Installing Irix 6.2

booting from CDROM, installing miniroot.

with CDROM as SCSI device #4 - SGI default

1. power on system
2. select "stop for maintenance"
3. "Enter command monitor"
   • >>boot -f dksc(0,4,8)sashARCSto run "sash" (standalone shell)
   • sash: boot -f dksc(0,4,7)/stand/fx.ARCS to run fx, for partitioning
   • [fx] yes for extended mode
   • device (dksc) [return]
   • ctlr# (0) [return]
   • drive# (1) [return]
   • r (repartition)
   • ro (root drive)
   • xfs [return]
   • Continue? yes
   • slice 0 is xfs, slice 1 is raw partition
   • change size of raw swap partition to 200MB
   • re (resize)
   • (swap) [return]
   • (megabytes (2^20 bytes)) [return]
   • (128) 200
   • (no) yes (use new partition layout)
   • .. (quit menu)
   • exit (exit program)
4. (returned to System maintenance menu)

Installing system software

1. From system maintenance menu, select "Install System Software"
2. make sure local CDROM is selected
3. click on "Install", and continue
4. (Wait - system copies install tools to miniroot)
5. Mounting filesystems
   • at this point, things can break. Usually if a system is being reinstalled.
   • from csh:
   • # mkfs -b size=512 -d name=/dev/dsk/dks0d1s0 -l internal,size=2000b
   • # exit
   • System now remounts fs
6. Invoking system software installation
   • 6.2 runs a pre-install script. For a new system/ almost all cases, you can ignore running it
   • [1] 2
   • this leaves you in the 'inst' software tool
7. for all SGIs
   • (essential things are selected by default)
   • inst> i *.sw32.* (32bit subsystems)
   • inst> i *.*.ipgate (ipfilterd, gated, etc)
   • inst> i *.*.svr4net (SVR4 networking)
   • inst> i *.*.xlv* (XLV - XFS logical volumes)
   • inst> i *.*.netman (snmpd, etc)
   • inst> i *.*.named (BIND)
   • inst> go
   • (other packages from disk 1 can be added later if required)
   • after disk 1 package install is complete, eject CDROM & put in disk 2
   • inst> from
   • [/CDROM/dist] [return]
   • inst> go
   • inst> quit
   • (lots of library rqs rebuilding)
   • Restart? yes
   • (system reboots)

Configuring Irix 6.2

1. log in as 'root' (no password, yet)
2. select console
3. set passwords and deal with test/guest accounts
   • vi /etc/passwd
   • disable (* out) passwords for root, lp, nuucp, EZsetup, demos, OutOfBox, guest, 4Dgifts, and save file
   • set 'root' password, passwd root
4. disable the following features, with chkconfig featurename off
   • autoconfig_ipaddress
   • firsttimeprograms
   • outbox
   • routed
   • sendmail
   • timed
   • whatsnew
   • xdm
5. on non desktop machines, disable the following extra things:
   • desktop
   • mediad
   • objectserver
   • visuallogin
   • windowsystem
6. some systems may also need the following disabled, if they exist
   • soundscheme
   • webface
   • sdpd
   • ns_admin
   • ns_httpd
7. inetd reconfiguration,

   remove (comment out)

   exec, finger, http, wn-http, bootp, tftp, ntalk, tcpmux, echo tcp/udp, discard tcp/udp, chargen tcp/udp

   dgld

   mountd, sgi_mountd, rstatd, walld, rusersd, rquotad, sprayd, bootpram

   videod

   fam

   sgi_snoop, sgi_pcsd, sgi_pod, sgi_xfsmd

   sgi_scanner, sgi_printer

   add tcp wrappers to:

   ftpd, telnetd, rshd, rlogind

8. portmap/rpcbind configuration
   • edit /etc/config/portmap.options
   • -v (syslog verbosely)
   • -a 255.255.255.0,a.b.c.d (allow network a.b.c.d, adjust as necessary)
9. xdm config changes (in /var/X11/xdm)
   • vi Xsession* comment out 'xhost +' lines
   • vi Xaccess place '!' in front of lines beginning '*'
   • vi Xservers add '-shnumclients 0' option
   • vi xdm-config change 'DisplayManager*authorize:' line from 'off' to 'on'.
10. syslog.conf changes
    • add *.debug;kern.none[tab]@loghost
11. hostname/ ip address
    • /etc/hosts, add hostname and ip address
    • /etc/sys_id: hostname, without domain
    • /etc/config/ifconfig-1.options, netmask 0xffffff00 (or as appropriate)
12. timezone, (/etc/TIMEZONE.) GMT0BST-1
13. DNS, (/etc/resolv.conf)
    • search ....
    • nameserver ....
    • nameserver ....
    • hostresorder bind local (can be omitted)
14. routing, etc, (create /etc/init.d/network.local)

          #!/bin/sh
          IS_ON=/sbin/chkconfig
    
          case "$1" in
          start)
             if $IS_ON network; then
                route add default ....
             fi
             ;;
          stop)
             route delete default
             ;;
          *)
             echo "usage: $0 {start|stop}"
             ;;
          esac
    	

15. and install:
    • # chmod 755 /etc/init.d/network.local
    • # ln -s /etc/init.d/network.local /etc/rc0.d/K93network
    • # ln -s /etc/init.d/network.local /etc/rc2.d/S31network
16. reboot

additional notes

• install tcp wrapper binary & hosts.{allow,deny} files
• fix 6.2 root crontab (last patches didn't fix this)
  • # setenv EDITOR /usr/bin/vi
  • # crontab -e
  • change instances of 'wc -c {file}' to 'wc -c < {file}'
• additional ethernet interfaces (/etc/config/netif.options)
  • typically, for ec2, edit
  • if2name=ec2
  • if2addr= ...
  • and remove ':' comment character
• ipfilterd
  • edit /etc/ipfilterd.conf, as appropriate
  • create /dev/ipfilterd device
    • # cd /dev
    • # ./MAKEDEV
  • turn on for next reboot
    • # chkconfig -f ipfilterd on
• SNMP
  • edit /etc/snmpd.auth, as appropriate
  • to turn off, chkconfig snmpd off
  • (there are some patches that fix an snmpd crashing problem)
• set reboot on crash
  • on IP22s (Indy, Challenge S), nvram rebound y
• forcing kernel relink
  • /etc/autoconfig -f