From owner-freebsd-jail@FreeBSD.ORG Mon Oct 7 11:06:47 2013 Return-Path: Delivered-To: freebsd-jail@FreeBSD.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTP id BCEC385B for ; Mon, 7 Oct 2013 11:06:47 +0000 (UTC) (envelope-from owner-bugmaster@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:1900:2254:206c::16:87]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id AA745283A for ; Mon, 7 Oct 2013 11:06:47 +0000 (UTC) Received: from freefall.freebsd.org (localhost [127.0.0.1]) by freefall.freebsd.org (8.14.7/8.14.7) with ESMTP id r97B6le9077755 for ; Mon, 7 Oct 2013 11:06:47 GMT (envelope-from owner-bugmaster@FreeBSD.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.14.7/8.14.7/Submit) id r97B6lh4077753 for freebsd-jail@FreeBSD.org; Mon, 7 Oct 2013 11:06:47 GMT (envelope-from owner-bugmaster@FreeBSD.org) Date: Mon, 7 Oct 2013 11:06:47 GMT Message-Id: <201310071106.r97B6lh4077753@freefall.freebsd.org> X-Authentication-Warning: freefall.freebsd.org: gnats set sender to owner-bugmaster@FreeBSD.org using -f From: FreeBSD bugmaster To: freebsd-jail@FreeBSD.org Subject: Current problem reports assigned to freebsd-jail@FreeBSD.org X-BeenThere: freebsd-jail@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "Discussion about FreeBSD jail\(8\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 07 Oct 2013 11:06:47 -0000 Note: to view an individual PR, use: http://www.freebsd.org/cgi/query-pr.cgi?pr=(number). The following is a listing of current problems submitted by FreeBSD users. These represent problem reports covering all versions including experimental development code and obsolete releases. S Tracker Resp. Description -------------------------------------------------------------------------------- o conf/181650 jail [jail] [patch] /etc/rc.d/jail fails if a kernel built o kern/180916 jail [jail] [regression] jail startup is broken for 8.4 wit o kern/180067 jail [jail] [patch] fix multicast support within jails o bin/178302 jail jail(8): unknown parameter: ip6.addr when kernel compi o kern/176112 jail [jail] [panic] kernel panic when starting jails o kern/174902 jail [jail] jail should provide validator for jail names o bin/173469 jail [jail] regression: security.jail.sysvipc_allowed=1 no o kern/169751 jail [jail] reading routing information does not work in ja o bin/167911 jail new jail(8) problem with removal, ifconfg -alias and k o kern/159918 jail [jail] inter-jail communication failure o kern/156111 jail [jail] procstat -b not supported in jail o misc/155765 jail [patch] `buildworld' does not honors WITHOUT_JAIL o conf/154246 jail [jail] [patch] Bad symlink created if devfs mount poin s conf/142972 jail [jail] [patch] Support JAILv2 and vnet in rc.d/jail o conf/141317 jail [patch] uncorrect jail stop in /etc/rc.d/jail o kern/133265 jail [jail] is there a solution how to run nfs client in ja o kern/119842 jail [smbfs] [jail] "Bad address" with smbfs inside a jail o bin/99566 jail [jail] [patch] fstat(1) according to specified jid 18 problems total. From owner-freebsd-jail@FreeBSD.ORG Tue Oct 8 08:11:00 2013 Return-Path: Delivered-To: freebsd-jail@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTP id AB670D73 for ; Tue, 8 Oct 2013 08:11:00 +0000 (UTC) (envelope-from thomas@gibfest.dk) Received: from mail.tyknet.dk (mail.tyknet.dk [176.9.9.186]) (using TLSv1 with cipher ADH-CAMELLIA256-SHA (256/256 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id 67B5F2D1D for ; Tue, 8 Oct 2013 08:11:00 +0000 (UTC) Received: from [10.10.1.214] (217.71.4.82.static.router4.bolignet.dk [217.71.4.82]) (using TLSv1 with cipher DHE-RSA-CAMELLIA256-SHA (256/256 bits)) (No client certificate requested) by mail.tyknet.dk (Postfix) with ESMTPSA id E432418776B; Tue, 8 Oct 2013 10:01:16 +0200 (CEST) DKIM-Filter: OpenDKIM Filter v2.8.3 mail.tyknet.dk E432418776B DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=gibfest.dk; s=default; t=1381219277; bh=q+dS0TE5y4F4CJIq6rlhyarYUQX+EPBtCTMXrw+c4ss=; h=Date:From:To:CC:Subject:References:In-Reply-To; b=Ayu7vJlUIrwpoxwVzwkvJqPvyMPGYbpK+3KmQOjDawwYfjDMCluIUDhl7XkQAQfSi W3MSgWSzfbQNE64d3GkEPe3evf+Kbp6T9PkVg2bz2aVnxoPGy20w7q6i+CVQfmnppj 0Zr/lojECAKH5z6dDZqACcowaVbjKjNAU7kNfVXc= Message-ID: <5253BBC5.6090100@gibfest.dk> Date: Tue, 08 Oct 2013 10:01:09 +0200 From: Thomas Steen Rasmussen User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:17.0) Gecko/20130801 Thunderbird/17.0.8 MIME-Version: 1.0 To: Miguel Clara Subject: Re: Panic Freebsd 9.1 using "export jail_plex_geek_lan_zfs_datasets" References: In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: freebsd-jail@freebsd.org X-BeenThere: freebsd-jail@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "Discussion about FreeBSD jail\(8\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 08 Oct 2013 08:11:00 -0000 On 30-09-2013 05:29, Miguel Clara wrote: > I'm trying to get a zfs dataset visible inside a jail > > But when I used the flag: > > export jail_plex_geek_lan_zfs_datasets="tank/Downloads" > > And restart the jail the server rebooted, in the next boot I can see then > panic: Hello, This sounds like it might be related to this: http://lists.freebsd.org/pipermail/freebsd-fs/2013-June/017504.html Thread continued here: http://lists.freebsd.org/pipermail/freebsd-fs/2013-July/017826.html It was solved here: http://svnweb.freebsd.org/base?view=revision&revision=252524 Best regards Thomas Steen Rasmussen From owner-freebsd-jail@FreeBSD.ORG Tue Oct 8 11:24:37 2013 Return-Path: Delivered-To: freebsd-jail@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTP id 05205433 for ; Tue, 8 Oct 2013 11:24:37 +0000 (UTC) (envelope-from feld@FreeBSD.org) Received: from out1-smtp.messagingengine.com (out1-smtp.messagingengine.com [66.111.4.25]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id CD0412A10 for ; Tue, 8 Oct 2013 11:24:36 +0000 (UTC) Received: from compute2.internal (compute2.nyi.mail.srv.osa [10.202.2.42]) by gateway1.nyi.mail.srv.osa (Postfix) with ESMTP id 89AD3210DC for ; Tue, 8 Oct 2013 07:24:33 -0400 (EDT) Received: from web3 ([10.202.2.213]) by compute2.internal (MEProxy); Tue, 08 Oct 2013 07:24:34 -0400 DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d= messagingengine.com; h=message-id:from:to:mime-version :content-transfer-encoding:content-type:in-reply-to:references :subject:date; s=smtpout; bh=Q0NvybJ68mgrAXMSVzUba82SbJg=; b=c57 JgMrkC4gLBzjAL7LHl3otAyPvjnAj62DT9XAyefu+FjNg3dV4KaXg4NGbLnMynKE VTvgWZ431m0s4ZzzN+aFip5sl5PoUofFojS7nOsVzHMSpoGfNPUp+QEoTZbzuLO0 W5OO4dy9a/a2Dp50BjMSkYj2hA47b/emQTLnMl3Y= Received: by web3.nyi.mail.srv.osa (Postfix, from userid 99) id 57F88116771; Tue, 8 Oct 2013 07:24:33 -0400 (EDT) Message-Id: <1381231473.1593.31390985.61592116@webmail.messagingengine.com> X-Sasl-Enc: qtvhKI2AsVEb4IGXg1+N1PTjc816SNggDH/94aILgfFi 1381231473 From: Mark Felder To: freebsd-jail@freebsd.org MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Type: text/plain X-Mailer: MessagingEngine.com Webmail Interface - ajax-ce174988 In-Reply-To: References: Subject: Re: Panic Freebsd 9.1 using "export jail_plex_geek_lan_zfs_datasets" Date: Tue, 08 Oct 2013 06:24:33 -0500 X-BeenThere: freebsd-jail@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "Discussion about FreeBSD jail\(8\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 08 Oct 2013 11:24:37 -0000 On Sun, Sep 29, 2013, at 22:29, Miguel Clara wrote: > > I'm also not sure whats the best way to make zfs datasets visible inside > a > jail... should simply use mount_nullfs? > I just use nullfs for my plex jail. Keeping it simple seems to work just fine. From owner-freebsd-jail@FreeBSD.ORG Tue Oct 8 13:11:00 2013 Return-Path: Delivered-To: freebsd-jail@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTP id 3B999AF8; Tue, 8 Oct 2013 13:11:00 +0000 (UTC) (envelope-from miguelmclara@gmail.com) Received: from mail-wi0-x231.google.com (mail-wi0-x231.google.com [IPv6:2a00:1450:400c:c05::231]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id A6477225F; Tue, 8 Oct 2013 13:10:59 +0000 (UTC) Received: by mail-wi0-f177.google.com with SMTP id hq15so724959wib.10 for ; Tue, 08 Oct 2013 06:10:58 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=user-agent:in-reply-to:references:mime-version:content-type :content-transfer-encoding:subject:from:date:to:message-id; bh=smPfAXZmp8ppAKpmqEUV5+SlkwEd/sBB0H/eZOIoaxI=; b=P7mYyi45kFZGvOpDTK7QNOhVZ9R8sL8bsPwIldLozOrl/apubkcMkPbRoBTgxQKgWo oKHllqRwpG1ZnYS3mzk/VTKN8G1crIdCZeB1jVXlSb34syL+DoTuQA2+uwQKeUPkNK0x xY8NZGBt71SrM0gECirSNPpfljIlPSObWFEL15o3voaiFtbFc9Jh7AGgu1qTrr8cakSs cZ9gs7+jbd5+OjyhV2kwYd4iSq0s/jI5cBF/sSOxooH1XNZNKqCBj+aVFpzUwgXasdnI Gf3JHTWSiqQ+M1iW76C4ZLfIMemSo+7SyCC5l/sqA+UDxX1d3iTXRum3SrpgjDBMERVK y2Dg== X-Received: by 10.180.93.8 with SMTP id cq8mr23290343wib.38.1381237857988; Tue, 08 Oct 2013 06:10:57 -0700 (PDT) Received: from [10.34.17.51] (18.72.103.87.rev.vodafone.pt. [87.103.72.18]) by mx.google.com with ESMTPSA id ev4sm5048009wib.7.1969.12.31.16.00.00 (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Tue, 08 Oct 2013 06:10:57 -0700 (PDT) User-Agent: K-9 Mail for Android In-Reply-To: <1381231473.1593.31390985.61592116@webmail.messagingengine.com> References: <1381231473.1593.31390985.61592116@webmail.messagingengine.com> MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Subject: Re: Panic Freebsd 9.1 using "export jail_plex_geek_lan_zfs_datasets" From: "Miguel C." Date: Tue, 08 Oct 2013 14:10:49 +0100 To: Mark Felder ,freebsd-jail@freebsd.org Message-ID: <5992a41f-56f1-4a31-a751-0bae4f6ec570@email.android.com> X-BeenThere: freebsd-jail@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "Discussion about FreeBSD jail\(8\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 08 Oct 2013 13:11:00 -0000 Yeah I'm doing the same and works fine but the panic should be investigated I guess. Mark Felder wrote: >On Sun, Sep 29, 2013, at 22:29, Miguel Clara wrote: >> >> I'm also not sure whats the best way to make zfs datasets visible >inside >> a >> jail... should simply use mount_nullfs? >> > >I just use nullfs for my plex jail. Keeping it simple seems to work >just >fine. >_______________________________________________ >freebsd-jail@freebsd.org mailing list >http://lists.freebsd.org/mailman/listinfo/freebsd-jail >To unsubscribe, send any mail to "freebsd-jail-unsubscribe@freebsd.org" -- Sent from my Android device with K-9 Mail. Please excuse my brevity. From owner-freebsd-jail@FreeBSD.ORG Tue Oct 8 13:16:09 2013 Return-Path: Delivered-To: freebsd-jail@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTP id 2FAAFD08 for ; Tue, 8 Oct 2013 13:16:09 +0000 (UTC) (envelope-from feld@FreeBSD.org) Received: from out1-smtp.messagingengine.com (out1-smtp.messagingengine.com [66.111.4.25]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id 0357F22C6 for ; Tue, 8 Oct 2013 13:16:08 +0000 (UTC) Received: from compute2.internal (compute2.nyi.mail.srv.osa [10.202.2.42]) by gateway1.nyi.mail.srv.osa (Postfix) with ESMTP id 5878620D19 for ; Tue, 8 Oct 2013 09:16:08 -0400 (EDT) Received: from web3 ([10.202.2.213]) by compute2.internal (MEProxy); Tue, 08 Oct 2013 09:16:08 -0400 DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d= messagingengine.com; h=message-id:from:to:mime-version :content-transfer-encoding:content-type:in-reply-to:references :subject:date; s=smtpout; bh=Vz+B9SFjpXeDD3e76xUwEJPYn6w=; b=Xoi 6AfuKBN2r4rWx6RFN5EgZhRITdCwN2GorExZAuWj/0AgyTfyHpH24Ea4XbKdthC1 2WtsEi2h6x5OO3Dp4qsXX38SWPrlXfIqwjvSmfhPza/+/U6UIblthHi/TxZeWyvR 7zXRy21MlyWi4SEGyEJ3v5ByzadzEA4AXVr/vz+0= Received: by web3.nyi.mail.srv.osa (Postfix, from userid 99) id 31E0E116B59; Tue, 8 Oct 2013 09:16:08 -0400 (EDT) Message-Id: <1381238168.16993.31431449.6AC961B7@webmail.messagingengine.com> X-Sasl-Enc: xrmLpjMIWx+ULCDbepmGTirbjUAqNF2/+EQEXimehgok 1381238168 From: Mark Felder To: freebsd-jail@freebsd.org MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Type: text/plain X-Mailer: MessagingEngine.com Webmail Interface - ajax-ce174988 In-Reply-To: <5992a41f-56f1-4a31-a751-0bae4f6ec570@email.android.com> References: <1381231473.1593.31390985.61592116@webmail.messagingengine.com> <5992a41f-56f1-4a31-a751-0bae4f6ec570@email.android.com> Subject: Re: Panic Freebsd 9.1 using "export jail_plex_geek_lan_zfs_datasets" Date: Tue, 08 Oct 2013 08:16:08 -0500 X-BeenThere: freebsd-jail@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "Discussion about FreeBSD jail\(8\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 08 Oct 2013 13:16:09 -0000 On Tue, Oct 8, 2013, at 8:10, Miguel C. wrote: > Yeah I'm doing the same and works fine but the panic should be > investigated I guess. > If there's not a PR open for this scenario please submit what you've found. From owner-freebsd-jail@FreeBSD.ORG Wed Oct 9 07:45:52 2013 Return-Path: Delivered-To: freebsd-jail@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTP id 2246B639; Wed, 9 Oct 2013 07:45:52 +0000 (UTC) (envelope-from thomas@gibfest.dk) Received: from mail.tyknet.dk (mail.tyknet.dk [176.9.9.186]) (using TLSv1 with cipher ADH-CAMELLIA256-SHA (256/256 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id D03ED223A; Wed, 9 Oct 2013 07:45:51 +0000 (UTC) Received: from [10.10.1.214] (217.71.4.82.static.router4.bolignet.dk [217.71.4.82]) (using TLSv1 with cipher DHE-RSA-CAMELLIA256-SHA (256/256 bits)) (No client certificate requested) by mail.tyknet.dk (Postfix) with ESMTPSA id E8E2D189E95; Wed, 9 Oct 2013 09:30:00 +0200 (CEST) DKIM-Filter: OpenDKIM Filter v2.8.3 mail.tyknet.dk E8E2D189E95 DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=gibfest.dk; s=default; t=1381303801; bh=lufo1wv3WtIUFdckaNJUm/ReLu6XfgDKr3c4YDfrOAI=; h=Date:From:To:CC:Subject:References:In-Reply-To; b=NXu57EXG7qNIwgDXLJXzCwe9GLFiPY5IhHayJqC7B6f/j3S4ML9K/E2zNcOQNsBt1 WcNmTJe38oDnjjxWtyg0wvcbaIhgX5ROc82N0Ij0esvGXBo4rd3hz7sqYWe/RiHIpq Xbxh/PIC1PVxJ6zO4b+5ChKaSoA8xgOnHhSHUeWs= Message-ID: <525505F6.2050204@gibfest.dk> Date: Wed, 09 Oct 2013 09:29:58 +0200 From: Thomas Steen Rasmussen User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:17.0) Gecko/20130801 Thunderbird/17.0.8 MIME-Version: 1.0 To: Mark Felder Subject: Re: Panic Freebsd 9.1 using "export jail_plex_geek_lan_zfs_datasets" References: <1381231473.1593.31390985.61592116@webmail.messagingengine.com> <5992a41f-56f1-4a31-a751-0bae4f6ec570@email.android.com> <1381238168.16993.31431449.6AC961B7@webmail.messagingengine.com> In-Reply-To: <1381238168.16993.31431449.6AC961B7@webmail.messagingengine.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: freebsd-jail@freebsd.org X-BeenThere: freebsd-jail@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "Discussion about FreeBSD jail\(8\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 09 Oct 2013 07:45:52 -0000 On 08-10-2013 15:16, Mark Felder wrote: > On Tue, Oct 8, 2013, at 8:10, Miguel C. wrote: >> Yeah I'm doing the same and works fine but the panic should be >> investigated I guess. >> > If there's not a PR open for this scenario please submit what you've > found. Hello, Did my previous post not make it to the list or did you guys just not see it ? This panic was found and fixed this summer, see my previous post in this thread for the details. Upgrade to latest 9-STABLE and the problem goes away: http://svnweb.freebsd.org/base?view=revision&revision=252524 Best regards, Thomas Steen Rasmussen From owner-freebsd-jail@FreeBSD.ORG Wed Oct 9 11:39:45 2013 Return-Path: Delivered-To: freebsd-jail@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTP id 18580172 for ; Wed, 9 Oct 2013 11:39:45 +0000 (UTC) (envelope-from feld@FreeBSD.org) Received: from out1-smtp.messagingengine.com (out1-smtp.messagingengine.com [66.111.4.25]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id DED0D2F68 for ; Wed, 9 Oct 2013 11:39:44 +0000 (UTC) Received: from compute6.internal (compute6.nyi.mail.srv.osa [10.202.2.46]) by gateway1.nyi.mail.srv.osa (Postfix) with ESMTP id 852D6215D6; Wed, 9 Oct 2013 07:39:38 -0400 (EDT) Received: from web3 ([10.202.2.213]) by compute6.internal (MEProxy); Wed, 09 Oct 2013 07:39:38 -0400 DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d= messagingengine.com; h=message-id:from:to:cc:mime-version :content-transfer-encoding:content-type:in-reply-to:references :subject:date; s=smtpout; bh=Hofp+4HB0GHXwcqwZHA/9HcU89Q=; b=qcc 8Z6E1YzNieyDxRnVvhyztgcn20ZHD3dSDeo6JpD6P0fqdEIJU/iSjv/Z+NVw/kcE 2ZMEWEIHerelTwc4nlRvpqaTuaCGQ3jllDV69UvLDtI0wtHxO/elztcSEk/6aLw5 79ZXqoajBDrRffxwQpDNUSRne48svNXOtSVdJlkA= Received: by web3.nyi.mail.srv.osa (Postfix, from userid 99) id 4DBA01193B5; Wed, 9 Oct 2013 07:39:38 -0400 (EDT) Message-Id: <1381318778.1136.31876805.4B736168@webmail.messagingengine.com> X-Sasl-Enc: 4cxDdUxxgLO6o//E8FWPi9t2xO4v7IKrAhCOXu7IpvNq 1381318778 From: Mark Felder To: Thomas Steen Rasmussen MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Type: text/plain X-Mailer: MessagingEngine.com Webmail Interface - ajax-ce174988 In-Reply-To: <525505F6.2050204@gibfest.dk> References: <1381231473.1593.31390985.61592116@webmail.messagingengine.com> <5992a41f-56f1-4a31-a751-0bae4f6ec570@email.android.com> <1381238168.16993.31431449.6AC961B7@webmail.messagingengine.com> <525505F6.2050204@gibfest.dk> Subject: Re: Panic Freebsd 9.1 using "export jail_plex_geek_lan_zfs_datasets" Date: Wed, 09 Oct 2013 06:39:38 -0500 Cc: freebsd-jail@freebsd.org X-BeenThere: freebsd-jail@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "Discussion about FreeBSD jail\(8\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 09 Oct 2013 11:39:45 -0000 On Wed, Oct 9, 2013, at 2:29, Thomas Steen Rasmussen wrote: > On 08-10-2013 15:16, Mark Felder wrote: > > On Tue, Oct 8, 2013, at 8:10, Miguel C. wrote: > >> Yeah I'm doing the same and works fine but the panic should be > >> investigated I guess. > >> > > If there's not a PR open for this scenario please submit what you've > > found. > > Hello, > > Did my previous post not make it to the list or did you guys just > not see it ? This panic was found and fixed this summer, see my > previous post in this thread for the details. Upgrade to latest > 9-STABLE and the problem goes away: > http://svnweb.freebsd.org/base?view=revision&revision=252524 > > I had missed it. Thanks for checking in. :-) Guess Miguel doesn't need to worry. From owner-freebsd-jail@FreeBSD.ORG Thu Oct 10 04:22:02 2013 Return-Path: Delivered-To: freebsd-jail@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTP id 2B03CB46 for ; Thu, 10 Oct 2013 04:22:02 +0000 (UTC) (envelope-from sodynet1@gmail.com) Received: from mail-pb0-x234.google.com (mail-pb0-x234.google.com [IPv6:2607:f8b0:400e:c01::234]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id 060752C17 for ; Thu, 10 Oct 2013 04:22:01 +0000 (UTC) Received: by mail-pb0-f52.google.com with SMTP id wz12so1925480pbc.25 for ; Wed, 09 Oct 2013 21:22:01 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:date:message-id:subject:from:to:content-type; bh=Vo3s5jvsT1gve+Q2vzuJZzBizJM3n1tHSRl/tmIq6sI=; b=AgG1+AbpnHCleQ5F2biFeiTj1goYSHIaiWwtnjfGi3/C/FlLE3vX/tt4+WYfEG0poU JLVTshpqssVA8ol5e6Vd+fbp4k0kiN2RVtcNtTo0MdZ3azRC8pjwgxczFTtdANGLYcgW /9BpRSz0ehS/zAO0yTi6DlFzHwJ5sZo4j5wYbz1/rai11atm61ByEpkAFViKrT881+Zy KkN98xPXzMEAwqLwKDLkIwEHyp94tVBI/brj5G1Exe1GGBYFfdvF75cj6VIwqE+RNu2k XHRRBn0AhtkONQ9TvcAypQHDRzp7F0R/Ui6tidGYV0hP129awRTnXRRaooFipnJWDCVC M1sg== MIME-Version: 1.0 X-Received: by 10.68.101.225 with SMTP id fj1mr11758218pbb.8.1381378921672; Wed, 09 Oct 2013 21:22:01 -0700 (PDT) Received: by 10.70.30.98 with HTTP; Wed, 9 Oct 2013 21:22:01 -0700 (PDT) Received: by 10.70.30.98 with HTTP; Wed, 9 Oct 2013 21:22:01 -0700 (PDT) Date: Thu, 10 Oct 2013 07:22:01 +0300 Message-ID: Subject: /lib/libc.so.7 unsupported file format From: Sami Halabi To: freebsd-jail@freebsd.org Content-Type: text/plain; charset=ISO-8859-1 X-Content-Filtered-By: Mailman/MimeDel 2.1.14 X-BeenThere: freebsd-jail@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "Discussion about FreeBSD jail\(8\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 10 Oct 2013 04:22:02 -0000 Hi, i have a box with FreeBSD-9.1-Release-amd64. I did freebsd-update to the host and to the jails in, one of them is 32bit and since then i get: root@6:/root # jexec 1 /bin/csh /lib/libc.so.7: unsupported file layout root@6:/root # i see /lib/libc.so.7 was updated as i read in some forums, i did: root@6:/root # ldconfig /lib /usr/lib /usr/local/lib root@6:/root # I also tried to do freebsd-update from the jail but install failed with chflags problem. I tried freebsd-update with -b and -c to point to the jail freebsd-update i /var by doing fetch in the jail and install from the host.. without success, For now i rolled back the changes. Any hints to workaround this? Thanks in advance, Sami From owner-freebsd-jail@FreeBSD.ORG Thu Oct 10 11:35:20 2013 Return-Path: Delivered-To: freebsd-jail@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTP id E1833510 for ; Thu, 10 Oct 2013 11:35:20 +0000 (UTC) (envelope-from feld@FreeBSD.org) Received: from out1-smtp.messagingengine.com (out1-smtp.messagingengine.com [66.111.4.25]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id B6ED223E5 for ; Thu, 10 Oct 2013 11:35:20 +0000 (UTC) Received: from compute1.internal (compute1.nyi.mail.srv.osa [10.202.2.41]) by gateway1.nyi.mail.srv.osa (Postfix) with ESMTP id 1BEC020BBA for ; Thu, 10 Oct 2013 07:35:14 -0400 (EDT) Received: from web3 ([10.202.2.213]) by compute1.internal (MEProxy); Thu, 10 Oct 2013 07:35:14 -0400 DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d= messagingengine.com; h=message-id:from:to:mime-version :content-transfer-encoding:content-type:in-reply-to:references :subject:date; s=smtpout; bh=9dOuZlVZsU5wD+B3K5bOpyt9/VM=; b=WrY 6XJewx/ojR6brTXSa5wyGC4DVkLw8E4MVmJ99JRbREssr2FUnxBxwMwVTIrYBI0T nSAbDN/BGG5pB335otMYD6x9xJ6gDGBIlxJ490jUYZMXx3jRCeWa/qMMYl/+1E4b okFi9zHlIJn9zvM9gON1oKL8gcIuXH6PrpGD6dQ4= Received: by web3.nyi.mail.srv.osa (Postfix, from userid 99) id F053811B457; Thu, 10 Oct 2013 07:35:13 -0400 (EDT) Message-Id: <1381404913.25836.32340457.0EA543A2@webmail.messagingengine.com> X-Sasl-Enc: QW7eLjpD56Bw1D6lY9rUJL22cZJaA6co4V+doE7DyWX/ 1381404913 From: Mark Felder To: freebsd-jail@freebsd.org MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Type: text/plain X-Mailer: MessagingEngine.com Webmail Interface - ajax-ce174988 In-Reply-To: References: Subject: Re: /lib/libc.so.7 unsupported file format Date: Thu, 10 Oct 2013 06:35:13 -0500 X-BeenThere: freebsd-jail@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "Discussion about FreeBSD jail\(8\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 10 Oct 2013 11:35:20 -0000 On Wed, Oct 9, 2013, at 23:22, Sami Halabi wrote: > Hi, > i have a box with FreeBSD-9.1-Release-amd64. > I did freebsd-update to the host and to the jails in, one of them is > 32bit > and since then i get: > > root@6:/root # jexec 1 /bin/csh > /lib/libc.so.7: unsupported file layout > root@6:/root # > > i see /lib/libc.so.7 was updated > > as i read in some forums, i did: > root@6:/root # ldconfig /lib /usr/lib /usr/local/lib > root@6:/root # > > I also tried to do freebsd-update from the jail but install failed with > chflags problem. > > I tried freebsd-update with -b and -c to point to the jail freebsd-update > i /var by doing fetch in the jail and install from the host.. without > success, > > For now i rolled back the changes. > > Any hints to workaround this? > I'm not sure that freebsd-update is supported for doing updates of 32bit jails on 64bit hosts. You might have to do the upgrade yourself from source. From owner-freebsd-jail@FreeBSD.ORG Thu Oct 10 11:48:12 2013 Return-Path: Delivered-To: freebsd-jail@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTP id F09A482F; Thu, 10 Oct 2013 11:48:12 +0000 (UTC) (envelope-from sodynet1@gmail.com) Received: from mail-pd0-x229.google.com (mail-pd0-x229.google.com [IPv6:2607:f8b0:400e:c02::229]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id C4E9C2489; Thu, 10 Oct 2013 11:48:12 +0000 (UTC) Received: by mail-pd0-f169.google.com with SMTP id r10so2477427pdi.0 for ; Thu, 10 Oct 2013 04:48:12 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=8/NbdY4HRZcNsP3502JtdSpXcu1jFETOLd2g/0Y+PAs=; b=gYZlqZui2DqRTpq6EIrSsD2zvhxqyRe1WWz6ZVBGOC+bF9RJMrUvsAAWbLwiFPlnUM RfNNvbMXi7MCabyFMeQbazVJjLGHIeU1bY4PT5glhZARtgxo1/9K880JRFsxN9NTHb7P 4N6XFFElriTCVwy90O+7BTFRV30cdAWEeo5uSUp/r+v8n2Fh2haTEs449F0x6//f6yuz TF7d++Lw5RN5tqhk56VmtO6XpoKgqKclkM2JTUv3l8RgYWG/ifp0IRm2sY/TAvBxQtdw fhi/yh587xYO+rMaSbvuFwaosAYZr5eL8C/oxS30Jnti6JIK4M45Gb6X9Z2/igXdm0hb zAdg== MIME-Version: 1.0 X-Received: by 10.68.239.225 with SMTP id vv1mr13506580pbc.126.1381405692313; Thu, 10 Oct 2013 04:48:12 -0700 (PDT) Received: by 10.70.30.98 with HTTP; Thu, 10 Oct 2013 04:48:12 -0700 (PDT) In-Reply-To: <1381404913.25836.32340457.0EA543A2@webmail.messagingengine.com> References: <1381404913.25836.32340457.0EA543A2@webmail.messagingengine.com> Date: Thu, 10 Oct 2013 14:48:12 +0300 Message-ID: Subject: Re: /lib/libc.so.7 unsupported file format From: Sami Halabi To: Mark Felder Content-Type: text/plain; charset=ISO-8859-1 X-Content-Filtered-By: Mailman/MimeDel 2.1.14 Cc: freebsd-jail@freebsd.org X-BeenThere: freebsd-jail@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "Discussion about FreeBSD jail\(8\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 10 Oct 2013 11:48:13 -0000 Hi, is there a simple way to interpret the data in /var/db/freebsd-update that sits inside a jail, from HOST and install the updates that already fetched somehow ? Sami On Thu, Oct 10, 2013 at 2:35 PM, Mark Felder wrote: > > > On Wed, Oct 9, 2013, at 23:22, Sami Halabi wrote: > > Hi, > > i have a box with FreeBSD-9.1-Release-amd64. > > I did freebsd-update to the host and to the jails in, one of them is > > 32bit > > and since then i get: > > > > root@6:/root # jexec 1 /bin/csh > > /lib/libc.so.7: unsupported file layout > > root@6:/root # > > > > i see /lib/libc.so.7 was updated > > > > as i read in some forums, i did: > > root@6:/root # ldconfig /lib /usr/lib /usr/local/lib > > root@6:/root # > > > > I also tried to do freebsd-update from the jail but install failed with > > chflags problem. > > > > I tried freebsd-update with -b and -c to point to the jail freebsd-update > > i /var by doing fetch in the jail and install from the host.. without > > success, > > > > For now i rolled back the changes. > > > > Any hints to workaround this? > > > > I'm not sure that freebsd-update is supported for doing updates of 32bit > jails on 64bit hosts. You might have to do the upgrade yourself from > source. > _______________________________________________ > freebsd-jail@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-jail > To unsubscribe, send any mail to "freebsd-jail-unsubscribe@freebsd.org" > -- Sami Halabi Information Systems Engineer NMS Projects Expert FreeBSD SysAdmin Expert From owner-freebsd-jail@FreeBSD.ORG Thu Oct 10 11:55:12 2013 Return-Path: Delivered-To: freebsd-jail@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTP id 64599AB7 for ; Thu, 10 Oct 2013 11:55:12 +0000 (UTC) (envelope-from feld@FreeBSD.org) Received: from out1-smtp.messagingengine.com (out1-smtp.messagingengine.com [66.111.4.25]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id 3843D2500 for ; Thu, 10 Oct 2013 11:55:12 +0000 (UTC) Received: from compute4.internal (compute4.nyi.mail.srv.osa [10.202.2.44]) by gateway1.nyi.mail.srv.osa (Postfix) with ESMTP id 1D95D20C5E for ; Thu, 10 Oct 2013 07:55:02 -0400 (EDT) Received: from web3 ([10.202.2.213]) by compute4.internal (MEProxy); Thu, 10 Oct 2013 07:55:02 -0400 DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d= messagingengine.com; h=message-id:from:to:mime-version :content-transfer-encoding:content-type:subject:date:in-reply-to :references; s=smtpout; bh=2twdIfOoQD8rtVxz+fo7gJpLuzg=; b=JnDA2 RrP2wEGgBvKw73Aps7StScYA88talr4N0WJJStjwA6wqkmU/FJVgvbnu7/s0uWrH oSmWH6dgMMs1AG/9l3AMf/Cw2u+EflHMJU7fup5tqxZ09FFglUziKaKq836yJXNT RJh92nP9jN6ap0kyqC64vWMnRqAX+oWJjQVNf4= Received: by web3.nyi.mail.srv.osa (Postfix, from userid 99) id F2F69116683; Thu, 10 Oct 2013 07:55:01 -0400 (EDT) Message-Id: <1381406101.2271.32347133.46E044A4@webmail.messagingengine.com> X-Sasl-Enc: kVimYR/YV8GOjvfGZBU6FSLKU2G5dRlriLsO1n17zWjb 1381406101 From: Mark Felder To: freebsd-jail@freebsd.org MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Type: text/plain X-Mailer: MessagingEngine.com Webmail Interface - ajax-ce174988 Subject: Re: /lib/libc.so.7 unsupported file format Date: Thu, 10 Oct 2013 06:55:01 -0500 In-Reply-To: References: <1381404913.25836.32340457.0EA543A2@webmail.messagingengine.com> X-BeenThere: freebsd-jail@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "Discussion about FreeBSD jail\(8\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 10 Oct 2013 11:55:12 -0000 On Thu, Oct 10, 2013, at 6:48, Sami Halabi wrote: > Hi, > is there a simple way to interpret the data in /var/db/freebsd-update > that > sits inside a jail, from HOST and install the updates that already > fetched > somehow ? > freebsd-update uses binary patches. They are not entire files you could simply replace on your system. As you have witnessed, applying a binary patch intended for a 64bit binary to a 32bit binary has dire consequences. Unfortunately the data in /var/db/freebsd-update is completely worthless for your 32bit jail. From owner-freebsd-jail@FreeBSD.ORG Thu Oct 10 12:03:00 2013 Return-Path: Delivered-To: freebsd-jail@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTP id D33461CF; Thu, 10 Oct 2013 12:03:00 +0000 (UTC) (envelope-from sodynet1@gmail.com) Received: from mail-pa0-x233.google.com (mail-pa0-x233.google.com [IPv6:2607:f8b0:400e:c03::233]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id A724025D4; Thu, 10 Oct 2013 12:03:00 +0000 (UTC) Received: by mail-pa0-f51.google.com with SMTP id kp14so2623542pab.10 for ; Thu, 10 Oct 2013 05:03:00 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=5sEWzotV3g6aTy8ScfO6Sn7j5b4VyRd0ztoi1cCS09Y=; b=muhFUTT6pU7/HrBn/RlPlxzvOTAbcMGgDtEdR01zvzuGNBQD0J77ZbNWwFEDKQpKzY Vbil4zjwUpOZ84jUDHchgUcVpdkzAzqGcxPFmvs6RQa8vyICzT1az5rTOWhDrFbTEJap 40X1YJJmJYmrN2uJvYOtjF/E4NQt57TVISXbDQNmJ8brsm7H7swEj+tAtlWoQ6sobbwt XLy0E5IRHiBgV9HW+ZLqK9ltxJzBfX9gG7N/84hArPIVRYaxkpfrKEYUOibWk6274o2G KjHVkBYZOhN74kXX3qFH9vvUxzW6guQpZLgu6OGJ3axpi116y457mjPJOyOXxHPReqyO cMng== MIME-Version: 1.0 X-Received: by 10.67.30.164 with SMTP id kf4mr15090745pad.13.1381406580330; Thu, 10 Oct 2013 05:03:00 -0700 (PDT) Received: by 10.70.30.98 with HTTP; Thu, 10 Oct 2013 05:03:00 -0700 (PDT) In-Reply-To: <1381406101.2271.32347133.46E044A4@webmail.messagingengine.com> References: <1381404913.25836.32340457.0EA543A2@webmail.messagingengine.com> <1381406101.2271.32347133.46E044A4@webmail.messagingengine.com> Date: Thu, 10 Oct 2013 15:03:00 +0300 Message-ID: Subject: Re: /lib/libc.so.7 unsupported file format From: Sami Halabi To: Mark Felder Content-Type: text/plain; charset=ISO-8859-1 X-Content-Filtered-By: Mailman/MimeDel 2.1.14 Cc: freebsd-jail@freebsd.org X-BeenThere: freebsd-jail@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "Discussion about FreeBSD jail\(8\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 10 Oct 2013 12:03:00 -0000 Hi, thanks for replying me so fast. what i ment is: 1. in the jail (32 bit) to do: freebsd-update fetch # ls /var/db/freebsd-update/ ./ ../ f465c3739385890c221dff1a05e578c6cae0d0430e46996d319db7439f884336-install@ filelist files/ install.TggE71/ pub.ssl serverlist serverlist_full serverlist_tried tINDEX.present tag root@sami:/ # root@sami:/ # more /var/db/freebsd-update/tag freebsd-update|i386|9.1-RELEASE|7|b3924864da0e125ff57d2f9894347dbc0e130ae32a0647126d5109dbc099981e|1420070400 root@sami:/ # 2. since inside the jail: root@sami:/ # freebsd-update install Installing updates...chflags: ///lib/libc.so.7: Operation not permitted root@sami:/ # not working because of chflags (maybe there is a sysctl that will allow a jail to chflags??) i thought that maybe there is some way to do it from outside the jail. unfortunattly doing simple: root@6:/root # freebsd-update -b /usr/jails/sami -d /usr/jails/sami/var/db/freebsd-update/ install No updates are available to install. Run '/usr/sbin/freebsd-update fetch' first. root@6:/root # i thought if there is some way to interpret the data and installing using the host (maybe manually somehow...), or even changing the chflags inside the jail to an executable that return success no matter what... Sami On Thu, Oct 10, 2013 at 2:55 PM, Mark Felder wrote: > On Thu, Oct 10, 2013, at 6:48, Sami Halabi wrote: > > Hi, > > is there a simple way to interpret the data in /var/db/freebsd-update > > that > > sits inside a jail, from HOST and install the updates that already > > fetched > > somehow ? > > > > freebsd-update uses binary patches. They are not entire files you could > simply replace on your system. As you have witnessed, applying a binary > patch intended for a 64bit binary to a 32bit binary has dire > consequences. Unfortunately the data in /var/db/freebsd-update is > completely worthless for your 32bit jail. > _______________________________________________ > freebsd-jail@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-jail > To unsubscribe, send any mail to "freebsd-jail-unsubscribe@freebsd.org" > -- Sami Halabi Information Systems Engineer NMS Projects Expert FreeBSD SysAdmin Expert From owner-freebsd-jail@FreeBSD.ORG Thu Oct 10 12:06:54 2013 Return-Path: Delivered-To: freebsd-jail@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTP id A0B534DA for ; Thu, 10 Oct 2013 12:06:54 +0000 (UTC) (envelope-from feld@FreeBSD.org) Received: from out1-smtp.messagingengine.com (out1-smtp.messagingengine.com [66.111.4.25]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id 72A96260E for ; Thu, 10 Oct 2013 12:06:54 +0000 (UTC) Received: from compute6.internal (compute6.nyi.mail.srv.osa [10.202.2.46]) by gateway1.nyi.mail.srv.osa (Postfix) with ESMTP id 708EF20D0A for ; Thu, 10 Oct 2013 08:06:53 -0400 (EDT) Received: from web3 ([10.202.2.213]) by compute6.internal (MEProxy); Thu, 10 Oct 2013 08:06:53 -0400 DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d= messagingengine.com; h=message-id:from:to:mime-version :content-transfer-encoding:content-type:subject:date:in-reply-to :references; s=smtpout; bh=asF+APwl80CpZCa8Lv8cR8e69QU=; b=Wm8xl sgpsApug0LIZ9V9fiAD3SOd4tYQZDvseAEB9XpZgSlY26M2RXImt4My2On4b3Kc1 P9XHnhZYmH1Ozb5bXPKOFOeDvKG7dX9j4fl8Bbg6iVW/MhgAW+CAO4R65YUnHlps L67UG7p7nm/mVhbIKoGW/HqEf3bVIqFWKxh8BQ= Received: by web3.nyi.mail.srv.osa (Postfix, from userid 99) id 5138E116711; Thu, 10 Oct 2013 08:06:53 -0400 (EDT) Message-Id: <1381406813.7807.32351005.62A30408@webmail.messagingengine.com> X-Sasl-Enc: nHWlobfdqZDpMYn7BaVXv453+JEUH2MDTRxK4veyirSe 1381406813 From: Mark Felder To: freebsd-jail@freebsd.org MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Type: text/plain X-Mailer: MessagingEngine.com Webmail Interface - ajax-ce174988 Subject: Re: /lib/libc.so.7 unsupported file format Date: Thu, 10 Oct 2013 07:06:53 -0500 In-Reply-To: References: <1381404913.25836.32340457.0EA543A2@webmail.messagingengine.com> <1381406101.2271.32347133.46E044A4@webmail.messagingengine.com> X-BeenThere: freebsd-jail@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "Discussion about FreeBSD jail\(8\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 10 Oct 2013 12:06:54 -0000 On Thu, Oct 10, 2013, at 7:03, Sami Halabi wrote: > Hi, > thanks for replying me so fast. > > what i ment is: > 1. in the jail (32 bit) to do: > freebsd-update fetch > > # ls /var/db/freebsd-update/ > ./ > ../ > f465c3739385890c221dff1a05e578c6cae0d0430e46996d319db7439f884336-install@ > filelist > files/ > install.TggE71/ > pub.ssl > serverlist > serverlist_full > serverlist_tried > tINDEX.present > tag > root@sami:/ # > > root@sami:/ # more /var/db/freebsd-update/tag > freebsd-update|i386|9.1-RELEASE|7|b3924864da0e125ff57d2f9894347dbc0e130ae32a0647126d5109dbc099981e|1420070400 > root@sami:/ # > > 2. since inside the jail: > root@sami:/ # freebsd-update install > Installing updates...chflags: ///lib/libc.so.7: Operation not permitted > root@sami:/ # > > not working because of chflags (maybe there is a sysctl that will allow a > jail to chflags??) > > i thought that maybe there is some way to do it from outside the jail. > > unfortunattly doing simple: > root@6:/root # freebsd-update -b /usr/jails/sami -d > /usr/jails/sami/var/db/freebsd-update/ install > No updates are available to install. > Run '/usr/sbin/freebsd-update fetch' first. > root@6:/root # > > i thought if there is some way to interpret the data and installing using > the host (maybe manually somehow...), or even changing the chflags inside > the jail to an executable that return success no matter what... > There is a sysctl for chflags: security.jail.param.allow.chflags and you can check if you have that access from within the jail via: security.jail.chflags_allowed I have not tried to do what you're attempting before simply because I've very rarely run 32bit jails on 64bit hosts. Hopefully this gets you in the right direction. From owner-freebsd-jail@FreeBSD.ORG Thu Oct 10 12:18:25 2013 Return-Path: Delivered-To: freebsd-jail@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTP id 94F32844; Thu, 10 Oct 2013 12:18:25 +0000 (UTC) (envelope-from sodynet1@gmail.com) Received: from mail-pa0-x22c.google.com (mail-pa0-x22c.google.com [IPv6:2607:f8b0:400e:c03::22c]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id 6732226D1; Thu, 10 Oct 2013 12:18:25 +0000 (UTC) Received: by mail-pa0-f44.google.com with SMTP id lf10so2620722pab.31 for ; Thu, 10 Oct 2013 05:18:25 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=0zgFPxcdP7q3mcKCvez4wRRwlNjZ0+uXstuFnVrbBcA=; b=U8bRsMZdlymnn5BIE+dyegSNzq2eBz1sHTuumNbppJ3hnrE7uawrKHbheYHd7i1B5+ axleij0DX2N4K1VVY2a11+Yua3RzPXynbfTOETJnJzV+HoLMMXy8LO0dulAiY4DYEYCs hazS18Jpo9pBVTYKskk3R531TJmjwKHEl7Tm32CSMnVfzvh7QPHQTuM8n6nrMO8+udZo cgTtCGoF/wkHkmjaZJ7zdhlpkHNgYPWSIa65JcHwCPYPig66ORuALn2mhj3L82oLvo9i 2cmoMRKn8SRL9EbHzTL5YtyZu8nNb12zTGH2RnNumJ7zm4j0eop4F2OLBrUIEUk12RKI tXPQ== MIME-Version: 1.0 X-Received: by 10.66.196.168 with SMTP id in8mr15015172pac.18.1381407504470; Thu, 10 Oct 2013 05:18:24 -0700 (PDT) Received: by 10.70.30.98 with HTTP; Thu, 10 Oct 2013 05:18:24 -0700 (PDT) In-Reply-To: <1381406813.7807.32351005.62A30408@webmail.messagingengine.com> References: <1381404913.25836.32340457.0EA543A2@webmail.messagingengine.com> <1381406101.2271.32347133.46E044A4@webmail.messagingengine.com> <1381406813.7807.32351005.62A30408@webmail.messagingengine.com> Date: Thu, 10 Oct 2013 15:18:24 +0300 Message-ID: Subject: Re: /lib/libc.so.7 unsupported file format From: Sami Halabi To: Mark Felder Content-Type: text/plain; charset=ISO-8859-1 X-Content-Filtered-By: Mailman/MimeDel 2.1.14 Cc: freebsd-jail@freebsd.org X-BeenThere: freebsd-jail@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "Discussion about FreeBSD jail\(8\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 10 Oct 2013 12:18:25 -0000 Hi, # sysctl security.jail.param.allow.chflags=1 security.jail.param.allow.chflags: 0 -> 0 the sysctl is not working, maybe it should be set on /boot/loder.conf what i did is the following: 1. inside the jail a. i renamed /bin/chflags to /bin/chfalgs-old b. created /bin/chflags with the following: #!/bin/csh -f echo sami > /dev/null 2. a freebsd-update install in the jail yeilds installing the updates with errors on /lib/libc.so.7 & /usr/bin/login 3. i did freebsd-update rollback 4. in the host i did: a. chflags noschg /usr/jails/sami/lib/libc.so.7 b. chflags noschg /usr/jails/sami/usr/bin/login 5. in the jail i did: a. freebsd-update fetch b. freebsd-update install 6. in the host i did: a. chflags schg /usr/jails/sami/lib/libc.so.7 b. chflags schg /usr/jails/sami/usr/bin/login 7. inside the jail a. removed /bin/chflags b. i renamed /bin/chflags-old to /bin/chfalgs Worked for me. Thanks for trying to hel pme, Sami On Thu, Oct 10, 2013 at 3:06 PM, Mark Felder wrote: > On Thu, Oct 10, 2013, at 7:03, Sami Halabi wrote: > > Hi, > > thanks for replying me so fast. > > > > what i ment is: > > 1. in the jail (32 bit) to do: > > freebsd-update fetch > > > > # ls /var/db/freebsd-update/ > > ./ > > ../ > > f465c3739385890c221dff1a05e578c6cae0d0430e46996d319db7439f884336-install@ > > filelist > > files/ > > install.TggE71/ > > pub.ssl > > serverlist > > serverlist_full > > serverlist_tried > > tINDEX.present > > tag > > root@sami:/ # > > > > root@sami:/ # more /var/db/freebsd-update/tag > > > freebsd-update|i386|9.1-RELEASE|7|b3924864da0e125ff57d2f9894347dbc0e130ae32a0647126d5109dbc099981e|1420070400 > > root@sami:/ # > > > > 2. since inside the jail: > > root@sami:/ # freebsd-update install > > Installing updates...chflags: ///lib/libc.so.7: Operation not permitted > > root@sami:/ # > > > > not working because of chflags (maybe there is a sysctl that will allow a > > jail to chflags??) > > > > i thought that maybe there is some way to do it from outside the jail. > > > > unfortunattly doing simple: > > root@6:/root # freebsd-update -b /usr/jails/sami -d > > /usr/jails/sami/var/db/freebsd-update/ install > > No updates are available to install. > > Run '/usr/sbin/freebsd-update fetch' first. > > root@6:/root # > > > > i thought if there is some way to interpret the data and installing using > > the host (maybe manually somehow...), or even changing the chflags inside > > the jail to an executable that return success no matter what... > > > > There is a sysctl for chflags: > > security.jail.param.allow.chflags > > and you can check if you have that access from within the jail via: > > security.jail.chflags_allowed > > I have not tried to do what you're attempting before simply because I've > very rarely run 32bit jails on 64bit hosts. Hopefully this gets you in > the right direction. > _______________________________________________ > freebsd-jail@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-jail > To unsubscribe, send any mail to "freebsd-jail-unsubscribe@freebsd.org" > -- Sami Halabi Information Systems Engineer NMS Projects Expert FreeBSD SysAdmin Expert From owner-freebsd-jail@FreeBSD.ORG Fri Oct 11 17:03:46 2013 Return-Path: Delivered-To: freebsd-jail@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTP id B1618ED7 for ; Fri, 11 Oct 2013 17:03:46 +0000 (UTC) (envelope-from kentas@hush.com) Received: from smtp10.hushmail.com (smtp10.hushmail.com [65.39.178.143]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id 98DC6240E for ; Fri, 11 Oct 2013 17:03:46 +0000 (UTC) Received: from smtp10.hushmail.com (localhost [127.0.0.1]) by smtp10.hushmail.com (Postfix) with SMTP id 63D3CC01A1 for ; Fri, 11 Oct 2013 17:03:40 +0000 (UTC) Received: from smtp.hushmail.com (w6.hushmail.com [65.39.178.92]) by smtp10.hushmail.com (Postfix) with ESMTP for ; Fri, 11 Oct 2013 17:03:40 +0000 (UTC) Received: by smtp.hushmail.com (Postfix, from userid 99) id 47C726018E; Fri, 11 Oct 2013 17:03:40 +0000 (UTC) MIME-Version: 1.0 Date: Fri, 11 Oct 2013 13:03:40 -0400 To: freebsd-jail@freebsd.org Subject: ezjail and UPDATING20131010 From: "Kenta Suzumoto" Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="UTF-8" Message-Id: <20131011170340.47C726018E@smtp.hushmail.com> X-BeenThere: freebsd-jail@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "Discussion about FreeBSD jail\(8\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 11 Oct 2013 17:03:46 -0000 Hi there. I updated to 10-STABLE after it was branched and suddenly none of my [ez]jails will start. Does it have anything to do with the entry in UPDATING? What's the best way to solve it? From owner-freebsd-jail@FreeBSD.ORG Fri Oct 11 17:31:04 2013 Return-Path: Delivered-To: freebsd-jail@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTP id DA7847F4 for ; Fri, 11 Oct 2013 17:31:04 +0000 (UTC) (envelope-from feld@FreeBSD.org) Received: from out1-smtp.messagingengine.com (out1-smtp.messagingengine.com [66.111.4.25]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id B018F25F7 for ; Fri, 11 Oct 2013 17:31:04 +0000 (UTC) Received: from compute5.internal (compute5.nyi.mail.srv.osa [10.202.2.45]) by gateway1.nyi.mail.srv.osa (Postfix) with ESMTP id 5C54621777 for ; Fri, 11 Oct 2013 13:31:03 -0400 (EDT) Received: from web3 ([10.202.2.213]) by compute5.internal (MEProxy); Fri, 11 Oct 2013 13:31:03 -0400 DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d= messagingengine.com; h=message-id:from:to:mime-version :content-transfer-encoding:content-type:subject:date:in-reply-to :references; s=smtpout; bh=MVuL8N+7c+lO7Cy63VONQPH749g=; b=fkk7i 2VSWWFC6t50sSbzifSGD/eyDWVbxKGRTbhg+dud2pg3Hlvd+LzUgZDSb2akeKLG7 IZ3MVXA9c1jaXuNO14G5IkSU78MZ7mWzQSC2PpF43QRBS5B/EiWLz7pDm4l/92tp WQmR1stCYStDWSE3Ev8Ywq4pmDx+qDo2t9Q0Sg= Received: by web3.nyi.mail.srv.osa (Postfix, from userid 99) id 3543A11EB44; Fri, 11 Oct 2013 13:31:03 -0400 (EDT) Message-Id: <1381512663.13242.32914813.65C2C03E@webmail.messagingengine.com> X-Sasl-Enc: YdocQjuDGjR4VYxkXi7+7UKbroJu1DWO6GupJ51DqLD/ 1381512663 From: Mark Felder To: freebsd-jail@freebsd.org MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Type: text/plain X-Mailer: MessagingEngine.com Webmail Interface - ajax-ce174988 Subject: Re: ezjail and UPDATING20131010 Date: Fri, 11 Oct 2013 12:31:03 -0500 In-Reply-To: <20131011170340.47C726018E@smtp.hushmail.com> References: <20131011170340.47C726018E@smtp.hushmail.com> X-BeenThere: freebsd-jail@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "Discussion about FreeBSD jail\(8\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 11 Oct 2013 17:31:04 -0000 On Fri, Oct 11, 2013, at 12:03, Kenta Suzumoto wrote: > Hi there. I updated to 10-STABLE after it was branched and suddenly none > of my [ez]jails will start. Does it have anything to do with the entry in > UPDATING? > What's the best way to solve it? > This is being discussed. I don't know a solution at this time. You might have to roll back. From owner-freebsd-jail@FreeBSD.ORG Fri Oct 11 18:00:13 2013 Return-Path: Delivered-To: freebsd-jail@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTP id 2F7A5466 for ; Fri, 11 Oct 2013 18:00:13 +0000 (UTC) (envelope-from artemrts@ukr.net) Received: from frv198.fwdcdn.com (frv198.fwdcdn.com [212.42.77.198]) (using TLSv1.2 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id DEE2027CF for ; Fri, 11 Oct 2013 18:00:12 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ukr.net; s=ffe; h=Content-Transfer-Encoding:Content-Type:MIME-Version:References:In-Reply-To:Message-Id:Cc:To:Subject:From:Date; bh=fErHtpe1y1pGtCde5G68lapFwq6wv3lC4DVDtCXGTtA=; b=PgrBBhH0vUqshnDJH+gxeO1l3RNwsn3bGAN+z7eM6wfblj33DRx51i6igfR+yhsF3PEXQXOd2wH4Ag1er9epbTzoVYZBdt8ShjjGsEB67+4X7JGWJbyQ6pf6tmAVFCJsZPV2SL3Anb899qrjLT1EGS0Zm/pQ4WaWWRy54nAVbX0=; Received: from [10.10.10.34] (helo=frv34.ukr.net) by frv198.fwdcdn.com with smtp ID 1VUglZ-000E7v-Dj for freebsd-jail@freebsd.org; Fri, 11 Oct 2013 20:44:45 +0300 Date: Fri, 11 Oct 2013 20:44:45 +0300 From: wishmaster Subject: Re[2]: ezjail and UPDATING20131010 To: Mark Felder X-Mailer: freemail.ukr.net 5.0 Message-Id: <1381513083.390908110.b6zxrgl9@frv34.ukr.net> In-Reply-To: <1381512663.13242.32914813.65C2C03E@webmail.messagingengine.com> References: <20131011170340.47C726018E@smtp.hushmail.com> <1381512663.13242.32914813.65C2C03E@webmail.messagingengine.com> MIME-Version: 1.0 Received: from artemrts@ukr.net by frv34.ukr.net; Fri, 11 Oct 2013 20:44:45 +0300 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: binary Content-Disposition: inline Cc: freebsd-jail@freebsd.org X-BeenThere: freebsd-jail@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "Discussion about FreeBSD jail\(8\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 11 Oct 2013 18:00:13 -0000 --- Original message --- From: "Mark Felder" Date: 11 October 2013, 20:31:19 > On Fri, Oct 11, 2013, at 12:03, Kenta Suzumoto wrote: > > Hi there. I updated to 10-STABLE after it was branched and suddenly none > > of my [ez]jails will start. Does it have anything to do with the entry in > > UPDATING? > > What's the best way to solve it? > > > > This is being discussed. I don't know a solution at this time. You might > have to roll back. No, no. There is one solution. You should stopping to uses tools like this. Instead write own shell-script which do what you need. Overall, Jail is like "Lego" constructor :-). From owner-freebsd-jail@FreeBSD.ORG Fri Oct 11 18:17:39 2013 Return-Path: Delivered-To: freebsd-jail@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTP id 943D7910 for ; Fri, 11 Oct 2013 18:17:39 +0000 (UTC) (envelope-from aimass@yabarana.com) Received: from mail-pb0-f48.google.com (mail-pb0-f48.google.com [209.85.160.48]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id 6A48128E1 for ; Fri, 11 Oct 2013 18:17:39 +0000 (UTC) Received: by mail-pb0-f48.google.com with SMTP id ma3so4516104pbc.7 for ; Fri, 11 Oct 2013 11:17:31 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to:cc:content-type; bh=WMS5Ca5I2HjEtauqEX0/SdJSAuXC/djiFPQFHmIO1Q4=; b=ek38i94Jzsde/H/Eu+TKkJ6Ckc5jy8gNzntYIoNrJcFkOBcMkPb9SITQYBXsFARv/j uY1I1vIxDU3CT0xCtKmUin0fz7KagaAVu9pqKqiKQCTNLf6vY8FCG3Hj9nKiPmTu/mUP x8FNwx3/O2jvxPvHjLLYr1ALbXxndnjPvHxH10Yo3skltK33heNs0xnrltkAvzfAxihF A+d/csrho5bV5LPSpCRt5m0Kd3GJqAh8P71YIIFr45rRX1JyiLn6MSbL6pKQdrf54vbc Q83AVNa+I8Q5o1gjlqGAqK9HkQsrpygo8oLDnfdTEKuIv8knZ/g1xfx8L+wERfA8TmIp jwBg== X-Gm-Message-State: ALoCoQlFYvz/wmAzSNNbxyU1i7WM5mMccl/D41YuyFjiQgwRG6wjAe9TgcFVeFwwPFRVbwijz+QN MIME-Version: 1.0 X-Received: by 10.66.145.4 with SMTP id sq4mr4492706pab.178.1381515451829; Fri, 11 Oct 2013 11:17:31 -0700 (PDT) Received: by 10.66.240.5 with HTTP; Fri, 11 Oct 2013 11:17:31 -0700 (PDT) In-Reply-To: <1381513083.390908110.b6zxrgl9@frv34.ukr.net> References: <20131011170340.47C726018E@smtp.hushmail.com> <1381512663.13242.32914813.65C2C03E@webmail.messagingengine.com> <1381513083.390908110.b6zxrgl9@frv34.ukr.net> Date: Fri, 11 Oct 2013 14:17:31 -0400 Message-ID: Subject: Re: Re[2]: ezjail and UPDATING20131010 From: Alejandro Imass To: wishmaster Content-Type: text/plain; charset=ISO-8859-1 Cc: freebsd-jail@freebsd.org X-BeenThere: freebsd-jail@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "Discussion about FreeBSD jail\(8\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 11 Oct 2013 18:17:39 -0000 On Fri, Oct 11, 2013 at 1:44 PM, wishmaster wrote: [...] > No, no. There is one solution. You should stopping to uses tools like this. Instead write own shell-script which do what you need. Overall, >Jail is like "Lego" constructor :-). EzJail is great and a lot of people using extensively including ourselves. It's much more than a simple script. Best, Alejandro Imass From owner-freebsd-jail@FreeBSD.ORG Fri Oct 11 18:19:38 2013 Return-Path: Delivered-To: freebsd-jail@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTP id AF062ABB for ; Fri, 11 Oct 2013 18:19:38 +0000 (UTC) (envelope-from erdgeist@erdgeist.org) Received: from elektropost.org (elektropost.org [217.115.13.199]) by mx1.freebsd.org (Postfix) with ESMTP id E24902911 for ; Fri, 11 Oct 2013 18:19:37 +0000 (UTC) Received: (qmail 48392 invoked from network); 11 Oct 2013 18:19:29 -0000 Received: from elektropost.org (HELO elektropost.org) (erdgeist@erdgeist.org) by elektropost.org with CAMELLIA256-SHA encrypted SMTP; 11 Oct 2013 18:19:29 -0000 Message-ID: <5258412F.7040301@erdgeist.org> Date: Fri, 11 Oct 2013 20:19:27 +0200 From: Dirk Engling User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:24.0) Gecko/20100101 Thunderbird/24.0 MIME-Version: 1.0 To: Mark Felder Subject: Re: ezjail and UPDATING20131010 References: <20131011170340.47C726018E@smtp.hushmail.com> <1381512663.13242.32914813.65C2C03E@webmail.messagingengine.com> <1381513083.390908110.b6zxrgl9@frv34.ukr.net> In-Reply-To: <1381513083.390908110.b6zxrgl9@frv34.ukr.net> X-Enigmail-Version: 1.5.2 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Cc: freebsd-jail@freebsd.org X-BeenThere: freebsd-jail@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "Discussion about FreeBSD jail\(8\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 11 Oct 2013 18:19:38 -0000 On 11.10.13 19:44, wishmaster wrote: > No, no. There is one solution. You should stopping to uses tools like > this. Instead write own shell-script which do what you need. Overall, > Jail is like "Lego" constructor :-). Excuse me? The ezjail framework indeed tries to implement best practises to protect its users from the common pitfalls of installing and updating virtual servers. Why exactly would you expect everyone to implement their own scripts? Lately the development of the new jail(8) tool made it harder to automatize administrating jail configs just using base system tools. Once the features of the tool has settled, ezjail will try to cope with the impact. erdgeist From owner-freebsd-jail@FreeBSD.ORG Fri Oct 11 18:55:55 2013 Return-Path: Delivered-To: freebsd-jail@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTP id D0B187B0 for ; Fri, 11 Oct 2013 18:55:55 +0000 (UTC) (envelope-from artemrts@ukr.net) Received: from frv198.fwdcdn.com (frv198.fwdcdn.com [212.42.77.198]) (using TLSv1.2 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id 8AD662B56 for ; Fri, 11 Oct 2013 18:55:55 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ukr.net; s=ffe; h=Content-Transfer-Encoding:Content-Type:MIME-Version:References:In-Reply-To:Message-Id:Cc:To:Subject:From:Date; bh=Oa637AMj03P0GlzNN3k7QWlFNtnaMqIsSC4zJqraJUY=; b=jvvOG1/q42/XuJnO25OC3iAT9saD/BSg3i9hC9TC4w257dPfigZhSxm9/YOZv7fntuxmLR5MfsF9Wk5eECJ9+Y6dnJacSqonsvEvS8Mio7uBKUOAIADaMV/UGq3E6GhDvNfIwH/pWsmfsUN/iNkm4FBwNA1jdO8ePehtUFFiXFg=; Received: from [10.10.10.34] (helo=frv34.ukr.net) by frv198.fwdcdn.com with smtp ID 1VUhsM-000Mbx-Rf for freebsd-jail@freebsd.org; Fri, 11 Oct 2013 21:55:50 +0300 Date: Fri, 11 Oct 2013 21:55:50 +0300 From: wishmaster Subject: Re[2]: ezjail and UPDATING20131010 To: Dirk Engling X-Mailer: freemail.ukr.net 5.0 Message-Id: <1381516978.924807986.pfyyx7nl@frv34.ukr.net> In-Reply-To: <5258412F.7040301@erdgeist.org> References: <20131011170340.47C726018E@smtp.hushmail.com> <1381512663.13242.32914813.65C2C03E@webmail.messagingengine.com> <1381513083.390908110.b6zxrgl9@frv34.ukr.net> <5258412F.7040301@erdgeist.org> MIME-Version: 1.0 Received: from artemrts@ukr.net by frv34.ukr.net; Fri, 11 Oct 2013 21:55:50 +0300 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: binary Content-Disposition: inline Cc: freebsd-jail@freebsd.org X-BeenThere: freebsd-jail@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "Discussion about FreeBSD jail\(8\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 11 Oct 2013 18:55:55 -0000 > On 11.10.13 19:44, wishmaster wrote: > > > No, no. There is one solution. You should stopping to uses tools like > > this. Instead write own shell-script which do what you need. Overall, > > Jail is like "Lego" constructor :-). > > Excuse me? The ezjail framework indeed tries to implement best practises > to protect its users from the common pitfalls of installing and updating > virtual servers. Why exactly would you expect everyone to implement > their own scripts? > > Lately the development of the new jail(8) tool made it harder to > automatize administrating jail configs just using base system tools. > Once the features of the tool has settled, ezjail will try to cope with > the impact. > Sorry, I did not offend anybody. Just my opinion about jail is: if user is familiar with FreeBSD structure, Jail, shell-scripting then preferred choice is have own framework. Dirk, one question. For example, I have multiple services (about 5 or more) which must be isolated. Each services uses www-server or any others dependent software. With ezjail, this software must be in each jail. What about updating this software? What about updating whole jail when base system was updated (mergemaster, etc)? From owner-freebsd-jail@FreeBSD.ORG Fri Oct 11 19:09:10 2013 Return-Path: Delivered-To: freebsd-jail@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTP id D23E391C for ; Fri, 11 Oct 2013 19:09:10 +0000 (UTC) (envelope-from erdgeist@erdgeist.org) Received: from elektropost.org (elektropost.org [217.115.13.199]) by mx1.freebsd.org (Postfix) with ESMTP id 13D7E2C08 for ; Fri, 11 Oct 2013 19:09:09 +0000 (UTC) Received: (qmail 52606 invoked from network); 11 Oct 2013 19:09:07 -0000 Received: from elektropost.org (HELO elektropost.org) (erdgeist@erdgeist.org) by elektropost.org with CAMELLIA256-SHA encrypted SMTP; 11 Oct 2013 19:09:07 -0000 Message-ID: <52584CD1.8020707@erdgeist.org> Date: Fri, 11 Oct 2013 21:09:05 +0200 From: Dirk Engling User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:24.0) Gecko/20100101 Thunderbird/24.0 MIME-Version: 1.0 To: wishmaster Subject: Re: ezjail and UPDATING20131010 References: <20131011170340.47C726018E@smtp.hushmail.com> <1381512663.13242.32914813.65C2C03E@webmail.messagingengine.com> <1381513083.390908110.b6zxrgl9@frv34.ukr.net> <5258412F.7040301@erdgeist.org> <1381516978.924807986.pfyyx7nl@frv34.ukr.net> In-Reply-To: <1381516978.924807986.pfyyx7nl@frv34.ukr.net> X-Enigmail-Version: 1.5.2 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Cc: freebsd-jail@freebsd.org X-BeenThere: freebsd-jail@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "Discussion about FreeBSD jail\(8\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 11 Oct 2013 19:09:10 -0000 On 11.10.13 20:55, wishmaster wrote: > Dirk, one question. For example, I have multiple services (about 5 or > more) which must be isolated. Each services uses www-server or any > others dependent software. With ezjail, this software must be in each > jail. What about updating this software? What about updating whole > jail when base system was updated (mergemaster, etc)? Use the right tool for the right task, i.e. freebsd-update inside the jail to do mergemaster the modern way. For updating software in the jails, either run portmaster -a or have identical packages mounted into all jails using nullfs and update them from the host system. Regards, erdgeist From owner-freebsd-jail@FreeBSD.ORG Fri Oct 11 19:27:51 2013 Return-Path: Delivered-To: freebsd-jail@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTP id 79002C6F for ; Fri, 11 Oct 2013 19:27:51 +0000 (UTC) (envelope-from artemrts@ukr.net) Received: from frv199.fwdcdn.com (frv199.fwdcdn.com [212.42.77.199]) (using TLSv1.2 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id 330C22CE6 for ; Fri, 11 Oct 2013 19:27:50 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ukr.net; s=ffe; h=Content-Transfer-Encoding:Content-Type:MIME-Version:References:In-Reply-To:Message-Id:Cc:To:Subject:From:Date; bh=pxBpL1axVa8CM04ZtISUcwUR3+Ahbcy8Mi2dIogI/ts=; b=skC7d0lK3J/bS/+BMczEcQ1wiuGfVN0JeedSOTpHokk7ThaC1ly3eIUa9f3JfI9fU1S/ux0TJQuGIyfppoBICgCht8pCDv67l2r8YQ+umZybK3xS4sPXTWivgB33MAOfne2icKHKOJv5mA8TrT8pC4yeXy2hrp+Oo6Z8c5gAvoc=; Received: from [10.10.10.34] (helo=frv34.ukr.net) by frv199.fwdcdn.com with smtp ID 1VUiNJ-000646-De for freebsd-jail@freebsd.org; Fri, 11 Oct 2013 22:27:49 +0300 Date: Fri, 11 Oct 2013 22:27:48 +0300 From: wishmaster Subject: Re[2]: ezjail and UPDATING20131010 To: Dirk Engling X-Mailer: freemail.ukr.net 5.0 Message-Id: <1381519020.168298097.2gv7zpen@frv34.ukr.net> In-Reply-To: <52584CD1.8020707@erdgeist.org> References: <20131011170340.47C726018E@smtp.hushmail.com> <1381512663.13242.32914813.65C2C03E@webmail.messagingengine.com> <1381513083.390908110.b6zxrgl9@frv34.ukr.net> <5258412F.7040301@erdgeist.org> <1381516978.924807986.pfyyx7nl@frv34.ukr.net> <52584CD1.8020707@erdgeist.org> MIME-Version: 1.0 Received: from artemrts@ukr.net by frv34.ukr.net; Fri, 11 Oct 2013 22:27:49 +0300 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: binary Content-Disposition: inline Cc: freebsd-jail@freebsd.org X-BeenThere: freebsd-jail@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "Discussion about FreeBSD jail\(8\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 11 Oct 2013 19:27:51 -0000 --- Original message --- From: "Dirk Engling" Date: 11 October 2013, 22:09:09 > On 11.10.13 20:55, wishmaster wrote: > > > Dirk, one question. For example, I have multiple services (about 5 or > > more) which must be isolated. Each services uses www-server or any > > others dependent software. With ezjail, this software must be in each > > jail. What about updating this software? What about updating whole > > jail when base system was updated (mergemaster, etc)? > > Use the right tool for the right task, i.e. freebsd-update inside the > jail to do mergemaster the modern way. For updating software in the > jails, either run portmaster -a or have identical packages mounted into > all jails using nullfs and update them from the host system. > Yeah!? But do you think updating python in each jail this is the right solution? Freebsd-update in each jail?? What about when number of jails is 10 or about. My server is very high loaded and I use tunable custom kernel and world. From owner-freebsd-jail@FreeBSD.ORG Fri Oct 11 19:30:26 2013 Return-Path: Delivered-To: freebsd-jail@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTP id 70C2BCD1 for ; Fri, 11 Oct 2013 19:30:26 +0000 (UTC) (envelope-from erdgeist@erdgeist.org) Received: from elektropost.org (elektropost.org [217.115.13.199]) by mx1.freebsd.org (Postfix) with ESMTP id A67612D09 for ; Fri, 11 Oct 2013 19:30:25 +0000 (UTC) Received: (qmail 54457 invoked from network); 11 Oct 2013 19:30:23 -0000 Received: from elektropost.org (HELO elektropost.org) (erdgeist@erdgeist.org) by elektropost.org with CAMELLIA256-SHA encrypted SMTP; 11 Oct 2013 19:30:23 -0000 Message-ID: <525851CE.6010808@erdgeist.org> Date: Fri, 11 Oct 2013 21:30:22 +0200 From: Dirk Engling User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:24.0) Gecko/20100101 Thunderbird/24.0 MIME-Version: 1.0 To: wishmaster Subject: Re: ezjail and UPDATING20131010 References: <20131011170340.47C726018E@smtp.hushmail.com> <1381512663.13242.32914813.65C2C03E@webmail.messagingengine.com> <1381513083.390908110.b6zxrgl9@frv34.ukr.net> <5258412F.7040301@erdgeist.org> <1381516978.924807986.pfyyx7nl@frv34.ukr.net> <52584CD1.8020707@erdgeist.org> <1381519020.168298097.2gv7zpen@frv34.ukr.net> In-Reply-To: <1381519020.168298097.2gv7zpen@frv34.ukr.net> X-Enigmail-Version: 1.5.2 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Cc: freebsd-jail@freebsd.org X-BeenThere: freebsd-jail@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "Discussion about FreeBSD jail\(8\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 11 Oct 2013 19:30:26 -0000 On 11.10.13 21:27, wishmaster wrote: > Yeah!? But do you think updating python in each jail this is the > right solution? Freebsd-update in each jail?? What about when number > of jails is 10 or about. My server is very high loaded and I use > tunable custom kernel and world. Don't use jails then. Better go and order ten servers and use the amazing features of ... well, d'oh. Puppet? erdgeist From owner-freebsd-jail@FreeBSD.ORG Fri Oct 11 19:38:38 2013 Return-Path: Delivered-To: freebsd-jail@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTP id 2DD76F37 for ; Fri, 11 Oct 2013 19:38:38 +0000 (UTC) (envelope-from artemrts@ukr.net) Received: from frv198.fwdcdn.com (frv198.fwdcdn.com [212.42.77.198]) (using TLSv1.2 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id C87322DC1 for ; Fri, 11 Oct 2013 19:38:37 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ukr.net; s=ffe; h=Content-Transfer-Encoding:Content-Type:MIME-Version:References:In-Reply-To:Message-Id:Cc:To:Subject:From:Date; bh=qChmTtVKtCc92CPx01QXwvArEuqTsnqeTA/VeXZwQ8w=; b=HSRmJ8lW8w5E6kL1jR6vRCJ0fW78Qzy6i3+ektPlPxIoQ6h2+3Ab3aOUaWHDY2knOnxj9KVQd4gPK1syo8gTPPfS2mbQKP2KyoK1O6oJkrQWQdr3YpFIhMDBv0vX1w0Z7rE9Dl/PiGynkWBbNQSxThAPvfSRn8Jc8yIwCnEjtF0=; Received: from [10.10.10.34] (helo=frv34.ukr.net) by frv198.fwdcdn.com with smtp ID 1VUiXj-000Ntx-7V for freebsd-jail@freebsd.org; Fri, 11 Oct 2013 22:38:35 +0300 Date: Fri, 11 Oct 2013 22:38:34 +0300 From: wishmaster Subject: Re[2]: ezjail and UPDATING20131010 To: Dirk Engling X-Mailer: freemail.ukr.net 5.0 Message-Id: <1381519935.956562961.3paf9q8f@frv34.ukr.net> In-Reply-To: <525851CE.6010808@erdgeist.org> References: <20131011170340.47C726018E@smtp.hushmail.com> <1381512663.13242.32914813.65C2C03E@webmail.messagingengine.com> <1381513083.390908110.b6zxrgl9@frv34.ukr.net> <5258412F.7040301@erdgeist.org> <1381516978.924807986.pfyyx7nl@frv34.ukr.net> <52584CD1.8020707@erdgeist.org> <1381519020.168298097.2gv7zpen@frv34.ukr.net> <525851CE.6010808@erdgeist.org> MIME-Version: 1.0 Received: from artemrts@ukr.net by frv34.ukr.net; Fri, 11 Oct 2013 22:38:34 +0300 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: binary Content-Disposition: inline Cc: freebsd-jail@freebsd.org X-BeenThere: freebsd-jail@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "Discussion about FreeBSD jail\(8\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 11 Oct 2013 19:38:38 -0000 --- Original message --- From: "Dirk Engling" Date: 11 October 2013, 22:30:24 > On 11.10.13 21:27, wishmaster wrote: > > > Yeah!? But do you think updating python in each jail this is the > > right solution? Freebsd-update in each jail?? What about when number > > of jails is 10 or about. My server is very high loaded and I use > > tunable custom kernel and world. > > Don't use jails then. Better go and order ten servers and use the > amazing features of ... well, d'oh. Puppet? No, no :-). I carefully bring you to through that very often own solution is preferable (see my first message). Yes. I use jails with vnet and has own solution which gives me this "amazing features". :-) From owner-freebsd-jail@FreeBSD.ORG Fri Oct 11 20:42:13 2013 Return-Path: Delivered-To: freebsd-jail@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTP id 39560667 for ; Fri, 11 Oct 2013 20:42:13 +0000 (UTC) (envelope-from feld@FreeBSD.org) Received: from out1-smtp.messagingengine.com (out1-smtp.messagingengine.com [66.111.4.25]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id 0ABB92276 for ; Fri, 11 Oct 2013 20:42:12 +0000 (UTC) Received: from compute2.internal (compute2.nyi.mail.srv.osa [10.202.2.42]) by gateway1.nyi.mail.srv.osa (Postfix) with ESMTP id 8F1AB21B57 for ; Fri, 11 Oct 2013 16:42:11 -0400 (EDT) Received: from web3 ([10.202.2.213]) by compute2.internal (MEProxy); Fri, 11 Oct 2013 16:42:11 -0400 DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d= messagingengine.com; h=message-id:from:to:mime-version :content-transfer-encoding:content-type:subject:date:in-reply-to :references; s=smtpout; bh=RV4XX+QVpVtl76szMNenop5A8CE=; b=paxvY pozkYQO+FVxQCzVMr54u+Sje7dJkqd7yoBf4KgcP+82cAfTwgR9XRDC7pzhsZKLd qyjr2TimV6lOITihWmboi94FU0ljAkJg2NL3lI9G8wGeUwdhxgiNozbUNNbKPW4Z 4xzCA/OklE16Xb5A1HSASSnb4D0/stku25ijHI= Received: by web3.nyi.mail.srv.osa (Postfix, from userid 99) id 71D8E10C786; Fri, 11 Oct 2013 16:42:11 -0400 (EDT) Message-Id: <1381524131.18383.32977989.102BAA48@webmail.messagingengine.com> X-Sasl-Enc: 7hUQsAX1lT+qWOjv4+T5SLGEWkg3ZJ/c+9yjCqcBjnnb 1381524131 From: Mark Felder To: freebsd-jail@freebsd.org MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Type: text/plain X-Mailer: MessagingEngine.com Webmail Interface - ajax-ce174988 Subject: Re: ezjail and UPDATING20131010 Date: Fri, 11 Oct 2013 15:42:11 -0500 In-Reply-To: <525851CE.6010808@erdgeist.org> References: <20131011170340.47C726018E@smtp.hushmail.com> <1381512663.13242.32914813.65C2C03E@webmail.messagingengine.com> <1381513083.390908110.b6zxrgl9@frv34.ukr.net> <5258412F.7040301@erdgeist.org> <1381516978.924807986.pfyyx7nl@frv34.ukr.net> <52584CD1.8020707@erdgeist.org> <1381519020.168298097.2gv7zpen@frv34.ukr.net> <525851CE.6010808@erdgeist.org> X-BeenThere: freebsd-jail@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "Discussion about FreeBSD jail\(8\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 11 Oct 2013 20:42:13 -0000 On Fri, Oct 11, 2013, at 14:30, Dirk Engling wrote: > On 11.10.13 21:27, wishmaster wrote: > > > Yeah!? But do you think updating python in each jail this is the > > right solution? Freebsd-update in each jail?? What about when number > > of jails is 10 or about. My server is very high loaded and I use > > tunable custom kernel and world. > > Don't use jails then. Better go and order ten servers and use the > amazing features of ... well, d'oh. Puppet? > This is not the right attitude to approach this problem. From owner-freebsd-jail@FreeBSD.ORG Sat Oct 12 00:13:51 2013 Return-Path: Delivered-To: freebsd-jail@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTP id 2ABC1EF3 for ; Sat, 12 Oct 2013 00:13:51 +0000 (UTC) (envelope-from kentas@hush.com) Received: from smtp10.hushmail.com (smtp10.hushmail.com [65.39.178.143]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id 116CB2D16 for ; Sat, 12 Oct 2013 00:13:50 +0000 (UTC) Received: from smtp10.hushmail.com (localhost [127.0.0.1]) by smtp10.hushmail.com (Postfix) with SMTP id D58EFC01EB for ; Sat, 12 Oct 2013 00:13:49 +0000 (UTC) Received: from smtp.hushmail.com (w6.hushmail.com [65.39.178.92]) by smtp10.hushmail.com (Postfix) with ESMTP; Sat, 12 Oct 2013 00:13:49 +0000 (UTC) Received: by smtp.hushmail.com (Postfix, from userid 99) id 9111660191; Sat, 12 Oct 2013 00:13:49 +0000 (UTC) MIME-Version: 1.0 Date: Fri, 11 Oct 2013 20:13:49 -0400 To: "Fbsd8" Subject: Re: ezjail and UPDATING20131010 From: "Kenta Suzumoto" In-Reply-To: <5258939C.2010909@a1poweruser.com> References: <20131011170340.47C726018E@smtp.hushmail.com> <5258939C.2010909@a1poweruser.com> Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="UTF-8" Message-Id: <20131012001349.9111660191@smtp.hushmail.com> Cc: freebsd-jail@freebsd.org X-BeenThere: freebsd-jail@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "Discussion about FreeBSD jail\(8\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 12 Oct 2013 00:13:51 -0000 On 10/11/2013 at 8:11 PM, "Fbsd8" wrote: >The jail rc.script environment in 10.0 has been patched to convert all >the jail rc.conf parameters to the new jail(8) format and then exec >jail(8). This is in preparation for depreciating the jail.conf jail >parameters. > >ezjail uses the rc.conf jail parameters and needs to be updated to use >the native jail(8) parameters. Until that gets done ezjail only works >with 9.2 and older versions of FreeBSD. The qjail utility uses the >native jail(8) parameters right now. Give it a try. Thanks but no thanks. I'm not interested in a ripoff project that doesn't give credit to the original work it stole from. I'll wait for ezjail to be updated or hrs@ to submit his patch to -CURRENT. From owner-freebsd-jail@FreeBSD.ORG Sat Oct 12 00:29:54 2013 Return-Path: Delivered-To: freebsd-jail@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTP id E80F11CC for ; Sat, 12 Oct 2013 00:29:54 +0000 (UTC) (envelope-from fbsd8@a1poweruser.com) Received: from relay.mailchannels.net (si-002-i28.relay.mailchannels.net [184.154.112.193]) by mx1.freebsd.org (Postfix) with ESMTP id 90FCF2DA6 for ; Sat, 12 Oct 2013 00:29:53 +0000 (UTC) X-Sender-Id: demandmedia|env-sender|fbsd8@a1poweruser.com Received: from mail-24.name-services.com (ip-10-244-196-74.us-west-2.compute.internal [10.244.196.74]) by relay.mailchannels.net (Postfix) with ESMTPA id 74D666C64; Sat, 12 Oct 2013 00:11:33 +0000 (UTC) X-Sender-Id: demandmedia|env-sender|fbsd8@a1poweruser.com Received: from mail-24.name-services.com (mail-24.name-services.com [10.246.16.22]) (using TLSv1 with cipher AES128-SHA) by 0.0.0.0:2500 (trex/5.0.11); Sat, 12 Oct 2013 00:11:33 GMT X-MC-Relay: Neutral X-MailChannels-SenderId: demandmedia%7Cenv-sender%7Cfbsd8%40a1poweruser.com X-MailChannels-Auth-Id: demandmedia Received: from [192.168.1.149] (UnknownHost [121.58.220.239]) by mail-24.name-services.com with SMTP; Fri, 11 Oct 2013 17:11:27 -0700 Message-ID: <5258939C.2010909@a1poweruser.com> Date: Fri, 11 Oct 2013 20:11:08 -0400 From: Fbsd8 User-Agent: Thunderbird 2.0.0.17 (Windows/20080914) MIME-Version: 1.0 To: Kenta Suzumoto Subject: Re: ezjail and UPDATING20131010 References: <20131011170340.47C726018E@smtp.hushmail.com> In-Reply-To: <20131011170340.47C726018E@smtp.hushmail.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: freebsd-jail@freebsd.org X-BeenThere: freebsd-jail@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "Discussion about FreeBSD jail\(8\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 12 Oct 2013 00:29:55 -0000 Kenta Suzumoto wrote: > Hi there. I updated to 10-STABLE after it was branched and suddenly none > of my [ez]jails will start. Does it have anything to do with the entry in UPDATING? > What's the best way to solve it? > The jail rc.script environment in 10.0 has been patched to convert all the jail rc.conf parameters to the new jail(8) format and then exec jail(8). This is in preparation for depreciating the jail.conf jail parameters. ezjail uses the rc.conf jail parameters and needs to be updated to use the native jail(8) parameters. Until that gets done ezjail only works with 9.2 and older versions of FreeBSD. The qjail utility uses the native jail(8) parameters right now. Give it a try. From owner-freebsd-jail@FreeBSD.ORG Sat Oct 12 05:24:45 2013 Return-Path: Delivered-To: freebsd-jail@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTP id 3459C595; Sat, 12 Oct 2013 05:24:45 +0000 (UTC) (envelope-from alexander@leidinger.net) Received: from mail.ebusiness-leidinger.de (mail.ebusiness-leidinger.de [217.11.53.44]) by mx1.freebsd.org (Postfix) with ESMTP id 834542A77; Sat, 12 Oct 2013 05:24:44 +0000 (UTC) Received: from outgoing.leidinger.net (p57A38B9A.dip0.t-ipconnect.de [87.163.139.154]) by mail.ebusiness-leidinger.de (Postfix) with ESMTPSA id 6894D844010; Sat, 12 Oct 2013 07:24:16 +0200 (CEST) Received: from unknown (Titan.Leidinger.net [192.168.1.17]) by outgoing.leidinger.net (Postfix) with ESMTP id E027D1CD7; Sat, 12 Oct 2013 07:24:12 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=leidinger.net; s=outgoing-alex; t=1381555452; bh=HyXDU8FRexYmSRQ/OFzo+vIr5Wl+OsSnFxznv+bqfig=; h=Date:From:To:Cc:Subject:In-Reply-To:References; b=u/K6lXp9B5XZIaS8AEG4O7KnYvr/MAXRemJwH3hgheTQX6QgUZYIqw3a1JMtHuiN1 GMRh/NtmYANpOiCPQld3iZAxxgxcePNXJHuAvxEF8ld89IGl+mSVknEg+ML52n4B6v Mn7y5lVlCE79aADzGDK3lKICD8MzCyUP9EQEaQLc4mnklAmMcPTvdEy49Nsxg2J4pz BGM0tyukIAdVb1y+/2FOES//7YLKSOlm8dnLxjmpMuYvgORU7++/LUg5TTdEan4Gk9 kwUg8AV+PqHmyWvx1bP4O//iORW66NB1ArmsA5fBLx09Mre62V9VzJAzHUl14NsZvA Rg1g5sbvRJ3aA== Date: Sat, 12 Oct 2013 07:24:14 +0200 From: Alexander Leidinger To: Mark Felder Subject: Re: ezjail and UPDATING20131010 Message-ID: <20131012072414.000058ea@unknown> In-Reply-To: <1381524131.18383.32977989.102BAA48@webmail.messagingengine.com> References: <20131011170340.47C726018E@smtp.hushmail.com> <1381512663.13242.32914813.65C2C03E@webmail.messagingengine.com> <1381513083.390908110.b6zxrgl9@frv34.ukr.net> <5258412F.7040301@erdgeist.org> <1381516978.924807986.pfyyx7nl@frv34.ukr.net> <52584CD1.8020707@erdgeist.org> <1381519020.168298097.2gv7zpen@frv34.ukr.net> <525851CE.6010808@erdgeist.org> <1381524131.18383.32977989.102BAA48@webmail.messagingengine.com> X-Mailer: Claws Mail 3.9.2-55-g74b05b (GTK+ 2.16.6; i586-pc-mingw32msvc) MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-EBL-MailScanner-Information: Please contact the ISP for more information X-EBL-MailScanner-ID: 6894D844010.AFFFD X-EBL-MailScanner: Found to be clean X-EBL-MailScanner-SpamCheck: not spam, spamhaus-ZEN, SpamAssassin (not cached, score=-1.109, required 6, autolearn=disabled, ALL_TRUSTED -1.00, AWL -0.08, DKIM_SIGNED 0.10, DKIM_VALID -0.10, DKIM_VALID_AU -0.10, TW_ZJ 0.08, T_RP_MATCHES_RCVD -0.01, URIBL_BLOCKED 0.00) X-EBL-MailScanner-From: alexander@leidinger.net X-EBL-MailScanner-Watermark: 1382160256.9412@bi/hRoMKsZ2z8k9g5bObYg X-EBL-Spam-Status: No Cc: freebsd-jail@freebsd.org X-BeenThere: freebsd-jail@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "Discussion about FreeBSD jail\(8\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 12 Oct 2013 05:24:45 -0000 On Fri, 11 Oct 2013 15:42:11 -0500 Mark Felder wrote: > On Fri, Oct 11, 2013, at 14:30, Dirk Engling wrote: > > On 11.10.13 21:27, wishmaster wrote: > > > > > Yeah!? But do you think updating python in each jail this is the > > > right solution? Freebsd-update in each jail?? What about when > > > number of jails is 10 or about. My server is very high loaded and > > > I use tunable custom kernel and world. > > > > Don't use jails then. Better go and order ten servers and use the > > amazing features of ... well, d'oh. Puppet? > > > > This is not the right attitude to approach this problem. Let's take what is good from it: puppet or any other similar software. No matter if the servers are virtualized or not, such a software is designed to handle the package/config part of the question. With this you can even decide which servers get an update of software X instead of automatically updating every server and running into problems (major updates of PHP come into my mind here). Regarding OS updates (and I assume manual installworld updates in the question as freebsd-update is not considered an option) I use: ---snip--- cd /usr/src for jail in /path/to/jails/*; do echo $jail sleep 5 mergemaster -D $jail make DESTDIR=$jail delete-old -DBATCH_DELETE_OLD_FILES make DESTDIR=$jail check-old # list old libs fi make DESTDIR=/path/to/basejail delete-old -DBATCH_DELETE_OLD_FILES ---snip--- Depending on the situation I use delete-old-libs instead of check-libs (I know what gets deleted from the update of the jail-host) or issue the delete-old-libs later when all jails don't use the libs anymore. Bye, Alexander. -- http://www.Leidinger.net Alexander @ Leidinger.net: PGP ID = B0063FE7 http://www.FreeBSD.org netchild @ FreeBSD.org : PGP ID = 72077137 From owner-freebsd-jail@FreeBSD.ORG Sat Oct 12 08:55:18 2013 Return-Path: Delivered-To: freebsd-jail@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTP id F2D41446 for ; Sat, 12 Oct 2013 08:55:18 +0000 (UTC) (envelope-from erdgeist@erdgeist.org) Received: from elektropost.org (elektropost.org [217.115.13.199]) by mx1.freebsd.org (Postfix) with ESMTP id 32AA021D0 for ; Sat, 12 Oct 2013 08:55:17 +0000 (UTC) Received: (qmail 18776 invoked from network); 12 Oct 2013 08:55:15 -0000 Received: from elektropost.org (HELO elektropost.org) (erdgeist@erdgeist.org) by elektropost.org with CAMELLIA256-SHA encrypted SMTP; 12 Oct 2013 08:55:15 -0000 Message-ID: <52590E73.8070305@erdgeist.org> Date: Sat, 12 Oct 2013 10:55:15 +0200 From: Dirk Engling User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:24.0) Gecko/20100101 Thunderbird/24.0 MIME-Version: 1.0 CC: freebsd-jail@freebsd.org Subject: Re: ezjail and UPDATING20131010 References: <20131011170340.47C726018E@smtp.hushmail.com> <1381512663.13242.32914813.65C2C03E@webmail.messagingengine.com> <1381513083.390908110.b6zxrgl9@frv34.ukr.net> <5258412F.7040301@erdgeist.org> <1381516978.924807986.pfyyx7nl@frv34.ukr.net> <52584CD1.8020707@erdgeist.org> <1381519020.168298097.2gv7zpen@frv34.ukr.net> <525851CE.6010808@erdgeist.org> <1381524131.18383.32977989.102BAA48@webmail.messagingengine.com> <20131012072414.000058ea@unknown> In-Reply-To: <20131012072414.000058ea@unknown> X-Enigmail-Version: 1.5.2 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-jail@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "Discussion about FreeBSD jail\(8\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 12 Oct 2013 08:55:19 -0000 On 12.10.13 07:24, Alexander Leidinger wrote: > Regarding OS updates (and I assume manual installworld updates in the > question as freebsd-update is not considered an option) I use: Well, running freebsd-update on all the jails with IgnorePaths set to "/[^e][^t][^c].*" does the trick > ---snip--- > cd /usr/src > for jail in /path/to/jails/*; do > echo $jail > sleep 5 > mergemaster -D $jail > make DESTDIR=$jail delete-old -DBATCH_DELETE_OLD_FILES > make DESTDIR=$jail check-old # list old libs > fi > make DESTDIR=/path/to/basejail delete-old -DBATCH_DELETE_OLD_FILES That assumes you have the sources handy which is not always the case. erdgeist From owner-freebsd-jail@FreeBSD.ORG Sat Oct 12 15:25:12 2013 Return-Path: Delivered-To: freebsd-jail@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTP id 354E4154 for ; Sat, 12 Oct 2013 15:25:12 +0000 (UTC) (envelope-from jase@FreeBSD.org) Received: from smtp.btshosting.co.uk (mx-2.btshosting.co.uk [IPv6:2a01:4f8:121:2403:2::]) (using TLSv1 with cipher ADH-CAMELLIA256-SHA (256/256 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id E8F3B2267 for ; Sat, 12 Oct 2013 15:25:11 +0000 (UTC) Received: from [192.168.1.65] (unknown [94.4.78.78]) (using TLSv1 with cipher DHE-RSA-CAMELLIA256-SHA (256/256 bits)) (No client certificate requested) by svr06-mx.btshosting.co.uk (Postfix) with ESMTPSA id 7135E836CB; Sat, 12 Oct 2013 15:25:07 +0000 (UTC) Message-ID: <525969D0.7010901@FreeBSD.org> Date: Sat, 12 Oct 2013 16:25:04 +0100 From: Jase Thew Organization: The FreeBSD Project User-Agent: Mozilla/5.0 (Windows NT 6.2; WOW64; rv:24.0) Gecko/20100101 Thunderbird/24.0.1 MIME-Version: 1.0 To: Kenta Suzumoto , Fbsd8 Subject: Re: ezjail and UPDATING20131010 References: <20131011170340.47C726018E@smtp.hushmail.com> <5258939C.2010909@a1poweruser.com> <20131012001349.9111660191@smtp.hushmail.com> In-Reply-To: <20131012001349.9111660191@smtp.hushmail.com> X-Enigmail-Version: 1.5.2 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Cc: freebsd-jail@freebsd.org X-BeenThere: freebsd-jail@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "Discussion about FreeBSD jail\(8\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 12 Oct 2013 15:25:12 -0000 On 12/10/2013 01:13, Kenta Suzumoto wrote: > > > On 10/11/2013 at 8:11 PM, "Fbsd8" wrote: >> The jail rc.script environment in 10.0 has been patched to convert all >> the jail rc.conf parameters to the new jail(8) format and then exec >> jail(8). This is in preparation for depreciating the jail.conf jail >> parameters. >> >> ezjail uses the rc.conf jail parameters and needs to be updated to use >> the native jail(8) parameters. Until that gets done ezjail only works >> with 9.2 and older versions of FreeBSD. The qjail utility uses the >> native jail(8) parameters right now. Give it a try. > > Thanks but no thanks. I'm not interested in a ripoff project that doesn't > give credit to the original work it stole from. I'll wait for ezjail to be updated > or hrs@ to submit his patch to -CURRENT. > +1 -- Jase Thew jase@FreeBSD.org FreeBSD Ports Committer