From owner-freebsd-questions@FreeBSD.ORG Fri May 13 17:45:41 2005 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 0901716A4CE for ; Fri, 13 May 2005 17:45:41 +0000 (GMT) Received: from biodiesel.gaiahost.coop (biodiesel.gaiahost.coop [64.95.78.120]) by mx1.FreeBSD.org (Postfix) with ESMTP id 9CF0443D49 for ; Fri, 13 May 2005 17:45:40 +0000 (GMT) (envelope-from mark@gaiahost.coop) Received: from [127.0.0.1] (host-216-153-147-194.spr.choiceone.net [::ffff:216.153.147.194]) (AUTH: CRAM-MD5 mark) by biodiesel.gaiahost.coop with esmtp; Fri, 13 May 2005 12:45:29 -0400 id 002A0060.4284D9AC.0000477D Message-ID: <4284E7C4.6030909@gaiahost.coop> Date: Fri, 13 May 2005 13:45:40 -0400 From: Mark Bucciarelli User-Agent: Mozilla Thunderbird 1.0 (Windows/20041206) X-Accept-Language: en-us, en MIME-Version: 1.0 To: FreeBSD-questions@FreeBSD.org Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Subject: Managing updates in jails X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 13 May 2005 17:45:41 -0000 I'm a recent convert to FreeBSD, mainly because of the jail functionality. I am trying to figure out a good system for keeping jails updated and am running against my lack of experience with the compile-from-source approach as well as the different startup scripts. I have pretty much settled on the idea of creating a template or base jail, updating that, then creating a tarball that I can extract over any other jail I need to update. I figure I won't have more than six jails and the complexity of hardlinks and/or unionfs/nullfs for me is not worth the saved disk space. Currently, I have been making buildworld, make buildkernel, etc on the host, then repeating the process inside the template jail. The host is just going to run sshd and ntpd, the template will be apache+mysql+php. A couple questions: - is there a correct way to "reuse" the makekernel and makeworld done on the host system for the template jail? for example, using DESTDIR and/or NOREBUILD? (I tried DESTDIR initially to install vim into the template jail, but when I ran vim inside the jail, it wouldn't start b/c it was missing a library. So I back tracked and installed the entire ports tree inside the jail and built stuff from there.) It takes around three hours to rebuild everything once, so this will be a limiting factor on how fast I can patch the system (unless I invest in another, faster machine just for compiling). - what directories in the template jail do i need to tar when applying an upgrade to other jails? just /usr and some selected pieces of /etc? - i need to support multiple ip's per jail. i found a patch that applies (pretty much--some wierdness in netinet6) against 5.4, but would like to use the existing rc.conf to manage startup. where would i look to modify the jail startup command to pass multiple ips? - what do people do with the mount command inside a jail--just delete it? are there other commands you take out? Thanks for any pointers, I think a section on jails would be a good addition to the handbook. Regards, m