NVidia + run X apps from jail

[Petr Fischer]

> Petr Fischer wrote:
> > 
> > So I gave up OpenGL in a jail and installed everything (whole desktops + kodi + all deps) on the base host (server:0).
> > 
> > A also tried to run whole Xorg in a jail, configured many devfs rules (nvidia devs, mixer devs etc etc), but also no luck - there was some error like: "Can't get extended write mode on /dev/io" (or something like this).
> 
> See [1]. But in Japanese. So, show briefly `How to use X in
> Jail'. 
> 
> Note: I assume that Jail uses by ezjail because I don't know
> jail configuration except for ezjail ;-p
> 
> (1) Apply patch [2] in your kernel and rebuild
>   If patch failed, check manually and tell me :-)
> (2) Install sysutils/ezjail
> (3) Rewrite /usr/local/etc/ezjail.conf with your enviroment
> (4) Create and configure Jail environment
> (5) Set /etc/devfs.rules like [3]
> (6) Edit /usr/local/etc/ezjail/foo which you want to XIJ as
>   follows:
>   1) set devfs ruleset with it's number like:
> 	export jail_desktop_devfs_ruleset=11
>   2) set `allow.kmem' with jail_desktop_parameters like:
> 	export jail_desktop_parameters="allow.kmem;allow.sysvipc;"
>   3) if you thorough ICMP packet set
> 	jail_JID_socket_unixiproute_only="NO"
>     where JID is the `jail name' of XIJ
> (6) Start ezjail
> 
> [1] https://people.freebsd.org/~kiri/kbug/bof/2016/No.2/
> [2] https://people.freebsd.org/~kiri/jail/12.0-CURRENT-r303086.diff
> [3] https://people.freebsd.org/~kiri/jail/devfs.rules

I found some "kmem" patches in OpenBSD world, it's nice that it's possible also in FreeBSD.

I will wait for 12-RELEASE, then I will test it.

Thanks for info!

> 
> > 
> > But thanks Scot + Arto for your answers, I learned a lot of small details.
> > 
> > > -- 
> > > Arto Pekkanen
> > _______________________________________________
> > freebsd-x11 at freebsd.org mailing list
> > https://lists.freebsd.org/mailman/listinfo/freebsd-x11
> > To unsubscribe, send any mail to "freebsd-x11-unsubscribe at freebsd.org"
> > 
> ---
> KIRIYAMA Kazuhiko