Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 14 Oct 2017 16:04:33 +0200
From:      Xavier Garcia <xavier@shellguardians.com>
To:        markham breitbach <markham_breitbach@ssimicro.com>
Cc:        freebsd-pkg@FreeBSD.org
Subject:   Re: poudriere in a jail
Message-ID:  <20171014140433.xyhcjd5niwuv4isf@mutt.skynet.ct>
In-Reply-To: <2cc3949f-7807-f0d7-49dd-0887fe2b2222@ssimicro.com>
References:  <2cc3949f-7807-f0d7-49dd-0887fe2b2222@ssimicro.com>

next in thread | previous in thread | raw e-mail | index | archive | help
Hi,

We are succesfully running Poudriere inside jails but some extra
parameters are needed (the ones below plus the defaults in
ezjail) and we are not using the linux support (NOLINUX=yes)

children.max=32 allow.mount allow.mount.tmpfs allow.mount.devfs
allow.mount.procfs allow.mount.zfs allow.mount.nullfs
allow.raw_sockets allow.socket_af allow.sysvipc allow.chflags
enforce_statfs=1 ip6=inherit ip4=inherit

Notice that Poudriere needs access to the ipv4 and ipv6 loopback
interfaces, for the compilation stage (one jail with
public IP for fetching packages and another jail with loopback
for the compilation). If another jail is already making use
of them, you can create aliases in the loopback interfaces and
then override the values in Poudriere.conf with LOIP6 and LOIP4.

You may also have trouble if you don't limit the number of
parallel jobs (PARALLEL_JOBS=4) in Poudriere because there is a limit in how
many jails the parent jail can create. It will try to create
$num_cpus jails.

Kind regards,

Xavier Garcia


On Wed, Oct 11, 2017 at 10:57:11AM -0600, markham breitbach wrote:
> I am trying to run poudriere in a jail, but when I try to run a build it
> just gives me a whole lot of this and dies without.
> 
> ```
> # poudriere bulk -f /usr/local/etc/poudriere.d/pkglist.txt -j 10amd64
> [00:00:00] ====>> Creating the reference jail...chflags:
> /poo/data/.m/10amd64-default/ref/rescue/expr: Read-only file system
> chflags: /poo/data/.m/10amd64-default/ref/rescue/clri: Read-only file system
> chflags: /poo/data/.m/10amd64-default/ref/rescue/vi: Read-only file system
> ... snip ...
> [00:00:51] ====>> Cleaning up
> [00:00:51] ====>> Unmounting file systems
> chflags: /poo/data/.m/10amd64-default/ref/rescue/expr: Read-only file system
> chflags: /poo/data/.m/10amd64-default/ref/rescue/clri: Read-only file system
> ... snip ...
> ```
> 
> I have used the same configuration outside of the jail and it works fine.
> 
>  My jail has the following configuration:
> 
> ``` devfs_ruleset=0 nodying enforce_statfs=0 host=new ip4=new
> ip6=disable jid=77 linux=new name=bob_ssimicro_com osreldate=1003000
> osrelease=10.3-RELEASE-p11 parent=0 path=/usr/jails/bob.ssimicro.com
> nopersist securelevel=-1 allow.chflags allow.mount allow.mount.devfs
> allow.mount.fdescfs allow.mount.linprocfs allow.mount.linsysfs
> allow.mount.nullfs allow.mount.procfs allow.mount.tmpfs allow.mount.zfs
> allow.noquotas allow.noraw_sockets allow.noset_hostname
> allow.nosocket_af allow.nosysvipc children.cur=0 children.max=10
> cpuset.id=4 host.domainname="" host.hostid=0 host.hostname=bob
> host.hostuuid=00000000-0000-0000-0000-000000000000
> ip4.addr=xx.xx.xx.xx,127.0.0.1 ip4.saddrsel ip6.addr= ip6.saddrsel
> linux.osname=Linux linux.osrelease=2.6.32 linux.oss_version=198144
> ```
> 
> I am not using ZFS.  Here is my poudriere.conf
> 
> ```
> #ZPOOL=tank
> NO_ZFS=yes
> # ZROOTFS=/poudriere
> FREEBSD_HOST=ftp://ftp.freebsd.org
> BASEFS=/poo
> POUDRIERE_DATA=${BASEFS}/data
> USE_PORTLINT=no
> USE_TMPFS=yes
> DISTFILES_CACHE=/usr/ports/distfiles
> CHECK_CHANGED_OPTIONS=verbose
> CHECK_CHANGED_DEPS=yes
> PKG_REPO_SIGNING_KEY=/usr/local/etc/ssl/keys/repo.key
> ```
> 
> Some other useful information:
> 
> ```
> # uname -a
> FreeBSD bob.ssimicro.com 10.3-RELEASE-p11 FreeBSD 10.3-RELEASE-p11 #0:
> Mon Oct 24 18:49:24 UTC 2016    
> root@amd64-builder.daemonology.net:/usr/obj/usr/src/sys/GENERIC  amd64
> # poudriere version
> 3.1.19
> ```
> 
> I would really like to have this working inside a jail.  Any suggestions
> are greatly appreciated.
> 
> Thanks,
> -Markham
> 
> 
> _______________________________________________
> freebsd-pkg@freebsd.org mailing list
> https://lists.freebsd.org/mailman/listinfo/freebsd-pkg
> To unsubscribe, send any mail to "freebsd-pkg-unsubscribe@freebsd.org"

-- 

http://www.shellguardians.com/
http://www.twitter.com/shellguardians
http://keybase.io/shellguardians


pgp key ID: 0xD94E70A1
http://pgp.mit.edu/



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20171014140433.xyhcjd5niwuv4isf>