From owner-freebsd-jail@FreeBSD.ORG Sun Apr 20 20:16:47 2008 Return-Path: Delivered-To: freebsd-jail@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id EA4CE106564A for ; Sun, 20 Apr 2008 20:16:47 +0000 (UTC) (envelope-from jeffrey.smith@futurecis.com) Received: from mail1.futurecis.com (static-72-66-21-14.washdc.fios.verizon.net [72.66.21.14]) by mx1.freebsd.org (Postfix) with ESMTP id 920538FC1B for ; Sun, 20 Apr 2008 20:16:47 +0000 (UTC) (envelope-from jeffrey.smith@futurecis.com) Received: (qmail 36095 invoked from network); 20 Apr 2008 19:50:10 -0000 Received: from unknown (HELO [10.0.0.97]) ([10.0.0.97]) (envelope-sender ) by mail1.futurecis.com (qmail-ldap-1.03) with SMTP for ; 20 Apr 2008 19:50:10 -0000 From: Jeffrey Smith To: freebsd-jail@freebsd.org Content-Type: text/plain Organization: FutureCIS Date: Sun, 20 Apr 2008 15:49:39 -0400 Message-Id: <1208720979.2082.13.camel@mrwizard.futurecis.com> Mime-Version: 1.0 X-Mailer: Evolution 2.22.1 FreeBSD GNOME Team Port Content-Transfer-Encoding: 7bit Subject: freebsd-update on jails X-BeenThere: freebsd-jail@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Discussion about FreeBSD jail\(8\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 20 Apr 2008 20:16:48 -0000 I previously posted a howto to use zfs to manage jails. The first update through freebsd-update has been released. Testing this I get (in jail) ldap1#freebsd-update install Installing updates...chflags: ///usr/lib/libssh.a: Operation not supported After this error I enabled chflags in sysctl on the host system #sysctl security.jail.chflags_allowed=1 This did not not work in fixing the issue after reading the freebsd-update man page I thought this should be possible #freebsd-update -b /jails/ldap1/ -d /jails/ldap1/var/db/freebsd-update/ \ install Installing updates...chflags: /jails/ldap1///usr/lib/libssh.a: Operation not supported But I still get that same error. Does anyone have any idea what would keep this from working? If there is a way to update the host and all subsequent jails vi the host that would be great, as i would prefer not to allow chflags from within the jails. thanks in advance