jail(8) vs. rc.d/jail features - fstab, zfs, vnet

zulu zulu at openvps.biz
Fri Apr 12 21:15:08 UTC 2013



You might need to play with the persist jail option to do a lot of ZFS
and VNET related functions.

The standard mount/umount command supports mounting custom fstab files
via -F option, you could mount the filesystems before starting jails
this way.

I was facing the same challenges last year as I really wanted to
explore VNET and ended up creating an rc.d/jail independent perl
script, you can have a look here
http://sourceforge.net/projects/zjails/. It is by no way a complete
solution and targeted for pure ZFS jails only. The next "release" will
have jailing ZFS datest as well (currently working on it).

Peter

On Friday, 12-04-2013 on 6:48 Dirk Engling wrote:

Dear jail hackers,

in my ongoing quest to understand the direction jail development is
heading, I noticed that per-jail-fstabs are not (anymore?, yet?)
supported by the new jail(8)-rc.d/jail2-combo. Are there official
plans
to drop the support?

A nice new jail+zfs feature is the "zfs jail" command, allowing to
attach a zfs to a jail. The way[tm] to properly use this feature is to
first create a prison, attach the zfs file system(s) to the jid and
only
then run the exec.start command. So either jail(8) needs to be zfs
aware
and execute the zfs jail command(s) by itself, or a exec.postprestart
command that is being passed the prison id of the new jail needs to be
run in system context. (For shutting down and unjail-ing vice versa).

The same goes with the vimage features. Most of the ways I can think
of
using vnet interfaces require some configuration in the host system
after the vnet has been attached to the jid but before exec.start (and
thus the jail's rc.d/netif) is executed.

Since I speak C, posix and sh fluidly, I am willing to implement or
help
implementing any of the proposals in question, so do not misunderstand
them as just demands ;)

  erdgeist
_______________________________________________
freebsd-jail at freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-jail
To unsubscribe, send any mail to
"freebsd-jail-unsubscribe at freebsd.org"




More information about the freebsd-jail mailing list