SSH from host to jail
Jon Disnard
diz at linuxpowered.com
Sun Jul 27 14:29:03 PDT 2003
Pat Lashley wrote:
> I'm trying to set up some jails in a 5.1R system. I've pretty much
> copied a setup that was working fine in 4.8; but on 5.1 I can't seem
> to SSH from the host system into one of its jails. It acts like the
> packets just aren't getting through.
>
> I would really appreciate it if somebody would send me rc.conf fragments
> that are known to work for setting up a jail's IP alias and routing on
> 5.1.
sure, but this isn't going to fix your problem:
ifconfig_wi0="inet 192.168.0.140 netmask 255.255.255.0"
ifconfig_wi0_alias0="inet 192.168.0.131 netmask 255.255.255.255"
jail_enable="YES"
jail_list="shiba"
jail_shiba_hostname="shiba"
jail_shiba_ip="192.168.0.131"
jail_shiba_rootdir="/usr/prison/192_168_0_130/"
jail_shiba_exec="/bin/sh /etc/rc"
To fix your problem you should try to mount a devfs for the jail so the
tty device is available for sshd to open when you login. I simply added
one line to my /etc/rc.d/jail script to test for the "dev" mount-point
in jail. Like so:
[ -d "${jail_rootdir}/dev" ] && mount -t devfs ${jail_rootdir}\dev
I suppose we could avoid this little fau pax in the future by adding a
new jail specific rc.conf var like this example:
jail_shiba_devfs="/usr/prison/192_168_0_130/dev"
It could be easy to have it simply exist, or be non-null, to imply a
desire for devfs, and further checked for the existence of the
mount-point as I wrote above.
I could have a pr+patch made in 5 minutes if anybody thinks this is not
a bad idea?
-Jon
More information about the freebsd-current
mailing list