服务器评测
今天从硬盘安装了Fedora8（不刻DVD了，又费钱安装还慢），主要的原因是为了能使用SDL的全屏模式，结果安装完后和Fedora7一样，还是全屏后X马上重启，看来是白升级了，不过听说Fedora8对笔记本改进了不少，希望不会让我失望。
安装过程很简单，把下载的镜像文件中的isolinux这个文件夹提取出来和镜像文件放在一个空闲的分区（不可以安装在此分区上），重起后在grub的命令行下输入：
root (hd0,0)
kernel (hd0,0)/home/cocobear/isolinux/vmlinuz
initrd (hd0,0)/home/cocobear/initrd.img
这里(hd0,0)改为对应你自己的镜像文件所在分区。安装时速度快多了我从DVD安装得3个小时，硬盘安装1个小时就差不多了。
发现了一个超好的yum插件：yum-fastestmirror，也不知道是Fedora8中的yum更好了还是使用了这个插件的缘故，我yum安装mplayer等东西的时候速度超快，可以达到几百K的速度，爽啊！
然后根据下一页的内容停掉了没用的服务，不过有一个服务有点奇怪“auditd”，看说明用处不是很大我就停掉了，没想到打开一个程序变得奇慢，只好重新开启，一切才正常。
Services in Fedora 8
The following is a brief explanation on usage and recommendations for some (not all) of the different services packaged with Fedora 8.
——————————————————————————–
Understanding Services
Please read the guide on managing services in Fedora. This includes an explanation for services/daemons, runlevels and various tools available to manage your services.
To control services either use chkconfig or ntsysv if you are using the command line, or use system-config-services in the GUI. Gnome users: System > Administration > Server Settings > Services. You will require root access to modify services.
——————————————————————————–
Individual Services
The following is a brief explanation on usage and recommendations for services packaged with Fedora 8. This is not an exhaustive list. Be careful, do not disable things that you are not sure if you need or if you do not understand or know what they are.
DO NOT DISABLE THE FOLLOWING (unless you know what you are doing).
haldaemon, messagebus, klogd, network, rsyslogd
Make sure to apply your changes to runlevel 5 *AND* 3.
——————————————————————————–
ConsoleKit
ConsoleKit is a system daemon which serves multiple purposes for the desktop (including how users interact with the computer, Fast User Switching, automounting devices, etc). Fedora 8 has included Pulse Audio which depends on ConsoleKit, if disabled your sound may not properly function. It is highly recommended to leave ConsoleKit enabled.
NetworkManager, NetworkManagerDispatcher
NetworkManager is daemon meant to automate switching between network connections. Many laptop users who switch between Wireless WiFi connections and/or Ethernet connections may find this useful. Most stationary computers should have this disabled. Some DHCP users may require this. — NetworkManager has had significant improvements in Fedora 8. If you have hardware that works perfectly using NetworkManager, then you can try disabling the network service.
acpid
Advanced Configuration and Power Interface daemon which controls and allows interfacing to power management and certain input devices. It is recommended to be enabled only if you need it. Test disabling it, if you have power management issues (suspend, sleep, wakeup) then re-enable it.
anacron, atd, cron
These are schedulers with each having slightly different purposes. It is recommended you keep the general purpose scheduler cron enabled, especially if you keep your computer running for long periods of time. If you are running a server look into which schedulers you require. Most likely atd and anacron should be disabled for desktops/laptops. Please note that some sheduled tasks such as cleaning /tmp or /var may require specific schedulers.
auditd
This saves audit records generated by the kernel. This information can be used in different ways. SELinux uses the audit daemon to record events. While there are other logging services it is recommended you leave this enabled (especially for users with SELinux enabled). Some information on how to utilize audit can be found on RH Magazine.
autofs
This mounts removable disks (such as USB harddrives) on demand. It is recommended to keep this enabled if you use removable media.
avahi-daemon
Avahi is an implementation of zeroconf and is useful for detecting devices and services on local network without a DNS server. This is also the same as mDNS. Most users may have this disabled. Please note that in order to use the networked audio functionality of Pulse Audio you will need Avahi enabled.
bluetooth, hcid, hidd, dund, pand
Bluetooth is for portable local wireless devices (NOT wifi,802.11). Some laptops come with bluetooth support. There are bluetooth mice, headsets and cell phone accessories. Most people do not have bluetooth support or devices, and should disable this. Other services with bluetooth: hcid manages all devices, hidd provides support for input devices (keyboard, mouse), dund supports dialup networking over bluetooth, pand allows connections to ethernet networks over bluetooth.
btseed, bttrack
These services support the automatic seeding and tracking for torrents used by the peer-to-peer networking system BitTorrent. These should be disabled unless you specifically wish to seed or track torrents. By seeding you are essentially sharing the contents of the torrent with others and by tracking you are coordinate the action of other BitTorrent clients. More information from a BitTorrent FAQ. Keep in mind these require network bandwidth and other configuration as well.
capi
For users with ISDN hardware only. Should be disabled for most users.
cpuspeed
This throttles your CPU runtime frequency to save power. Many modern laptop CPU’s support this feature and now many desktops also support this. Most people should enable only if they are users of Pentium-M, Centrino, AMD PowerNow, Transmetta, Intel SpeedStep, Athlon-64, Athlon-X2, Intel Core 2 hardware. Disable this if you want your CPU to remain at a fixed state.
cron
See anacron.
cupsd
Used for printing. These should be enabled only if you have CUPS compatible printer that works in Fedora.
dund
See bluetooth.
firstboot
This service is specific to Fedora’s installation process meant to perform certain tasks that should only be executed once upon booting after installation. Even though it verifies it has been run before (using /etc/sysconfig/firstboot), it can be disabled.
gpm
This is the console mouse pointer (no graphics). If you do not use the text console (CTRL-ALT-F1,F2..) then disable this. However it is good practice to leave this enabled for runlevel 3 (console) and disabled for runlevel 5 (x-server).
haldaemon
HAL refers to the Hardware Abstraction Layer. This is a critical service for collecting and maintaing information about hardware from several sources. Fedora requires this, hence leave this enabled. Read for an overview of HAL.
hplip, hpiod, hpssd
HPLIP is a service to support HP printers in Linux, including Inkjet, DeskJet, OfficeJet, Photosmart, Business Inkjet and some LaserJet printers. This supported by HP through HP Linux Printing Project. HPLIP should be enabled only if you have a supported compatible printer.
httpd
This is the Apache HTTP Web Server. If you installed this and are doing web development then leave this enabled. However most desktop users and/or non-developers should leave this disabled.
iptables
This is the standard Linux software firewall. This is highly recommended if you are directly connected to internet (cable, DSL, T1). It is not required if you use a hardware firewall (D-Link, Netgear, Linksys, etc) but it is still recommended.
ip6tables
This services is the firewall for IPv6 communication. If you are not using IPv6 (most users), then you can disable this.
irda, irattach
IrDA support infrared communications between devices (laptops, PDA’s, mobile phones, calculators, etc). This should be disabled for most users.
irqbalance
This service is to increase performance across processors on a multiprocessor system. For users who do not have multiple processors/multiple cores this should be disabled. However newer computers with multi-core CPU’s (Intel Core 2 Duo, AMD X2) should enable this. Leaving this enabled will not effect performance on single CPU/single core systems.
isdn
This is another form of internet connect service/hardware. Unless you have an ISDN modem, disable this.
kudzu
Kudzu is Fedora’s hardware probing service. It optionally configures changed hardware. If you swap hardware or need to detect/re-detect hardware this can be left enabled. However most desktop or servers can disable this and run it only when necessary.
lirc
LIRC provides support for infrared remote controls in Linux. If you do not have this hardware, leave this disabled. However this is required for infrared control in applications such as Myth TV.
lisa
LISa is LAN information service and provides similar functionality to the “network neighbourhood” concept in Windows. While this is only useful for computers on a network, users of Samba or NFS may not require this. Most users should leave this disabled.
lm_sensors
lm_sensors provides monitoring for motherboard sensor values or specific hardware (commonly used with laptops or high-end servers). It is useful for watching realtime values for PC health, etc. This is also popular with GKrellM users. It is recommended to disable this unless you have a need.
mcstrans
This is required to see proper context information when you are using SELinux. By default, Fedora has SELinux enabled. Users who do not use SELinux can disable this.
mdmonitor
Is useful for monitoring Software RAID or LVM information. It is not a critical service and may be disabled.
messagebus
This is an IPC (Interprocess Communication) service for Linux. Specifically this communicates with D-BUS, a critical component. It is highly recommended to leave this enabled.
nasd
The Network Audio System is a network transparent, client/server audio transport system. It can be described as the audio equivalent of an X server. This is connected into the KDE sound system. This should be left enabled.
netconsole
Initializes network console logging. This can be left to its default disabled state.
netfs
This is used for automatic mounting of any shared network file space such as NFS, Samba, etc on bootup. Useful if you connect to another server or filesharing on your local network. Most single desktop/laptop users should have this disabled.
netplugd
Netplugd can monitor network interfaces and executes commands when their state changes. This can be left to default disabled.
nfs, nfslock
This the standard network file sharing for Unix/Linux/BSD style operating systems. Unless you require to share data in this manner, disable this.
nmbd
This is used by Samba. Please see Samba.
nscd
This daemon handles passwords and caches them for naming/authentication services like NIS, NIS+, LDAP, or hesiod. This should be disabled.
ntpd
This automatically updates the system time from the internet. Mentioned in the installation process. If you have an active (“always-on”) internet connection it is recommended you enable this, but it is not required.
pand
See bluetooth.
pcscd
Provides support for Smart Cards and Smart Card Readers. This are small chip like devices that are embedded in certain credit cards, identification cards, etc. Unless you have such a reader, this should be disabled.
restorecond
Is used to monitor and restore proper file contexts for SELinux. This is nNOT required but highly recommended if you use SELinux.
rpcbind
This manages remote procedure call support for other services (such as NFS or NIS). This is similar to ‘portmap’. This can be disabled if you have no other services depend on it.
rpcgssd, rpcidmapd, rpcsvcgssd
Used for NFS v4. Unless you require or use NFS v4, these should be disabled.
sendmail
Unless you run a server or you like to transfer or support a locally shared IMAP or POP3 service, most people do NOT need a mail transport agent. If you check your mail on the web (hotmail/yahoo/gmail) or you use a mail program such as Thunderbird, Kmail, Evolution, etc. then you should disable this.
setroubleshoot
This is the SELinux Troubleshooting Daemon. This services provides information to the setroubleshoot Browser. This application provides notices on the desktop if there were SELinux problems (usually AVC denials. While this is not a critical service it is incredibly helpful for debuggin SELinux issues. Leave this enabled only if you have SELinux enabled.
smartd
The SMART Disk Monitoring Daemon can be used to monitor and predict disk failure or problems on hard disk that support this. Most desktop users may not need this unless there is possible problems, but is it recommend to be left enabled (especially for servers).
smb
The SAMBA daemon is required to share files from Linux to Windows. This should be enabled only if you have windows computers that require file access to Linux. There is information on configuring Samba for Fedora 7.
smolt
This daemon provides monthly information for Smolt which is gather statistics and information to assist Fedora developers. Statistics are available. Users who wish to help and share information should enable this, otherwise leave this disabled.
sshd
SSH allows other users to log into or run applications on your computer from another computer on your network or remotely. This is a potential security issue. This is not needed if you have no other computers or no need to login from a remote location (work, school, etc.). Most likely this should be disabled.
udev-post
The device management system Fedora uses is ‘udev’. By default ‘udev’ supports many rules, permissions and behaviours for devices. This service allows for saving user applied rules. It is highly recommended to leave enabled.
wpa_supplicant
This service is required if you use a wireless card that requires WPA based encryption to connect to an Access Point, VPN or Radius Server. Most other users can leave this disabled.
yum-updatesd
The YUM Update notifier daemon provides notification of updates which are available to be installed to your computer. If you do NOT have an active (“always-on”) internet connection leave this disabled. Some updates are for security and many are for bug fixes and or newer software versions. Please understand that continuous updating with yum may lead to many problems.
