From owner-freebsd-jail@FreeBSD.ORG Mon Aug 23 04:36:51 2010 Return-Path: Delivered-To: freebsd-jail@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 4B39A1065698 for ; Mon, 23 Aug 2010 04:36:51 +0000 (UTC) (envelope-from askjuise@gmail.com) Received: from mail-qy0-f175.google.com (mail-qy0-f175.google.com [209.85.216.175]) by mx1.freebsd.org (Postfix) with ESMTP id F334B8FC15 for ; Mon, 23 Aug 2010 04:36:50 +0000 (UTC) Received: by qyk8 with SMTP id 8so2566453qyk.13 for ; Sun, 22 Aug 2010 21:36:50 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:received:date:message-id :subject:from:to:content-type; bh=g+PsS14i7hfypKuY0XJ1N95eycBy6lHqe4TuKdqGAsM=; b=JuR17dfuns04l6ncr1244spYHL7VwdrKJpGCVsbsuhbNDNx5c1nc55fDmfodWhkfNm 7bDoidvysWt4zbFsCJ7jQzclbKVtWsefq0uSLnnks0IWPi+9ZGw9vTaCDYwEJVlnf4bt AoCcn3+kj5shxKLnMBWDxAPGqV1OwGqEN2v2s= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:date:message-id:subject:from:to:content-type; b=tDhwXht4wRa7FrAkshoV8/8lFXpnh8nINM3chmQqMnRU01fZvzhwwYjTERvliBOLe9 NVPRCv6a/o+e/Yb8mqtmCuiEU5gpYixTnQ3H/YReOO41KZ7sM3sj0pM51CDlGhW78pou ia7ehxPguz8U62QQax3Wpd7tl0IwDE0hb7njA= MIME-Version: 1.0 Received: by 10.229.80.15 with SMTP id r15mr241382qck.95.1282538207801; Sun, 22 Aug 2010 21:36:47 -0700 (PDT) Received: by 10.229.50.197 with HTTP; Sun, 22 Aug 2010 21:36:47 -0700 (PDT) Date: Mon, 23 Aug 2010 13:36:47 +0900 Message-ID: From: Alexander Petrovsky To: freebsd-jail@freebsd.org Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable X-Content-Filtered-By: Mailman/MimeDel 2.1.5 Subject: sysvipc problem X-BeenThere: freebsd-jail@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Discussion about FreeBSD jail\(8\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 23 Aug 2010 04:36:51 -0000 Hi! I have two servers for jail virtualization: 1. Only ezjail framework: # uname -a FreeBSD troll.golodnyj.ru 8.0-STABLE FreeBSD 8.0-STABLE #0 r199880: Thu Dec 3 13:35:21 IRKT 2009 alexander@troll.golodnyj.ru:/usr/obj/usr/src/sys/WEBKERNEL i386 # cat /etc/rc.conf | grep jail jail_sysvipc_allow=3D"YES" ezjail_enable=3D"YES" # less /usr/local/etc/ezjail/www # To specify the start up order of your ezjails, use these lines to # create a Jail dependency tree. See rcorder(8) for more details. # # PROVIDE: standard_ezjail # REQUIRE: # BEFORE: # export jail_www_hostname=3D"www" export jail_www_ip=3D"84.237.22.15,192.168.47.15" export jail_www_rootdir=3D"/var/jails/www" export jail_www_exec=3D"/bin/sh /etc/rc" export jail_www_mount_enable=3D"YES" export jail_www_devfs_enable=3D"YES" export jail_www_devfs_ruleset=3D"devfsrules_jail" export jail_www_procfs_enable=3D"YES" export jail_www_fdescfs_enable=3D"YES" export jail_www_image=3D"" export jail_www_imagetype=3D"" export jail_www_attachparams=3D"" export jail_www_attachblocking=3D"" export jail_www_forceblocking=3D"" # jls -v JID Hostname Path Name State CPUSetID IP Address(es) 1 www /var/jails/www 1 ACTIVE 2 84.237.22.15 192.168.47.15 # sysctl security.jail.sysvipc_allowed security.jail.sysvipc_allowed: 1 # jexec 1 sysctl security.jail.sysvipc_allowed security.jail.sysvipc_allowed: 1 ------------------------------------------------------------------- 2. ezjail framework and patched jail rc script # uname -a FreeBSD garem.golodnyj.ru 8.0-STABLE FreeBSD 8.0-STABLE #0: Fri Feb 19 16:36:58 IRKT 2010 alexander@:/usr/obj/usr/src/sys/GAREMKERNEL amd64 # cat /etc/rc.conf | grep jail jail_enable=3D"YES" jail_v2_enable=3D"YES" ezjail_enable=3D"YES" jail_sysvipc_allow=3D"YES" jail_set_hostname_allow=3D"YES" jail_list=3D"" jail_list=3D"$jail_list jail01" jail_jail01_hostname=3D"propeller" jail_jail01_rootdir=3D"/var/jails/${jail_jail01_name}" jail_jail01_vnet_enable=3D"YES" jail_jail01_mount_enable=3D"YES" jail_jail01_devfs_enable=3D"YES" jail_jail01_devfs_ruleset=3D"devfsrules_jail" jail_jail01_exec_erlyprestart0=3D"mdconfig -a -t vnode -f /var/jails/img/${jail_jail01_name} -u 1" jail_jail01_exec_prestart0=3D"ifconfig epair1 create" jail_jail01_exec_prestart1=3D"ifconfig epair2 create" jail_jail01_exec_prestart2=3D"ifconfig epair1b up" jail_jail01_exec_prestart3=3D"ifconfig epair2b up" jail_jail01_exec_prestart4=3D"ifconfig bridge0 addm epair1b" jail_jail01_exec_prestart5=3D"ifconfig bridge1 addm epair2b" jail_jail01_exec_earlypoststart0=3D"ifconfig epair1a vnet ${jail_jail01_nam= e}" jail_jail01_exec_earlypoststart1=3D"ifconfig epair2a vnet ${jail_jail01_nam= e}" jail_jail01_exec_afterstart0=3D"ifconfig lo0 127.0.0.1" jail_jail01_exec_afterstart1=3D"ifconfig epair1a name igb0" jail_jail01_exec_afterstart2=3D"ifconfig epair2a name igb1" jail_jail01_exec_afterstart3=3D"ifconfig igb0 84.237.22.14 netmask 0xffffff= 80" jail_jail01_exec_afterstart4=3D"ifconfig igb1 192.168.6.14 netmask 0xffffff= 00" jail_jail01_exec_afterstart5=3D"route add default 84.237.22.1" jail_jail01_exec_afterstart6=3D"route add -net 192.168.0.0/16 192.168.6.1" jail_jail01_exec_afterstart7=3D"/bin/sh /etc/rc" jail_jail01_exec_poststop0=3D"ifconfig bridge0 deletem epair1b" jail_jail01_exec_poststop1=3D"ifconfig bridge1 deletem epair2b" jail_jail01_exec_poststop2=3D"ifconfig epair1b destroy" jail_jail01_exec_poststop3=3D"ifconfig epair2b destroy" jail_jail01_exec_poststop4=3D"mdconfig -d -u 1" # cat /usr/local/etc/ezjail/gerda # To specify the start up order of your ezjails, use these lines to # create a Jail dependency tree. See rcorder(8) for more details. # # PROVIDE: standard_ezjail # REQUIRE: # BEFORE: # export jail_gerda_hostname=3D"gerda" export jail_gerda_ip=3D"84.237.22.5,192.168.6.5" export jail_gerda_rootdir=3D"/var/jails/gerda" export jail_gerda_exec_start=3D"/bin/sh /etc/rc" export jail_gerda_exec_stop=3D"" export jail_gerda_mount_enable=3D"YES" export jail_gerda_devfs_enable=3D"YES" export jail_gerda_devfs_ruleset=3D"devfsrules_jail" export jail_gerda_procfs_enable=3D"YES" export jail_gerda_fdescfs_enable=3D"YES" export jail_gerda_image=3D"" export jail_gerda_imagetype=3D"" export jail_gerda_attachparams=3D"" export jail_gerda_attachblocking=3D"" export jail_gerda_forceblocking=3D"" export jail_gerda_zfs_datasets=3D"" export jail_gerda_cpuset=3D"2" export jail_gerda_fib=3D"0" # jls -v JID Hostname Path Name State CPUSetID IP Address(es) 4 gerda /var/jails/gerda 4 ACTIVE 5 84.237.22.5 ........ 8 propeller /var/jails/jail01 jail01 ACTIVE 9 # sysctl security.jail.sysvipc_allowed security.jail.sysvipc_allowed: 1 # jexec 4 sysctl security.jail.sysvipc_allowed security.jail.sysvipc_allowed: 0 # jexec 8 sysctl security.jail.sysvipc_allowed ------------------------------------------------------------------- Why in 8.0 I have # sysctl security.jail.sysvipc_allowed security.jail.sysvipc_allowed: 1 # jexec 1 sysctl security.jail.sysvipc_allowed security.jail.sysvipc_allowed: 1 But In 8.1 I have # sysctl security.jail.sysvipc_allowed security.jail.sysvipc_allowed: 1 # jexec 4 sysctl security.jail.sysvipc_allowed security.jail.sysvipc_allowed: 0 # jexec 8 sysctl security.jail.sysvipc_allowed I was doing wrong? --=20 =D0=9F=D0=B5=D1=82=D1=80=D0=BE=D0=B2=D1=81=D0=BA=D0=B8=D0=B9 =D0=90=D0=BB= =D0=B5=D0=BA=D1=81=D0=B0=D0=BD=D0=B4=D1=80 / Alexander Petrovsky, ICQ: 350342118 Jabber: juise@jabber.ru Phone: +7 914 8 820 815