Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 21 Jan 2010 21:50:56 +0100
From:      Philipp Wuensche <cryx-freebsd@h3q.com>
To:        David BERARD <david@nfrance.com>
Cc:        freebsd-jail@freebsd.org
Subject:   Re: conf/142972: [jail] [patch] Support JAILv2 and vnet in rc.d/jail
Message-ID:  <4B58BE30.2050402@h3q.com>
In-Reply-To: <4B5894FE.1000506@nfrance.com>
References:  <201001200940.o0K9e4lO032467@freefall.freebsd.org>	<4B586095.8020109@h3q.com> <4B58842C.6080106@h3q.com> <4B5894FE.1000506@nfrance.com>

next in thread | previous in thread | raw e-mail | index | archive | help
I'm taking this off bug-followup for now.

David BERARD wrote:
>> I did some testing with vnet and I find the way of using _poststart and
>> _afterstart to configure ip-addr. inside a vimage jail very impractical.
>> First we loose all the nice features of configuring ipaddrs. via
>> ipv4_addrs_if in rc.conf from inside the jail and second, more
>> important, the jail will be fully bootet before any ipaddr. is
>> configured or even interfaces are configured. This will result in
>> services not starting correctly, firewalling going nuts, routing-daemons
>> not working etc.pp.
>>
> 
> 
> I had to patch rc to support this, and use this in rc.conf
> jail_example_exec_earlypoststart0="ifconfig epair0b vnet example"
> jail_example_exec_afterstart0="ifconfig epair0b x.x.x.x"

I'm not sure I do understand this correct, but this doesn't solve the
problem I described.

With this patch, the ipaddr. configuration of the vnet jail is still
done from outside and not by the rc scripts inside the jail!

_afterstart is way too late for doing the ip-configuration because
services inside the jail are already started.

_earlypoststart makes no sense to me, it is still run during the wrong time.

greetings,
philipp




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4B58BE30.2050402>