Date: Wed, 28 Aug 2019 13:49:28 +0200 From: Alexander Leidinger <Alexander@leidinger.net> To: freebsd-current@freebsd.org Subject: Re: jails, ZFS, deprecated jail variables and poudriere problems Message-ID: <20190828134928.Horde.DiL31t_6di4RpY7cRJrPsBG@webmail.leidinger.net> In-Reply-To: <20190827101149.1efcb946@freyja>
next in thread | previous in thread | raw e-mail | index | archive | help
This message is in MIME format and has been PGP signed. --=_irKhjOFC29ARmahxCw5Jx0j Content-Type: text/plain; charset=utf-8; format=flowed; DelSp=Yes Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Quoting "O. Hartmann" <ohartmann@walstatt.org> (from Tue, 27 Aug 2019=20=20 10:11:54=20+0200): > We have a single ZFS pool (raidz), call it pool00 and this pool00 conatin= s a > ZFS dataset pool00/poudriere which we want to exclusively attach to a jai= l. > pool00/poudriere contains a complete clone of a former, now decomissioned > machine and is usable by the host bearing the jails. The jail, named=20= =20 >=20poudriere, > has these config parameters set in /etc/jail.conf as recommended: > > enforce_statfs=3D "0"; > > allow.raw_sockets=3D "1"; > > allow.mount=3D "1"; > allow.mount.zfs=3D "1"; > allow.mount.devfs=3D "1"; > allow.mount.fdescfs=3D "1"; > allow.mount.procfs=3D "1"; > allow.mount.nullfs=3D "1"; > allow.mount.fusefs=3D "1"; > > Here I find the first confusing observation. I can't interact with=20=20 >=20the dataset > and its content within the jail. I've set the "jailed" property of > pool00/poudriere via "zfs set jailed=3Don pool00/poudriere" and I also ha= ve to > attach the jailed dataset manually via "zfs jail poudriere=20=20 >=20pool00/poudriere" to > the (running) jail. But within the jail, listing ZFS's mountpoints reveal= : > > NAME USED AVAIL REFER MOUNTPOINT > pool00 124G 8.62T 34.9K /pool00 > pool00/poudriere 34.9K 8.62T 34.9K /pool/poudriere > > but nothing below /pool/poudriere is visible to the jail. Being confused = I Have you checked if it works if you add each dataset below the tree=20=20 you=20want to manage (=3D "sub-dataset")? Do the sub-datasets list the jailed property as inherited from the=20=20 parent=20(check on the host)? Bye, Alexander. --=20 http://www.Leidinger.net=20Alexander@Leidinger.net: PGP 0x8F31830F9F2772BF http://www.FreeBSD.org netchild@FreeBSD.org : PGP 0x8F31830F9F2772BF --=_irKhjOFC29ARmahxCw5Jx0j Content-Type: application/pgp-signature Content-Description: Digitale PGP-Signatur Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAABAgAGBQJdZmpIAAoJEBINsJsD+NiG744P/2Of7xDiKeMqWfDOxDciaxRd gMFAI1IWl2v/q/DHu+dqc5Ti/yJjFoanobs8j9DAXiVpl8tRqylucfDOzn2wE4mX 8PAcikclzpKrH4E5DplXXnRo7V/9cODNl+Y4icB6hcNpCD/InSgo8OUxHxI0iQZJ Ph+Oe/4JSeHsqTZEYhb2aiwscxa7X9d7WGTlPsN+fnh9hmCHJAp9vs7Ae5uydZQ1 6PcBbHnUEb8lPd5K0ZbRjk6ZdWM+S9j02hWDwwKVP9JDu4lgjUZjixSLtYWsl0LR jLDXazw2h5J1vzupnq3bqNfqI2WD1/3v/OHHcD0jA4EC4m7cwFLJY/a1MRKrf/fD NHQ3I+VzLLrLfLxDvfQ+x4z3SMF5XGvLrJX9LjZOIn3T9at1f7F2HIUR83gs8jZ+ /iJxhdYd7Imzyg+4RtTxa9Bc3UFE2uvuSNfAIm0px90eLlRvcGyD5Zq09PRQg7DR 2i72QfmnhSgn891LS0wh2d6AZoBMbNHu2vIZxnrVjz8fq1AiWz09KhZ1SGB4nGJ2 96AtcD2NvKZhzwgjT6DEJNSV5laKMGiemX6JCwhvlZ8YsMedFgrNeg6uqSBdD/rX y7FTz/LzvXwm+858VMCHxDbro+44EUlYRqG58xfWT0hHgab8alkZghrlDJpkoVYc hvhVZjIy5TeJa5FeHi3I =B8iu -----END PGP SIGNATURE----- --=_irKhjOFC29ARmahxCw5Jx0j--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20190828134928.Horde.DiL31t_6di4RpY7cRJrPsBG>