From owner-freebsd-ports@freebsd.org Wed Dec 21 08:05:28 2016 Return-Path: Delivered-To: freebsd-ports@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 6C03BC89908 for ; Wed, 21 Dec 2016 08:05:28 +0000 (UTC) (envelope-from Alexander@leidinger.net) Received: from mailman.ysv.freebsd.org (mailman.ysv.freebsd.org [IPv6:2001:1900:2254:206a::50:5]) by mx1.freebsd.org (Postfix) with ESMTP id 50A91151A for ; Wed, 21 Dec 2016 08:05:28 +0000 (UTC) (envelope-from Alexander@leidinger.net) Received: by mailman.ysv.freebsd.org (Postfix) id 4D321C89907; Wed, 21 Dec 2016 08:05:28 +0000 (UTC) Delivered-To: ports@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 4B2C3C89906 for ; Wed, 21 Dec 2016 08:05:28 +0000 (UTC) (envelope-from Alexander@leidinger.net) Received: from mailgate.Leidinger.net (bastille.leidinger.net [89.238.82.207]) (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id C424E1519 for ; Wed, 21 Dec 2016 08:05:27 +0000 (UTC) (envelope-from Alexander@leidinger.net) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=leidinger.net; s=outgoing-alex; t=1482307489; bh=c2wuSoaZGv1rsAFyn5Ift3sZzaxApJEUAZWyZIBNpfg=; h=Date:From:To:Cc:Subject:In-Reply-To; b=Tfzo+VPOS26tYROc6QiJ2IsgBNYw+ABz9TNDVGPcsmjJgpakOBbIWYgKtBzHg1cqj B4t5ssMg3/Mumymj2gusvqaxFleqwuJTa48bvvsxoAcJD995zKKQj/whoKGd7N8uZ8 8b5PSk3Kv5fEYZ6R8RYygBISFjqAOQqvkKGsOGg2IBfyOC3QUN1OoKqfPhKJEmTyDq qNdPurm5E8uOx+js5adPY5rw1sPJtApGQurcGsu9kDDuFyRhSykgO/ZJnTpUTviElf 6MfBoFqjraceXl3coNLqb6AxJowdGcch0xvuifVc3cJAEE53gxsMk22c0YXfsIvE+x gTnGEgYVzZ9+w== DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=leidinger.net; s=outgoing-alex; t=1482307519; bh=c2wuSoaZGv1rsAFyn5Ift3sZzaxApJEUAZWyZIBNpfg=; h=Date:From:To:Cc:Subject:In-Reply-To; b=MzM+zkdiDya2MTIBSHDZdApAbIcMcJn34M2UnpggjZDWwAy/d1wpbUL6KN5lRnutG S1MC15Izb4S+xVhmFxYEj3yY3Yy1PrIsTxmLHnmp3i3E68ToaG78oslGCcL/M+GaS/ A8DEEZG/Lv8HCxF+hbCVbLT4htVl55+IqAUhjGy/0lLuMU1091/j/bk6QXTbQ0LPju H+vSxkZl4+h9dVAkGyfiZ/ZYqtYYuMauBBwop4uF9V+Xu0wYxWV0Ig0ssIsOrP9Mim eV8wXhCeGSPoDxs27rp0ZQjrFdLnLmZ5BgGdlLRg32bhRpgX/B0AKIJ41BJ+IuxpF+ J6Ah1Eu7NYGEw== Date: Wed, 21 Dec 2016 09:04:48 +0100 Message-ID: <20161221090448.Horde.fK575MhqoAE_RuQHx4wf3Y-@webmail.leidinger.net> From: Alexander Leidinger To: Randy Westlund Cc: ports@freebsd.org Subject: Re: Custom base jails for ZFS replication In-Reply-To: <20161221055923.GA24599@gmail.com> User-Agent: Horde Application Framework 5 Content-Type: multipart/signed; boundary="=_M_k5xLPGujvx39qM1x9hkt5"; protocol="application/pgp-signature"; micalg=pgp-sha1 MIME-Version: 1.0 X-BeenThere: freebsd-ports@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: Porting software to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 21 Dec 2016 08:05:28 -0000 This message is in MIME format and has been PGP signed. --=_M_k5xLPGujvx39qM1x9hkt5 Content-Type: text/plain; charset=utf-8; format=flowed; DelSp=Yes Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Quoting Randy Westlund (from Wed, 21 Dec 2016=20=20 00:59:23=20-0500): > Is there a jail management tool that lets you install packages in a base > jail, and share that with multiple thin jails? > > I want to deploy many thin jails across multiple servers, and be able to > update both the base system and ports in a base jail and then ZFS > replicate that to the base jails on the production servers. I'd like > the thin jails to only contain my customer-specific application data, so > I don't have to manually update all of them. > > I don't see any way to do this with ezjail or iocage. Does anyone else > have a deployment like this? I don't but what about this idea (should work with ezjail and iocage=20=20 with=20a little bit of manual work): - create an usr/local in the base-area - create a jail just for installation of the packages you want - mount the usr/local area from the base-area as read-write instead=20=20 of=20read-only in this install-jail (one time config action in ezjail,=20= =20 not=20sure about iocage... maybe once in the fstab of the jail as a=20=20 null-mount=20if it doesn't clone everything automatically, or every time=20= =20 as=20unmount+null-mount if it clones automatically) - install in the install-jail what you need - have the usr/local mounted read-only from all other jails=20=20 (respectively=20cloned in the iocage case) Bye, Alexander. --=20 http://www.Leidinger.net=20Alexander@Leidinger.net: PGP 0x8F31830F9F2772BF http://www.FreeBSD.org netchild@FreeBSD.org : PGP 0x8F31830F9F2772BF --=_M_k5xLPGujvx39qM1x9hkt5 Content-Type: application/pgp-signature Content-Description: Digitale PGP-Signatur Content-Disposition: inline -----BEGIN PGP SIGNATURE----- iQIcBAABAgAGBQJYWjegAAoJEKrxQhqFIICE81MP/3Fq3R1f5Z14PBon13lY3kvD CB4/LxH3R6VScBxcGmwprSJsl+1OkGK4KNJbMb9ZSYrpCCcJqSFzisMUZQH8KcU1 4/GCeOcmkmBSRDZ3Y20PD3cqvOYqItcB+d/ujYr+mwCquSLy7CPCmm+fMaIFVfY4 5TBhbgnyZ+Ept9KBCLCAbONzYr3zJIHESuaFi/yX9iV9BNJQ3DpALChcMk3hRUab D91HTwOhvJP/opmPR9tv1uWH+aM/uzwEcA9sv6Og4I7CC/1tDvV21u3/xxK93pkJ dWOpxKDviHPVZ4QulcxvftfRk2ymleU1APJvqn+rg6MYqHGJNmZH41gpBVfgikSS OgPsVzIuj1Rk+hcoqDjgzEeAPtwncDDALpezUHWbi7HNXiFncBlQKhz7X/pyMIba BmT2FlVoCF/oEDhaapw1We9960T4amZSVVULKyhfQNyVWWz1FEXC3kBiQgBp/Kx7 ypD7eqTLfIMoCsR2jlZ9PVSysUyFICMt4KrC7B7J3A29y7IgZORZF43vuu9xPekf 2fo0pY7PtdThU6Q0scth0W+lOQXkpiq62bwi+fsCN53YWvimVKPXh825yWaxNeZM qS9AjEI1XsKBUtm7pNnuGGDp/Em+XjZshuEweHX8g3IgSHWniBYf5YtCQyIg18KJ DZEwckavismqI6da+cci =SLPj -----END PGP SIGNATURE----- --=_M_k5xLPGujvx39qM1x9hkt5--