Re: [RFC] Skeleton jail (rc.d feature proposal)

在 Fri, 20 Feb 2009 09:16:19 +0800，Xin LI <delphij_at_delphij.net> 写道:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Hi, Bjoern,
>
> Bjoern A. Zeeb wrote:
> [...]
>> I do not have the following two on most/any of my machines:
>>
>>>     usr/src
>>>     usr/obj
>
> I agree.
>
>> The correct way to do this I think would leave rc.d/jail untouched and
>> (pre-)populate an /etc/fstab.<jname> and use that.
>
> I do not think this is a very good approach for this use case.
>
> Making it an rc.conf option, enables the following tasks as a one-liner
> change:
>  - Enabling/Disabling skeleton jail (how will the system perform if I
> have the template directories read-only?);
>  - Switching template root (what will happen if switch from 7.1 userland
> to 7.2 userland?);
>  - Change mount points within all jails.
>
> I do admit that all these can be done with scripts though.
>
> Cheers,
> - --
> Xin LI <delphij_at_delphij.net>	http://www.delphij.net/
> FreeBSD - The Power to Serve!
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v2.0.10 (FreeBSD)
>
> iEYEARECAAYFAkmeBGIACgkQi+vbBBjt66A4GgCgsBo4b6PNTVDX3/3SCyv/ezXI
> 6+wAn2KZFdazhFjyyf0RPFHP6+8YpyPS
> =rHFi
> -----END PGP SIGNATURE-----
> _______________________________________________
> freebsd-current_at_freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-current
> To unsubscribe, send any mail to  
> "freebsd-current-unsubscribe_at_freebsd.org"

I think I like Li Xin's way. I have set a jail host in my company with Li  
Xin's patch, it didn't change the usage of original jail
system, just add a make target in /usr/src/Makefile, I can use skeleton  
jail and original jail in one jail host. They have not much
differents in rc.conf, if want skeleton, I just add two options with  
normal settings. It is compatible way with orignal design.
                                                                                                                quakelee

-- 
The Power to Serve