install-post.html

FreeBSD安装说明概述 FreeBSD 提供了一个以文字为主

<p><img src="install/ftp-anon2.png" /></p>
</div>

<p>此文本编辑器叫做 <tt class="COMMAND">ee</tt>。按照指示修改信息文本或是
稍后再用您喜爱的文本编辑器来修改。请记住画面下方显示的文件位置。</p>

<p>按 <b class="KEYCAP">Esc</b> 将弹出一个默认为 <span class="GUIMENUITEM">a) leave
editor</span>的对话框。按 <b class="KEYCAP">Enter</b> 退出并继续。再次按 <b
class="KEYCAP">Enter</b> 将保存修改。</p>
</div>
</div>

<div class="SECT2">
<h2 class="SECT2"><a id="NFSCONF" name="NFSCONF">2.9.5. 配置网络文件系统</a></h2>

<p>网络文件系统 (NFS) 可以让您可以在网络上共享您的文件。一台机器可以
配置成NFS服务器、客户端或两者并存。请参考 <a href="network-nfs.html">Section 19.6</a>
以获得更多的信息。</p>

<div class="SECT3">
<h3 class="SECT3"><a id="NSF-SERVER-OPTIONS" name="NSF-SERVER-OPTIONS">2.9.5.1. NFS
服务器</a></h3>

<pre class="SCREEN">
                       User Confirmation Requested
 Do you want to configure this machine as an NFS server?

                              Yes    [ No ]
</pre>

<p>如果您不想安装网络文件系统，请选择 <span class="GUIBUTTON">[ No ]</span> 然后按 <b
class="KEYCAP">Enter</b>键。</p>

<p>如果您选择 <span class="GUIBUTTON">[ Yes ]</span> 将会出现一个对话框提醒您
必须先建立一个 <tt class="FILENAME">exports</tt> 文件。</p>

<pre class="SCREEN">
                               Message
Operating as an NFS server means that you must first configure an
/etc/exports file to indicate which hosts are allowed certain kinds of
access to your local filesystems.
Press [Enter] now to invoke an editor on /etc/exports
                               [ OK ]
</pre>

<p>按 <b class="KEYCAP">Enter</b> 键继续。系统会启动文本编辑器让您编辑 <tt
class="FILENAME">exports</tt> 文件。</p>

<div class="FIGURE"><a id="NFS-SERVER-EDIT" name="NFS-SERVER-EDIT"></a>
<p><b>Figure 2-36. 编辑 <tt class="FILENAME">exports</tt>文件</b></p>

<p><img src="install/nfs-server-edit.png" /></p>
</div>

<p>按照指示加入真实输出的文件目录或是稍后用您喜爱的编辑器自行编辑。
请记下画面下方显示的文件名称及位置。</p>

<p>按下 <b class="KEYCAP">Esc</b> 键会出现一具对话框，默认选项是 <span
class="GUIMENUITEM">a) leave editor</span>。按下 <b class="KEYCAP">Enter</b>
离开并继续。</p>
</div>

<div class="SECT3">
<h3 class="SECT3"><a id="NFS-CLIENT-OPTIONS" name="NFS-CLIENT-OPTIONS">2.9.5.2. NFS
客户端</a></h3>

<p>NFS 客户端允许您的机器访问NFS服务器。</p>

<pre class="SCREEN">
                       User Confirmation Requested
 Do you want to configure this machine as an NFS client?

                              Yes   [ No ]
</pre>

<p>按照您的需要，选择 <span class="GUIBUTTON">[ Yes ]</span> 或 <span class="GUIBUTTON">[
No ]</span> 然后按 <b class="KEYCAP">Enter</b>。</p>
</div>
</div>

<div class="SECT2">
<h2 class="SECT2"><a id="SECURITYPROFILE" name="SECURITYPROFILE">2.9.6. 安全配置</a></h2>

<p>``安全配置'' 中包含了一些可以通过启用或停用某些程序
来达到某些程序的安全性配置。安全配置越严格，则默认启动的程序就越少。
基本的原则是：除非必要，否则不要执行一些可有有无的程序。</p>

<p>请注意，安全文件的配置都是默认值，在安装完成后您可以随时通过 编辑 <tt
class="FILENAME">/etc/rc.conf</tt>配置文件来改变这些配置。 如果想得到更多的信息请参阅
<span class="CITEREFENTRY"><span class="REFENTRYTITLE">rc.conf</span>(5)</span>
手册。</p>

<p>下表说明每一种安全等级的意义。每列所代表的是安全等级，每行所
代表的是程序或功能是启用还是停用。</p>

<div class="TABLE"><a id="AEN2298" name="AEN2298"></a>
<p><b>Table 2-4. 可能的安全等级</b></p>

<table border="1" class="CALSTABLE">
<col />
<col />
<col />
<thead>
<tr>
<th>&nbsp;</th>
<th>极/高度安全</th>
<th>中度安全</th>
</tr>
</thead>

<tbody>
<tr>
<td><span class="CITEREFENTRY"><span class="REFENTRYTITLE">sendmail</span>(8)</span></td>
<td>否</td>
<td>是</td>
</tr>

<tr>
<td><span class="CITEREFENTRY"><span class="REFENTRYTITLE">sshd</span>(8)</span></td>
<td>否</td>
<td>是</td>
</tr>

<tr>
<td><span class="CITEREFENTRY"><span class="REFENTRYTITLE">portmap</span>(8)</span></td>
<td>否</td>
<td>不一定 <a id="AEN2328" name="AEN2328" href="#FTN.AEN2328"><span
class="footnote">[a]</span></a> </td>
</tr>

<tr>
<td>NFS server</td>
<td>否</td>
<td>是</td>
</tr>

<tr>
<td><span class="CITEREFENTRY"><span
class="REFENTRYTITLE">securelevel</span>(8)</span></td>
<td>是 <a id="AEN2340" name="AEN2340" href="#FTN.AEN2340"><span
class="footnote">[b]</span></a> </td>
<td>否</td>
</tr>
</tbody>

<tr>
<td colspan="3">Notes:<br />
<a id="FTN.AEN2328" name="FTN.AEN2328">a.</a>
如果之前安装时配置机器为NFS客户端或服务器，则会启用些 项目。<br />
<a id="FTN.AEN2340" name="FTN.AEN2340">b.</a> 如果您选择的安全等级配置 securelevel 为
``极度或高度'' 或 ``High''，请阅读<span class="CITEREFENTRY"><span
class="REFENTRYTITLE">init</span>(8)</span>手册并特别注意有关安全
等级意义的部分；否则稍后您可能会过到很大的困难！<br />
</td>
</tr>
</table>
</div>

<pre class="SCREEN">
                       User Confirmation Requested
 Do you want to select a default security profile for this host (select
 No for "medium" security)?

                            [ Yes ]    No
</pre>

<p>选择 <span class="GUIBUTTON">[ No ]</span> 并按 <b class="KEYCAP">Enter</b>
会将安全等级高为中度安全。</p>

<p>选择 <span class="GUIBUTTON">[ Yes ]</span>并按 <b
class="KEYCAP">Enter</b>将允许您选择不同程序的安全等级。</p>

<div class="FIGURE"><a id="SECURITY-PROFILE" name="SECURITY-PROFILE"></a>
<p><b>Figure 2-37. 选择安全等级</b></p>

<p><img src="install/security.png" /></p>
</div>

<p>按 <b class="KEYCAP">F1</b> 显示在线帮助；按<b class="KEYCAP">Enter</b>
键可以回到选择画面。</p>

<p>如果您没有什么特殊的等级需求，请用方向键选择 <span class="GUIMENUITEM">中度</span>，
确定选择了 <span class="GUIBUTTON">[&nbsp;OK&nbsp;]</span> 然后按<b
class="KEYCAP">Enter</b>。</p>

<p>依据您选择的安全等级，会显示相对应的确认信息。</p>

<pre class="SCREEN">
                                 Message

Moderate security settings have been selected.

Sendmail and SSHd have been enabled, securelevels are
disabled, and NFS server setting have been left intact.
PLEASE NOTE that this still does not save you from having
to properly secure your system in other ways or exercise
due diligence in your administration, this simply picks
a standard set of out-of-box defaults to start with.

To change any of these settings later, edit /etc/rc.conf

                                  [OK]
</pre>

<pre class="SCREEN">
                                 Message

Extreme security settings have been selected.

Sendmail, SSHd, and NFS services have been disabled, and
securelevels have been enabled.
PLEASE NOTE that this still does not save you from having
to properly secure your system in other ways or exercise
due diligence in your administration, this simply picks
a more secure set of out-of-box defaults to start with.

To change any of these settings later, edit /etc/rc.conf

                                  [OK]
</pre>

<p>按下 <b class="KEYCAP">Enter</b> 继续安装后面的配置。</p>

<div class="WARNING">
<blockquote class="WARNING">
<p><b>Warning</b>安全等级并非万能药！即使您选择极度安全，您还是必须时常阅读 <a
href="../handbook/eresources.html#ERESOURCES-MAIL" target="_top">邮件列表</a>
中有关安全的部分、使用有效的密码以及平常就注意安全问题。这里只是稍为配置一下
常用的安全等级而已。</p>
</blockquote>
</div>
</div>

<div class="SECT2">
<h2 class="SECT2"><a id="CONSOLE" name="CONSOLE">2.9.7. 配置系统终端</a></h2>

<p>系统提供了几个选项可以让您配置终端的表现方式。</p>

<pre class="SCREEN">
                      User Confirmation Requested
       Would you like to customize your system console settings?

                              [ Yes ]  No
</pre>

<p>要查阅及配置这些选项，请选择<span class="GUIBUTTON">[ Yes ]</span> 并按<b
class="KEYCAP">Enter</b>。</p>

<div class="FIGURE"><a id="SAVER-OPTIONS" name="SAVER-OPTIONS"></a>
<p><b>Figure 2-38. 系统终端配置选项</b></p>

<p><img src="install/console-saver1.png" /></p>
</div>

<p>最常用的选项就是屏幕保护程序了。使用方向键将光标移动到 <span
class="GUIMENUITEM">Saver</span> 然后按<b class="KEYCAP">Enter</b>。</p>

<div class="FIGURE"><a id="SAVER-SELECT" name="SAVER-SELECT"></a>
<p><b>Figure 2-39. 屏幕保护程序选项</b></p>

<p><img src="install/console-saver2.png" /></p>
</div>

<p>选择您想使用的屏幕保护程序，然后按 <b class="KEYCAP">Enter</b>。
之后回到系统终端配置画面。</p>

<p>默认开启屏幕保护程序的时间是300秒。如果要更改此时间，请再次选择 <span
class="GUIMENUITEM">Saver</span> 。然后选择 <span class="GUIMENUITEM">Timeout</span> 并按
<b class="KEYCAP">Enter</b>键。系统会弹出一个对话框如下：</p>

<div class="FIGURE"><a id="SAVER-TIMEOUT" name="SAVER-TIMEOUT"></a>
<p><b>Figure 2-40. 屏幕保护时间设置</b></p>

<p><img src="install/console-saver3.png" /></p>
</div>

<p>您可以直接改变这个值，然后选 <span class="GUIBUTTON">[&nbsp;OK&nbsp;]</span>并按 <b
class="KEYCAP">Enter</b> 键回到系统终端配置画面。</p>

<div class="FIGURE"><a id="SAVER-EXIT" name="SAVER-EXIT"></a>
<p><b>Figure 2-41. 退出系统终端配置</b></p>

<p><img src="install/console-saver4.png" /></p>
</div>

<p>选择 <span class="GUIMENUITEM">Exit</span> 然后按下 <b class="KEYCAP">Enter</b>
键会回到安装后的配置画面。</p>
</div>

<div class="SECT2">
<h2 class="SECT2"><a id="TIMEZONE" name="TIMEZONE">2.9.8. 配置时区</a></h2>

<p>配置您机器的时区可以让系统自动校正任何区域时间的变更并且在执行
一些跟时区相关的程序时不会出错。</p>

<p>例子中假设此台机器位于美国东部的时区。请参考您所在的地理位置来配置。</p>

<pre class="SCREEN">
                      User Confirmation Requested
          Would you like to set this machine's time zone now?

                            [ Yes ]   No
</pre>

<p>选择 <span class="GUIBUTTON">[ Yes ]</span> 并按下 <b
class="KEYCAP">Enter</b>键以配置时区。</p>

<pre class="SCREEN">
                       User Confirmation Requested
 Is this machine's CMOS clock set to UTC? If it is set to local time
 or you don't know, please choose NO here!

                              Yes   [ No ]
</pre>

<p>这里按照您机器时间的配置，选择 <span class="GUIBUTTON">[ Yes ]</span> 或 <span
class="GUIBUTTON">[ No ]</span> 然后按 <b class="KEYCAP">Enter</b>。</p>

<div class="FIGURE"><a id="SET-TIMEZONE-REGION" name="SET-TIMEZONE-REGION"></a>
<p><b>Figure 2-42. 选择您所处的地理区域</b></p>

<p><img src="install/timezone1.png" /></p>
</div>

<p>请选择适当的区域然后按 <b class="KEYCAP">Enter</b>。</p>

<div class="FIGURE"><a id="SET-TIMEZONE-COUNTRY" name="SET-TIMEZONE-COUNTRY"></a>
<p><b>Figure 2-43. 选择您所在的国家</b></p>

<p><img src="install/timezone2.png" /></p>
</div>