From owner-freebsd-questions@FreeBSD.ORG Sun Aug 12 12:53:41 2012 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id CB6911065675 for ; Sun, 12 Aug 2012 12:53:41 +0000 (UTC) (envelope-from blackfriar@inhio.eu) Received: from cz-prg-mx-01.inhio.eu (mail.inhio.eu [178.238.36.226]) by mx1.freebsd.org (Postfix) with ESMTP id 7E1898FC0A for ; Sun, 12 Aug 2012 12:53:40 +0000 (UTC) Received: from [10.0.0.59] (blackfriar.inhio.eu [10.0.0.59]) by cz-prg-mx-01.inhio.eu (Postfix) with ESMTPSA id C66C61075F8; Sun, 12 Aug 2012 14:53:32 +0200 (CEST) From: blackfriar To: Fbsd8 In-Reply-To: <5027A459.8060809@a1poweruser.com> References: <1344347348.23440.5.camel@blackfriar.inhio.eu> <5022715C.9010301@a1poweruser.com> <50250034.8010004@a1poweruser.com> <20120810135446.GA48662@ei.bzerk.org> <50251DE5.3010106@a1poweruser.com> <50266F8F.4010504@a1poweruser.com> <5027A459.8060809@a1poweruser.com> Content-Type: multipart/signed; micalg="pgp-sha512"; protocol="application/pgp-signature"; boundary="=-MVyGIia1jFbbXGyDa0/T" Date: Sun, 12 Aug 2012 14:53:32 +0200 Message-ID: <1344776012.1963.19.camel@blackfriar.inhio.eu> Mime-Version: 1.0 X-Mailer: Evolution 2.32.1 FreeBSD GNOME Team Port Cc: wojtek@wojtek.tensor.gdynia.pl, mail25@bzerk.org, freebsd-questions@freebsd.org Subject: Re: NFS within a Jail?! X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 12 Aug 2012 12:53:42 -0000 --=-MVyGIia1jFbbXGyDa0/T Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Well, yes. That was my immediate decision. Just to find an alternative/temporary way and to wait for something more reliable and standard. I don't really have the critical need to proceed with such a setup right now and it's good to know a little bit more about the status of such a feature and what others think and tried/managed to do about it. I really wanna thank you all for your valuable inputs. Have a good rest of the weekend. On Sun, 2012-08-12 at 08:40 -0400, Fbsd8 wrote: > http://forums.freebsd.org/showthread.php?t=3D29968&highlight=3Dnfsd >=20 > Found this which I think says it all at the conclusion. >=20 > March 30th, 2012 > Received some information from the FreeBSD mailing list and apparently= =20 > exporting NFS from an jailed environment is not possible. For those who= =20 > have "managed" (by heavy tweaking of sysctl.conf) to export the NFS=20 > probably have these concerns: 1) Security may have been compromised on= =20 > their own jails as a result of tweaks and 2) Even if you manage to=20 > export the NFS share under such strained boundary conditions, it may=20 > cause problems in some of the application's you would like to use (eg:= =20 > tinderbox) finally, 3) If you try to use net/unfs3 and succeed to export= =20 > NFS, this will not have a very fast (ro) transport rate and will have=20 > many (rw) speed limitations. >=20 >=20 > My personal conclusion is to wait until the default kernel version of=20 > nfs is updated to be jail-friendly before I try using nfs in jails. --=-MVyGIia1jFbbXGyDa0/T Content-Type: application/pgp-signature; name="signature.asc" Content-Description: This is a digitally signed message part -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.19 (FreeBSD) iQIcBAABCgAGBQJQJ6dLAAoJEHh31FxK1ARqnIgP/20HumHWED+d4ZuDt+IktLyw aKjbH6C4SW/HZa0PV8xIghMffjPznBu8WAlrAaL14C27f360Q+szYdBA6lLeUipB DVpyamMgDeU1b41mnisP+jP/BUt+b41bEajJsPMJAnrSfE0nU75xXg/m9TvtngFS FJiS7t6AgsMq8/GxjRuGj/51LANJQ6BBxrJVZMh0iLvYuIxVtjDzQQglQWA3DaGF Q/VFKHffhGhivrPcpJSGwl6domjQ5z7hhBGYb/JxnoUSzId6YbihwQzSZecDbL4m Zf2xaUuoDXBLRj+l8xfrxCsSfV1inAd+lxZDIcJyLKnb1BdY3cp6CHlxnVM+9hcr PYOuhUj3+vcCMswGAleamKgf34GtSU5fKLQCs3I5t+EJJ75f8DClQRrbUMdylLma 5QmqX6Gb7C/EktqSjlJ5B2RT3d3aVFAOXOkjqqh1gpWoTHpcyE8NKx5R2YWKrHw8 UOj0GNOpQjaeoOI2r8oExKFtkYx3h4/1rsCtIh8d3aPstwyE+Ma7Pf1XWCJHaPDV olzCN9S/DJ9rBsnSotGBdZmmiYda4D0ZypYXN3yBfmaGL0lL7OjQUH022bnr7Aif ARqsvxzdhxnhDcEBcaLzy7QEuaKyja4/CCUYmSAw8+B4M+yCkvZ9XkCCkmg82nXn kt9yBLeUy3rQSKoHSB9B =pHwp -----END PGP SIGNATURE----- --=-MVyGIia1jFbbXGyDa0/T--