|
Lines 35-62
Link Here
|
| 35 |
hw.memtest.tests="0" |
35 |
hw.memtest.tests="0" |
| 36 |
console="comconsole,vidconsole" |
36 |
console="comconsole,vidconsole" |
| 37 |
hw.vtnet.mq_disable=1 |
37 |
hw.vtnet.mq_disable=1 |
| 38 |
kern.timecounter.hardware=ACPI-safe |
|
|
| 39 |
aesni_load="YES" |
38 |
aesni_load="YES" |
| 40 |
nvme_load="YES" |
39 |
nvme_load="YES" |
| 41 |
EOF |
40 |
EOF |
| 42 |
|
41 |
|
| 43 |
echo '169.254.169.254 metadata.google.internal metadata' > \ |
42 |
echo '169.254.169.254 metadata.google.internal metadata' >> \ |
| 44 |
${DESTDIR}/etc/hosts |
43 |
${DESTDIR}/etc/hosts |
| 45 |
|
44 |
|
| 46 |
# overwrite ntp.conf |
45 |
# overwrite ntp.conf |
| 47 |
cat << EOF > ${DESTDIR}/etc/ntp.conf |
46 |
cat << EOF > ${DESTDIR}/etc/ntp.conf |
| 48 |
server metadata.google.internal iburst |
47 |
server metadata.google.internal iburst |
| 49 |
|
48 |
|
| 50 |
restrict default kod nomodify notrap nopeer noquery |
49 |
restrict default ignore |
| 51 |
restrict -6 default kod nomodify notrap nopeer noquery |
50 |
restrict -6 default ignore |
| 52 |
|
51 |
|
| 53 |
restrict 127.0.0.1 |
52 |
restrict 127.0.0.1 |
| 54 |
restrict -6 ::1 |
53 |
restrict -6 ::1 |
| 55 |
restrict 127.127.1.0 |
54 |
restrict metadata.google.internal |
| 56 |
EOF |
|
|
| 57 |
|
| 58 |
cat << EOF >> ${DESTDIR}/etc/syslog.conf |
| 59 |
*.err;kern.warning;auth.notice;mail.crit /dev/console |
| 60 |
EOF |
55 |
EOF |
| 61 |
|
56 |
|
| 62 |
cat << EOF >> ${DESTDIR}/etc/ssh/sshd_config |
57 |
cat << EOF >> ${DESTDIR}/etc/ssh/sshd_config |
|
Lines 68-74
Link Here
|
| 68 |
ClientAliveInterval 420 |
63 |
ClientAliveInterval 420 |
| 69 |
EOF |
64 |
EOF |
| 70 |
|
65 |
|
| 71 |
cat << EOF >> ${DESTDIR}/etc/crontab |
66 |
cat << EOF >> ${DESTDIR}/etc/cron.d/freebsd-update |
| 72 |
0 3 * * * root /usr/sbin/freebsd-update cron |
67 |
0 3 * * * root /usr/sbin/freebsd-update cron |
| 73 |
EOF |
68 |
EOF |
| 74 |
|
69 |
|
|
Lines 78-85
Link Here
|
| 78 |
net.inet.tcp.blackhole=2 |
73 |
net.inet.tcp.blackhole=2 |
| 79 |
net.inet.udp.blackhole=1 |
74 |
net.inet.udp.blackhole=1 |
| 80 |
kern.ipc.somaxconn=1024 |
75 |
kern.ipc.somaxconn=1024 |
| 81 |
debug.trace_on_panic=1 |
76 |
kern.timecounter.hardware=ACPI-fast |
| 82 |
debug.debugger_on_panic=0 |
|
|
| 83 |
EOF |
77 |
EOF |
| 84 |
|
78 |
|
| 85 |
## XXX: Verify this is needed. I do not see this requirement |
79 |
## XXX: Verify this is needed. I do not see this requirement |