Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 25 Jun 2008 17:34:01 +0200
From:      Alexander Leidinger <Alexander@Leidinger.net>
To:        Boris Samorodov <bsam@ipt.ru>
Cc:        freebsd-jail@FreeBSD.org
Subject:   Re: is nfs mount inside jail possible?
Message-ID:  <20080625173401.116369ceeiewif40@webmail.leidinger.net>
In-Reply-To: <62852722@bb.ipt.ru>
References:  <62852722@bb.ipt.ru>

next in thread | previous in thread | raw e-mail | index | archive | help
Quoting Boris Samorodov <bsam@ipt.ru> (from Wed, 25 Jun 2008 17:53:49 +0400)=
:

> # lsvfs
> Filesystem                        Refs Flags
> -------------------------------- ----- ---------------
> nfs4                                 0 network
> zfs                                  6 jail
> ntfs                                 0
> ufs                                  4
> nfs                                  0 network
> msdosfs                              0
> procfs                               4 synthetic
> cd9660                               0 read-only
> devfs                                5 synthetic
> nullfs                               7 loopback
> fdescfs                              4 synthetic
> -----
>
> ... nfs seems not to be jail friendly. Here is the question at
> subject. Thanks!

Correct. If you are not afraid to patch the system: zfs has the JAIL =20
flag set, you just need to do the same with nfs.

To do this edit src/sys/nfsclient/nfs_vfsopts.c, search VFS_SET and =20
change it to
VFS_SET(nfs_vfsops, nfs, VFCF_NETWORK|VFCF_JAIL);

I suggest to not do this with tmpfs if you do shared hosting (you =20
don't want that strangers eat up all your physical RAM).

Bye,
Alexander.

--=20
Peers's Law:
The solution to a problem changes the nature of the problem.

http://www.Leidinger.net    Alexander @ Leidinger.net: PGP ID =3D B0063FE7
http://www.FreeBSD.org       netchild @ FreeBSD.org  : PGP ID =3D 72077137



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20080625173401.116369ceeiewif40>