Date: Sat, 06 Sep 2008 12:18:34 +0100 From: Matthew Seaman <m.seaman@infracaninophile.co.uk> To: Joshua Piccari <jpiccari@bblocked.org> Cc: freebsd-hackers@freebsd.org Subject: Re: Temp files in /etc Message-ID: <48C2670A.9000808@infracaninophile.co.uk> In-Reply-To: <15d3bc360809052349t4e90e719tf82c5002a2d9e2d@mail.gmail.com> References: <15d3bc360809051940t70f0b884mb9a80132acc50b45@mail.gmail.com> <20080906063113.GB77307@icarus.home.lan> <15d3bc360809052349t4e90e719tf82c5002a2d9e2d@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
This is an OpenPGP/MIME signed message (RFC 2440 and 3156)
--------------enigD941CFB25FBFB773B8539A91
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: quoted-printable
Joshua Piccari wrote:
> I have a shared /etc folder that is mounted read-only to the different =
jails
> that share it. Some of the configuration files which need to be dynamic=
from
> jail to jail are replaced with symbolic links to the jails /usr/local/e=
tc
> folder. The reason for mount /etc as read-only is to ensure that none o=
f the
> jails accidentally modify the configurations for all the jails sharing =
these
> configurations. However, there is an issue with creating temp files on =
a
> read-only system which means I will have to work around this somehow. I=
> thought about setting the schg flag on all the files in the shared /etc=
> folder but I don't want one jail to be able to add a rc.d script for ev=
ery
> jail.
Can't you use a unionfs to achieve what you want? Abstract out all the
common data to filesystem that you mount read-only, and then use unionfs =
to
mount a per-jail read/write overlay on top of that?
Cheers,
Matthew
--=20
Dr Matthew J Seaman MA, D.Phil. 7 Priory Courtyard
Flat 3
PGP: http://www.infracaninophile.co.uk/pgpkey Ramsgate
Kent, CT11 9PW
--------------enigD941CFB25FBFB773B8539A91
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.9 (FreeBSD)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iEYEAREIAAYFAkjCZxAACgkQ8Mjk52CukIyRwQCfVcg2mCHuk4OexHijg0bLZITf
NoYAnR8GmCeIatCpd+JPQjcPyI40bjkP
=Jo0p
-----END PGP SIGNATURE-----
--------------enigD941CFB25FBFB773B8539A91--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?48C2670A.9000808>