From owner-freebsd-questions@FreeBSD.ORG Mon Apr 28 10:57:28 2014 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 8BB57DE7 for ; Mon, 28 Apr 2014 10:57:28 +0000 (UTC) Received: from relay2.tomsk.ru (mail.sibptus.tomsk.ru [212.73.124.5]) by mx1.freebsd.org (Postfix) with ESMTP id E39761947 for ; Mon, 28 Apr 2014 10:57:27 +0000 (UTC) X-Virus-Scanned: by clamd daemon 0.98.1 for FreeBSD at relay2.tomsk.ru Received: from admin.sibptus.tomsk.ru (account sudakov@sibptus.tomsk.ru [212.73.125.240] verified) by relay2.tomsk.ru (CommuniGate Pro SMTP 5.1.16) with ESMTPSA id 35486567 for freebsd-questions@freebsd.org; Mon, 28 Apr 2014 17:57:24 +0700 Received: from admin.sibptus.tomsk.ru (sudakov@localhost [127.0.0.1]) by admin.sibptus.tomsk.ru (8.14.7/8.14.7) with ESMTP id s3SAvLpn084403 for ; Mon, 28 Apr 2014 17:57:24 +0700 (NOVT) (envelope-from vas@mpeks.tomsk.su) Received: (from sudakov@localhost) by admin.sibptus.tomsk.ru (8.14.7/8.14.7/Submit) id s3SAvL9H084402 for freebsd-questions@freebsd.org; Mon, 28 Apr 2014 17:57:21 +0700 (NOVT) (envelope-from vas@mpeks.tomsk.su) X-Authentication-Warning: admin.sibptus.tomsk.ru: sudakov set sender to vas@mpeks.tomsk.su using -f Date: Mon, 28 Apr 2014 17:57:21 +0700 From: Victor Sudakov To: freebsd-questions@freebsd.org Subject: Re: FBSD jail versus VMWare? What services do YOU run in a jail? Message-ID: <20140428105721.GA83158@admin.sibptus.tomsk.ru> References: <53580129.5010909@ssimicro.com> <033901cf603f$55a1ffc0$00e5ff40$@FreeBSD.org> <535A468D.7080006@a1poweruser.com> <20140425120532.GB89790@admin.sibptus.tomsk.ru> <535A9154.4010205@a1poweruser.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <535A9154.4010205@a1poweruser.com> Organization: AO "Svyaztransneft", SibPTUS X-PGP-Key: http://www.dreamwidth.org/pubkey?user=victor_sudakov X-PGP-Fingerprint: 10E3 1171 1273 E007 C2E9 3532 0DA4 F259 9B5E C634 User-Agent: Mutt/1.5.21 (2010-09-15) X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 28 Apr 2014 10:57:28 -0000 Fbsd8 wrote: > > > >> As the number of running jails increase the > >> difficultly of managing them also increases. ezjail has no provisions > >> to address this problem. qjail on the other hand is designed from the > >> ground floor to simplify the administration of large scale jail > >> environments [1 to 2000+ jails]. > > > > Where can I read more about the unique and advanced features of qjail > > missing in ezjail? > > I have never come across a feature comparison between the two. But qjail > is a fork of an old ezjail-3.1 version so much of the feel is the same. > > http://svnweb.freebsd.org/ports/head/sysutils/qjail/pkg-descr?revision=HEAD > This link is a good place to start, then pkg install qjail & ezjail and > read their man pages for the details your looking for. I am looking for someone to persuade me that qjail is in any way superior to ezjail which I am already using :-) If qjail has some killer feature, I am ready to look at it, but I must know why I should invest my time into learning qjail. > > > > > I am especially interested in features which help update and upgrade > > multiple jails and software therein. > > > > I must admit it's a bit of PITA in ezjail when it comes to upgrading > > third party software. I have set up a pkg repository for that purpose, > > but still I have to visit each jail individually and run "pkg upgrade" > > from inside. > > > > > > > jail updates is really 2 different arenas. You have the update of the > host system binaries and the update of ports. > > ezjail relies on the old "make buildworld" method. Sorry, your information is outdated. ezjail supports binary upgrades via freebsd-update. > > The second arena is updating your installed ports. Before 10.0 and pkgng > this was always a time consuming task. From the point of view of using pkgng, I don't see why I should prefer qjail to ezjail, they seem the same. -- Victor Sudakov, VAS4-RIPE, VAS47-RIPN sip:sudakov@sibptus.tomsk.ru