jails Creating Jails

[mumu]

Hi, I heard iocage is obsolete. What's the recommended way to create jails and configure networking ?

 

[SirDice]

sysutils/bastille is nice, good enough for my purposes at least.

Bastille — Bastille 1.1.0.251001 documentation

 

[chrbr]

The link below gives a very good overview by showing examples of configurations and commands for different setups of bastille.

Managing Jails in FreeBSD with Bastille

Bastille is a container (jails) manager with 0 dependencies since it is written in Bourne Shell. It makes use of the best functionalities and technologies that FreeBSD offers us, thus facilitating the management, creation, destruction, and updating of jails throughout their life cycle.

alfaexploit.com

 

[mumu]

Ok so Bastille it is. Thanks

 

[DtxdF]

I use AppJail: https://github.com/DtxdF/AppJail

 

[SKull]

I switched from iocage to just using the tools in the base system. This makes working with jails way faster and easier.

 

[victort]

Obsolete? Really? Or just works and doesn’t need much more developement?

CBSD is available also.

 

[jbo@]

I've been using sysutils/cbsd sucessfully for pretty much a decade now. The author, Ole is a really friendly & quick guy.

Other than that, there's nothing wrong with just using base utilities.

 

[gotnull]

I heard iocage is obsolete

It was indeed:

GitHub - iocage/iocage: A FreeBSD jail manager written in Python 3

A FreeBSD jail manager written in Python 3. Contribute to iocage/iocage development by creating an account on GitHub.

github.com

But this is the resurrected iocage:

FreshPorts -- sysutils/iocage-devel: FreeBSD jail manager written in Python3

iocage is a jail/container manager amalgamating some of the best features and technologies the FreeBSD operating system has to offer. It is geared for ease of use with a simple and easy to understand command syntax.

www.freshports.org

New home and new release, maintained for vanilla FreeBSD

Release 1.3 · freebsd/iocage

What's Changed New home and new release, maintained for vanila FreeBSD This release contains many fixes and improvements (maybe new bugs too) that did not have a proper release since 2019… New Ma...

github.com

This is nice, the maintainer looks busy, I am not a coder but from the commits I saw he updated the old parts, the doc, python3.6 to 3.9 to 3.11, fixed bugs, it's a good news.
I've never been a big user of iocage, mainly because it was already in dormant state when I came to FreeBSD but I do appreciate that a such popular tool is not throw away.

What's the recommended way to create jails and configure networking ?

Honestly the Handbook is really helpful, I don't know if you already read it since it has been rewritten but it might worth the look.

Chapter 17. Jails and Containers

Jails improve on the concept of the traditional chroot environment in several ways

docs.freebsd.org

It also lists few jail manager:

Chapter 17. Jails and Containers

Jails improve on the concept of the traditional chroot environment in several ways

docs.freebsd.org

Also few links I've already published in another thread:

jails - Looking for a good current getting started with jails tutorial

Do you know of any getting started with jails tutorials that are current and written for the novice?

forums.freebsd.org

Honorable mention for these following tools nicely shared by FreeBSD users:

GitHub - Emrion/kjail: Set of simple scripts that manages thin jails

Set of simple scripts that manages thin jails. Contribute to Emrion/kjail development by creating an account on GitHub.

github.com

GitHub - mkjail/mkjail

Contribute to mkjail/mkjail development by creating an account on GitHub.

github.com

GitHub - illuria/jailer: Minimal, flexible, and easy-to-expand FreeBSD jail manager.

Minimal, flexible, and easy-to-expand FreeBSD jail manager. - illuria/jailer

github.com

kjail and mkjail focus more on reliability upon updates & upgrades (kjail is based on Thin jail while mkjail is based on Thick jail).
Both aren't fully complete jail manager the user has a bit of work to do, mostly networking part.
jailer is more complete as a jail manager but focus only on VNET jail.
All three require ZFS.


I think you ready to play with jails now, have fun

 

[mumu]

It was indeed:

GitHub - iocage/iocage: A FreeBSD jail manager written in Python 3

A FreeBSD jail manager written in Python 3. Contribute to iocage/iocage development by creating an account on GitHub.

github.com

But this is the resurrected iocage:

FreshPorts -- sysutils/iocage-devel: FreeBSD jail manager written in Python3

iocage is a jail/container manager amalgamating some of the best features and technologies the FreeBSD operating system has to offer. It is geared for ease of use with a simple and easy to understand command syntax.

www.freshports.org

Release 1.3 · freebsd/iocage

What's Changed New home and new release, maintained for vanila FreeBSD This release contains many fixes and improvements (maybe new bugs too) that did not have a proper release since 2019… New Ma...

github.com

This is nice, the maintainer looks busy, I am not a coder but from the commits I saw he updated the old parts, the doc, python3.6 to 3.9 to 3.11, fixed bugs, it's a good news.
I've never been a big user of iocage, mainly because it was already in dormant state when I came to FreeBSD but I do appreciate that a such popular tool is not throw away.


Honestly the Handbook is really helpful, I don't know if you already read it since it has been rewritten but it might worth the look.

Chapter 17. Jails and Containers

Jails improve on the concept of the traditional chroot environment in several ways

docs.freebsd.org

It also lists few jail manager:

Chapter 17. Jails and Containers

Jails improve on the concept of the traditional chroot environment in several ways

docs.freebsd.org

Also few links I've already published in another thread:

jails - Looking for a good current getting started with jails tutorial

Do you know of any getting started with jails tutorials that are current and written for the novice?

forums.freebsd.org

Honorable mention for these following tools nicely shared by FreeBSD users:

GitHub - Emrion/kjail: Set of simple scripts that manages thin jails

Set of simple scripts that manages thin jails. Contribute to Emrion/kjail development by creating an account on GitHub.

github.com

GitHub - mkjail/mkjail

Contribute to mkjail/mkjail development by creating an account on GitHub.

github.com

GitHub - illuria/jailer: Minimal, flexible, and easy-to-expand FreeBSD jail manager.

Minimal, flexible, and easy-to-expand FreeBSD jail manager. - illuria/jailer

github.com

kjail and mkjail focus more on reliability upon updates & upgrades (kjail is based on Thin jail while mkjail is based on Thick jail).
Both aren't fully complete jail manager the user has a bit of work to do, mostly networking part.
jailer is more complete as a jail manager but focus only on VNET jail.
All three require ZFS.


I think you ready to play with jails now, have fun

Cheers

 

[mumu]

sysutils/bastille is nice, good enough for my purposes at least.

Bastille — Bastille 1.1.0.251001 documentation

Thanks. This looks like the goto package for managing jail's.