Automating Ten Things To Do After Installing FreeBSD With Rocinante

Automating the ten things I configure on a new installation.

The top ten things I configure on a new installation.

Bastille is an open-source system for automating deployment and management containerized applications on FreeBSD.


1. Install Rocinante

Rocinante makes configuration management easy on FreeBSD.

pkg install rocinante

2. Bootstrap rocinante template

Grab the Rocinante new-setup template:

rocinante bootstrap https://github.com/cedwards/freebsd-install

Review The Template

Let’s take a peek at the template contents before we apply it.

INCLUDE cedwards/repo-latest

cp root /
CP usr /

PKG vim git-lite zsh htop tree doas bastille rocinante

INCLUDE cedwards/zsh-antigen

CMD rm /etc/ssh/ssh_host_*
SYSRC sshd_dsa_enable="NO"
SYSRC sshd_ecdsa_enable="NO"
SYSRC sshd_ed25519_enable="YES"
SYSRC sshd_rsa_enable="YES"
SERVICE sshd keygen
SERVICE sshd restart

CMD bastille setup

SYSRC pf_enable=YES
SERVICE pf start

3. Apply the template

rocinante template cedwards/freebsd-install
Avatar
Christer Edwards
Project Lead

FreeBSD die-hard, software developer, author, educator, man behind BastilleBSD.