multiple interfaces for jail.conf(1) and jail_set(2)

Isaac (.ike) Levy ike at blackskyresearch.net
Wed Dec 14 21:12:37 UTC 2016


Wow,

> On Dec 14, 2016, at 3:53 PM, Michael Grimm <trashcan at ellael.org> wrote:
> 
>> Two questions though:
>> 
>> - I’m confused how you define the shell style $ variables in your individual jail settings above, e.g. ‘$ip4_addr_2 = 10.1.1.2;’, why/how does that work?  Is that a variable to be expanded, or some other behavior?
> 
> This is described in jail.conf(5) under the section "variables". I do have 10 jails running, and those $ variables/parameters are very helpful, indeed.

I get it, the man page explained it well.

> 
>>> Again, not sure if I do understand your issue correctly, but the shown examples of exec.start, exec.stop, etc. are quite versatile to use.
>>> 
>>> I do start/stop my jails by "service jail start/stop”.
>> 
>> - Obviously you state you’re using service to start/stop jails, but shouldn’t this work with ‘jail -c <jailname>’, or are these subsystems not interoperable?
> 
> Hmm. I do have to admit that I never tried 'jail -c <jailname>', but I just gave it a try, and yes, it works as well :-) 
> 
> I do use "service jail start/stop" because that will obey my pre-defined starting/stopping order of jails (which I do need to have, e.g. dns before mail and such) in /etc/rc.conf
> 
> 	jail_enable="YES"
> 	jail_reverse_stop="YES"
> 	jail_list="dns mail …”

Awesome!  For my use, I’m averse to starting jails at host boot- so I’m really excited this works.

Thanks so much Michael- this totally answered my question, I’m back on the right path to using jail.conf with my setup!

Best,
.ike





More information about the freebsd-jail mailing list