From owner-freebsd-questions@FreeBSD.ORG  Fri Dec 13 16:43:31 2013
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115])
 (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits))
 (No client certificate requested)
 by hub.freebsd.org (Postfix) with ESMTPS id D211ED5F
 for <freebsd-questions@freebsd.org>; Fri, 13 Dec 2013 16:43:31 +0000 (UTC)
Received: from sam.nabble.com (sam.nabble.com [216.139.236.26])
 (using TLSv1 with cipher AES256-SHA (256/256 bits))
 (No client certificate requested)
 by mx1.freebsd.org (Postfix) with ESMTPS id 9BADB17E3
 for <freebsd-questions@freebsd.org>; Fri, 13 Dec 2013 16:43:31 +0000 (UTC)
Received: from [192.168.236.26] (helo=sam.nabble.com)
 by sam.nabble.com with esmtp (Exim 4.72)
 (envelope-from <zaphod@berentweb.com>) id 1VrVpj-0006Vt-92
 for freebsd-questions@freebsd.org; Fri, 13 Dec 2013 08:43:23 -0800
Date: Fri, 13 Dec 2013 08:43:23 -0800 (PST)
From: Beeblebrox <zaphod@berentweb.com>
To: freebsd-questions@freebsd.org
Message-ID: <1386953003216-5868144.post@n5.nabble.com>
In-Reply-To: <52AA6C0A.30104@a1poweruser.com>
References: <1386424991855-5866649.post@n5.nabble.com>
 <1386869525130-5867937.post@n5.nabble.com> <52AA6C0A.30104@a1poweruser.com>
Subject: Re: Unbound in jail
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/freebsd-questions>, 
 <mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions/>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
 <mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 13 Dec 2013 16:43:31 -0000

Thanks for your message.
I have all my jails working very nicely and spot-on. 

>> 1..  create a single jail.conf file for each jail. 
I find that's not necessary. All jail settings in /etc/jail.conf, placed
consecutively. All settings below function correctly:

#_DEFAULTS_FOR_ALL
  enforce_statfs = 2;
  securelevel = 3;
  exec.start = "/bin/sh /etc/rc";
  exec.stop = "/bin/sh /etc/rc.shutdown";

dns {
        name = dns;
        path = /data/ezjail/dns;
        interface = lo1;
        ip4.addr = 192.168.2.97/32;
        host.hostname = dns.rsb;
        devfs_ruleset = 11;
        mount.devfs;
        mount.fstab = /etc/fstab.dns;
}

I then start with "jail -c <jailname>

I had to transfer the ezjail jails into jail.conf, because ezjail gives some
error messages and libjail is still in development. I continue to use the
ezjail-configured filesystems through fstab, which work out fine.

I traced the unbound error message to a faulty unbound.conf setting. It all
works now and unbound starts in sync with the jail. The code to do that in
<jail>/etc/rc.conf however, is:  local_unbound_enable="YES" 
Because unbound_enable="YES" does not do the job.

Thanks again & regards.



-----
FreeBSD-11-current_amd64_root-on-zfs_RadeonKMS
--
View this message in context: http://freebsd.1045724.n5.nabble.com/Unbound-in-jail-tp5866649p5868144.html
Sent from the freebsd-questions mailing list archive at Nabble.com.