custom kernel installation

[Norman Khine]

thanks for the quick reply


On Sat, Jun 8, 2013 at 12:54 AM, Polytropon <freebsd at edvax.de> wrote:

> On Sat, 8 Jun 2013 00:37:02 +0200, Norman Khine wrote:
> > hello,
> > i have a dedicated server from OVH and have updated freebsd to 9.1 and
> want
> > to enable IPFW in the kernel as this is not enabled.
>
> Why not use the module for this? For many years now, you
> do not need a custom kernel if you want to use IPFW (which
> _had_ to be compiled into the kernel in the past). Use
>
>         # kldload ipfw.ko
>

is it good idea to run this like this, would i have to do some settings, as
i don't want to be locked out of the system?


>
> and maybe
>
>         # kldload ipfw_nat.ko
>
> if it's just about having IPFW. Of course, if explicitely
> having it _in_ the kernel is your objective, unread this
> comment. :-)
>
>
yes i would like to see if i can compile a kernel on an OVH box for freebsd
i have tried, but there is always something that fails :-( so i wanted the
use the one by OVH and modify it for my use.


>
>
> > the way i updated the system was to copy /boot/kernel.old to
> /boot/GENERIC
> > then followed ch25
> >
> http://www.freebsd.org/doc/en/books/handbook/updating-upgrading-freebsdupdate.htmlthis
> > went well and the system is up to date.
>
> So you did freebsd-update to update to 9.1-RELEASE.
>

yes


>
>
>
> > so i got the 9.1 sources and now in /usr/src/sys/amd64/conf i have a
> > GENERIC file, but this is too generic, besides i don't have access to the
> > physical box.
>
> This file is what the GENERIC kernel (distributed with the OS)
> has been generated from. Use it as a template for your own
> custom kernel.
>

well, there was no /usr/src when the system arrived from OVH i downloaded
this from freebsd ftp site. so i will need to update it to suit my system
and i was just looking for a shortcut.


>
>
> > what will be the correct way to include the IPFW to existing /boot/kernel
> > is there a way to generate the GENERIC file from the existing loaded
> kernel?
>
> No, you can simply copy it and then make changes. For example:
>
>         # cd /usr/src/sys/amd64/conf
>         # cp GENERIC MYKERNEL
>                 (or use any other descriptive name)
>         # vi MYKERNEL
>                 (make changes as desired, then :wq)
>         # cd /usr/src
>         # make buildkernel KERNCONF=MYKERNEL
>         # make installkernel KERNCONF=MYKERNEL
>         # reboot
>
> Keep in mind that kernel and world have to be in sync version-wise!
>
> Regarding IPFW, you will probably add lines like the following:
>
>         options         DUMMYNET
>         options         IPFIREWALL
>         options         IPFIREWALL_DEFAULT_TO_ACCEPT
>         options         IPFIREWALL_VERBOSE
>         options         IPFIREWALL_VERBOSE_LIMIT=500
>         options         IPFILTER
>         options         IPDIVERT
>
> Of course you can also remove lines for hardware you don't have
> in your box, like trimming the support for NICs or SCSI controllers
> and the like. :-)
>
>
>
>
>
>
> --
> Polytropon
> Magdeburg, Germany
> Happy FreeBSD user since 4.0
> Andra moi ennepe, Mousa, ...
>



-- 
%>>> "".join( [ {'*':'@','^':'.'}.get(c,None) or chr(97+(ord(c)-83)%26) for
c in ",adym,*)&uzq^zqf" ] )