From owner-freebsd-jail@FreeBSD.ORG  Sun Mar 31 19:04:33 2013
Return-Path: <owner-freebsd-jail@FreeBSD.ORG>
Delivered-To: freebsd-jail@FreeBSD.org
Received: from mx1.freebsd.org (mx1.FreeBSD.org [8.8.178.115])
 by hub.freebsd.org (Postfix) with ESMTP id 35887D07
 for <freebsd-jail@FreeBSD.org>; Sun, 31 Mar 2013 19:04:33 +0000 (UTC)
 (envelope-from jamie@FreeBSD.org)
Received: from m2.gritton.org (gritton.org [199.192.164.235])
 by mx1.freebsd.org (Postfix) with ESMTP id 15659A8E
 for <freebsd-jail@FreeBSD.org>; Sun, 31 Mar 2013 19:04:32 +0000 (UTC)
Received: from glorfindel.gritton.org (c-174-52-130-157.hsd1.ut.comcast.net
 [174.52.130.157]) (authenticated bits=0)
 by m2.gritton.org (8.14.5/8.14.5) with ESMTP id r2VJ4Sgb062877;
 Sun, 31 Mar 2013 13:04:29 -0600 (MDT)
 (envelope-from jamie@FreeBSD.org)
Message-ID: <515888BA.8060804@FreeBSD.org>
Date: Sun, 31 Mar 2013 13:04:26 -0600
From: Jamie Gritton <jamie@FreeBSD.org>
User-Agent: Mozilla/5.0 (X11; U; FreeBSD amd64; en-US;
 rv:1.9.2.24) Gecko/20120129 Thunderbird/3.1.16
MIME-Version: 1.0
To: Dirk Engling <erdgeist@erdgeist.org>
Subject: Re: rc.d/jail and jail.conf
References: <515721F8.9090202@erdgeist.org>
 <AA7CA531-5197-4BBC-B260-A3EC8B7A1024@inbox.im>
 <alpine.BSF.2.00.1303302157010.85469@erdgeist.org>
 <515847AF.8070808@FreeBSD.org> <5158526A.4020400@quip.cz>
 <51586419.5090207@FreeBSD.org> <51586DC8.7030500@quip.cz>
 <515880F3.1050300@FreeBSD.org> <5158874C.2060701@erdgeist.org>
In-Reply-To: <5158874C.2060701@erdgeist.org>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Cc: freebsd-jail@FreeBSD.org
X-BeenThere: freebsd-jail@freebsd.org
X-Mailman-Version: 2.1.14
Precedence: list
List-Id: "Discussion about FreeBSD jail\(8\)" <freebsd-jail.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/freebsd-jail>,
 <mailto:freebsd-jail-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-jail>
List-Post: <mailto:freebsd-jail@freebsd.org>
List-Help: <mailto:freebsd-jail-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-jail>,
 <mailto:freebsd-jail-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sun, 31 Mar 2013 19:04:33 -0000

On 03/31/13 12:58, Dirk Engling wrote:
> On 31.03.13 20:31, Jamie Gritton wrote:
>
>> That seems reasonable, but using a jail list in rc.conf may suffice.
>
> It is less error prone to just use 'jail_list=*' in rc.conf and disable
> jails per config block, and then issue a warning like 'Skipping disabled
> jail(s) foo, bar, baz'.
>
> (Although I see this from a perspective of jails being virtual hosts
> that should be configurable by automated tools, too.)

If you don't mind some slightly difficult error messages, you can always
"disable" a jail with exec.prestart="false". jail(8) requires all
commands to succeed, and in particular won't even create a jail when one
of the prestart commands fails.

- Jamie