Date: Wed, 28 Aug 2019 13:49:28 +0200 From: Alexander Leidinger <Alexander@leidinger.net> To: freebsd-current@freebsd.org Subject: Re: jails, ZFS, deprecated jail variables and poudriere problems Message-ID: <20190828134928.Horde.DiL31t_6di4RpY7cRJrPsBG@webmail.leidinger.net> In-Reply-To: <20190827101149.1efcb946@freyja>
next in thread | previous in thread | raw e-mail | index | archive | help
[-- Attachment #1 --] Quoting "O. Hartmann" <ohartmann@walstatt.org> (from Tue, 27 Aug 2019 10:11:54 +0200): > We have a single ZFS pool (raidz), call it pool00 and this pool00 conatins a > ZFS dataset pool00/poudriere which we want to exclusively attach to a jail. > pool00/poudriere contains a complete clone of a former, now decomissioned > machine and is usable by the host bearing the jails. The jail, named > poudriere, > has these config parameters set in /etc/jail.conf as recommended: > > enforce_statfs= "0"; > > allow.raw_sockets= "1"; > > allow.mount= "1"; > allow.mount.zfs= "1"; > allow.mount.devfs= "1"; > allow.mount.fdescfs= "1"; > allow.mount.procfs= "1"; > allow.mount.nullfs= "1"; > allow.mount.fusefs= "1"; > > Here I find the first confusing observation. I can't interact with > the dataset > and its content within the jail. I've set the "jailed" property of > pool00/poudriere via "zfs set jailed=on pool00/poudriere" and I also have to > attach the jailed dataset manually via "zfs jail poudriere > pool00/poudriere" to > the (running) jail. But within the jail, listing ZFS's mountpoints reveal: > > NAME USED AVAIL REFER MOUNTPOINT > pool00 124G 8.62T 34.9K /pool00 > pool00/poudriere 34.9K 8.62T 34.9K /pool/poudriere > > but nothing below /pool/poudriere is visible to the jail. Being confused I Have you checked if it works if you add each dataset below the tree you want to manage (= "sub-dataset")? Do the sub-datasets list the jailed property as inherited from the parent (check on the host)? Bye, Alexander. -- http://www.Leidinger.net Alexander@Leidinger.net: PGP 0x8F31830F9F2772BF http://www.FreeBSD.org netchild@FreeBSD.org : PGP 0x8F31830F9F2772BF [-- Attachment #2 --] -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAABAgAGBQJdZmpIAAoJEBINsJsD+NiG744P/2Of7xDiKeMqWfDOxDciaxRd gMFAI1IWl2v/q/DHu+dqc5Ti/yJjFoanobs8j9DAXiVpl8tRqylucfDOzn2wE4mX 8PAcikclzpKrH4E5DplXXnRo7V/9cODNl+Y4icB6hcNpCD/InSgo8OUxHxI0iQZJ Ph+Oe/4JSeHsqTZEYhb2aiwscxa7X9d7WGTlPsN+fnh9hmCHJAp9vs7Ae5uydZQ1 6PcBbHnUEb8lPd5K0ZbRjk6ZdWM+S9j02hWDwwKVP9JDu4lgjUZjixSLtYWsl0LR jLDXazw2h5J1vzupnq3bqNfqI2WD1/3v/OHHcD0jA4EC4m7cwFLJY/a1MRKrf/fD NHQ3I+VzLLrLfLxDvfQ+x4z3SMF5XGvLrJX9LjZOIn3T9at1f7F2HIUR83gs8jZ+ /iJxhdYd7Imzyg+4RtTxa9Bc3UFE2uvuSNfAIm0px90eLlRvcGyD5Zq09PRQg7DR 2i72QfmnhSgn891LS0wh2d6AZoBMbNHu2vIZxnrVjz8fq1AiWz09KhZ1SGB4nGJ2 96AtcD2NvKZhzwgjT6DEJNSV5laKMGiemX6JCwhvlZ8YsMedFgrNeg6uqSBdD/rX y7FTz/LzvXwm+858VMCHxDbro+44EUlYRqG58xfWT0hHgab8alkZghrlDJpkoVYc hvhVZjIy5TeJa5FeHi3I =B8iu -----END PGP SIGNATURE-----
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20190828134928.Horde.DiL31t_6di4RpY7cRJrPsBG>