New jail_interface broken in 6.1-RELEASE

Dirk Engling erdgeist at erdgeist.org
Thu May 11 12:04:14 PDT 2006


On Thu, 11 May 2006, Florent Thoumie wrote:

> Really, there's no -rc team. The might be 3 or 4 committers committing
> in the rc area on a regular basis.

Then, I think, its time for me to volunteer and try to make the best of it 
in future. I understand, my mail has been a little too aggressive, I didnt 
want to discourage you from doing _your_ volunteer work.

> Really, I would have preferred you bug me about finding a solution to
> your problem rather than sending such a mail.

I wrote this mail in a mixture of urge to let it out and hope someone here 
at the list has an idea how to quickfix the situation.

> I tried to make FreeBSD better and just have been over-enthusiast about
> this. I understand this affects you because it affects your pet project.
> Please have a look at the list of past ERRATAs. I'm not trying to be
> rude nor trying to minimize my fault but software have bugs, get used to
> it.

Its nothing personal. I just feel discomfortable by the fact, that your 
mistake (hey, everyone makes mistakes) has made it into a release, 
apparently without any testing. Shouldnt there be a Q/A? Thats why I put 
the mail on list, not to embarrass you.

>> a) What, if I want to run several jails on one IP address? Stopping the
>> first jail on that IP would remove the alias from my interface
>> subsequently taking it away from the second jail.
>> b) What, if I'd chose to run a jail on host systems IP? Stop it, BAMM -
>> goes my host system.
>
> Does it even work? Or you mean a configuration error?

Sure its works, its even a thing I would everyone encourage to do. Its
always a good idea to seperate services, even if you only have one IP.

> d) What if I don't like default behavior?
>
> Then just don't use jail_interface. Jail_interface is OFF (well, empty)
> by default.

Ehrm, your test failed ;) So its just a matter of luck, you dont always 
delete the IP from all interfaces.

There are other (imho better) solutions for the problem (I dont even 
consider one, anymore).

> The feature itself is ok, mistakes around the feature are mine, and I
> already apologized at least ten times in the past few days. I can do it
> again, I'm *really* sorry. Please take this as a beginner's mistake. If
> you don't want to use FreeBSD anymore because I made a mistake, then
> don't, it's up to you.

Again, its not your fault. And theres no need to take it personal. I just 
didn't want to let this pass. Hopefully there will be a working Q/A in 
future. I make mistakes, too, made them in "pet" projects as well as in 
projects I am paid for. And I don't think that users of my open source 
projects deserve less means to express their anger than my costumers.

Still, I do not think the jail_if feature is a good idea, I even consider 
it contra-productive. But thats not subject to discussion, anymore.

> Note2: Fortunately it was rc.d/jail and not rc.subr, I would have
> received hundreds of angry mails.

You may have had received them a lot earlier, though.

Regards,

   erdgeist


More information about the freebsd-rc mailing list