On Tue, May 25, 2010 at 12:14:26PM -0400, Jason Galarneau wrote:
>I have a net4801 that I'm building into a firewall for home use.
>
>With large flash cards being so easily affordable, what's the current best
>practice for OpenBSD installs?
>
>I've tried flashdist, but don't see a compelling reason to slim things down
>when I have a 4GB CF card.
>
>I like the idea of having a read-only root file system and not needing to
>fsck the system if I pull the plug accidentally.
>
>Suggestions?

My home gateway 4801 runs standard openbsd, but I have modified the
startup and shutdown scripts myself to run read only. For example, a
segment of /etc/rc:

umount -a >/dev/null 2>&1
mount -a -t nonfs,vnd
mount -uw /    # root on nfs requires this, others aren't hurt

#JJG
mount -t mfs -o rw,nodev,nosuid,-s=32000 /dev/wd0b /tmp
mount -t mfs -o rw,nodev,nosuid,-s=64000 /dev/wd0b /var
cp -Rp /mnt/var_on_cf/* /var/
cp -Rp /mnt/tmp_on_cf/* /tmp/

mount -t mfs -o rw,-s=32000 /dev/wd0b /mnt/dev_temporary
cp -Rp /dev/* /mnt/dev_temporary/
mount -t mfs -o rw,-s=32000 /dev/wd0b /dev
cp -Rp /mnt/dev_temporary/* /dev/
umount  /mnt/dev_temporary/

#JJG

(Mail me off list if you want my files)

A bit too hackish, but I think you'll get the idea. I do wonder if
it is needed for modern CF, but it does work for me and it is a
pleasure to run standard openbsd.

Cheers, 
Jonathan
_______________________________________________
Soekris-tech mailing list
[email protected]
http://lists.soekris.com/mailman/listinfo/soekris-tech

Reply via email to