From owner-freebsd-doc@FreeBSD.ORG  Wed Oct 15 13:37:47 2014
Return-Path: <owner-freebsd-doc@FreeBSD.ORG>
Delivered-To: freebsd-doc@FreeBSD.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits))
 (No client certificate requested)
 by hub.freebsd.org (Postfix) with ESMTPS id DBB2FADB
 for <freebsd-doc@FreeBSD.org>; Wed, 15 Oct 2014 13:37:47 +0000 (UTC)
Received: from kenobi.freebsd.org (kenobi.freebsd.org
 [IPv6:2001:1900:2254:206a::16:76])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
 (Client did not present a certificate)
 by mx1.freebsd.org (Postfix) with ESMTPS id C2B79914
 for <freebsd-doc@FreeBSD.org>; Wed, 15 Oct 2014 13:37:47 +0000 (UTC)
Received: from bugs.freebsd.org ([127.0.1.118])
 by kenobi.freebsd.org (8.14.9/8.14.9) with ESMTP id s9FDblU2070963
 for <freebsd-doc@FreeBSD.org>; Wed, 15 Oct 2014 13:37:47 GMT
 (envelope-from bugzilla-noreply@freebsd.org)
From: bugzilla-noreply@freebsd.org
To: freebsd-doc@FreeBSD.org
Subject: [Bug 194379] New: Remove interface option from jail(8) example
Date: Wed, 15 Oct 2014 13:37:47 +0000
X-Bugzilla-Reason: AssignedTo
X-Bugzilla-Type: new
X-Bugzilla-Watch-Reason: None
X-Bugzilla-Product: Documentation
X-Bugzilla-Component: Documentation
X-Bugzilla-Version: Latest
X-Bugzilla-Keywords: 
X-Bugzilla-Severity: Affects Many People
X-Bugzilla-Who: wout@canodus.be
X-Bugzilla-Status: Needs Triage
X-Bugzilla-Priority: ---
X-Bugzilla-Assigned-To: freebsd-doc@FreeBSD.org
X-Bugzilla-Target-Milestone: ---
X-Bugzilla-Flags: 
X-Bugzilla-Changed-Fields: bug_id short_desc product version rep_platform
 op_sys bug_status bug_severity priority component assigned_to reporter
Message-ID: <bug-194379-9@https.bugs.freebsd.org/bugzilla/>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: 7bit
X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/
Auto-Submitted: auto-generated
MIME-Version: 1.0
X-BeenThere: freebsd-doc@freebsd.org
X-Mailman-Version: 2.1.18-1
Precedence: list
List-Id: Documentation project <freebsd-doc.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/freebsd-doc>,
 <mailto:freebsd-doc-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-doc/>
List-Post: <mailto:freebsd-doc@freebsd.org>
List-Help: <mailto:freebsd-doc-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-doc>,
 <mailto:freebsd-doc-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 15 Oct 2014 13:37:47 -0000

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=194379

            Bug ID: 194379
           Summary: Remove interface option from jail(8) example
           Product: Documentation
           Version: Latest
          Hardware: Any
                OS: Any
            Status: Needs Triage
          Severity: Affects Many People
          Priority: ---
         Component: Documentation
          Assignee: freebsd-doc@FreeBSD.org
          Reporter: wout@canodus.be

In the section "Starting the Jail" of the jail(8) man page, it is suggested to
use the "interface" option to start the jail.

This results in the IP (alias) that is being assigned to the jail to be
automatically created and destroyed.

But, when you (by mistake or on purpose) assign the host's primary IP address
to the jail, and you do not have any aliases configured on the interface, this
results in the interface going down.

This is pretty dangerous, so I would suggest removing the "interface" option
from the example.

Using the primary IP address for jails is not good practice, but it is legal to
do so without using the "automatic IP alias" functionality of jail(8).

When you do have aliases set on the interface before the jail starts, the
interface does not go down, so it might be a bug in the jail(8) command.

For more information, see https://forums.freebsd.org/viewtopic.php?f=7&t=48436

-- 
You are receiving this mail because:
You are the assignee for the bug.