Reconfigure ezjail to use https

James B. Byrne byrnejb at
Mon Mar 27 18:48:30 UTC 2017

I am having a problem with ezjail's choice of ftp as its default
mechanism for obtaining FreeBSD install and update data.  Specifically
with our pf firewall blocking it.

I have attempted to get the ftp-proxy solution working but, as usual,
the documentation ceases to be helpful before a working solution is
arrived at.

pass out proto tcp from $proxy to any port ftp

where $proxy expands to the address the proxy daemon is bound to.

The difficulty being that the example previously has shown this:

nat-anchor "ftp-proxy/*"
rdr pass on $int_if proto tcp from any to any port ftp ->
port 8021

with nary a mention of $proxy.  It would have been a LOT clearer had
the example done something like this instead (if indeed this is what
is meant):

proxy =
nat-anchor "ftp-proxy/*"
rdr pass on $int_if proto tcp from any to any port ftp -> $proxy port

Which would at least have been consistent.  However, I cannot get this
to work either.

In any case ftp is no what I would prefer to use.  However, the
documentation respecting changing /usr/local/etc/ezjail.conf so that
the protocol used is likewise either misleading or wrong.

If I do this:

ezjail-admin install -h

Then I see this:

Could not fetch base from
  Maybe your release (11.0-RELEASE) is specified incorrectly or the
host does not
provide that release build.
  Use the -r option to specify an existing release or the -h option to
specify an alternative ftp server.

However, if I do this:


Then I see this:

--2017-03-27 14:46:01--
Resolving (,
Connecting to
(||:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 96364744 (92M) [application/octet-stream]
Saving to: 'base.txz'

is a valid protocol, host and path.  Why then does ezjail not use it?

***          e-Mail is NOT a SECURE channel          ***
        Do NOT transmit sensitive data via e-Mail
 Do NOT open attachments nor follow links sent by e-Mail

James B. Byrne                mailto:ByrneJB at
Harte & Lyne Limited
9 Brockley Drive              vox: +1 905 561 1241
Hamilton, Ontario             fax: +1 905 561 0757
Canada  L8E 3C3

More information about the freebsd-questions mailing list