Temp files in /etc

[Matthew Seaman]

Joshua Piccari wrote:

> I have a shared /etc folder that is mounted read-only to the different jails
> that share it. Some of the configuration files which need to be dynamic from
> jail to jail are replaced with symbolic links to the jails /usr/local/etc
> folder. The reason for mount /etc as read-only is to ensure that none of the
> jails accidentally modify the configurations for all the jails sharing these
> configurations. However, there is an issue with creating temp files on a
> read-only system which means I will have to work around this somehow. I
> thought about setting the schg flag on all the files in the shared /etc
> folder but I don't want one jail to be able to add a rc.d script for every
> jail.

Can't you use a unionfs to achieve what you want?  Abstract out all the
common data to filesystem that you mount read-only, and then use unionfs to
mount a per-jail read/write overlay on top of that?

	Cheers,

	Matthew

-- 
Dr Matthew J Seaman MA, D.Phil.                   7 Priory Courtyard
                                                  Flat 3
PGP: http://www.infracaninophile.co.uk/pgpkey     Ramsgate
                                                  Kent, CT11 9PW

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 258 bytes
Desc: OpenPGP digital signature
Url : http://lists.freebsd.org/pipermail/freebsd-hackers/attachments/20080906/d6f7b9ea/signature.pgp