From nobody Mon Dec 29 02:50:11 2025 X-Original-To: questions@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4dfggb5q5Nz6LYFQ for ; Mon, 29 Dec 2025 02:50:19 +0000 (UTC) (envelope-from graham@menhennitt.com.au) Received: from bisque.yew.relay.mailchannels.net (bisque.yew.relay.mailchannels.net [23.83.220.18]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4dfggZ4Kj9z3p8D for ; Mon, 29 Dec 2025 02:50:17 +0000 (UTC) (envelope-from graham@menhennitt.com.au) Authentication-Results: mx1.freebsd.org; dkim=pass header.d=menhennitt.com.au header.s=dreamhost header.b=hHfFD4ZR; dmarc=none; spf=pass (mx1.freebsd.org: domain of graham@menhennitt.com.au designates 23.83.220.18 as permitted sender) smtp.mailfrom=graham@menhennitt.com.au; arc=pass ("mailchannels.net:s=arc-2022:i=1") X-Sender-Id: dreamhost|x-authsender|graham@menhennitt.com.au Received: from relay.mailchannels.net (localhost [127.0.0.1]) by relay.mailchannels.net (Postfix) with ESMTP id 3868F801546 for ; Mon, 29 Dec 2025 02:50:15 +0000 (UTC) Received: from pdx1-sub0-mail-a243.dreamhost.com (100-113-24-197.trex-nlb.outbound.svc.cluster.local [100.113.24.197]) (Authenticated sender: dreamhost) by relay.mailchannels.net (Postfix) with ESMTPA id 8C354801597 for ; Mon, 29 Dec 2025 02:50:14 +0000 (UTC) ARC-Seal: i=1; a=rsa-sha256; d=mailchannels.net; s=arc-2022; cv=none; t=1766976614; b=WvyK0+/SfwUL++odiC3Kwuf7quf+cZuycqnqdypXZKx85nPD0lJyypf9piaJevm12imwnq ZR84oiy3xyYd3BhHauAK7xl9k1dcz0rCFhz4an8k9gNdB2Wfs7oOTKyCcshqhYLZd4G/Sj yhHmA3oJ+KjxAHop/0a6WQFr0CBI0ZrsjJtw7a0ZiDW9NQDPvF3e4i3EV02IdBhCORKzz3 RWtjAI7z59jJ4ReR52uvZe60521IoeBSNvxTMHARDnS9GQ1w7YtCEqS9iuQI+vJaZaYJiW LTQiTkUqquud+MLEN/jKkjCW7sYaeShAEquVmciXgkGMP9ysqres5lrjDDa+eg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=mailchannels.net; s=arc-2022; t=1766976614; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references:dkim-signature; bh=XoYDZKCeNjlrZ5cBC8lGzocf7jQRR0kJJIUu0hcTdDU=; b=bGIOyyDb78tUeFELaQccfB9SxjShCATSZbp392N2CoSdPggIJz0h+61yEjaJ7gXmATw3wl 8rT9iGvFI0u13fr/auZLWDk7nB4TiI6TtMg8lsZq+NduSysbij7wTxWQPr8VmQSHBPwKmI K/DZ7GwHyuRDbuPaXmKKRsosjI3rpxpWy3eERHzeL407sAI2xgDQYmXSvJ4P2udhFdxpRv VOn/z1g4Yw05Ww6W+VkmwMYooUjmc6YfErecRT4GafpI5U98aXXbsamk2gHZvWLpbNoHxo WJgSRJfDB6Vj5j5ZbqczQLQlrqZZW0PHlCAbKx1LkKhydNw3PiR/NRGNeas/ow== ARC-Authentication-Results: i=1; rspamd-55cdcc6c54-7qdgd; auth=pass smtp.auth=dreamhost smtp.mailfrom=graham@menhennitt.com.au X-Sender-Id: dreamhost|x-authsender|graham@menhennitt.com.au X-MC-Relay: Good X-MailChannels-SenderId: dreamhost|x-authsender|graham@menhennitt.com.au X-MailChannels-Auth-Id: dreamhost X-Abortive-Bitter: 09d0f6b040e80ef6_1766976614786_3447874585 X-MC-Loop-Signature: 1766976614786:220978853 X-MC-Ingress-Time: 1766976614786 Received: from pdx1-sub0-mail-a243.dreamhost.com (pop.dreamhost.com [64.90.62.162]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384) by 100.113.24.197 (trex/7.1.3); Mon, 29 Dec 2025 02:50:14 +0000 Received: from [203.3.73.144] (123-243-12-193.tpgi.com.au [123.243.12.193]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) (Authenticated sender: graham@menhennitt.com.au) by pdx1-sub0-mail-a243.dreamhost.com (Postfix) with ESMTPSA id 4dfggV0Nnvz107p for ; Sun, 28 Dec 2025 18:50:13 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=menhennitt.com.au; s=dreamhost; t=1766976614; bh=XoYDZKCeNjlrZ5cBC8lGzocf7jQRR0kJJIUu0hcTdDU=; h=Date:Subject:To:From:Content-Type:Content-Transfer-Encoding; b=hHfFD4ZRuEH0mimqH4VPOB/rjI4f9fA1gv2+Z4IScp7iyBQ9RxdaNPAsxxaaPo8Le tIys8f10kkTad/2XsuZe5z5DduXmNEoV7jZAtD7s4Kp7xrCbZQr6vtcJGM+RxXGqiu xzeawSBYGwUIVf4h3i5MoB9Vo+ZVgwa/c6I/o8R/W5xrp/dU5HmjxA/bE5/ESGCPoV U5UUOjX9dc2Ff8MHfGWJgvvC0dxmJ1Xu27ChZdrhWFGLwYngEFRRlT0THTw9PrNJTF gtl0Wuqw5/9ZjHX8Qi/QPc1mkBJGiUoWgS+s8ORtRGz/A7aGEfxY9+4jJcc+eq1uD2 +LWTzUCo/v8Og== Message-ID: <8b0ab9ee-29ef-413f-9b42-c837ca8d29f0@menhennitt.com.au> Date: Mon, 29 Dec 2025 13:50:11 +1100 List-Id: User questions List-Archive: https://lists.freebsd.org/archives/freebsd-questions List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: freebsd-questions@freebsd.org Sender: owner-freebsd-questions@FreeBSD.org MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Subject: Re: error creating thin jail on 15.0 To: questions@freebsd.org References: <4f56394c9bc2dd4aef5f426eda9679f0@freebsd.org> <3fcb1ac3913e14eee2c805f2cb796355@gritton.org> Content-Language: en-AU From: Graham Menhennitt In-Reply-To: <3fcb1ac3913e14eee2c805f2cb796355@gritton.org> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit X-Spamd-Bar: ---- X-Spamd-Result: default: False [-4.74 / 15.00]; NEURAL_HAM_LONG(-1.00)[-1.000]; ARC_ALLOW(-1.00)[mailchannels.net:s=arc-2022:i=1]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; NEURAL_HAM_SHORT(-0.84)[-0.841]; RWL_MAILSPIKE_EXCELLENT(-0.40)[23.83.220.18:from]; R_DKIM_ALLOW(-0.20)[menhennitt.com.au:s=dreamhost]; R_SPF_ALLOW(-0.20)[+ip4:23.83.208.0/20]; MIME_GOOD(-0.10)[text/plain]; RCPT_COUNT_ONE(0.00)[1]; ASN(0.00)[asn:63213, ipnet:23.83.220.0/23, country:CA]; RCVD_VIA_SMTP_AUTH(0.00)[]; MIME_TRACE(0.00)[0:+]; DMARC_NA(0.00)[menhennitt.com.au]; MLMMJ_DEST(0.00)[questions@freebsd.org]; RCVD_IN_DNSWL_NONE(0.00)[23.83.220.18:from]; TO_DN_NONE(0.00)[]; FROM_EQ_ENVFROM(0.00)[]; FROM_HAS_DN(0.00)[]; MID_RHS_MATCH_FROM(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; RCVD_TLS_LAST(0.00)[]; PREVIOUSLY_DELIVERED(0.00)[questions@freebsd.org]; RCVD_COUNT_THREE(0.00)[4]; DKIM_TRACE(0.00)[menhennitt.com.au:+] X-Rspamd-Queue-Id: 4dfggZ4Kj9z3p8D Thanks again for replying. The command that I used is copied directly from section 17.5.2 of the handbook (at https://docs.freebsd.org/en/books/handbook/jails/#creating-thin-jail-nullfs). Perhaps the handbook is wrong. Anyway I tried your suggested command (without the "-base" in that tar command and lots of subsequent commands), but it fails in the same way. Thanks, Graham On 26/12/2025 7:09 am, James Gritton wrote: > I suspect a copy/paste problem: one of the commands is: > # tar -xf /usr/local/jails/media/15.0-RELEASE-base.txz -C > /usr/local/jails/templates/15.0-RELEASE --unlink > > and it wouldn't be hard to turn it into > # tar -xf /usr/local/jails/media/15.0-RELEASE-base.txz -C > /usr/local/jails/templates/15.0-RELEASE0-base --unlink > > since that's the name of the tar file without its extension.  So you > might be almost there - just rename the directory, and proceed from > there. > > I don't know if ezjail does that thin jail setup, but something like > that is certainly worth a try. > > - Jamie > > > On 2025-12-24 16:51, Graham Menhennitt wrote: >> Thanks very much for replying, Jamie. >> >> I suspect that you're correct in saying that "files weren't extracted >> into the master directory". There is no >> directory /usr/local/jails/templates/15.0-RELEASE as you said in your >> suggestions. There is >> only /usr/local/jails/templates/15.0-RELEASE-base >> (and /usr/local/jails/templates/15.0-RELEASE-skeleton which is >> created by the later mkdir command in the instructions). >> >> I checked my command history and I'm fairly certain that I followed >> the instructions correctly. >> >> See below for the results of the "ll" commands, and the relevant >> extract from the history. >> >> I see that there is the "ezjail" utility. I may try using that. >> >> Thanks again, >> >>     Graham >> >> >> >> # ll /usr/local/jails/templates/ >> total 8 >> drwxr-xr-x  15 root wheel 512 23 Dec 15:30 15.0-RELEASE-base >> drwxr-xr-x   8 root wheel 512 23 Dec 15:28 15.0-RELEASE-skeleton >> >> # ll /usr/local/jails/templates/15.0-RELEASE-base/ >> total 60 >> drwxr-xr-x   2 root wheel 1024 23 Dec 15:26 bin >> drwxr-xr-x  15 root wheel 1536 23 Dec 15:26 boot >> -r--r--r--   1 root wheel 6070 28 Nov 14:51 COPYRIGHT >> dr-xr-xr-x   2 root wheel  512 28 Nov 14:42 dev >> lrwxr-xr-x   1 root wheel   12 23 Dec 15:29 etc -> skeleton/etc >> lrwxr-xr-x   1 root wheel   13 23 Dec 15:29 home -> skeleton/home >> drwxr-xr-x   4 root wheel 2048 28 Nov 14:46 lib >> drwxr-xr-x   3 root wheel  512 28 Nov 14:43 libexec >> drwxr-xr-x   2 root wheel  512 28 Nov 14:42 media >> drwxr-xr-x   2 root wheel  512 28 Nov 14:42 mnt >> drwxr-xr-x   2 root wheel  512 28 Nov 14:42 net >> dr-xr-xr-x   2 root wheel  512 28 Nov 14:42 proc >> drwxr-xr-x   2 root wheel 2560 23 Dec 15:26 rescue >> lrwxr-xr-x   1 root wheel   13 23 Dec 15:29 root -> skeleton/root >> drwxr-xr-x   2 root wheel 3072 23 Dec 15:26 sbin >> drwxr-xr-x   2 root wheel  512 23 Dec 15:29 skeleton >> lrwxr-xr-x   1 root wheel   11 28 Nov 14:42 sys -> usr/src/sys >> lrwxr-xr-x   1 root wheel   12 23 Dec 15:30 tmp -> skeleton/tmp >> drwxr-xr-x  13 root wheel  512 23 Dec 15:29 usr >> lrwxr-xr-x   1 root wheel   12 23 Dec 15:30 var -> skeleton/var >> >> # ll /usr/local/jails/templates/15.0-RELEASE-skeleton/ >> total 24 >> drwxr-xr-x  30 root wheel 2560 23 Dec 15:27 etc >> drwxr-xr-x   2 root wheel  512 23 Dec 15:27 home >> drwxr-x---   2 root wheel  512 23 Dec 15:28 root >> drwxrwxrwt   2 root wheel  512 23 Dec 15:28 tmp >> drwxr-xr-x   3 root wheel  512 23 Dec 15:27 usr >> drwxr-xr-x  24 root wheel  512 23 Dec 15:28 var >> >> # ll /usr/local/jails/containers/vaultwarden >> total 24 >> drwxr-xr-x  30 root wheel 2048 23 Dec 15:31 etc >> drwxr-xr-x   2 root wheel  512 23 Dec 15:31 home >> drwxr-x---   2 root wheel  512 23 Dec 15:31 root >> drwxr-xr-t   2 root wheel  512 23 Dec 15:31 tmp >> drwxr-xr-x   3 root wheel  512 23 Dec 15:31 usr >> drwxr-xr-x  24 root wheel  512 23 Dec 15:31 var >> >> # history >> ... >>   441  mkdir /usr/local/jails/ >>   442  mkdir /usr/local/jails/{media,templates,containers} >>   443  ll /usr/local/jails/ >>   444  vi /etc/jail.conf >>   445  # mkdir /usr/local/jails/templates/15.0-RELEASE-base >>   446  mkdir /usr/local/jails/templates/15.0-RELEASE-base >>   447  fetch >> https://download.freebsd.org/ftp/releases/amd64/amd64/15.0-RELEASE/base.txz >> -o /usr/local/jails/media/15.0-RELEASE-base.txz >>   448  tar -xf /usr/local/jails/media/15.0-RELEASE-base.txz -C >> /usr/local/jails/templates/15.0-RELEASE-base --unlink >>   449  cp /etc/resolv.conf >> /usr/local/jails/templates/15.0-RELEASE-base/etc/resolv.conf >>   450  cp /etc/localtime >> /usr/local/jails/templates/15.0-RELEASE-base/etc/localtime >>   451  freebsd-update -b >> /usr/local/jails/templates/15.0-RELEASE-base/ fetch install >>   452  mkdir /usr/local/jails/templates/15.0-RELEASE-skeleton >>   453  mkdir -p /usr/local/jails/templates/15.0-RELEASE-skeleton/home >>   454  mkdir -p /usr/local/jails/templates/15.0-RELEASE-skeleton/usr >>   455  mv /usr/local/jails/templates/15.0-RELEASE-base/etc >> /usr/local/jails/templates/15.0-RELEASE-skeleton/etc >>   456  mv /usr/local/jails/templates/15.0-RELEASE-base/usr/local >> /usr/local/jails/templates/15.0-RELEASE-skeleton/usr/local >>   457  mv /usr/local/jails/templates/15.0-RELEASE-base/tmp >> /usr/local/jails/templates/15.0-RELEASE-skeleton/tmp >>   458  mv /usr/local/jails/templates/15.0-RELEASE-base/var >> /usr/local/jails/templates/15.0-RELEASE-skeleton/var >>   459  mv /usr/local/jails/templates/15.0-RELEASE-base/root >> /usr/local/jails/templates/15.0-RELEASE-skeleton/root >>   460  cd /usr/local/jails/templates/15.0-RELEASE-base/ >>   461  mkdir skeleton >>   462  ln -s skeleton/etc etc >>   463  ln -s skeleton/home home >>   464  ln -s skeleton/root root >>   465  ln -s ../skeleton/usr/local usr/local >>   466  ln -s skeleton/tmp tmp >>   467  ln -s skeleton/var var >>   468  cp -R /usr/local/jails/templates/15.0-RELEASE-skeleton >> /usr/local/jails/containers/vaultwarden >>   469  mkdir -p /usr/local/jails/vaultwarden-nullfs-base >>   470  vi /usr/local/jails/vaultwarden-nullfs-base.fstab >>   471  service jail start vaultwarden >> ... >> # >> >> On 24/12/2025 5:52 am, James Gritton wrote: >>> On 2025-12-22 21:40, Graham Menhennitt wrote: >>>> Hello, >>>> >>>> I've recently upgraded my server from 14.3 to 15.0. Everything >>>> appeared to work successfully in the upgrade. >>>> >>>> I now want to create a thin jail using UFS. I've followed the >>>> handbook section 17.5 exactly except that my jail is named >>>> "vaultwarden" instead of "thinjail". Accordingly, I've replaced >>>> "thinjail" by "vaultwarden" everywhere. >>>> >>>> When I try to start the jail, I get an error: >>>> >>>> # service jail start vaultwarden >>>> Starting jails: cannot start jail  "vaultwarden": >>>> jail: vaultwarden: mount.devfs: >>>> /usr/local/jails/containers/vaultwarden/dev: No such file or directory >>>> . >>>> # >>>> >>>> I tried creating >>>> directory /usr/local/jails/containers/vaultwarden/dev. Then I get a >>>> different error: >>>> >>>> # service jail start vaultwarden >>>> Starting jails: cannot start jail  "vaultwarden": >>>> 1 >>>> jail: vaultwarden: /bin/sh /etc/rc: failed >>>> . >>>> # >>>> >>>> I'm completely new to jails. Can somebody please give me a clue on >>>> how to diagnose then problem. >>> >>> Considering /dev didn't exist in the jail directory, I'm guessing >>> that nothing exist there.  That leaves two possibilities: the files >>> weren't extracted into the master directory, or they weren't >>> reflected into the thin jail directory.  What it look like when you >>> run: >>> >>> ls -l /usr/local/jails/templates/15.0-RELEASE >>> ls -l /usr/local/jails/containers/vaultwarden >>> >>> Both of those directories should show a root directory listing. If >>> the first one isn't there, something went wrong in downloading and >>> unpacking the base file set.  I would imagine there'd be some kind >>> of error message if that were the case. If the second one isn't >>> there, the clone didn't work.  Again, I'd expect an error message.  >>> If both of them *do* show files, there's probably something wrong in >>> the jail.conf. >>> >>> Another command with potentially useful output is "zfs list -t >>> all".  I would expect to see a line showing the dataset named >>> zroot/jails/containers/vaultwarden at the mount point >>> /usr/local/jails/containers/vaultwarden. >>> >>> - Jamie >>> >