From owner-freebsd-jail@FreeBSD.ORG  Thu Aug 21 11:05:51 2014
Return-Path: <owner-freebsd-jail@FreeBSD.ORG>
Delivered-To: freebsd-jail@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115])
 (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits))
 (No client certificate requested)
 by hub.freebsd.org (Postfix) with ESMTPS id DDBCFB6
 for <freebsd-jail@freebsd.org>; Thu, 21 Aug 2014 11:05:51 +0000 (UTC)
Received: from mail-qa0-f45.google.com (mail-qa0-f45.google.com
 [209.85.216.45])
 (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits))
 (Client CN "smtp.gmail.com",
 Issuer "Google Internet Authority G2" (verified OK))
 by mx1.freebsd.org (Postfix) with ESMTPS id 9EE063733
 for <freebsd-jail@freebsd.org>; Thu, 21 Aug 2014 11:05:50 +0000 (UTC)
Received: by mail-qa0-f45.google.com with SMTP id cm18so7963654qab.4
 for <freebsd-jail@freebsd.org>; Thu, 21 Aug 2014 04:05:43 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=1e100.net; s=20130820;
 h=x-gm-message-state:mime-version:from:date:message-id:subject:to
 :content-type;
 bh=1sEt309tN0gEkZOAk+I/pfXLOZ3p3sRoTXJLtLv427U=;
 b=NZQtUrnBs7VxsnE383IFk0jGNhcjzW6hmAWUp7CArry/C8FxRVbQIki5okad2MPqbm
 iggBNAYsBgmQzUFw7NFuqlnvmszDDCbueD3DV7UPoCCfJoA/3DjqOy1Ld6Vzrc/Hk2Wn
 9KtC7g+2h+XmbjkI6DztRP6NIjgE/WoUS+kYB/mDTflG0RRIxyXA6R5/eWevT+OMfmt3
 xln322/YaXIQBclDPwb1GgEm7nPqt9ghVGZTCrF/PcSMViLUjMjrHZQqdv34kkfs4BnU
 fGxAIO/0TaSNdCE2Ww/uruFKV4C42WL7G3j8oZ6J6Tdg1V1x+LHCSmUk4xhYfoFfXyci
 A5xA==
X-Gm-Message-State: ALoCoQmdkjFjmRZXRmUzgLt3X0xXg1OPhAwp1yW5UPX+hH7Hfd0kVOIgsNFhhkenn+RKQSH+VHCi
X-Received: by 10.140.28.245 with SMTP id 108mr80814703qgz.45.1408619143619;
 Thu, 21 Aug 2014 04:05:43 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.140.85.18 with HTTP; Thu, 21 Aug 2014 04:05:23 -0700 (PDT)
X-Originating-IP: [109.188.124.74]
From: =?UTF-8?B?0JLQsNGB0LjQu9C40Lkg0KLQsNGC0LDRgNC10L3QutC+?=
 <tatarenko@alpha-it.ru>
Date: Thu, 21 Aug 2014 15:05:23 +0400
Message-ID: <CALkSRfwAki1jFQJ-vqj0XPj1h-Fs_94Ucjv9BU0SZM9sDONvyw@mail.gmail.com>
Subject: heartbeat inside jail
To: freebsd-jail@freebsd.org
Content-Type: text/plain; charset=UTF-8
X-Content-Filtered-By: Mailman/MimeDel 2.1.18-1
X-BeenThere: freebsd-jail@freebsd.org
X-Mailman-Version: 2.1.18-1
Precedence: list
List-Id: "Discussion about FreeBSD jail\(8\)" <freebsd-jail.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/freebsd-jail>,
 <mailto:freebsd-jail-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-jail/>
List-Post: <mailto:freebsd-jail@freebsd.org>
List-Help: <mailto:freebsd-jail-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-jail>,
 <mailto:freebsd-jail-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 21 Aug 2014 11:05:52 -0000

I use FreeBSD 10.0-p7
I try use heartbeat (/usr/ports/sysutils/heartbeat) inside jail.
My /etc/jail.conf:

> allow.raw_sockets = "true";
> allow.mount = "true";
> allow.mount.devfs = "true";
> mount.devfs = "true";
> exec.start = "sh /etc/rc";
> exec.stop = "sh /etc/rc.shutdown";
> webcl {
>         enforce_statfs = "1";
>         vnet = "new";
>         exec.prestart = "ifconfig epair1 create up";
>         exec.prestart += "ifconfig bridge0 addm epair1a";
>         exec.start = "ifconfig epair1b link **:**:**:**:**:**";
>         exec.start += "sh /etc/rc";
>         vnet.interface = "epair1b";
>         exec.poststop = "ifconfig bridge0 deletem epair1a";
>         exec.poststop += "ifconfig epair1a destroy";
>         path = "/jails/webcl";
>         name = "webcl";
>         host.hostname = "************";
>         allow.mount.nullfs = "true";
>         allow.mount.procfs = "true";
>         allow.sysvipc = "true";
> }

When i start heartbeat by

> service heartbeat onestart

I get errors like this:

> Aug 21 10:38:39 de heartbeat: [40637]: ERROR: Unable to set scheduler
> parameters.: Operation not permitted
> Aug 21 10:38:39 de heartbeat: [40637]: ERROR: Unable to lock pid 40637 in
> memory: Operation not permitted

Aug 21 10:39:10 de heartbeat: [40647]: ERROR: unable to (re)set scheduler
> parameters.: Operation not permitted


 I tried to figure out what function exactly get Operation not permitted by

> find /usr/ports/sysutils/heartbeat -exec grep -l 'Unable to set scheduler
> parameters' "{}" \;
>
And only file which is source is

> /usr/ports/sysutils/heartbeat/work/STABLE-2.1.4/lib/clplumbing/realtime.c

So i dig inside and see that:

>         if ((staticp=sched_getscheduler(0)) < 0) {
>                 cl_perror("unable to get scheduler parameters.");
>         }else{
>                 memset(&sp, 0, sizeof(sp));
>                 sp.sched_priority = priority;
>                 if (sched_setscheduler(0, spolicy, &sp) < 0) {
>                         cl_perror("Unable to set scheduler parameters.");
>                 }
>         }

heartbeat process are all run from root.
What can i do to make it work?