---
name: freebsd-admin
description: Make host-level FreeBSD system changes for Clawdie. Use when changing rc.conf, sysctl state, service lifecycle, host routing, gateway_enable, bridge persistence, or other machine-wide settings that should stay outside the jail and VM-specific skills.
---

# FreeBSD Admin

Use this skill for host-level administrative changes on the FreeBSD machine.

This skill is intentionally separate from jail and VM skills. It owns system
state, not workload-specific provisioning.

## Scope

This skill covers:

- `sysrc`
- `service`
- `sysctl`
- `gateway_enable`
- host routing and forwarding state
- persistent host resolver and network base state needed by Bastille jails
- reboot-safe host persistence checks

This skill does not replace:

- `bastille-network` for the Warden bridge model
- `warden-pf` for firewall and NAT rules
- `warden-bootstrap` for control-plane jail creation
- `browser-vm` for Linux VM design

## Workflow

1. Read `references/system-changes.md`
2. Read `references/network-forwarding.md`
3. If the host uses Tailscale or specialized DNS, read `references/resolver-baseline.md`
4. If needed, read `references/validation.md`
4. Prefer the scripts in `scripts/` for canonical host-side command bundles

## Safe defaults

- keep host state changes explicit and reversible
- use `sysrc` for persistent changes
- use `sysctl` for immediate runtime changes
- validate after every host change before blaming Bastille or the jail
