Eric @ EricBess WebHome

Re: Why is Microsoft to buy Yahoo Linux? http://blog.sina.com.cn/s/blog_4e85818901008g4k.html

linux is not opensource all the world, can not even be regarded as a good example. With it too, is difficult to control and too many commercial interests involved in hosting, I do not think it will become a rival of windows, windows at least more organized.
Freebsd preferred framework by the independent authority of the elites to maintain the core of development, in the open on the basis of their own, inclusive of the world. Due to the development of such a way so that freebsd stability and rich. In fact, "since ancient times to the" large-scale systems in this way are the mainstream of development. Do not agree with you, think about TCP / IP with the RFC.
If Bo from the main responsibility for the acquisition of the point of view of things, microsoft real game of the other party should be Freebsd, TCP / IP represented existed since ancient times and has been very successful model for the development of large-scale systems. That is, by an independent team of elite lay the foundation for material gain does not open and self-sacrifice and absorb all the fine elements of self-achievement. This is like microsoft such a business is unable to face the bane, but microsoft is bound to face one day, Bill.G will see.

Former chapter: FreeBSD standard setup and tuning [load]

0 sections: a minimum of installation work

sysinstall -> Configure -> Distributions -> man / / install the man I used to, there is no such thing, really painful
/ usr / libexec / locate.updatedb / / update the database LOCATE

Subsection 1: ssh configuration

ee / etc / rc.conf
/ / If there sshd_enable = "YES" then we have to open an ssh server, if not, please add.

ee / etc / ssh / sshd_config
/ / Find # PermitRootLogin no line, remove the # sign in front, then the back of no change yes, according to the ESC and then double-save from the carriage return. If you can use VI.

/ / Restart the SSH service
/ etc / rc.d / sshd restart

First section 2: System Update

/ / Cvsup installation procedure. cvsup from a remote server hosts the main cvs (1) distributed database and update the tree-source software package used to update the operating system and software.
setenv PACKAGEROOT "ftp://ftp.freebsdchina.org/"
setenv PACKAGESITE "ftp://ftp.freebsdchina.org/pub/FreeBSD/ports/i386/packages-7.0-release/Latest/" OR
/ / At / etc / profile, quickly set up the domestic packagesite
export PACKAGESITE = ftp://ftp.freebsdchina.org/pub/FreeBSD/ports/i386/packages-7.0-release/Latest/
export PACKAGEROOT = ftp://ftp.freebsdchina.org/

pkg_add-r cvsup-without-gui
rehash

/ / Now we can use the cvsup, first of all-source software package to update ports.
cp / usr / share / examples / cvsup / ports-supfile ~ root

Update servers:

ee ~ root / ports-supfile
/ / * default host = CHANGE_THIS.FreeBSD.org
/ / In order to more rapidly, generally choose from our relatively close to the server:
/ / * default host = cvsup.freebsdchina.org

Update PORTS LIST:

cvsup-g-L 2 ~ root / ports-supfile

FreeBSD 7.0-RELEASE officially released, which is 7-STABLE branch of the first official release, but also the first to the current plan rather than function as a priority odd version. This version of the main highlights include:

- SMP for the environment as well as many other database performance testing exposed the scalability issue has been a significant improvement. FreeBSD 7.0 with a number of cases, the general load performance than FreeBSD 6.X increased 350 percent, high-load conditions to improve performance up to 1500 percent. And so far the best performance of the Linux kernel (version 2.6.22 and 2.6.24), high-performance 15%. These performance improvements for the results from the analysis of system performance and improve the performance assessment of the use case for your specific work load may vary. Performance improvement is mainly derived from the following improvements:
* 1:1 threading model used by default libthr the thread library.
* The inter-process communication (IPC), and scheduler locking network improvements.
* 5.x and 6.x branch of the introduction of the SMP structure optimization.

A number of performance tests show that this version of FreeBSD for up to 8 CPU's case, its performance with the linear increase in the number of CPU. A lot of work to load in the multi-core systems showed remarkable performance.

1. Linux Setup

1.1 Installation

 1 
  2, 
  3 of 
 4 
 5 

  tar /  http: // apache.justdn.org / httpd / httpd-2.X.XX.tar.bz2tar jxvf tar / httpd-2.X.XX.tar.bz2 wget-P tar / http:// apache.justdn.org / httpd / httpd-2.X.XX.tar.bz2tar jxvf tar / httpd-2.X.XX.tar.bz2 
  cd httpd-2.X.XX 
  = / usr / local / apache . / Configure - prefix = / usr / local / apache 
  10 make-j 10 
  make install 

1.2 Config setting

 1 
  2, 

  apachectl / etc / init.d / httpd cp support / apachectl / etc / init.d / httpd 
  / etc / init.d / httpd chmod 755 / etc / init.d / httpd 

Add following to the head "/ etc / init.d / httpd": modified / etc / init.d / httpd: the front lines are changed to look like.

 1 
  2, 
  3 of 
 4 
 5 
 6 
 7 

  # Startup script for the Apache Web Server 
  # Chkconfig: 35 85 15 
  # Description: Apache is a World Wide Web server. It is used to serve \ 
  # HTML files and CGI. 
  # Processname: httpd 
  # Pidfile: / usr / local / apache / log / httpd.pid 
  # Config: / usr / local / apache / conf / httpd.conf 

Run

 1 

  chkconfig - add httpd 

Configuration "/ usr / local / apache / conf / httpd.conf"

 1 

  ServerName yourservername.yourdomainname: 80 

# In the / root / .bash_profile in the PATH **** add: / usr / local / apache / bin

2. Apache with the. Htaccess files to increase user authentication

 1 
  2, 
  3 of 
 4 
 5 
 6 
 7 

  "/var/www/test" Alias / test "/ var / www / test" 
  > <Directory "/ var / www / test"> 
    Options Indexes MultiViews 
    AllowOverride AuthConfig # said authenticate 
    Order allow, deny 
    Allow from all 
  </ Directory> 

3. The name of the virtual-host

 1 
  2, 
  3 of 
 4 
 5 
 6 
 7 
  8, 
 9 
 10 

  NameVirtualHost 61.152.210.22 
  virtualhost > <Virtualhost> </ virtualhost> 
    ServerAdmin eric@ericbess.com 
    ServerName www.ericbess.com 
    eric / public_html / igenus DocumentRoot / home / eric / public_html / igenus 

  virtualhost > <Virtualhost> </ virtualhost> 
    ServerAdmin eric@dyzq.com 
    ServerName mail.dyzq.com 
    local / httpd / htdocs / DocumentRoot / usr / local / httpd / htdocs / 

4.Other

Here, the best in the apache configuration to increase the default file type of cache mechanism, that is, the use of the apache module expires, add a few lines like the following:

 1 
  2, 
  3 of 
 4 
 5 
 6 
 7 

  ExpiresActive On 
  quot;access plus 10  minutes & quot; ExpiresByType text / html & quot; access plus 10 minutes & quot; 
  quot;access plus 1  day & quot; ExpiresByType text / css & quot; access plus 1 day & quot; 
  quot;access 1  month & quot; ExpiresByType image / jpg & quot; access 1 month & quot; 
  quot;access 1  month & quot; ExpiresByType image / gif & quot; access 1 month & quot; 
  quot;access 1  month & quot; ExpiresByType image / jpg & quot; access 1 month & quot; 
  quot;access plus 3  day & quot; ExpiresByType application / x-shockwave-flash & quot; access plus 3 day & quot; 

CVSup from a remote server hosts the main warehouse CVS release the source code tree and upgrade packages. FreeBSD source code in California to maintain a master server, the development of the CVS warehouse. With CVSup, FreeBSD users can easily maintain their own source code tree updated.

CVSup to upgrade the use of so-called pull model. In pull mode, the client needs at a time when the request to the server-side update. Server passive waiting for the client's request to upgrade. Accordingly upgrade all were initiated by the client. Server will not send the request not to upgrade. Users must manually run CVSup client access to updates, or to set up a cron to work to make it permanent law to run automatically.

CVSup term is written in capital letters that represent the complete package. Its main components are running on each user on the client machine cvsup, and run in each of the FreeBSD mirror site on the server side cvsupd.

Installation

CVSup install the simplest way is to use FreeBSD packages collection in the pre-compiled net / cvsup package.
# Pkg_add-r cvsup
If you do not want to install Xorg or ^XFree86 TM computer, you can only use CVSup GUI does not include the net / cvsup-without-gui.
# Pkg_add-r cvsup-without-gui

So we installed cvsup process, but we have to refresh you can order the use of cvsup. Input
# rehash

1. Installation php

Installing PHP 4.4.1 (Linux)

 1 
  2, 
  3 of 
 4 
 5 
 6 
 7 

  tar /  http: // cn.php.net / get / php-4.4.1.tar.bz2 / from / this / mirror wget-P tar / http:// cn.php.net / get / php-4.4.1.tar.bz2 / from / this / mirror 
  / php-4.4.1.tar.bz2 tar jxvf tar / php-4.4.1.tar.bz2 
  cd php-4.4.1 
  = / usr / local / php --with-mysql = / usr / local / mysql --with-apxs2 = / usr / local / apache / bin / apxs . / Configure - prefix = / usr / local / php - with-mysql = / usr / local / mysql - with-apxs2 = / usr / local / apache / bin / apxs 
  10 make-j 10 
  make install 
  usr / local / php / lib / php.ini cp php.ini-dist / usr / local / php / lib / php.ini 

Configuring PHP (Linux)

vi / usr / local / php / lib / php.ini
#; default_charset = "iso-8859-1"
# Add the following line in this line
# default_charset = "gbk"

vi / usr / local / apache / conf / httpd.conf
Find # # AddType application / x-tar. Tgz line, plus the following two lines

 1 
  2, 

  AddType application / x-httpd-php. Php 
  AddType application / x-httpd-php-source. Phps 

# Find the following line followed by the index.php, this means that the default Web page also can index.php

 1 

  DirectoryIndex index.html index.html.var index.php 

# Note: http.conf changed, to restart apache services
# To confirm the successful installation of understanding of the preparation of information: echo "<? Phpinfo ();?>"> / Usr / local / apache / htdocs / phpinfo.php
# Visit http:// yourserve r / phpinfo.php

Installing PHP (FreeBSD port)

# Cd / usr/ports/lang/php5
# Make install clean

Adding the PHP 5 module to Apache (22)>> / usr/local/etc/apache22/httpd.conf

 1 
  2, 
  3 of 

  DirectoryIndex index.php index.html index.htm 
  AddType application / x-httpd-php. Php 
  AddType application / x-httpd-php-source. Phps 

Configuring PHP (freeBSD)

# Cp / usr / local / etc / php.ini-dist / usr / local / etc / php.ini

SOX demand for linux OS password

1. A unique user ID is required in combination with a password to access the system.
2. Automatic password changing after 60 days where technically feasible. If not technically feasible, a compensating control is in place.
3. Password minimum length of 8 characters or maximum length allowed by system when the allowable length is less than 8 characters.
4. User IDs / Accounts suspended after 6 invalid logins if technically feasible. If not technically feasible, a compensating control is in place.
5. Accounts inactive for 60 days are disabled if technically possible. If not technically possible, a compensating control is in place.
6. Password history of 12 is enabled which prohibits the reuse of the last 12 passwords
7. Following a new user's initial logon to the application, the user is prompted to change password.

> From Me

For 2. Expired Setting
[root @ localhost] # passwd-x 60-w 10

For 1.Complexity Setting
Add the following lines to / etc / pam.d / passwd
password requisite pam_cracklib.so type
= "Retype-3-At-least-8-letters-1-capital-1-character" retry = 3
minlen = 10 ucredit = 1 ocredit = 1
password required pam_unix.so use_authtok

Reference Documents
passwd manual
The Linux-PAM System Administrators' Guide
http://www.kernel.org/pub/linux/libs/pam/Linux-PAM-html/pam.html # toc6

Without shutdown of the preparation reload

# / etc / netstart set the network configuration
# sh / etc / rc refresh the whole rc

VMWare under FreeBSD system does not time

# ee / boot / loader.conf
hint.apic.0.disabled = 1