Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 30 May 2008 16:40:27 +0100 (BST)
From:      Robert Watson <rwatson@FreeBSD.org>
To:        Ceri Davies <ceri@submonkey.net>
Cc:        src-committers@FreeBSD.org, John Baldwin <jhb@FreeBSD.org>, cvs-src@FreeBSD.org, cvs-all@FreeBSD.org, Michael Reifenberger <mike@reifenberger.com>, Alexander Leidinger <Alexander@Leidinger.net>
Subject:   Re: cvs commit: src/usr.sbin/jexec jexec.8 jexec.c
Message-ID:  <20080530162829.E85310@fledge.watson.org>
In-Reply-To: <20080530145656.GB17008@submonkey.net>
References:  <200805261157.m4QBvnpF025029@repoman.freebsd.org> <20080526144831.K26343@fledge.watson.org> <20080526140735.GA35960@gw.reifenberger.com> <200805281309.49683.jhb@freebsd.org> <20080529140557.GA94385@gw.reifenberger.com> <20080529151233.I3678@fledge.watson.org> <20080529145319.GC94385@gw.reifenberger.com> <20080529155422.T3678@fledge.watson.org> <20080530165051.46452soq4pp07n28@webmail.leidinger.net> <20080530145656.GB17008@submonkey.net>

next in thread | previous in thread | raw e-mail | index | archive | help

On Fri, 30 May 2008, Ceri Davies wrote:

>>>> Thats something that the admin should take care for.
>>>
>>> How might they do that?  Remember that any command that works only when 
>>> the jail IP is "unambiguous" will become effectively non-deterministic as 
>>> a result of un-garbage collected jails.  So
>>
>> Is it feasible to change the hostname of a dying jail? We could prefix it 
>> with some string at some point of the shutdown...
>
> We'd be better off just dropping all the connections at that point.

TCP TIME_WAIT exists for a reason that it is better not to disregard.  This 
question gets a bit more complicated in light of vimage, which is something 
we'll need to discuss at the August developer summit.

Also, TIME_WAIT is just one example of a jail persisting due to continuing 
references to a credential -- there are other legitimate, albeit less common, 
reasons that it may occur, and those are also valid use cases.

Robert N M Watson
Computer Laboratory
University of Cambridge



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20080530162829.E85310>