bastille

  1. sidetone

    jails devfs.rules problem including other rulesets: bastille

    When I use a bastille, jail rules that include rules 1 to 3 from /etc/defaults/devfs.rules work. Rules 1 to 3, referenced in the beginning of rule 4: [devfsrules_jail=4] add include $devfsrules_hide_all add include $devfsrules_unhide_basic add include $devfsrules_unhide_login When I reference...
  2. sidetone

    Bastille jail: to build and test builds

    Install sysutils/bastille, net/gitup and x11-servers/xorg-nestserver on host through either ports or packages. Bastille jail in the example or instruction will be named "myjail". I'll use an alias IP and network card as an example. doas or sudo can be used from your host system, depending on...
  3. sidetone

    Solved Executing X11 program built in Bastille jail

    How do I execute a graphical program that was built in Bastille? How would I do it from the package to the Host system? Also, how would I run it from inside the jail? A long time ago, I ran a graphical program inside an xserver inside a jail, in ezjail. I used x11-servers/xorg-nestserver then...
  4. M

    Solved BastilleBSD Jail can not run package update or install with pf configured on host

    Hi all, DiscIaimer: I only partially understand what I am doing. I set up a FreeBSD 13.0 Host with. BastilleBSD. Everything working fine but I struggle with the configuration of the pf packet filter, which is new to me (only used ipfw since). My goal is to be as restrictive as possible without...
  5. M

    PF Nat is not forwarding to jail

    I am using PF and cannot get packets forwarded to a particular jail. I want data that comes into my base machine on port 4243 to be forwarded to my jail that has a service that is listening on port 4243. I have verified with telnet that the jail can receive data on that port. Here is my...
  6. sidetone

    Solved jails - Accessing devices from Bastille

    How do I make devices in /dev/ accessible inside a Bastille jail? When I have two sets of rules, how do I set this in rc.conf.local, from within the host system? devfs_system_ruleset="localrules" How would bastille also get referenced with this? In devfs.rules of the host (not within the...
  7. G

    jails How can I play media trough SSH?

    I am trying to play media trough SSH running VLC in a bastille jail called briarcliff with the IP 192.168.1.1 and when I run ssh -CY briarcliff vlc the VLC interface loads, but when I play an audio file, no sound comes out at all. And when I try to play a video file, it just blinks between all...
  8. G

    running LibreOffice in a bastille container

    I have made a bastille container called briarcliff and installed LibreOffice and xauth in it when I try to run LibreOffice trough ssh on the host The splash screen shows up but it gets stuck there and libreoffice never loads. I ran ssh -vvv -CY briarcliff libreoffice but I don't understand the...
  9. saeedpersa

    PF PF and Bastille

    dear my friends I configured Bastille and it works well but there is another problem which I don't know how to handle it. Internet > Firewall > VMWare > FreeBSD > BastilleOS how can I configure BastilleOS to access the Internet? I want to access the internet from my BastilleOS? and How...
  10. dajero

    Shell bastille - a script to easily create and update jails

    Yesterday I put the source code online for a simple utility, Bastille, which facilitates the creation and management of jails that share the same system components. In that sense, it's similar to ezjail, but that's actually all Bastille does. Bastille does not provide its own service, relying...
Top