My Solaris page

I've started up this page to attempt to collect some tips and tricks, howtos and essential packages/patches that I write or put together for Solaris. This is stuff I found useful in work situations.

Howtos

• fbk, a virtual node disk driver. Mount any type of known filesystem (ISO image, UFS filesystem) from a file. This is comparable to FreeBSD's vn pseudo-device or the usage of loop devices in Linux.
• apache, a guide in how to optimally compile and install Apache in Sun Solaris, with support for Perl, Python, PHP+MySQL, faster CGI's, etc.

Packages/software

Miscellaneous packages for Solaris here.

Name	Homepage	Packages	Description	Miscellaneous/comment
Trafshow 3.1	soft.risp.ru	7, 8	Realtime network traffic visualizer for console usage	Patches made to make it compile and run properly. Package is statically linked with S-Lang and the pcap library.
UCD SNMP 4.0.1	net-snmp.sourceforge.net	2.6, 7	Useful and extendable SNMP client/server package
Newsyslog	www.freebsd.org/cgi/man.cgi	2.5.1, 2.6, 7, 8	A port of FreeBSD's newsyslog, a useful log rotator	Ported source fetched off www.low-level.net/udp/releases.
teTeX 1.0.7	http://tug.cs.umb.edu/tetex/	7, 8	A rich LaTeX distribution	Depends on w3c-libwww and a rather complete installation of X libaries and includes if you want to use xdvi. Build instructions available. Package contains texmf as well.

Scripts

Some scripts I have written for Solaris that you may find interesting:

• netlink, a script to set duplex/media option settings.
• fix.sh, a script to strip down services in Solaris systems + do network tuning & hardening. Currently for Solaris 8 and 9. Using nddconfig and fixmodes from www.sun.com/security/ somewhere and nettune from http://www.sean.de/Solaris/, the rest of the stuff by me. Run like this: ./fix.sh auto. Run it again if you patch your system, in case the patches re-enables scripts previously set up to not run. Fix-modes and friends are left in /opt/fixit for your convinience, should you need to reverse its actions. I recommend copying fix.sh there as well. Adjust what services you want turned on by editing /etc/startup.conf. Also walk through /etc/inetd.conf to see if there is anything you want on (requires INETD=YES in startup.conf). The script is intended to be run once to do "all" basic security tweaking in one shot. Script requires Perl with MIME::Base64 in your PATH, trying /usr/local/bin first. Your comments, ideas etc. are very welcome!

Links

• Packages by Roland Mainz. Particularly I found his GISWxwplt package with Xnest, Xvfb etc. interesting.
• pkg-get for Solaris.
• Sun System Handbook (former Field Engineer Handbook).
• Sun's docs site.
• Sun/Veritas Technical Resources for System Administrators.
• Solaris Operating Environment News and Information.