Date: Wed, 14 Jun 2006 12:19:06 +0200 From: Fabian Keil <freebsd-listen@fabiankeil.de> To: "Raphael H. Becker" <rabe@p-i-n.com> Cc: freebsd-current@freebsd.org Subject: Re: jail_<name>_conf in /etc/rc.conf Message-ID: <20060614121906.693f6acc@localhost> In-Reply-To: <20060614121025.D47362@p-i-n.com> References: <20060614121025.D47362@p-i-n.com>
next in thread | previous in thread | raw e-mail | index | archive | help
--Sig_wkPGKkXtdwXVgVflLZH/EgM Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: quoted-printable "Raphael H. Becker" <rabe@p-i-n.com> wrote: > having a jail-server and maintaining lots of jails may cause headache, > when editing /etc/rc.conf.=20 >=20 > My idea is to define per-jail.conf files outside /etc/rc.conf. > This would make using conf-templates much easier and you don't=20 > need to do evil "script-magic" on /etc/rc.conf. > Any alternative solution getting something like this running? Try /usr/ports/sysutils/ezjail/ <http://erdgeist.org/arts/software/ezjail/>; It only requires one line in rc.conf and uses one configuration file for every jail: fk@TP51 ~ $grep jail /etc/rc.conf ezjail_enable=3D"YES" fk@TP51 ~ $cat /usr/local/etc/ezjail/porttest=20 # To specify the start up order of your ezjails, use these lines to # create a Jail dependency tree. See rcorder(8) for more details. # # PROVIDE: standard_ezjail # REQUIRE:=20 # BEFORE:=20 # export jail_porttest_hostname=3D"porttest" export jail_porttest_ip=3D"192.168.6.100" export jail_porttest_rootdir=3D"/usr/jails/porttest" export jail_porttest_exec=3D"/bin/sh /etc/rc" export jail_porttest_mount_enable=3D"YES" export jail_porttest_devfs_enable=3D"YES" export jail_porttest_devfs_ruleset=3D"devfsrules_pf_jail" export jail_porttest_procfs_enable=3D"YES" export jail_porttest_fdescfs_enable=3D"YES" export jail_porttest_image=3D"" export jail_porttest_imagetype=3D"" export jail_porttest_attachparams=3D"" export jail_porttest_attachblocking=3D"" export jail_porttest_forceblocking=3D"" Fabian --=20 http://www.fabiankeil.de/ --Sig_wkPGKkXtdwXVgVflLZH/EgM Content-Type: application/pgp-signature; name=signature.asc Content-Disposition: attachment; filename=signature.asc -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.3 (FreeBSD) iD8DBQFEj+KkjV8GA4rMKUQRAqSCAJ4ogQ8TllLCtPG9H6o72rofAJVJogCg5wfh UUDic4Qa1NKrd3NsElRdYBc= =1U1u -----END PGP SIGNATURE----- --Sig_wkPGKkXtdwXVgVflLZH/EgM--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20060614121906.693f6acc>