Re: cannot access pass device from within jail

From: Dan Langille <dan_at_langille.org>
Date: Sun, 17 Dec 2017 15:49:15 -0500
> On Dec 17, 2017, at 3:37 PM, Konstantin Belousov <kostikbel_at_gmail.com> wrote:
> 
> On Sun, Dec 17, 2017 at 02:52:12PM -0500, Dan Langille wrote:
>> Hello,
>> 
>> What suggestions do you have for where I should look next? I'm happy to start installing various builds of FreeBSD in order to track down which commit caused this.
>> 
>> I'm trying to access a tape library from within a jail running on a FreeBSD 11.1 host.  sa(4) devices are working (e.g. I can rewind nsa0).
>> 
>> pass(4) devices (i.e. the tape changer ch0) are not working.  This morning I posted to -scsi_at_: https://lists.freebsd.org/pipermail/freebsd-scsi/2017-December/007608.html
>> 
>> The device appears in the jail and has appropriate permissions.  This access was granted
>> via /etc/devfs.rules using the same approach I used for FreeBSD 10.3
>> 
>> The permissions in the jail:
>> 
>> [root_at_bacula-sd-02 ~]# ls -l /dev/pass7
>> crw-------  1 root  operator  0x74 Dec 16 21:52 /dev/pass7
>> 
>> The command in the jail:
>> 
>> [root_at_bacula-sd-02 ~]# mtx -f /dev/pass7 status 
>> cannot open SCSI device '/dev/pass7' - Operation not permitted
>> 
>> Here is the truss output of the command in question: https://gist.github.com/dlangille/b80ee804b8080e1cbf5b5ab67f0bdabe
> 
> Does it work to access the pass device from host using host' /dev ?

Yes, it does. see "This command on the host" at https://lists.freebsd.org/pipermail/freebsd-scsi/2017-December/007610.html

> Same question for the host access using the nodes of the jailed devfs mount.

I didn't try that, but I will soon. To be clear, does this command on the host look like what you have in mind?

mtx -f /usr/jails/bacula-sd-02/dev/pass7 status 


-- 
Dan Langille - BSDCan / PGCon
dan_at_langille.org
Received on Sun Dec 17 2017 - 19:49:43 UTC

This archive was generated by hypermail 2.4.0 : Wed May 19 2021 - 11:41:14 UTC