From owner-freebsd-jail@freebsd.org Mon Feb 22 12:47:11 2016 Return-Path: Delivered-To: freebsd-jail@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id CAF5BAB097D for ; Mon, 22 Feb 2016 12:47:11 +0000 (UTC) (envelope-from aimass@yabarana.com) Received: from mail-io0-x233.google.com (mail-io0-x233.google.com [IPv6:2607:f8b0:4001:c06::233]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 9F6CC104C for ; Mon, 22 Feb 2016 12:47:11 +0000 (UTC) (envelope-from aimass@yabarana.com) Received: by mail-io0-x233.google.com with SMTP id l127so175006419iof.3 for ; Mon, 22 Feb 2016 04:47:11 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yabarana-com.20150623.gappssmtp.com; s=20150623; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=sRPypmtr1sAob4+AeKMGKiINP9FX6crYD1umoQyp8Fo=; b=SHbzwQ+rAv02KbbRcldAS4xFLF6ojtl9kM8SBR+VmUqpAzxtpGa4V003j3BtQKwyK/ LdkRm0TrMRumS7wbK+dkG1bYQ05RhiEe82/5wu1nwY8teKIkSr+X6aqbU50IMozeRh5q NZy9k9RjzCF1QIAw+Tb7Ua3reedKaKCAeJgAbp4kgQGSvY0e5Rzqx9eXg97REsUvB5FK r6UCQIPmJd7bGEGVqdRNDaa24PEU6Jjiu9DMS/FvO6qE7MVL9ejutiQVwUiTvVW7HAx7 MyFYJZKkbhdcrO6vUkmoV/F8yZg5+AmPBp4Dpj7DmX+5+bBfBlFbmy46zpuR0H+Izm+0 GY9w== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to:cc:content-type; bh=sRPypmtr1sAob4+AeKMGKiINP9FX6crYD1umoQyp8Fo=; b=JlLe1z8pfPISNVewE2JO49Sn9FoilEnWkdlfKRCxl1rMrZlEkq4q2eyRsScZDxvreV yf/8DUWvIX5p2bc6EhnFl4Ste/GDmCUEaAO18ArpUVXrJT14Op5O4GasXZ9L3fjQZZEZ BKxCAyoII2W1wElwu89Mah1dRqpa62FtEFZVYV8Vg0P+vlsrg1Q84Z0GKfFr4dZPsaIU M2tMpIigGEoqOcugO1h23K9pB12tn7gM2ScMv2Wy/LscdilhTrhLYfyaUyCuKkDm8m6b OKE+5SdonXGJvvuH3t6cedPw7v3uv0uZufVFPA062xXweU45CxFawRJDTVXGzcWW83oc TIAw== X-Gm-Message-State: AG10YOQVxRIbEPC0nrJm08d+qCVKG9gNs+zc1fk6RIfGfKhoHFewAFw8py115x2HXfCv4Y8kL2xLn3uGDAax0g== MIME-Version: 1.0 X-Received: by 10.107.5.149 with SMTP id 143mr33602041iof.129.1456145231053; Mon, 22 Feb 2016 04:47:11 -0800 (PST) Received: by 10.107.152.142 with HTTP; Mon, 22 Feb 2016 04:47:10 -0800 (PST) In-Reply-To: References: Date: Mon, 22 Feb 2016 07:47:10 -0500 Message-ID: Subject: Re: Jail management From: Alejandro Imass To: Aristedes Maniatis Cc: freebsd-jail Content-Type: text/plain; charset=UTF-8 X-Content-Filtered-By: Mailman/MimeDel 2.1.20 X-BeenThere: freebsd-jail@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: "Discussion about FreeBSD jail\(8\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 22 Feb 2016 12:47:11 -0000 On Sun, Feb 21, 2016 at 8:13 PM, Aristedes Maniatis wrote: > I've been using FreeBSD jails (with ezjail) for many years and they work > very well. However I'm now reaching a critical mass (30+ jails) where I > want to be able to manage them in bulk more easily. > > > [...] > * FreeBSD's packaging system doesn't understand the concept of installing > a particular package version, so all my scripts will by default upgrade the > application to the current version even if I don't want to. I can't easily > install a new jail at an old version. > > * It is hard to reproduce the environment exactly, matching the > application to the same version of Java that was available at the time of > deployment. Again I'm fighting against the pkg system which always wants > the latest version. > > * For failover I want each jail reproduced exactly on another host, or at > least a snapshot which could be sent to another host within a few seconds. > The jails are quite small (< 500Mb). Most of that is just the openjdk pkg. > > Hi Aristides, I read most of this thread and since you are already using EzJail why not just create a "base" jail with and then use EzJail's archive feature and then create/replace your existing jails with the archive as base? We did something similar for Perl Catalyst applications, precisely to support specific versions of Catalyst, albeit I did never automated alot, the create from archive even worked on multiple servers so long the base system and EzJail set-up was the same on all servers. Best, Alejandro Imass