The Funtoo Linux project has transitioned to "Hobby Mode" and this wiki is now read-only.
Difference between revisions of "User:Danielv"
(add ufw and iptables content - danielv) |
(add content - danielv) |
||
Line 4: | Line 4: | ||
}} | }} | ||
--[[User:Danielv|Danielv]] ([[User talk:Danielv|talk]]) | --[[User:Danielv|Danielv]] ([[User talk:Danielv|talk]]) 17:16, July 7, 2015 (UTC)<br /> | ||
== Redo Funtoo install == | == Redo Funtoo install == | ||
(based on Daniel Robbins' page [[Funtoo_Linux_Installation|http://www.funtoo.org/Funtoo_Linux_Installation]] | (based on Daniel Robbins' page [[Funtoo_Linux_Installation|http://www.funtoo.org/Funtoo_Linux_Installation]] | ||
Line 174: | Line 174: | ||
###i## ufw status | ###i## ufw status | ||
</console> | </console> | ||
<br /> | |||
Check out [[Install/Profiles|http://www.funtoo.org/Install/Profiles]] | |||
Work with your system profile... Even though Funtoo has no plans to use systemd (see [[Mitigating_Systemd|http://www.funtoo.org/Mitigating_Systemd]]), also this ([[FLOP:No-systemd_system|http://www.funtoo.org/FLOP:No-systemd_system]]) | |||
<console> | |||
###i## epro mix-in +no-systemd | |||
</console> | |||
<br /> | |||
Now I'm looking at adding more stufff. | |||
<br /> | |||
<br /> | <br /> | ||
Revision as of 17:16, July 7, 2015
--Danielv (talk) 17:16, July 7, 2015 (UTC)
Redo Funtoo install
(based on Daniel Robbins' page http://www.funtoo.org/Funtoo_Linux_Installation
1. I already have latest systemrescuecd on CD-ROM
Once I've booted up ...
root # net-setup eth0
root # startx
and open up a few terminal windows to do stuff.
2. Prepare disk.
3. Create and mount filesystems.
I didn't bother with re-doing the partitioning, just mounted the partitions and deleted everything but the lost+found directories
http://www.funtoo.org/Funtoo_Linux_Installation
Create and mount filesystems.
root # mkswap /dev/sda2 root # swapon /dev/sda2
Mount the filesystems
root # mkdir /mnt/funtoo root # mount /dev/sda3 /mnt/funtoo root # mkdir /mnt/funtoo/boot root # mount /dev/sda1 /mnt/funtoo/boot
see "Setting the Date" part of http://www.funtoo.org/Funtoo_Linux_Installation#Mounting_filesystems
root # date
4. Install the Funtoo stage tarball of your choice.
For stage 3 tarball, I just surfed to http://build.funtoo.org/funtoo-current/ in a web browser on a different computer my homenetwork and ssh it over to my Funtoo experimental computer... You can see here http://www.funtoo.org/Funtoo_Linux_Installation#Installing_the_Stage_3_tarball
5. Chroot into your new system.
Chroot in (http://www.funtoo.org/Funtoo_Linux_Installation#Chroot_into_Funtoo)
root # cd /mnt/funtoo root # mount -t proc none proc root # mount --rbind /sys sys root # mount --rbind /dev dev
root # cp /etc/resolv.conf /mnt/funtoo/etc/
root # env -i HOME=/root TERM=$TERM chroot . bash -l
root # export PS1="(chroot) $PS1"
Test your network by pinging a website.
6. Download the Portage tree.
Download the Portage tree. http://www.funtoo.org/Funtoo_Linux_Installation#Downloading_the_Portage_tree
(chroot) # emerge --sync
(chroot) # emerge -auDN @world
7. Configure your system and network.
Make sure your /etc/fstab represents your actual partition layout.
(chroot) # ln -sf /usr/share/zoneinfo/MST7MDT /etc/localtime
More on network later...
8. Install a kernel.
I skipped this as the instructions indicate that "If a version is listed under Latest version installed, then debian-sources is already pre-built for you and you can skip the rest of the Kernel section, and proceed to the Installing a Bootloader section. " This is for experimental purposes, on a non-production machine. Please verify usefulness/security of stock kernel and take appropriate measures!
9. Install a bootloader.
see http://www.funtoo.org/Funtoo_Linux_Installation#Installing_a_Bootloader Old-fashioned booting method
(chroot) # grub-install --target=i386-pc --no-floppy /dev/sda
(chroot) # boot-update
Configuring your network
Desktop (Wired Ethernet)
(chroot) # rc-update add dhcpcd default
10. Complete final steps.
Set root password.
(chroot) # passwd
11. Reboot and enjoy.
Restart your system
(chroot) # exit
root # cd /mnt
root # umount -lR funtoo
root # reboot
http://www.funtoo.org/Iptables
Install iptables
root # emerge -av iptables
Configure iptables for ipv4
root # rc-service iptables save
root # rc-service iptables start
Configure iptables (for ipv4) to start with computer
root # rc-update add iptables default
Configure iptables for ipv6
root # rc-service ip6tables save
root # rc-service ip6tables start
Configure iptables (for ipv6) to start with computer
root # rc-update add ip6tables default
Ubunto community information on UFW firewall...
https://help.ubuntu.com/community/UFW
Install UFW
root # emerge -av ufw
root # ufw enable
root # ufw default deny
Add rules, if you care to.
root # ufw reload
root # ufw status
Check out http://www.funtoo.org/Install/Profiles Work with your system profile... Even though Funtoo has no plans to use systemd (see http://www.funtoo.org/Mitigating_Systemd), also this (http://www.funtoo.org/FLOP:No-systemd_system)
root # epro mix-in +no-systemd
Now I'm looking at adding more stufff.
--Danielv (talk) 00:06, July 3, 2015 (UTC)
Note to self: only edit ebuild pages.
http://www.funtoo.org/Adding_an_Ebuild_to_the_Wiki
http://www.funtoo.org/Help:Funtoo_Editing_Guidelines
http://www.funtoo.org/Install/Overview
http://www.funtoo.org/Install
http://www.funtoo.org/Install/Scraps
http://www.funtoo.org/Install/Stage3
A must read if you're new to Funtoo, has kernel descriptions...
http://www.funtoo.org/Installation_%28Tutorial%29
info on kernel v3.19.3 release from 26 Mar 2015
https://lwn.net/Articles/638054/
http://www.funtoo.org/Genkernel_Quick_Start_Tutorial
http://www.funtoo.org/Installing_Gentoo_Sources
http://www.funtoo.org/Install/Kernel
http://www.funtoo.org/Grub-install
http://www.funtoo.org/Building_a_Kernel_from_Source#Kernel_Sources
http://www.funtoo.org/Install/Portage
http://www.funtoo.org/Emerge
Might want to emerge packages using... (--av) or (--pretend), or (--update)
http://www.funtoo.org/Funtoo_Linux_First_Steps
http://www.funtoo.org/Video
http://www.funtoo.org/X_Window_System
--Danielv (talk) 20:07, June 29, 2015 (UTC)
re: kernels
root # emerge -av app-portage/eix
To see available kernel packages, I do this command for a brief listing
root # eix -# sys-kernel/ sys-kernel/alt-sources sys-kernel/aufs-sources sys-kernel/better-initramfs-bin sys-kernel/bliss-initramfs sys-kernel/bliss-kernel sys-kernel/centos7plus-sources sys-kernel/ck-sources sys-kernel/cryptodev sys-kernel/debian-sources sys-kernel/dkms sys-kernel/dracut sys-kernel/genkernel sys-kernel/genkernel-next sys-kernel/gentoo-sources sys-kernel/git-sources sys-kernel/hardened-sources sys-kernel/kccmp sys-kernel/kergen sys-kernel/linux-docs sys-kernel/linux-firmware sys-kernel/linux-headers sys-kernel/mips-sources sys-kernel/openvz-rhel6-stable sys-kernel/openvz-sources sys-kernel/pf-sources sys-kernel/raspberrypi-image sys-kernel/raspberrypi-sources sys-kernel/rhel7-sources sys-kernel/rsbac-sources sys-kernel/rt-sources sys-kernel/spl sys-kernel/std-sources sys-kernel/tuxonice-sources sys-kernel/vanilla-sources sys-kernel/vserver-sources sys-kernel/xbox-sources sys-kernel/zen-sources
or for more detail
root # eix -c sys-kernel/
This command puts out lots of content to the screen, and it has color...
root # eix -A sys-kernel/
Let's say you want to look at sys-kernel/genkernel
root # eix sys-kernel/genkernel/
--Danielv (talk) 19:03, June 29, 2015 (UTC)
root # emerge -ajv @module-rebuild These are the packages that would be merged, in order: Calculating dependencies ... done! [ebuild R ] sys-kernel/debian-sources-3.19.3:3.19.3 USE="binary -rt" 0 kB [ebuild R ] x11-drivers/nvidia-drivers-352.21 USE="X gtk2 gtk3 (multilib) tools -acpi -pax_kernel -uvm" 0 kB Total: 2 packages (2 reinstalls), Size of downloads: 0 kB
root # grep -r nvidia /etc/portage /etc/portage/make.conf:VIDEO_CARDS="nvidia"
root # genkernel --menuconfig all
root # make modules_install
root # make install sh ./arch/x86/boot/install.sh 3.18.16-gentoo arch/x86/boot/bzImage \<br /> System.map "/boot"
script runs automatically
root # boot-update
root # emerge x11-drivers/nvidia-drivers 352.21
add it to /etc/conf.d/modules
root # eix-installed all |grep nvidia x11-drivers/nvidia-driver-352.21
root # eix-installed all |grep kernel sys-kernel/debian-sources-3.19.3 sys-kernel/genkernel-3.4.40.7-r6 sys-kernel/gentoo-sources-3.18.16 sys-kernel/gentoo-sources-4.1.0 sys-kernel/linux-headers-4.0
root # eselect kernel list [1] linux-3.18.16-gentoo * [2] linux-debian-sources-3.19.3
root # cfg-update -u root # emerge -auDN @world root # emerge --depclean