Skip to content

Latest commit

 

History

History
56 lines (41 loc) · 2.03 KB

install.md

File metadata and controls

56 lines (41 loc) · 2.03 KB
Raw

Build process is quite simple:

cmake .
make
make test

Then, if everything builds fine, you may install files in proper places.

sudo make install

NOTE: This is old good "slackware-way" of installing programs. You may want to use checkinstall or something like this.

Actual list of configurable options for first line can be found at top of CMakeLists.txt. It looks like this:

option(SYMBOL "Option description" DEFAULT_VALUE)

Option can be (re)defined with -DSYMBOL=ON or -DSYMBOL=OFF on cmake command line:

cmake -D CMAKE_BUILD_TYPE=Release -DWIITH_HARDENING=ON .

Other noticeable options are:

  • CMAKE_BUILD_TYPE (Debug, Release or unset) -- sets compiler optimization level and debugging info. Set to "Release" for production code.
  • CMAKE_C_COMPILER -- allows specify another compiler
  • CMAKE_INSTALL_PREFIX -- set root of install dir ($DESTDIR also will be prefixed if set).
  • INIT_SCRIPT -- install system init script (values: off/openrc/systemd, default: off)

After building you may type sudo make install to install compiled binaries and other files. Default install layout is:

/etc/f2b <- configs location
/etc/f2b/conf-available <- all available config parts
/etc/f2b/conf-enabled   <- enabled config parts
/usr/bin  <- non-root binaries
/usr/sbin <- root binaries
/usr/lib  <- loadable modules
/usr/share/f2b <- patterns collection
/var/lib/f2b <- files with saved states of jails

After install you need additional steps before configuring f2b.

cd /etc/f2b
# make symlink to patterns collection
ln -s /usr/share/f2b/filters filters
# enable some config parts
# you need at least one backend, filter and source
cd /etc/f2b/conf-enabled
ln -s ../conf-available/05-source-files.conf       ./
ls -n ../conf-available/10-backend-exec-ipset.conf ./
ln -s ../conf-available/15-filter-preg.conf        ./
# make config part for local settings
touch 99-local.conf

Now you may proceed for configuration and first launch.