2/thunar-uca.so misses libpng.so.6
    Thunar-1.3.0: /usr/local/lib/thunarx-2/thunar-wallpaper-plugin.so misses libpng.so.6
    Thunar-1.3.0: /usr/local/lib/thunarx-2/thunar-wallpaper-plugin.so misses libpng.so.6
    Thunar-1.3.0: /usr/local/lib/thunarx-2/thunar-wallpaper-plugin.so misses libpng.so.6
    Thunar-1.3.0: /usr/local/lib/xfce4/panel/plugins/libthunar-tpa.so misses libpng.so.6
    Thunar-1.3.0: /usr/local/lib/xfce4/panel/plugins/libthunar-tpa.so misses libpng.so.6
    Thunar-1.3.0: /usr/local/lib/xfce4/panel/plugins/libthunar-tpa.so misses libpng.so.6
    ...
    ...
  2. ports替换升级法（以perl为例）：
    1. > more /usr/ports/UPDATING
    2. AFFECTS: users of lang/perl*
    3. AUTHOR: skv@FreeBSD.org

    5. lang/perl5.16 is out. If you want to switch to it from, for example
    6. lang/perl5.12, that is:

    8. Portupgrade users:
    9. 0) Fix pkgdb.db (for safety):
    10. pkgdb -Ff

    12. 1) Reinstall new version of Perl (5.16):
    13. env DISABLE_CONFLICTS=1 portupgrade -o lang/perl5.16 -f perl-5.12.\*

    15. 2) Reinstall everything that depends on Perl:
    16. portupgrade -fr perl

    18. Portmaster users:
    19. portmaster -o lang/perl5.16 lang/perl5.12

    21. Conservative:
    22. portmaster p5-

    24. Comprehensive (but perhaps overkill):
    25. portmaster -r perl-

    27. Note: If the "perl-" glob matches more than one port you will need to
    28. specify the name of the Perl directory in /var/db/pkg explicitly.

    30. The default version for Perl has also been changed from 5.12 to 5.14.

  4. 另一种更新 软件包 的方法：
  5. # make deinstall && make install clean (前提是你的ports 已经更新！)

  7. 下面方法多用于 测试不同版本软件：
  8. # make install (注意没有：clean ,保留下载的源码！)
  9. # make deinstall && make reinstall (前提是下载的源码没有被清理！)

  11. # make PREFIX=/usr/pkg install clean (Changing the Install Path)

  13. Cleaning Up Ports:
  14. # make install clean (clean a port immediately upon install)

  16. You might also want to remove the original distfiles, stored in /usr/ports/distfiles.
  17. # make distclean (removes the distfiles for the current port and all dependencies)
  18. OR:
  19. # portmaster --clean-distfiles
  20. To clean the entire ports tree
  21. # make clean -DNOCLEANDEPENDS (  run directly under /usr/ports)

  23. Building Packages
  24. # make package
  25. This installs the program on the local machine and creates a package in the port’s directory.
  26. Simply copy this package to other systems and run pkg_add(1) to install it.
  27. If you create the directory /usr/ports/packages, the Ports Collection will
  28. create a packages tree in that location. Instead of placing the new package
  29. in the port’s directory, the port will place the package in the appropriate
  30. category under /usr/ports/packages.
  31. --------------------------------------------------------------------------------
LOCAL PACKAGE REPOSITORIES
Remember the PACKAGESITE environment variable? Set that to a path on your local
anonymous FTP server (Chapter 17) or an NFS share (Chapter 8) and put your custom
packages there. You can then use pkg_add -r on your other machines, and they will
automatically grab packages from your local repository.



6：Binary Updates ( only provides patches to the GENERIC kernel)

  1. # freebsd-update fetch (download the latest updates to your errata branch)
  2. ( files stored in /var/db/freebsd-update)
  3. # freebsd-update install (install the downloaded files)
  4. #
  5. # vi /etc/crontab
  6. 0 5 * * * root /usr/sbin/freebsd-update cron （自动更新至 errata-branch）
  7. :wq
  8. Reboot your system ..


7：安装 Vim

  1. # cd /usr/ports/editors/vim/
  2. # make WITHOUT_X11=yes install clean
  3. # exit (注销）

  5. # vim ~/.vimrc
  6. set nomodeline (这个一定要写，目前有这个安装漏洞）
  7. set nocp
  8. set hls is
  9. set ic
  10. set autoindent
  11. set backspace=2
  12. syntax on
  13. "set bg=dark (更改背景色调/默认为light, " 为注释！)
  14. :wq (详情：vimtutor)

  16. # vim ~/.cshrc
  17. setenv EDITOR vim
  18. :wq
8：使用本地化语言
  1. 方法一：Class Definitions
  2. # vim /etc/login.conf
  3. chinese:Chinese Users Account:\
  4. :charset=UTF-8:\
  5. :lang=zh_CN.UTF-8:\
  6. :tc=default:
  7. :wq
  8. # cap_mkdb /etc/login.conf (rebuilds the database file /etc/login.conf.db)
  9. # pw usermod jacky -L chinese (修改 jacky 的 语言环境)
  10. # pw useradd jacky -L chinese (添加 jacky 并使用中文)

  12. # pw usershow jacky
  13. jacky:*:1001:1001:chinese:0:0:jacky:/home/jacky:/bin/tcsh
  14. # su - jacky
  15. > locale
  16. LANG=zh_CN.UTF-8
  17. LC_CTYPE="zh_CN.UTF-8"
  18. LC_COLLATE="zh_CN.UTF-8"
  19. LC_TIME="zh_CN.UTF-8"
  20. LC_NUMERIC="zh_CN.UTF-8"
  21. LC_MONETARY="zh_CN.UTF-8"
  22. LC_MESSAGES="zh_CN.UTF-8"
  23. LC_ALL=

 方法二：User Definitions
# vim ~/.login_conf
me:\
:lang=zh_CN.UTF-8:\
:setenv=LC_CTYPE=zh_CN.UTF-8:\ (字符类型)
:setenv=LC_COLLATE=zh_CN.UTF-8:\ (字符对比规则)
:setenv=LC_TIME=zh_CN.UTF-8:\ (时间类型)
:setenv=LC_NUMERIC=zh_CN.UTF-8:\ (数字类型)
:setenv=LC_MONETARY=zh_CN.UTF-8:\ (货币类型)
:setenv=LC_MESSAGES=zh_CN.UTF-8:\ (消息/提示类型)
:setenv=LC_ALL=zh_CN.UTF-8:\
:charset=UTF-8:
:wq

 PS: 自定义 prompt 和 alias

 方法一：全局设置

  1. vim /etc/csh.cshrc
  2. set prompt = "%B%n@%m [%/] $ " (详情：man csh /%m)
  3. set autolist (TAB命令补全功能)
 方法二：自定义设置
 vim ~/.cshrc
 set prompt = "%B%n@%m [%/] # " (注意空格)
 set autolist (TAB 命令补全功能)
 alias cl clear
 alias vi vim
 alias df df -h
 

 History： (默认记录文件：~/.history)
 # history -c (清理当前历史记录)
 # history -S (保存当前历史记录)
 

9： Axel / Aria2下载大文件利器 (MP3、影片、软件等)   wget

  1. # cd /usr/ports/ftp/axel && make install clean
  2. # axel -a -n 3 ftp://ftp.kernel.org/pub/linux/kernel/v2.4/linux-2.4.17.tar.bz2 (详情：man axel)

  4. # axel -S4 ftp://ftp.kernel.org/pub/linux/kernel/v2.4/linux-2.4.17.tar.bz2 (自动寻找 4 个最快mirror进行下载)

  6. 通常我用 wget 下网站 (找到资料就下吧！说不准那天站点没了,还是弄下来方便！)
  7. # wget -r -np -p -k --level=2 (wget默认安装)

  9. Aria2 ：多链接下载，轻量，平均4-9MB内存使用量，BitTorrent下载速度2.8MiB/s时CPU占用约6%
  10. # cd /usr/ports/www/aria2 && make install clean

  12. (详情：man aria2c)
  13. # aria2c "" (直接下载)

  15. # aria2c "http://host/file.zip" "ftp://host2/file.zip" (同时从 2 个不同源下载 某文件)

  17. # aria2c -x2 -k1M "" (-x2：一个server只建立 2 个连接 -k1M：man很详细)

  19. # aria2c -s4 (-s：总共启用多少个连接)

  21. # aria2c mylinux.torrent (BT 下载)

  23. # aria2c 'magnet:?xt=urn:btih:248D0A1CD08284299DE78D5C1ED359BB46717D8C'  (BT Magent URI)

  25. # aria2c mylinux.metalink (Metalink)

  27. # aria2c -i files.txt -j2 (Download URIs found in text file -j：同时进行任务数)

  29. Resuming Download：
  30. Usually, you can resume transfer by just issuing same command (aria2c URI)
  31.  if the previous transfer is made by aria2.
  32.  If the previous transfer is made by a browser or wget like sequential download manager,
  33.  then use -c option to continue the transfer (aria2c -c URI)

  35. BitTorrent Download：

  37. # aria2c --follow-torrent=mem "" (download files from remote BT file)
  38. # aria2c --max-upload-limit=40k file.torrent (download using a local torrent file)

  39. Using Proxy:
  40. For HTTP
  41. aria2c --http-proxy="" ""
  42. aria2c --http-proxy="" \
  43. --no-proxy="localhost,127.0.0.1,192.168.0.0/16" ""
    For FTP
  44. aria2c --ftp-proxy="" "ftp://host/file"
    Proxy with Authorization
  45. aria2c --http-proxy="" ""
  46. aria2c --http-proxy="" \
  47. --http-proxy-user="username" --http-proxy-passwd="password" ""

  1. -------------------------------------------------------------------------------------------------------
  2. 也可以应用到ports下载中！(非必需，一般来说FreeBSD的 fetch够用了)
  3. # vim /etc/make.conf
  4. FETCH_CMD=/usr/local/bin/axel -a -S4 (-a：显示每个线程状态信息  -n：连接数)
  5. DISABLE_SIZE=yes (开启 此功能！)
  6. :wq

  8. 穿越模式：
  9. FETCH_ENV=http_proxy=ur address
  10. FETCH_ENV=ftp_proxy=ur address

  12. 或者 使用其他工具： (proxychains / runsocks)
  13. FETCH_CMD=proxychains axel
  14. FETCH_CMD=runsocks axel

  16. PS：wget  axel aria2 配置均一样！

  18. FETCH_CMD=/usr/local/bin/wget -c -t 3 (-c：继续以前的下载  -t：默认tries =20)
  19. DISABLE_SIZE=yes (开启 此功能！)

  21. FETCH_CMD=/usr/local/bin/aria2c -s 4 (-s：开启4 个连接)
  22. DISABLE_SIZE=yes (开启 此功能！)

  23. (在Aria2速度不行的时候，我发现Axel速度确实可以！正常情况匹敌！)
 

10：Scim-pinyin (fcitx-sunpinyin) (ibus-pinyin)输入法

  1. # cd /usr/ports/chinese/scim-pinyin && make install clean
  2. > vim ~/.cshrc
  3. # set scim as the XIM  input server
  4. setenv XMODIFIERS @im=SCIM
  5. :wq

  7. # xfce环境下，支持中文默认用英文情况下（Terminal内右键 Input Methods -SCIM)

  9. # cd /usr/ports/chinese/fcitx-sunpinyin && make install clean
  10. # cd /usr/ports/chinese/fcitx-configtool && make install clean
  11. > vim ~/.cshrc
  12. setenv XMODIFIERS @im=fcitx
  13. setenv GTK_IM_MODULE xim
  14. setenv QT_IM_MODULE xim
  15. :wq
  16. > vim ~/.xinitrc 
  17. #!/bin/sh
  18. /usr/local/bin/fcitx &    # 确保比xfce提前运行！
  19. /usr/local/bin/startxfce4
  20. :wq

  22. # cd /usr/ports/chinese/ibus-pinyin && make install clean
  23. # more /usr/ports/textproc/ibus/pkg-message

  25. -------------------------------------------------------------------
  26. ibus installation finished. To use ibus, please do the following:

  28. If you are using bash, please add following lines to your $HOME/.bashrc:

  30. export XIM=ibus
  31. export GTK_IM_MODULE=ibus
  32. export QT_IM_MODULE=xim
  33. export XMODIFIERS=@im=ibus
  34. export XIM_PROGRAM="ibus-daemon"
  35. export XIM_ARGS="--daemonize --xim"

  37. If you are using tcsh, please add following lines to your $HOME/.cshrc:

  39. setenv XIM ibus
  40. setenv GTK_IM_MODULE ibus
  41. setenv QT_IM_MODULE xim
  42. setenv XMODIFIERS @im=ibus
  43. setenv XIM_PROGRAM ibus-daemon
  44. setenv XIM_ARGS "--daemonize --xim"

  46. If you are using KDE4, you may create a shell script in $HOME/.kde4/env, 
  47. and add following lines:

  49. #!/bin/sh
  50. export XIM=ibus
  51. export GTK_IM_MODULE=ibus
  52. export QT_IM_MODULE=xim
  53. export XMODIFIERS=@im=ibus
  54. export XIM_PROGRAM="ibus-daemon"
  55. export XIM_ARGS="--daemonize --xim"

  57. Following input methods/engines are available in ports:

  59. chinese/ibus-chewing            Chewing engine for IBus
  60. chinese/ibus-pinyin             The PinYin input method
  61. japanese/ibus-anthy             Anthy engine for IBus
  62. japanese/ibus-mozc              Mozc engine for IBus
  63. japanese/ibus-skk               SKK engine for IBus
  64. korean/ibus-hangul              Hangul engine for IBus
  65. textproc/ibus-kmfl              KMFL IMEngine for IBus framework
  66. textproc/ibus-m17n              The m17n IMEngine for IBus framework
  67. textproc/ibus-table             Table based IM framework for IBus

  69. and QT4 input method module, textproc/ibus-qt.

  71. If ibus cannot start or the panel does not appear, please ensure
  72. that you are using up-to-date python.
  73. There's a bug in python 2.5, which may prevent the panel from appearing.
  74. -------------------------------------------------------------------
  75. # vim ~/.xinitrc
  76. #!/bin/sh
  77. /usr/local/bin/ibus-daemon --xim -d    # 确保比xfce提前运行！
  78. /usr/local/bin/startxfce4
  79. :wq


  82. # vim ~/.cshrc
  • setenv XIM ibus
  • setenv GTK_IM_MODULE ibus
  • setenv QT_IM_MODULE xim
  • setenv XMODIFIERS @im=ibus
  • setenv XIM_PROGRAM ibus-daemon
  • setenv XIM_ARGS "--daemonize --xim"
  • :wq



    • 11：Xorg 和 WQY 字库

    1. # cd /usr/ports/x11/xorg && make BATCH=YES install clean

    3. (BATCH=YES: 启用默认配置选项, 不会出现对话框来烦你！)

    5. # Xorg -configure
    6. # mv xorg.conf.new /etc/X11/xorg.conf (生成 xorg 配置文件)

    8. # vim /etc/rc.conf (使用 HAL 自动检测键盘和鼠标)
    9. hald_enable="YES"
    10. dbus_enable="YES"
    11. :wq

    13. # cd /usr/ports/x11-fonts/wqy && make install clean
    14. # vim /etc/X11/xorg.conf
    15.  Section "Files" 
    16.   FontPath "/usr/local/lib/X11/fonts/wqy" (添加 wqy 路径支持)
    17.  EndSection

    19.  Section "Monitor"
    20. Identifier "Monitor0"
    21. VendorName "Monitor Vendor"
    22. ModelName "Monitor Modle"
    23. HorizSync 30-107 (水平刷新频率)
    24. VertRefresh 48-120 (垂直刷新频率)
    25. Option "DPMS" (能源之星/EnergyStar)
    26.  EndSection
    1.  Section "Screen"
    2. Identifier "Screen0"
    3. Device "Card0"
    4. Monitor "Monitor0"
    5. DefaultDepth 24
    6. SubSection "Display"
    7. Viewport 0 0
    8. Depth 24
    9.               Modes "1024x768"
    10.               Virtual   1366 768
    11. EndSubsection
    12.  EndSection
    13. :wq

    PS: 使用 GTF 命令输出刷新频率 如下! 一定要安装 nvidia-settings 否则分辨率永远是 50Hz！

    # gtf 1366 768 60

    # 1366x768 @ 60.00 Hz (GTF) hsync: 47.70 kHz; pclk: 85.86 MHz
    Modeline "1366x768_60.00"  85.86  1366 1440 1584 1800  768 769 772 795  -HSync +Vsync

    1. ection "Monitor"
    2. Identifier "Monitor0"
    3. VendorName "Monitor Vendor"
    4. ModelName "Monitor Modle"
    5. ＃ HorizSync 30-107 (水平刷新频率)
    6. ＃ VertRefresh 48-120 (垂直刷新频率)
    7.      #  1368x768 @ 60.00 Hz (GTF) hsync: 47.70 kHz; pclk: 85.86 MHz
              Modeline "1368x768_60.00"  85.86  1368 1440 1584 1800  768 769 772 795  -HSync +Vsync
    8. Option "DPMS" (能源之星/EnergyStar)
    9.  EndSection
    1.  Section "Screen"
    2. Identifier "Screen0"
    3. Device "Card0"
    4. Monitor "Monitor0"
    5. DefaultDepth 24
    6. SubSection "Display"
    7. Viewport 0 0
    8. Depth 24
    9.               Modes "1366x768"
    10.               Virtual   1366 768
    11. EndSubsection
    12.  EndSection
    13. :wq

    PS：启用 ctrl+alt+backspace 退出 Xorg (默认已关闭该功能)
    方法一：
    # setxkbmap -option terminate:ctrl_alt_bksp

    方法二：
    # vim /usr/local/etc/hal/fdi/policy/x11-input.fdi (hald 会读取该文件)
     
       
          terminate:ctrl_alt_bksp
       
     

    #  vim /etc/X11/xorg.conf
    Section "ServerLayout"
    Option "DontZap" "off"
    EndSection
    :wq

    方法三：使用 Xfce4-session-logout
    # vim ~/.cshrc
    alias logout xfce4-session-logout --logout
    alias   lock    xflock4
    :wq
    # source ~/.cshrc
    12：Nvidia 驱动
    1. # cd /usr/ports/x11/nvidia-driver && make BATCH=YES install clean
    2. # vim /boot/loader.conf
    3. nvidia_load="YES" (启动时加载 driver)
    4. linux_enable="YES"
    5. :wq

    7. # cd /usr/ports/x11/nvidia-xconfig/ && make install clean
    8. # rehash

    10. 方法一：不开启 compiz-fusion 
    11. # nvidia-xconfig (自动替换/etc/X11/xorg.conf 并备份原文件为：org.conf.backup)

    13. 方法二：开启 compiz-fusion
    14. # nvidia-xconfig --add-argb-glx-visuals (Enable OpenGL)
    15. # nvidia-xconfig --composite (Enable Composite X extension)
    16. # nvidia-xconfig --depth=24

    18. 显卡信息查看 和 分辨率 刷新频率 查看与修改！
    19. (Xorg 内 配置无法起作用，只能通过nvidia-settings来调整！)

    20. # cd /usr/ports/x11/nvidia-settings && make install clean
    21. # rehash
    22. # nvidia-settings

    13：xfce4
    1. # cd /usr/ports/x11-wm/xfce4 && make BATCH=YES install clean
    2. # vim /usr/local/etc/PolicyKit/PolicyLit.conf (允许用户在 xfce4模式下 reboot 和 shutdown)
    3.  

    5. reboot">
    6.      
    8. shutdown">
    9.    


    13. 还需要进行如下操作：
    14. # vim /usr/local/etc/polkit-1/localauthority/50-local.d/.pkla

    16. [Restart]
    17. Identity=unix-group:wheel
    18. Action=org.freedesktop.consolekit.system.restart
    19. ResultAny=yes
    20. ResultInactive=yes
    21. ResultActive=yes

    23. [Shutdown]
    24. Identity=unix-group:wheel
    25. Action=org.freedesktop.consolekit.system.stop
    26. ResultAny=yes
    27. ResultInactive=yes
    28. ResultActive=yes


    1. % vim ~/.xinitrc (告诉X 下次启动时执行 Xfce4)
    2. #!/bin/sh
    3. /usr/local/bin/startxfce4
    4. #exec startxfce4 (也可这样写)
    5. :wq
    6.  

    8. PS: 如果使用了 XDM
    9. % vim ~/.xsession
    10. #!/bin/sh
    11. /usr/local/bin/startxfce4
    12. :wq
    13. % chmod +x ~/.xsession
    ---------------------------------------------------
    Xfce4 回收站地址： ~/.local/share/Trash/files

    Xfce4 注销命令：
    # vim ~/.cshrc
    alias logout xfce4-session-logout --logout
    alias   lock    xflock4
    :wq
    # source ~/.cshrc
    ---------------------------------------------------
    Xfce 4 Setting Manager
    Themes/Shortcuts/:  Window Manager
    Background/Icons/display: Desktop Display
    File Manager:Display-date
    Style: Appearance -xfce dust
    Desktop Panel Setup

    Terminal Preferences
    Appearance - Font - Background(Transparent)
    滚动 滑轮 - 收起（打开）终端窗口
    1. ----------------------------------------------------------------
    2. How to install new themes:
     
    1. ----------------------------------------------------------------
    2. Xfce4 Plugins:

    5. #安装 Ristretto (微型图片查看工具)
    6. # cd /usr/ports/graphics/ristretto && make install clean

    8. 安装 Task (图形任务管理器)
    1. # cd /usr/ports/x11/xfce4-taskmanager && make install clean

    3. 安装 Power (电源管理)
    4. # cd /usr/ports/sysutils/xfce4-power-manager && make install clean
    5. # cd /usr/ports/sysutils/xfce4-battery-plugin && make install clean

    7. 安装 Notes (便签)
    8. # cd /usr/ports/deskutils/xfce4-notes-plugin && make install clean

    10. 安装 Netload  (网络负载)
    11. # cd /usr/ports/sysutils/xfce4-netload-plugin && make install clean

    13. 安装 Weather (天气预报)
    14. # cd /usr/ports/misc/xfce4-weather-plugin && make install clean

    16. 安装 Wavelan (无线上网)
    17. # cd /usr/ports/sysutils/xfce4-wavelan-plugin && make install clean

    19. PS: 将以上项目在 panel上右键 添加 new item 才可以显示出来！！

    21. # cd /usr/ports/ 
      # make quicksearch name=xfce4-screenshooter-plugin
      # cd /usr/ports/x11/xfce4-screenshooter-plugin && make install clean
      # touch ~/.config/xfce4/xfce4-screenshooter (没有他工作不了！)
      # 进入 keyboard 设置 shotcut (PrtScr) 或 从菜单栏点击程序


    23. 安装 Xfburn (CD/DVD 刻录工具)
    24. # cd /usr/ports/sysutils/xfburn && make install clean

    26. 强大的 命令行刻录工具： (建议使用)
    27. # cd /usr/ports/sysutils/dvd+rw-tools && make install clean
    28. # growisofs -dvd-compat -Z /dev/cd0 -J -R /path/to/data (刻录 数据DVD)
    29. # growisofs -dvd-compat -Z /dev/cd0=imagefile.iso (刻录 映像文件)



    14：Mplayer/Office/Reader/Gimp/Ristretto/Galculator/Thunderbird/Pidgin/VirtualBox/unix2dos
    1. # cd /usr/ports/editors/libreoffice (安装libreoffice)
    2. # make LOCALIZED_LANG=zh-CN install clean (添加中文支持)

    4. # cd /usr/ports && make search key=adobe|less (安装AdobeReader)
    5. # cd /usr/ports/chinese/acroread8-zh_CN && make install clean
    6. # cd /usr/ports/graphics/mupdf && make install clean    (安装mupdf)
    7. # cd /usr/ports/graphics/epdfview && make install clean    (安装epdfview)

    9. # cd /usr/ports/graphics/gimp-help && make config (保留：EN 和 ZH_CN)
    10. # cd /usr/ports/graphics/gimp && make BATCH=YES install clean  (安装图像处理)
    11. # cd /usr/ports/graphics/gimp-manual-pdf && make install clean

    13. # cd /usr/ports/graphics/ristretto && make install clean (安装微型图片查看工具)
    14. # cd /usr/ports/math/galculator && make install clean (安装图形计算器)

    16. # cd /usr/ports/mail/thunderbird && make BATCH=YES install clean (安装雷鸟)
    17. # cd /usr/ports/mail/thunderbird-i18n && make install clean

    19. # cd /usr/ports/net-im/pidgin/ && make install clean (IM Client 注意端口用8001)
    20. # 成功登陆IRC(irc.freenode.net)之后：
    21. /cs register #ChannelName Password  ChannelDescription  (注册自己的Channel) 

    23. # cd /usr/ports/converters/unix2dos && make install clean   (unix2dos and dos2unix)

    25. unix2dos and dos2unix are utilities that convert
    26. ASCII files from the DOS cr/lf format to the UNIX
    27. lf format..


    30. VirtualBox:
    31. # cd /usr/ports/emulators/virtualbox-ose && make install clean

    33. # kldload vboxdrv
    34. or
    35. # echo 'vboxdrv_load="YES"'>>/boot/loader.conf
    36. # pw groupmod vboxusers -m yourusername
    37. % VirtualBox &

    39. =====================================

    41. VirtualBox was installed.

    43. You need to load the vboxdrv kernel module via /boot/loader.conf:

    45. vboxdrv_load="YES"

    47. You also have to add all users to your vboxusers group in order to use vbox.

    49. % pw groupmod vboxusers -m jerry

    51. Reboot the machine to load the needed kernel modules.


    54. Bridging Support:
    55. =================

    57. For bridged networking please add the following line to your /etc/rc.conf:

    59. vboxnet_enable="YES"


    62. USB Support:
    63. ============

    65. For USB support your user needs to be in the operator group and needs read
    66. and write permissions to the USB device.

    68. % pw groupmod operator -m jerry

    70. Add the following to /etc/devfs.rules (create if it doesn't exist):

    72. [system=10]
    73. add path 'usb/*' mode 0660 group operator

    75. To load these new rule add the following to /etc/rc.conf:

    77. devfs_system_ruleset="system"

    79. Then restart devfs to load the new rules:

    81. % /etc/rc.d/devfs restart


    84. ========================================
    85. Qemu:
    86. # cd /usr/ports/emulators/qemu && make install clean (add kqemu option)
    87. # kldload {kqemu,if_bridge,if_tap,aio}  (必备module)
    88. # kldstat

    90. Create a 10GB qcow2 image to install Windows XP
    91. # qemu-img create -f qcow2 winxp.img 20G

    93. Installing Windows XP ...
    94. # qemu -m 1024 -hda winxp.img -cdrom xp_sp3_vol_x86.iso -boot d -localtime

    96. Boot Windows XP ...
    97. # qemu-system-x86_64  -m 1500 -hda winxp.img -cdrom xp_sp3_vol_x86.iso \
    98. -localtime -M pc -smp 2 -soundhw es1370 -usb -enable-kqemu -kernel-kqemu  -name winxp

    100. PS: Windows XP 占用CPU 100％ 很无奈，所以还是模拟 Windows2000吧(这个速度是最快的！)
    101. 或者 用 VirtualBox 安装 Windows XP ...

    103. Qemu 模拟 Win2000
    104. # qemu-img create -f qcow2 win2000.img 10G
    105. # qemu -m 1024 -hda win2000.img -cdrom win2000.iso -boot d -win2k-hack
    106. # qemu-system-x86_64  -m 1500 -hda win2000.img -cdrom win2000.iso \
    107. -localtime -M pc -smp 2 -soundhw es1370 -usb -enable-kqemu -kernel-kqemu  -name win2000

    1. Mplayer 具体使用：

    3. 1. xdpyinfo (获得使用您的显卡的X服务器所支持的扩展列表) 

    4. 常见图像接口列表：

      1. X11: 一般性的使用共享内存的X11输出。

      2. XVideo: 一种X11接口扩展，支持任何X11图像的可拖拉。

      3. SDL: 简单直接媒体层。

      4. DGA: 直接图片存取。

      5. SVGAlib: 低层次掌控图片层。


    6. XVideo (X11扩展接口，用于提高 画面质量)
    7. # xvinfo
    8. X-Video Extension version 2.2
    9. screen #0
    10. no adapters presnet (表示显卡不支持 XVideo)

    12. 2. 安装
    13. # cd /usr/ports/multimedia/mplayer (安装mplayer)
    14. # make WITH_LANG=zh_CN install clean (选中vdpau显卡加速等需要的选项！)

    1. 3. 第一次启动前
    2. % cd /usr/ports/multimedia/mplayer
    3. % make install-user (自动建立： ~/.mplayer)


    6. 要播放一个文件，如 testfile.avi， 可以通过各种视频接口当中的某一个去设置 -vo 选项：

    8. % mplayer -vo xv testfile.avi
    9. % mplayer -vo sdl testfile.avi
    10. % mplayer -vo x11 testfile.avi
    11. # mplayer -vo dga testfile.avi
    12. # mplayer -vo 'sdl:dga' testfile.avi
    13. (详情：man mplayer /-vo)
    14. # mplayer -gui -vo x11 testfile.avi (图形界面, 我保证你不会用)

    16. 常用命令：
    17. # mplayer -fs -zoom -vo xv,x11 testfile.avi (全屏模式,不支持xv 则使用x11,你会不支持xv?)
    18. # mplayer -ontop -vo xv testfile.avi (置顶播放)
    19. # mplayer -vf screenshot -vo xv testfile.avi (屏幕截图,截图保存到当前目录,按键：s)
    20. # mplayer -ss 01:33:00 -vo xv testfile.avi (选择播放起始位置)

    22. # mplayer -osdlevel 3 testfile.avi (音量 + 搜索 + 计时器 + 百分比 + 总时间)
    23. # mplayer -cache 4096 testfile.avi (设定缓冲区：KBytes)

    2. # cd ~/audio/;ls |cut -d' ' -f1 > music.lst (制作文件列表,文件名不要留空格)
    3. # mplayer -loop 0 -playlist ~/audio/music.lst (无限循环播放列表)

    5. # mplayer \
    6. \
    7. Special_40202/M0040202001.mp3 (Stream From HTTP)

    8. # mplayer 不支持 SWF，建议拖到 浏览器里播放！

    2. KeyBoard Control:
    3. up and down (Seek forward/backward 1 minute)
    4. pgup and pgdown (Seek forward/backward 10 minutes)
    5. [ and ] (Decrease/Increase current playback speed by 10%)
    6. { and } (Halve/Double current playback speed)
    7. BACKSPACE (Reset playback speed to normal)

    9. Playlist:
    10. < and > (Go backward/forward in the playlist)
    11. ENTER (Go forward in the playlist, even over the end)
    12. p / SPACE (Pause, pressing agin unpauses)
    13. q / ESC (Stop playing and quit)

    15. Sound:
    16. 9 and 0 (Decrease/Increase volume)
    17. ( and )  (Adjust audio balance in favor of left/right channel)
    18. m (Mute sound)

    20. OSD States:
    21. o (Toggle OSD states: none/ seek/ seek+ timer/seek+ timer+ total time)
    22. # mplayer -osdlevel 3 testfile.avi

    23. 设定开始的OSD模式.


      0


      只有字幕



      1


      音量 + 搜索(默认)



      2


      音量 + 搜索 + 计时器 + 百分比



      3


      音量 + 搜索 + 计时器 + 百分比 + 总时间

    1. Subtitle:
    2. v (Toggle subtitle visibility)
    3. j (Cycle through the available subtitles)
    4. y and g (Step forward/backward in the subtile list)
    5. F (Toggle displaying "forced subtitles")
    6. a (Toggle subtitle alignment: top/ middle/ bottom)
    7. r and t (Move subtitles up/ down)

    9. ScreenShot:
    10. s (-vf screenshot only)
    11. S (-vf screentshot only, Start/ Stop taking screenshots)
    12. I (Show filename on the OSD)
    13. P (show progression bar, elapsed time and total duration on the OSD)

    15. FullScreen & Stay-On-Top :
    16. f (Toggle fullscreen, also see -fs -zoom)
    17. T (Toggle stay-on-top, also see -ontop)
    1. -------------------------------------------------------------
    2. 为了让 mplayer 的命令行不是太长，使用者可以通过建立一个文件  
    3. 来设定如下默认选项：
    4. # vim ~/.mplayer/config
    5. vo=vdpau # 使用 vdpau 输出设备播放
    6. fs=yes # 全屏
    7. ontop=yes # 置顶
    8. zoom=yes # 允许改变窗口大小
    9. noaspect=yes # 缩放时保持高宽比
    10. osdlevel=3 # 显示 当前播放时间 和 总时间
    11. :wq
    12. -------------------------------------------------------------
    1. 要播放 DVD， 需要把 testfile.avi 改为 dvd://N -dvd-device DEVICE。 
    2. 这里 N 是要播放的节目编号， 而 DEVICE 则是 DVD-ROM 的设备节点。例如，要播放 /dev/dvd 的第三个节目

    4. # mplayer -vo xv dvd://3 -dvd-device /dev/dvd

    6. 注意: 可以在编译 MPlayer 时， 通过 WITH_DVD_DEVICE 来指定默认的 DVD 设备。 
    7. 系统内定的默认设备是 /dev/acd0。 更多细节， 请参考 port 的 Makefile。
    8. 最后，mplayer 可以把DVD题目(title)抓取成为 .vob 文件。
    9. 为了从DVD中导出第二个题目，请输入：

    11. # mplayer -dumpstream -dumpfile out.vob dvd://2 -dvd-device /dev/dvd
    12. 　　输出文件 out.vob 将是 MPEG 并且可以被这部份描述的其它 “包” 利用。
    13. --------------------------------------------------------------------
    14. 文件:

    15. /etc/mplayer/mplayer.conf


      系统范围的设置


      ~/.mplayer/config


      用户设置


      ~/.mplayer/input.conf


      输入绑定(完整按键列表参见’mplayer −input keylist’的输出)


      ~/.mplayer/gui.conf


      GUI配置文件


      ~/.mplayer/gui.pl

      GUI播放列表


      ~/.mplayer/font/


      字体目录(里面必须有一个font.desc文件和.RAW后缀的文件)


      ~/.mplayer/DVDkeys/


      破解的CSS密钥


      字幕文件按以下顺序搜索(比如播放/mnt/movie/movie.avi文件):


      /mnt/cdrom/movie.sub
      ~/.mplayer/sub/movie.sub
      ~/.mplayer/default.sub



    15：Using Linux Mode (MacromediaFlash插件没有FBSD版，用Linux wrapper运行其flash版本)
    1. # kldload linux (加载进来一会用)
    2. # cd /usr/ports/emulators/linux_base-f10 && make BATCH=YES install distclean
    3. # vim /etc/rc.conf
    4. linux_enable="YES"
    5. :wq


    16：Firefox 和 MacromediaFlash 和 Add-ons  and Chromium

    1. # cd /usr/ports/www/firefox/ && make BATCH=YES install clean
    2. vim /boot/loader.conf
    3. sem_load="YES" (加载module)
    4. :wq

    6. # cd /usr/ports/www/firefox-i18n/ && make install clean (中文支持)
    7. # cd /usr/ports/www/nspluginwrapper && make install clean (提供flash支持)
    8. # cd /usr/ports/www/linux-f10-flashplugin10 && make install clean (安装flash插件)

    10. # 安装版本11的话不需要 挂载 linproc , 我安装的11 ..
    11. # cd /usr/ports/www/linux-f10-flashplugin11 && make install clean (安装flash插件)
    12.  
    13. #  ln -s /usr/local/lib/npapi/linux-f10-flashplugin/libflashplayer.so \
    14. /usr/local/lib/browser_plugins/ (做个symbolic Link，官方文档：browser_plugins是个目录，没有的话要创建)
    15. (目录不行：请直接连接，我就是 直接链接的！)
    16. # rehash (Updates FreeBSD's path environment variables)
    17. <For instance when you have installed software you may not be able 
    18. to run the executables without specifying the path.
    19. rehash solves your problem most of the times>

    21. % nspluginwrapper -v -a -i (插件必须由每个用户运行 nspluginwrapper 安装)
    22. <上面的命令会复制 browser_plugins目录下生成的文件 到：~/.mozilla/plugins/npwrapper.libflashplayer.so>

    23. # 安装版本11(linux-f10-flashplugin11)的话不需要 进行下面的操作 挂载 linproc , 我安装的11 ..

    25. 实现播放flash 动画效果：
    26. # mount  -t linprocfs linproc /usr/compat/linux/proc (挂载 linproc ,事实上 procfs存在安全问题FBSD早就废弃了)

    28. # vim /etc/fstab
    29. linproc /usr/compat/linux/proc linprocfs rw 0 0 (开机自动挂载)
    30. :wq

    31. Add-ons：
    32. firefox - Edit - Preferences - Manage Add-ons - Search
    33. Ease Link： (转换迅雷、QQ旋风、快车专用链接)
    34. Adblock Plus： (屏蔽广告)
    35. Adblock Plus Preferences - Filters -Add filter subscription - Update all subscriptions

    37. NetVideoHunter Video Downloader： (视频地址检测)
    38. NetVideoHunter Options - Show in statusbar - Enable the capturing of SWF files

    39. PS:       npviewer.bin 该进程为flash进程，当关闭flash后不会自动
    40. 结束，sockstat |grep npviewer.bin 会看到N多 占用内存超多
    41. 我的办法是:
    42. # echo 'alias killflash killall npviewer.bin'>>~/.cshrc

    44. Chromium
    45. # cd /usr/ports/www/chromium/ && make install clean
    46. echo 'alias chrome chrome --incognito'>>~/.cshrc

    17：compiz-fusion (3D效果)
    1. # cd /usr/ports/x11-wm/compiz-fusion && make BATCH=YES install clean

    3. % vim start-compiz
    4. #!/bin/sh
    5. compiz --replace --sm-disable --ignore-desktop-hints ccp &
    6. emerald --replace &
    7. :wq
    8. % chmod +x start-compiz
    9. % echo "start-compiz" >> ~/.xinitrc

    11. PS: 如果使用了 XDM
    12. % echo "start-compiz" >> ~/.xsession
    13. % startx
     简单设置：
     在CompizConfig设置管理器>首选项>在后端选择GConf Configuration Backed (开启即时生效) 
     接着> 启用 最小化效果、窗口装饰、震颤窗口、移动窗口、调整窗口大小、应用程序切换条，基本的3D桌面竣工！

    18：Security
    1. 监视ports所有软件包安全：
    2. # cd /usr/ports/ports-mgmt/portaudit && make all install clean (portaudit)
    3. # portaudit -Fda (更新数据库, periodic每天自动更新！)
    4. # portaudit -a (开始检查)
    5. 输出如下：

    7. Affected package: cups-base-1.1.22.0_1
    8. Type of problem: cups-base -- HPGL buffer overflow vulnerability.
    9. Reference: <
    10. 1 problem(s) in your installed packages found.
    11. You are advised to update or deinstall the affected package(s) immediately.
    12. <如果你执意要安装不安全的软件请：make install DISABLE_VULNERABILITIES=YES clean>
    13. ----------------------------------------------------------------------------------------------------------
    14. # cd /usr/ports/ports-mgmt/pkg_cleanup && make install clean       (关于删除冗余ports )
    15. FROM: http://wiki.freebsdchina.org/software/p/pkg_cutleaves

    1. RootKit:
    2. # cd /usr/ports/security/rkhunter && make install clean (rkhunter )

    4. Sudo:
    5. # cd /usr/ports/security/sudo && make install clean
    6. # visudo
    7. ko ALL=(root) !/usr/bin/passwd, /usr/bin/passwd [A-Za-z]*, !/usr/bin/passwd root, /usr/bin/su -

    9. Integrity:
    10. # cd /usr/ports/security/aide && make install clean (aide )
    11. # cd /usr/ports/security/tripwire && make install clean (tripwire )

    13. 可用 mtree检查完整性：

    14. # mtree -x -ic -K cksum -K md5digest -K sha256digest -p / \

      -X /home/mwlucas/mtree-exclude > /tmp/mtree.savedspec

      (Use -X  to specify a file containing a list of paths not to match)


      # mtree -f savedspec -f newspec > mtree.differences


    16. AntiVirus:
    17. # cd /usr/ports/security/clamav && make install clean (clamav )
    18. # cd /usr/ports/security/squidclamav && make install clean (squidclamav )

    20. Monitor：
    21. # cd /usr/ports/net-mgmt/cacti && make install clean (cacti)
    22. # cd /usr/ports/net-mgmt/nagios && make install clean (nagios)
    23. # cd /usr/ports/security/nessus && make install clean (nessus)

    24. # cd /usr/ports/sysutils/lsof && make install clean (lsof)

    25. # cd /usr/ports/sysutils/pidof && make install clean (pidof)
    26. # cd /usr/ports/security/nmap && make install clean (nmap)
    27. # cd /usr/ports/net/wireshark && make install clean (wireshark)
    28. # cd /usr/ports/net/tcpdump && make install clean (tcpdump: 系统自带)

    1. Unix Password Cracker：
    2. # cd /usr/ports/security/crack && make install clean (/usr/local/crack/Crack)

    4. Rar Zip 7Z Password Cracker：
    5. # cd /usr/ports/security/rarcrack && make install clean (rarcrack )

    7. Ciphertext Cracker：
    8. # cd /usr/ports/security/rainbowcrack && make install clean (rainbowcrack )

    10. ----------------------------------------------------------------------------------------------------------

    11. Tweaking User Security

      # vim /etc/login.access (Rules are checked on a first-fit basis)

      -:ALL EXCEPT wheel:console

      -:ALL EXCEPT wheel dns webmasters:ALL


      # vim /etc/login.conf (Restricting System Usage)

      :maxproc-cur: 30:\ (Current Resource Limits)

      :maxproc-max: 60:\ (Maximum Resource Limits)


      :passwd_format=md5:\ (md5 or  blf)

      :minpasswordlen=28:\ (Password length Limits)

      :mixpasswordcase=true:\ (Password case Limits)

      :wq

      If present, FreeBSD complains if the user changes his password to an all lowercase word.

      # cap_mkdb /etc/login.conf (rebuilds the database file /etc/login.conf.db)


    12. PS：

    13. in fact, /etc/hosts.equiv and its related services have bitten even

      top-notch security experts who thought they could use it safely. I suggest

      leaving this file empty and perhaps even making it immutable !


    19：SSH

    1. Client: 

      ssh user@host (需要密码 ，远程主机信息保存在：~/.ssh/known_hosts)

      scp filename user@host:~/

      sftp user@host


    3. # ssh-keygen -lf /etc/ssh/ssh_host_dsa_key.pub (检查SSH 主机 PubKey 的 fingerprint，Client端会自动下载并比对)


      用户密码被强制到28位怎么记得住啊？ (用PubKey实现无密码登录 ！)


      Client:

      ssh-keygen -t rsa -b 2048 (为本机 生成 一对密匙)

      scp .ssh/id_rsa.pub user@host:~/ (把PubKey 发到Server 用户家目录)


      Server:

      cd ~user; mkdir .ssh

      cat id_rsa.pub >> .ssh/authorized_keys (Server 把Client端 PubKey添加到 授权文件内)


      Client:

      ssh user@host (现在可以无密码登录喽！)

    20：Insecure Console (Single-user mode)

    2. When you boot FreeBSD in single-user mode, you get a root command
    3. prompt. This is fine for your laptop and works nicely for servers in your
    4. corporate datacenter, but what about machines in untrusted facilities?

    6. # vim /etc/ttys
    7. console none unknown off secure

    9. To make the console require a root login when booted into single-usermode, 
    10. change the secure to insecure.
    11. # vim /etc/ttys
    12. console none  unknown off insecure
    13. :wq
      开源赛车Vdrift 

    Heroes of Newerth 是一款类似于“魔兽争霸3”中 DotA 场景的游戏，支持 Windows，Linux，Mac 操作系统。

    HON 提供了比 Warcraft III DotA 场景更好的图形效果，并且支持 VoIP。

    Heroes of Newerth 游戏特点：

    # 平衡球 Neverball () 支持Windows/Linux/BSD/Mac
    1. # cd /usr/ports/games/neverball && make install clean
    #
    配置文件一览：
    1. # ~/.cshrc
    2. # added by ko BEGIN
    3. setenv PACKAGEROOT ftp://ftp.freebsd.org
    4. setenv PKG_TMPDIR /var/garbage
    5. set autolist
    6. alias cl clear
    7. alias df df -h
    8. alias lock xflock4
    9. alias chrome chrome --incognito
    10. alias adobe acroread8
    11. alias killflash killall npviewer.bin
    12. # ps axo pid,comm,pcpu,pmem
    13. # history -c (clear history)
    14. # wget -r -np -p -k --level=2
    15. # added by ko END
    有意思的命令，或许阁下用得上哦! ^_^
    N：MLDonkey（电驴、BT ）
    1. # cd /usr/ports/net-p2p/mldonkey
    2. # make WITHOUT_GUI=yes WITHOUT_X11="YES" WITHOUT_TK="YES" install clean
    3. ％ln -s ~/.mldonkey/incoming ~
    4. 在/etc/rc.conf加入mlnet_enable=“YES” 和 mlnet_user=“用户名非root“

    6. %/usr/local/etc/rc.d/mlnet start (注意是%)
    7. 1.%telnet 127.0.0.1 4000
    8. 2.>auth admin ""
    9. 3.>passwd 键入你想设置的密码
    10. 4.>set allowed_ips "127.0.0.1 192.168.0.0/24" (根据你自己的情况设置)
    11. 5.>save
    12. 6.>exit
    13. （mldonkey需要一个非root用户来运行。我习惯在装系统的时候就建立一个wheel组的用户，所以这里我就不用在建立用户了。）


    16. 现在就可以在浏览器里输入：localhost:4080来设置和下载文件了。

    18. 默认mldonkey的文件夹是隐藏的，在用户目录下。找下载好的电影有点不方便，把incoming连接到你的用户目录下就好了。当然你也可以自己修改默认下载路径。

    20. mldonkey简单设置:

    22. enable_kademlia的选项为true――打开kad减少对服务器的依赖。
    23. max_hard_upload_rate默认是10 （全局最大上传，根据自己情况设置）
    24. max_hard_download_rate默认是50 （全局最大下载，根据自己情况设置）
    25. mldonkey有两组两组带宽控制模式，通过点击Bandwidth toggle来更改带宽控制模式。
    26. =添加服务器列表：=

    28. 先删除原先的服务器列表下载地址。点击Options>Web infos找到server.met行然后点击前面的Remove
    29. 然后点击Add Url输入“server.met ”（不包括引号，放心都是安全服务器列表。）再点击前面的DL也就是DownLoad。
    30. =添加kad节点信息=

    32. 点击Options>Web infos>Add Url输入nodes.gzip
    33. =添加firefox for mldonkey插件=

    35. 下载地址：~dyna/mldonkey/
    上一篇：URL URI 区别 ---- Linux IPv6 HOWTO
    下一篇：mplayer lastplay

    文章评论