Date: Thu, 12 Apr 2007 14:03:41 +0200 From: Ed Schouten <ed@fxq.nl> To: ticso@cicely.de Cc: current@FreeBSD.org Subject: Re: ZFS to support chflags? Message-ID: <20070412120341.GE45949@hoeg.nl> In-Reply-To: <20070412112045.GR30772@cicely12.cicely.de> References: <200704112004.03903.lists@jnielsen.net> <20070412021645.GQ30772@cicely12.cicely.de> <20070412114135.C64803@fledge.watson.org> <20070412112045.GR30772@cicely12.cicely.de>
next in thread | previous in thread | raw e-mail | index | archive | help
--a+b56+3nqLzpiR9O Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable * Bernd Walter <ticso@cicely12.cicely.de> wrote: > E.g. hardlink system binaries over multiple jails flaged immuteable. > No jail can compromise the data in other jails, while still allowing > the kernel to share memory pages for it. There are nicer ways to do that as far as I know. Just read-only nullmount some kind of base install to another directory. Union mount another directory on top that holds jail specific data. That way you have a `copy-on-write' FreeBSD install. Make sure you mount everything with noatime. --=20 Ed Schouten <ed@fxq.nl> WWW: http://g-rave.nl/ --a+b56+3nqLzpiR9O Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (FreeBSD) iD8DBQFGHiAd52SDGA2eCwURAteIAJ468p56W9BEb+c2Ks++dQf4SAC5xACbBE14 x/ZLQFiC43rGvRdE2Succ0c= =9gP/ -----END PGP SIGNATURE----- --a+b56+3nqLzpiR9O--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20070412120341.GE45949>