Is System V IPC namespace still shared across jails?
Mark Martinec
Mark.Martinec+freebsd at ijs.si
Tue Dec 13 15:55:33 UTC 2016
2016-12-13 16:29, Alan Somers wrote:
> I've already added support for sysvmsg, sysvsem, and sysvshm to
> iocage. They all default to "new", which means you won't have to do
> anything special in your jail config to make postgres work. You can
> find the patch below. The only reason it hasn't been merged is
> because it can't (yet) be made to work correctly on the develop branch
> of iocage. But it works fine on the master branch.
>
> https://github.com/iocage/iocage/pull/370
>
> -Alan
Superb, appreciated!
Mark
> On Tue, Dec 13, 2016 at 8:08 AM, Mark Martinec
> <Mark.Martinec+freebsd at ijs.si> wrote:
>> 2016-12-12 20:38, Christian Schwarz wrote:
>>>
>>> With the new jail parameters, new namespaces for SysV IPC are
>>> possible
>>> on FreeBSD 11.
>>>
>>> For those ezjail users, add something like this to the jail's config
>>> after creating it using 'ezjail-admin create':
>>>
>>> export jail_postgres_parameters="sysvmsg=new sysvsem=new sysvshm=new"
>>>
>>> Cheers,
>>> Christian
>>
>>
>> Thank you, this is it!
>> I missed it in the JAIL(8) man page, and is not mentioned in release
>> notes.
>>
>> Now if only the iocage would recognized the sysvmsg, sysvsem, and
>> sysvshm
>> options:
>>
>> # iocage set sysvmsg='new' xxx
>> ERROR: Unsupported property: sysvmsg!
>>
>> I guess I should file a bug report.
>> Mark
More information about the freebsd-stable
mailing list