[nycbug-talk] some comments, please

G.Rosamond george
Thu Jul 8 12:01:30 EDT 2004


i'm posting this to slashdot book reviews. . .comments appreciated. . 
.some rewriting from the soon-to-be-released Daemon News EZine version. 
. .



A flurry of BSD UNIX-related (Berkeley Software Distribution) books 
have hit the bookstores over the past few years.

 From books specific to OpenBSD (Secure Architectures with OpenBSD) to 
the reissue of The Design and Implementation of the BSD Operating 
System for FreeBSD 5.x expected in August 2004, to Michael Lucas' 
series of BSD Books from NoStarch Press, print documentation is 
certainly available for those interested in learning about the free, 
open source UNIX system which powers operations such as Yahoo! portal 
and Sendmail.org website, Verio and Pair hosting, not the mention 
Netcraft, the premier web server survey site.

Dru Lavigne's BSD Hacks (O'Reilly and Associates, May 2004), is the 
latest book in these releases, and is an enormously useful resource for 
systems administrators and end-users alike.

BSD Hacks is the first book that is almost solely focused on hacks for 
sysadmins, without boring you with the details for basic operating 
system installation and configuration that has been so well documented 
elsewhere. For those who find difficulty in BSD installs and other 
fundamentals, it's best to start with the FreeBSD Handbook, the NetBSD 
Guide or the OpenBSD FAQ.

It's not just for sysadmins though. Intermediate and advanced BSD users 
will also find the book an excellent tool.

There's lots of good hacks buried in the various BSD books, around the 
internet in different how-to's and tutorials. But BSD hacking is the 
sole purpose of BSD Hacks. No need to browse through install screens 
and overviews of TCP/IP before getting to the heart of the matter.

With 100 listed hacks, multiplied by an impressive level of detailed 
angles for each, Dru provides an array that demands the placement of 
this book right in your server room, not in a pile of 
"must-read-at-some-distant-point-in-the-future" texts.

The majority of hacks are applicable to all the BSDs, including Darwin 
and OS X, although some are specific to one BSD or another.

This review obviously can't list every hack, although you would be 
smart to sit and work through the book yourself over a weekend or two. 
But it is possible to provide a good flavor of BSD Hacks in brief. 
O'Reilly and Associates does give a good glimpse on their Sample Hacks 
page. But let's do a quick work through ourselves.

The first chapter is called "Customizing the User Environment," and is 
probably best for end-users looking to go beyond their first steps. But 
it does include some useful hacks, such as "Use an Interactive Shell" 
that certainly fit well into the arsenal of any sysadmin, not to 
mention Hack #12 "Use Multiple Screens on One Terminal."

The second chapter, "Dealing with Files and Filesystems" also contains 
gems for both end-users and sysadmins. The use of mtree, which maps a 
directory hierarchy, is mentioned as a tool for recovery. Later on in 
chapter 6, Dru details its use for making a hacked data integrity 
checker, thus filling the gap often played by products such as 
Tripwire.

Another great tool Dru covers in the second chapter is g4u, a free 
ghosting program that gives you the ability for quick restores over 
ftp. Ghosting a drive image is an incredibly useful tool, whether it's 
about replicating servers or doing a quick reinstall and configuration 
when a server fails in an emergency.

Chapter 3 is entitled "Boot and Login Environments." It gives some 
hacks that aren't just for basic system administration, but also some 
useful security ones including changing your /etc/passwd file to 
Blowfish encryption and utilizing OPIE for one-time passwords, which is 
built into FreeBSD.

"Backup Up" is the focus of Chapter 4. It includes some very creative 
methods of dealing with maintaining that necessity, and also includes 
an excellent primer on Bacula, which is increasingly gaining prominence 
as a cross-platform backup system.

Chapter 5 covers "Network Hacks," and continues on educating a 
sysadmin. Included in this chapter is the tcpdump program, a vital tool 
for watching traffic flowing by your network interfaces.

There's a strong security focus in Chapter 6, entitled "Securing the 
System." While security hacks are sprinkled generously throughout the 
book, this chapter works with firewalling with IPF and PF, in addition 
to covering SSH and Snort. It also includes the earlier mentioned 
intrusion detection light version with mtree.

Chapter 7, "Going Beyond the Basics" explores scripting, analyzing 
dreaded buffer overflows and more. She also includes a bit on "Creating 
a Trade Show Demo," not something you'd expect documented in print 
anywhere, but nevertheless something that is quite useful for anyone 
working for the BSDs at a conference.

Dru continues with "Keeping Up-to-Date" in Chapter 8, which includes 
useful details on upgrading and downgrading your installed ports.

The final chapter is "Grokking BSD." "Grok," as Dru comments, refers to 
the science fiction writer Heinlein's Martian phrase for having a 
"thorough understanding." Dru covers creating your own manual pages, 
dealing with custom patches, playing with dictionaries and more.

Certainly there's no walls between each chapter, as many of the hacks 
could be shifted around. All the more reason to work your way through 
the book from beginning to end.

One useful addition for this book could have been somehow denoting 
which of the BSDs, or all, the hacks were appropriate to. Certainly not 
all are available to Darwin and Apple's OS X, without at least further 
knowledge of hacking port source code.

While many of the hacks are found somewhere in the manual pages, on 
some useful website, buried in another book or in the minds of some 
developer somewhere, but not necessarily in the annals of official 
documentation.

There's no single book or site that provides the depth and breadth that 
Dru provides.

It's a project that no one individual is capable of doing. Dru managed 
to tap into the thoughts of dozens of developers and sysadmins around 
the world, greatly enhancing the variety of hacks in this book.

Whether you're a sysadmin managing hundreds of servers, or a power user 
ready to go beyond the obvious, BSD Hacks belongs next to your CRT.

Spend a weekend working through this book. You won't regret it.





More information about the talk mailing list