Jails

[Devin Teske]

On Jan 13, 2013, at 7:45 AM, Leonardo M. Ramé wrote:

>> ________________________________
> 
>> From: "Zyumbilev, Peter" <peter at aboutsupport.com>
>> To: freebsd-questions at FreeBSD.org 
>> Cc: Mark Felder <feld at feld.me>; Devin Teske <dteske at freebsd.org>; Devin Teske <devin.teske at fisglobal.com> 
>> Sent: Sunday, January 13, 2013 7:09 AM
>> Subject: Re: Jails
>> 
>> 
>> On 12/01/2013 18:41, Devin Teske wrote:
>>> 
>>> On Jan 11, 2013, at 11:31 PM, Zyumbilev, Peter wrote:
>>> 
>>>> Hi,
>>>> 
>>>> I have not tested it, but so far things do not look promising...
>>>> 
>>>> I cannot even run "netstat -nvatp" properly, however sopcast seemed to
>>>> run, but have not tested it, for plex - have not tried yet.
>>>> 
>>> 
>>> netstat isn't allowed in traditional jails (but is allowed in "vimage" jails which have their own network stack).
>>> 
>>> If you're able/willing to compile a new kernel to enable the "VIMAGE" feature, then this can be improved so that you can indeed use netstat within the jail.
>>> 
>>> NOTE: netstat is not allowed within traditional (non-VIMAGE) jails due to security restrictions.
>>> 
>> 
>> My  host os is Nas4Free and is stripped version of freebsd - e.g I
>> cannot even compile ports - that is why I use jails - so no new kernel
>> for me there :)
>> 
>> So far I am quite happy with it  - I use it mainly as DLNA
>> server(Serviio), ZFS,UPS support & Transmission made it quite good
>> platform - would take plenty of time to get all this in plain FreeBSD
>> install.
>> 
>> The only thing that I might be missing is Plex, but due to lack "browser
>> per folder feature", I will stick to open standard - DLNA.
>> 
>> Peter
> 
> 
> Hi, I've installed debian 6 in a jail, from FreeBsd 9.1 x86-64 by following the instructions from this thread. However, I also updated my /etc/resolv.conf inside the jail, but I get this error when I do ping:

ping is usually denied from within a jail (for security purposes).

Add the following to /etc/rc.conf:

jail_sysvipc_allow="YES"

And then reboot.
-- 
Devin

_____________
The information contained in this message is proprietary and/or confidential. If you are not the intended recipient, please: (i) delete the message and all copies; (ii) do not disclose, distribute or use the message in any manner; and (iii) notify the sender immediately. In addition, please be aware that any message addressed to our domain is subject to archiving and review by persons other than the intended recipient. Thank you.