From owner-freebsd-questions@FreeBSD.ORG  Thu Jul 19 02:32:59 2007
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
X-Original-To: freebsd-questions@freebsd.org
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52])
	by hub.freebsd.org (Postfix) with ESMTP id DA31716A404
	for <freebsd-questions@freebsd.org>;
	Thu, 19 Jul 2007 02:32:59 +0000 (UTC)
	(envelope-from ccowart@hal.rescomp.berkeley.edu)
Received: from rescomp.berkeley.edu (hal.Rescomp.Berkeley.EDU [169.229.70.150])
	by mx1.freebsd.org (Postfix) with ESMTP id C613013C461
	for <freebsd-questions@freebsd.org>;
	Thu, 19 Jul 2007 02:32:59 +0000 (UTC)
	(envelope-from ccowart@hal.rescomp.berkeley.edu)
Received: by rescomp.berkeley.edu (Postfix, from userid 1225)
	id 5C66A5B76E; Wed, 18 Jul 2007 19:32:59 -0700 (PDT)
Date: Wed, 18 Jul 2007 19:32:59 -0700
From: Christopher Cowart <ccowart@rescomp.berkeley.edu>
To: Tech Valley Internet - Tony Kivits <tony@techvalley.ca>
Message-ID: <20070719023259.GA27888@rescomp.berkeley.edu>
Mail-Followup-To: Tech Valley Internet - Tony Kivits <tony@techvalley.ca>,
	freebsd-questions@freebsd.org
References: <7.0.1.0.0.20070718181625.01d5eeb0@techvalley.ca>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;
	protocol="application/pgp-signature"; boundary="zAZKrYjO7GRpkTOs"
Content-Disposition: inline
In-Reply-To: <7.0.1.0.0.20070718181625.01d5eeb0@techvalley.ca>
Organization: RSSP-IT, UC Berkeley
User-Agent: Mutt/1.5.9i
Cc: freebsd-questions@freebsd.org
Subject: Re: /dev/random in jails
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 19 Jul 2007 02:32:59 -0000


--zAZKrYjO7GRpkTOs
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Wed, Jul 18, 2007 at 06:30:50PM -0700, Tech Valley Internet - Tony Kivit=
s wrote:
> I am attempting to run portions (if not all) of the software called=20
> HSphere inside of jailed subsystems of FreeBSD.  I am able to create=20
> the jails no problem but the devices /dev/random and /dev/urandom are=20
> not created automatically in the jail despite the fact that a handful=20
> of other devices are mounted correctly when the jail is created.
>=20
> Is there a specific reason for these devices not being created in a=20
> jail or is there a way to create these devices so that they will be=20
> available inside a jail?

We run bind instances in FreeBSD jails. This is how we get /dev/random:

| # /etc/devfs.rules:
| [devfsrules_thin_jail=3D100]
| add include $devfsrules_hide_all
| add include $devfsrules_unhide_basic

| # /etc/rc.conf:
| jail_cachingdns_devfs_enable=3D"YES"
| jail_cachingdns_devfs_ruleset=3D"devfsrules_thin_jail"

HTH,

--=20
Chris Cowart
Lead Systems Administrator
Network & Infrastructure Services, RSSP-IT
UC Berkeley

--zAZKrYjO7GRpkTOs
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: Digital signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (GNU/Linux)

iD4DBQFGns1bV3SOqjnqPh0RAhjLAKCu7IBvWDxPd09Tai9SMk+vSGq9wACXSaWt
YF5GAK+dgA7Dfn1nc3G9DQ==
=S6uR
-----END PGP SIGNATURE-----

--zAZKrYjO7GRpkTOs--