multiple interfaces for jail.conf(1) and jail_set(2)

[Valeri Galtsev]

On Tue, December 13, 2016 10:47 pm, Isaac (.ike) Levy wrote:
> Hi Valeri,
>
>> On Dec 13, 2016, at 5:03 PM, Valeri Galtsev <galtsev at kicp.uchicago.edu>
>> wrote:
>>
>> On Tue, December 13, 2016 2:14 pm, Isaac (.ike) Levy wrote:
>>> Hi All,
>>>
>>> Can I specify multiple IP interfaces and assign IP’s to them using
>>> jail.conf?
>>> I have jails with IPv4/IPv6 addresses on multiple physical interfaces,
>>> as
>>> well as assigning a loopback.
>>
>> Last time I tried it which was about year and a half ago the answer was:
>
> Just to clarify your answer,
>
>> no, this is not possible. Jail can only have one IP address (in addition
>> to loopback addresses).
>
> Do you mean this just for jail.conf configuration/usage?

No, that was earlier, in /etc/rc.conf. Since then I've heard that it can
be done on jail command line, though I never tried as I kind of prefer all
my stuff done "generic" and uniform way, something done on command line
what does not work in central configuration files be it /etc/rc.conf or
/etc/jail.conf feels like hack to me, so I tend to avoid it.

Valeri

>
> If so, from all I’ve read and tried, that makes complete sense, and
> makes me sad as it prevents me from using the slickness of jail.conf(1)
> and jail_set(2) - not yet :)
>
> --
> However, to be very clear for the list archive, jails can most definately
> have many IP addresses, (since between FreeBSD 7 and 8 I believe?),
> including loopback, (which is just an IP address like any other),
>
> For example,
>
> # ifconfig em0 inet alias 10.10.10.10/32
> # ifconfig em1 inet alias 10.10.10.11/32
> # ifconfig lo0 inet alias 127.0.0.11/32
> # ifconfig em0 inet6 alias 2:2:2:2::10 prefixlen 64
> # jail -c path=/some/place host.hostname=myjail
> ip4.addr=“10.10.10.10,10.10.10.11,127.0.0.11" ip6.addr="2:2:2:2::10"
> command=/bin/sh /etc/rc
>
> Best,
> .ike
>
>


++++++++++++++++++++++++++++++++++++++++
Valeri Galtsev
Sr System Administrator
Department of Astronomy and Astrophysics
Kavli Institute for Cosmological Physics
University of Chicago
Phone: 773-702-4247
++++++++++++++++++++++++++++++++++++++++