On Tue, Feb 07, 2006 at 01:37:21AM +0500, Dimitry Naldayev wrote:
> 
> >>I am looking for a way to build a clean production system. ie system
> >>without development parts.

Dimitry, I maintain several LFS-based production systems and here is
what I do:

1) Build a full LFS on another box of the same architecture or older
arch (like using i586 to build a system that will ultimately run on an
1686).

2) Copy only what is needed. This will take you some time and will gain
you much learning as to what is truly needed. *Generally speaking*, any
binary from shadow, coreutils, and bash, plus any other binary the
system needs and their libraries is a good place to start. Of course,
add the bootloader, kernel, and filesystem tools, as well. Then try and
boot the system that has the "copies". Keep doing that until you have a
working system and add anything on top of that (like iptables, ssh,
etc).

3) If you do not use package management, then I would highly recommed
package logging.

4) Make all updates on the full system and test well, then tar up just
the updated files and copy them to the production box. A production
system without a toolchain will always require a 2nd computer to make
the binaries. So you just have to chose who makes your binaries; you or
a distro company.



-- 
Archaic

Want control, education, and security from your operating system?
Hardened Linux From Scratch
http://www.linuxfromscratch.org/hlfs

-- 
http://linuxfromscratch.org/mailman/listinfo/lfs-dev
FAQ: http://www.linuxfromscratch.org/faq/
Unsubscribe: See the above information page

Reply via email to