jails Linux Jails in production

[hbauer]

I have one Linux application that is not supported on FreeBSD. This application would only be internally connected without connection to the internet. I have read https://iocage.readthedocs.io/en/latest/debian.html

It says

This is not recommended for production use

Is there anybody out there who could indicate why this is not ready for production use? Or does somebody use this in production?

 

[drhowarddrfine]

It looks like you are asking a question about Linux and their applications which would be off topic here.

 

[hbauer]

not really, at least I did not itend to. I am asking if an iocage jail with linux is ready for production use.

 

[Cath O'Deray]

… one Linux application that is not supported on FreeBSD. …

Please, can you name the app?

---

I guess, the warning about production use is for drive-by readers to not imagine that, for example, Debian in a jail on FreeBSD can be supported in the same way as a normal installation of Debian.

Cherry-picking something from <https://cgit.freebsd.org/ports/log/sysutils/debootstrap>:

sysutils/debootstrap: install mremap(2) apt(8) workaround · freebsd/freebsd-ports@af9d31c

Sponsored by: The FreeBSD Foundation

github.com

– amongst the comments:

# Workaround for Linuxulator missing mremap(2) support; …

Via <https://wiki.freebsd.org/Linuxulator>, the canonical list of unimplemented syscalls:

<https://cgit.freebsd.org/src/tree/sys/compat/linux/linux_dummy.c>

HTH

 

[hbauer]

@grahamperrin

Please, can you name the app?

yes, its mailpiler

piler uses the epoll event polling method, which is Linux-only.

The author is not supporting anymore a version that should run on FreeBSD

 

[cracauer@]

Is there anybody out there who could indicate why this is not ready for production use? Or does somebody use this in production?

Apart from general concerns about the Linux compatibility layer (nothing specific I am thinking of, just general) this seems perfectly suitable for production. If it works at all for testing I think it is unlikely to break later.