7 Install some software

Optionally we can install a couple of things to make our time at the commandline more comfortable. It makes no real functional difference to the "perfect setup". Install vim in this fashion even if you pushed it onto the chroot system earlier, as this will install it properly.

emerge --ask --verbose gentoolkit vim

Now you can change the default editor, if you don't want it to be nano.

vi /etc/rc.conf

Change the EDITOR property to your desired value. This will take effect from the next time you log in, or your can just type now,

source /etc/rc.conf

We already have most of the development files we need, and any others we will need will be brought in as we install their main software. As this is Gentoo there is no division commonly seen on other distributions between a package and the package-dev version.

emerge --ask --verbose expect fetchmail ncftp netkit-telnetd unzip zip

8 Create an administrator user

While not strictly necessary to make the system work, this will standardise things with the perfect setup for other distributions. We'll create a user called administrator and allow that user to use sudo.

groupadd -g 1000 administrator
useradd --create-home --gid administrator --groups wheel --shell /bin/bash administrator
passwd administrator

Enter the password, then install sudo.

emerge --ask --verbose sudo

Set up sudo so anyone in wheel can use it.

visudo

Uncomment this line:

# %wheel        ALL=(ALL)       ALL

It should look like this,

[...]
# Uncomment to allow people in group wheel to run all commands
%wheel        ALL=(ALL)       ALL
[...]

Save and exit.

Then, if you wish, you can remove root's password:

passwd --delete root

9 Quota

9.1 Kernel configuration

We need quota support in the kernel, and the quota file format version 2.

The standard Gentoo kernel does not have quota support. If you've followed this HowTo to do the base install you will have set this up already and you can skip to the next section. Otherwise you need to do it now. These instructions are for the genkernel users. The rest of you probably already know what to do.

genkernel --no-clean --no-mrproper --menuconfig all

Go into File Systems, select Quota support and select, to be built into the kernel, not as a module, Quota format v2 support.

Exit until you're out, saving your kernel configuration, then the build resumes.

Reboot.

9.2 Userspace configuration

emerge --ask --verbose quota

Edit /etc/conf.d/quota and add m to the QUOTACHECK_OPTS. Mine looks like this:

# /etc/conf.d/quota: config file for /etc/init.d/quota
# Note: if your console is hooked up to a serial terminal,
# you prob want to drop the '-v' from the OPTS vars below.

# Run quotacheck ?
RUN_QUOTACHECK="yes"

# Options for quotacheck
QUOTACHECK_OPTS="-avugm"

# Options for quotaon
QUOTAON_OPTS="-avug"

# Options for quotaoff
QUOTAOFF_OPTS="-avug"

Edit /etc/fstab. Mine looks like this (I added ,usrquota,grpquota to the partition with the mount point /):

# /etc/fstab: static file system information.
#
# noatime turns off atimes for increased performance (atimes normally aren't
# needed; notail increases performance of ReiserFS (at the expense of storage
# efficiency).  It's safe to drop the noatime options if you want and to
# switch between notail / tail freely.
#
# The root filesystem should have a pass number of either 0 or 1.
# All other filesystems should have a pass number of 0 or greater than 1.
#
# See the manpage fstab(5) for more information.
#
# <fs>                  <mountpoint>    <type>          <opts>          <dump pass="">
# NOTE: If your BOOT partition is ReiserFS, add the notail option to opts.
/dev/hda1               /boot           ext2            noauto,noatime  1 2
/dev/hda3               /               ext3            noatime,usrquota,grpquota               0 1
/dev/hda2               none            swap            sw              0 0
/dev/cdrom              /mnt/cdrom      audo            noauto,ro       0 0
#/dev/fd0               /mnt/floppy     auto            noauto          0 0
# glibc 2.2 and above expects tmpfs to be mounted at /dev/shm for
# POSIX shared memory (shm_open, shm_unlink).
# (tmpfs is a dynamically expandable/shrinkable ramdisk, and will
#  use almost no memory if not populated with files)
shm                     /dev/shm        tmpfs           nodev,nosuid,noexec    0 0

Start the quota system.

mount -o remount /
/etc/init.d/quota start
rc-update add quota boot

10 DNS Server

Run,

echo "net-dns/bind resolvconf" >> /etc/portage/package.use
emerge --ask --verbose bind

For security reasons we want to run BIND chrooted, so we have to do the following steps.

emerge --config bind
echo alias rndc=\'rndc -k /chroot/dns/etc/bind/rndc.key\' >> ~/.bash_profile
source ~/.bash_profile
rm --recursive --force /etc/bind
ln --symbolic /chroot/dns/etc/bind /etc/bind

There's no need to configure the logging daemon to include BIND's logs; it's already set up for us.

So we start it up.

/etc/init.d/named start
rc-update add named default

11 MySQL

Gentoo's default USE flags will cause MySQL to be installed with the UTF-8 character set selected as default for everything. If you're going to install ISPConfig you need to enter the following line or the ISPConfig web interface will not function:

echo "dev-db/mysql latin1" >> /etc/portage/package.use

Individual databases can still use other encodings, such as UTF-8.

Run,

emerge --ask --verbose mysql

That'll take a while; then when that's done,

emerge --config dev-db/mysql

Enter the root password you want to set for the database, and let it finish.

If you want MySQL to listen on all interfaces, not just localhost, edit /etc/mysql/my.cnf and comment out the line bind-address = 127.0.0.1:

Start MySQL

/etc/init.d/mysql start
rc-update add mysql default