createfiles.xml 17 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418
  1. <?xml version="1.0" encoding="UTF-8"?>
  2. <!DOCTYPE sect1 PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN"
  3. "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
  4. <!ENTITY % general-entities SYSTEM "../general.ent">
  5. %general-entities;
  6. ]>
  7. <sect1 id="ch-system-createfiles">
  8. <?dbhtml filename="createfiles.html"?>
  9. <title>创建必要的文件和符号链接</title>
  10. <indexterm zone="ch-system-createfiles">
  11. <primary sortas="e-/etc/passwd">/etc/passwd</primary>
  12. </indexterm>
  13. <indexterm zone="ch-system-createfiles">
  14. <primary sortas="e-/etc/group">/etc/group</primary>
  15. </indexterm>
  16. <indexterm zone="ch-system-createfiles">
  17. <primary sortas="e-/var/run/utmp">/var/run/utmp</primary>
  18. </indexterm>
  19. <indexterm zone="ch-system-createfiles">
  20. <primary sortas="e-/var/log/btmp">/var/log/btmp</primary>
  21. </indexterm>
  22. <indexterm zone="ch-system-createfiles">
  23. <primary sortas="e-/var/log/lastlog">/var/log/lastlog</primary>
  24. </indexterm>
  25. <indexterm zone="ch-system-createfiles">
  26. <primary sortas="e-/var/log/wtmp">/var/log/wtmp</primary>
  27. </indexterm>
  28. <!--para>Some programs use hard-wired paths to programs which do not exist yet.
  29. In order to satisfy these programs, create a number of symbolic links which
  30. will be replaced by real files throughout the course of this chapter after the
  31. software has been installed:</para-->
  32. <para>有些程序使用硬编码的路径访问当前还不存在的程序。
  33. 为了满足它们的要求,需要创建一些符号链接。在本章的后续内容中,
  34. 它们将被安装好的软件包中真正的文件替代:</para>
  35. <screen><userinput>ln -sv /tools/bin/{bash,cat,chmod,dd,echo,ln,mkdir,pwd,rm,stty,touch} /bin
  36. ln -sv /tools/bin/{env,install,perl,printf} /usr/bin
  37. ln -sv /tools/lib/libgcc_s.so{,.1} /usr/lib
  38. ln -sv /tools/lib/libstdc++.{a,so{,.6}} /usr/lib
  39. ln -sv bash /bin/sh</userinput></screen>
  40. <!--for lib in blkid lzma mount uuid
  41. do
  42. ln -sv /tools/lib/lib$lib.so* /usr/lib
  43. done-->
  44. <!--ln -svf /tools/include/blkid /usr/include
  45. ln -svf /tools/include/libmount /usr/include
  46. ln -svf /tools/include/uuid /usr/include-->
  47. <!--for pc in blkid mount uuid
  48. do
  49. sed 's@tools@usr@g' /tools/lib/pkgconfig/${pc}.pc \
  50. > /usr/lib/pkgconfig/${pc}.pc
  51. done-->
  52. <variablelist>
  53. <title>每个链接的目的:</title>
  54. <varlistentry>
  55. <term><parameter><filename>/bin/bash</filename></parameter></term>
  56. <listitem>
  57. <para>许多 <command>bash</command> 脚本指定了
  58. <filename>/bin/bash</filename>。</para>
  59. </listitem>
  60. </varlistentry>
  61. <varlistentry>
  62. <term><parameter><filename>/bin/cat</filename></parameter></term>
  63. <listitem>
  64. <para>这个路径硬编码在 Glibc 配置脚本中。</para>
  65. </listitem>
  66. </varlistentry>
  67. <varlistentry>
  68. <term><parameter><filename>/bin/dd</filename></parameter></term>
  69. <listitem>
  70. <para>指向 <filename>dd</filename> 的路径会被硬编码在
  71. <filename>/usr/bin/libtool</filename> 工具中。</para>
  72. </listitem>
  73. </varlistentry>
  74. <varlistentry>
  75. <term><parameter><filename>/bin/echo</filename></parameter></term>
  76. <listitem>
  77. <!--para>This is to satisfy one of the tests in Glibc's test suite, which
  78. expects <filename>/bin/echo</filename>.</para-->
  79. <para>这是为了满足 Glibc 测试套件中的一项测试,它需要
  80. <filename>/bin/echo</filename>。</para>
  81. </listitem>
  82. </varlistentry>
  83. <varlistentry>
  84. <term><parameter><filename>/usr/bin/env</filename></parameter></term>
  85. <listitem>
  86. <para>这个路径被硬编码在一些软件包的构建过程中。
  87. <!-- systemd This may not be needed if we move sysd to the end--></para>
  88. </listitem>
  89. </varlistentry>
  90. <varlistentry>
  91. <term><parameter><filename>/usr/bin/install</filename></parameter></term>
  92. <listitem>
  93. <!--para>The path to <filename>install</filename> will be hard-coded into
  94. the <filename>/usr/lib/bash/Makefile.inc</filename> file.</para-->
  95. <para>指向 <filename>install</filename> 的路径会被硬编码到
  96. <filename>/usr/lib/bash/Makefile.inc</filename> 文件中。</para>
  97. </listitem>
  98. </varlistentry>
  99. <varlistentry>
  100. <term><parameter><filename>/bin/ln</filename></parameter></term>
  101. <listitem>
  102. <!--para>The path to <filename>ln</filename> will be hard-coded into the
  103. <filename>/usr/lib/perl5/&perl-version;/&lt;target-triplet&gt;/Config_heavy.pl</filename>
  104. file.</para-->
  105. <para>指向 <filename>ln</filename> 的路径会被硬编码到
  106. <filename>/usr/lib/perl5/&perl-version;/&lt;target-triplet&gt;/Config_heavy.pl</filename>
  107. 文件中。</para>
  108. </listitem>
  109. </varlistentry>
  110. <varlistentry>
  111. <term><parameter><filename>/bin/pwd</filename></parameter></term>
  112. <listitem>
  113. <para>某些 <command>configure</command> 脚本,特别是 Glibc 的,
  114. 硬编码了这个路径。</para>
  115. </listitem>
  116. </varlistentry>
  117. <varlistentry>
  118. <term><parameter><filename>/bin/rm</filename></parameter></term>
  119. <listitem>
  120. <para>指向 <filename>rm</filename> 的路径会被硬编码到
  121. <filename>/usr/lib/perl5/&perl-version;/&lt;target-triplet&gt;/Config_heavy.pl</filename>
  122. 文件中。</para>
  123. <!--para>The path to <filename>rm</filename> will be hard-coded into the
  124. <filename>/usr/lib/perl5/&perl-version;/&lt;target-triplet&gt;/Config_heavy.pl</filename>
  125. file.</para-->
  126. </listitem>
  127. </varlistentry>
  128. <varlistentry>
  129. <term><parameter><filename>/bin/stty</filename></parameter></term>
  130. <listitem>
  131. <!--para>This pathname is hard-coded into Expect, therefore it is needed
  132. for Binutils and GCC test suites to pass.</para-->
  133. <para>这个路径被硬编码到 Expect 中,创建该链接才能使得
  134. Binutils 和 GCC 通过测试套件测试。</para>
  135. </listitem>
  136. </varlistentry>
  137. <varlistentry>
  138. <term><parameter><filename>/usr/bin/perl</filename></parameter></term>
  139. <listitem>
  140. <para>许多 Perl 脚本硬编码
  141. <command>perl</command> 程序的路径。</para>
  142. </listitem>
  143. </varlistentry>
  144. <varlistentry>
  145. <term><parameter><filename>/usr/lib/libgcc_s.so{,.1}</filename></parameter></term>
  146. <listitem>
  147. <para>Glibc 需要它才能让 pthread 库正常工作。</para>
  148. </listitem>
  149. </varlistentry>
  150. <varlistentry>
  151. <term><parameter><filename>/usr/lib/libstdc++{,.6}</filename></parameter></term>
  152. <listitem>
  153. <para>Glibc 测试套件中的若干项测试需要它, 另外构建 GMP 的 C++
  154. 支持也需要它。</para>
  155. </listitem>
  156. </varlistentry>
  157. <!--
  158. <varlistentry>
  159. <term><parameter><filename>/usr/lib/libstdc++.la</filename></parameter></term>
  160. <listitem>
  161. <para>This prevents a <filename class="directory">/tools</filename>
  162. reference that would otherwise be in
  163. <filename>/usr/lib/libstdc++.la</filename> after GCC is installed.</para>
  164. </listitem>
  165. </varlistentry>
  166. -->
  167. <!--<varlistentry revision="systemd">-->
  168. <!-- <varlistentry>
  169. <term><parameter><filename>/usr/lib/lib{blkid,lzma,mount,uuid}.{a,la,so*}</filename></parameter></term>
  170. <listitem>
  171. <para>这些链接防止一些工具获得指向
  172. <filename class="directory">/tools</filename>
  173. 目录的不必要的引用。</para>
  174. </listitem>
  175. </varlistentry>-->
  176. <varlistentry>
  177. <term><parameter><filename>/bin/sh</filename></parameter></term>
  178. <listitem>
  179. <para>许多 shell 脚本硬编码路径
  180. <filename>/bin/sh</filename>。</para>
  181. </listitem>
  182. </varlistentry>
  183. </variablelist>
  184. <!--para>Historically, Linux maintains a list of the mounted file systems in the
  185. file <filename>/etc/mtab</filename>. Modern kernels maintain this list
  186. internally and exposes it to the user via the <filename
  187. class="directory">/proc</filename> filesystem. To satisfy utilities that
  188. expect the presence of <filename>/etc/mtab</filename>, create the following
  189. symbolic link:</para-->
  190. <para>历史上,Linux 在 <filename>/etc/mtab</filename>
  191. 维护已经挂载的文件系统的列表。现代内核在内部维护该列表,并通过
  192. <filename class="directory">/proc</filename> 文件系统将它展示给用户。
  193. 为了满足那些需要 <filename>/etc/mtab</filename> 的工具,
  194. 执行以下命令,创建符号链接:</para>
  195. <screen><userinput>ln -sv /proc/self/mounts /etc/mtab</userinput></screen>
  196. <!--para>In order for user <systemitem class="username">root</systemitem> to be
  197. able to login and for the name <quote>root</quote> to be recognized, there
  198. must be relevant entries in the <filename>/etc/passwd</filename> and
  199. <filename>/etc/group</filename> files.</para>
  200. <para>Create the <filename>/etc/passwd</filename> file by running the following
  201. command:</para-->
  202. <para>为了使得 <systemitem class="username">root</systemitem>
  203. 能正常登录,而且它的用户名能被正常识别,必须在文件
  204. <filename>/etc/passwd</filename> 和 <filename>/etc/groups</filename>
  205. 中写入相关的条目。</para>
  206. <para>执行以下命令创建 <filename>/etc/passwd</filename> 文件:</para>
  207. <screen revision="sysv"><userinput>cat &gt; /etc/passwd &lt;&lt; "EOF"
  208. <literal>root:x:0:0:root:/root:/bin/bash
  209. bin:x:1:1:bin:/dev/null:/bin/false
  210. daemon:x:6:6:Daemon User:/dev/null:/bin/false
  211. messagebus:x:18:18:D-Bus Message Daemon User:/var/run/dbus:/bin/false
  212. nobody:x:99:99:Unprivileged User:/dev/null:/bin/false</literal>
  213. EOF</userinput></screen>
  214. <screen revision="systemd"><userinput>cat &gt; /etc/passwd &lt;&lt; "EOF"
  215. <literal>root:x:0:0:root:/root:/bin/bash
  216. bin:x:1:1:bin:/dev/null:/bin/false
  217. daemon:x:6:6:Daemon User:/dev/null:/bin/false
  218. messagebus:x:18:18:D-Bus Message Daemon User:/var/run/dbus:/bin/false
  219. systemd-bus-proxy:x:72:72:systemd Bus Proxy:/:/bin/false
  220. systemd-journal-gateway:x:73:73:systemd Journal Gateway:/:/bin/false
  221. systemd-journal-remote:x:74:74:systemd Journal Remote:/:/bin/false
  222. systemd-journal-upload:x:75:75:systemd Journal Upload:/:/bin/false
  223. systemd-network:x:76:76:systemd Network Management:/:/bin/false
  224. systemd-resolve:x:77:77:systemd Resolver:/:/bin/false
  225. systemd-timesync:x:78:78:systemd Time Synchronization:/:/bin/false
  226. systemd-coredump:x:79:79:systemd Core Dumper:/:/bin/false
  227. nobody:x:99:99:Unprivileged User:/dev/null:/bin/false</literal>
  228. EOF</userinput></screen>
  229. <!--para>The actual password for <systemitem class="username">root</systemitem>
  230. (the <quote>x</quote> used here is just a placeholder) will be set later.</para-->
  231. <para>我们以后再设置 <systemitem class="username">root</systemitem>
  232. 用户的实际密码(这里的 <quote>x</quote> 只是一个占位符)。</para>
  233. <!--para>Create the <filename>/etc/group</filename> file by running the following
  234. command:</para-->
  235. <para>执行以下命令,创建 <filename>/etc/group</filename> 文件:</para>
  236. <screen revision="sysv"><userinput>cat &gt; /etc/group &lt;&lt; "EOF"
  237. <literal>root:x:0:
  238. bin:x:1:daemon
  239. sys:x:2:
  240. kmem:x:3:
  241. tape:x:4:
  242. tty:x:5:
  243. daemon:x:6:
  244. floppy:x:7:
  245. disk:x:8:
  246. lp:x:9:
  247. dialout:x:10:
  248. audio:x:11:
  249. video:x:12:
  250. utmp:x:13:
  251. usb:x:14:
  252. cdrom:x:15:
  253. adm:x:16:
  254. messagebus:x:18:
  255. input:x:24:
  256. mail:x:34:
  257. kvm:x:61:
  258. wheel:x:97:
  259. nogroup:x:99:
  260. users:x:999:</literal>
  261. EOF</userinput></screen>
  262. <screen revision="systemd"><userinput>cat &gt; /etc/group &lt;&lt; "EOF"
  263. <literal>root:x:0:
  264. bin:x:1:daemon
  265. sys:x:2:
  266. kmem:x:3:
  267. tape:x:4:
  268. tty:x:5:
  269. daemon:x:6:
  270. floppy:x:7:
  271. disk:x:8:
  272. lp:x:9:
  273. dialout:x:10:
  274. audio:x:11:
  275. video:x:12:
  276. utmp:x:13:
  277. usb:x:14:
  278. cdrom:x:15:
  279. adm:x:16:
  280. messagebus:x:18:
  281. systemd-journal:x:23:
  282. input:x:24:
  283. mail:x:34:
  284. kvm:x:61:
  285. systemd-bus-proxy:x:72:
  286. systemd-journal-gateway:x:73:
  287. systemd-journal-remote:x:74:
  288. systemd-journal-upload:x:75:
  289. systemd-network:x:76:
  290. systemd-resolve:x:77:
  291. systemd-timesync:x:78:
  292. systemd-coredump:x:79:
  293. wheel:x:97:
  294. nogroup:x:99:
  295. users:x:999:</literal>
  296. EOF</userinput></screen>
  297. <!--para>The created groups are not part of any standard&mdash;they are groups
  298. decided on in part by the requirements of the Udev configuration in this
  299. chapter, and in part by common convention employed by a number of existing
  300. Linux distributions. In addition, some test suites rely on specific users
  301. or groups. The Linux Standard Base (LSB, available at <ulink
  302. url="http://www.linuxbase.org"/>) recommends only that, besides the group
  303. <systemitem class="groupname">root</systemitem> with a Group ID (GID) of 0,
  304. a group <systemitem class="groupname">bin</systemitem> with a GID of 1 be
  305. present. All other group names and GIDs can be chosen freely by the system
  306. administrator since well-written programs do not depend on GID numbers, but
  307. rather use the group's name.</para-->
  308. <para>这里创建的用户组并不属于任何标准 —— 它们一部分是为了满足本章中
  309. Udev 配置的需要,另一部分借鉴了一些 Linux 发行版的通用惯例。
  310. 另外,某些测试套件需要特定的用户或组。Linux Standard Base
  311. (LSB,可以在 <ulink url="http://www.linuxbase.org"/> 查看)
  312. 标准只推荐以组 ID 0 创建用户组
  313. <systemitem class="groupname">root</systemitem>,
  314. 以及以组 ID 1 创建用户组
  315. <systemitem class="groupname">bin</systemitem>,
  316. 其他组名和组 ID 由系统管理员自由分配,因为好的程序不会依赖组 ID 数字,
  317. 而是使用组名。</para>
  318. <!--para>To remove the <quote>I have no name!</quote> prompt, start a new
  319. shell. Since a full Glibc was installed in <xref
  320. linkend="chapter-temporary-tools"/> and the
  321. <filename>/etc/passwd</filename> and <filename>/etc/group</filename>
  322. files have been created, user name and group name resolution will now
  323. work:</para-->
  324. <para>为了移除 <quote>I have no name!</quote> 提示符,需要打开一个新
  325. shell。由于在 <xref linkend="chapter-temporary-tools"/>
  326. 中已经安装了一份完整的 Glibc,而且刚才创建了文件
  327. <filename>/etc/passwd</filename> 和 <filename>/etc/group</filename>,
  328. 用户名和组名现在就可以正常解析了。</para>
  329. <screen role="nodump"><userinput>exec /tools/bin/bash --login +h</userinput></screen>
  330. <!--para>Note the use of the <parameter>+h</parameter> directive. This tells
  331. <command>bash</command> not to use its internal path hashing. Without this
  332. directive, <command>bash</command> would remember the paths to binaries it has
  333. executed. To ensure the use of the newly compiled binaries as soon as they are
  334. installed, the <parameter>+h</parameter> directive will be used for the duration
  335. of this chapter.</para-->
  336. <para>注意这里使用了 <parameter>+h</parameter> 参数,
  337. 它告诉 <command>bash</command> 不要使用内部的路径散列机制。
  338. 如果没有指定该参数,<command>bash</command> 会记忆它执行过程序的路径。
  339. 为了在安装新编译好的程序后马上使用它们,在本章中总是使用
  340. <parameter>+h</parameter>。</para>
  341. <!--para>The <command>login</command>, <command>agetty</command>, and
  342. <command>init</command> programs (and others) use a number of log
  343. files to record information such as who was logged into the system and
  344. when. However, these programs will not write to the log files if they
  345. do not already exist. Initialize the log files and give them
  346. proper permissions:</para-->
  347. <para><command>login</command>、<command>agetty</command> 和
  348. <command>init</command> 等程序使用一些日志文件,
  349. 以记录登录系统的用户和登录时间等信息。
  350. 然而,这些程序不会创建不存在的日志文件。初始化日志文件,
  351. 并为它们设置合适的访问权限:</para>
  352. <screen><userinput>touch /var/log/{btmp,lastlog,faillog,wtmp}
  353. chgrp -v utmp /var/log/lastlog
  354. chmod -v 664 /var/log/lastlog
  355. chmod -v 600 /var/log/btmp</userinput></screen>
  356. <!--para>The <filename>/var/log/wtmp</filename> file records all logins and
  357. logouts. The <filename>/var/log/lastlog</filename> file records when each
  358. user last logged in. The <filename>/var/log/faillog</filename> file records
  359. failed login attempts. The <filename>/var/log/btmp</filename> file records
  360. the bad login attempts.</para-->
  361. <para>文件 <filename>/var/log/wtmp</filename> 记录所有的登录和登出,
  362. 文件 <filename>/var/log/lastlog</filename>
  363. 记录每个用户最后登录的时间,文件 <filename>/var/log/faillog</filename>
  364. 记录所有失败的登录尝试,文件 <filename>/var/log/btmp</filename>
  365. 记录所有错误的登录尝试。</para>
  366. <note><!--para>The <filename>/run/utmp</filename> file records the users that
  367. are currently logged in. This file is created dynamically in the boot
  368. scripts.</para-->
  369. <para> 文件 <filename>/run/utmp</filename> 记录当前登录的用户,
  370. 它由启动脚本动态创建。</para>
  371. </note>
  372. </sect1>