Automating Ten Things To Do After Installing FreeBSD With Rocinante
Automating the ten things I configure on a new installation.
Bastille is an open-source system for automating deployment and management containerized applications on FreeBSD.
- Follow @BastilleBSD on Mastodon
- Join the discussion BastilleBSD on Discord
- Join the discussion BastilleBSD on Telegram
- Subscribe to BastilleBSD on YouTube
- Support BastilleBSD on Patreon
1. Install Rocinante
Rocinante makes configuration management easy on FreeBSD.
pkg install rocinante
2. Bootstrap rocinante template
Grab the Rocinante new-setup template:
rocinante bootstrap https://github.com/cedwards/freebsd-install
Review The Template
Let’s take a peek at the template contents before we apply it.
INCLUDE cedwards/repo-latest
cp root /
CP usr /
PKG vim git-lite zsh htop tree doas bastille rocinante
INCLUDE cedwards/zsh-antigen
CMD rm /etc/ssh/ssh_host_*
SYSRC sshd_dsa_enable="NO"
SYSRC sshd_ecdsa_enable="NO"
SYSRC sshd_ed25519_enable="YES"
SYSRC sshd_rsa_enable="YES"
SERVICE sshd keygen
SERVICE sshd restart
CMD bastille setup
SYSRC pf_enable=YES
SERVICE pf start
3. Apply the template
rocinante template cedwards/freebsd-install