System/FreeBSD

base

Base packages

pkg install sudo bash vim wpa_supplicant screen password-store openvpn rsync geany base64 cups-2.4.2 meld

User setup

pw groupmod wheel -m eadam
chsh -s /usr/local/bin/bash eadam
visudo => uncomment sudo for wheel group
chsh -s /usr/local/bin/bash root

echo "kern.ipc.shm_allow_removed=1" >> /etc/sysctl.conf
echo "kern.vt.enable_bell=0" >> /etc/sysctl.conf

cat /etc/sysctl.conf

cat /boot/loader.conf

aesni_load="YES"
geom_eli_load="YES"
security.bsd.allow_destructive_dtrace=0
kern.geom.label.disk_ident.enable="0"
kern.geom.label.gptid.enable="0"
cryptodev_load="YES"
zfs_load="YES"
kern.vty=vt
sem_load="YES"
linux_load="YES"

cat /etc/rc.conf

clear_tmp_enable="YES"
syslogd_flags="-ss"
sendmail_enable="NONE"
hostname="eadam-laptop"
keymap="us.kbd"
ifconfig_ue0="DHCP"
sshd_enable="YES"
ntpd_enable="YES"
moused_nondefault_enable="NO"
# Set dumpdev to "AUTO" to enable crash dumps, "NO" to disable
dumpdev="AUTO"
zfs_enable="YES"
dbus_enable="YES"
hald_enable="YES"
kld_list="i915kms"
slim_enable="YES"
pcscd_enable="YES"

X / i3

pkg install xorg drm-kmod xf86-input-synaptics-1.9.1_9 autorandr-1.12.1 i3 i3status i3lock mate rofi chromium firefox

edit .xinitrc

yubikey / u2f

Yubikey for ssh

Install package:

pkg install py39-yubikey-manager yubico-piv-tool pcsc-lite ccid

Enable and start pcscd daemon:

sudo service pcscd enable
sudo service pcscd start

Set PKCS11 provider for ssh (not required):

echo "PKCS11Provider /usr/local/lib/libykcs11.so" >>~/.ssh/config

And/or start your ssh-agent and add the key:

eval `ssh-agent`
ssh-add -s /usr/local/lib/libykcs11.so

Yubikey for U2F/FIDO2

pkg install u2f-devd
service devd restart
pw group mod u2f -m eadam
service devd restart

suspend

acpiconf -s 3

backlight

pkg install intel-backlight
intel_backlight 30
# echo 'acpi_video_load="YES"' >> /boot/loader.conf
# cp /usr/local/share/examples/intel-backlight/acpi-video-intel-backlight.conf /usr/local/etc/devd/
sysrc kld_list+=" acpi_video"

wifi

ifconfig wlan0 create wlandev iwm0
ifconfig wlan0 up scan
if [ $1 = "withings" ]; then
  wpa_supplicant -i wlan0 -c /etc/wpa_supplicant.conf &
else
  wpa_supplicant -i wlan0 -c /etc/wpa_supplicant_home.conf &
fi
sleep 3
dhclient wlan0

sound

kldload snd_driver
echo "hw.snd.default_unit=1
hw.snd.default_auto=0" >> /etc/sysctl.conf

webcam

pkg install webcamd pwcview v4l-utils v4l_compat
echo 'webcamd_enable="YES"' >> /etc/rc.conf
echo 'cuse_load="YES"' >> /boot/loader.conf
pw groupmod webcamd -m eadam

todo

- home backup