jail

  1. N

    Solved expose VNET jail to WAN

    Hello, I have a webserver configured in a VNET jail. The jail has its own IP 192.168.1.11 and I can access it in my LAN network without issue. However when I'm outside of my network, I can't reach the webserver. I got either timed out or "connection reset by peer" errors. I have the forward...
  2. M

    Iocage jail network - Need help please

    Hi, I am having issues setting up network on a dedicated server. Basic network tests are failing (cf. end of this message) 1/ Here is main objectives Secure both HOST and JAILS Jails must be able to access public IP (Internet) Jails MUST NOT be able to see any other jail than themself NB : I...
  3. B

    Jail: Resolve kernel and userland version mismatch

    Hello everyone, today I tried to update the pkg list within one of my (classic) jails: # pkg update Updating FreeBSD repository catalogue... [bifrost.arthur] Fetching data.pkg: 100% 9 MiB 9.9MB/s 00:01 Processing entries: 0% Newer FreeBSD version for package zx: To ignore this...
  4. NapoleonWils0n

    Shell zsh check os with ostype and uname

    i have 3 jails that use nullfs to mount the home directory each jail has zsh installed and so they all use the zsh config files i need a way to check the os, so i can have different shell config for each jail so they can have different shell paths XDG_RUNTIME_DIR directories, or use X11 or...
  5. kzxc8

    Jails losing their IP address overnight on ec2

    I have an EC2 instance with 2 jails, it's jail.conf looks like: jail1 { exec.start = "/bin/sh /etc/rc"; exec.stop = "/bin/sh /etc/rc.shutdown"; exec.consolelog = "/var/log/jail_console_${name}.log"; allow.raw_sockets; exec.clean; mount.devfs; path = "/jail/${name}"; ip4.addr...
  6. C

    How does FreeBSD fit this specific use case?

    Hi all, I am a long time Debian user. I use Debian professionally and personally for almost 20 years now. I know nothing about FreeBSD, but I am exploring alternatives for a specific use case I have, and FreeBSD is a candidate. I work for a software agency, we do very different kind of...
  7. B

    jails Jails and sched_setscheduler

    Hello. Need jails option - "allow.setscheduler" for this function. There is a couple software needs this. One of this is freeswitch to run in a jail.
  8. G

    ZFS sshfs of remote storage to vnet jail with nullfs to child jail

    I am trying to figure out how to better handle a dropped sshfs connection and need to do some testing but am not sure about all that I should test. The setup is: a vnet jail, with a child jail the vnet jail establishes an sshfs connection to remote storage the vnet jail then uses nullfs (rw...
  9. R

    Solved pkg in jail not working

    Hi, I can't install a package in a jail with pkg, it blocks on the installation message. # jexec test # pkg install nano The package management tool is not yet installed on your system. Do you want to fetch and install it now? [y/N]: y Bootstrapping pkg from...
  10. tetsuo

    Solved Share ZFS filesystem in host and jail

    Hello I have a jail configured like this: jellyfin { # STARTUP/LOGGING exec.start = "/bin/sh /etc/rc"; exec.stop = "/bin/sh /etc/rc.shutdown"; exec.consolelog = "/var/log/jail_console_${name}.log"; # PERMISSIONS allow.raw_sockets; exec.clean; mount.devfs; allow.mount = true...
  11. M.E.

    jails Installing FreeBSD5 in a jail in FreeBSD14

    I would like to test how far in time can Jails keep old versions and I am trying to deploy a FreeBSD5 (the first release supporting amd64) in a jail being the host FreeBSD14. This host has several FreeBSD14 jails and they work without issues. I have tried to follow the same procedure but being...
  12. B

    Solved Numeric Jail names become the Jails JID

    Hi All, Noticed something interesting when creating a jail, if you use a numeric name it will assign that as the JID. Really appreciate it if anyone could help me answer the following questions - - Is this normal for jails or a bug? - Does it create a security risk using numeric names? - Why...
  13. V

    Firefox via Jail = Tearing videoframe

    FreeBSD 14.1 FreeBSD 14.2 CPU: Intel i7-4770k GPU: Intel HD Graphics 4600 Kernel module: i915kms Xorg, sddm User are member of the video group. Launching Firefox (or Librewolf) on the host: the video plays correctly. Launch Firefox (or Librewolf) via Jail and get a Tearing videoframe. I check...
  14. N

    jails Confusion about what FreeBSD version the jail managed by iocage really is at

    Hi, I run FreeBSD 14.0 on the host and have been running iocage for many years. Current installed version of iocage is 1.2. The jail is running version 13.1 according to iocage: root@host:~ # iocage get release webserver-01 13.1-RELEASE But if I login to the jail: root@host:~ # iocage...
  15. gimonchik

    general/other the Internet does not work in linuxulator

    I have installed ubuntu and the internet does not work there without root
  16. S

    Jail VNET no connection after reboot

    I have 3 jail using VNET for networking. The setup is mostly following from Jail handbook guide. The problem is, after reboot 2 jail has no access to internet and cannot accessed from outside, restarting all jail fix this problem. here is some /var/log/messages Dec 27 11:06:00 freebsd...
  17. R

    jails Netgraph Part II with jail and bhyve examples

  18. C

    [Jail] Fail to update FreeBSD Jail once the host is updated to latest patch

    Hi everyone, Today I wanted to create a simple Jail template ZFS dataset so that I can just do a zfs clone template_dataset@snapshot mynewjail_dataset to create a new one. However, when I do freebsd-update fetch and freebsd-update install to install the latest security patch, I find that I no...
  19. R

    Introduction to Netgraph and jails example

  20. Jim L.

    jails PAM: How can I apply a pam_jail(8) rule to only a single user?

    I'm trying set up an SSH service that uses pam_jail to jail a specific user when they authenticate. The following /etc/pam.d/sshd file works great for jailing user userA into the jail rooted in /jail/jailA: # # # PAM configuration for the "sshd" service # # auth #auth sufficient...
Back
Top