FreeBSD on Net Boy

FreeBSD使用Rclone掛載報錯處理

Sun, 24 Nov 2024 00:54:53 +0800

Error

FreeBSD: failed to open fuse device: No such file or directory

解決方案

FUSE

pkg install fuse

rc.conf

vim /etc/rc.conf
fusefs_enable="YES"

loader.conf

vim /boot/loader.conf
...
fusefs_load=YES

上述配置文件修改完成後，執行reboot,隨後繼續使用rclone掛載就可以了。

FreeBSD防火墙之IPFW

Thu, 17 Oct 2024 13:53:42 +0800

IPFIREWALL (IPFW) 是一个由 FreeBSD 发起的防火墙应用软件，它由 FreeBSD 的志愿者成员编写和维护。

在 FreeBSD 12 中，ipfw 已经默认被编译进内核了，它默认会有一条规则，规则号为 65536，是不可以删除的，这条规则会把所有流量都切断，所以还没配置好之前，千万不要随意启动 ipfw，否则就会面临无法连上远程 FreeBSD 的问题。

环境

OS Version: freeBSD 14

配置 ipfw

sysrc firewall_enable="YES"  # 允许防火墙开机自启
sysrc firewall_type="open"  # 让系统把流量通过，这样就可以使用防火墙
sysrc firewall_script="/etc/ipfw.rules"  # 制定ipfw规则的路径，我们待会儿在这里编辑规则
sysrc firewall_logging="YES"  # 这样ipfw就可以打日志
sysrc firewall_logif="YES"  # 把日志打到 `ipfw0` 这个设备里

编辑规则文件

编辑 /etc/ipfw.rules 文件：
# vim /etc/ipfw.rules

IPF="ipfw -q add"
ipfw -q -f flush

# loopback
$IPF 10 allow all from any to any via lo0
$IPF 20 deny all from any to 127.0.0.0/8
$IPF 30 deny all from 127.0.0.0/8 to any
$IPF 40 deny tcp from any to any frag

# statefull
$IPF 50 check-state
$IPF 60 allow tcp from any to any established
$IPF 70 allow all from any to any out keep-state
$IPF 80 allow icmp from any to any

# open port for ssh
$IPF 110 allow tcp from any to any 22 out
$IPF 120 allow tcp from any to any 22 in

# open port for http and https
$IPF 130 allow tcp from any to any 80 out
$IPF 150 allow tcp from any to any 80 in
$IPF 160 allow tcp from any to any 443 out
$IPF 170 allow tcp from any to any 443 in


# deny and log everything
$IPF 500 deny log all from any to any

# default rules . deny all
$IPF 65535 deny ip from any to any

启动 ipfw

root@nl:~ # service ipfw start
Firewall rules loaded.
Firewall logging enabled.
Firewall logging pseudo-interface (ipfw0) already created.

检查状态

root@nl:~ # service ipfw status
ipfw is enabled

查看当前规则

root@nl:~ # ipfw list
00010 allow ip from any to any via lo0
00020 deny ip from any to 127.0.0.0/8
00030 deny ip from 127.0.0.0/8 to any
00040 deny tcp from any to any frag offset
00050 check-state :default
00060 allow tcp from any to any established
00070 allow ip from any to any out keep-state :default
00080 allow icmp from any to any
00110 allow tcp from any to any 22 out
00120 allow tcp from any to any 22 in
00130 allow tcp from any to any 80 out
00140 allow tcp from any to any 80 in
00500 deny log ip from any to any
65535 deny ip from any to any

FreeBSD编译安装openresty

Wed, 16 Oct 2024 23:32:15 +0800

环境信息

OS Version : freeBSD 14

下载openresty

freebsd 自带的fetch太慢了，还是用回wget吧.

wget https://openresty.org/download/openresty-1.25.3.2.tar.gz

创建运行用户

创建一个普通用户www用来作为openresty运行的用户.

adduser www

安装依赖

下面依赖包根据实时版本安装，下面列出来的版本号不是一成不变的.

root@nl:/data/openresty-1.25.3.2 # pkg install cmake-3.30.5  perl5-5.36.3_2  gcc-13_5 make++-2.0_1 pcre-8.45_4 zlib-ng-2.2.2  openssl-3.0.15,1 git-2.46.2 make++-2.0_1 gmake-4.4.1

brotli

git clone --recurse-submodules https://github.com/google/ngx_brotli
cd ngx_brotli/deps/brotli
mkdir out && cd out
cmake -DCMAKE_BUILD_TYPE=Release -DBUILD_SHARED_LIBS=OFF -DCMAKE_C_FLAGS="-Ofast -m64 -march=native -mtune=native -flto -funroll-loops -ffunction-sections -fdata-sections -Wl,--gc-sections" -DCMAKE_CXX_FLAGS="-Ofast -m64 -march=native -mtune=native -flto -funroll-loops -ffunction-sections -fdata-sections -Wl,--gc-sections" -DCMAKE_INSTALL_PREFIX=./installed ..
cmake --build . --config Release --target brotlienc


# nginx vhost config
...
    #启用brotli压缩
    brotli on;
    brotli_comp_level 6;
    brotli_buffers 16 8k;
    brotli_min_length 20;
    # 注意要配置压缩的文件类型(content-type)
    brotli_types text/plain text/css application/json application/x-javascript text/xml application/xml application/xml+rss text/javascript application/javascript image/svg+xml application/wasm application/octet-stream;  
..

编译安装

root@nl:/data/openresty-1.25.3.2 # ./configure --prefix=/usr/local/openresty \
            --with-http_ssl_module \
            --with-http_gzip_static_module \
            --with-http_realip_module \
            --with-stream \
            --with-stream_ssl_module \
            --with-http_secure_link_module \
            --with-http_sub_module \
            --with-http_v2_module \
            --with-http_dav_module \
            --add-module=/data/ngx_brotli
root@nl:/data/openresty-1.25.3.2 #  gmake && gmake install
root@localhost:/data/software/openresty-1.25.3.2 # ln -snf /usr/local/openresty/nginx/sbin/nginx /usr/local/bin/nginx

验证安装

root@localhost:/data/software/openresty-1.25.3.2 # nginx -v
nginx version: openresty/1.25.3.2
root@localhost:/data/software/openresty-1.25.3.2 # nginx
root@localhost:/usr/local/openresty/nginx/conf # netstat -anl | grep 80
tcp4       0      0 192.168.30.200.80                              192.168.30.120.43858                           FIN_WAIT_2 
tcp4       0      0 192.168.30.200.80                              192.168.30.120.56748                           TIME_WAIT  
tcp4       0      0 *.80                                          *.*                                           LISTEN     
tcp4       0     36 192.168.30.200.22                              192.168.30.120.38036         
root@localhost:/usr/local/openresty/nginx/conf # ps aux | grep nginx
root  18668   0.0  1.1 23596 10580  -  Is   07:29    0:00.00 nginx: master process nginx (nginx)
www   18669   0.0  1.5 30252 15032  -  S    07:29    0:00.01 nginx: worker process (nginx)
root  18678   0.0  0.2 12808  2000  0  S+   07:31    0:00.00 grep nginx

pkg報錯missing or size mismatch

Wed, 16 Oct 2024 21:55:44 +0800

環境信息

OS Version: FreeBSD 14
PKG Version : 1.21.3
PKG Repo: NJU Eud

错误信息

在使用pkg安装git的时候报错missing or size mismatch, fetching from remote

root@localhost:/etc/pkg # pkg install git 
Updating FreeBSD repository catalogue...
pkg: No SRV record found for the repo 'FreeBSD'
Fetching meta.conf:   0%
FreeBSD repository is up to date.
All repositories are up to date.
The following 26 package(s) will be affected (of 0 checked):

New packages to be INSTALLED:
	curl: 8.10.0
	expat: 2.6.2
	git: 2.45.2_1
	libnghttp2: 1.62.1
	libpsl: 0.21.5_1
	libssh2: 1.11.0_1,3
	p5-Authen-SASL: 2.17
	p5-CGI: 4.65
	p5-Clone: 0.46
	p5-Digest-HMAC: 1.04
	p5-Encode-Locale: 1.05
	p5-Error: 0.17029
	p5-GSSAPI: 0.28_2
	p5-HTML-Parser: 3.82
	p5-HTML-Tagset: 3.24
	p5-HTTP-Date: 6.06
	p5-HTTP-Message: 6.46
	p5-IO-HTML: 1.004
	p5-IO-Socket-IP: 0.42
	p5-IO-Socket-SSL: 2.085_1
	p5-LWP-MediaTypes: 6.04
	p5-Mozilla-CA: 20240730
	p5-Net-SSLeay: 1.94
	p5-TimeDate: 2.33,1
	p5-URI: 5.28
	pcre2: 10.43

Number of packages to be installed: 26

The process will require 54 MiB more space.
7 MiB to be downloaded.

Proceed with this action? [y/N]: y
[1/3] Fetching p5-HTTP-Message-6.46.pkg: 100%   81 KiB  83.2kB/s    00:01    
pkg: cached package p5-HTTP-Message-6.46: missing or size mismatch, fetching from remote
[2/3] Fetching p5-HTTP-Message-6.46.pkg: 100%   81 KiB  83.2kB/s    00:01    
pkg: cached package p5-HTTP-Message-6.46: missing or size mismatch, cannot continue
Consider running 'pkg update -f'
[3/3] Fetching p5-HTTP-Message-6.46.pkg: 100%   81 KiB  83.2kB/s    00:01    
pkg: cached package p5-HTTP-Message-6.46: missing or size mismatch, fetching from remote
Fetching p5-HTTP-Message-6.46.pkg: 100%   81 KiB  83.2kB/s    00:01    
pkg: cached package p5-HTTP-Message-6.46: missing or size mismatch, cannot continue
Consider running 'pkg update -f'
pkg: Package database is busy while closing!

解決方案

清空緩存

FreeBSD更換pkg國內源

Wed, 16 Oct 2024 15:31:15 +0800

備份源文件

root@localhost:/ # cd /etc/pkg/
root@localhost:/etc/pkg # cp FreeBSD.conf FreeBSD.conf.bak

編輯配置文件

root@localhost:/etc/pkg # vi FreeBSD.conf
# 南京大學
FreeBSD: {
  url: "http://mirrors.nju.edu.cn/freebsd-pkg/${ABI}/quarterly",
  mirror_type: "srv",
  signature_type: "fingerprints",
  fingerprints: "/usr/share/keys/pkg",
  enabled: yes
}

更新 `pkg` 数据库

root@localhost:/etc/pkg # pkg update
Updating FreeBSD repository catalogue...
pkg: Repository FreeBSD has a wrong packagesite, need to re-create database
pkg: No SRV record found for the repo 'FreeBSD'
Fetching meta.conf: 100%    178 B   0.2kB/s    00:01    
Fetching data.pkg: 100%    7 MiB   7.3MB/s    00:01    
Processing entries: 100%
FreeBSD repository update completed. 34404 packages processed.
All repositories are up to date.

查看當前使用的源

root@localhost:/etc/pkg # pkg -vv | grep url
    url             : "http://mirrors.nju.edu.cn/freebsd-pkg/FreeBSD:14:amd64/quarterly",

常用國內源

Owner	URL
中国科学技术大学	http://mirrors.ustc.edu.cn/freebsd-pkg/${ABI}/quarterly
南京大学	http://mirrors.nju.edu.cn/freebsd-pkg/${ABI}/quarterly
網易	http://mirrors.163.com/freebsd-pkg/${ABI}/quarterly

Install FreeBSD14

Wed, 16 Oct 2024 15:00:21 +0800

進入到安裝界面,選擇1,繼續下一步.

選擇Install開始安裝.

3.設定hostname.

保持默認選擇即可.

硬盤分區設定,選擇ZFS,並進行配置.

校驗上述選擇的參數.

爲root用戶設定密碼

網絡設定

時區設定

選擇啓動項

添加一個普通用戶

完成之後,選擇Exit.

安裝完成,按Reboot重新啓動操作系統.

使用root用戶進入操作系統.

FreeBSD切换用户权限

Tue, 15 Oct 2024 21:01:07 +0800

freebad普通用户切换到root用户下。

当你在 FreeBSD 中使用 su 命令时遇到 “su: Sorry” 的错误信息，可以尝试如下方式解决：

查看你当前用户是否在 wheel 组中。可以使用以下命令查看用户组：

groups yourusername

如果你的用户不在 wheel 组中，你需要添加该用户到该组。

2.**添加用户到 wheel 组

如果你有其他管理员权限，可以将你的用户添加到 wheel 组。首先切换到 root 用户，然后执行以下命令：

pw usermod yourusername -G wheel

这会将用户添加到 wheel 组。

FreeBSD on Net Boy

FreeBSD使用Rclone掛載報錯處理

Error

解決方案

FUSE

rc.conf

loader.conf

FreeBSD防火墙之IPFW

环境

配置 ipfw

编辑规则文件

启动 ipfw

检查状态

查看当前规则

FreeBSD编译安装openresty

环境信息

下载openresty

创建运行用户

安装依赖

编译安装

验证安装

pkg報錯missing or size mismatch

環境信息

错误信息

解決方案

FreeBSD更換pkg國內源

備份源文件

編輯配置文件

更新 pkg 数据库

查看當前使用的源

常用國內源

Install FreeBSD14

FreeBSD切换用户权限

更新 `pkg` 数据库