Libre all the things
I use Packet Filter (PF) to set up a basic firewall on FreeBSD. To start, the only service I’m running that requires inbound access is SSH. SSHGuard is added for an additional layer of security. Start Here Enable PF SSHGuard ICMP Final Config Resources Start Here PF requires a ruleset configuration file to operate. Example rulesets are found in /usr/share/examples/pf/ . I…
Create SSH keys on a BSD or Linux CLIENT that will be used to secure access to remote devices. Disable password logins on a FreeBSD SERVER in favour of using SSH keys for authentication. Start Here Create Public and Private Keys Share Public Key Disable Password Logins Create an Alias Keychain Start Here On BOTH the CLIENT and the SERVER Create the .ssh directory and authorized_keys file in $HOME…
After the first boot of my new FreeBSD installation , these are some extra steps I like to make right away to get a system off to a good start! Package management Set pkg manager to default to yes Allow designated users to run commands as root Use a larger font in console Add user to additional groups Alias for root mail Set system-wide locale Switch user shell from sh to fish Create SSH keys Boot…
The FreeBSD Handbook has an extensive chapter on installing FreeBSD that covers a wide range of scenarios with descriptions of each possible choice. Its an invaluable resource maintained by volunteer contributors. After performing a few installs, these are my personal notes of steps taken and choices made. A “short and sweet” version of the above Handbook. Start Here Acquire an installation image…
Set up a stack of virtualization tools on a Debian host for creating and managing virtual machines (VMs). Start Here Directories Permissions Services Create VM Resize VM guest window Video Acceleration Virsh and virt-clone Resources Start Here KVM (Kernel-based Virtual Machine) is built into the Linux kernel and handles the CPU and memory details. QEMU (Quick EMUlator) emulates the various…