Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 12 Dec 2016 17:13:27 +0000
From:      SK <fbstable@cps-intl.org>
To:        Miroslav Lachman <000.fbsd@quip.cz>, freebsd-jail <freebsd-jail@freebsd.org>, Alexander Leidinger <Alexander@leidinger.net>
Subject:   Re: ZFS and Jail :: nullfs mount :: nothing visible from host :: solved [partial]
Message-ID:  <33473585-3cb9-10d3-acf9-0a917c5a0079@cps-intl.org>
In-Reply-To: <584AB345.4080307@quip.cz>
References:  <aa078173-e9f1-3f09-41d4-6613014b1119@cps-intl.org> <584986D0.3040109@quip.cz> <2b6346f8-ed02-0e6d-bd89-106098e7eb2d@cps-intl.org> <58499446.3050403@quip.cz> <eed9efad-9bac-9d36-b75e-c41f9ea72a8b@cps-intl.org> <5849C5BF.7020005@quip.cz> <fb56ab21-026b-408d-f712-ed7479e1f269@cps-intl.org> <584A9179.9060508@quip.cz> <b53fba06-bb7d-06d8-34a4-4677805fb175@cps-intl.org> <584A9D89.4040003@quip.cz> <3851c5d9-7646-b670-357e-ae937fcc7e8f@cps-intl.org> <584AB345.4080307@quip.cz>

next in thread | previous in thread | raw e-mail | index | archive | help
On 09/12/2016 13:36, Miroslav Lachman wrote:
>
> My last idea - put zfs_enable="YES" in jails /etc/rc.conf.
>
> Maybe the dataset is not mounted if has property jailed=on (I don't 
> know I didn't test it yet)
Good evening Miroslav, good evening Alexander

Thank you both for your support in this matter. I have completed (I 
think) my tests with the test box and have concluded as following

a) Miroslav, you were correct, I could only see from the root of the 
dataset to the dataset itself, all other dataset that are not part of 
this branch is invisible from within the jail. This serves my purpose, 
so I am content (to some extent). The explanation about enforce_statfs 
was really helpful -- I think that was one thing I was missing (cannot 
confirm, but I believe that is what the error was on my part)

b) Alexander, I am still not able to do snapshot or any other action 
from within my jail. My understanding is that you are using ezjail, 
which might be doing something that my regular jail creation is 
ommitting. If you do not mind sharing your configuration steps, I can 
try to reproduce it at this end. If it is exactly as it is on the site 
you pointed to earlier, please let me know, I will follow that verbatim 
(even though I do not remember seeing anything there that I have not 
tried already, but I might be mistaken).

And now to everyone, I am still confused about zfs set jailed=on. As I 
mentioned on my previous emails, as soon as I do that, the dataset 
vanishes from the host system (as I understand, that is expected 
behaviour). Then the jail fails as it is unable to mount /dev, /proc and 
so on. I have to change jail.conf and comment out mount.devfs and 
mount.procfs -- but than in turn makes /dev/zfs unavaulable and I cannot 
do anything from inside the jail.

I do not need it now, given that I am happy with the current situaion, 
but am curious to know how that zfs parameter works and how I can make 
it work, hence "solved" is "partial" in the subject line.

Thanks to you both for your continuous support and suggestions, it is 
very much apprecaited.

Best regards
SK





Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?33473585-3cb9-10d3-acf9-0a917c5a0079>