[Bug 260160] zfs jailed: snapshots not accessible

From: <bugzilla-noreply_at_freebsd.org>
Date: Mon, 06 Feb 2023 18:47:35 UTC

--- Comment #22 from Jim Long <freebsd-bugzilla@umpquanet.com> ---
Well, no luck yet, but I think the first obstacle I have is:

# cat /etc/jail.conf
path    = "/jail/$name";

test {
        host.hostname = "test.example.com";
        ip4.addr = "vlan3|";
        allow.raw_sockets = 1;
        exec.system_user = "root";
        exec.jail_user = "root";
        exec.start += "/bin/sh /etc/rc";
        exec.stop = "/bin/sh /etc/rc.shutdown";
        exec.consolelog = "/var/log/jail_test.log";
# When this is supported, that likely means the jail vs. snapshot bug has
# been fixed:
        allow.set_hostname = 0;
        allow.sysvipc = 0;

But the jail is not seeing the mount_snapshot attribute:

# service jail restart; jexec test sysctl -a | grep zfs\.mount
Stopping jails: test.
Starting jails: test.
security.jail.param.zfs.mount_snapshot: 0

Without that attribute set, then of course:

# jexec test ls -l /.zfs/snapshot/prior-to-installkernel
ls: /.zfs/snapshot/prior-to-installkernel: Operation not permitted

What am I overlooking?

You are receiving this mail because:
You are the assignee for the bug.