rc.shutdown and jails

[Nielsen]

Ralf S. Engelschall wrote:
> Currently a "/etc/rc.d/jail stop" just kills all processes in the
> individual jails. If /etc/default/rc.conf's default way of booting the
> jails (jail_exec="/bin/sh /etc/rc") is used this is a rather crual
> approach IMHO. I think if the jail is booted through /etc/rc it also
> should be given the chance to shutdown via /etc/rc.shutdown. If then
> there are still processes remaining, the killall(1) is fine, of course.
> This way packages and other sub-systems have the chance to perform a
> graceful shutdown.

Definitely a good plan. You just have to watch out for environment 
variable leakage into the jail subsystem when using jexec. A minor 
concern, perhaps.

This is what the jkill from the jailutils package does:
http://memberwebs.com/nielsen/freebsd/jails/jailutils

Cheers,
Nate