Date: Sun, 12 Jun 2016 13:13:32 +0000 (UTC) From: Kurt Jaeger <pi@FreeBSD.org> To: ports-committers@freebsd.org, svn-ports-all@freebsd.org, svn-ports-head@freebsd.org Subject: svn commit: r416800 - head/sysutils/qjail Message-ID: <201606121313.u5CDDW3Z080721@repo.freebsd.org>
next in thread | raw e-mail | index | archive | help
Author: pi Date: Sun Jun 12 13:13:32 2016 New Revision: 416800 URL: https://svnweb.freebsd.org/changeset/ports/416800 Log: sysutils/qjail: 4.7 -> 4.8 There are changes to the internals of the jail(8) command and changes to parameter names in the periodic files that have occurred in FreeBSD Release 10.2 that effects jail behavior in a very minor way. This version of qjail has an built in auto convert function that fixes those minor behavior problems with existing jails. This auto convert function is not documented in the qjail manual. Its only shown in the port install output. Issue [ qjail update -u ] from the host console. This will cause the existing "flavors" default & ssh-default directories to be renamed and new ones populated. Then in each existing jail the periodic.conf and newsyslog.conf files will be renamed with .saved suffix and new ones added. The rc.conf file will be updated in place changing the syslogd_enable= parameter value from "NO" to "YES". The new periodic.conf file has many sendmail reporting options disabled because sendmail is disabled in the jails rc.conf file by default. This drastically reduces the daily. weekly, monthly system and security status reports elapse run times. This has a major effect on operating system performance where there are a large number of jails. PR: 209929 Submitted by: Joe Barbish <qjail1@a1poweruser.com> (maintainer) Reviewed by: Vladimir Krstulja <vlad-fbsd@acheronmedia.com>, robak Modified: head/sysutils/qjail/Makefile head/sysutils/qjail/distinfo head/sysutils/qjail/pkg-descr head/sysutils/qjail/pkg-message head/sysutils/qjail/pkg-plist Modified: head/sysutils/qjail/Makefile ============================================================================== --- head/sysutils/qjail/Makefile Sun Jun 12 13:11:48 2016 (r416799) +++ head/sysutils/qjail/Makefile Sun Jun 12 13:13:32 2016 (r416800) @@ -2,7 +2,7 @@ # $FreeBSD$ PORTNAME= qjail -PORTVERSION= 4.7 +PORTVERSION= 4.8 CATEGORIES= sysutils MASTER_SITES= SF/${PORTNAME} @@ -23,7 +23,7 @@ LICENSE_PERMS= dist-mirror dist-sell pkg USES= tar:bzip2 NO_BUILD= yes -CONFLICTS_INSTALL= qjail-2.* qjail-3.0 qjail-3.1 +CONFLICTS_INSTALL= qjail-2.* qjail-3.* do-install: .for i in qjail qjail.vnet.be qjail.vnet.ng Modified: head/sysutils/qjail/distinfo ============================================================================== --- head/sysutils/qjail/distinfo Sun Jun 12 13:11:48 2016 (r416799) +++ head/sysutils/qjail/distinfo Sun Jun 12 13:13:32 2016 (r416800) @@ -1,2 +1,2 @@ -SHA256 (qjail-4.7.tar.bz2) = 42c72de6a3cf3deb19f84c8e3f95a9054fe226d9e17675397e5d46dd31143e8d -SIZE (qjail-4.7.tar.bz2) = 62754 +SHA256 (qjail-4.8.tar.bz2) = dc41c6a7c498129202d3973db11a6a6600ec598a9ac8aeaa8d0baeeba1553224 +SIZE (qjail-4.8.tar.bz2) = 64593 Modified: head/sysutils/qjail/pkg-descr ============================================================================== --- head/sysutils/qjail/pkg-descr Sun Jun 12 13:11:48 2016 (r416799) +++ head/sysutils/qjail/pkg-descr Sun Jun 12 13:13:32 2016 (r416800) @@ -1,15 +1,16 @@ +This qjail version is not intended for RELEASES older than RELEASE-10.0. + Qjail [ q = quick ] is a 4th generation wrapper for the basic chroot jail system that includes security and performance enhancements. Plus a new level of "user friendliness" enhancements dealing with deploying just a few jails or large scale jail environments consisting of 100's of jails. -This version of qjail uses the jail(8) jail.conf method. This provides the -ability to enable the following options on a per-jail basis. exec.fib, -securelevel, allow.sysvipc, devfs_rulesets, allow.raw_sockets, allow.quotas, -allow.mount.nullfs, allow.mount.tmpfs, allow.mount.zfs, vnet.interface, and -vnet. The vnet option gives a jail its own network stack using the experimental -vimage kernel module. This qjail version is not intended for RELEASES older than -RELEASE-9.2. The vnet option has only been tested on i386 and amd64 equipment. +Qjail uses the jail(8) jail.conf method. This provides the ability to enable +the following options on a per-jail basis. exec.fib, securelevel, allow.sysvipc, +devfs_rulesets, allow.raw_sockets, allow.quotas, allow.mount.nullfs, +allow.mount.tmpfs, allow.mount.zfs, vnet.interface, and vnet. The vnet option +gives a jail its own network stack using the experimental vimage kernel module. +The vnet option has only been tested on i386 and amd64 equipment. Qjail requires no knowledge of the jail command usage. It uses "nullfs" for read-only system executables, sharing one copy of them with all the jails. @@ -27,7 +28,7 @@ group of jails. Ability to designate a portion of the jail name as a group prefix so the command being executed will apply to only those jail names matching that prefix. -Qjail has been incorporated into the Finch open source project, +Qjail has been incorporated into the Finch open source project, see http://dreamcat4.github.io/finch/ for details. WWW: http://qjail.sourceforge.net/ Modified: head/sysutils/qjail/pkg-message ============================================================================== --- head/sysutils/qjail/pkg-message Sun Jun 12 13:11:48 2016 (r416799) +++ head/sysutils/qjail/pkg-message Sun Jun 12 13:13:32 2016 (r416800) @@ -10,8 +10,33 @@ For the BIG PICTURE issue "man qjail-how ######################################################################## -If your host is running 9.3-RELEASE or 10.0-RELEASE, please verify that -/etc/defaults/rc.conf parameter "devfs_load_rulesets" looks like this - devfs_load_rulesets="YES" +For users who have existing qjail environments. Please take note. +There are changes to the internals of the jail(8) command and changes to +parameter names in the periodic files that have occured in FreeBSD +Release 10.2 that effects jail behavior in a very minor way. +IF your running qjail on an 10.2 or newer version of FreeBSD you should +consider doing the following. +This version of qjail has an built in auto convert function that you may select +to choose that fixes those minor behavior problems with your existing jails. +This auto convert function is not documented in the qjail manual. Its only +shown here. So write it down. + + Issue [ qjail update -u ] from the host console. + +This will cause the existing "flavors" default & ssh-default directories to be +renamed and new ones populated. Then in each existing jail the periodic.conf +and newsyslog.conf files will be renamed with .saved suffix and new ones added. +The rc.conf file will be updated in place changing the +syslogd_enable= parameter value from "NO" to "YES". + +The new periodic.conf file has many sendmail reporting options disabled because +sendmail is disabled in the jails rc.conf file by default. This drastically +reduces the daily. weekly, monthly system and security status reports elapse +run times. This has a major effect on operating system performance where there +are a large number of jails. + +The [ qjail install ] command will install all the correct files depending on +what version of FreeBSD your host is running. + ######################################################################## Modified: head/sysutils/qjail/pkg-plist ============================================================================== --- head/sysutils/qjail/pkg-plist Sun Jun 12 13:11:48 2016 (r416799) +++ head/sysutils/qjail/pkg-plist Sun Jun 12 13:13:32 2016 (r416800) @@ -15,9 +15,10 @@ man/man8/qjail-howto.8.gz %%EXAMPLESDIR%%/default/etc/make.conf %%EXAMPLESDIR%%/default/etc/motd %%EXAMPLESDIR%%/default/etc/periodic.conf -%%EXAMPLESDIR%%/default/etc/periodic103.conf +%%EXAMPLESDIR%%/default/etc/periodic102.conf +%%EXAMPLESDIR%%/default/etc/newsyslog102.conf %%EXAMPLESDIR%%/default/etc/rc.conf -%%EXAMPLESDIR%%/default/etc/rc103.conf +%%EXAMPLESDIR%%/default/etc/rc102.conf %%EXAMPLESDIR%%/default/root/.cshrc %%EXAMPLESDIR%%/default/usr/local/etc/pkg.conf %%EXAMPLESDIR%%/default/usr/local/etc/sudoers @@ -27,10 +28,11 @@ man/man8/qjail-howto.8.gz %%EXAMPLESDIR%%/ssh-default/etc/motd %%EXAMPLESDIR%%/ssh-default/etc/passwd %%EXAMPLESDIR%%/ssh-default/etc/periodic.conf -%%EXAMPLESDIR%%/ssh-default/etc/periodic103.conf +%%EXAMPLESDIR%%/ssh-default/etc/periodic102.conf +%%EXAMPLESDIR%%/ssh-default/etc/newsyslog102.conf %%EXAMPLESDIR%%/ssh-default/etc/pwd.db %%EXAMPLESDIR%%/ssh-default/etc/rc.conf -%%EXAMPLESDIR%%/ssh-default/etc/rc103.conf +%%EXAMPLESDIR%%/ssh-default/etc/rc102.conf %%EXAMPLESDIR%%/ssh-default/etc/spwd.db %%EXAMPLESDIR%%/ssh-default/etc/ssh/sshd_config %%EXAMPLESDIR%%/ssh-default/root/.cshrc
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201606121313.u5CDDW3Z080721>