Re: Jail problems

From: Melvyn Sopacua <freebsd-current_at_webteckies.org>
Date: Mon, 5 Apr 2004 23:52:31 +0200
On Monday 05 April 2004 17:07, Ivan Voras wrote:
> Kirk Strauser wrote:
> > At 2004-04-05T14:12:17Z, Ivan Voras <ivoras_at_fer.hr> writes:
> >>This is probably something big and obvious I'm missing, but what?
> >
> > What version of FreeBSD are you using?  If 5.x, do you have /dev mounted
> > inside each jail?
>
> You're right! I mis-mounted /dev! That, and some fiddling around solved the
> problems, thanks!

Maybe the attached makejail.sh script helps:
1) put it in /usr/src
2) create a /usr/src/ports-jail.sh which simply installs a default set of 
ports (in our case postfix/apache/php and the excellent 'jailer' port).
3) if needed, create an rc.conf.jail in /etc/ which sets some sensible default 
options (recent work done in the rc system could make this obsolete)
4) if needed create /etc/jailpatches/patch-login.conf - in our case it creates 
the 'standard' class, with more restrictive defaults.
5) You also need "/sbin/mount_jaildev":
##!/bin/sh

. /etc/rc.subr

jail_root=$1
if [ -z "$2" ]; then
        jail_ruleset=devfsrules_jail
else
        jail_ruleset=$2
fi
devfs_rulesets="/etc/defaults/devfs.rules /etc/devfs.rules"

devfs_mount_jail $jail_root $jail_ruleset

-- 
Melvyn

=======================================================
FreeBSD sarevok.webteckies.org 5.2-CURRENT FreeBSD 5.2-CURRENT #3: Sun Apr  4 
02:24:06 CEST 2004     
root_at_sarevok.webteckies.org:/usr/obj/usr/src/sys/SAREVOK_NOAPM_NODEBUG  i386
=======================================================

Received on Mon Apr 05 2004 - 12:52:38 UTC

This archive was generated by hypermail 2.4.0 : Wed May 19 2021 - 11:37:50 UTC