dvl@
Developer
I have a vnet jail (pkg01) on my FreeBSD 13.2 host (r730-01). It is the only
* some jails on that same host cannot ping pkg01, some can't.
* other hosts and jails on other hosts can ping pkg01
Failed pings, from the monitoring jail, are accompanied by these messages:
To me, that's saying the pkg01 jail is getting the ping, but can't reply because the
* 2001:470:8abf:7055:c348:9dc1:0:29 is pkg01
* 2001:470:8abf:7055:b6f9:d572:6622:ea2d is the monitoring jail
This is the pkg01 jai configuration:
This is the monitoring jail configuration:
Any ideas?
vnet jail on this host. The main problem: My monitoring jail cannot ping6 the pkg01 jail. ping via IP4 is not an issue anywhere. The rest of this discussion is about IPv6 unless otherwise mentioned.* some jails on that same host cannot ping pkg01, some can't.
* other hosts and jails on other hosts can ping pkg01
Failed pings, from the monitoring jail, are accompanied by these messages:
Code:
19:42:26.224666 IP6 2001:470:8abf:7055:c348:9dc1:0:29 > ff02::1:ff22:ea2d: ICMP6, neighbor solicitation, who has 2001:470:8abf:7055:b6f9:d572:6622:ea2d, length 32
19:42:27.241219 IP6 2001:470:8abf:7055:c348:9dc1:0:29 > ff02::1:ff22:ea2d: ICMP6, neighbor solicitation, who has 2001:470:8abf:7055:b6f9:d572:6622:ea2d, length 32To me, that's saying the pkg01 jail is getting the ping, but can't reply because the
neighbor solicitation is not getting a result.* 2001:470:8abf:7055:c348:9dc1:0:29 is pkg01
* 2001:470:8abf:7055:b6f9:d572:6622:ea2d is the monitoring jail
This is the pkg01 jai configuration:
Code:
[19:45 r730-01 dvl /etc/jail.conf.d] % cat pkg01.conf
pkg01 {
#
# start of standard settings for each jail
#
# exec.start = "/bin/sleep 5";
exec.start += "/bin/sh /etc/rc";
exec.stop = "/bin/sh /etc/rc.shutdown";
exec.clean;
mount.devfs;
path = /jails/$name;
allow.raw_sockets;
#securelevel = 2;
exec.prestart = "logger trying to start jail $name...";
exec.poststart = "logger jail $name has started";
exec.prestop = "logger shutting down jail $name";
exec.poststop = "logger jail $name has shut down";
host.hostname = "$name.int.unixathome.org";
exec.consolelog="/var/tmp/jail-console-$name.log";
persist;
#
# end of standard settings for each jail
#
allow.chflags;
allow.mount.devfs;
allow.mount.fdescfs;
allow.mount.linprocfs;
allow.mount.nullfs;
allow.mount.procfs;
allow.mount.tmpfs;
allow.mount.zfs=true;
allow.mount=true;
allow.raw_sockets;
allow.socket_af;
children.max=200;
enforce_statfs=1;
exec.created+="zfs jail $name data03/poudriere";
exec.created+="zfs set jailed=on data03/poudriere";
exec.poststart += "jail -m allow.mount.linprocfs=1 name=$name";
exec.poststop += "/usr/local/sbin/jib destroy $name";
exec.prestart += "/usr/local/sbin/jib addm $name igb0";
host.domainname=none;
sysvmsg=new;
sysvsem=new;
sysvshm=new;
vnet.interface = "e0b_$name";
vnet;
}This is the monitoring jail configuration:
Code:
[19:45 r730-01 dvl /etc/jail.conf.d] % cat webserver.conf
webserver {
#
# start of standard settings for each jail
#
exec.start = "/bin/sh /etc/rc";
exec.stop = "/bin/sh /etc/rc.shutdown";
exec.clean;
mount.devfs;
path = /jails/$name;
allow.raw_sockets;
#securelevel = 2;
exec.prestart = "logger trying to start jail $name...";
exec.poststart = "logger jail $name has started";
exec.prestop = "logger shutting down jail $name";
exec.poststop = "logger jail $name has shut down";
host.hostname = "$name.int.unixathome.org";
exec.consolelog="/var/tmp/jail-console-$name.log";
persist;
#
# end of standard settings for each jail
#
ip4.addr = "igb0|10.55.0.3";
ip6.addr = "igb0|2001:470:8abf:7055:b6f9:d572:6622:ea2d";
}Any ideas?
Code:
[19:43 webserver dan ~] % ping pkg01
PING6(56=40+8+8 bytes) 2001:470:8abf:7055:b6f9:d572:6622:ea2d --> 2001:470:8abf:7055:c348:9dc1:0:29
^C
--- pkg01.int.unixathome.org ping6 statistics ---
3 packets transmitted, 0 packets received, 100.0% packet loss
[19:47 webserver dan ~] % ping -4 pkg01
PING pkg01.int.unixathome.org (10.55.0.29): 56 data bytes
64 bytes from 10.55.0.29: icmp_seq=0 ttl=64 time=0.105 ms
64 bytes from 10.55.0.29: icmp_seq=1 ttl=64 time=0.067 ms
64 bytes from 10.55.0.29: icmp_seq=2 ttl=64 time=0.060 ms
64 bytes from 10.55.0.29: icmp_seq=3 ttl=64 time=0.069 ms
^C
--- pkg01.int.unixathome.org ping statistics ---
4 packets transmitted, 4 packets received, 0.0% packet loss
round-trip min/avg/max/stddev = 0.060/0.075/0.105/0.018 ms
[19:47 webserver dan ~] %
)
