From owner-freebsd-questions@FreeBSD.ORG Thu Jul 19 04:41:37 2007 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id E908F16A405 for ; Thu, 19 Jul 2007 04:41:36 +0000 (UTC) (envelope-from tony@techvalley.ca) Received: from mail2.techvalley.ca (mail2.techvalley.ca [66.199.130.140]) by mx1.freebsd.org (Postfix) with ESMTP id C3E6A13C471 for ; Thu, 19 Jul 2007 04:41:36 +0000 (UTC) (envelope-from tony@techvalley.ca) Received: from localhost (localhost.localdomain [127.0.0.1]) by mail2.techvalley.ca (Postfix) with ESMTP id 830982304CD; Wed, 18 Jul 2007 21:41:36 -0700 (PDT) X-Virus-Scanned: amavisd-new at techvalley.ca Received: from mail2.techvalley.ca ([127.0.0.1]) by localhost (mail2.techvalley.ca [127.0.0.1]) (amavisd-new, port 10024) with LMTP id XMHekRJgxq0n; Wed, 18 Jul 2007 21:41:36 -0700 (PDT) Received: from mail.techvalley.ca (S010600121701f0ec.vs.shawcable.net [24.85.106.140]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mail2.techvalley.ca (Postfix) with ESMTP id 394B82304C9; Wed, 18 Jul 2007 21:41:35 -0700 (PDT) Received: from monsoon.techvalley.ca ([192.168.1.1]) by mail.techvalley.ca (8.13.8/8.13.8) with ESMTP id l6J4kAV2012989; Wed, 18 Jul 2007 21:46:10 -0700 (PDT) (envelope-from tony@techvalley.ca) Message-Id: <7.0.1.0.0.20070718204749.01c146a8@techvalley.ca> X-Mailer: QUALCOMM Windows Eudora Version 7.0.1.0 Date: Wed, 18 Jul 2007 21:41:35 -0700 To: Christopher Cowart From: Tech Valley Internet - Tony Kivits In-Reply-To: <20070719034250.GB27888@rescomp.berkeley.edu> References: <7.0.1.0.0.20070718181625.01d5eeb0@techvalley.ca> <20070719023259.GA27888@rescomp.berkeley.edu> <7.0.1.0.0.20070718202853.01bf3108@techvalley.ca> <20070719034250.GB27888@rescomp.berkeley.edu> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii"; format=flowed Cc: freebsd-questions@freebsd.org Subject: Re: /dev/random in jails X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 19 Jul 2007 04:41:37 -0000 At 08:42 PM 7/18/2007, Christopher Cowart wrote: >On Wed, Jul 18, 2007 at 08:34:21PM -0700, Tech Valley Internet - >Tony Kivits wrote: > > At 07:32 PM 7/18/2007, Christopher Cowart wrote: > > >On Wed, Jul 18, 2007 at 06:30:50PM -0700, Tech Valley Internet - > > >Tony Kivits wrote: > > >> I am attempting to run portions (if not all) of the software called > > >> HSphere inside of jailed subsystems of FreeBSD. I am able to create > > >> the jails no problem but the devices /dev/random and /dev/urandom are > > >> not created automatically in the jail despite the fact that a handful > > >> of other devices are mounted correctly when the jail is created. > > >> > > >> Is there a specific reason for these devices not being created in a > > >> jail or is there a way to create these devices so that they will be > > >> available inside a jail? > > > > > >We run bind instances in FreeBSD jails. This is how we get /dev/random: > > > > > >| # /etc/devfs.rules: > > >| [devfsrules_thin_jail=100] > > >| add include $devfsrules_hide_all > > >| add include $devfsrules_unhide_basic > > > > > >| # /etc/rc.conf: > > >| jail_cachingdns_devfs_enable="YES" > > >| jail_cachingdns_devfs_ruleset="devfsrules_thin_jail" > > > > > Thanks Chris, > > > > So if my jail is called "cp", the only thing that I would have to > > change from your scripts would be replace to replace "cachingdns" > with "cp"? > >Yes. Are you configuring the jail via /etc/rc.conf already? Are you >using the rc script /etc/rc.d/jail to start your jails? > >My complete config from /etc/rc.conf is: > >| # Enable jails >| jail_enable="YES" >| jail_list="cachingdns" >| >| # Caching-nameserver jail >| jail_cachingdns_hostname="ns1.example.com" >| jail_cachingdns_ip="192.0.2.15" >| jail_cachingdns_interface="bge0" >| jail_cachingdns_rootdir="/var/jails/caching-dns" >| jail_cachingdns_exec="/usr/local/sbin/named" >| jail_cachingdns_devfs_enable="YES" >| jail_cachingdns_devfs_ruleset="devfsrules_thin_jail" > >You can replace cachingdns with cp or whatever else you want. You can >also create multiple jails with different names. > >I don't know if you're following the typical FreeBSD jail documentation >which gives you a complete FreeBSD installation inside the jail. Given >that I only need to run named, I have not done that. > >Are you trying to run a complete FreeBSD install that allows user logins >inside your jail? Or are you simply trying to jail a single process? My >example above jails the single process named, and does not have an OS >install inside the jail's root. > >-- >Chris Cowart >Lead Systems Administrator >Network & Infrastructure Services, RSSP-IT >UC Berkeley > Thanks Chris, I am doing a complete OS inside the jail and am starting it through the rc.conf. I have modified the devfs.rules so that they are now passing random and urandom as devices. But the installation software is still reporting that /dev/random is not working properly. Do you know of a way that I can test /dev/random to see if it is actually working? Thanks again, Tony