From owner-freebsd-jail@FreeBSD.ORG Mon Aug 23 04:36:51 2010 Return-Path: Delivered-To: freebsd-jail@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 4B39A1065698 for ; Mon, 23 Aug 2010 04:36:51 +0000 (UTC) (envelope-from askjuise@gmail.com) Received: from mail-qy0-f175.google.com (mail-qy0-f175.google.com [209.85.216.175]) by mx1.freebsd.org (Postfix) with ESMTP id F334B8FC15 for ; Mon, 23 Aug 2010 04:36:50 +0000 (UTC) Received: by qyk8 with SMTP id 8so2566453qyk.13 for ; Sun, 22 Aug 2010 21:36:50 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:received:date:message-id :subject:from:to:content-type; bh=g+PsS14i7hfypKuY0XJ1N95eycBy6lHqe4TuKdqGAsM=; b=JuR17dfuns04l6ncr1244spYHL7VwdrKJpGCVsbsuhbNDNx5c1nc55fDmfodWhkfNm 7bDoidvysWt4zbFsCJ7jQzclbKVtWsefq0uSLnnks0IWPi+9ZGw9vTaCDYwEJVlnf4bt AoCcn3+kj5shxKLnMBWDxAPGqV1OwGqEN2v2s= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:date:message-id:subject:from:to:content-type; b=tDhwXht4wRa7FrAkshoV8/8lFXpnh8nINM3chmQqMnRU01fZvzhwwYjTERvliBOLe9 NVPRCv6a/o+e/Yb8mqtmCuiEU5gpYixTnQ3H/YReOO41KZ7sM3sj0pM51CDlGhW78pou ia7ehxPguz8U62QQax3Wpd7tl0IwDE0hb7njA= MIME-Version: 1.0 Received: by 10.229.80.15 with SMTP id r15mr241382qck.95.1282538207801; Sun, 22 Aug 2010 21:36:47 -0700 (PDT) Received: by 10.229.50.197 with HTTP; Sun, 22 Aug 2010 21:36:47 -0700 (PDT) Date: Mon, 23 Aug 2010 13:36:47 +0900 Message-ID: From: Alexander Petrovsky To: freebsd-jail@freebsd.org Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable X-Content-Filtered-By: Mailman/MimeDel 2.1.5 Subject: sysvipc problem X-BeenThere: freebsd-jail@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Discussion about FreeBSD jail\(8\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 23 Aug 2010 04:36:51 -0000 Hi! I have two servers for jail virtualization: 1. Only ezjail framework: # uname -a FreeBSD troll.golodnyj.ru 8.0-STABLE FreeBSD 8.0-STABLE #0 r199880: Thu Dec 3 13:35:21 IRKT 2009 alexander@troll.golodnyj.ru:/usr/obj/usr/src/sys/WEBKERNEL i386 # cat /etc/rc.conf | grep jail jail_sysvipc_allow=3D"YES" ezjail_enable=3D"YES" # less /usr/local/etc/ezjail/www # To specify the start up order of your ezjails, use these lines to # create a Jail dependency tree. See rcorder(8) for more details. # # PROVIDE: standard_ezjail # REQUIRE: # BEFORE: # export jail_www_hostname=3D"www" export jail_www_ip=3D"84.237.22.15,192.168.47.15" export jail_www_rootdir=3D"/var/jails/www" export jail_www_exec=3D"/bin/sh /etc/rc" export jail_www_mount_enable=3D"YES" export jail_www_devfs_enable=3D"YES" export jail_www_devfs_ruleset=3D"devfsrules_jail" export jail_www_procfs_enable=3D"YES" export jail_www_fdescfs_enable=3D"YES" export jail_www_image=3D"" export jail_www_imagetype=3D"" export jail_www_attachparams=3D"" export jail_www_attachblocking=3D"" export jail_www_forceblocking=3D"" # jls -v JID Hostname Path Name State CPUSetID IP Address(es) 1 www /var/jails/www 1 ACTIVE 2 84.237.22.15 192.168.47.15 # sysctl security.jail.sysvipc_allowed security.jail.sysvipc_allowed: 1 # jexec 1 sysctl security.jail.sysvipc_allowed security.jail.sysvipc_allowed: 1 ------------------------------------------------------------------- 2. ezjail framework and patched jail rc script # uname -a FreeBSD garem.golodnyj.ru 8.0-STABLE FreeBSD 8.0-STABLE #0: Fri Feb 19 16:36:58 IRKT 2010 alexander@:/usr/obj/usr/src/sys/GAREMKERNEL amd64 # cat /etc/rc.conf | grep jail jail_enable=3D"YES" jail_v2_enable=3D"YES" ezjail_enable=3D"YES" jail_sysvipc_allow=3D"YES" jail_set_hostname_allow=3D"YES" jail_list=3D"" jail_list=3D"$jail_list jail01" jail_jail01_hostname=3D"propeller" jail_jail01_rootdir=3D"/var/jails/${jail_jail01_name}" jail_jail01_vnet_enable=3D"YES" jail_jail01_mount_enable=3D"YES" jail_jail01_devfs_enable=3D"YES" jail_jail01_devfs_ruleset=3D"devfsrules_jail" jail_jail01_exec_erlyprestart0=3D"mdconfig -a -t vnode -f /var/jails/img/${jail_jail01_name} -u 1" jail_jail01_exec_prestart0=3D"ifconfig epair1 create" jail_jail01_exec_prestart1=3D"ifconfig epair2 create" jail_jail01_exec_prestart2=3D"ifconfig epair1b up" jail_jail01_exec_prestart3=3D"ifconfig epair2b up" jail_jail01_exec_prestart4=3D"ifconfig bridge0 addm epair1b" jail_jail01_exec_prestart5=3D"ifconfig bridge1 addm epair2b" jail_jail01_exec_earlypoststart0=3D"ifconfig epair1a vnet ${jail_jail01_nam= e}" jail_jail01_exec_earlypoststart1=3D"ifconfig epair2a vnet ${jail_jail01_nam= e}" jail_jail01_exec_afterstart0=3D"ifconfig lo0 127.0.0.1" jail_jail01_exec_afterstart1=3D"ifconfig epair1a name igb0" jail_jail01_exec_afterstart2=3D"ifconfig epair2a name igb1" jail_jail01_exec_afterstart3=3D"ifconfig igb0 84.237.22.14 netmask 0xffffff= 80" jail_jail01_exec_afterstart4=3D"ifconfig igb1 192.168.6.14 netmask 0xffffff= 00" jail_jail01_exec_afterstart5=3D"route add default 84.237.22.1" jail_jail01_exec_afterstart6=3D"route add -net 192.168.0.0/16 192.168.6.1" jail_jail01_exec_afterstart7=3D"/bin/sh /etc/rc" jail_jail01_exec_poststop0=3D"ifconfig bridge0 deletem epair1b" jail_jail01_exec_poststop1=3D"ifconfig bridge1 deletem epair2b" jail_jail01_exec_poststop2=3D"ifconfig epair1b destroy" jail_jail01_exec_poststop3=3D"ifconfig epair2b destroy" jail_jail01_exec_poststop4=3D"mdconfig -d -u 1" # cat /usr/local/etc/ezjail/gerda # To specify the start up order of your ezjails, use these lines to # create a Jail dependency tree. See rcorder(8) for more details. # # PROVIDE: standard_ezjail # REQUIRE: # BEFORE: # export jail_gerda_hostname=3D"gerda" export jail_gerda_ip=3D"84.237.22.5,192.168.6.5" export jail_gerda_rootdir=3D"/var/jails/gerda" export jail_gerda_exec_start=3D"/bin/sh /etc/rc" export jail_gerda_exec_stop=3D"" export jail_gerda_mount_enable=3D"YES" export jail_gerda_devfs_enable=3D"YES" export jail_gerda_devfs_ruleset=3D"devfsrules_jail" export jail_gerda_procfs_enable=3D"YES" export jail_gerda_fdescfs_enable=3D"YES" export jail_gerda_image=3D"" export jail_gerda_imagetype=3D"" export jail_gerda_attachparams=3D"" export jail_gerda_attachblocking=3D"" export jail_gerda_forceblocking=3D"" export jail_gerda_zfs_datasets=3D"" export jail_gerda_cpuset=3D"2" export jail_gerda_fib=3D"0" # jls -v JID Hostname Path Name State CPUSetID IP Address(es) 4 gerda /var/jails/gerda 4 ACTIVE 5 84.237.22.5 ........ 8 propeller /var/jails/jail01 jail01 ACTIVE 9 # sysctl security.jail.sysvipc_allowed security.jail.sysvipc_allowed: 1 # jexec 4 sysctl security.jail.sysvipc_allowed security.jail.sysvipc_allowed: 0 # jexec 8 sysctl security.jail.sysvipc_allowed ------------------------------------------------------------------- Why in 8.0 I have # sysctl security.jail.sysvipc_allowed security.jail.sysvipc_allowed: 1 # jexec 1 sysctl security.jail.sysvipc_allowed security.jail.sysvipc_allowed: 1 But In 8.1 I have # sysctl security.jail.sysvipc_allowed security.jail.sysvipc_allowed: 1 # jexec 4 sysctl security.jail.sysvipc_allowed security.jail.sysvipc_allowed: 0 # jexec 8 sysctl security.jail.sysvipc_allowed I was doing wrong? --=20 =D0=9F=D0=B5=D1=82=D1=80=D0=BE=D0=B2=D1=81=D0=BA=D0=B8=D0=B9 =D0=90=D0=BB= =D0=B5=D0=BA=D1=81=D0=B0=D0=BD=D0=B4=D1=80 / Alexander Petrovsky, ICQ: 350342118 Jabber: juise@jabber.ru Phone: +7 914 8 820 815 From owner-freebsd-jail@FreeBSD.ORG Mon Aug 23 11:07:01 2010 Return-Path: Delivered-To: freebsd-jail@FreeBSD.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id BA27B106564A for ; Mon, 23 Aug 2010 11:07:01 +0000 (UTC) (envelope-from owner-bugmaster@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id A89308FC0A for ; Mon, 23 Aug 2010 11:07:01 +0000 (UTC) Received: from freefall.freebsd.org (localhost [127.0.0.1]) by freefall.freebsd.org (8.14.4/8.14.4) with ESMTP id o7NB71E1089113 for ; Mon, 23 Aug 2010 11:07:01 GMT (envelope-from owner-bugmaster@FreeBSD.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.14.4/8.14.4/Submit) id o7NB71L9089111 for freebsd-jail@FreeBSD.org; Mon, 23 Aug 2010 11:07:01 GMT (envelope-from owner-bugmaster@FreeBSD.org) Date: Mon, 23 Aug 2010 11:07:01 GMT Message-Id: <201008231107.o7NB71L9089111@freefall.freebsd.org> X-Authentication-Warning: freefall.freebsd.org: gnats set sender to owner-bugmaster@FreeBSD.org using -f From: FreeBSD bugmaster To: freebsd-jail@FreeBSD.org Cc: Subject: Current problem reports assigned to freebsd-jail@FreeBSD.org X-BeenThere: freebsd-jail@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Discussion about FreeBSD jail\(8\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 23 Aug 2010 11:07:01 -0000 Note: to view an individual PR, use: http://www.freebsd.org/cgi/query-pr.cgi?pr=(number). The following is a listing of current problems submitted by FreeBSD users. These represent problem reports covering all versions including experimental development code and obsolete releases. S Tracker Resp. Description -------------------------------------------------------------------------------- o conf/149050 jail [jail] rcorder ``nojail'' too coarse for Jail+VNET o kern/147162 jail [jail] [panic] Page Fault / Kernel panic when jail sta s conf/142972 jail [jail] [patch] Support JAILv2 and vnet in rc.d/jail o conf/141317 jail [patch] uncorrect jail stop in /etc/rc.d/jail o kern/133265 jail [jail] is there a solution how to run nfs client in ja o kern/119842 jail [smbfs] [jail] "Bad address" with smbfs inside a jail o bin/99566 jail [jail] [patch] fstat(1) according to specified jid o bin/32828 jail [jail] w(1) incorrectly handles stale utmp slots with 8 problems total. From owner-freebsd-jail@FreeBSD.ORG Wed Aug 25 07:01:17 2010 Return-Path: Delivered-To: freebsd-jail@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 291C11065695 for ; Wed, 25 Aug 2010 07:01:17 +0000 (UTC) (envelope-from jwhatley@rhyton.com) Received: from lion.rhyton.com (mail.rhyton.com [70.85.6.241]) by mx1.freebsd.org (Postfix) with ESMTP id E5AE48FC28 for ; Wed, 25 Aug 2010 07:01:16 +0000 (UTC) Received: from SEPHARIEL (azzuro.rhyton.com [70.91.115.129]) (authenticated (0 bits)) by lion.rhyton.com (8.12.10/8.11.6) with ESMTP id o7P6mKjD096239 for ; Wed, 25 Aug 2010 02:48:20 -0400 (EDT) From: "Jacob Whatley" To: Date: Wed, 25 Aug 2010 02:48:46 -0400 Message-ID: <04b601cb4421$944e9aa0$bcebcfe0$@com> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Office Outlook 12.0 Thread-Index: ActEIY3A4KvdHW41T4aKFHkU8uUxvg== Content-Language: en-us x-cr-hashedpuzzle: ADzL BIN4 BtYs B0tG CGBN CYLQ CwPH DZMs EYvf GD79 GkC+ G8ta HvXe H/ZG IiOI Ka31; 1; ZgByAGUAZQBiAHMAZAAtAGoAYQBpAGwAQABmAHIAZQBlAGIAcwBkAC4AbwByAGcA; Sosha1_v1; 7; {078BCD00-C512-497B-BF5F-F3027DA10F72}; agB3AGgAYQB0AGwAZQB5AEAAcgBoAHkAdABvAG4ALgBjAG8AbQA=; Wed, 25 Aug 2010 06:48:41 GMT; VQBuAGQAbwBjAHUAbQBlAG4AdABlAGQAIAAtACAAdQBzAGUAIABvAGYAIABqAGwAcwAgAGMAbwBtAG0AYQBuAGQAIABsAGkAbQBpAHQAZQBkACAAdABvACAAagBhAGkAbABzACAAdwBpAHQAaAAgAGYAaQB2AGUAIABpAHAAJwBzACAAbwByACAAbABlAHMAcwA= x-cr-puzzleid: {078BCD00-C512-497B-BF5F-F3027DA10F72} Subject: Undocumented - use of jls command limited to jails with five ip's or less X-BeenThere: freebsd-jail@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Discussion about FreeBSD jail\(8\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 25 Aug 2010 07:01:17 -0000 While it appears that there is no limit to the number of ip addresses that can be assigned to a jail, I have discovered that five is the maximum number of ip addresses that you can assign to a jail without /usr/sbin/jls dumping core with a Segmentation fault if you have more than one jail active on the server. Is there a workaround for this limitation? I need to have a larger number of ip addresses than five assigned to a single jail and I can't give up /usr/sbin/jls functionality on the server. Jake Whatley, Developer Rhyton Corporation jwhatley@rhyton.com http://rhyton.com **************************** From owner-freebsd-jail@FreeBSD.ORG Wed Aug 25 13:31:08 2010 Return-Path: Delivered-To: freebsd-jail@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id E9F6B1065670 for ; Wed, 25 Aug 2010 13:31:07 +0000 (UTC) (envelope-from glen.j.barber@gmail.com) Received: from mail-pz0-f54.google.com (mail-pz0-f54.google.com [209.85.210.54]) by mx1.freebsd.org (Postfix) with ESMTP id B8E5C8FC21 for ; Wed, 25 Aug 2010 13:31:07 +0000 (UTC) Received: by pzk7 with SMTP id 7so210881pzk.13 for ; Wed, 25 Aug 2010 06:31:07 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:message-id:date:from :user-agent:mime-version:to:cc:subject:references:in-reply-to :x-enigmail-version:content-type:content-transfer-encoding; bh=mtkajlUEg/SFkn4x5rwwnC0CCzq1ALXIpMYB88qcPQA=; b=iOEDy2aMlox/ksmlDc1JG5235MDUG5KflP0sbzhQRu46+BrfKbTlxNkP5QeTddnHJp LZ33faB0bvGZZ+LGmUIleCAzKNuVTYS1+5x6Uy5gBIs+QSgcPQcoyJjqTVtadxdAyWj6 9T5rnDqiWO4EDNoPmdjLuN+gZvD4XCV7v2m/A= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:date:from:user-agent:mime-version:to:cc:subject :references:in-reply-to:x-enigmail-version:content-type :content-transfer-encoding; b=UGlUv7G3v9600mWHydaVouXkHSdsncK0KeRWp8EQY0zd9+r/ijETLg6nQo6LPcVtXx AFktt7vkKRGsOOX4LE7AyJQ8dOZ4crmkv6Hc8hmz5nmIKzPol3YzA6FqwgtyBD6P/wcL 4UgDCvKY8ktH6nQ2zh4xeWXWIsJ4TyQBfOhCQ= Received: by 10.114.26.16 with SMTP id 16mr9421990waz.15.1282741372004; Wed, 25 Aug 2010 06:02:52 -0700 (PDT) Received: from schism.local (173-161-130-225-Philadelphia.hfc.comcastbusiness.net [173.161.130.225]) by mx.google.com with ESMTPS id u29sm553977vcr.1.2010.08.25.06.02.48 (version=SSLv3 cipher=RC4-MD5); Wed, 25 Aug 2010 06:02:49 -0700 (PDT) Message-ID: <4C751477.30007@gmail.com> Date: Wed, 25 Aug 2010 09:02:47 -0400 From: Glen Barber User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.6; en-US; rv:1.9.2.8) Gecko/20100802 Thunderbird/3.1.2 MIME-Version: 1.0 To: Jacob Whatley References: <04b601cb4421$944e9aa0$bcebcfe0$@com> In-Reply-To: <04b601cb4421$944e9aa0$bcebcfe0$@com> X-Enigmail-Version: 1.1.1 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Cc: freebsd-jail@freebsd.org Subject: Re: Undocumented - use of jls command limited to jails with five ip's or less X-BeenThere: freebsd-jail@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Discussion about FreeBSD jail\(8\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 25 Aug 2010 13:31:08 -0000 On 8/25/10 2:48 AM, Jacob Whatley wrote: > While it appears that there is no limit to the number of ip addresses that > can be assigned to a jail, I have discovered that five is the maximum number > of ip addresses that you can assign to a jail without /usr/sbin/jls dumping > core with a Segmentation fault if you have more than one jail active on the > server. > > Is there a workaround for this limitation? I need to have a larger number of > ip addresses than five assigned to a single jail and I can't give up > /usr/sbin/jls functionality on the server. > Hello Jacob, What is the output of 'uname -a'? This was fixed in 8.0-STABLE [1] in December, and is not an issue in 8.1-RELEASE. [1] - http://www.freebsd.org/cgi/query-pr.cgi?pr=bin/141359 Regards, -- Glen Barber