Date: Sat, 06 Sep 2008 12:18:34 +0100 From: Matthew Seaman <m.seaman@infracaninophile.co.uk> To: Joshua Piccari <jpiccari@bblocked.org> Cc: freebsd-hackers@freebsd.org Subject: Re: Temp files in /etc Message-ID: <48C2670A.9000808@infracaninophile.co.uk> In-Reply-To: <15d3bc360809052349t4e90e719tf82c5002a2d9e2d@mail.gmail.com> References: <15d3bc360809051940t70f0b884mb9a80132acc50b45@mail.gmail.com> <20080906063113.GB77307@icarus.home.lan> <15d3bc360809052349t4e90e719tf82c5002a2d9e2d@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
[-- Attachment #1 --]
Joshua Piccari wrote:
> I have a shared /etc folder that is mounted read-only to the different jails
> that share it. Some of the configuration files which need to be dynamic from
> jail to jail are replaced with symbolic links to the jails /usr/local/etc
> folder. The reason for mount /etc as read-only is to ensure that none of the
> jails accidentally modify the configurations for all the jails sharing these
> configurations. However, there is an issue with creating temp files on a
> read-only system which means I will have to work around this somehow. I
> thought about setting the schg flag on all the files in the shared /etc
> folder but I don't want one jail to be able to add a rc.d script for every
> jail.
Can't you use a unionfs to achieve what you want? Abstract out all the
common data to filesystem that you mount read-only, and then use unionfs to
mount a per-jail read/write overlay on top of that?
Cheers,
Matthew
--
Dr Matthew J Seaman MA, D.Phil. 7 Priory Courtyard
Flat 3
PGP: http://www.infracaninophile.co.uk/pgpkey Ramsgate
Kent, CT11 9PW
[-- Attachment #2 --]
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.9 (FreeBSD)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iEYEAREIAAYFAkjCZxAACgkQ8Mjk52CukIyRwQCfVcg2mCHuk4OexHijg0bLZITf
NoYAnR8GmCeIatCpd+JPQjcPyI40bjkP
=Jo0p
-----END PGP SIGNATURE-----
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?48C2670A.9000808>