multiple interfaces for jail.conf(1) and jail_set(2)

Isaac (.ike) Levy ike at blackskyresearch.net
Tue Dec 13 20:14:30 UTC 2016


Hi All,

Can I specify multiple IP interfaces and assign IP’s to them using jail.conf?
I have jails with IPv4/IPv6 addresses on multiple physical interfaces, as well as assigning a loopback.

I have not found answers in the respective man pages or digging online.

I’m finally starting to poke around to start using the impressively simple jail.conf subsystem to manage jails.  I have been managing jails with simple custom start scripts since 99’, and custom devfs rulesets since ~2006, so jail.conf(1) and jail_set(2) are a big welcome change for me- really awesome and clean :)

--
Additional detail to clarify my loopback use:
In general, I always assign each jail it’s own a loopback IP somewhere in the RFC5735 specified range, 127.0.0.0/8 - (simply saving 127.0.0.1 for the jailing host), and then I simply set localhost to point at it’s IP in /etc/hosts for the jail.  On the host, I simply add the IP alias to lo0 like any other interface.
This is often overlooked in common jailing practice, but often eliminates complexity and confusion for many userland daemons.  For full Virtual Server applications, loopback is simply dotting the i’s and crossing the t’s.

I can see how localhost would be challenging to automate for easy jail.conf configuration, mostly, in picking a loopback IP for the jail and not letting that get messy- etc…

Thanks in advance for any info!

Best,
.ike




More information about the freebsd-jail mailing list