From owner-freebsd-stable@FreeBSD.ORG Thu Sep 15 03:18:05 2005 Return-Path: X-Original-To: freebsd-stable@freebsd.org Delivered-To: freebsd-stable@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 57F8516A41F; Thu, 15 Sep 2005 03:18:05 +0000 (GMT) (envelope-from bfoz@bfoz.net) Received: from sccrmhc13.comcast.net (sccrmhc13.comcast.net [204.127.202.64]) by mx1.FreeBSD.org (Postfix) with ESMTP id DA39343D45; Thu, 15 Sep 2005 03:18:04 +0000 (GMT) (envelope-from bfoz@bfoz.net) Received: from [192.168.0.5] (c-24-6-134-233.hsd1.ca.comcast.net[24.6.134.233]) by comcast.net (sccrmhc13) with ESMTP id <2005091503180201300d9slde>; Thu, 15 Sep 2005 03:18:03 +0000 Message-ID: <4328E7E5.5050803@bfoz.net> Date: Wed, 14 Sep 2005 20:17:57 -0700 From: Brandon Fosdick User-Agent: Mozilla Thunderbird 1.0.6 (X11/20050908) X-Accept-Language: en-us, en MIME-Version: 1.0 To: Robert Watson References: <432753CF.6020001@bfoz.net> <4327CA3C.6050403@geminix.org> <20050914110102.W33820@fledge.watson.org> In-Reply-To: <20050914110102.W33820@fledge.watson.org> X-Enigmail-Version: 0.92.0.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Cc: freebsd-stable@freebsd.org, Lyndon Nerenberg Subject: Re: Jail to jail network performance? X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 15 Sep 2005 03:18:05 -0000 Robert Watson wrote: > (1) Modifying the name space exclusion assumption for jails, so that the > file system name spaces overlap. One way to do this is with nullfs. nullfs looks interesting. I was thinking about sharing files between jails using NFS, but it looks like nullfs would do the trick with better performance. Although the bugs section of the man page for mount_nullfs is rather scary. Does anyone have any experience with it? Does it actually work? If the point here is to make /tmp/mysql.sock show up in another jail's file space, can I use a symlink instead? Can a jailed process see the target of the symlink?