git-svn-id: https://svn.disconnected-by-peer.at/svn/linamh/trunk/genlink@2631 6952d904-891a-0410-993b-d76249ca496b
This commit is contained in:
geos_one
2010-10-31 06:03:16 +00:00
parent a6b43d7914
commit 5c09cfb2f1
7 changed files with 826 additions and 2 deletions

View File

@@ -149,7 +149,7 @@ stage4/modblacklist:
# correctly for us. Since we do not use this, it is left blank below.
# example:
# stage4/rcadd:
stage4/rcadd: udev|sysinit micro_evtd|boot hwclock|boot root|boot procfs|boot mtab|boot fsck|boot swap|boot syslog-ng|default net.eth0|default dbus|default linux-logo|default ntpd|default ntp-client|default smartd|default hddtemp|default sshd|default
stage4/rcadd: udev|sysinit micro_evtd-boot|boot hwclock|boot root|boot procfs|boot mtab|boot fsck|boot swap|boot micro_evtd|default syslog-ng|default net.eth0|default dbus|default linux-logo|default ntpd|default ntp-client|default smartd|default hddtemp|default sshd|default
# This is for removing init script from runlevels. It is executed after the
# defaults shipped with catalyst, so it is possible to remove the defaults using
@@ -249,7 +249,7 @@ stage4/unmerge:
# a package that you wish to keep, but won't need the full functionality.
# example:
# stage4/empty: /var/tmp /var/cache /var/db /var/empty /var/lock /var/log /var/run /var/spool /var/state /tmp /usr/portage /usr/share/man /usr/share/info /usr/share/unimaps /usr/include /usr/share/zoneinfo /usr/share/dict /usr/share/doc /usr/share/ss /usr/share/state /usr/share/texinfo /usr/lib/python2.2 /usr/lib/portage /usr/share/gettext /usr/share/i18n /usr/share/rfc /usr/lib/X11/config /usr/lib/X11/etc /usr/lib/X11/doc /usr/src /usr/share/doc /usr/share/man /root/.ccache /etc/cron.daily /etc/cron.hourly /etc/cron.monthly /etc/cron.weekly /etc/logrotate.d /etc/rsync /usr/lib/awk /usr/lib/ccache /usr/lib/gcc-config /usr/lib/nfs /usr/local /usr/diet/include /usr/diet/man /usr/share/consolefonts/partialfonts /usr/share/consoletrans /usr/share/emacs /usr/share/gcc-data /usr/share/genkernel /etc/splash/gentoo /etc/splash/emergence /usr/share/gnuconfig /usr/share/lcms /usr/share/locale /etc/skel
stage4/empty:
stage4/empty: /var/tmp/portage /var/tmp/ccache /var/tmp/binpkg /tmp
# This option tells catalyst to clean specific files from the filesystem and is
# very usefu in cleaning up stray files in /etc left over after stage4/unmerge.

View File

@@ -17,5 +17,13 @@ rm -rf /usr/.svn
rm -rf /usr/local/.svn
rm -rf /usr/local/bin/.svn
# qemu-arm don't work woth the newer coreutils
rm -f /etc/portage/package.mask/coreutils
emerge --sync
# shrink the image by removing most of the /usr/portage dir
# the only dirs that survive are licenses (not requred), profile (required), virtual (not required)
rm -rf /usr/portage/*-*
# chamge password for root user
/usr/local/bin/changepassword root goLsProLive

View File

@@ -0,0 +1,66 @@
# /etc/sysctl.conf
#
# For more information on how this file works, please see
# the manpages sysctl(8) and sysctl.conf(5).
#
# In order for this file to work properly, you must first
# enable 'Sysctl support' in the kernel.
#
# Look in /proc/sys/ for all the things you can setup.
#
# Disables packet forwarding
net.ipv4.ip_forward = 0
# Disables IP dynaddr
#net.ipv4.ip_dynaddr = 0
# Disable ECN
#net.ipv4.tcp_ecn = 0
# Enables source route verification
net.ipv4.conf.default.rp_filter = 1
# Enable reverse path
net.ipv4.conf.all.rp_filter = 1
# Enable SYN cookies (yum!)
# http://cr.yp.to/syncookies.html
#net.ipv4.tcp_syncookies = 1
# Disable source route
#net.ipv4.conf.all.accept_source_route = 0
#net.ipv4.conf.default.accept_source_route = 0
# Disable redirects
#net.ipv4.conf.all.accept_redirects = 0
#net.ipv4.conf.default.accept_redirects = 0
# Disable secure redirects
#net.ipv4.conf.all.secure_redirects = 0
#net.ipv4.conf.default.secure_redirects = 0
# Ignore ICMP broadcasts
#net.ipv4.icmp_echo_ignore_broadcasts = 1
# Disables the magic-sysrq key
kernel.sysrq = 1
# When the kernel panics, automatically reboot in 3 seconds
#kernel.panic = 3
# Allow for more PIDs (cool factor!); may break some programs
#kernel.pid_max = 999999
# You should compile nfsd into the kernel or add it
# to modules.autoload for this to work properly
# TCP Port for lock manager
#fs.nfs.nlm_tcpport = 0
# UDP Port for lock manager
#fs.nfs.nlm_udpport = 0
# logging settings
The logging levels are
# 0 system is unusable
# 1 action must be taken immediately
# 2 critical conditions
# 3 error conditions
# 4 warning conditions
# 5 normal but significant condition
# 6 informational
# 7 debug-level messages
kernel.printk="7"