Ada beberapa cara untuk menampilkan informasi CPU, yang pertama:

server# sysctl -a | egrep -i 'hw.machine|hw.model|hw.ncpu'

output

hw.machine: amd64
hw.model: Intel(R) Xeon(R) CPU           X3430  @ 2.40GHz
hw.ncpu: 4
hw.machine_arch: amd64

Mengambil informasi CPUINFO dari dmesg:

server# dmesg | grep -i cpu

atau

server# grep -i cpu /var/run/dmesg.boot

output

CPU: Intel(R) Xeon(R) CPU           X3430  @ 2.40GHz (2394.00-MHz K8-class CPU)
FreeBSD/SMP: Multiprocessor System Detected: 4 CPUs
cpu0 (BSP): APIC ID:  0
cpu1 (AP): APIC ID:  2
cpu2 (AP): APIC ID:  4
cpu3 (AP): APIC ID:  6
cpu0: <ACPI CPU> on acpi0
cpu1: <ACPI CPU> on acpi0
cpu2: <ACPI CPU> on acpi0
cpu3: <ACPI CPU> on acpi0
est0: <Enhanced SpeedStep Frequency Control> on cpu0
est: CPU supports Enhanced Speedstep, but is not recognized.
est: cpu_vendor GenuineIntel, msr 13
p4tcc0: <CPU Frequency Thermal Control> on cpu0
est1: <Enhanced SpeedStep Frequency Control> on cpu1
est: CPU supports Enhanced Speedstep, but is not recognized.
est: cpu_vendor GenuineIntel, msr 13
p4tcc1: <CPU Frequency Thermal Control> on cpu1
est2: <Enhanced SpeedStep Frequency Control> on cpu2
est: CPU supports Enhanced Speedstep, but is not recognized.
est: cpu_vendor GenuineIntel, msr 13
p4tcc2: <CPU Frequency Thermal Control> on cpu2
est3: <Enhanced SpeedStep Frequency Control> on cpu3
est: CPU supports Enhanced Speedstep, but is not recognized.
est: cpu_vendor GenuineIntel, msr 13
p4tcc3: <CPU Frequency Thermal Control> on cpu3
SMP: AP CPU #2 Launched!
SMP: AP CPU #1 Launched!
SMP: AP CPU #3 Launched!

Bisa juga dengan:

server# sysctl -a | grep -i cpu | less

License not correctly defined: multiple licenses in LICENSE, but LICENSE_COMB is set to single (or undefined)

Solusinya adalah menambahkan baris berikut pada /etc/make.conf.
Buat file tersebut bila belum ada.

LICENSE_COMB=multi

Problem selesai.

@updated 06/11/2010

Konfigurasi diatas menyebabkan problem saat compile Libtool-2.2
Antisipasinya adalah memberikan remark (comment) pada konfigurasi yang ditambahkan diatas sebelum melakukan compile

Problem saat penambahan extension PHP:

Cannot find autoconf. Please check your autoconf installation and the $PHP_AUTOCONF environment variable is set correctly and then rerun this script.

server# export PHP_AUTOCONF="/usr/local/bin/autoconf"

Cannot find autoconf. Please check your autoconf installation and the $PHP_AUTOHEADER environment variable is set correctly and then rerun this script.

server# export PHP_AUTOHEADER="/usr/local/bin/autoheader"

Jalankan 2 perintah diatas saat mendapatkan masalah tersebut.

Tidak ada konfigurasi yang perlu diubah, jalankan :

[root@server ~]# make
[root@server ~]# make install
[root@server ~]# make clean

Jawab dengan menekan tombol “Y” saat ditanya :

Would you like me to add it [y]? y

Sekali lagi saat ditanya :

Would you like to activate Postfix in /etc/mail/mailer.conf [n]? y

Edit file /etc/rc.conf dan tambahkan baris berikut :

postfix_enable="YES"
sendmail_enable="NO"
sendmail_submit_enable="NO"
sendmail_outbound_enable="NO"
sendmail_msp_queue_enable="NO"

Buat file /etc/periodic.conf dan tambahkan baris berikut :

daily_clean_hoststat_enable="NO"
daily_status_mail_rejects_enable="NO"
daily_status_include_submit_mailq="NO"
daily_submit_queuerun="NO"

Matikan Sendmail dan jalankan layanan Postfix :

[root@server ~]# killall sendmail
[root@server ~]# /usr/local/etc/rc.d/postfix start

Test Postfix dengan melakukan pengiriman email ke alamat tertentu :

[root@server ~]# mail me@devilian.com
Subject: Test Dari Server
Ini hanya test pengiriman email menggunakan Postfix dari Server.
Empat kali Empat sama dengan Enam Belas.
Sempat gak Sempat harus di Balas : )
.
EOT

Jangan lupa menggunakan tanda “.” (titik) untuk berhenti mengetikkan isi email.

Periksa pada mailbox apakah email tersebut sudah diterima, terkadang email terkirim masuk pada Spam/Bulk folder.

Cek message header email yang diterima :

Delivered-To: me@devilian.com
Received: by 10.231.15.203 with SMTP id l11cs138394iba;
Sat, 12 Sep 2009 08:37:48 -0700 (PDT)
Received: by 10.114.9.20 with SMTP id 20mr7730505wai.195.1252769867196;
Sat, 12 Sep 2009 08:37:47 -0700 (PDT)
Return-Path:
Received: from server.devilian.com ([192.168.0.100])
by mx.google.com with ESMTP id 19si4955395pxi.68.2009.09.12.08.37.46;
Sat, 12 Sep 2009 08:37:46 -0700 (PDT)
Received-SPF: neutral (google.com: 192.168.0.100 is neither permitted nor denied by best guess record for domain of root@server.devilian.com) client-ip=192.168.0.100;
Authentication-Results: mx.google.com; spf=neutral (google.com: 192.168.0.100 is neither permitted nor denied by best guess record for domain of root@server.devilian.com) smtp.mail=root@server.devilian.com
Received: by server.devilian.com (Postfix, from userid 0)
id A0781B835; Sat, 12 Sep 2009 22:37:41 +0700 (WIT)
To: me@devilian.com
Subject: Test Dari Server
Message-Id: <20090912153741.A0781B835@server.devilian.com>
Date: Sat, 12 Sep 2009 22:37:41 +0700 (WIT)
From: root@server.devilian.com (Root Devilian)

Ini hanya test pengiriman email menggunakan Postfix dari Server.
Empat kali Empat sama dengan Enam Belas.
Sempat gak Sempat harus di Balas

Install Postfix sebagai pengganti Sendmail telah selesai.

Install Bash Shell

server# cd /usr/ports/shells/bash
server# make
server# make install
server# make clean

Ubah shell utama user-user yang diinginkan menjadi menggunakan Bash shell :

server# vipw

Edit untuk user root dan user biasa, ubah “/bin/sh” menjadi “/usr/local/bin/bash“. Seperti berikut :

root:$1$rHqzsY9B$Iqend1AxKaln1S2N74qT8/:0:0::0:0:Root Devilian:/root:/usr/local/bin/bash
devilian:$1$DxNIHs1w$pboIkCl60/BXsGb6MWp2e0:1001:0::0:0:Devilian Network:/home/devilian:/usr/local/bin/bash

Siapkan file Batch yang akan dijalankan saat user login :

server# ee ~/.bashrc
server# ee ~/.bash_profile
cp ~/.bash* ~devilian/
chown devilian ~devilian/.bash*

Isi file ~/.bashrc dan ~/.bash_profile adalah :

umask 022
PS1="[\u@\h \W]\\$ "
alias ls='ls -aFG'
alias ll='ls -l'
alias lh='ls -lh'

Test login menggunakan user yang telah diubah menggunakan Bash Shell.
Install Bash Shell selesai.

server# /usr/local/etc/rc.d/mysql-server stop
server# /usr/local/etc/rc.d/apache22 stop

Optimasi PHP

Hapus remark atau komentar pada file /usr/local/etc/php.ini, sehingga isi file menjadi seperti berikut :

[PHP]
engine = On
zend.ze1_compatibility_mode = Off
short_open_tag = On
asp_tags = Off
precision    =  12
y2k_compliance = On
output_buffering = Off
zlib.output_compression = Off
implicit_flush = Off
unserialize_callback_func=
serialize_precision = 100
allow_call_time_pass_reference = On
safe_mode = Off
safe_mode_gid = Off
safe_mode_include_dir =
safe_mode_exec_dir =
safe_mode_allowed_env_vars = PHP_
safe_mode_protected_env_vars = LD_LIBRARY_PATH
disable_functions =
disable_classes =
expose_php = On
max_execution_time = 30
max_input_time = 60
memory_limit = 128M
error_reporting  =  E_ALL & ~E_NOTICE
display_errors = Off
display_startup_errors = Off
log_errors = On
log_errors_max_len = 1024
ignore_repeated_errors = Off
ignore_repeated_source = Off
report_memleaks = On
track_errors = Off
error_log = "/var/log/php_error.log"
variables_order = "EGPCS"
register_globals = On
register_long_arrays = On
register_argc_argv = On
auto_globals_jit = On
post_max_size = 8M
magic_quotes_gpc = On
magic_quotes_runtime = Off
magic_quotes_sybase = Off
auto_prepend_file =
auto_append_file =
default_mimetype = "text/html"
doc_root =
user_dir =
enable_dl = On
file_uploads = On
upload_max_filesize = 8M
allow_url_fopen = On
allow_url_include = Off
default_socket_timeout = 60
[Date]
[filter]
[iconv]
[sqlite]
[xmlrpc]
[Pcre]
[Syslog]
define_syslog_variables  = Off
[mail function]
SMTP = localhost
smtp_port = 25
[SQL]
sql.safe_mode = Off
[ODBC]
odbc.allow_persistent = On
odbc.check_persistent = On
odbc.max_persistent = -1
odbc.max_links = -1
odbc.defaultlrl = 4096
odbc.defaultbinmode = 1
[MySQL]
mysql.allow_persistent = On
mysql.max_persistent = -1
mysql.max_links = -1
mysql.default_port =
mysql.default_socket =
mysql.default_host =
mysql.default_user =
mysql.default_password =
mysql.connect_timeout = 60
mysql.trace_mode = Off
[MySQLi]
mysqli.max_links = -1
mysqli.default_port = 3306
mysqli.default_socket =
mysqli.default_host =
mysqli.default_user =
mysqli.default_pw =
mysqli.reconnect = Off
[mSQL]
msql.allow_persistent = On
msql.max_persistent = -1
msql.max_links = -1
[OCI8]
[PostgresSQL]
pgsql.allow_persistent = On
pgsql.auto_reset_persistent = Off
pgsql.max_persistent = -1
pgsql.max_links = -1
pgsql.ignore_notice = 0
pgsql.log_notice = 0
[Sybase]
sybase.allow_persistent = On
sybase.max_persistent = -1
sybase.max_links = -1
sybase.min_error_severity = 10
sybase.min_message_severity = 10
sybase.compatability_mode = Off
[Sybase-CT]
sybct.allow_persistent = On
sybct.max_persistent = -1
sybct.max_links = -1
sybct.min_server_severity = 10
sybct.min_client_severity = 10
[bcmath]
bcmath.scale = 0
[browscap]
[Informix]
ifx.default_host =
ifx.default_user =
ifx.default_password =
ifx.allow_persistent = On
ifx.max_persistent = -1
ifx.max_links = -1
ifx.textasvarchar = 0
ifx.byteasvarchar = 0
ifx.charasvarchar = 0
ifx.blobinfile = 0
ifx.nullformat = 0
[Session]
session.save_handler = files
session.use_cookies = 1
session.name = PHPSESSID
session.auto_start = 0
session.cookie_lifetime = 0
session.cookie_path = /
session.cookie_domain =
session.cookie_httponly =
session.serialize_handler = php
session.gc_probability = 1
session.gc_divisor     = 100
session.gc_maxlifetime = 1440
session.bug_compat_42 = 1
session.bug_compat_warn = 1
session.referer_check =
session.entropy_length = 0
session.entropy_file =
session.cache_limiter = nocache
session.cache_expire = 180
session.use_trans_sid = 0
session.hash_function = 0
session.hash_bits_per_character = 4
url_rewriter.tags = "a=href,area=href,frame=src,input=src,form=,fieldset="
[MSSQL]
mssql.allow_persistent = On
mssql.max_persistent = -1
mssql.max_links = -1
mssql.min_error_severity = 10
mssql.min_message_severity = 10
mssql.compatability_mode = Off
mssql.secure_connection = Off
[Assertion]
[COM]
[mbstring]
[FrontBase]
[gd]
[exif]
[Tidy]
tidy.clean_output = Off
[soap]
soap.wsdl_cache_enabled=1
soap.wsdl_cache_dir="/tmp"
soap.wsdl_cache_ttl=86400

Siapkan file log error PHP :

server# touch /var/log/php_error.log
server# chmod 666 /var/log/php_error.log

Optimasi Apache

Hapus module-module yang tidak dibutuhkan beserta remark atau komentar pada file /usr/local/etc/apache22/httpd.conf. Sehingga menjadi :

ServerRoot "/usr/local"
Listen 80
LoadModule authn_file_module libexec/apache22/mod_authn_file.so
LoadModule authz_host_module libexec/apache22/mod_authz_host.so
LoadModule auth_basic_module libexec/apache22/mod_auth_basic.so
LoadModule authz_user_module libexec/apache22/mod_authz_user.so
LoadModule deflate_module libexec/apache22/mod_deflate.so
LoadModule log_config_module libexec/apache22/mod_log_config.so
LoadModule mime_magic_module libexec/apache22/mod_mime_magic.so
LoadModule unique_id_module libexec/apache22/mod_unique_id.so
LoadModule setenvif_module libexec/apache22/mod_setenvif.so
LoadModule mime_module libexec/apache22/mod_mime.so
LoadModule cgi_module libexec/apache22/mod_cgi.so
LoadModule vhost_alias_module libexec/apache22/mod_vhost_alias.so
LoadModule dir_module libexec/apache22/mod_dir.so
LoadModule alias_module libexec/apache22/mod_alias.so
LoadModule rewrite_module libexec/apache22/mod_rewrite.so
LoadModule status_module libexec/apache22/mod_status.so
LoadModule php5_module libexec/apache22/libphp5.so
LoadModule expires_module libexec/apache22/mod_expires.so
LoadModule headers_module libexec/apache22/mod_headers.so
User nobody
Group nobody
ServerAdmin me@devilian.com
ServerName 192.168.0.100
DocumentRoot "/usr/local/www/apache22/data"

  AllowOverride None
  Order deny,allow
  Deny from all


  Options FollowSymLinks
  AllowOverride None
  Order allow,deny
  Allow from all

DirectoryIndex index.php index.html

  Order allow,deny
  Deny from all
  Satisfy All

ErrorLog "/var/log/httpd-error.log"
LogLevel warn
LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined
LogFormat "%h %l %u %t \"%r\" %>s %b" common
SetEnvIf Remote_Addr "127.0.0.1" dontlog
CustomLog "/var/log/httpd-access.log" combined env=!dontlog
ScriptAlias /cgi-bin/ "/usr/local/www/apache22/cgi-bin/"

  AllowOverride None
  Options None
  Order allow,deny
  Allow from all

DefaultType text/plain
TypesConfig etc/apache22/mime.types
AddType application/x-compress .Z
AddType application/x-gzip .gz .tgz
AddType application/x-httpd-php .php
AddType application/x-httpd-php-source .phps
Header unset ETag
FileETag None

  Header unset Last-Modified
  Header set Expires "Fri, 08 Jun 2020 00:00:00 GMT"
  Header set Cache-Control "public, no-transform"
  SetOutputFilter DEFLATE

Include etc/apache22/extra/httpd-mpm.conf
Include etc/apache22/extra/httpd-vhosts.conf
Include etc/apache22/extra/httpd-default.conf
Include etc/apache22/Includes/*.conf

Edit MPM worker file di /usr/local/etc/apache22/extra/httpd-mpm.conf :

PidFile "/var/run/httpd.pid"
LockFile "/var/log/accept.lock"
StartServers         150
MinSpareServers       25
MaxSpareServers       35
ServerLimit          435
MaxClients           435
MaxRequestsPerChild 1000

Edit Virtual Host pada file /usr/local/etc/apache22/extra/httpd-vhost.conf :

NameVirtualHost 192.168.0.100

Edit konfigurasi default pada file /usr/local/etc/apache22/extra/httpd-default.conf :

Timeout 60
KeepAlive Off
MaxKeepAliveRequests 100
KeepAliveTimeout 15
UseCanonicalName Off
AccessFileName .htaccess
ServerTokens productonly
ServerSignature Off
HostnameLookups Off

Aktifkan mod_deflate dengan membuat file /usr/local/etc/apache22/Includes/mod_deflate.conf berisi :

AddOutputFilterByType DEFLATE text/html text/plain
#Highest 9 - Lowest 1
DeflateCompressionLevel 9

#Optional
#Skip browsers with known problems
BrowserMatch ^Mozilla/4 gzip-only-text/html
BrowserMatch ^Mozilla/4\.0[678] no-gzip
BrowserMatch \bMSIE !no-gzip !gzip-only-text/html

#Optional
#Logging
DeflateFilterNote ratio
LogFormat '"%r" %b (%{ratio}n) "%{User-agent}i"' deflate
CustomLog /var/log/deflate_log deflate

Cek konfigurasi Apache :

server# apachectl configtest

Syntax OK

Optimasi MySQL

server# ee /var/db/mysql/my.cnf

Isi file /var/db/mysql/my.cnf :

[client]
port            = 3306
socket          = /tmp/mysql.sock

[mysqld]
port            = 3306
socket          = /tmp/mysql.sock
skip-locking
key_buffer_size = 16M
max_allowed_packet = 1M
table_open_cache = 64
sort_buffer_size = 512K
net_buffer_length = 8K
read_buffer_size = 256K
read_rnd_buffer_size = 512K
myisam_sort_buffer_size = 8M

[mysqldump]
quick
max_allowed_packet = 16M

[mysql]
no-auto-rehash

[myisamchk]
key_buffer_size = 20M
sort_buffer_size = 20M
read_buffer = 2M
write_buffer = 2M

[mysqlhotcopy]
interactive-timeout

Jalankan semua layanan dengan mengetikkan :

server# /usr/local/etc/rc.d/mysql-server start
server# /usr/local/etc/rc.d/apache22 start

usbd_enable="NO"
background_fsck="NO"
update_motd="NO"
syslogd_flags="-ss"
accounting_enable="YES"
clear_tmp_enable="YES"
nfs_reserved_port_only="YES"

Edit file /boot/loader.conf, tambahkan baris berikut :

autoboot_delay="3"
kern.ipc.maxsockets=16384

Edit file /etc/sysctl.conf, tambahkan baris berikut :

security.bsd.see_other_uids=0
net.inet.tcp.sendspace=65536
net.inet.tcp.recvspace=65536
kern.ipc.somaxconn=2048
net.inet.icmp.drop_redirect=1
net.inet.icmp.log_redirect=0
net.inet.ip.redirect=0
kern.maxfiles=112328
kern.maxfilesperproc=31095
net.inet.tcp.blackhole=1
net.inet.udp.blackhole=1
net.inet.icmp.icmplim_output=0
net.inet.tcp.msl=3000
vfs.read_max=64
vfs.lorunningspace=6291456
vfs.hirunningspace=12388608
vfs.ufs.dirhash_maxmem=38554432

Aktifkan seluruh konfigurasi dengan me-reboot mesin :

server# reboot

server# cd /usr/ports/ports-mgmt/portaudit
server# make
server# make install
server# make clean

Install portupgrade

server# cd /usr/ports/ports-mgmt/portupgrade
server# make config
server# make

Ikuti gambar berikut saat dikonfirmasi.

server# make install
server# make clean

server# /usr/local/sbin/pkgdb -F

—> Checking the package registry database
[Rebuilding the pkgdb
in /var/db/pkg ... - 17 packages found (-0 +17) ................. done]

server# /usr/local/sbin/portaudit -Fda

auditfile.tbz 100% of 57 kB 39 kBps
New database installed.
Database created: Mon Sep 7 19:25:02 WIT 2009
0 problem(s) in your installed packages found.

server# pkg_version -v | grep need

Melihat paket-paket yang telah ter-install :

server# pkg_info

autoconf-2.62 Automatically configure source code on many Un*x platforms
autoconf-wrapper-20071109 Wrapper script for GNU autoconf
automake-1.10.1 GNU Standards-compliant Makefile generator (1.10)
automake-wrapper-20071109 Wrapper script for GNU automake
cvsup-without-gui-16.1h_4 File distribution system optimized for CVS (non-GUI version
ezm3-1.2_1 Easier, more portable Modula-3 distribution for building CV
gettext-0.17_1 GNU gettext package
gmake-3.81_3 GNU version of ‘make’ utility
help2man-1.36.4_3 Automatically generating simple manual pages from program o
libiconv-1.13.1 A character set conversion library
libtool-2.2.6a Generic shared library support script
m4-1.4.13,1 GNU m4
p5-gettext-1.05_2 Message handling functions
perl-5.8.9_3 Practical Extraction and Report Language
portaudit-0.5.13 Checks installed ports against a list of security vulnerabi
portupgrade-2.4.6_3,2 FreeBSD ports/packages administration and management tool s
ruby-1.8.7.160_4,1 An object-oriented interpreted scripting language

Install Portaudit dan Portupgrade selesai.

Merawat dan Melakukan Update Paket-Paket

server# postsnap fetch
server#  portsnap update
server#  pkgdb -F
server#  portaudit -Fda
server#  pkg_version -v | grep "needs updating"

Akan terlihat ports-ports mana saja yang telah ada update versi terbarunya, contoh:

mhash-0.9.9 < needs updating (port has 0.9.9.9)
python26-2.6.2_2 < needs updating (port has 2.6.2_3)

Lakukan update ports tersebut dengan perintah:

server# portupgrade -R mhash python26

Setelah update selesai, bersihkan Ports Tree

server# portsclean -C

Dan hapus ports source yang di-donwload

server# rm -fR /usr/ports/distfiles/*

Selesai, proses perawatan dan updating ports dapat dilakukan setiap hari. Sehingga aplikasi yang berjalan di server adalah aplikasi-aplikasi yang sudah stable dan terbaru.

Tambahkan baris berikut pada /etc/make.conf :

# Apache + PHP
WITH_APACHE_MODDEFLATE=yes
WITHOUT_X11=yes
WITH_PROXY_MODULES=yes
WITH_THREADS_MODULES=yes

# mysql
BUILD_OPTIMIZED=yes
BUILD_STATIC=yes
WITHOUT_INNODB=yes

Install MySQL Database Server

server# cd /usr/ports/databases/mysql51-server/
server# make
server# make install
server# make clean

Install Apache Server

server# cd /usr/ports/www/apache22/
server# make config

Ubah konfigurasi module Apache yang di-install menjadi :

[X] APR_FROM_PORTS        Use devel/apr as APR (preferred)
[X] THREADS               Enable threads support in APR
[ ] MYSQL                 Enable MySQL support for apr-dbd
[ ] PGSQL                 Enable PostgreSQL support for apr-dbd
[ ] SQLITE                Enable SQLite support for apr-dbd
[ ] IPV6                  Enable IPv6 support
[ ] BDB                   Enable BerkeleyDB dbm
[X] AUTH_BASIC            Enable mod_auth_basic
[X] AUTH_DIGEST           Enable mod_auth_digest
[X] AUTHN_FILE            Enable mod_authn_file
[ ] AUTHN_DBD             Enable mod_authn_dbd
[X] AUTHN_DBM             Enable mod_authn_dbm
[X] AUTHN_ANON            Enable mod_authn_anon
[X] AUTHN_DEFAULT         Enable mod_authn_default
[X] AUTHN_ALIAS           Enable mod_authn_alias
[X] AUTHZ_HOST            Enable mod_authz_host
[X] AUTHZ_GROUPFILE       Enable mod_authz_groupfile
[X] AUTHZ_USER            Enable mod_authz_user
[X] AUTHZ_DBM             Enable mod_authz_dbm
[X] AUTHZ_OWNER           Enable mod_authz_owner
[X] AUTHZ_DEFAULT         Enable mod_authz_default
[X] CACHE                 Enable mod_cache
[X] DISK_CACHE            Enable mod_disk_cache
[X] FILE_CACHE            Enable mod_file_cache
[ ] MEM_CACHE             Enable mod_mem_cache
[X] DAV                   Enable mod_dav
[X] DAV_FS                Enable mod_dav_fs
[ ] BUCKETEER             Enable mod_bucketeer
[ ] CASE_FILTER           Enable mod_case_filter
[ ] CASE_FILTER_IN        Enable mod_case_filter_in
[ ] EXT_FILTER            Enable mod_ext_filter
[ ] LOG_FORENSIC          Enable mod_log_forensic
[ ] OPTIONAL_HOOK_EXPORT  Enable mod_optional_hook_export
[ ] OPTIONAL_HOOK_IMPORT  Enable mod_optional_hook_import
[ ] OPTIONAL_FN_IMPORT    Enable mod_optional_fn_import
[ ] OPTIONAL_FN_EXPORT    Enable mod_optional_fn_export
[ ] LDAP                  Enable mod_ldap
[ ] AUTHNZ_LDAP           Enable mod_authnz_ldap
[X] ACTIONS               Enable mod_actions
[X] ALIAS                 Enable mod_alias
[X] ASIS                  Enable mod_asis
[X] AUTOINDEX             Enable mod_autoindex
[X] CERN_META             Enable mod_cern_meta
[X] CGI                   Enable mod_cgi
[X] CHARSET_LITE          Enable mod_charset_lite
[ ] DBD                   Enable mod_dbd
[X] DEFLATE               Enable mod_deflate
[X] DIR                   Enable mod_dir
[X] DUMPIO                Enable mod_dumpio
[X] ENV                   Enable mod_env
[X] EXPIRES               Enable mod_expires
[X] HEADERS               Enable mod_headers
[X] IMAGEMAP              Enable mod_imagemap
[X] INCLUDE               Enable mod_include
[X] INFO                  Enable mod_info
[X] LOG_CONFIG            Enable mod_log_config
[X] LOGIO                 Enable mod_logio
[X] MIME                  Enable mod_mime
[X] MIME_MAGIC            Enable mod_mime_magic
[X] NEGOTIATION           Enable mod_negotiation
[X] REWRITE               Enable mod_rewrite
[X] SETENVIF              Enable mod_setenvif
[X] SPELING               Enable mod_speling
[X] STATUS                Enable mod_status
[X] UNIQUE_ID             Enable mod_unique_id
[X] USERDIR               Enable mod_userdir
[X] USERTRACK             Enable mod_usertrack
[X] VHOST_ALIAS           Enable mod_vhost_alias
[X] FILTER                Enable mod_filter
[X] VERSION               Enable mod_version
[ ] PROXY                 Enable mod_proxy
[ ] PROXY_CONNECT         Enable mod_proxy_connect
[X] PATCH_PROXY_CONNECT   Patch proxy_connect SSL support
[ ] PROXY_FTP             Enable mod_proxy_ftp
[ ] PROXY_HTTP            Enable mod_proxy_http
[ ] PROXY_AJP             Enable mod_proxy_ajp
[ ] PROXY_BALANCER        Enable mod_proxy_balancer
[X] SSL                   Enable mod_ssl
[ ] SUEXEC                Enable mod_suexec
[ ] CGID                  Enable mod_cgid

server# make
server# make install
server# make clean

Konfigurasi dependensi aplikasi Apache :

Install PHP

cd /usr/ports/lang/php5/
server# make config

Tentukan konfigurasi PHP, jangan lupa memilih Build Apache Module.

server# make
server# make install
server# make clean

Install Ekstensi PHP

cd /usr/ports/lang/php5-extensions/
server# make config

Pilih ekstensi PHP yang diinginkan :

[ ] BCMATH      bc style precision math functions
[X] BZ2         bzip2 library support
[ ] CALENDAR    calendar conversion support
[X] CTYPE       ctype functions
[ ] CURL        CURL support
[ ] DBA         dba support
[ ] DBASE       dBase library support
[X] DOM         DOM support
[ ] EXIF        EXIF support
[ ] FILEINFO    fileinfo support
[X] FILTER      input filter support
[ ] FRIBIDI     FriBidi support
[ ] FTP         FTP support
[X] GD          GD library support
[ ] GETTEXT     gettext library support
[ ] GMP         GNU MP support
[X] HASH        HASH Message Digest Framework
[X] ICONV       iconv support
[ ] IMAP        IMAP support
[ ] INTERBASE   Interbase 6 database support (Firebird)
[X] JSON        JavaScript Object Serialization support
[ ] LDAP        OpenLDAP support
[ ] MBSTRING    multibyte string support
[X] MCRYPT      Encryption support
[X] MHASH       Crypto-hashing support
[ ] MING        ming shockwave flash support
[ ] MSSQL       MS-SQL database support
[X] MYSQL       MySQL database support
[ ] MYSQLI      MySQLi database support
[ ] NCURSES     ncurses support (CLI only)
[ ] ODBC        unixODBC support
[ ] OPENSSL     OpenSSL support
[ ] PCNTL       pcntl support (CLI only)
[X] PCRE        Perl Compatible Regular Expression support
[ ] PDF         PDFlib support (implies GD)
[ ] PDO         PHP Data Objects Interface (PDO)
[ ] PDO_SQLITE  PDO sqlite driver
[ ] PGSQL       PostgreSQL database support
[X] POSIX       POSIX-like functions
[ ] PSPELL      pspell support
[ ] READLINE    readline support (CLI only)
[ ] RECODE      recode support
[X] SESSION     session support
[ ] SHMOP       shmop support
[X] SIMPLEXML   simplexml support
[ ] SNMP        SNMP support
[ ] SOAP        SOAP support
[ ] SOCKETS     sockets support
[X] SPL         Standard PHP Library
[ ] SQLITE      sqlite support
[ ] SYBASE_CT   Sybase database support
[ ] SYSVMSG     System V message support
[ ] SYSVSEM     System V semaphore support
[ ] SYSVSHM     System V shared memory support
[ ] TIDY        TIDY support
[X] TOKENIZER   tokenizer support
[ ] WDDX        WDDX support (implies XML)
[X] XML         XML support
[X] XMLREADER   XMLReader support
[ ] XMLRPC      XMLRPC-EPI support
[X] XMLWRITER   XMLWriter support
[ ] XSL         XSL support (Implies DOM)
[ ] YAZ         YAZ support (ANSI/NISO Z39.50)
[X] ZIP         ZIP support
[X] ZLIB        ZLIB support

server# make
server# make install
server# make clean

Konfigurasi dependensi aplikasi :

Install xCache

cd /usr/ports/www/xcache/
server# make config
server# make
server# make install
server# make clean
server# cp /usr/local/share/examples/xcache/xcache.ini /usr/local/etc/php/

Menampilkan informasi versi PHP :

server# /usr/local/bin/php -v

PHP 5.2.10 with Suhosin-Patch 0.9.7 (cli) (built: Sep 7 2009 21:52:15) Copyright (c) 1997-2009 The PHP Group Zend Engine v2.2.0, Copyright (c) 1998-2009 Zend Technologies with XCache v1.3.0, Copyright (c) 2005-2009, by mOo

Melihat informasi ekstensi PHP yang aktif :

server# /usr/local/bin/php -m

[PHP Modules]
bz2
ctype
date
dom
filter
gd
hash
iconv
json
libxml
mcrypt
mhash
mysql
pcre
posix
Reflection
session
SimpleXML
SPL
standard
tokenizer
XCache
xml
xmlreader
xmlwriter
zip
zlib

[Zend Modules]
XCache

Aktifkan php.ini :

 server# cp /usr/local/etc/php.ini-recommended /usr/local/etc/php.ini

Aktifkan Apache dan MySQL di /etc/rc.conf :

server# ee /etc/rc.conf

Tambahkan baris berikut pada bagian akhir /etc/rc.conf :

apache22_enable="YES"
mysql_enable="YES"

Membuat database standart MySQL, jalankan dan ubah password root MySQL :

server# /usr/local/bin/mysql_install_db
server# chown -R mysql:mysql /var/db/mysql
server# /usr/local/etc/rc.d/mysql-server start
server# /usr/local/bin/mysqladmin -u root password 'passwordbaruroot'

Ganti passwordbaruroot dengan password yang diinginkan Update seluruh password root dan hapus User yang kosong untuk keamanan :

server# /usr/local/bin/mysql -u root -p

Enter password: <masukkan password root mysql> Welcome to the MySQL monitor. Commands end with ; or \g. Your MySQL connection id is 4 Server version: 5.1.38 FreeBSD port: mysql-server-5.1.38 Type ‘help;’ or ‘\h’ for help. Type ‘\c’ to clear the current input statement.

mysql> use mysql;
mysql> update user set Password=password('passwordbaruroot') where User='root';
mysql> delete from user where User='';
mysql> quit;

Ganti passwordbaruroot dengan password yang diinginkan Restart MySQL :

server# /usr/local/etc/rc.d/mysql-server restart

Konfigurasi dan menjalankan Apache :

server# ee /usr/local/etc/apache22/httpd.conf

Ubah baris #216 menjadi :

    DirectoryIndex index.php index.html

Tambahkan baris berikut pada bagian akhir file :

AddType application/x-httpd-php .php
AddType application/x-httpd-php-source .phps

Cek konfigurasi Apache :

server# /usr/local/sbin/apachectl configtest

Syntax OK

Jalankan Apache :

server# /usr/local/etc/rc.d/apache22 start

Cek status service Apache :

server# /usr/local/etc/rc.d/apache22 status

apache22 is running as pid 28914.

Test akses ke IP mesin menggunakan browser :

Test menampilkan informasi PHP dengan script /usr/local/www/apache22/data/index.php :

server# ee /usr/local/www/apache22/data/index.php

Ketikkan baris berikut :

<?php phpinfo(); ?>

Simpan dan keluar, test melalui browser :

Proses instalasi Apache, PHP + xCache dan MySQL telah selesai.

server# dmesg

Copyright (c) 1992-2009 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
The Regents of the University of California. All rights reserved.
FreeBSD is a registered trademark of The FreeBSD Foundation.
FreeBSD 7.2-STABLE #0: Mon Sep 7 01:09:43 WIT 2009
root@server.devilian.com:/usr/obj/usr/src/sys/GENERIC
Timecounter “i8254″ frequency 1193182 Hz quality 0
CPU: Intel(R) Core(TM)2 CPU 4400 @ 2.00GHz (1999.75-MHz 686-class CPU)
Origin = “GenuineIntel” Id = 0x6f2 Stepping = 2
Features=0x78bf3bf
Features2=0×9
real memory = 536805376 (511 MB)
avail memory = 511279104 (487 MB)
pnpbios: Bad PnP BIOS data checksum
kbd1 at kbdmux0
acpi0: on motherboard
acpi0: [ITHREAD]
acpi0: Power Button (fixed)
acpi0: Sleep Button (fixed)
Timecounter “ACPI-safe” frequency 3579545 Hz quality 850
acpi_timer0: <32-bit timer at 3.579545MHz> port 0×4008-0x400b on acpi0
pcib0: port 0xcf8-0xcff on acpi0
pci0: on pcib0
isab0:
at device 1.0 on pci0
isa0: on isab0
atapci0: port 0x1f0-0x1f7,0x3f6,0×170-0×177,0×376,0xd000-0xd00f at device 1.1 on pci0
ata0: on atapci0
ata0: [ITHREAD]
ata1: on atapci0
ata1: [ITHREAD]
vgapci0: mem 0xe0000000-0xe07fffff at device 2.0 on pci0
em0: port 0xd010-0xd017 mem 0xf0000000-0xf001ffff irq 11 at device 3.0 on pci0
em0: [FILTER]
em0: Ethernet address: 08:00:27:09:12:15
pci0: at device 4.0 (no driver attached)
pci0: at device 7.0 (no driver attached)
em1: port 0xd040-0xd047 mem 0xf0820000-0xf083ffff irq 10 at device 8.0 on pci0
em1: [FILTER]
em1: Ethernet address: 08:00:27:29:16:ed
acpi_acad0: on acpi0
atkbdc0: port 0×60,0×64 irq 1 on acpi0
atkbd0: irq 1 on atkbdc0
kbd0 at atkbd0
atkbd0: [GIANT-LOCKED]
atkbd0: [ITHREAD]
fdc0: port 0x3f0-0x3f5,0x3f7 irq 6 drq 2 on acpi0
fdc0: does not respond
device_attach: fdc0 attach returned 6
psm0:
irq 12 on atkbdc0
psm0: [GIANT-LOCKED]
psm0: [ITHREAD]
psm0: model IntelliMouse Explorer, device ID 4
fdc0: port 0x3f0-0x3f5,0x3f7 irq 6 drq 2 on acpi0
fdc0: does not respond
device_attach: fdc0 attach returned 6
pmtimer0 on isa0
orm0: at iomem 0xc0000-0xc8fff,0xe2000-0xe2fff pnpid ORM0000 on isa0
ppc0: parallel port not found.
sc0: at flags 0×100 on isa0
sc0: VGA <16 virtual consoles, flags=0×300>
sio0: configured irq 4 not in bitmap of probed irqs 0
sio0: port may not be enabled
sio0: configured irq 4 not in bitmap of probed irqs 0
sio0: port may not be enabled
sio0 at port 0x3f8-0x3ff irq 4 flags 0×10 on isa0
sio0: type 8250 or not responding
sio0: [FILTER]
sio1: configured irq 3 not in bitmap of probed irqs 0
sio1: port may not be enabled
vga0: at port 0x3c0-0x3df iomem 0xa0000-0xbffff on isa0
Timecounter “TSC” frequency 1999751824 Hz quality 800
Timecounters tick every 1.000 msec
ad0: 20480MB at ata0-master UDMA33
acd0: DVDROM at ata1-master UDMA33
Trying to mount root from ufs:/dev/ad0s1a

server# cd /sys/i386/conf/
server# cp GENERIC FIREWALL
server# ee FIREWALL

Isi file FIREWALL

cpu             I686_CPU
ident           FIREWALL
makeoptions     DEBUG=-g
options         SCHED_ULE
options         PREEMPTION
options         INET
options         INET6
options         SCTP
options         FFS
options         SOFTUPDATES
options         UFS_ACL
options         UFS_DIRHASH
options         UFS_GJOURNAL
options         MD_ROOT
options         NFSCLIENT
options         NFSSERVER
options         NFSLOCKD
options         NFS_ROOT
options         MSDOSFS
options         CD9660
options         PROCFS
options         PSEUDOFS
options         GEOM_PART_GPT
options         GEOM_LABEL
options         COMPAT_43TTY
options         COMPAT_FREEBSD4
options         COMPAT_FREEBSD5
options         COMPAT_FREEBSD6
options         SCSI_DELAY=5000
options         KTRACE
options         STACK
options         SYSVSHM
options         SYSVMSG
options         SYSVSEM
options         P1003_1B_SEMAPHORES
options         _KPOSIX_PRIORITY_SCHEDULING
options         KBD_INSTALL_CDEV
options         ADAPTIVE_GIANT
options         STOP_NMI
options         AUDIT
options         SMP
device          apic
device          cpufreq
device          eisa
device          pci
device          ata
device          atadisk
device          atapicd
options         ATA_STATIC_ID
device          atkbdc
device          atkbd
device          kbdmux
device          vga
device          splash
device          sc
device          agp
device          pmtimer
device          em
device          miibus
device          rl
device          loop
device          random
device          ether
device          sl
device          ppp
device          tun
device          pty
device          md
device          gif
device          faith
device          firmware
device          bpf
options         IPFIREWALL
options         IPFIREWALL_VERBOSE
options         IPFIREWALL_FORWARD
options         IPFIREWALL_VERBOSE_LIMIT=100
options         IPFIREWALL_DEFAULT_TO_ACCEPT
options         IPDIVERT
options         ACCEPT_FILTER_DATA
options         ACCEPT_FILTER_HTTP
options         DUMMYNET
options         IPSTEALTH

server# config FIREWALL

Kernel build directory is ../compile/FIREWALL
Don’t forget to do “make cleandepend && make depend”

server# cd ../compile/FIREWALL/
server# make cleandepend && make depend

…
…
…
===> zlib (depend)
@ -> /usr/src/sys
machine -> /usr/src/sys/i386/include
rm -f .depend
mkdep -f .depend -a -nostdinc -D_KERNEL -DKLD_MODULE -DHAVE_KERNEL_OPTION_HEADERS -I. -I@ -I@/contrib/altq -I/usr/src/sys/i386/compile/FIREWALL /usr/src/sys/modules/zlib/../../net/zlib.c
===> zyd (depend)
@ -> /usr/src/sys
machine -> /usr/src/sys/i386/include
ln -sf /usr/src/sys/i386/compile/FIREWALL/opt_usb.h opt_usb.h
awk -f @/tools/makeobjops.awk @/kern/device_if.m -h
awk -f @/tools/makeobjops.awk @/kern/bus_if.m -h
awk -f @/tools/usbdevs2h.awk @/dev/usb/usbdevs -h
rm -f .depend
mkdep -f .depend -a -nostdinc -D_KERNEL -DKLD_MODULE -DHAVE_KERNEL_OPTION_HEADERS -I. -I@ -I@/contrib/altq -I/usr/src/sys/i386/compile/FIREWALL /usr/src/sys/modules/zyd/../../dev/usb/if_zyd.c

server# make
server# make install
server# make clean

Jika tidak ada error, proses compile berakhir disini.
Selanjutnya mengaktifkan firewall yang telah ditambahkan pada kernel.

server# ee /etc/rc.conf

Tambahkan baris berikut pada file /etc/rc.conf

firewall_enable="YES"
firewall_script="/etc/rc.firewall"
firewall_type="OPEN"
firewall_quiet="YES"

Keluar dari editor dan simpan.
Aktifkan kernel baru dengan me-reboot komputer :

server# reboot

Lihat kernel yang aktif setelah optimasi dan compile:

server# uname -a

FreeBSD server.devilian.com 7.2-STABLE FreeBSD 7.2-STABLE #0: Mon Sep 7 17:56:30 WIT 2009 root@server.devilian.com:/usr/src/sys/i386/compile/FIREWALL i386

Cek apakah firewall (ipfw) telah aktif :

server# ipfw show

00100 0 0 allow ip from any to any via lo0
00200 0 0 deny ip from any to 127.0.0.0/8
00300 0 0 deny ip from 127.0.0.0/8 to any
65000 210 22826 allow ip from any to any
65535 0 0 allow ip from any to any

Bandingkan hasil dmesg setelah optimasi kernel :

server# dmesg

Copyright (c) 1992-2009 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
The Regents of the University of California. All rights reserved.
FreeBSD is a registered trademark of The FreeBSD Foundation.
FreeBSD 7.2-STABLE #0: Mon Sep 7 17:56:30 WIT 2009
root@server.devilian.com:/usr/src/sys/i386/compile/FIREWALL
Timecounter “i8254″ frequency 1193182 Hz quality 0
CPU: Intel(R) Core(TM)2 CPU 4400 @ 2.00GHz (1999.97-MHz 686-class CPU)
Origin = “GenuineIntel” Id = 0x6f2 Stepping = 2
Features=0x78bf3bf
Features2=0×9
real memory = 536805376 (511 MB)
avail memory = 515543040 (491 MB)
pnpbios: Bad PnP BIOS data checksum
kbd1 at kbdmux0
acpi0: on motherboard
acpi0: [ITHREAD]
acpi0: Power Button (fixed)
acpi0: Sleep Button (fixed)
Timecounter “ACPI-safe” frequency 3579545 Hz quality 850
acpi_timer0: <32-bit timer at 3.579545MHz> port 0×4008-0x400b on acpi0
pcib0: port 0xcf8-0xcff on acpi0
pci0: on pcib0
isab0:
at device 1.0 on pci0
isa0: on isab0
atapci0: port 0x1f0-0x1f7,0x3f6,0×170-0×177,0×376,0xd000-0xd00f at device 1.1 on pci0
ata0: on atapci0
ata0: [ITHREAD]
ata1: on atapci0
ata1: [ITHREAD]
vgapci0: mem 0xe0000000-0xe07fffff at device 2.0 on pci0
em0: port 0xd010-0xd017 mem 0xf0000000-0xf001ffff irq 11 at device 3.0 on pci0
em0: [FILTER]
em0: Ethernet address: 08:00:27:09:12:15
pci0: at device 4.0 (no driver attached)
pci0: at device 7.0 (no driver attached)
em1: port 0xd040-0xd047 mem 0xf0820000-0xf083ffff irq 10 at device 8.0 on pci0
em1: [FILTER]
em1: Ethernet address: 08:00:27:29:16:ed
acpi_acad0: on acpi0
atkbdc0: port 0×60,0×64 irq 1 on acpi0
atkbd0: irq 1 on atkbdc0
kbd0 at atkbd0
atkbd0: [GIANT-LOCKED]
atkbd0: [ITHREAD]
pmtimer0 on isa0
orm0: at iomem 0xc0000-0xc8fff,0xe2000-0xe2fff pnpid ORM0000 on isa0
sc0: at flags 0×100 on isa0
sc0: VGA <16 virtual consoles, flags=0×300>
vga0: at port 0x3c0-0x3df iomem 0xa0000-0xbffff on isa0
Timecounter “TSC” frequency 1999967452 Hz quality 800
Timecounters tick every 1.000 msec
ipfw2 (+ipv6) initialized, divert enabled, nat loadable, rule-based forwarding enabled, default to accept, logging limited to 100 packets/entry by default
ad0: 20480MB at ata0-master UDMA33
acd0: DVDROM at ata1-master UDMA33
Trying to mount root from ufs:/dev/ad0s1a

Proses optimasi dan compile kernel selesai.