《Linux系统裁减指南规范LiPS》.doc

1、linux系统裁减指南（lips）目录11弓i言41.1 编写目的41.2 背景41.3 定义41.4 参考资料42总体描述52.1 硬件环境52.2 软件环境52.3 需求规定和约束53总体设计63.1 基本设计概念63.2 软件z勾64内核64.1 创建内核的方法 64.2 内核配置74.2.1 概述74.2.2 loadable module support 84.2.3 processor type and features 84.2.4 general setup 84.2.5 plug and play configuration 94.2.6 block devices 94.2

2、.7 multi-device support (raid and lvm) 104.2.8 networking options 104.2.9 ata/ide/mfm/rll support 114.2.10 scsi support 124.2.11 network device support 124.2.12 character devices 134.2.13 file systems 144.2.14 console drivers 154.2.15 usb support 154.3 提示164.3.1 extraversion 164.3.2 .config 175根文件系统

3、175.1 根文件系统175.2 文件系统的内容175.2.1 应用程序(applications) 175.2.2 设备文件(device files) 185.2.3 脚本和配置文件 ( scripts and configuration files ) 195.2.4 库文件(libraries) 205.2.5 必要的目录 205.3 初始化 ram 盘(initrd) 215.3.1 操作步骤215.3.2 引导选项215.3.3 安装225.3.4 改变根目录设备 235.3.5 使用场合 245.3.6 淘汰的根转换机制 ( change_root) 245.4 系统初始化(in

4、it) 245.4.1 init 的任务245.4.2 sysvinit 255.4.3 两种风格： slackware vs. debian 255.5 pam 265.5.1 什么是 pam 265.5.2 pam 的结构265.5.3 配置文件 265.5.4 other 275.6 再论 initrd 275.6.1 根到底在哪里 285.6.2 linuxrc 285.6.3 根转换机制：新的？旧的？ 305.7 提示315.7.1 文件系统目录层次结构 315.7.2 mklips.sh (制作 lips 的脚本) 325.7.3 lips.conf ( lips 配置文件) 32

5、5.7.4 cp 2 loadable module support -3 processor type and features -4 general setup -5 memory technology devices (mtd) -6 parallel port support -7 plug and play configuration -8 block devices -9 multi-device support (raid and lvm)-10 cryptography support (cryptoapi) -11 networking options -12 telepho

6、ny support -13 ata/ide/mfm/rll support -14 scsi support -15 fusion mpt device support -16 i2o device support -17 network device support -18 amateur radio support -19 irda (infrared) support -20 isdn subsystem -21 old cd-rom drivers (not scsi, not ide) -22 input core support -23 character devices -24

7、 multimedia devices -25 crypto hardware support -26 file systems -27 console drivers -28 sound -29 usb support -30 additional device driver support -31 bluetooth support -32 kernel hacking -33 library routines -load an alternate configuration filesave configuration to an alternate file 下面我们以2.4.20内核

8、为例，来详细说明内核的配置，也就是选哪些东西、不选哪些东 西。没有说明的选项，比如 code maturity level options”,表示不选o4.2.2 loadable module support* enable loadable module support set version information on all module symbols* kernel module loader可加载模块支持。虽然目前所选项目全部编译进内核，但是内核是支持模块的。 可以考虑将一些硬件设备的驱动程序编译为模块，从而减小内核尺寸，同时增加适应不同硬件平台的灵活性。4.2.3 proce

9、ssor type and features(pentium-iii/celeron(coppermine) processor family* machine check exception toshiba laptop support dell laptop support /dev/cpu/microcode - intel ia32 cpu microcode support /dev/cpu/*/msr - model-specific register support /dev/cpu/*/cpuid - cpu information support(off) high memo

10、ry supportmath emulationmtrr (memory type range register) supportsymmetric multi-processing supportlocal apic support on uniprocessorsunsynced tsc support处理器特性。选择一下processor family ,其余基本上都没有选。high memory support也可以打开，不清楚有什么用。4.2.4 general setup1 networking support2 pci support(any) pci access mode3

11、isa bus support4 pci device name databaseeisa supportmca supportsupport for hot-pluggable devices5 system v ipc6 bsd process accounting7 sysctl support(elf) kernel core (/proc/kcore) format kernel support for a.out binaries kernel support for elf binaries kernel support for misc binaries* power mana

12、gement support kernel support for misc binaries* power management support advanced power management bios support*ignoreuser suspend*enablepm at boot time* make cpu idle calls when idle*enableconsole blanking using apm*rtc stores time in gmt* allow interrupts during apm bios calls* use real mode apm

13、bios call to power off总体设置。这一部分选项比较重要，包括网络、总线、进程、二进制文件格式、电源管理等。其中apm相关的选项比较搞不清楚，有时候 halt - p命令不能关闭系统电源跟这里 有关系。4.2.5 plug and play configuration plug and play support isa plug and play support 即插即用设置。4.2.6 block devices normal floppy disk support xt hard disk support compaq smart2 support compaq smar

14、t array 5xxx support mylex dac960/dac1100 pci raid controller support loopback device support network block device support ram disk support(4096) default ram disk size* initial ram disk (initrd) support* per partition statistics in /proc/partitions块设备。软驱也可以不选。这里的关键选项是loopback device, ram disk和initrd

15、 , 一定要选中。default ram disk size多少都没有关系。4.2.7 multi-device support (raid and lvm)* multiple devices driver support (raid and lvm) raid support linear (append) moderaid-0 (striping) moderaid-1 (mirroring) mode raid-4/raid-5 mode multipath i/o support logical volume manager (lvm) supportmd支持。软raid和lvm的支

16、持在这里选择，如果不使用，也可以不选。4.2.8 networking options packet socket* packet socket: mmapped io netlink device emulation* network packet filtering (replaces ipchains) network packet filtering debugging * socket filtering unix domain sockets * tcp/ip networking *ip:multicasting*ip:advanced routerip:policy routi

17、ngip:equal cost multipathip:use tos value as routing keyip:verbose route monitoringip:large routing tables*ip:kernel level autoconfiguration*ip:dhcp support*ip:bootp support*ip:rarp supportip: tunnelingip: gre tunnels over ip ip: multicast routingip: tcp explicit congestion notification support ip:

18、tcp syncookie support (disabled per default) ip: netfilter configuration - 802.1q vlan support the ipx protocol appletalk protocol supportappletalk devices - decnet support 802.1d ethernet bridgingqos and/or fair queueing -network testing -网络选项。这里选项也比较多，如果没有什么特殊要求，又不是十分理解这些选项的意 义，基本上可以用缺省设置。注意 dhcp选

19、项，如果要用到的话要记得选中这个。ip: netfilter configuration (跟iptables有关)等几个子选项都没有选。4.2.9 ata/ide/mfm/rll support ata/ide/mfm/rll supportide, ata and atapi block devices - enhanced ide/mfm/rll disk/cdrom/tape/floppy support -please see documentation/ide.txt for help/info on ide drives use old disk-only driver on p

20、rimary interfaceincludeide/a ta-2disk support *use multi-mode by default * auto-geometry resizing supportincludeide/a tapicdrom supportincludeide/a tapitape supportincludeide/a tapifloppy support scsi emulation support ide taskfile access -ide chipset support/bugfixes cmd640 chipset bugfix/support r

21、z1000 chipset bugfix/support *generic pci ide chipset support * sharing pci ide interrupts support * generic pci bus-master dma support boot off-board chipsets first support force enable legacy 2.0.x hosts to use dma*use pci dma by default when availableenable dmaonly for disksaec62xx chipset suppor

22、tali m15x3chipset supportamd vipersupportcmd64x and cmd680chipsetsupportcy82c693 chipset supportcyrix cs5530 mediagxchipsetsupporthpt34x chipset supporthpt366/368/370 chipsetsupport*intel piixn chipsets support*piixn tuning supportpromise pdc20246|62|65|67|68|69|70supportserverworks osb4/csb5 chipse

23、ts supportsis5513 chipset supportslc90e66 chipset supportvia82cxxx chipset support other ide chipset support ignore word93 validation bitside设备支持。要用ide硬盘，当然要选中。cdrom选项看情况也可以不要。scsiemulation似乎对使用 usb盘有影响。剩下的很多都是跟ide chipset有关的。最好是用dmesg命令找出目标系统主板芯片组，然后选中对应的芯片组支持，这样相 当于安装了 ide芯片组的驱动程序。如果没有指定应该也可以，只是性能

24、可能会受到一些 影响。4.2.10 scsi support scsi support -scsi support type (disk, tape, cd-rom) scsi disk support(40) maximum number of scsi disks that can be loaded as modulesscsitape supportscsionstream sc-x0tape supportscsicd-rom supportscsigeneric support-some scsi devices (e.g. cd jukebox) support multiple

25、 luns enable extra checks in new queueing code probe all luns on each scsi device verbose scsi error reporting (kernel size +=12k) scsi logging facilityscsi low-level drivers -scsi支持。如果要用到scsi硬盘等scsi设备，这里当然要选。目前我们的目标系统其实没有scsi硬盘，但是为了使用 usb盘，也要选中scsi支持。scsi low-level drivers子选项中是一些 scsi卡，都不用选。4.2.11

26、network device support* network device supportarcnet devices - dummy net driver support bonding driver support eql (serial line load balancing) support universal tun/tap device driver supportethernet (10 or 100mbit) -* ethernet (10 or 100mbit)* eisa, vlb, pci and on board controllers etherexpresspro

27、/100 support (eepro100, original becker driv er realtek rtl-8139 pci fast ethernet adapter supportethernet (1000 mbit) -fddi driver support ppp (point-to-point protocol) support slip (serial line) supportwireless lan (non-hamradio) -token ring devices -fibre channel driver supportwan interfaces -网络设

28、备支持。主要选择网卡类型，ethernet (10 or 100mbit)子选项中列出了内核可以 支持的10/100m以太网卡，这里仅列出了我们选中的2种。其他子选项都没有选。4.2.12 character devices* virtual terminal* support for console on virtual terminal standard/generic (8250/16550 and compatible uarts) serial suppo rt* support for console on serial portextended dumb serial drive

29、r optionsnon-standard serial port supportunix98 pty supporti2c support -mice joysticks - qic-02 tape supportwatchdog cards - amd 768 random number generator support intel i8x0 random number generator support amd 76x native power management (experimental) /dev/nvram support enhanced real time clock s

30、upport double talk pc internal speech card support siemens r3964 line discipline applicom intelligent fieldbus card support ftape, the floppy tape device driver - /dev/agpgart (agp support)direct rendering manager (xfree86 dri support) acp modem (mwave) support字符设备。这里主要就是选择了最前面4个跟终端和串口有关的选项，以支持虚拟终端(

31、远程登录要用到)，支持标准串口，支持串口控制台。4.2.13 file systems* quota support kernel automounter support kernel automounter version 4 support (also supports v3) reiserfs support enable reiserfs debug mode* stats in /proc/fs/reiserfs ext3 journalling file system support jbd (ext3) debugging support dos fat fs support m

32、sdos fs support umsdos: unix-like file system on top of standard msdos fs vfat (windows-95) fs support compressed rom file system support* virtual memory file system support (former shm fs) iso 9660 cdrom file system support* microsoft joliet cdrom extensions transparent decompression extension jfs

33、filesystem support minix fs support freevxfs file system support (veritas vxfs(tm) compatible) ntfs file system support (read only) os/2 hpfs file system support* /proc file system support qnx4 file system support (read only) rom file system support second extended fs support system v/xenix/v7/coher

34、ent file system support udf file system support (read only) ufs file system support (read only) network file systems - coda file system support (advanced network fs) nfs file system support* provide nfsv3 client support root file system on nfs nfs server support* provide nfsv3 server support smb fil

35、e system support (to mount windows shares etc.) use a default nls ncp file system support (to mount netware volumes)partition types -native language support -default nls option: iso8859-1 codepage 437 (united states, canada) simplified chinese charset (cp936, gb2312) traditional chinese charset (big

36、5)文件系统。这部分内容比较多，也很重要。首先是quota,如果目标系统支持这个功能，这里就要选中。然后是选择要支持的文件系统，常用的有reiserfs, ext3 , fat, iso9660,jfs等等，可以根据情况选择。/proc和ext2 一定要选中。还有network file systems子选项，可以选择是否支持 nfs和smb。native language support子选项跟所支持的语言有关， 这里没有全部列出来，我们选中了英语和简体、繁体 中文字符集。4.2.14 console drivers* vga text consolevideo mode selection

37、 support控制台驱动。调试的时候可以给目标系统接显示器看一下，实际系统应该可以 不选。4.2.15 usb support support for usb usb verbose debug messages-miscellaneous usb options* preliminary usb device filesystem long timeout for slow-responding devices (some mge ellipse upse -usb host controller drivers uhci alternate driver (je) support ohc

38、i (compaq, imacs, opti, sis, ali, .) support -usb device class driversusb midi supportusb mass storage support*usb mass storage verbose debugfreecom usb/atapi bridge supportisd-200 usb/ata bridge supportmicrotech compactflash/smartmedia support- usb modem (cdc acm) support- usb printer support- -usb

39、 human interface devices (hid)- * usb human interface device (full hid) support- -input core support is needed for usb hid input layer or hidbp/dev/hiddev raw hid device support- -usb imaging devices- usb kodak dc-2xx camera support- usb scanner support- microtek x6usb scanner support- -usb multimed

40、ia devices- - video4linux support is needed for usb multimedia device support- -usb network adaptors- -usb port driversusb serial converter support - -usb miscellaneous drivers- texas instruments graph link usb (aka silverlink) cable support- usb lcd device supportusb支持。如果没有使用 usb设备，这部分可以不选。 要使用usb盘

41、，一定要选中u sb mass storage support。其余很多选项我也不清楚是干什么用的。4.3提示4.3.1 extra version在系统中使用uname可以获得系统版本信息。比如 redhat 9:rootlips root# uname -r2.4.20-8rootlips root#返回结果表示了 redhat修订后的内核版本号。前面我们提到过，这个“-8”就是redhat附加在标准内核版本号后面的一个信息。在一个运行lips的系统中，我们也需要确定当前使用的内核版本，通过版本信息来知 道这个内核的配置，也可以通过在标准内核版本后面附加特定的编码来实现o/usr/src/

42、linux-2.4/makefile 中的变量extra version可以帮助我们达到这个目标。下面是make巾le文件的最前面几行内容：version = 2patchlevel = 4sublevel = 20extraversion = -8kernelrelease=$(version).$(patchlevel).$(sublevel)$(extraversio n)现在 kernelrelease 的值就是 2.4.20-8。这个信息会被编译到内核中，uname工具会从内核文件中提取出版本号。如果将 makefile做一些修改，比如，extraversion = -8-r2lips那么我们可以得到内核版本号2.4.20-8-r2lips ,表示为了创建 lips而编译的一个特定配置的内核，这个内核是以2.4.20-8为基础，r2lips (release 2 lips)即第二个版本。对makefile的修改要在编译内核之前完成。4.3.2 .config内核配置(make menuconfig )完成之后，会询