(一、系统安装)
XE0b9q954 b!/-9{ %ol1WG 9 Y~r)WV!G 前言
svt3gkR0 [tC=P&< 2h@&yW2j g%)cyri 写本文的初衷主要是记录下我一段时间学习使用FreeBSD建设网站平台的一些经验和体会。因为本人是菜鸟,所以很多地方不够完善。本文权当给初学者提供一个具体可操作的实例。所有操作步骤都是我边做边写。避免出现遗漏或一些不必要的小错误,给初学者带来麻烦。
/nh3/[u EKuLt*a/ 本网站平台建设全过程包括FreeBSD系统的安装,web、ftp、mail、proxy服务器、视频点播服务器等。所有过程都在FreeBSD4.7环境下测试通过。
#<V5sgqS =|fB":vk 由于写本文时参考了网上太多前辈和大侠的资料,无法一一列举。还请作者原谅。
6B
b+f" SpIiMu( 本连载文章前后关联很紧密,建议初学者一步一步来做。
|g!$TUS. _$vbb#QXZG 试验环境如下:
T'Jl,)" #N"QTD|i 硬件环境:普通pc机,双网卡。配制不需要高,主要是稳定,并能适应长时间开机。听前辈介绍AMD k6的cpu运行FreeBSD好像有点问题。不过我没有试验。建议用intel的。
mYk~ ]a- WXf[W 软件环境:操作系统:FreeBSD4.7(4.8)
LF{8hC[ E
KJ2P$ web服务器:Apache 1.3.27+modssl +mod_php4+mod_gzip+mod_fastcgi +mod_perl +mysql3.23
hoiC
J}us {XC[Ia6jtL ftp服务器:Proftpd1.2.7+proftpd-mod-quotatab-1.2.4+mysql
@bAuR E8lq2r= mail服务器: iceblood前辈制作的qmail安装包(经过修改)+vqregister-2.5
^@Qc!(P W%MS,zkAE proxy服务器:使用FreeBSD内置的NAT和PPP拨号+squid
}:s.m8LC5n Xe\v6gbD 视频点播服务器:Helix Universal Servevr (realserver9.01)
$&jVEMia <|E*aR|M 网络环境:我用的是adsl动态拨号方式,因为动态ip所存在的一些问题,我把所有的服务都装在一台机器上,且这台机器要直接与外网相连。静态ip更方便一些。(本文两种方式都会讨论)
VTX6_&Hc1g f"4w@X2F m3(p7Z^Bq XrXW6s;Z 第一步:安装系统
I2)2'j,B 4T~wnTH0Xg 关于安装过程网上有很多文章,这里不作详述。仅提出几点建议供大家参考:
|WT]s B0Eq &
\C1QkI 1、 采用最小化安装。
j]mnH`#BL r0pwKRE~t 2、 安装时启用inetd,并在编辑inetd.conf文件时,把带有“ftp”的行前面的“#”号去掉。这样作是为了以后安装软件时可以用ftp上传文件。
0hXx31JN N LXth-j=] 3、 添加一个wheel组的用户,这样在系统工作正常后可以在windows系统上通过终端登录软件(如SecureCRT)进行所有操作。FreeBSD4.7在最小安装时支持SSH终端登录,所以我们需要使用支持SSH协议的终端软件,如SecureCRT。例如我添加的用户名是ylf,隶属wheel系统组。系统产生一个用户目录/home/ylf。我可以通过SecureCRT以ylf身份登录到系统,然后通过su命令切换到root用户。同时我也可以在IE浏览器内键入
ftp://192.168.0.1 ,并输入ylf用户名和密码登录ftp将需要的文件上传到自己的用户目录里。(192.168.0.1是我的服务器连接内网的网卡ip地址)。以下除系统安装部分,我都是采用终端方式操作。
s._,IW;
j(>xP*il 4、 分区时将/home、/usr和/var划的大一些,因为/usr为程序目录,/var要存放日志,/home是用户主目录,我的用户文件如网页、ftp上传文件等都放在这里。还有最好保留一部分空间留作以后需要的时候用。我的机器上有2块硬盘,一快18.2G SCSI硬盘,一块40G IDE硬盘。我是这样划分的。
ZP0D)@8 +KTHZpp!c2 128M /
.jbxA2 .E7"Lfs- 20G /home
alsD TQ' Z(LTHAbBk| 2G /ftp
<<Z, 1{3F >$a;+v
256M /tmp
\lwLVe $:A80(#+ 6G /usr
}YM[aq?6 C/9]TkX}q 5G /var
CZ{7?:^f 3m & 其中/ftp是为匿名ftp用户访问专用。剩余空间留作备用。当然如果硬盘空间少的话,做我们的试验也是够用的。
{DUtdu[ CHCT
e 关于安装方面的文章,大家也可以参考delphij写的《FreeBSD服务器的安装与优化》。
http://community.freebsdchina.org/catalog.php?forum=34 一文。
[;~"ctf{ +A$>F@u 安装完系统后,要重新编译内核。目的是要系统支持Firrwall和提高运行效率。
*q[;-E(fZ# eq<!
首先确认系统是否安装了FreeBSD的内核支持。如果是最小安装,则需要运行/stand/sysinstall命令安装内核支持。方法如下:
j0{Qy;wP ) >V\^oh)t]t # /stand/sysinstall
hL}ZPHA cT;Zz5 选Configure—Distributions—src—sys,内核文件将被安装在/usr/src/sys目录中。
`9T5Dem|# ['K}p24, 注意:这之后的过程在终端上操作要方便许多。SecureCRT支持在终端界面上直接拷贝和粘贴文本内容。
f'M([gn^_ `UqX`MFz 转到内核文件目录
rP!GS
_RG EiZa,}A # cd /usr/src/sys/i386/conf
"-rqL L
gy^^. 编辑内核文件
{r5OtYmpR )dJx82"
l # vi kernel_wwwx # kernel_wwwx为我的内核文件名
Zzb?Nbf bUYjmb2g) 我的内核文件如下:
nC!L<OMr EP+LK?{% #
&$l#0?Kc^ M23r/eg] # GENERIC -- Generic kernel configuration file for FreeBSD/i386
sN#ju5 uaky2SgN #
dI!/H&`B] >Ml5QO$*.q # For more information on this file, please read the handbook section on
*{\))Zmhd {:Kr't<XzF # Kernel Configuration Files:
?|\wJrM ] q)AX*T+ #
0y+i?y
9 A<( DYd1H #
http://www.FreeBSD.org/doc/en_US.IS...fig-config.html Ea-U+7JC Qam48XZ > #
H4sc7- +!$`0v # The handbook is also available locally in /usr/share/doc/handbook
}WBHuVcZG ~_g{P3 # if you've installed the doc distribution, otherwise always see the
@S>;t)\J OkCAvRg # FreeBSD World Wide Web server (
http://www.FreeBSD.org/) for the
| :id/ x]3[0K5; # latest information.
]IzD` K{B| #
e,W,NnCICj rI6+St # An exhaustive list of options and more detailed explanations of the
p(Osz7K qL[SwEc # device lines is also present in the ./LINT configuration file. If you are
Mq'm
TM l@-h.tS # in doubt as to the purpose or necessity of a line, check first in LINT.
(=EDqAZg f/iMI)J #
ibG>|hV w~Vqg:'\$ # $FreeBSD: src/sys/i386/conf/GENERIC,v 1.246.2.48 2002/08/31 20:28:26 obrien Exp $
t%<y^Wa= >[~7fxjK- Q(e 8.+
yZTg machine i386
{esb"beGLa xH}bX- m cpu I586_CPU
25@@-2h @ t*u#4I1 cpu I686_CPU
}Gy M<!: [9#zEURS ident kernel_wwwx #内核文件名,这个要和你的内核文件名一致
)OVa7[-T GQQp(%T maxusers 0
1EWZA PrA(==FX/ =q`T|9v "^;h' options INET #InterNETworking
.0~uM!3y 1MT,A_L options FFS #Berkeley Fast Filesystem
f*9O39&| =2ED
w_5E options FFS_ROOT #FFS usable as root device [keep this!]
5O
Y5b8 ts=:r options SOFTUPDATES #Enable FFS soft updates support
_mwt{D2r} Vo6g /h?` options UFS_DIRHASH #Improve performance on big directories
n\f]?B( XD't)B(q options PROCFS #Process filesystem
r9L--#=z ZmNNR 1%/ options COMPAT_43 #Compatible with BSD 4.3 [KEEP THIS!]
p(8 @ *c&|2EsZ options SCSI_DELAY=15000 #Delay (in ms) before probing SCSI
jIVD i~Ld 2A:h&t/|C options SYSVSHM #SYSV-style shared memory
5sN6&'[ ?( z"Ub] options SYSVMSG #SYSV-style message queues
&g1\0t a6 0rJ#GD options SYSVSEM #SYSV-style semaphores
Mw)6,O` cUdS{K&K options P1003_1B #Posix P1003_1B real-time extensions
x{tlC}t dM P'Vnfj options _KPOSIX_PRIORITY_SCHEDULING
GG +T- !6@ 'H4cb= options ICMP_BANDLIM #Rate limit bad replies
-5ZmIlL.S L[,19;( options AHC_REG_PRETTY_PRINT # Print register bitfields in debug
u]9\_{c]Q r@bh,U$ # output. Adds ~128k to driver.
T#*H 22U`1AD3U options AHD_REG_PRETTY_PRINT # Print register bitfields in debug
ASre@pW 5,g +OY=\ # output. Adds ~215k to driver.
s(J>yd= FF!PmfF' Xc}XRKiy{ <c:H u{D device tun 1
8N?D1;F; o)^Wz options IPFIREWALL #防火墙
jX(hBnGW ( }Bb=~ options IPFIREWALL_FORWARD #允许透明代理
GQ>0E 2Q5 @2jT options IPFIREWALL_VERBOSE #允许防火墙日志
Hbd>sS z ynu0X options IPFIREWALL_VERBOSE_LIMIT=100 #限制日志
AX<f$%iqD Y0A(-" options IPFIREWALL_DEFAULT_TO_ACCEPT #默认允许所有IP包
;FRUB@: uLWu. Vx options IPDIVERT #启用由ipfw divert使用的转向IP套接字
.kn2M&P>= y$SUYG'v |5O>7~Tp o ]z#~^w # To make an SMP kernel, the next two are needed
}u=Oi@~ nPqpat`E #options SMP # Symmetric MultiProcessor Kernel
.9PT)^2 *kg->J #options APIC_IO # Symmetric (APIC) I/O
|iUC\F=- g$?^bu dxv {\P%J:s#9 r~ 2*'zB device isa
IDFzyg_ EG\;l9T device eisa
/lu|FWbEw %Uz\P|6PO device pci
G8klWZAJ f:<BUqa zqXF`MAB= gu[EYg r9'[7b1l j-W$)c3X # ATA and ATAPI devices
`Hlf.>b1 dnU-v7k,{ device ata
J:Qx5;b; hr 6j+p: device atadisk # ATA disk drives
}&e HU C49\'1\6 ] \_tO ce}A!v ;p`to"6IFD ~uty<fP # SCSI Controllers #没有SCSI设备不需要这段
/pPH D] P=jsOuW device ahb # EISA AHA1742 family
4Z~ nWs )&d=2M;3 device ahc # AHA2940 and onboard AIC7xxx devices
H>%AK'' $["HC-n?.k device ahd # AHA39320/29320 and onboard AIC79xx devices
j9hfW' =2Yt[8'; device amd # AMD 53C974 (Tekram DC-390(T))
['.]) 1ruI++P device isp # Qlogic family
aSX4~UYB= ]Z8u0YtM) device mpt # LSI-Logic MPT/Fusion
L'?aoRj GyN|beou device ncr # NCR/Symbios Logic
c]aU}[s1 t~/:St device sym # NCR/Symbios Logic (newer chipsets)
m1Y a sA|SOAn options SYM_SETUP_LP_PROBE_MAP=0x40
T :d+Qz\ xw
43P. # Allow ncr to attach legacy NCR devices when
w.(W G+ phjM(lmCo # both sym and ncr are configured
9]oT/ooM BoYY^ih v7wyQx+Q vjx'yh| device adv0 at isa?
*$fM}6} \]]K{DO device adw
B=& [Z2 ~rdS#f&R2 device bt0 at isa?
ZF[W<Q w
a(Y[]V device aha0 at isa?
ISs&1`Y S*h^7?Bu device aic0 at isa?
%"A8Af**I >,]a>V ~^Cx->l r*vh3.Agl device ncv # NCR 53C500
Ia}qDGqPp! h$!YKfhq} device nsp # Workbit Ninja SCSI-3
ZY`9 Uq#2~0n> device stg # TMC 18C30/18C50
%Tp
k1 yV:8>9wE8 (l{8Ixs {] ]%0!n\ # SCSI peripherals #没有SCSI设备不需要这段
GEc-<`- fGlvum device scbus # SCSI bus (required)
1n^N`lD8]6 20|_wAA5 device da # Direct Access (disks)
(c0L
H +?U[362> device sa # Sequential Access (tape etc)
e72Fz#<q 63=&??4 device cd # CD
)H
W m1;Htw device pass # Passthrough device (direct SCSI access)
h@$SJe(hl ^7aqe*|vm *P=3Pl?j n!/0yR2S Bam.B6- pJ/]\>#5 @e3+Gs {L7Pha
# atkbdc0 controls both the keyboard and the PS/2 mouse
q<q IT KMIe%2:b5 device atkbdc0 at isa? port IO_KBD
?m]vk|> Dnw^H. device atkbd0 at atkbdc? irq 1 flags 0x1
{. 9BG& %eDSo9Y by
@q g: VtLRl0/ device vga0 at isa?
@rbd`7$% k37?NoT p]RQ-0 ^t4^gcoZ4Z ';FJs&=I >o1dc* # syscons is the default console driver, resembling an SCO console
@`L;_S+ :VlA2Ih&q device sc0 at isa? flags 0x100
q"2APvsvp 1cOR?=G~ jSE)&K4nI $lT8M-yK\ gdf0 gxVr1DIkN # Floating point support - do not disable.
(1D1;J4g A)]&L`s device npx0 at nexus? port IO_NPX irq 13
MygAmV& 9
fB|e| '9f0UtT|[ JyE-c}I xcW\U^1d #G]IEO$M6 # Serial (COM) ports
5eff3qrH{ #9|&;C5',! device sio0 at isa? port IO_COM1 flags 0x10 irq 4
p"%D/-%Gu vEg%ivj3 0QZT<Zs X|{T ljn # 我用的是8139和Dlink DFE-530TX网卡,大家可根据自己的网卡型号保留或删除
pmB
{b
aO<7a
6 # 使用公共的MII总线控制器代码的PCI以太网适配器
59)w+AW &f.|MNz; # 注意:一定要保留'device miibus'以确保可用
3Y38lP:>h rq3f/_#L!O # PCI Ethernet NICs that use the common MII bus controller code.
O^~IY/[ L3Y,z3/ # NOTE: Be sure to keep the 'device miibus' line in order to use these NICs!
;9z|rWsF *G.vY#h device miibus # MII bus support
b
VEJ %RV81H9B device fxp # Intel EtherExpress PRO/100B (82557, 82558)
>b2!&dm e1W9"&4>G{ device rl # RealTek 8129/8139
]`$yY5 &W0 h s',f device vr # VIA Rhine, Rhine II
vz4(
k/ B.G6vx4yp device xl # 3Com 3c90x (``Boomerang'', ``Cyclone'')
L&kCI`Tb D^@@ P D{B?2}X gEk;Tj # Pseudo devices - the number indicates how many units to allocate.
{4 Yxh8 Bz } nP9 pseudo-device loop # Network loopback
G7&TMg7i DK?aFSf\ pseudo-device ether # Ethernet support
(o|bst][S BZW03e8| pseudo-device sl 1 # Kernel SLIP
phu,&DS! aU(.LC pseudo-device ppp 1 # Kernel PPP
o C|oh s*Qyd{"z pseudo-device tun # Packet tunnel.
y-+W N0S^{j,i pseudo-device pty # Pseudo-ttys (telnet etc)
Vpg>K #w t~ {O)tt pseudo-device md # Memory "disks"
( 5!'42 2JK
'!Ry) pseudo-device gif # IPv6 and IPv4 tunneling
s_y8+BJaV vcu@_N 1Dc pseudo-device faith 1 # IPv6-to-IPv4 relaying (translation)
KuJ9bn{u!C [+D]!&