[Next] [Previous] [Up] [Top] [Contents]

CHAPTER 7 Operating System Installation

7.4 Post Install Actions


After you've installed the operating system you should install the recommended patches, and then you can personalize the system to your needs. Below are some of the steps I take to finish and personalize the configuration on my systems.
Post Install Actions
ProcedurePurposeSunOS 4.XSunOS 5.X
touch /TIMESTAMPlet's you know the start timeXX
passwdset a passwd on the root loginXX
rm /etc/hosts.equivcomes with "+"X 
vi /etc/netmasks

128.146.0.0 255.255.255.0

create an entry for the network, e.g. for 128.146XX
vi /etc/ttytabchange "secure" -> "unsecure"X 
ifconfig le0 netmask + broadcast xxx.yyy.zzz.255reset the netmask and broadcastX 
route add default xxx.yyy.zzz.1 1reset routeXX
ftp www-wks.acs.ohio-state.eduunder /pub/sunpatches retrieve the patch files needed. Contact me for the current patch list for your version of the OS.XX
Install patchesfollow READMEs for the individual patchesXX
echo "xxx.yyy.zzz.1" > /etc/defaultroutercreate /etc/defaultrouter with the IP address of the default routerXX
vi /etc/rc.local

mount /tmp

chmod 1777 /tmp

chmod g+s /tmp

ifconfig le0 broadcast `cat /etc/defaultrouter |sed -n "s/\.[0-9]$/\.255/p"`

edit /etc/rc.local

to mount /tmp as tmpfs (on swap) and to set the proper permissions on the directory

 

and to set the proper broadcast

X 
vi /etc/fstab

swap /tmp tmp rw 0 0

add the line to mount /tmp on swapX 
Generate a new kernel and reboot with it this is required for several of the OS patchesX 
vi /.cshrc /.login /.profileedit to taste and remove "." from pathXX
vipwprotect all accounts, even sync

remove +: entry if not using NIS

X 
Create necessary accountswe'll look at how to do this in a later ChapterXX
vi /etc/groupremove +: entry if not using NISX 
Add tcsh and/or bash to /usr/bin much better than csh or sh for login (the sources can be obtained via anonymous ftp from tesla.ee.cornell.edu in /pub/tcsh and prep.ai.mit.edu in /pub/gnu for tcsh and bash, respectively.) XX
cat << EOF > /etc/shells

/sbin/sh

/bin/sh

/bin/csh

/bin/ksh

/bin/bash

/bin/tcsh

EOF

add entries for all login shells, e.g.:XX
chown root /homenot caught by patch 100103X 
rm -rf /var/spool/uucppublicwritable by everyone, so remove if not usedXX
Install resolv+2.1.1 package

/usr/lib/libresolv.a

/usr/lib/libc.so.1.9.1

/usr/lib/libc.sa.1.9.1

Now execute ldconfig

Then copy the new include files to /usr/include.

for DNS, or use NIS, it includes:

resolver library

shared library

shared library

to pick up the new libraries

X 
cat << EOF > /etc/resolv.conf

domain acs.ohio-state.edu.

nameserver 128.146.1.7

nameserver 128.146.48.7

search acs.ohio-state.edu magnus.acs.ohio-state.edu cis.ohio-state.edu eng.ohio-state.edu

EOF

for DNS,

with the IP domain,

up to 3 nameservers, these are

ns1.net and ns2.net

and a search path

XX
cat << EOF > /etc/host.conf

order hosts,bind

trim .magnus.acs.ohio-state.edu, .acs.ohio-state.edu

nospoof on

alert on

EOF

used by resolv+

set the host database order to search

trim the domains

 

X 
vi /etc/nsswitch.conf

hosts: files dns

set name service switch lookups

set the host database order to search

 X
vi /etc/syslog.conf

define(LOGHOST,localhost)

 

-or-

vi /etc/hosts

www.xxx.yyy.zzz hostname loghost

define LOGHOST (first line in file), or reference the files locally and remove the

"ifdef('LOGHOST'..." entries, as desired

 

add the alias loghost to your hostname entry, not to the localhost entry

XX
chmod o-w /etc/*remove general write permissionsXX
Set up xntp, including change in /etc/services for udp serviceNetwork Time ProtocolXX
Install any other desired packages, e.g. perl, language compilers, etc.make the system more usableXX
Backup the systemso you can reproduce the current state after a catastrophe.XX


Unix System Administration - 8 AUG 1996
[Next] [Previous] [Up] [Top] [Contents]