快速掌握OpenBSD 4.0：安全操作系统入门

需积分: 4 178 浏览量更新于2024-08-02 收藏 554KB PDF 举报

"The OpenBSD 4.0 Crash Course" 是一本由 Jem Matzan 编写的书籍，由 O'Reilly 出版社在2007年1月1日发行，ISBN 号码为 0-596-51015-2（ISBN-10）和 978-0-596-51015-2（ISBN-13），共64页。这本书主要针对想要快速掌握 OpenBSD 操作系统的读者，特别是那些希望在 x86 或 AMD64/EM64T 平台上设置服务器、桌面系统或网络设备的人群。 OpenBSD 是一个类 Unix 的操作系统，以其出色的文档和对安全性的执着追求而广受赞誉。本书"OpenBSD 4.0 Crash Course"通过简洁明了的方式，指导读者如何在 x86 和 AMD64 架构的计算机上安装或升级 OpenBSD，以及如何配置它作为服务器或工作站使用，并提供维护系统直至下一个版本的正确方法。书中包含三个主要章节： 1. 第一章“快速学习 OpenBSD”：这一章旨在让读者迅速熟悉 OpenBSD 的基本概念和操作环境，帮助初学者快速上手。 2. 第二章“理解 OpenBSD 4.0”： - Section 2.1 “什么是 OpenBSD？”：解释 OpenBSD 的起源、设计理念以及与其它类 Unix 系统的区别。 - Section 2.2 “OpenBSD 适合什么？”：讨论 OpenBSD 在服务器、网络安全、软件开发等领域的应用。 - Section 2.3 “支持的架构和硬件”：列出 OpenBSD 支持的硬件平台和架构，包括 x86 和 AMD64/EM64T。 3. 第三章“安装 OpenBSD 4.0”： - Section 3.1 “安装方法”：介绍不同的安装方式，如网络安装、光盘安装等。 - Section 3.2 “从安装光盘启动”：详细说明如何使用安装光盘引导系统进入安装过程。 - Section 3.3 “安装”：逐步指导读者进行系统安装，包括分区、选择软件包等步骤。通过这本书，读者不仅可以了解 OpenBSD 的核心特点，还能获得实际操作的经验，从而在实际环境中有效地利用 OpenBSD 的优势。对于想要深入了解和使用 OpenBSD 的 IT 专业人士，这是一份非常实用的学习资料。

to and press Enter. The default is wd0.

Now you'll be asked if you'd like to use the entire disk for OpenBSD. If you want to try to get fancy

with the slicing of your OpenBSD disk, that's fine, but it's only going to make things more difficult

from here on. It is strongly recommended that you type Y and press Enter. This will erase everything

on your hard drive.

Next you'll create partitions for your slice. You need a minimum of two: a root partition and a swap

partition, but if you are designing the system for maximum security, you'll want to create partitions

for the following directories:

z /

z /tmp

z /var

z /usr

z /home

If you're taking this route, you will have to think ahead to what will be in these directories. /tmp can

easily be 1 GB, as can /, but /var may end up needing a lot of space if you're going to be hosting a

Web or email server. /usr can be anywhere from 6 GB to twice that, depending on how many

programs you're going to install. /home may not need much space at all if there won't be any user

accounts, but if you're building a desktop system, /home

should be big enough to accommodate user

files (email, documents, pictures, movies, music, etc.).

The reason why separate partitions are more secure and reliable is because the installation utility will

automatically assign different levels of permissions to each partition if you use the ones prescribed

above. Secondly, one particular service, if compromised or misconfigured, can't fill up the entire disk

with garbage very easily if it has influence over only one partition. Lastly, if a filesystem becomes

corrupt for some reason, only a small portion of your system will be lost.

If you get lost in the partition command line, type ? and press Enter to see a list of commands.

Unfortunately the list is a little too long for most PC screens, and you miss the commands at the top.

The full list of commands is:

z a creates a partition

z b sets OpenBSD disk boundaries

z ? prints the list of commands

z c changes a partition size

z D sets the disk label to the default

z d deletes a partition

z e edits the drive parameters

z g sets the method of determining disk geometry

z M shows the entire OpenBSD manpage for disklabel

z m modifies an existing partition

z n sets the mount point for a partition

z p prints the disk label

z q saves changes and quits the partition editor

z r recalculates the amount of free space

z s saves the disk label to a file

z u undoes the most recent change

z w writes the label to the disk

z X toggles expert mode

z x exits without saving changes

z z zeroes out the partition table

So let's get on with partition creation by pressing a. The first question you'll be asked is which

partition you're creating. Start with partition A by typing a and pressing Enter. When asked for an

offset, press Enter to accept the default. The next variable is size; this will be your root partition, so

give it the space you've decided it needs (use G as an abbreviation for gigabytes).

If you were totally confused by partitions earlier and figured you'd just wing it, make the root

partition the entire size of the disk minus 2 GB, and then press Enter. If you do this, you won't be

bothering with other partitions such as /var and /home (they will all live in the root).

The next question is filesystem type. You can accept the default (4.2BSD). Next you'll be asked for

the mount point; that will be / so type a slash and press Enter to create the partition.

Press a again to create a swap partition. Partition B is reserved for swapspace, so choose that. Size it

accordingly (or if you're winging it, give over your remaining 2 GB to this partition).

If you were winging it, you've just used up all your disk space, which is fine. But if not, repeat this

process with further partitions, starting with the letter

d (c is reserved), sizing them according to

your plan and giving them the proper mount points. When you're done, press w to write the label to

the disk, and then press q and then Enter to save and quit the partition utility.

After the partition table's been written, if you chose to use several partitions, you'll be asked to

verify each partition's mount point. If you decided to use one big partition, the installation utility will

likely move on to network configuration. For the mount points, just press Enter for each one. When

you find that you are starting over at the beginning again, type done and press Enter.

Next you'll be asked if you're sure you want to proceed. Type y and press Enter.

3.3.3. Network configuration

Once the disk has been sliced, partitioned, and formatted, you'll be asked to set the hostname. This

is the machine's namename it whatever you wish.

Next you'll be asked if you'd like to configure the network. Type y and press Enter.

If OpenBSD recognizes your network devices, it'll list them by module name. (Note that Intel

Centrino (IPW) wireless chips in laptop computers may be recognized, but will not work until a

binary firmware blob is manually loaded from the command line after installation is complete.) Most

people will probably have only one network device here, but if you have several, choose the one that

will be your primary Internet connection and press Enter.

After that, you'll be given the chance to change the media options for your network device. Most

people will not have to change anything here, so press Enter.

If this network device has a static IPv4 address, type it in now and press Enter. If it is assigned an IP

address from a DHCP server (if it's connecting to a router or directly to a broadband Internet

connection like a cable or DSL modem, then it's likely those devices will assign you a dynamic IP

address through DHCP as well), type in dhcp and press Enter.

If you put in a static IP address, you'll be asked for a netmask (subnet mask) at this point. Type it in

and press Enter.

Next, you'll be asked for your IPv6 address. If you are on an IPv6 network instead of IPv4, enter

your static IP address here. Most people will just press Enter for the

none

default. If this machine will

function as an IPv6 router, choose

rtsol here.

If you have another network interface to initialize, this process will repeat for that device. Note that

the installer will crash if you try to use DHCP with more than one network interface; you can change

this manually later (by editing the /etc/hostname file for each network interface) if necessary.

If you have a domain name and DNS server for this machine, now's the time to put them in. If you

chose DHCP earlier, then just leave the default entries as they are and press Enter. The nameservers

are written to the /etc/resolv.conf file, and are overwritten every time a new host is dynamically

configured. Next you'll be asked if you'd like to use the nameserver right now. Press Enter to accept

the default

yes.

The default route setting is next. If you are setting up OpenBSD as a network router and want to set

the default route now (presumably you've already set up your interfaces accordingly), you certainly

may. Most people will want to leave this as is and press Enter.

Next you'll be asked if you'd like to configure the hosts file with the ed editor. Unless you already

know how to use ed, say no here and remember to do it later if necessary. When asked if you'd like

to do any manual network configuration, your answer should probably be no unless you are using

this machine as a network appliance of some kind and require unusual settings. All of these things

can be changed later through the various network config files in the /etc directory if necessary.

When prompted, type in your root password and press Enter, and then do it once more to ensure

that you typed it properly.

3.3.4. Package sets

Now it's time to install package sets. Skip down to the section below that applies to your situation.

3.3.4.1. From the official CD

If you are installing from the official OpenBSD CD set, the package installation will be a breeze: just

type cd here and press Enter. Assuming you only have one optical drive in your computer, press

Enter again to accept the default, or type the device node of the particular CD drive that you're using

for the installation and press Enter. Press Enter a third time to accept the default package set

location.

Now skip down to the subsection on choosing package sets.

3.3.4.2. Over FTP/HTTP

If you're installing from a floppy or minimal install CD, type in ftp here (or http if that's the server

type of the mirror you chose earlier) and press Enter. You'll then be asked for the FTP or HTTP proxy

server (if you don't have one, use none). You'll then be asked for the mirror address and the

directory on that mirror that the OpenBSD package sets are in. Type in the mirror address that you

剩余51页未读，继续阅读

asmhi

粉丝: 5
资源: 21

快速掌握OpenBSD 4.0：安全操作系统入门

OpenBSD 4.0速成班

The OpenBSD Packet Filter.pdf

Design and Performance of the OpenBSD Statefull Packet Filter - Slides.pdf

PF---The_Book_of_PF-A_No-Nonsense_Guide_to_the_OpenBSD_Firewall

OpenBSD Handbook

OpenBSD笔记

tuning openbsd

absolute openbsd

openbsd.sort.rar_openbsd

openbsd_mon:OpenBSD快照监控应用程序。 （OpenBSD，JavaScript，NodeJS）

最新资源

openbsd_mon:OpenBSD快照监控应用程序。（OpenBSD，JavaScript，NodeJS）