jail

  1. MsieurSVP

    Solved Bastille, Processes and Htop

    Hello from France ! Does anyone know how to distinguish processes originating from multiple jails, specifically with htop or another tool ? Many thanks !
  2. L

    Need some help with epair / bridge for multiple Jails

    The Goal Run many jails that each serve their own ssh. I got about as far as getting the jails running and then hit a wall with networking. It seemed simple enough going in but I'm completely crashing and burning for some reason. Any help would be appreciated. The Configuration details The...
  3. spmzt

    Solved Allocating a physical interface with vnet + iocage

    Hi, Does anyone know, How I can allocate my vmx interface into jail with vnet in iocage? I can do it in ezjail with this variable: export jail_test_vnet_interface="vmx1" I think it may not support this feature without a bridge.
  4. subnetspider

    Solved Running an NTP time server in a jail?

    Hello everyone, I'm currently trying to migrate more and more of my network services into jails, mainly for learning as well as decentralization. Now I'd also like to run NTP servers in a few jails, but I don't know if that's even possible since jails use the time of the host's kernel. In...
  5. DtxdF

    jails AppJail: Simple and easy-to-use tool for creating portable jails.

    AppJail is an open source framework entirely written in sh and C to create isolated, portable and easy to deploy environments using FreeBSD jails that behaves like an application. Features: Easy to use. Parallel startup (Jails & NAT). UFS and ZFS support. RACCT/RCTL support. NAT support. Port...
  6. D

    PF Correct way to open ports for jail to jail communication in pf

    I am currently learning a bit about FreeBSD with the goal of moving my server from Debian to FreeBSD. Currently I am working on running some applications (e.g. Nextcloud) in jails. Services that are needed by multiple applications I want to outsource to own Jails, an example would be Redis. I...
  7. HL1234

    Some questions about make package-recursive

    I have search for an answer but didn't find it. first, a short description: I would like to build ports in a jail. From an example and the handbook suggestion, I have mounted the ports tree (ro) into the jail and have set "WRKDIRPREFIX=/tmp" etc. ... for places that must be writable. Result...
  8. U

    Solved Running jails from /etc/jail.conf.d?

    Hi all, On a clean install of 13.1-RELEASE, I have noticed that there is now a "/etc/jail.conf.d" folder. As this would make automated jail management easier for me, I would like to make use of it. I made a simple test configuration in /etc/jail.conf.d/test.conf, and tried starting the jail...
  9. HL1234

    portupgrade: ruby-gems fails to install in a jail with a linked port system.

    Hello, I have the same problem, like its described in two Bugs: "Bug 249083" "Bug 251667". Description: In my jail I want to install ports-mgmt/portupgrade. This port need the port devel/ruby-gems. devel/ruby-gems could be build without any error, but the install fails: ===> Installing for...
  10. U

    Solved Difficulty upgrading Jails

    Hi All, I upgraded my server from 13.0-RELEASE-p4 to 13.0-RELEASE-p13, and when I tried to run python3.9 in a jail I got the following error: ld-elf.so.1: /lib/libc.so.7: version FBSD_1.7 required by /usr/local/lib/libpython3.9.so.1.0 not found So I search on the forum and find this...
  11. A

    Solved netgraph vnet jail not getting ip address via DHCP

    Any netgraph gurus out there? I created two vnet jails with the help of the devin teske's jng scipts and example jail.conf under /usr/share/examples/jails/. I can enter either jail using jexec However, I cannot ping any targets from inside the jails. The jails do not appear to have ip...
  12. C

    Solved Accessing OpenVPN Client network from jail

    Hello. I have question. I have FreeBSD Host with one JAIL. On Host i setup OpenVPN client and i get routing to 192.168.0.1/24 over 10.4.44.109. From host i can ping 192.168.0.1 and that works fine. But from JAIL, i cant ping 192.168.0.1 and even 10.4.44.110 (my end of openVPN tunnel) Can i ask...
  13. spmzt

    ocserv in jail: cannot open /dev/tun

    Hi, I installed net/ocserv 1.1.3 on Freebsd 13.1 in jail. and I can create tun interface inside the jail. The problem is the net/ocserv try to access the /dev/tun inside my jail and it obviously fails. Here is my configuration: /etc/devfs.conf: [devfsrules_jail_overlay=5] add include...
  14. J

    Jails vs Docker performance

    I recently came across research (Bachelors thesis) that benchmarked jails against Docker. The conclusion was that, except for startup time, Docker outperformed jails in almost every category (memory - writes/sec, IO, CPU - events/sec). In some categories (read from disk), Docker outperforms by...
  15. A

    jails Jails on RPi4B as DHCP/DNS/file/web server/router

    I'm downsizing my server (an old 2006 hp ProLiant 19" rack monster with 41 disks) for a Raspberry Pi 4B 8GB as the electricity here in southern Sweden has become absurdly expensive. (The whole thing draws about €70 worth per year, now it is looking more like €4000...) While I'm redoing...
  16. epopen

    MTU of jail vimage by netgraph

    Hi All I have a question about MTU of jail vimage by netgraph. Please reference illustration of running system as follows. Running routing mode with gateway_enable="YES" @ /etc/rc.conf. Connect Jail of ssh from netif msk0(internet) via ssh. Log in is OK, but disconnect unexpected when high...
  17. rafael_grether

    Solved TOP Command & Jail

    Hi guys, Is there a way to TOP command shows username inside jail? USER_A in my host has UID 2001. USER_B in my Jail also has UID 2001. A process executed by USER_B shows to me that is executed by USER_A, when top is executed on my host. Since "top -j" brings up the JID, I think it should also...
  18. D

    Solved Jailed ping(8) can not resolve names using hosts unbound(8), but host(1) and drill(1) can

    EFFECT drill resolves r0.z201 correctly to 192.168.201.1. host resolves r0.z201 correctly to 192.168.201.1. ping works when given argument 192.168.201.1. ping doesn't work when given argument r0.z201. (fails to resolve) OBSERVATIONS When using truss I can see that ping does...
  19. K

    Single sqlserver jail+ZFS for other jails, but how?

    Greetings. I have few jails running nginx on my FreeBSD 13.1 host. I'd like to create another jail for their SQL database needs. I'd like to create ZFS dataset for this purpose (for MySQL jail) but should I create it on host? If the dataset is created within the host, could the Jail access it...
  20. L

    Migrated JAILs from TrueNAS 11.3 to JAILS over FreeBSD 13 with VNET and now IPFW inside JAIL not work: kldload ipfw - not permitted

    In jail under TrueNAS 11, was mail server that can block IPs by IPFW rules. Now I move JAIL to FreeBSD 13.1, and detect that same JAIL with same settings, not allow to load IPFW inside jail. kldload ipfw kldload: can't load ipfw: Operation not permitted For JAILs managemnt use iocage...
Back
Top