linux-only jail possible?

[John Nielsen]

On Tuesday 16 March 2010 10:23:37 John Nielsen wrote:
> On Tuesday 16 March 2010 05:02:21 Alexander Leidinger wrote:
> > Quoting John Nielsen <lists at jnielsen.net> (from Mon, 15 Mar 2010
> >
> > 20:46:05 -0400):
> > > On Sunday 07 March 2010 05:44:37 am Ed Schouten wrote:
> > >> * Alexander Leidinger <Alexander at Leidinger.net> wrote:
> > >> > On Sat, 6 Mar 2010 19:15:12 +0100 Ed Schouten <ed at 80386.nl> wrote:
> > >> > > I am still in doubt what to do. Maybe we could consider
> > >> > > committing a patch like this:
> > >> >
> > >> > [...]
> > >> >
> > >> > > This is a bit more complete. What it does, is that it creates a
> > >> > > symlink from /proc/%d/fd to /dev/fd, only if the calling process
> > >> > > matches. Then when you mount fdescfs on /dev/fd, it also does
> > >> > > the right thing, because it will always readlink() on a
> > >> > > character device, which also returns an error code.
> > >> > >
> > >> > > Comments, suggestions anyone?
> > >> >
> > >> > Looks better than the one before. :)
> > >>
> > >> Great. Just committed it to SVN:
> > >>
> > >> 	http://svn.freebsd.org/viewvc/base?view=revision&revision=204825
> > >
> > > I finally tried the patch from SVN today and it does NOT resolve the
> > > openpty issue on FreeBSD 8-STABLE amd64 + CentOS 5.4 i386 jail +
> > > OpenSSH 4.3p2. I still (or again) get the "fatal: openpty returns
> > > device for which ttyname fails." message.
> >
> > Just to verify: You have fdeskfs mounted in the linux jail?
> 
> Err.. no. Did I miss that requirement? :) I'll give that a go with the
>  SVN linproc patch.

Well that was.. dramatic. I mounted fdescfs and tried to ssh to the jail. 
The (host) box immediately panicked (before I put in a password or did 
anything other than "ssh <jailip>"):

panic: fdesc_readdir: not hungry
cpuid = 0
Uptime: ... etc

JN