jail

  1. D

    host network in jail with minimal setup

    Hello, I have setup jail (FreeBSD 12.0-RELEASE, host is 12.1-RELEASE), I want to allow the jail to have access to host's outside network (em0 and wlan0, can be lo0 too). I have very basic knowledge of networking (I will really appreciate detailed answer with commands and explanation :) ), I...
  2. D

    Resource limits for jails

    I want a jail that can't allocate more than 512MB memory and ist not able to consume more than 25% of the cpu. The FreeBSD builtin jails have no options for resource limiting. Check jail.conf(5) and jail(8). I have found that you can limit resources for specific users according to 13.13...
  3. D

    jails and loopback

    Im new to freebsd and jails, please be patient. according to the freebsd documentation, one should create a cloned loopback for a jail instance. I can't get behind the purpose of creating multiple loopback interfaces. can someone explain me this? Should I create a new lo interface for each...
  4. K

    Solved Putting instances of dhcpd into jails

    I am looking to more centrally manage the IP assignments on my home network by using ISC's dhcpd to hand out fixed addresses. That way, I can still reliably run local DNS for the internal network and manage IP assignment by linking a MAC to a specific IP. However, I want to do this for both...
  5. B

    Potential bug with using numeric Jail names in /etc/jail.conf

    Hi All, I didn't know where to post this because I could not find a specific jail forum so figured I would post it here as a base system general thread :) Am no expert so really after some opinions from experienced users and anyone who has seen this happen. It would be great to know if this...
  6. I

    I need some help for jail setup

    I need some help for jail setup. We have now moved to jail.conf and the "devfs_ruleset" is giving us some problem. Previously, it was something like jail_jailname_devfs_ruleset="devfsrules_jail" in the old style. I tried to put "devfs_ruleset = "nginx_ruleset";" and I'm getting this error...
  7. M

    IPFW Setting a common IP for both the Public IP and Jail IP

    Hello All, We are having trouble with finding ways to redirect the public IP address to the jail IP address. We have looked into the rc.conf and jail.conf files but are now sure how we should edit any of these files to achieve this. We have previously been unsuccessful in editing pf values...
  8. B

    Solved FreeBSD 12.0p10 PostgreSQL-9.5 Cannot initialise postgresql in a jail

    I have set up a jail specifically for PostgreSQL. PostgreSQL-9.5 is installed via the pkg manager. When I try to initialise it I get this: /usr/local/etc/rc.d/postgresql oneinitdb The files belonging to this database system will be owned by user "pgsql". This user must also own the server...
  9. R

    Segmentation Fault 11

    hi, When I run a command inside a a jail using sudo I get a segmentation fault but running the command normally works. How do I go about trouble shooting this ?
  10. N

    Kernel Panics in 11.2-STABLE

    Hi, I've been having an issue with one of my servers that runs rclone all day. It kernel panics after about 13-14 days of uptime, and the only difference on this host is that it runs a lot of rclone processes inside of a jail. Here is the console message: Fatal trap 12: page fault while in...
  11. R

    Issues with file operations or why is vi slower than dd?

    I have a FreeNAS Mini running with a jail for Nextcloud. While moving my files from Dropbox to the Nextcloud instance, I realized that there are many fastcgi timeouts happening. In order to investigate the cause, I observed a strange behavior which I don't really understand but my hope is that...
  12. J

    How can I assign an IPv6 address to a jail on a cloned interface?

    Hello, I have some jails on my FreeBSD host. They have IPv4 addresses on a cloned interface lo2 I created. None of the jails has an ip address on the external interface of the host. They only use the cloned interface lo2 and I configured my pf firewall so that the host acts as a router and does...
  13. R

    VNET ARP replies are lost

    My setup is as follows: freenas ---- switch ---- station freenas is running FreeBSD 11.2 with iocage jail using VNET/VIMAGE network stack (though same behaviour is observed on warden jails and previous FreeBSD releases) It all started when I noticed that station loses connection to jail...
  14. yayj

    Solved How to share a regular file between jails

    As far as I know, nullfs(5) is useful for sharing an existing and mounted directory between jails. I can edit fstab(5) file of each jails: /path/to/be/shared /usr/jails/foo/path/shared nullfs ro 0 0 /path/to/be/shared /usr/jails/bar/path/shared nullfs rw 0 0 But it seems probably true that...
  15. fishfox

    Firewalling jail > host and jail <-> jail traffic

    I'm using ezjail and IPFW, at least thus far. So far I have 10.13.13.0/8 subnet. My gateway is .1, my host server is .2, and my first jail is at .3 I noticed that from within my jail at .3 I can knock on the outside if .2. I added this rule to my host but it makes no difference: add 10032...
  16. roccobaroccoSC

    Solved Binaries get rewritten at jail start with unionfs

    I am working on a solution for mass jails deployment based on ZFS datasets and unionfs. A jail template is created by extracting base archive into the dataset. Then the dataset is mounted read-only in all the jails' roots and each jail has its own lean dataset, where only the deltas are stored...
  17. P

    How to connect a FreeBSD jail to the internet? (Amazon EC2)

    I am running a FreeBSD EC2 instance with a single jail. In a regular homebrew setup, I would create a jail in "shared IP" (iocage) mode, and configure my router to forward various ports to the jail. In EC2, I am not sure whether to share the public IP or assign a new one. I created a new...
  18. Nyakov

    Solved jail + vnet + SLAAC + ipfw

    I decided to share my setup for SLAAC on jail vnet. 1. Create bridge and epair interface in /etc/rc.conf #Configure bridge interface for jails vnet #epair0 - jail interface cloned_interfaces="bridge0 epair0" #create bridge and epair ifconfig_bridge0="ether xx:xx:xx:xx:xx:xx addm re0 SYNCDHCP"...
  19. epopen

    Wish to migrate exist ordinary jail to VIMAGE infrastructure

    Hi All. My server upgrade to 12.0-Release and found news about VIMAGE into GENERAL config, meant VIMAGE ready for product environment. So I wish to migrate exist ordinary jail to VIMAGE infrastructure too :). But procedure stopped at default gateway. Current ordinary jail environment detail...
  20. epopen

    Solved Jail outgoing internet's IPv6 packet 50% fail problem.

    Hi All. My server's jail need outgoing internet connection for Let's encrypt OCSP Staple, but connect problem IPv6 only. Detail ifconfig wan0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500 options=8000a<TXCSUM,VLAN_MTU,LINKSTATE> ether 00:1e:68:c4:e1:9e...
Top