From owner-freebsd-hackers@FreeBSD.ORG Tue Aug 29 18:37:25 2006 Return-Path: X-Original-To: hackers@freebsd.org Delivered-To: freebsd-hackers@FreeBSD.ORG Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id D48FE16A4DE for ; Tue, 29 Aug 2006 18:37:25 +0000 (UTC) (envelope-from jared@puck.nether.net) Received: from puck.nether.net (puck.nether.net [204.42.254.5]) by mx1.FreeBSD.org (Postfix) with ESMTP id 7358F43D46 for ; Tue, 29 Aug 2006 18:37:25 +0000 (GMT) (envelope-from jared@puck.nether.net) Received: from puck.nether.net (puck.nether.net [204.42.254.5]) by puck.nether.net (8.13.7/8.12.9) with ESMTP id k7TIbNg4095281 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Tue, 29 Aug 2006 14:37:23 -0400 (EDT) (envelope-from jared@puck.nether.net) Received: (from jared@localhost) by puck.nether.net (8.13.7/8.12.9/Submit) id k7TIbMXp095280; Tue, 29 Aug 2006 14:37:22 -0400 (EDT) (envelope-from jared) Date: Tue, 29 Aug 2006 14:37:22 -0400 From: Jared Mauch To: Mike Meyer Message-ID: <20060829183722.GB94288@puck.nether.net> References: <44F0E38F.5030809@erdgeist.org> <17648.59470.572563.377998@bhuda.mired.org> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <17648.59470.572563.377998@bhuda.mired.org> User-Agent: Mutt/1.5.12-2006-07-14 Cc: hackers@freebsd.org, Dirk Engling Subject: Re: jails, cron and sendmail X-BeenThere: freebsd-hackers@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Technical Discussions relating to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 29 Aug 2006 18:37:25 -0000 On Sat, Aug 26, 2006 at 08:33:18PM -0400, Mike Meyer wrote: > In <44F0E38F.5030809@erdgeist.org>, Dirk Engling typed: > Why are you running cron inside the jails at all? Are you letting your > users run it? If not, can you disable it, and instead run scripts from > your real crontab that do the appropriate thigns in each jail? The way I use jails is i have big-beefy-hardware in colo and 3-5 virtual "machines" where they get root, etc.. access and it looks almost like a real host (with a few obvious differences). Works nicely as backups are done via rsync on the main host for the most part to a remote site and essentially provides a live image (outside of some issues with databases and such) on a remote host to restart the jails should the main hardware have some catastrophic failure. May not be the full initial intention, but i've found things like adjkerntz possibly annoying to have enabled in these setups by default.. but my list of stuff to turn off/on is fairly set so i don't have a lot of problems. - jared -- Jared Mauch | pgp key available via finger from jared@puck.nether.net clue++; | http://puck.nether.net/~jared/ My statements are only mine.