Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 12 Aug 2012 14:53:32 +0200
From:      blackfriar <blackfriar@inhio.eu>
To:        Fbsd8 <fbsd8@a1poweruser.com>
Cc:        wojtek@wojtek.tensor.gdynia.pl, mail25@bzerk.org, freebsd-questions@freebsd.org
Subject:   Re: NFS within a Jail?!
Message-ID:  <1344776012.1963.19.camel@blackfriar.inhio.eu>
In-Reply-To: <5027A459.8060809@a1poweruser.com>
References:  <1344347348.23440.5.camel@blackfriar.inhio.eu> <5022715C.9010301@a1poweruser.com> <alpine.BSF.2.00.1208100812060.2876@wojtek.tensor.gdynia.pl> <50250034.8010004@a1poweruser.com>	<20120810135446.GA48662@ei.bzerk.org> <50251DE5.3010106@a1poweruser.com> <alpine.BSF.2.00.1208111458230.1524@wojtek.tensor.gdynia.pl> <50266F8F.4010504@a1poweruser.com> <alpine.BSF.2.00.1208111733090.2107@wojtek.tensor.gdynia.pl> <5027A459.8060809@a1poweruser.com>

next in thread | previous in thread | raw e-mail | index | archive | help

--=-MVyGIia1jFbbXGyDa0/T
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

Well, yes. That was my immediate decision. Just to find an
alternative/temporary way and to wait for something more reliable and
standard.
I don't really have the critical need to proceed with such a setup right
now and it's good to know a little bit more about the status of such a
feature and what others think and tried/managed to do about it.

I really wanna thank you all for your valuable inputs.
Have a good rest of the weekend.

On Sun, 2012-08-12 at 08:40 -0400, Fbsd8 wrote:
> http://forums.freebsd.org/showthread.php?t=3D29968&highlight=3Dnfsd
>=20
> Found this which I think says it all at the conclusion.
>=20
> March 30th, 2012
> Received some information from the FreeBSD mailing list and apparently=
=20
> exporting NFS from an jailed environment is not possible. For those who=
=20
> have "managed" (by heavy tweaking of sysctl.conf) to export the NFS=20
> probably have these concerns: 1) Security may have been compromised on=
=20
> their own jails as a result of tweaks and 2) Even if you manage to=20
> export the NFS share under such strained boundary conditions, it may=20
> cause problems in some of the application's you would like to use (eg:=
=20
> tinderbox) finally, 3) If you try to use net/unfs3 and succeed to export=
=20
> NFS, this will not have a very fast (ro) transport rate and will have=20
> many (rw) speed limitations.
>=20
>=20
> My personal conclusion is to wait until the default kernel version of=20
> nfs is updated to be jail-friendly before I try using nfs in jails.


--=-MVyGIia1jFbbXGyDa0/T
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: This is a digitally signed message part

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.19 (FreeBSD)
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=pHwp
-----END PGP SIGNATURE-----

--=-MVyGIia1jFbbXGyDa0/T--




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?1344776012.1963.19.camel>