On Sun, 9 Feb 2014, dev wrote:
Actually the specification states that all vendor software lives in
the /usr area and things that are from elsewhere must go to /opt/foo
where "foo" is the vendor name. Therefore we see MySQL gets installed
into /opt/mysql for example. Logging must go to /var/opt/foo and config
must go to /etc/opt/foo area. Those are just very old rules that protect
the operating system from being mucked with and also to ensure that no
one drops a lib into someplace searched by the runtime linker. Kaboom
is never a nice thing.
Solaris' way of doing it is certainly a bit more...complex. It keeps
things a lot neater, though. Look at linux with /opt AND /usr/local,
though!
Using /usr/local for this seems to date to Net/2 from the CSRG BSDs.
I
can't track down SysV man pages to see if coming from Solaris had
different conventions for stuffing files. ( I wonder where /usr/local
and
/opt became different things over the years...You then get the
crazy /opt/local and stuff. ;) )
Can anyone else chime in with the history of hier? ;)
I have to look around and get familiar with this new land. Thus far I
really like what I see. It is darn easy to install. I mean trivial. You
gotta love that. After install there are some setup thingies that I
need to look into. I don't quite get what is going on with ntpd.conf
and I need to figure out how to lock down the server to listen for
ssh connections and not much else. In fact, I like to set ssh to listen
on port 443 unless I have Apache running, which I don't yet. I find
that running ssh server to listen on 443 gets rid of the ba-zillion
silly login attempts by folks trying to use a password for root and
other common account names. I mean really, people still use passwords
out there?
OpenBSD is definitely a bit different coming from Solaris. ;) There's no
svcadm, however. I actually LIKE svcadm!
You could keep ssh on 22 but install fail2ban. I _think_ fail2ban can
hook in to pf. You'll definitely want to take a crack at pf though. See
the manpages for it. It's absurdly powerful...there's good documentation
on the website, too.
Anyways, I really like what I see and with luck I will get to a point
where I can bootstrap GCC without too much magic.
Shame clang doesn't support SPARC well yet. :(
dc
--
Cory Smelosky
http://gewt.net Personal stuff
http://gimme-sympathy.org Projects
