From owner-freebsd-jail@FreeBSD.ORG Mon Mar 3 11:07:11 2008 Return-Path: Delivered-To: freebsd-jail@hub.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 0EB4D1065676 for ; Mon, 3 Mar 2008 11:07:11 +0000 (UTC) (envelope-from owner-bugmaster@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id 083578FC13 for ; Mon, 3 Mar 2008 11:07:11 +0000 (UTC) (envelope-from owner-bugmaster@FreeBSD.org) Received: from freefall.freebsd.org (localhost [127.0.0.1]) by freefall.freebsd.org (8.14.2/8.14.2) with ESMTP id m23B7AVG022095 for ; Mon, 3 Mar 2008 11:07:10 GMT (envelope-from owner-bugmaster@FreeBSD.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.14.2/8.14.1/Submit) id m23B7ABp022091 for freebsd-jail@FreeBSD.org; Mon, 3 Mar 2008 11:07:10 GMT (envelope-from owner-bugmaster@FreeBSD.org) Date: Mon, 3 Mar 2008 11:07:10 GMT Message-Id: <200803031107.m23B7ABp022091@freefall.freebsd.org> X-Authentication-Warning: freefall.freebsd.org: gnats set sender to owner-bugmaster@FreeBSD.org using -f From: FreeBSD bugmaster To: freebsd-jail@FreeBSD.org Cc: Subject: Current problem reports assigned to freebsd-jail@FreeBSD.org X-BeenThere: freebsd-jail@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Discussion about FreeBSD jail\(8\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 03 Mar 2008 11:07:11 -0000 Current FreeBSD problem reports Critical problems Serious problems S Tracker Resp. Description -------------------------------------------------------------------------------- s kern/89528 jail [jail] [patch] impossible to kill a jail o kern/119842 jail [smbfs] [jail] "Bad address" with smbfs inside a jail 2 problems total. Non-critical problems S Tracker Resp. Description -------------------------------------------------------------------------------- o bin/32828 jail [jail] w(1) incorrectly handles stale utmp slots with o kern/68192 jail [quotas] [jail] Cannot use quotas on jailed systems o kern/72498 jail [libc] [jail] timestamp code on jailed SMP machine gen o kern/74314 jail [resolver] [jail] DNS resolver broken under certain ja o kern/84215 jail [jail] [patch] wildcard ip (INADDR_ANY) should not bin o kern/89989 jail [jail] [patch] Add option -I (ASCII 73) PID to specif o kern/97071 jail [jail] [patch] add security.jail.jid sysctl o bin/99566 jail [jail] [patch] fstat(1) according to specified jid o bin/119305 jail [jail] [patch] jexec(8): jexec -n prisonname: selectio o kern/120753 jail [jail] Zombie jails (jailed child process exits while 10 problems total. From owner-freebsd-jail@FreeBSD.ORG Sat Mar 8 17:58:08 2008 Return-Path: Delivered-To: freebsd-jail@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 92199106566C for ; Sat, 8 Mar 2008 17:58:08 +0000 (UTC) (envelope-from jeffrey.smith@futurecis.com) Received: from mail1.futurecis.com (static-72-66-21-14.washdc.fios.verizon.net [72.66.21.14]) by mx1.freebsd.org (Postfix) with ESMTP id 37ADA8FC1A for ; Sat, 8 Mar 2008 17:58:08 +0000 (UTC) (envelope-from jeffrey.smith@futurecis.com) Received: (qmail 29633 invoked from network); 8 Mar 2008 17:31:25 -0000 Received: from unknown (HELO [10.0.0.44]) ([10.0.0.44]) (envelope-sender ) by mail1.futurecis.com (qmail-ldap-1.03) with SMTP for ; 8 Mar 2008 17:31:25 -0000 From: Jeffrey Smith To: freebsd-jail@freebsd.org Content-Type: text/plain; charset=iso-8859-13 Organization: FutureCIS Date: Sat, 08 Mar 2008 12:31:28 -0500 Message-Id: <1204997488.26124.45.camel@mrwizard.futurecis.com> Mime-Version: 1.0 X-Mailer: Evolution 2.12.3 FreeBSD GNOME Team Port Content-Transfer-Encoding: 8bit Subject: ZFS Jails Management X-BeenThere: freebsd-jail@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Discussion about FreeBSD jail\(8\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 08 Mar 2008 17:58:08 -0000 I created a little cheat sheet for ZFS Jails (don't know if already exists, can't find it by google). This works but was wondering if there was a better way, or ways to improve this. ZFS Jails #zpool create pool #zfs create -o mountpoint=jails pool/jails #zfs create pool/jails/jailbase #mkdir -p /jails/7.0-RELEASE/base /jails/7.0-RELEASE/manpages #cd /jails/7.0-RELEASE/base NOTE: Files can also be copied from Disc1 cdrom #ftp ftp.freebsd.org:/pub/FreeBSD/releases/amd64/7.0-RELEASE/base/ ftp>mget * ftp>cd ../manpages ftp>lcd ../manpages ftp>mget * ftp>exit #export DESTDIR=/jails/jailbase #sh install.sh #cd ../manpages #sh install.sh #export DESTDIR=ˇˇ #mkdir -p /jails/jailbase/usr/ports #mount_nullfs /usr/ports /jails/jailbase/usr/ports #touch /jails/jailbase/etc/fstab #cp /etc/resolv.conf /jails/jailbase/etc #vi /etc/rc.conf # # Jail Defaults # jail_enable=ˇYESˇ jail_set_hostname_allow=ˇNOˇ jail_interface=ˇbge0ˇ jail_devfs_enable=ˇYESˇ jail_list=ˇjailbaseˇ # # jailbase.example.org # jail_jailbase_hostname=ˇjailbase.example.orgˇ jail_jailbase_ip=ˇ192.168.0.50ˇ jail_jailbase_rootdir=ˇ/jails/jailbaseˇ :wq #/etc/rc.d/jail start #jls #jexec 1 tcsh #set autolist NOTE: freebsd-update appears to work, but no updates are yet available for 7.0 to test this further Install ports or packages that all jails will require, such as bash and vim-lite #exit Back to host #zfs snapshot pool/jails/jailbase@YYYYMMDD# #zfs clone pool/jails/jailbase@YYYYMMDD# pool/jails/ns #zfs clone pool/jails/jailbase@YYYYMMDD# pool/jails/mail #zfs clone pool/jails/jailbase@YYYYMMDD# pool/jails/www #vi /etc/rc.conf ...snip... jail_list=ˇjailroot ns mail wwwˇ ...snip... # # ns.example.org # jail_ns_hostname=ˇns.example.orgˇ jail_ns_ip=ˇ192.168.0.51ˇ jail_ns_rootdir=ˇ/jails/nsˇ # # mail.example.org # jail_mail_hostname=ˇmail.example.orgˇ jail_mail_ip=ˇ192.168.0.52ˇ jail_ns_rootdir=ˇ/jails/mailˇ # # www.example.org # jail_www_hostname=ˇwww.example.orgˇ jail_www_ip=ˇ192.168.0.53ˇ jail_www_rootdir=ˇ/jails/wwwˇ :wq #/etc/rc.d/jail start #jls