From owner-freebsd-hackers@FreeBSD.ORG Sun Mar 9 21:56:19 2014 Return-Path: Delivered-To: freebsd-hackers@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 1B24A891; Sun, 9 Mar 2014 21:56:19 +0000 (UTC) Received: from mail-oa0-x22b.google.com (mail-oa0-x22b.google.com [IPv6:2607:f8b0:4003:c02::22b]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id C22C8A67; Sun, 9 Mar 2014 21:56:18 +0000 (UTC) Received: by mail-oa0-f43.google.com with SMTP id g12so6340504oah.2 for ; Sun, 09 Mar 2014 14:56:18 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=CMTxF5v0lv42OQW3Y1kN4ZXXqL89oRWqs2u97OeD0M0=; b=T45BNiaJPi8FyjLjwW4Nhvwa85DOjaFftvCWB/UEvJL4fIhBO0qqC1lNwcZlgciYCR TD4NB8T5q0SX+iUgB56tFwkz6glEVasv39X331x9qsJBNYGkOykTm5ojyd7x/V1qDZyQ l7NqdLsDwuQ1PXZYbJqVFQPjVDqfiUnohD6wD8mjbZHQrJWkzbodGD/o98cVmyiUStru ILoE9ybceNfvE3AQ/nq/wfT+HB8FvILt3wKe/mWTAwjl/aU2qDzLdo/Li2v/QYoCdIbi sW+jUSLXnRLO2h61e+4MLlowTfNumkanpZshgbG2VKTMIRHmQN2L45Vm3fUc/rT8wVlu F9GQ== MIME-Version: 1.0 X-Received: by 10.183.24.161 with SMTP id ij1mr25803827obd.33.1394402178184; Sun, 09 Mar 2014 14:56:18 -0700 (PDT) Received: by 10.182.76.201 with HTTP; Sun, 9 Mar 2014 14:56:18 -0700 (PDT) In-Reply-To: References: <53181410.1030107@freebsd.org> <5318B836.7040301@grosbein.net> <19cd01cf3974$dffa5bf0$9fef13d0$@FreeBSD.org> <1a1801cf39d4$1155a830$3400f890$@FreeBSD.org> Date: Sun, 9 Mar 2014 17:56:18 -0400 Message-ID: Subject: Re: How do I create a cloned interface when there is no static connection? From: Joe Nosay To: Devin Teske Content-Type: text/plain; charset=ISO-8859-1 X-Content-Filtered-By: Mailman/MimeDel 2.1.17 Cc: FreeBSD Hackers , Eugene Grosbein X-BeenThere: freebsd-hackers@freebsd.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Technical Discussions relating to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 09 Mar 2014 21:56:19 -0000 On Sun, Mar 9, 2014 at 5:22 PM, Joe Nosay wrote: > > > > On Sat, Mar 8, 2014 at 11:31 AM, Joe Nosay wrote: > >> >> >> >> On Fri, Mar 7, 2014 at 10:52 PM, Joe Nosay wrote: >> >>> >>> >>> >>> On Fri, Mar 7, 2014 at 10:37 PM, Joe Nosay wrote: >>> >>>> >>>> >>>> On Fri, Mar 7, 2014 at 10:00 PM, Joe Nosay wrote: >>>> >>>>> >>>>> >>>>> >>>>> On Fri, Mar 7, 2014 at 2:08 AM, wrote: >>>>> >>>>>> >>>>>> >>>>>> > -----Original Message----- >>>>>> > From: Joe Nosay [mailto:superbisquit@gmail.com] >>>>>> > Sent: Thursday, March 6, 2014 6:52 PM >>>>>> > To: Devin Teske >>>>>> > Cc: FreeBSD Hackers; Eugene Grosbein >>>>>> > Subject: Re: How do I create a cloned interface when there is no >>>>>> static >>>>>> > connection? >>>>>> > >>>>>> > On Thu, Mar 6, 2014 at 2:47 PM, wrote: >>>>>> > >>>>>> > > >>>>>> > > >>>>>> > > > -----Original Message----- >>>>>> > > > From: Eugene Grosbein [mailto:eugen@grosbein.net] >>>>>> > > > Sent: Thursday, March 6, 2014 10:03 AM >>>>>> > > > To: Joe Nosay >>>>>> > > > Cc: FreeBSD Hackers >>>>>> > > > Subject: Re: How do I create a cloned interface when there is no >>>>>> > > > static connection? >>>>>> > > > >>>>>> > > > On 07.03.2014 00:39, Joe Nosay wrote: >>>>>> > > > >>>>>> > > > > I'll need a dummy interface inside of the that can be >>>>>> bridged to >>>>>> > > > > wlan0 outside of the jail. Normal jail with aliases. >>>>>> > > > >>>>>> > > > Try epair(4) and give one part of pair to jail and bridge >>>>>> another >>>>>> > > > part >>>>>> > > with >>>>>> > > > wlan0. >>>>>> > > > >>>>>> > > >>>>>> > > Never tried bridging a wlan with netgraph, but I wonder if the >>>>>> method >>>>>> > > I use for bridging Ethernet with netgraph would work... >>>>>> > > >>>>>> > > Using the ngctl command to create an ng_bridge and then multiple >>>>>> > > ng_eiface devices that you can be shoved into the jail. >>>>>> > > >>>>>> > > kldload ng_ether >>>>>> > > kldload ng_bridge >>>>>> > > kldload ng_eiface >>>>>> > > ngctl >>>>>> > > + mkpeer {IFACE}: bridge lower link0 >>>>>> > > + connect {IFACE}: {IFACE}:lower upper link1 >>>>>> > > + name {IFACE}:lower {IFACE}bridge >>>>>> > > + quit >>>>>> > > ifconifg {IFACE} up >>>>>> > > ngctl >>>>>> > > + msg {IFACE}: setpromisc 1 >>>>>> > > + msg {IFACE}: setautosrc 0 >>>>>> > > + mkpeer {IFACE}:lower eiface link{N} ether >>>>>> > > + name {IFACE}bridge:link{N} >>>>>> > > + show -n {IFACE}bridge: >>>>>> > > Name: ngeth0 Type: eiface ID: XXXXXXXX >>>>>> Num >>>>>> > > hooks: N >>>>>> > > + name {IFACE}bridge:link{N} {NEWIFACE} >>>>>> > > ifconfig ngeth0 name {NEWNAME} >>>>>> > > ifconfig {NEWNAME} vnet {JID} >>>>>> > > >>>>>> > > Taking care to replace the following from above: >>>>>> > > {IFACE} - the name of the interface you want to bridge (eg, em0) >>>>>> {N} - >>>>>> > > link number (starts at 2; increments by-one for each new eiface) >>>>>> > > {NEWIFACE} - the name of the new eiface (ngethN) device to create >>>>>> > > {JID} - the jail ID of the jail you want to shove the interface >>>>>> into >>>>>> > > >>>>>> > > Of course, never tried this with WiFi. >>>>>> > >>>>>> > I did not properly create the jail.conf script. I believe the file >>>>>> of >>>>>> /etc/rc.d/jail >>>>>> > should be followed; yet, there is no tutorial on setting it up. >>>>>> > My /etc/rc.conf file is also improperly setup. How? I don't know; >>>>>> but, I >>>>>> can tell >>>>>> > because the system will not boot completely and ctrl+C must be hit >>>>>> to >>>>>> allow >>>>>> > logging in. >>>>>> >>>>>> What release are you using? "uname -spr" is often succinct enough. >>>>>> -- >>>>>> Devin >>>>>> >>>>>> _____________ >>>>>> The information contained in this message is proprietary and/or >>>>>> confidential. If you are not the intended recipient, please: (i) delete the >>>>>> message and all copies; (ii) do not disclose, distribute or use the message >>>>>> in any manner; and (iii) notify the sender immediately. In addition, please >>>>>> be aware that any message addressed to our domain is subject to archiving >>>>>> and review by persons other than the intended recipient. Thank you. >>>>>> >>>>> >>>>> >>>>> FreeBSD 10.0-RELEASE amd64 >>>>> The /etc/rc.d/jail script is interpreting the name at -G in >>>>> FreeBSD-Google_projects to be a command line option. I am going to see what >>>>> happens if I just change the name. >>>>> >>>> >>>> >>>> Ok. >>>> The jail.conf is in /etc, the name is without hypens or undescores, and >>>> the script dies with "/etc/rc no such file or directory" from jail.conf. >>>> There is a /etc/rc but I know that jail exists in /etc/rc.d? >>>> Wait a sec. >>>> >>> >>> >>> Okay. >>> Herein lies the problem: I used /bin/sh plus location of jail plus the >>> command to start and stop. The system does not seem to be able to find the >>> script. I have not ran /usr/libexec/locate.updatedb yet. That may help, I >>> don't know. >>> Hold a sec, let me test. >>> >>> exec.start = "/bin/sh /etc/rc.d/jail jail_start"; >>> exec.stop = "/bin/sh /etc/rc.d/jail jail_stop"; >>> >>> >>> >>> >> >> I have the start and stop commands incorrectly set up. Do I need the >> commands or are they automatic? >> > > > Attached is the pf.conf and the script for cloning lo0 while starting the > jail. > "jail -c /jails/FreeBSD-Google_projects" is an unknown parameter. > > As you can tell, I am trying to solve the problem. Am I doing it right or > wrong? I am not able to tell so I need someone to tell me. > Something is wrong, I know. What did I do wrong here? > > Why do I feel like all of you are mocking me and laughing at me? > > > I have to step back from all of this. I am doing these things while homeless and struggling.