From owner-freebsd-questions@freebsd.org Fri Dec 25 03:00:14 2015 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 8168CA50B12 for ; Fri, 25 Dec 2015 03:00:14 +0000 (UTC) (envelope-from milios@ccsys.com) Received: from cargobay.net (cargobay.net [198.178.123.147]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 656CA1081 for ; Fri, 25 Dec 2015 03:00:13 +0000 (UTC) (envelope-from milios@ccsys.com) Received: from [10.196.55.63] (mobile-166-172-123-179.mycingular.net [166.172.123.179]) by cargobay.net (Postfix) with ESMTPSA id 68D50833; Fri, 25 Dec 2015 02:49:31 +0000 (UTC) Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (1.0) Subject: Re: FreeBSD jail running a Debian or Centos distro From: Jake X-Mailer: iPhone Mail (13C75) In-Reply-To: <98024BC5-356B-4F75-B0A6-078599F54472@shire.net> Date: Thu, 24 Dec 2015 20:52:30 -0600 Cc: David Mehler , freebsd-questions Content-Transfer-Encoding: quoted-printable Message-Id: References: <98024BC5-356B-4F75-B0A6-078599F54472@shire.net> To: "Chad Leigh Shire.Net LLC" X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 25 Dec 2015 03:00:14 -0000 > On Dec 24, 2015, at 6:49 PM, Chad Leigh Shire.Net LLC wro= te: >=20 >=20 >> On Dec 25, 2015, at 8:41 AM, David Mehler wrote: >>=20 >> Hello, >>=20 >> Has anyone got a FreeBSD jail to run either a Centos or a Debian >> distro of Linux? >=20 >=20 > Because of how jails work, that is not possible. Jails are like multiple u= ser installations on a single kernel rooted with a facility like an =C3=BCbe= r chroot, in general terms (more complicated than that of course). It is no= t like separate VMs running. It is indeed possible to run the userland portion of a Linux-based distro, m= ore-or-less unmodified, replacing the Linux kernel with FreeBSD's "linuxulat= or" (Linux ABI translation), all inside of a jail, atop a FreeBSD native fil= esystem. A great many things work (user-centric applications), a great many t= hings break (system/network administrative tools). Don't forget about possibly mounting linprocfs, linsysfs and fdescfs inside t= he jail for maximum success. I'm not certain of the current security implica= tions of linprocfs and linsysfs, so don't take my advice without doing furth= er investigation considering your use case. Depending on your use case, it's= worth trying with and without the virtualized network stack options as well= .=