started playing with jails

[Karol Kwiatkowski]

Jonathan Horne wrote:
> i started playing with jails today, and after following and re-following the man
> page and the freebsddiary article a few times, i finally got it to work!  i have
> one jail that starts on startup, and actually the hump i was getting over was
> getting the jail to actually kick off the sshd daemon.  all that is working, and
> i can reboot my host, and then log into the jail that auto-starts via ssh.
> 
> a couple of general questions that i cannot find the answers to:

First let me say that you may be interested in sysutils/ezjail which
takes care of creating and managing of multiple jails.

Have a look at http://erdgeist.org/arts/software/ezjail/

> 1) if i want more than one jail, what is the proper syntax in the host's
> /etc/rc.conf file for the jail_list="jailed" statement?  multiple jail_list
> lines, or a single line that specifies more than one jail?

$ grep "jail_list=" /etc/defaults/rc.conf
jail_list=""            # Space separated list of names of jails

> 2) what happens to a jail when i 'shutdown -p now' on the host?  what caveats do
> i need to watch for when rebooting or shutting down the host?

I use multiple jails (max 3 per host) and never had any problems with
that. I use ezjail, so jails are started/stopped by rc.d script. You may
wait for more technical answer for that, though.

> 3) i would like to build some ports in my jailed process, but for my
> environment, this requires mounting the export from my main box on my network. 
> so far, i am not able to mount a NFS share to /usr/ports (mount_nfs: /usr/ports:
> Operation not permitted).

I'm not really experienced with NFS but how about mounting NFS share in
/usr/ports on host system and then using mount_nullfs to mount that into
jails? Just like ezjail uses mount_nullfs to mount host's /usr/ports
into jails.

HTH,

Karol

-- 
Karol Kwiatkowski   <karol.kwiat at gmail dot com>
OpenPGP 0x06E09309

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 250 bytes
Desc: OpenPGP digital signature
Url : http://lists.freebsd.org/pipermail/freebsd-questions/attachments/20070321/d307e2ff/signature.pgp