Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 21 Aug 2014 20:04:57 +0200
From:      Ruben van Staveren <ruben@verweg.com>
To:        "freebsd-stable@FreeBSD.org Stable" <freebsd-stable@freebsd.org>, freebsd-jail@freebsd.org
Subject:   Re: mounting fdescfs in a nested/hierarchical jail?
Message-ID:  <3D042FC9-7CD9-4842-8D18-8354F9E1BB80@verweg.com>
In-Reply-To: <53F55F7E.4010309@gritton.org>
References:  <3CB0C5BC-3864-418E-A59F-467D39B7E1EA@verweg.com> <53F55F7E.4010309@gritton.org>

next in thread | previous in thread | raw e-mail | index | archive | help

[-- Attachment #1 --]
Hi Jamie, others,


On 21 Aug 2014, at 4:54, James Gritton <jamie@gritton.org> wrote:

> On 8/18/2014 6:26 AM, Ruben van Staveren wrote:
>> Hi list,
>> 
>> I have a FreeBSD 10 zfs based ezjail setup. In one of the jails I am using ezjail again to set up a nested jail. My goal is to eventually have my jails use these nested jails as containers for certain services.
>> 
>> However, I am not able to mount a nested fdescfs. When I leave out fdesc, the nested jail starts up just fine.
>> 
>> There is no allow.mount.fdescfs. Do we need one?
>> 
>> Cheers,
>> 	Ruben
> 
> That's probably the answer.  It seems a little inelegant to have this proliferation of pesudo-fs type allowances, but it's the direction we've gone.

Ok, I’ve written a little patch for that. Seems to work on r268794

http://pastebin.com/5t9zEzkV

I am not sure about the consequences of having this permission.

Best Regards,
	Ruben




[-- Attachment #2 --]
-----BEGIN PGP SIGNATURE-----
Comment: GPGTools - http://gpgtools.org

iEYEARECAAYFAlP2NMkACgkQZ88+mcQxRw0kegCfYDARKjfr4VslsFo2tAA2Ri6g
SogAnRTCPTE9T5QrJTar2PkSp2YYR5iG
=UL84
-----END PGP SIGNATURE-----

Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3D042FC9-7CD9-4842-8D18-8354F9E1BB80>