Installation Options

When it comes to installing Solaris on your host, you have three options for the installation. You can use either of two network installation tools, WebStart and Jumpstart, or you can install the media directly from the Compact Disc issued by Sun. OIT strongly recommends using the network installation tools because we have done a number of things to help make the network installed OS more secure and more stable. A more complete description of the advantages of the network installation options is included at the end of this document.

The Network Installation Tools

WebStart
WebStart is Sun's newest installation tool. As the name suggests, it uses a Java-Enabled web browser to drive the installation process. While the currently available version has several limitations, it seems clear that this is the direction that Sun intends to head for providing a configurable installation base.

As of the current version, you can use WebStart to install hosts with very little required interaction with OIT. The process, however, is interactive and you must be present during the initial installation phase to answer the various questions asked by the program. OIT has configured WebStart to perform the same set of post-install customizations as can be achieved with Custom Jumpstart, making this method the ideal choice for administrators that wish to work independently of OIT yet take advantage of some of the services we provide.

In choosing this method of installation, you should be aware that WebStart has a few additional requirements of the client. First, you must have access to an X display. This can be either through a graphics terminal directly attached to the install client or from a remote terminal. In either case, the install client must have some sort of console, either via a graphics card or via the serial port.

In addition, the client must have at least one 1.5GB or larger disk and at least 96MB of memory. 128MB of memory is highly recommended by Sun for using WebStart.

Custom Jumpstart
Custom Jumpstart, frequently shortened to just Jumpstart within OIT, is Sun's older, slightly more mature, installation tool. It uses plain text configuration files to control the installation path of a client. OIT has been using this method to install clients since Solaris 2.4, completely remodeled their configuration system with Solaris 2.6, and made continuous improvements since then. Much of the configuration available via Custom Jumpstart is available with WebStart, except that Jumpstart allows for non-interactive installation of multiple identical hosts.

Media Based Installation

Using the CD-ROM
Many campus administrators have chosen to install directly from the media for any number of reasons. You should be aware that Solaris 2.9, as installed from the CD, potentially has multiple security problems and will not have any patches for security or stability. You are advised to obtain all Security and Recommended patches from the Office of Information Technology or Sun Microsystems and install them. You should also replace sendmail with the Berkeley distribution sendmail, which is available from OIT in binary form or from the sendmail.org site as source code. You may also wish to obtain a copy of the security script used in jumpstart to see what other modifications we are making to our installs.

You should also be aware that the University has imposed several requirements on all systems connected to the network. The full details of the requirements are available in the Boston University Information Security Policy and Guidelines, June 1997 booklet. Solaris 2.9 does not, by default, meet these requirements.

If you choose to install your host directly from the CD-ROM media distributed by Sun you will not be able to use OIT's configuration tools. Your host must also either have a CD-ROM drive or you must borrow one from the Office of Information Technology. Media is loaned out for one week and then must be returned for others to use. You should call in advance and ask to speak to someone with access to the UNIX Media Library to ensure we can service your needs before coming in.

Advantages to using a network installation tool

• The BU Clusters are available, allowing you to install a smaller, more secure, and easier to maintain version of Solaris that is appropriate for most BU systems.
  
  
• Jumpstart/WebStart automatically applies patches
  • This guarantees you'll have the latest OS as recommended by Sun Microsystems. Your machine will run better and be more secure.
    
    
• Installs some useful default applications
  • The jumpstart installation we provide will install a handful of very useful packages including ssh, useradm, sudo, a secure version of sendmail, and tcp_wrappers.
    
    
• Installs a basic security modules
  • Installs the latest security fixes available from a variety of sources, such as CERT, AUSCERT, and a variety of mailing lists.
  • The jumpstart mechanism will check and correct common configuration errors on your system.
  • This module will also install COPS and Baseline, two security checkers useful for maintaining the security of your host.
    
    
• In addition, we have added hooks that allow you, the systems administrator, to perform various customizations to the system during the install process. While this is not required, we feel that this will help you to adapt our area to service your needs. Since your customization scripts run near the end of the installation process, you will get the final say on many areas of the customization process.