&title;

Prior Releases Still Being Supported

9.2 (September 2013) + + Announcement: + Release Notes: + Installation Instructions: + Hardware Notes: + Readme: + Errata + +

9.1 (December 2012) Announcement: From owner-svn-doc-head@FreeBSD.ORG Thu Aug 21 18:15:28 2014 Return-Path: Delivered-To: svn-doc-head@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id DF0C96F5; Thu, 21 Aug 2014 18:15:28 +0000 (UTC) Received: from svn.freebsd.org (svn.freebsd.org [IPv6:2001:1900:2254:2068::e6a:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id C9CEA359A; Thu, 21 Aug 2014 18:15:28 +0000 (UTC) Received: from svn.freebsd.org ([127.0.1.70]) by svn.freebsd.org (8.14.9/8.14.9) with ESMTP id s7LIFSb0006211; Thu, 21 Aug 2014 18:15:28 GMT (envelope-from antoine@FreeBSD.org) Received: (from antoine@localhost) by svn.freebsd.org (8.14.9/8.14.9/Submit) id s7LIFS85006210; Thu, 21 Aug 2014 18:15:28 GMT (envelope-from antoine@FreeBSD.org) Message-Id: <201408211815.s7LIFS85006210@svn.freebsd.org> X-Authentication-Warning: svn.freebsd.org: antoine set sender to antoine@FreeBSD.org using -f From: Antoine Brodin Date: Thu, 21 Aug 2014 18:15:28 +0000 (UTC) To: doc-committers@freebsd.org, svn-doc-all@freebsd.org, svn-doc-head@freebsd.org Subject: svn commit: r45487 - head/en_US.ISO8859-1/books/porters-handbook/makefiles X-SVN-Group: doc-head MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-doc-head@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: SVN commit messages for the doc tree for head List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 21 Aug 2014 18:15:29 -0000 Author: antoine (src,ports committer) Date: Thu Aug 21 18:15:28 2014 New Revision: 45487 URL: http://svnweb.freebsd.org/changeset/doc/45487 Log: Update after ports r365573 Modified: head/en_US.ISO8859-1/books/porters-handbook/makefiles/chapter.xml Modified: head/en_US.ISO8859-1/books/porters-handbook/makefiles/chapter.xml ============================================================================== --- head/en_US.ISO8859-1/books/porters-handbook/makefiles/chapter.xml Thu Aug 21 14:36:18 2014 (r45486) +++ head/en_US.ISO8859-1/books/porters-handbook/makefiles/chapter.xml Thu Aug 21 18:15:28 2014 (r45487) @@ -4187,6 +4187,10 @@ LIB_DEPENDS+= liba.so:${PORTSDIR}/devel/ + PLIST_SUB + + + USES From owner-svn-doc-head@FreeBSD.ORG Thu Aug 21 19:45:23 2014 Return-Path: Delivered-To: svn-doc-head@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 529E4883; Thu, 21 Aug 2014 19:45:23 +0000 (UTC) Received: from svn.freebsd.org (svn.freebsd.org [IPv6:2001:1900:2254:2068::e6a:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 3DDFC3EF1; Thu, 21 Aug 2014 19:45:23 +0000 (UTC) Received: from svn.freebsd.org ([127.0.1.70]) by svn.freebsd.org (8.14.9/8.14.9) with ESMTP id s7LJjNbW049644; Thu, 21 Aug 2014 19:45:23 GMT (envelope-from ngie@FreeBSD.org) Received: (from ngie@localhost) by svn.freebsd.org (8.14.9/8.14.9/Submit) id s7LJjNYq049643; Thu, 21 Aug 2014 19:45:23 GMT (envelope-from ngie@FreeBSD.org) Message-Id: <201408211945.s7LJjNYq049643@svn.freebsd.org> X-Authentication-Warning: svn.freebsd.org: ngie set sender to ngie@FreeBSD.org using -f From: Garrett Cooper Date: Thu, 21 Aug 2014 19:45:23 +0000 (UTC) To: doc-committers@freebsd.org, svn-doc-all@freebsd.org, svn-doc-head@freebsd.org Subject: svn commit: r45488 - head/en_US.ISO8859-1/articles/committers-guide X-SVN-Group: doc-head MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-doc-head@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: SVN commit messages for the doc tree for head List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 21 Aug 2014 19:45:23 -0000 Author: ngie (src committer) Date: Thu Aug 21 19:45:22 2014 New Revision: 45488 URL: http://svnweb.freebsd.org/changeset/doc/45488 Log: Document how committers can merge non-FreeBSD.org Bugzilla accounts Approved by: jmmv (mentor) Reviewed by: wblock Modified: head/en_US.ISO8859-1/articles/committers-guide/article.xml Modified: head/en_US.ISO8859-1/articles/committers-guide/article.xml ============================================================================== --- head/en_US.ISO8859-1/articles/committers-guide/article.xml Thu Aug 21 18:15:28 2014 (r45487) +++ head/en_US.ISO8859-1/articles/committers-guide/article.xml Thu Aug 21 19:45:22 2014 (r45488) @@ -2871,6 +2871,14 @@ Relnotes: yes considered nice if you take time to close any PRs associated with your commits, if appropriate. + Committers with + non-&os;.org + Bugzilla accounts can have the old account merged with the + &os;.org account by + entering a new bug. Choose Supporting Services + as the Product, and Bug Tracker as the + Component. + You can find out more about Bugzilla at: From owner-svn-doc-head@FreeBSD.ORG Fri Aug 22 02:03:25 2014 Return-Path: Delivered-To: svn-doc-head@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id B2EEC667; Fri, 22 Aug 2014 02:03:25 +0000 (UTC) Received: from svn.freebsd.org (svn.freebsd.org [IPv6:2001:1900:2254:2068::e6a:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 9DF6B3512; Fri, 22 Aug 2014 02:03:25 +0000 (UTC) Received: from svn.freebsd.org ([127.0.1.70]) by svn.freebsd.org (8.14.9/8.14.9) with ESMTP id s7M23PaJ028030; Fri, 22 Aug 2014 02:03:25 GMT (envelope-from gjb@FreeBSD.org) Received: (from gjb@localhost) by svn.freebsd.org (8.14.9/8.14.9/Submit) id s7M23P7g028029; Fri, 22 Aug 2014 02:03:25 GMT (envelope-from gjb@FreeBSD.org) Message-Id: <201408220203.s7M23P7g028029@svn.freebsd.org> X-Authentication-Warning: svn.freebsd.org: gjb set sender to gjb@FreeBSD.org using -f From: Glen Barber Date: Fri, 22 Aug 2014 02:03:25 +0000 (UTC) To: doc-committers@freebsd.org, svn-doc-all@freebsd.org, svn-doc-head@freebsd.org Subject: svn commit: r45489 - head/en_US.ISO8859-1/htdocs/releases/10.1R X-SVN-Group: doc-head MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-doc-head@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: SVN commit messages for the doc tree for head List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 22 Aug 2014 02:03:25 -0000 Author: gjb Date: Fri Aug 22 02:03:25 2014 New Revision: 45489 URL: http://svnweb.freebsd.org/changeset/doc/45489 Log: Update the 10.1-RELEASE schedule page to reflect we have entered the code slush. Approved by: re (implicit) Sponsored by: The FreeBSD Foundation Modified: head/en_US.ISO8859-1/htdocs/releases/10.1R/schedule.xml Modified: head/en_US.ISO8859-1/htdocs/releases/10.1R/schedule.xml ============================================================================== --- head/en_US.ISO8859-1/htdocs/releases/10.1R/schedule.xml Thu Aug 21 19:45:22 2014 (r45488) +++ head/en_US.ISO8859-1/htdocs/releases/10.1R/schedule.xml Fri Aug 22 02:03:25 2014 (r45489) @@ -64,7 +64,7 @@ Code slush begins 22 August 2014 - - + 22 August 2014 Release Engineers announce that all further commits to the &local.branch.stable; branch will not require explicit approval, however new features should be avoided. From owner-svn-doc-head@FreeBSD.ORG Fri Aug 22 07:58:08 2014 Return-Path: Delivered-To: svn-doc-head@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 094DC13F; Fri, 22 Aug 2014 07:58:08 +0000 (UTC) Received: from svn.freebsd.org (svn.freebsd.org [IPv6:2001:1900:2254:2068::e6a:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id CF2F13164; Fri, 22 Aug 2014 07:58:07 +0000 (UTC) Received: from svn.freebsd.org ([127.0.1.70]) by svn.freebsd.org (8.14.9/8.14.9) with ESMTP id s7M7w7Mj086935; Fri, 22 Aug 2014 07:58:07 GMT (envelope-from gavin@FreeBSD.org) Received: (from gavin@localhost) by svn.freebsd.org (8.14.9/8.14.9/Submit) id s7M7w7VG086933; Fri, 22 Aug 2014 07:58:07 GMT (envelope-from gavin@FreeBSD.org) Message-Id: <201408220758.s7M7w7VG086933@svn.freebsd.org> X-Authentication-Warning: svn.freebsd.org: gavin set sender to gavin@FreeBSD.org using -f From: Gavin Atkinson Date: Fri, 22 Aug 2014 07:58:07 +0000 (UTC) To: doc-committers@freebsd.org, svn-doc-all@freebsd.org, svn-doc-head@freebsd.org Subject: svn commit: r45490 - head/share/xml X-SVN-Group: doc-head MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-doc-head@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: SVN commit messages for the doc tree for head List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 22 Aug 2014 07:58:08 -0000 Author: gavin Date: Fri Aug 22 07:58:07 2014 New Revision: 45490 URL: http://svnweb.freebsd.org/changeset/doc/45490 Log: Remove a duplicate copy of the header, instead switch to using the header2 entity. Slightly update header2 to match the copy being removed. Modified: head/share/xml/header.ent head/share/xml/xhtml.xsl Modified: head/share/xml/header.ent ============================================================================== --- head/share/xml/header.ent Fri Aug 22 02:03:25 2014 (r45489) +++ head/share/xml/header.ent Fri Aug 22 07:58:07 2014 (r45490) @@ -162,9 +162,9 @@ +

-
Header And Logo
+ &header2.logo-red.label;`
&header2.logo-red; @@ -188,6 +188,7 @@

+ &header2.topnav.label; &header2.topnav;
'> Modified: head/share/xml/xhtml.xsl ============================================================================== --- head/share/xml/xhtml.xsl Fri Aug 22 02:03:25 2014 (r45489) +++ head/share/xml/xhtml.xsl Fri Aug 22 07:58:07 2014 (r45490) @@ -51,41 +51,7 @@

- &header2.skipnav; - -
-
- - &header2.logo-red.label; - -
- &header2.logo-red; -
- -
- &header2.donatebutton; - - &header2.searchnav.label; - - &header2.searchnav; - -
- -
-
&header2.word.search;
- - &header2.searchinputs; -
- -
-
-
- - &header2.topnav.label; - - &header2.topnav; - -
+ &header2;
From owner-svn-doc-head@FreeBSD.ORG Fri Aug 22 09:31:41 2014 Return-Path: Delivered-To: svn-doc-head@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 10C59C4E; Fri, 22 Aug 2014 09:31:41 +0000 (UTC) Received: from svn.freebsd.org (svn.freebsd.org [IPv6:2001:1900:2254:2068::e6a:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id F089F39BE; Fri, 22 Aug 2014 09:31:40 +0000 (UTC) Received: from svn.freebsd.org ([127.0.1.70]) by svn.freebsd.org (8.14.9/8.14.9) with ESMTP id s7M9Vepk032891; Fri, 22 Aug 2014 09:31:40 GMT (envelope-from ak@FreeBSD.org) Received: (from ak@localhost) by svn.freebsd.org (8.14.9/8.14.9/Submit) id s7M9VeMY032890; Fri, 22 Aug 2014 09:31:40 GMT (envelope-from ak@FreeBSD.org) Message-Id: <201408220931.s7M9VeMY032890@svn.freebsd.org> X-Authentication-Warning: svn.freebsd.org: ak set sender to ak@FreeBSD.org using -f From: Alex Kozlov Date: Fri, 22 Aug 2014 09:31:40 +0000 (UTC) To: doc-committers@freebsd.org, svn-doc-all@freebsd.org, svn-doc-head@freebsd.org Subject: svn commit: r45491 - head/en_US.ISO8859-1/books/porters-handbook/porting-dads X-SVN-Group: doc-head MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-doc-head@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: SVN commit messages for the doc tree for head List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 22 Aug 2014 09:31:41 -0000 Author: ak (ports committer) Date: Fri Aug 22 09:31:40 2014 New Revision: 45491 URL: http://svnweb.freebsd.org/changeset/doc/45491 Log: - Document NO_ARCH variable Reviewed by: mat, wblock Approved by: mat, wblock Differential Revision: https://reviews.freebsd.org/D640 Modified: head/en_US.ISO8859-1/books/porters-handbook/porting-dads/chapter.xml Modified: head/en_US.ISO8859-1/books/porters-handbook/porting-dads/chapter.xml ============================================================================== --- head/en_US.ISO8859-1/books/porters-handbook/porting-dads/chapter.xml Fri Aug 22 07:58:07 2014 (r45490) +++ head/en_US.ISO8859-1/books/porters-handbook/porting-dads/chapter.xml Fri Aug 22 09:31:40 2014 (r45491) @@ -363,6 +363,14 @@ exec %%LOCALBASE%%/bin/java -jar %%DATAD + + Marking a Port as Architecture Neutral + + Ports that do not have any architecture-dependent files + or requirements are identified by setting + NO_ARCH=yes. + + Marking a Port Not Installable with <varname>BROKEN</varname>, <varname>FORBIDDEN</varname>, or From owner-svn-doc-head@FreeBSD.ORG Fri Aug 22 14:49:21 2014 Return-Path: <owner-svn-doc-head@FreeBSD.ORG> Delivered-To: svn-doc-head@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id A66A7426; Fri, 22 Aug 2014 14:49:21 +0000 (UTC) Received: from svn.freebsd.org (svn.freebsd.org [IPv6:2001:1900:2254:2068::e6a:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 91FB03A78; Fri, 22 Aug 2014 14:49:21 +0000 (UTC) Received: from svn.freebsd.org ([127.0.1.70]) by svn.freebsd.org (8.14.9/8.14.9) with ESMTP id s7MEnLBA081375; Fri, 22 Aug 2014 14:49:21 GMT (envelope-from ryusuke@FreeBSD.org) Received: (from ryusuke@localhost) by svn.freebsd.org (8.14.9/8.14.9/Submit) id s7MEnLkv081374; Fri, 22 Aug 2014 14:49:21 GMT (envelope-from ryusuke@FreeBSD.org) Message-Id: <201408221449.s7MEnLkv081374@svn.freebsd.org> X-Authentication-Warning: svn.freebsd.org: ryusuke set sender to ryusuke@FreeBSD.org using -f From: Ryusuke SUZUKI <ryusuke@FreeBSD.org> Date: Fri, 22 Aug 2014 14:49:21 +0000 (UTC) To: doc-committers@freebsd.org, svn-doc-all@freebsd.org, svn-doc-head@freebsd.org Subject: svn commit: r45492 - head/ja_JP.eucJP/htdocs/releases X-SVN-Group: doc-head MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-doc-head@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: SVN commit messages for the doc tree for head <svn-doc-head.freebsd.org> List-Unsubscribe: <http://lists.freebsd.org/mailman/options/svn-doc-head>, <mailto:svn-doc-head-request@freebsd.org?subject=unsubscribe> List-Archive: <http://lists.freebsd.org/pipermail/svn-doc-head/> List-Post: <mailto:svn-doc-head@freebsd.org> List-Help: <mailto:svn-doc-head-request@freebsd.org?subject=help> List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/svn-doc-head>, <mailto:svn-doc-head-request@freebsd.org?subject=subscribe> X-List-Received-Date: Fri, 22 Aug 2014 14:49:21 -0000 Author: ryusuke Date: Fri Aug 22 14:49:21 2014 New Revision: 45492 URL: http://svnweb.freebsd.org/changeset/doc/45492 Log: - Merge the following from the English version: r44746 -> r45486 head/ja_JP.eucJP/htdocs/releases/index.xml Modified: head/ja_JP.eucJP/htdocs/releases/index.xml Modified: head/ja_JP.eucJP/htdocs/releases/index.xml ============================================================================== --- head/ja_JP.eucJP/htdocs/releases/index.xml Fri Aug 22 09:31:40 2014 (r45491) +++ head/ja_JP.eucJP/htdocs/releases/index.xml Fri Aug 22 14:49:21 2014 (r45492) @@ -5,7 +5,7 @@ ]>   - + <html xmlns="http://www.w3.org/1999/xhtml"> <head> @@ -92,6 +92,17 @@ <h2>��ݡ��Ȥ��Ƥ��Υ�꡼��</h2> <ul> + <li><b>9.2</b> (2013 ǯ 9 ��) + <em> + <a href="9.2R/announce.html">��ʥ��</a>: + <a href="&enbase;/releases/9.2R/relnotes.html">��꡼��Ρ��</a>: + <a href="&enbase;/releases/9.2R/installation.html">��󥹥ȡ��륬��</a>: + <a href="&enbase;/releases/9.2R/hardware.html">�ϡ��ɥ��Ρ��</a> + <a href="&enbase;/releases/9.2R/readme.html">README</a>: + <a href="&enbase;/releases/9.2R/errata.html">Errata (��ɽ)</a> + </em> + </li> + <li><b>9.1</b> (2012 ǯ 12 ��) <em> <a href="&enbase;/releases/9.1R/announce.html">��ʥ��</a>: From owner-svn-doc-head@FreeBSD.ORG Fri Aug 22 16:25:17 2014 Return-Path: <owner-svn-doc-head@FreeBSD.ORG> Delivered-To: svn-doc-head@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id C7895DB4; Fri, 22 Aug 2014 16:25:17 +0000 (UTC) Received: from svn.freebsd.org (svn.freebsd.org [IPv6:2001:1900:2254:2068::e6a:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id B358D3627; Fri, 22 Aug 2014 16:25:17 +0000 (UTC) Received: from svn.freebsd.org ([127.0.1.70]) by svn.freebsd.org (8.14.9/8.14.9) with ESMTP id s7MGPHKV029266; Fri, 22 Aug 2014 16:25:17 GMT (envelope-from brueffer@FreeBSD.org) Received: (from brueffer@localhost) by svn.freebsd.org (8.14.9/8.14.9/Submit) id s7MGPHgH029265; Fri, 22 Aug 2014 16:25:17 GMT (envelope-from brueffer@FreeBSD.org) Message-Id: <201408221625.s7MGPHgH029265@svn.freebsd.org> X-Authentication-Warning: svn.freebsd.org: brueffer set sender to brueffer@FreeBSD.org using -f From: Christian Brueffer <brueffer@FreeBSD.org> Date: Fri, 22 Aug 2014 16:25:17 +0000 (UTC) To: doc-committers@freebsd.org, svn-doc-all@freebsd.org, svn-doc-head@freebsd.org Subject: svn commit: r45493 - head/share/xml X-SVN-Group: doc-head MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-doc-head@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: SVN commit messages for the doc tree for head <svn-doc-head.freebsd.org> List-Unsubscribe: <http://lists.freebsd.org/mailman/options/svn-doc-head>, <mailto:svn-doc-head-request@freebsd.org?subject=unsubscribe> List-Archive: <http://lists.freebsd.org/pipermail/svn-doc-head/> List-Post: <mailto:svn-doc-head@freebsd.org> List-Help: <mailto:svn-doc-head-request@freebsd.org?subject=help> List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/svn-doc-head>, <mailto:svn-doc-head-request@freebsd.org?subject=subscribe> X-List-Received-Date: Fri, 22 Aug 2014 16:25:17 -0000 Author: brueffer Date: Fri Aug 22 16:25:17 2014 New Revision: 45493 URL: http://svnweb.freebsd.org/changeset/doc/45493 Log: Add MeetBSD 2014, with a description shamelessly stolen from their website. Modified: head/share/xml/events2014.xml Modified: head/share/xml/events2014.xml ============================================================================== --- head/share/xml/events2014.xml Fri Aug 22 14:49:21 2014 (r45492) +++ head/share/xml/events2014.xml Fri Aug 22 16:25:17 2014 (r45493) @@ -205,4 +205,28 @@ 25-26th for tutorials and September 27-28th for the main conference.</description> </event> + + <event id="meetbsd-2014"> + <name>MeetBSD California 2014</name> + <url>https://www.meetbsd.com/</url> + <startdate> + <year>2014</year> + <month>11</month> + <day>1</day> + </startdate> + <enddate> + <year>2014</year> + <month>11</month> + <day>2</day> + </enddate> + <location> + <country code="US">United States</country> + <city>San Jose</city> + <site>Western Digital Campus</site> + </location> + <description>MeetBSD 2014 uses a mixed unConference format featuring + both scheduled talks and community-driven events such as + birds-of-a-feather meetings, lightning talks, and speed geeking + sessions.</description> + </event> </events> From owner-svn-doc-head@FreeBSD.ORG Sat Aug 23 01:33:13 2014 Return-Path: <owner-svn-doc-head@FreeBSD.ORG> Delivered-To: svn-doc-head@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id B16BD302; Sat, 23 Aug 2014 01:33:13 +0000 (UTC) Received: from svn.freebsd.org (svn.freebsd.org [IPv6:2001:1900:2254:2068::e6a:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 9CC3C3AA3; Sat, 23 Aug 2014 01:33:13 +0000 (UTC) Received: from svn.freebsd.org ([127.0.1.70]) by svn.freebsd.org (8.14.9/8.14.9) with ESMTP id s7N1XDEa087738; Sat, 23 Aug 2014 01:33:13 GMT (envelope-from gavin@FreeBSD.org) Received: (from gavin@localhost) by svn.freebsd.org (8.14.9/8.14.9/Submit) id s7N1XDrp087737; Sat, 23 Aug 2014 01:33:13 GMT (envelope-from gavin@FreeBSD.org) Message-Id: <201408230133.s7N1XDrp087737@svn.freebsd.org> X-Authentication-Warning: svn.freebsd.org: gavin set sender to gavin@FreeBSD.org using -f From: Gavin Atkinson <gavin@FreeBSD.org> Date: Sat, 23 Aug 2014 01:33:13 +0000 (UTC) To: doc-committers@freebsd.org, svn-doc-all@freebsd.org, svn-doc-head@freebsd.org Subject: svn commit: r45494 - head/en_US.ISO8859-1/htdocs/internal X-SVN-Group: doc-head MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-doc-head@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: SVN commit messages for the doc tree for head <svn-doc-head.freebsd.org> List-Unsubscribe: <http://lists.freebsd.org/mailman/options/svn-doc-head>, <mailto:svn-doc-head-request@freebsd.org?subject=unsubscribe> List-Archive: <http://lists.freebsd.org/pipermail/svn-doc-head/> List-Post: <mailto:svn-doc-head@freebsd.org> List-Help: <mailto:svn-doc-head-request@freebsd.org?subject=help> List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/svn-doc-head>, <mailto:svn-doc-head-request@freebsd.org?subject=subscribe> X-List-Received-Date: Sat, 23 Aug 2014 01:33:13 -0000 Author: gavin Date: Sat Aug 23 01:33:13 2014 New Revision: 45494 URL: http://svnweb.freebsd.org/changeset/doc/45494 Log: Re-add portmgr machines to internal machine list. Modified: head/en_US.ISO8859-1/htdocs/internal/machines.xml Modified: head/en_US.ISO8859-1/htdocs/internal/machines.xml ============================================================================== --- head/en_US.ISO8859-1/htdocs/internal/machines.xml Fri Aug 22 16:25:17 2014 (r45493) +++ head/en_US.ISO8859-1/htdocs/internal/machines.xml Sat Aug 23 01:33:13 2014 (r45494) @@ -174,7 +174,6 @@ this file</a>.</p> </tbody> </table> - <h2>Hardware configurations</h2> From owner-svn-doc-head@FreeBSD.ORG Sat Aug 23 01:44:00 2014 Return-Path: <owner-svn-doc-head@FreeBSD.ORG> Delivered-To: svn-doc-head@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id CA2D76EA; Sat, 23 Aug 2014 01:44:00 +0000 (UTC) Received: from svn.freebsd.org (svn.freebsd.org [IPv6:2001:1900:2254:2068::e6a:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id A9F303B54; Sat, 23 Aug 2014 01:44:00 +0000 (UTC) Received: from svn.freebsd.org ([127.0.1.70]) by svn.freebsd.org (8.14.9/8.14.9) with ESMTP id s7N1i0Og092378; Sat, 23 Aug 2014 01:44:00 GMT (envelope-from ryusuke@FreeBSD.org) Received: (from ryusuke@localhost) by svn.freebsd.org (8.14.9/8.14.9/Submit) id s7N1i0eP092376; Sat, 23 Aug 2014 01:44:00 GMT (envelope-from ryusuke@FreeBSD.org) Message-Id: <201408230144.s7N1i0eP092376@svn.freebsd.org> X-Authentication-Warning: svn.freebsd.org: ryusuke set sender to ryusuke@FreeBSD.org using -f From: Ryusuke SUZUKI <ryusuke@FreeBSD.org> Date: Sat, 23 Aug 2014 01:44:00 +0000 (UTC) To: doc-committers@freebsd.org, svn-doc-all@freebsd.org, svn-doc-head@freebsd.org Subject: svn commit: r45495 - head/ja_JP.eucJP/htdocs/platforms X-SVN-Group: doc-head MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-doc-head@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: SVN commit messages for the doc tree for head <svn-doc-head.freebsd.org> List-Unsubscribe: <http://lists.freebsd.org/mailman/options/svn-doc-head>, <mailto:svn-doc-head-request@freebsd.org?subject=unsubscribe> List-Archive: <http://lists.freebsd.org/pipermail/svn-doc-head/> List-Post: <mailto:svn-doc-head@freebsd.org> List-Help: <mailto:svn-doc-head-request@freebsd.org?subject=help> List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/svn-doc-head>, <mailto:svn-doc-head-request@freebsd.org?subject=subscribe> X-List-Received-Date: Sat, 23 Aug 2014 01:44:01 -0000 Author: ryusuke Date: Sat Aug 23 01:44:00 2014 New Revision: 45495 URL: http://svnweb.freebsd.org/changeset/doc/45495 Log: - Merge the following from the English version: r41246 -> r45480 head/ja_JP.eucJP/htdocs/platforms/amd64.xml Modified: head/ja_JP.eucJP/htdocs/platforms/ppc.xml Modified: head/ja_JP.eucJP/htdocs/platforms/ppc.xml ============================================================================== --- head/ja_JP.eucJP/htdocs/platforms/ppc.xml Sat Aug 23 01:33:13 2014 (r45494) +++ head/ja_JP.eucJP/htdocs/platforms/ppc.xml Sat Aug 23 01:44:00 2014 (r45495) @@ -1,12 +1,12 @@ <?xml version="1.0" encoding="euc-jp"?> <!DOCTYPE html PUBLIC "-//FreeBSD//DTD XHTML 1.0 Transitional-Based Extension//EN" -"http://www.FreeBSD.org/XML/doc/share/xml/xhtml10-freebsd.dtd" [ +"http://www.FreeBSD.org/XML/share/xml/xhtml10-freebsd.dtd" [ <!ENTITY title "FreeBSD/ppc �ץ��"> ]>   - + <html xmlns="http://www.w3.org/1999/xhtml"> <head> @@ -200,7 +200,7 @@ </tr> </table> -��<hr noshade="noshade"/> + <hr noshade="noshade"/> <h3><a name="list">FreeBSD/ppc �᡼��󥰥ꥹ��</a></h3> @@ -224,7 +224,7 @@ UFS �ǤϤʤ��ѡ��ƥ��򼨤��ޤ�� <pre>0 > boot hd:loader hd:0</pre> ��ǡ�currdev ��Ǥ��ư�ǥ��ͥ��ɤ��Ƥ�� - <pre>OK set currdev=hd:14 + <pre>OK set currdev="hd":14 OK load /boot/kernel/kernel.save</pre> </li> </ul> @@ -240,11 +240,11 @@ OK load /boot/kernel/kernel.save</pre> <li><a href="http://www.firmworks.com/QuickRef.html"> Open Firmware Quick ��ե��</a></li> - <li><a href="https://developer.apple.com/legacy/mac/library/#technotes/tn/tn1061.html"> + <li><a href="https://developer.apple.com/legacy/library/technotes/tn/tn1061.html"> "TN1061: Fundamentals of Open Firmware, Part 1 - The User Interface"</a></li> - <li><a href="https://developer.apple.com/legacy/mac/library/#technotes/tn/tn1062.html"> + <li><a href="https://developer.apple.com/legacy/library/technotes/tn/tn1062.html"> "TN1062: Fundamentals of Open Firmware, Part 2 - The Device Tree"</a></li> @@ -258,7 +258,7 @@ OK load /boot/kernel/kernel.save</pre> "TN2023: Open Firmware Ethernet Debugging II - Telnet Downloading" </a></li> - <li><a href="http://developer.apple.com/legacy/mac/library/#technotes/tn/tn2001.html"> + <li><a href="https://developer.apple.com/legacy/library/technotes/tn/tn2001.html"> "TN2001: Running Files from a Hard Drive in Open Firmware"</a></li> <li><a href="http://sourceware.org/psim/">psim</a> @@ -279,5 +279,5 @@ OK load /boot/kernel/kernel.save</pre> <li><a href="http://www.OpenBSD.org/macppc.html">OpenBSD/macppc</a></li> </ul> - </body> +</body> </html> From owner-svn-doc-head@FreeBSD.ORG Sat Aug 23 17:54:21 2014 Return-Path: <owner-svn-doc-head@FreeBSD.ORG> Delivered-To: svn-doc-head@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id C6D1FA99; Sat, 23 Aug 2014 17:54:21 +0000 (UTC) Received: from svn.freebsd.org (svn.freebsd.org [IPv6:2001:1900:2254:2068::e6a:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id A66293B97; Sat, 23 Aug 2014 17:54:21 +0000 (UTC) Received: from svn.freebsd.org ([127.0.1.70]) by svn.freebsd.org (8.14.9/8.14.9) with ESMTP id s7NHsL0D051747; Sat, 23 Aug 2014 17:54:21 GMT (envelope-from wblock@FreeBSD.org) Received: (from wblock@localhost) by svn.freebsd.org (8.14.9/8.14.9/Submit) id s7NHsLOG051746; Sat, 23 Aug 2014 17:54:21 GMT (envelope-from wblock@FreeBSD.org) Message-Id: <201408231754.s7NHsLOG051746@svn.freebsd.org> X-Authentication-Warning: svn.freebsd.org: wblock set sender to wblock@FreeBSD.org using -f From: Warren Block <wblock@FreeBSD.org> Date: Sat, 23 Aug 2014 17:54:21 +0000 (UTC) To: doc-committers@freebsd.org, svn-doc-all@freebsd.org, svn-doc-head@freebsd.org Subject: svn commit: r45496 - head/en_US.ISO8859-1/books/handbook/jails X-SVN-Group: doc-head MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-doc-head@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: SVN commit messages for the doc tree for head <svn-doc-head.freebsd.org> List-Unsubscribe: <http://lists.freebsd.org/mailman/options/svn-doc-head>, <mailto:svn-doc-head-request@freebsd.org?subject=unsubscribe> List-Archive: <http://lists.freebsd.org/pipermail/svn-doc-head/> List-Post: <mailto:svn-doc-head@freebsd.org> List-Help: <mailto:svn-doc-head-request@freebsd.org?subject=help> List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/svn-doc-head>, <mailto:svn-doc-head-request@freebsd.org?subject=subscribe> X-List-Received-Date: Sat, 23 Aug 2014 17:54:21 -0000 Author: wblock Date: Sat Aug 23 17:54:21 2014 New Revision: 45496 URL: http://svnweb.freebsd.org/changeset/doc/45496 Log: Add new sysutils/ezjail section. Reviewed on IRC, -doc, and with individuals through email. Particular thanks to Glen Barber for his experience and patience. Modified: head/en_US.ISO8859-1/books/handbook/jails/chapter.xml Modified: head/en_US.ISO8859-1/books/handbook/jails/chapter.xml ============================================================================== --- head/en_US.ISO8859-1/books/handbook/jails/chapter.xml Sat Aug 23 01:44:00 2014 (r45495) +++ head/en_US.ISO8859-1/books/handbook/jails/chapter.xml Sat Aug 23 17:54:21 2014 (r45496) @@ -591,9 +591,10 @@ jail_<replaceable>www</replaceable>_devf <note> <para>Simpler solutions exist, such as - <package>sysutils/ezjail</package>, which provides an easier - method of administering &os; jails and is not as sophisticated - as this setup.</para> + <application>ezjail</application>, which provides an easier + method of administering &os; jails but is less versatile than + this setup. <application>ezjail</application> is covered in + more detail in <xref linkend="jails-ezjail"/>.</para> </note> <para>The goals of the setup described in this section are:</para> @@ -982,4 +983,637 @@ jail_www_devfs_enable="YES"</programlist update the configuration files.</para> </sect2> </sect1> + + <sect1 xml:id="jails-ezjail"> + <info> + <title>Managing Jails with + <application>ezjail</application> + + + + + Warren + Block + Originally contributed by + + + + + Creating and managing multiple jails can quickly become + tedious and error-prone. Dirk Engling's + ezjail automates and greatly + simplifies many jail tasks. A basejail is + created as a template. Additional jails use &man.mount.nullfs.8; + to share many of the basejail directories without using + additional disk space. Each additional jail takes only a few + megabytes of disk space before applications are installed. + Upgrading the copy of the userland in the basejail automatically + upgrades all of the other jails. + + Additional benefits and features are described in detail on + the ezjail web site, . + + + Installing <application>ezjail</application> + + Installing ezjail consists of + adding a loopback interface for use in jails, installing the + port or package, and enabling the service. + + + + To keep jail loopback traffic off the host's loopback + network interface lo0, a second + loopback interface is created by adding an entry to + /etc/rc.conf: + + cloned_interfaces="${cloned_interfaces} lo1" + + The second loopback interface lo1 + will be created when the system starts. It can also be + created manually without a restart: + + &prompt.root; service netif cloneup +Created clone interfaces: lo1. + + Jails can be allowed to use aliases of this secondary + loopback interface without interfering with the + host. + + Inside a jail, access to the loopback address + 127.0.0.1 is + redirected to the first IP address + assigned to the jail. To make the jail loopback + correspond with the new lo1 interface, + that interface must be specified first in the list of + interfaces and IP addresses given when + creating a new jail. + + Give each jail a unique loopback address in the + 127.0.0.0/8 netblock. + + + + Install + sysutils/ezjail: + + &prompt.root; cd /usr/ports/sysutils/ezjail +&prompt.root; make install clean + + + + Enable ezjail by adding + this line to /etc/rc.conf: + + ezjail_enable="YES" + + + + The service will automatically start on system boot. + It can be started immediately for the current + session: + + &prompt.root; service ezjail start + + + + + + Initial Setup + + With ezjail installed, the + basejail directory structure can be created and populated. + This step is only needed once on the jail host + computer. + + In both of these examples, causes the + ports tree to be retrieved with &man.portsnap.8; into the + basejail. That single copy of the ports directory will be + shared by all the jails. Using a separate copy of the ports + directory for jails isolates them from the host. The + ezjail FAQ + explains in more detail: . + + + + + + To Populate the Jail with &os;-RELEASE + + For a basejail based on the &os; RELEASE matching + that of the host computer, use + install. For example, on a host + computer running &os; 10-STABLE, the latest + RELEASE version of &os; -10 will be installed in + the jail): + + &prompt.root; ezjail-admin install -p + + + + To Populate the Jail with + <command>installworld</command> + + The basejail can be installed from binaries + created by buildworld on + the host with + ezjail-admin update. + + In this example, &os; 10-STABLE has been + built from source. The jail directories are created. + Then installworld is + executed, installing the host's + /usr/obj into the + basejail. + + &prompt.root; ezjail-admin update -i -p + + The host's /usr/src is used + by default. A different source directory on the host + can be specified with and a path, + or set with ezjail_sourcetree in + /usr/local/etc/ezjail.conf. + + + + + + + The basejail's ports tree is shared by other jails. + However, downloaded distfiles are stored in the jail that + downloaded them. By default, these files are stored in + /var/ports/distfiles within each + jail. /var/ports inside each jail is + also used as a work directory when building ports. + + + + + Creating and Starting a New Jail + + New jails are created with + ezjail-admin create. In these examples, + the lo1 loopback interface is used as + described above. + + + Create and Start a New Jail + + + Create the jail, specifying a name and the loopback + and network interfaces to use, along with their + IP addresses. In this example, the + jail is named dnsjail. + + &prompt.root; ezjail-admin create dnsjail 'lo1|127.0.1.1,em0|192.168.1.50' + + + Most network services run in jails without + problems. A few network services, most notably + &man.ping.8;, use + raw network sockets. In jails, raw + network sockets are disabled by default for security. + Services that require them will not work. + + Occasionally, a jail genuinely needs raw sockets. + For example, network monitoring applications often use + &man.ping.8; to check the availability of other + computers. When raw network sockets are actually needed + in a jail, they can be enabled by editing the + ezjail + configuration file for the individual jail, + /usr/local/etc/ezjail/jailname. + Modify the parameters + entry: + + export jail_jailname_parameters="allow.raw_sockets=1" + + Do not enable raw network sockets unless services in + the jail actually require them. + + + + + Start the jail: + + &prompt.root; ezjail-admin start dnsjail + + + + Use a console on the jail: + + &prompt.root; ezjail-admin console dnsjail + + + + The jail is operating and additional configuration can be + completed. Typical settings added at this point + include: + + + + Set the + <systemitem class="username">root</systemitem> + Password + + Connect to the jail and set the + root user's + password: + + &prompt.root; ezjail-admin console dnsjail +&prompt.root; passwd +Changing local password for root +New Password: +Retype New Password: + + + + Time Zone Configuration + + The jail's time zone can be set with &man.tzsetup.8;. + To avoid spurious error messages, the &man.adjkerntz.8; + entry in /etc/crontab can be + commented or removed. This job attempts to update the + computer's hardware clock with time zone changes, but + jails are not allowed to access that hardware. + + + + <acronym>DNS</acronym> Servers + + Enter domain name server lines in + /etc/resolv.conf so + DNS works in the jail. + + + + Edit <filename>/etc/hosts</filename> + + Change the address and add the jail name to the + localhost entries in + /etc/hosts. + + + + Configure <filename>/etc/rc.conf</filename> + + Enter configuration settings in + /etc/rc.conf. This is much like + configuring a full computer. The host name and + IP address are not set here. Those + values are already provided by the jail + configuration. + + + + With the jail configured, the applications for which the + jail was created can be installed. + + + Some ports must be built with special options to be used + in a jail. For example, both of the network monitoring + plugin packages + net-mgmt/nagios-plugins and + net-mgmt/monitoring-plugins + have a JAIL option which must be enabled + for them to work correctly inside a jail. + + + + + Updating Jails + + + Updating the Operating System + + Because the basejail's copy of the userland is shared by + the other jails, updating the basejail automatically updates + all of the other jails. Either source or binary updates can + be used. + + To build the world from source on the host, then + install it in the basejail, use: + + &prompt.root; ezjail-admin update -b + + If the world has already been compiled on the host, + install it in the basejail with: + + &prompt.root; ezjail-admin update -i + + Binary updates use &man.freebsd-update.8;. These + updates have the same limitations as if + &man.freebsd-update.8; were being run directly. The most + important one is that only -RELEASE versions of &os; are + available with this method. To update the basejail to the + latest patched release of the version of &os; on the host + computer, use: + + &prompt.root; ezjail-admin update -r + + After updating the basejail, &man.mergemaster.8; can be + run to update each jail's configuration files. + + How to use &man.mergemaster.8; depends on the purpose + and trustworthiness of a jail. If a jail's services or + users are not trusted, then &man.mergemaster.8; should only + be run from within that jail: + + + &man.mergemaster.8; on Untrusted Jail + + Delete the link from the jail's + /usr/src into the basejail and + create a new /usr/src in the jail + as a mountpoint. Mount the host computer's + /usr/src read-only on the jail's + new /usr/src mountpoint: + + &prompt.root; rm /usr/jails/jailname/usr/src +&prompt.root; mkdir /usr/jails/jailname/usr/src +&prompt.root; mount -t nullfs -o ro /usr/src /usr/jails/jailname/usr/src + + Get a console in the jail: + + &prompt.root; ezjail-admin console jailname + + Inside the jail, run mergemaster. + Then exit the jail console: + + &prompt.root; cd /usr/src +&prompt.root; mergemaster -U +&prompt.root; exit + + Finally, unmount the jail's + /usr/src: + + &prompt.root; umount /usr/jails/jailname/usr/src + + + + + &man.mergemaster.8; on Trusted Jail + + If the users and services in a jail are trusted, + &man.mergemaster.8; can be run from the host: + + &prompt.root; mergemaster -U -D /usr/jails/jailname + + + + + Updating Ports + + The ports tree in the basejail is shared by the other + jails. Updating that copy of the ports tree gives the other + jails the updated version also. + + The basejail ports tree is updated with + &man.portsnap.8;: + + &prompt.root; ezjail-admin update -P + + + + + Controlling Jails + + + Stopping and Starting Jails + + ezjail automatically starts + jails when the computer is started. Jails can be manually + stopped and restarted with stop and + start: + + &prompt.root; ezjail-admin stop sambajail +Stopping jails: sambajail. + + By default, jails are started automatically when the + host computer starts. Autostarting can be disabled + with config: + + &prompt.root; ezjail-admin config -r norun seldomjail + + This takes effect the next time the host computer is + started. A jail that is already running will not be + stopped. + + Enabling autostart is very similar: + + &prompt.root; ezjail-admin config -r run oftenjail + + + + Archiving and Restoring Jails + + Use archive to create a + .tar.gz archive of a jail. The file + name is composed from the name of the jail and the current + date. Archive files are written to the archive directory, + /usr/jails/ezjail_archives. A + different archive directory can be chosen by setting + ezjail_archivedir in the configuration + file. + + The archive file can be copied elsewhere as a backup, or + an existing jail can be restored from it with + restore. A new jail can be created from + the archive, providing a convenient way to clone existing + jails. + + Stop and archive a jail named + wwwserver: + + &prompt.root; ezjail-admin stop wwwserver +Stopping jails: wwwserver. +&prompt.root; ezjail-admin archive wwwserver +&prompt.root; ls /usr/jails/ezjail-archives/ +wwwserver-201407271153.13.tar.gz + + Create a new jail named + wwwserver-clone from the archive created + in the previous step. Use the em1 + interface and assign a new IP address to + avoid conflict with the original: + + &prompt.root; ezjail-admin create -a /usr/jails/ezjail_archives/wwwserver-201407271153.13.tar.gz wwwserver-clone 'lo1|127.0.3.1,em1|192.168.1.51' + + + + + Full Example: <application>BIND</application> in a + Jail + + Putting the BIND + DNS server in a jail improves security by + isolating it. This example creates a simple caching-only name + server. + + + + The jail will be called + dns1. + + + + The jail will use IP address + 192.168.1.240 on the host's + re0 interface. + + + + The upstream ISP's DNS servers are + at 10.0.0.62 and + 10.0.0.61. + + + + The basejail has already been created and a ports tree + installed. + + + + + Create a cloned loopback interface by adding a line to + /etc/rc.conf: + + cloned_interfaces="${cloned_interfaces} lo1" + + Immediately create the new loopback interface: + + &prompt.root; service netif cloneup +Created clone interfaces: lo1. + + Create the jail: + + &prompt.root; ezjail-admin create dns1 'lo1|127.0.2.1,re0|192.168.1.240' + + Start the jail, connect to a console running on it, and + perform some basic configuration: + + &prompt.root; ezjail-admin start dns1 +&prompt.root; ezjail-admin console dns1 +&prompt.root; passwd +Changing local password for root +New Password: +Retype New Password: +&prompt.root; tzsetup +&prompt.root; sed -i .bak -e '/adjkerntz/ s/^/#/' /etc/crontab +&prompt.root; sed -i .bak -e 's/127.0.0.1/127.0.2.1/g; s/localhost.my.domain/dns1.my.domain dns1/' /etc/hosts + + Temporarily set the upstream DNS + servers in /etc/resolv.conf so ports + can be downloaded: + + nameserver 10.0.0.62 +nameserver 10.0.0.61 + + Still using the jail console, install + dns/bind99. + + &prompt.root; cd /usr/ports/dns/bind99 +&prompt.root; make -C /usr/ports/dns/bind99 install clean + + Configure the name server by editing + /usr/local/etc/namedb/named.conf. + + Create an Access Control List (ACL) + of addresses and networks that are permitted to send + DNS queries to this name server. This + section is added just before the options + section already in the file: + + ... +// or cause huge amounts of useless Internet traffic. + +acl "trusted" { + 192.168.1.0/24; + localhost; + localnets; +}; + +options { +... + + Use the jail IP address in the + listen-on setting to accept + DNS queries from other computers on the + network: + + listen-on { 192.168.1.240; }; + + A simple caching-only DNS name server + is created by changing the forwarders + section. The original file contains: + + /* + forwarders { + 127.0.0.1; + }; +*/ + + Uncomment the section by removing the + /* and */ lines. + Enter the IP addresses of the upstream + DNS servers. Immediately after the + forwarders section, add references to the + trusted ACL defined + earlier: + + forwarders { + 10.0.0.62; + 10.0.0.61; + }; + + allow-query { any; }; + allow-recursion { trusted; }; + allow-query-cache { trusted; }; + + Enable the service in + /etc/rc.conf: + + named_enable="YES" + + Start and test the name server: + + &prompt.root; service named start +wrote key file "/usr/local/etc/namedb/rndc.key" +Starting named. +&prompt.root; /usr/local/bin/dig @192.168.1.240 freebsd.org + + A response that includes + + ;; Got answer; + + shows that the new DNS server is + working. A long delay followed by a response + including + + ;; connection timed out; no servers could be reached + + shows a problem. Check the configuration settings and + make sure any local firewalls allow the new + DNS access to the upstream + DNS servers. + + The new DNS server can use itself for + local name resolution, just like other local computers. Set + the address of the DNS server in the + client computer's + /etc/resolv.conf: + + nameserver 192.168.1.240 + + A local DHCP server can be configured + to provide this address for a local DNS + server, providing automatic configuration on + DHCP clients. + + +

Pointers Of Interest

Developers

Project Ideas
-
SVN Repository
-
Perforce Repository
+
SVN Repository
+
Perforce Repository

Status

Prior Releases Still Being Supported

Header And Logo

&header2.word.search;

Pointers Of Interest

Developers Project Ideas - SVN Repository - Perforce Repository + SVN Repository + Perforce Repository

Status

Prior Releases Still Being Supported

Header And Logo

&header2.word.search;

Developers

Project Ideas
-
SVN Repository
-
Perforce Repository
+
SVN Repository
+
Perforce Repository