Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 14 Jun 2006 12:19:06 +0200
From:      Fabian Keil <freebsd-listen@fabiankeil.de>
To:        "Raphael H. Becker" <rabe@p-i-n.com>
Cc:        freebsd-current@freebsd.org
Subject:   Re: jail_<name>_conf in /etc/rc.conf
Message-ID:  <20060614121906.693f6acc@localhost>
In-Reply-To: <20060614121025.D47362@p-i-n.com>
References:  <20060614121025.D47362@p-i-n.com>

index | next in thread | previous in thread | raw e-mail

[-- Attachment #1 --]
"Raphael H. Becker" <rabe@p-i-n.com> wrote:

> having a jail-server and maintaining lots of jails may cause headache,
> when editing /etc/rc.conf. 
> 
> My idea is to define per-jail.conf files outside /etc/rc.conf.

> This would make using conf-templates much easier and you don't 
> need to do evil "script-magic" on /etc/rc.conf.

> Any alternative solution getting something like this running?

Try /usr/ports/sysutils/ezjail/
<http://erdgeist.org/arts/software/ezjail/>;

It only requires one line in rc.conf
and uses one configuration file for every jail:

fk@TP51 ~ $grep jail /etc/rc.conf
ezjail_enable="YES"

fk@TP51 ~ $cat /usr/local/etc/ezjail/porttest 
# To specify the start up order of your ezjails, use these lines to
# create a Jail dependency tree. See rcorder(8) for more details.
#
# PROVIDE: standard_ezjail
# REQUIRE: 
# BEFORE: 
#

export jail_porttest_hostname="porttest"
export jail_porttest_ip="192.168.6.100"
export jail_porttest_rootdir="/usr/jails/porttest"
export jail_porttest_exec="/bin/sh /etc/rc"
export jail_porttest_mount_enable="YES"
export jail_porttest_devfs_enable="YES"
export jail_porttest_devfs_ruleset="devfsrules_pf_jail"
export jail_porttest_procfs_enable="YES"
export jail_porttest_fdescfs_enable="YES"
export jail_porttest_image=""
export jail_porttest_imagetype=""
export jail_porttest_attachparams=""
export jail_porttest_attachblocking=""
export jail_porttest_forceblocking=""

Fabian
-- 
http://www.fabiankeil.de/

[-- Attachment #2 --]
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.3 (FreeBSD)

iD8DBQFEj+KkjV8GA4rMKUQRAqSCAJ4ogQ8TllLCtPG9H6o72rofAJVJogCg5wfh
UUDic4Qa1NKrd3NsElRdYBc=
=1U1u
-----END PGP SIGNATURE-----
help

Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20060614121906.693f6acc>