jails

  1. nbari

    jails ip4 = inherit & ip4.addr = lo1|127.0.1.10

    How could I inherit the ipv4 and at the same time have only an IP from interface lo1? if I use something like: test { ip4 = inherit; ip4.addr = lo1|127.0.1.10; } Is getting only the local address from lo1
  2. HL1234

    Maybe an error in the handbook - Updating Multiple Jails

    Its written in Updating Multiple Jails 15.5.1. Creating the Template 5. Now, symlink the read-write file system to the read-only file system. Ensure that the symlinks are created in the correct s/ locations as the creation of directories in the wrong locations will cause the installation to...
  3. K

    Using VLANS to connect VNET jails to WAN?

    I know I've started a few threads here about odd networking experiments that I am running in VNET jails. Still haven't figured anything out about those when using epair(4) interfaces. So I thought I'd try a different strategy using VLAN interfaces instead. And this time, include a (janky)...
  4. S

    Solved jails - Accessing devices from Bastille

    How do I make devices in /dev/ accessible inside a Bastille jail? When I have two sets of rules, how do I set this in rc.conf.local, from within the host system? devfs_system_ruleset="localrules" How would bastille also get referenced with this? In devfs.rules of the host (not within the...
  5. M

    Jail limits on FreeBSD 12.2, but not on 9.2

    POST HEAVILY EDITED: actually the limitation is not about FreeBSD 12.2 Hello, in our lab we have a few HP Proliant DL360g8 with 32 GB RAM that we use to run jails. Each server runs ~6000 simple jails that have only sshd and syslogd as running services. They currently run FreeBSD 9.2, but I'm...
  6. StreetDancer

    jails ezjail-admin archive (does it have special code in it's tar process) ?

    Hey Geniuses, I am wondering if anyone knows if ezjail-admin's archive feature that tar.gz's /usr/jails/[ezjailname] does more than just tar.gz it? I am having difficulties archiving and restoring without pax errors (part 2, etc) which are beyond 2GB (I don't have an ezjail-admin archive in...
  7. tyson

    ZFS poudriere jail - not mounting filesystem

    I have a minor problem with my jail configuration for poudriere builder. Everything works, except poudriere jail dataset is not getting mounted on jail start filesystems hierarchy is : fbsd/usr/jails/JAIL_NAME for jails root / fbsd/pdr/w0 poudriere jail filesystem. zfs set jailed=on fbsd/pdr/w0...
  8. K

    jails Question about configuring a docker image to jails.

    Hello! I am currently working on a project in python and i need to have a virtual environment from miniconda. Since there is no miniconda in freebsd i tried to install some packages that were listed onthe dependencies on my own at virtualenv. Well, long story short there are some packages...
  9. B

    How To: Webcam and Microphone Inside of GUI Jail

    One-stop guide on how to get your webcam working inside of a GUI jail, including the microphone. Assumes you already have GUI set up inside the jail. My hardware: Ryzen Threadripper 3960x, NVIDIA 2080 RTX, Logitec C920 Webcam OVERVIEW - Background Info - Load Kernel Modules - Install...
  10. D

    jails SSHD in a jail fails to bind to a Nebula IP from host, but only at boot

    This is my first post, so while I will do my best to stick to the forum rules and guidelines, I'm sure I'll get something wrong. All assistance in that regard is appreciated. With that out of the way, I seem to have a problem. I currently have a FreeBSD 12.2 ZFS VPS set up, and connected to my...
  11. I

    general/other Is jails good if I want to have a router and a webserver on the same machine?

    I'd like to use my home server as a router too. Somebody suggested to use ESXI as host and pfsense for routing and FreeBSD for webserver as guests. The reason that if the router is hacked they won't have an easy time hacking the webserver too and because load on the webserver won't slow down my...
  12. B

    jails Possible Bug with jexec Usage in Combo with Jails and Firefox

    Ok this is going to be a long one and I REALLY need the mods and smart guys on here to read this, because I think this is a bug, I just don't know with what exactly. I'll try to be as brief as possible but as descriptive as necessary. Description I have a set of GUI jails connected to the...
  13. B

    jails Removing a Jail Doesn't Run exec.poststop

    The exec.poststop script doesn't seem to run unless the jail is specified by name, rather than number. For example: jail -r browsing Runs my custom exec.poststop script. However, lets say my jail number for "browsing" is 5: jail -r 5 Skips my poststop script entirely. What gives? I looked in...
  14. B

    jails Info about Jails + Xorg + 3D accel

    Hi, I am an intermediate FreeBSD ( mostly server-side ) and Docker user. I am trying to migrate more of my stuff from Linux to FreeBSD. But I need a functionality of Docker that I don't know if it exists in FreeBSD jails. First, I have read about jails a fair bit and I have found infos about...
  15. V

    PF Route jail data through wireguard

    I have successfully set up a jail following genneko's notes on setting up a jail in FreeBSD. However after installing and enabling Wireguard every single boot time, my jail has no network. I modified genneko's jails into making one jail by the way. Here's how my set up is looking at the moment...
  16. DaLynX

    jails Jail cannot access /dev/tun

    Hello, I am trying to install a wireguard VPN in a jail but am having some trouble with the jail playing with TUN devices. When I try to create the wireguard interface I get the following error: root@vpn2:~ # wireguard-go wg0 INFO: (wg0) 2020/10/20 17:10:56 Starting wireguard-go version...
  17. B

    PEFS Inside Jail, "Operation not Permitted"

    Made a post earlier about theoretical hidden directories attack vectors and PEFS. This is a simple question about a problem I'm having. Inside a jail. With allow.mount; and enforce_statfs="0"; in /etc/jail.conf, I am getting the error message root@jail:/home/user # ls -I test...
  18. Farhan Khan

    Cloned iocage jails except 1 directory?

    Hi all, I am trying to run multiple instances of an application in different jails. The jails should be identical in all ways except different IP addresses and one directory, where the configuration for the given application will reside. Is there a way to trivially create jails of this sort...
  19. B

    Clipboard and Jails

    I think I know the answer to this, but want to confirm... I'm setting up the Falkon browser in my jails, and one of the options is to allow Javascript access to the clipboard. I'm guessing that it only has access to the clipboard internal to the jail, but I really want to confirm that. The...
  20. B

    pf in a Jail

    I have a vnet jail for my physical NIC. In order to start the pf service in that jail, I had to add a devfs.rule to unhide /dev/pf. I also have wireguard jails which I intend to do the same, and connect them to my NIC-jail. (everything is vnet). Does anyone know if this is a bad idea? Will...
Back
Top