How to Install Virtualmin on FreeBSD 14.0

Introduction

Virtualmin is an open-source web hosting control panel for managing virtual hosts, domains, email accounts, databases, and applications using a web-based graphical user interface (GUI). Virtualmin supports multiple database types, such as MySQL, PostgreSQL, and MariaDB.

This article explains how to install Virtualmin on FreeBSD 14.0 and enable access to the graphical web administration interface.

Prerequisites

Before you begin:

• Deploy a FreeBSD 14.0 instance on Vultr.
• Create a new domain A record pointing to the instance's public IP address such as virtualmin.example.com.
• Access the instance using SSH as a non-root user with sudo privileges.
• Update the instance.

Install Virtualmin

Virtualmin does not support automatic installation scripts on FreeBSD 14.0, but supports manual installations and configuration of all dependency packages. Follow the steps below to install Virtualmin using the latest FreeBSD Ports package and configure the Webmin package to run the application on your server.

1. Update the package information index.

   CONSOLE

   Copy

   $ sudo pkg update

   Explain Code

   Powered by Vultr AgentBeta

2. Install Virtualmin.

   CONSOLE

   Copy

   $ sudo pkg install -y sysutils/virtualmin

   Explain Code

   Powered by Vultr AgentBeta

   Output:

   Message from virtualmin-7.2,1:
   
   --
   You will have to manually grant user permissions to access this
   module from Webmin.

3. Configure the Webmin directories, paths, ports, administrator, and the SSL certificate.

   CONSOLE

   Copy

   $ sudo sh /usr/local/lib/webmin/setup.sh

   Explain Code

   Powered by Vultr AgentBeta

   Output:

   ***********************************************************************
           Welcome to the Webmin setup script, version 2.013
   ***********************************************************************
   Webmin is a web-based interface that allows Unix-like operating
   systems and common Unix services to be easily administered.
   
   Installing Webmin in /usr/local/lib/webmin

4. Press Enter to configure /usr/local/webmin as the default data directory.

   Config file directory [/usr/local/etc/webmin]:

5. Press Enter to configure /var/db/webmin as the default Webmin logs directory.

   Log file directory [/var/db/webmin]:

6. Press Enter to configure /usr/local/bin/perl as the default Perl path.

   Full path to perl (default /usr/local/bin/perl):

7. Press Enter to accept and use the default Webmin port 10000.

   ***********************************************************************
   Operating system name:    FreeBSD
   Operating system version: 14.1
   
   ***********************************************************************
   Webmin uses its own password protected web server to provide access
   to the administration programs. The setup script needs to know :
    - What port to run the web server on. There must not be another
      web server already using this port.
    - The login name required to access the web server.
    - The password required to access the web server.
    - If the web server should use SSL (if your system supports it).
    - Whether to start webmin at boot time.
   
   Web server port (default 10000):

8. Press Enter to use admin as the default Webmin administrator username or enter your preferred username.

   Login name (default admin): 

9. Assign and confirm a new login password for the admin user.

   Login password: 
   Password again: 

10. Enter y and press Enter to enable SSL on the Webmin web interface.

    Use SSL (y/n): 

    Wait for the Webmin configuration process to complete.

    Creating web server config files ..
    .. done
    
    Creating access control file ..
    .. done
    
    Creating start and stop init scripts ..
    .. done
    
    Creating start and stop init symlinks to scripts ..
    .. done
    
    Copying config files ..
    .. done
    
    Changing ownership and permissions ..
    .. done
    
    Running postinstall scripts ..
    PID file /var/db/webmin/miniserv.pid does not exist
    .. done
    
    Enabling background status collection ..
    .. done

11. Enable Webmin to start at system boot.

    CONSOLE

    Copy

    $ sudo service webmin enable

    Explain Code

    Powered by Vultr AgentBeta

    Output:

    webmin enabled in /etc/rc.conf

12. Start the Webmin service.

    CONSOLE

    Copy

    $ sudo service webmin start

    Explain Code

    Powered by Vultr AgentBeta

    Output:

    Starting webmin.
    Starting Webmin server in /usr/local/lib/webmin

Secure Virtualmin

Virtualmin listens for connection requests on port 10000 using self-signed SSL certificates depending on your Webmin configuration. Webmin uses the miniserv.pem certificate file in the /usr/local/lib/webmin by default. Follow the steps below to secure Virtualmin with trusted SSL certificates and set up new firewall rules to allow connections to Virtualmin web administration interface.

1. Search the available certbot version in the default pkg repository sources.

   CONSOLE

   Copy

   $ sudo pkg search certbot

   Explain Code

   Powered by Vultr AgentBeta

   Output:

   py311-certbot-2.11.0,1         Let's Encrypt client
   py311-certbot-apache-2.11.0    Apache plugin for Certbot
   py311-certbot-nginx-2.11.0     NGINX plugin for Certbot

   py311-certbot is the latest Certbot package available for installation based on the above output.

2. Install the Certbot Let's Encrypt client tool.

   CONSOLE

   Copy

   $ sudo pkg install -y py311-certbot

   Explain Code

   Powered by Vultr AgentBeta

3. Generate a new Let's Encrypt SSL certificate to use with Virtualmin. Replace virtualmin.example.com with your actual domain and hello@example.com with your email address.

   CONSOLE

   Copy

   $ sudo certbot --standalone certonly -d virtualmin.example.com -m hello@example.com --agree-tos

   Explain Code

   Powered by Vultr AgentBeta

   Your output should be similar to the one below when successful.

   Successfully received certificate.
   Certificate is saved at: /usr/local/etc/letsencrypt/live/virtualmin.example.com/fullchain.pem
   Key is saved at:         /usr/local/etc/letsencrypt/live/virtualmin.example.com/privkey.pem
   This certificate expires on 2024-12-10.
   These files will be updated when the certificate renews.
   
   NEXT STEPS:
   - The certificate will need to be renewed before it expires. Certbot can automatically renew the certificate in the background, but you may need to take steps to enable that functionality. See https://certbot.org/renewal-setup for instructions.
   We were unable to subscribe you the EFF mailing list because your e-mail address appears to be invalid. You can try again later by visiting https://act.eff.org.

4. Merge the new Let's Encrypt SSL certificate and private key into a single file such as webmin_cert.pem.

   CONSOLE

   Copy

   $ sudo  cat /usr/local/etc/letsencrypt/live/virtualmin.example.com/fullchain.pem /usr/local/etc/letsencrypt/live/virtualmin.example.com/privkey.pem > webmin_cert.pem

   Explain Code

   Powered by Vultr AgentBeta

5. Move the webmin_cert.pem file to the /usr/local/lib/webmin directory.

   CONSOLE

   Copy

   $ sudo mv webmin_cert.pem /usr/local/lib/webmin

   Explain Code

   Powered by Vultr AgentBeta

6. Open the main Webmin configuration file /usr/local/lib/webmin/miniserv.conf using a text editor such as vi.

   CONSOLE

   Copy

   $ sudo vi /usr/local/lib/webmin/miniserv.conf

   Explain Code

   Powered by Vultr AgentBeta

7. Find the following keyfile directive.

   INI

   Copy

   keyfile=/usr/local/etc/webmin/miniserv.pem

   Explain Code

   Powered by Vultr AgentBeta

8. Change the value to your webmin_cert.pem path.

   INI

   Copy

   keyfile=/usr/local/etc/webmin/webmin_cert.pem

   Explain Code

   Powered by Vultr AgentBeta

   Save and close the file.

9. Enable the ipfw firewall service to automatically start at system boot.

   CONSOLE

   Copy

   $ sudo sysrc firewall_enable="YES"

   Explain Code

   Powered by Vultr AgentBeta

   Output:

   firewall_enable: NO -> YES

10. Enable quiet mode to disable firewall messages in your standard output (STDOUT).

    CONSOLE

    Copy

    $ sudo sysrc firewall_quiet="YES"

    Explain Code

    Powered by Vultr AgentBeta

    Output:

    firewall_quiet: NO -> YES

11. Change the firewall operation type to workstation.

    CONSOLE

    Copy

    $ sudo sysrc firewall_type="workstation"

    Explain Code

    Powered by Vultr AgentBeta

    Output:

    firewall_type: UNKNOWN -> workstation

12. Allow SSH, HTTPS, and Virtualmin port 10000 connections through the firewall.

    CONSOLE

    Copy

    $ sudo sysrc firewall_myservices="ssh/tcp http/tcp https/tcp 10000/tcp"

    Explain Code

    Powered by Vultr AgentBeta

    Output:

    firewall_myservices: ssh/tcp http/tcp https/tcp -> ssh/tcp http/tcp https/tcp 10000/tcp

13. Enable network connections from any host to your server.

    CONSOLE

    Copy

    $ sudo sysrc firewall_allowservices="any"

    Explain Code

    Powered by Vultr AgentBeta

    Output:

    firewall_allowservices:  -> any

14. Log all blocked network connections to /var/log/security.

    CONSOLE

    Copy

    $ sudo sysrc firewall_logdeny="YES"

    Explain Code

    Powered by Vultr AgentBeta

    Output:

    firewall_logdeny: NO -> YES

15. View all active firewall configurations.

    CONSOLE

    Copy

    $ sudo cat /etc/rc.conf | grep firewall

    Explain Code

    Powered by Vultr AgentBeta

    Output:

    firewall_enable="YES"
    firewall_quiet="YES"
    firewall_type="workstation"
    firewall_myservices="ssh/tcp http/tcp https/tcp 10000/tcp"
    firewall_allowservices="any"
    firewall_logdeny="YES"

16. Start the firewall service.

    CONSOLE

    Copy

    $ sudo service ipfw start

    Explain Code

    Powered by Vultr AgentBeta

    Output:

    Firewall rules loaded.

17. Restart the Webmin service to apply changes.

    CONSOLE

    Copy

    $ sudo service webmin restart

    Explain Code

    Powered by Vultr AgentBeta

    If you receive the following error:

    webmin not running? (check /var/log/webmin/miniserv.pid).
    Starting webmin.
    Starting Webmin server in /usr/local/lib/webmin
    Webmin is already running with PID 981
    /usr/local/etc/rc.d/webmin: WARNING: failed to start webmin

    • Stop the Webmin process.

      CONSOLE

      Copy

      $ sudo kill 981

      Explain Code

      Powered by Vultr AgentBeta

    • Restart Webmin again to apply your configuration changes.

      CONSOLE

      Copy

      $ sudo service webmin restart

      Explain Code

      Powered by Vultr AgentBeta

Access Virtualmin

Virtualmin listens for connection requests on the default port 10000. Follow the steps below to access the Virtualmin web administration interface.

1. Access your domain on port 10000 to open the Virtualmin control panel.

   https://virtualmin.example.com:10000

   Enter the Webmin administrator username and password you created earlier when prompted to log in.

   

2. Click Next within the Post-Installation Wizard to set up any additional configurations.

   

3. Find and click Dashboard on the left navigation menu to access the system performance page.

   

Conclusion

You have installed Virtualmin on FreeBSD 14.0 and enabled access to the web administration control panel to manage the server. Virtualmin supports multiple configuration options you can apply and run applications using virtual server profiles. For more information, visit the Virtualmin documentation.