Date: Sun, 29 Jan 2012 00:47:40 +0200 From: Daniel Shahaf <danielsh@apache.org> To: "Bjoern A. Zeeb" <bzeeb-lists@lists.zabbadoz.net> Cc: Scott Sanders <Ssanders@taximagic.com>, Matt Mullins <mokomull@gmail.com>, "Philip M. Gollucci" <pgollucci@gmail.com>, current@freebsd.org Subject: Re: jid and jname are numberic by default why? Can we change it ? Message-ID: <20120128224740.GA1729@daniel3.local> In-Reply-To: <C9A38D89-97C5-410D-9234-0436423FA0D4@lists.zabbadoz.net> References: <4F22D9FD.10502@p6m7g8.com> <CAPyT1SE_YQdk0GcweKfEfNHwehJzHqvYpM3fRCYNdoOZD=kP8A@mail.gmail.com> <20120128081919.GA6699@lp-shahaf.local> <C9A38D89-97C5-410D-9234-0436423FA0D4@lists.zabbadoz.net>
next in thread | previous in thread | raw e-mail | index | archive | help
Bjoern A. Zeeb wrote on Sat, Jan 28, 2012 at 21:06:59 +0000:
>
> On 28. Jan 2012, at 08:19 , Daniel Shafaf wrote:
>
> > Matt Mullins wrote on Fri, Jan 27, 2012 at 12:06:48 -0800:
> >> On Fri, Jan 27, 2012 at 9:08 AM, Philip M. Gollucci <pgollucci@gmail.com> wrote:
> >>> All,
> >>>
> >>> $ jls -nq | tail -1 | xargs -n1 | egrep '^(name|jid)='| xargs
> >>> jid=17 name=17
> >>>
> >>> # jubilee/chef
> >>> jail_jubilee_hostname="jubilee.dca1.rws"
> >>> jail_jubilee_ip="192.168.2.41"
> >>> jail_jubilee_ip_multi0="192.168.2.42"
> >>> jail_jubilee_interface="bge1"
> >>> jail_jubilee_rootdir="/jubilee"
> >>> jail_jubilee_devfs_enable="YES"
> >>
> >> The default flags that /etc/rc.d/jail passes to jail(8) are "-l -U
> >> root". Failing to give jail(8) a name results in name==jid, as you
> >> found above.
> >>
> >> You can make the rc script name the jail by setting:
> >> jail_jubilee_flags="-n jubilee -l -U root"
> >>
> >
> > Good point. Would it make sense to have rc.d/jail behave this way by
> > default?
> >
> > % diff -u /etc/rc.d/jail jail
> > --- /etc/rc.d/jail 2012-01-21 18:22:26.000000000 +0200
> > +++ jail 2012-01-28 10:13:03.000000000 +0200
> > @@ -112,7 +112,7 @@
> > eval _fstab=\"\${jail_${_j}_fstab:-${jail_fstab}}\"
> > [ -z "${_fstab}" ] && _fstab="/etc/fstab.${_j}"
> > eval _flags=\"\${jail_${_j}_flags:-${jail_flags}}\"
> > - [ -z "${_flags}" ] && _flags="-l -U root"
> > + [ -z "${_flags}" ] && _flags="-n ${_j} -l -U root"
> > eval _consolelog=\"\${jail_${_j}_consolelog:-${jail_consolelog}}\"
> > [ -z "${_consolelog}" ] && _consolelog="/var/log/jail_${_j}_console.log"
> > eval _fib=\"\${jail_${_j}_fib:-${jail_fib}}\"
> >
>
> No. rc.d/jail shall not be extended anymore; please see the framework Jamie posted
> on freebsd-jail last year and test/review/report back there.
>
> See http://lists.freebsd.org/pipermail/freebsd-jail/2011-July/thread.html#1568
>
It appears that the problem is already solved in that framework:
a jail.conf(5) block defining a jail is required to be preceded by
a jailname{}, which is documented to set the jail(8)'s name. In other
words, it won't be possible to define in jail.conf(5) a jail that will
end up nameless (and thus implicitly named as its jid).
Thanks for the pointer,
Daniel
[1] http://svn.freebsd.org/base/projects/jailconf/usr.sbin/jail/jail.conf.5
P.S. As an aside, the provision in projects/jailconf/'s jail(8) that
it's not possible for 'jail -r' to remove all jails _unless_ the '*'
syntax is used seems unusual to me: I expect 'jail -r foo bar' to remove
those two jails regardless of whether any other jails exist. (Sorry if
this has been discussed already -- it's just an issue I ran across while
examining the jail(8) man page in Jamie's framework.)
> You get a config file etc and get rid of all the shell "magic" and "nightmare".
>
> /bz
>
>
> >> Notice the rc script uses the second form of syntax listed in jail(8),
> >> at least on 9.0-RELEASE.
> > _______________________________________________
> > freebsd-current@freebsd.org mailing list
> > http://lists.freebsd.org/mailman/listinfo/freebsd-current
> > To unsubscribe, send any mail to "freebsd-current-unsubscribe@freebsd.org"
>
> --
> Bjoern A. Zeeb You have to have visions!
> It does not matter how good you are. It matters what good you do!
>
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20120128224740.GA1729>