new jail utility is available. announcement.
aiza21 at comclark.com
Tue Jul 20 04:30:00 UTC 2010
This is a news announcement to inform people who have interest in jails,
that a new jail utility is available.
Has a file suitable for the pkg_add command or the port make files can
be downloaded and a "make install" run.
Qjail [ q = quick ] is a 4th generation wrapper for the basic chroot
jail system that includes security and performance enhancements. Plus a
new level of "user friendliness" enhancements dealing with deploying
just a few jails or large jail environments consisting of 100's of
jails. Qjail requires no knowledge of the jail command usage.
It uses "nullfs" for read-only system binaries, sharing one copy of
them with all the jails.
Uses "mdconfig" to create sparse image jails. Sparse image jails
provide a method to limit the total disk space a jail can consume,
while only occupying disk space of the sum size of the files in
the image jail.
Ability to assign ip address with their network device name,
so aliases are auto created on jail start and auto removed on jail stop.
Ability to create "ZONE"s of identical qjail systems, each with
their own group of jails.
Ability to designate a portion of the jail name as a group prefix so
the command being executed will apply to only those jail names
matching that prefix.
Qjail reduces the complexities of small and large jail deployments to
the novice level. Qjail has a fully documented manpage written for easy
comprehension. Details are given to felicitate the use of qjail's
capabilities to the fullest extent possible.
More information about the freebsd-questions