Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 2 Feb 2010 12:18:54 +0800
From:      Erich Dollansky <erichfreebsdlist@ovitrap.com>
To:        freebsd-questions@freebsd.org
Cc:        Jeff Mitchell <skeezix@skeleton.org>
Subject:   Re: How far to go with jailing?
Message-ID:  <201002021218.55772.erichfreebsdlist@ovitrap.com>
In-Reply-To: <20100201205427.T36480@fw.skeleton.org>
References:  <20100201205427.T36480@fw.skeleton.org>

next in thread | previous in thread | raw e-mail | index | archive | help
Hi,

On 02 February 2010 am 09:57:13 Jeff Mitchell wrote:
> 
>  	Strikes me that setting up jails for bloody-well-every-other 
> service might be 'fun' ..
> 
it is just your work. As there is still only a single kernel running, there is no real difference.

But you must maintain every jail as every jail uses its own world.

I use jails once in a while. They give a good feeling and do not cost much to setup.

But - a big but - you must make sure that the data stays consistant over the jails. Jailing a webserver is not a problem. But putting file-servers for different protocols into different jails might be a problem. Letting different jails run accessing the same data, does not make sense for me.

Erich



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201002021218.55772.erichfreebsdlist>