From owner-freebsd-questions@FreeBSD.ORG Sun Apr 27 14:38:40 2003 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id D3B1F37B401 for ; Sun, 27 Apr 2003 14:38:40 -0700 (PDT) Received: from kanga.honeypot.net (kanga.honeypot.net [208.162.254.122]) by mx1.FreeBSD.org (Postfix) with ESMTP id C7ADB43F93 for ; Sun, 27 Apr 2003 14:38:39 -0700 (PDT) (envelope-from kirk@strauser.com) Received: from pooh.honeypot.net.strauser.com (kirk@pooh.honeypot.net [10.0.5.128]) by kanga.honeypot.net (8.12.8/8.12.7) with ESMTP id h3RLccmL027907 for ; Sun, 27 Apr 2003 16:38:38 -0500 (CDT) (envelope-from kirk@strauser.com) To: freebsd-questions@freebsd.org From: Kirk Strauser Date: Sun, 27 Apr 2003 16:38:37 -0500 Message-ID: <87n0ibwrhe.fsf@pooh.honeypot.net> Lines: 27 X-Mailer: Gnus/5.090018 (Oort Gnus v0.18) Emacs/21.3 (gnu/linux) MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha1; protocol="application/pgp-signature" Subject: Mimimal set of r/w filesytems for a jail? X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 27 Apr 2003 21:38:41 -0000 --=-=-= Content-Transfer-Encoding: quoted-printable I am running multiple jails on my 4.7-STABLE server, but seriously want to cut back on redundant file storage. In my current setup, I have multiple jail directories, each with a complete FreeBSD installation. I would like to migrate to a setup where all jails share one common "base" filesystem mounted read-only, and have small jail-specific directories for local read-write access. My thinking is that, at a minimum, I'd need r/w mounts for: /dev /etc /home /root /tmp /usr/local /var Is there anything else that should be included? Second question. Somehow or another, I'll need to mount those directories inside the jail. I've been using NFS mounts to localhost to share /usr/ports across jails. Is this still the recommended stable method for what I'm trying to accomplish? The union (and null) filesystems look like they'd be ideal, but the man page warnings are a pretty strong deterrent to use on a production system. =2D-=20 Kirk Strauser --=-=-= Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQA+rE3d5sRg+Y0CpvERAsHYAKCMf+Grq/ql5tOEa9bqGW60GA4s9gCfag/D Ft4i0q+JcIeGnYclOJLK9M0= =XG+N -----END PGP SIGNATURE----- --=-=-=--