dcons(4) console for jails
simokawa at sat.t.u-tokyo.ac.jp
Sun Sep 26 07:38:46 PDT 2004
I'm not sure I really understand your concern, but the following fact
may help you.
- You don't need firewire to access dcons. dcons can be accessed via
KVM without -t option.
- By default(without -g option), dconschat listen on only 127.0.0.1.
You cannot access it from outside of localhost.
Currently, we can only have one dcons device on a system. You may
need multiple dcons port for multiple jails...
/\ Hidetoshi Shimokawa
\/ simokawa at sat.t.u-tokyo.ac.jp
PGP public key: http://www.sat.t.u-tokyo.ac.jp/~simokawa/pgp.html
At Fri, 10 Sep 2004 15:24:25 +0200,
Hendrik Scholz wrote:
> I've been thinking for this for a few days and eventually had the time
> to have a first look at it.
> What I'd like to do is basicly running
> '/usr/libexec/getty dcons dcons' inside a jail and allow the host system
> to access the console.
> It's easy to do using the dconschat TCP feature (dconschat -rTC 12345)
> and using telnet to connect but I don't like the idea of allowing telnet
> connections from remote systems to important services.
> So my solution (only had a quick look at the code) should work like this:
> - write a firewire-like extension for dconschat, i.e. 'dcons -j myjail'
> that connects to the console on the local jail 'myjail'
> - build a miniature version of /etc/ttys in the jail to allow
> - make sure the comserver-con port works with this extension :)
> Are there any comments or recommondations?
> Hendrik Scholz - <hscholz at raisdorf.net> - http://www.wormulon.net/
> drag me, drop me - treat me like an object
> freebsd-current at freebsd.org mailing list
> To unsubscribe, send any mail to "freebsd-current-unsubscribe at freebsd.org"
More information about the freebsd-current