ezjail vs. manually jails

Y

yueliu_32214

Hi,
I am currently think of building jails on freebsd, either manually, or use the ezjail framework. I have a concern is that as I can see,
all the ezjail's jails share some directories, through base jail, like /lib, /libexec. Whether that means, if for some reason, I modified/added something
in /libexec for jail A, then all the other jails will be affected by that. If that is the case, I guess building jails manually so that each jail is totally on its own is better?

Thanks for any help
 
ezjails only shares the base system. The great thing about ezjails is, well, it's easy.

And the base is mounted read only (which i would guess is more secure)


of course there is a doc in the handbook i think which covers doing the same sort of thing in a manual way. And also, with ZFS you can use clones which is quite nice.
 
yueliu_32214 said:
Ok. I guess using ezjail doesn't really have any disadvantage over manually creating jails.
Click to expand...


it doesn't if you want to use the bigger "full os" type of jail.

if you wanted to use the really thin "only what you need" jail then it might....

i love ezjails though
 
wonslung said:
it doesn't if you want to use the bigger "full os" type of jail.

if you wanted to use the really thin "only what you need" jail then it might....

i love ezjails though
Click to expand...


Said it best
 
You must log in or register to reply here.
Back
Top