BSD Jails - Revision history

Leo: Updated to syntaxhighlight, added OS category

2019-07-21T23:00:03Z

Updated to syntaxhighlight, added OS category

← Older revision		Revision as of 23:00, 21 July 2019
Line 1:		Line 1:
	== Creating a new ~~BSDJail~~ ==		== Creating a new BSD Jail ==
	Create the world:		Create the world:
	mkdir -p /usr/jail/<jail name>		{{highlight\|lang=terminal\|code=
	cd /usr/src		# mkdir -p /usr/jail/<jail name>
	make buildworld		# cd /usr/src
	make installworld DESTDIR=/usr/jail/<jail name>		# make buildworld
	make distribution DESTDIR=/usr/jail/<jail name>		# make installworld DESTDIR=/usr/jail/<jail name>
	mount -t devfs devfs /usr/jail/<jail name>/dev		# make distribution DESTDIR=/usr/jail/<jail name>
			# mount -t devfs devfs /usr/jail/<jail name>/dev
			}}

	Set up the networking for this jail:		Set up the networking for this jail:
	ifconfig re0 10.1.1.21 netmask 255.255.255.0 alias		{{highlight\|lang=terminal\|code=
	cp /etc/resolv.conf /usr/jail/<jail name>/etc/		# ifconfig re0 10.1.1.21 netmask 255.255.255.0 alias
			# cp /etc/resolv.conf /usr/jail/<jail name>/etc/
			}}

	If you ever want to remove this alias from your host, run		If you ever want to remove this alias from your host, run
	ifconfig re0 10.1.1.21 netmask 255.255.255.0 remove		{{highlight\|lang=terminal\|code=
			# ifconfig re0 10.1.1.21 netmask 255.255.255.0 remove
			}}

	== Starting a Jail Manually ==		== Starting a Jail Manually ==

	jail -n <jail name> /usr/jail/<jail name> <jail name> 10.1.1.20 /bin/sh		{{highlight\|lang=terminal\|code=
			# jail -n <jail name> /usr/jail/<jail name> <jail name> 10.1.1.20 /bin/sh
			}}
	Note that this is a one-time thing. If you want it persistent, continue reading on...		Note that this is a one-time thing. If you want it persistent, continue reading on...

Line 41:		Line 48:
	Start the jail using the rc scripts		Start the jail using the rc scripts

	/etc/rc.d/jail start jail_name		{{highlight\|lang=terminal\|code=
			# /etc/rc.d/jail start jail_name
			}}
	== Managing Jails ==		== Managing Jails ==

	jls #get the jid		{{highlight\|lang=terminal\|code=
	jexec <jid> sh		# jls #get the jid
			# jexec <jid> sh

	jail# echo "enable_sshd=\"YES\"" >> /etc/rc.conf		jail# echo "enable_sshd=\"YES\"" >> /etc/rc.conf
	jail# /etc/rc.d/sshd start		jail# /etc/rc.d/sshd start
			}}

			== See Also ==
			* http://www.scottro.net/qnd/qnd-jail.html
			* http://articles.slicehost.com/2007/9/5/introduction-to-jail_nameserve

	*http:~~//www.scottro.net/qnd/qnd-jail.html~~		[[Category:OS]]
	*http://articles.slicehost.com/2007/9/5/introduction-to-jail_nameserve

Leo: Text replacement - "" to "}}"

2017-02-24T19:14:01Z

Text replacement - "</code>" to "}}"

← Older revision		Revision as of 19:14, 24 February 2017
Line 23:		Line 23:
	== Starting Jails Automatically ==		== Starting Jails Automatically ==

	To ensure the jail gets started on boot, add the following to your {{code\|/etc/rc.conf~~</code>~~ file		To ensure the jail gets started on boot, add the following to your {{code\|/etc/rc.conf}} file
	jail_enable="YES"		jail_enable="YES"
	jail_jail_name_name="jail_name"		jail_jail_name_name="jail_name"
Line 34:		Line 34:
	jail_jail_name_vnet_enable="YES"		jail_jail_name_vnet_enable="YES"

	Add to {{code\|/etc/jails/fstabs/jail_name~~</code>~~		Add to {{code\|/etc/jails/fstabs/jail_name}}

	/usr/src /usr/jail/jail_name/usr/src nullfs rw 0 0		/usr/src /usr/jail/jail_name/usr/src nullfs rw 0 0

Leo: Text replacement - "`" to "{{code|"`


2017-02-24T19:12:25Z
Text replacement - "<code>" to "{{code|"

				
				
				
				
				
				← Older revision
				Revision as of 19:12, 24 February 2017
				
Line 23:
Line 23:
== Starting Jails Automatically == == Starting Jails Automatically ==



To ensure the jail gets started on boot, add the following to your <code>/etc/rc.conf</code> file To ensure the jail gets started on boot, add the following to your {{code|/etc/rc.conf</code> file
  jail_enable="YES"   jail_enable="YES"
  jail_jail_name_name="jail_name"   jail_jail_name_name="jail_name"
Line 34:
Line 34:
  jail_jail_name_vnet_enable="YES"   jail_jail_name_vnet_enable="YES"



Add to <code>/etc/jails/fstabs/jail_name</code> Add to {{code|/etc/jails/fstabs/jail_name</code>



  /usr/src        /usr/jail/jail_name/usr/src   nullfs  rw      0 0   /usr/src        /usr/jail/jail_name/usr/src   nullfs  rw      0 0



Leo: /* Creating a new BSDJail */
2014-01-26T21:01:09Z
Creating a new BSDJail

				
				
				
				
				
				← Older revision
				Revision as of 21:01, 26 January 2014
				
Line 1:
Line 1:
== Creating a new BSDJail == == Creating a new BSDJail ==
  Create the world:
  mkdir -p /usr/jail/<jail name>   mkdir -p /usr/jail/<jail name>
  cd /usr/src   cd /usr/src
Line 8:
Line 8:
  mount -t devfs devfs /usr/jail/<jail name>/dev   mount -t devfs devfs /usr/jail/<jail name>/dev



Set up the networking for this jail:
  ifconfig re0 10.1.1.21 netmask 255.255.255.0 alias   ifconfig re0 10.1.1.21 netmask 255.255.255.0 alias
  cp /etc/resolv.conf /usr/jail/<jail name>/etc/   cp /etc/resolv.conf /usr/jail/<jail name>/etc/

If you ever want to remove this alias from your host, run
 ifconfig re0 10.1.1.21 netmask 255.255.255.0 remove



== Starting a Jail Manually == == Starting a Jail Manually ==





Leo: /* Creating a new BSDJail */
2012-12-13T06:57:11Z
Creating a new BSDJail

				
				
				
				
				
				← Older revision
				Revision as of 06:57, 13 December 2012
				
Line 1:
Line 1:
== Creating a new BSDJail == == Creating a new BSDJail ==



# mkdir -p /usr/jail/<jail name>  mkdir -p /usr/jail/<jail name>
# cd /usr/src  cd /usr/src
# make buildworld    make buildworld  
# make installworld DESTDIR=/usr/jail/<jail name>  make installworld DESTDIR=/usr/jail/<jail name>
# make distribution DESTDIR=/usr/jail/<jail name>  make distribution DESTDIR=/usr/jail/<jail name>
# mount -t devfs devfs /usr/jail/<jail name>/dev    mount -t devfs devfs /usr/jail/<jail name>/dev
 
 ifconfig re0 10.1.1.21 netmask 255.255.255.0 alias
 cp /etc/resolv.conf /usr/jail/<jail name>/etc/



== Starting a Jail Manually == == Starting a Jail Manually ==





Leo at 06:52, 13 December 2012
2012-12-13T06:52:28Z


				
				
				
				
				
				← Older revision
				Revision as of 06:52, 13 December 2012
				
Line 18:
Line 18:
To ensure the jail gets started on boot, add the following to your <code>/etc/rc.conf</code> file To ensure the jail gets started on boot, add the following to your <code>/etc/rc.conf</code> file
  jail_enable="YES"   jail_enable="YES"
  jail_svn_name="svn"   jail_jail_name_name="jail_name"
  jail_svn_hostname="svn.home.steamr.com"   jail_jail_name_hostname="jail_name.home.steamr.com"
  jail_svn_ip="10.1.1.20"   jail_jail_name_ip="10.1.1.20"
  jail_svn_devfs_enable="YES"   jail_jail_name_devfs_enable="YES"
  jail_svn_rootdir="/usr/jail/svn"   jail_jail_name_rootdir="/usr/jail/jail_name"
  jail_svn_mount_enable="YES"   jail_jail_name_mount_enable="YES"
  jail_svn_fstab="/etc/jails/fstabs/svn"   jail_jail_name_fstab="/etc/jails/fstabs/jail_name"
  jail_svn_vnet_enable="YES"   jail_jail_name_vnet_enable="YES"



Add to <code>/etc/jaials/fstabs/svn</code> Add to <code>/etc/jails/fstabs/jail_name</code>



  /usr/src        /usr/jail/svn/usr/src   nullfs  rw      0 0   /usr/src        /usr/jail/jail_name/usr/src   nullfs  rw      0 0
  /usr/ports      /usr/jail/svn/usr/ports nullfs  rw      0 0   /usr/ports      /usr/jail/jail_name/usr/ports nullfs  rw      0 0



Start the jail using the rc scripts Start the jail using the rc scripts



  /etc/rc.d/jail start svn   /etc/rc.d/jail start jail_name



== Managing Jails == == Managing Jails ==
Line 46:
Line 46:



*http://www.scottro.net/qnd/qnd-jail.html *http://www.scottro.net/qnd/qnd-jail.html
*http://articles.slicehost.com/2007/9/5/introduction-to-svnserve *http://articles.slicehost.com/2007/9/5/introduction-to-jail_nameserve





Leo at 06:50, 13 December 2012
2012-12-13T06:50:13Z


				
				
				
				
				
				← Older revision
				Revision as of 06:50, 13 December 2012
				
Line 1:
Line 1:
Need to tidy this up later. == Creating a new BSDJail ==
============================= 



# mkdir -p /usr/jail/<jail name> # mkdir -p /usr/jail/<jail name>
Line 9:
Line 8:
# mount -t devfs devfs /usr/jail/<jail name>/dev   # mount -t devfs devfs /usr/jail/<jail name>/dev  



To start the jail manually, you can... == Starting a Jail Manually ==



jail -n <jail name> /usr/jail/<jail name> <jail name> 10.1.1.20 /bin/sh  jail -n <jail name> /usr/jail/<jail name> <jail name> 10.1.1.20 /bin/sh
-n specifies the name 
then you provide the path, hostname, IP, and the shell 



Note that this is a one-time thing. If you want it persistent, continue reading on...



jail_enable="YES" == Starting Jails Automatically ==
jail_svn_name="svn" 
jail_svn_hostname="svn.home.steamr.com" 
jail_svn_ip="10.1.1.20" 
jail_svn_devfs_enable="YES" 
jail_svn_rootdir="/usr/jail/svn" 
jail_svn_mount_enable="YES" 
jail_svn_fstab="/etc/jails/fstabs/svn" 
jail_svn_vnet_enable="YES" 



add to /etc/jaials/fstabs/svn To ensure the jail gets started on boot, add the following to your <code>/etc/rc.conf</code> file
 jail_enable="YES"
 jail_svn_name="svn"
 jail_svn_hostname="svn.home.steamr.com"
 jail_svn_ip="10.1.1.20"
 jail_svn_devfs_enable="YES"
 jail_svn_rootdir="/usr/jail/svn"
 jail_svn_mount_enable="YES"
 jail_svn_fstab="/etc/jails/fstabs/svn"
 jail_svn_vnet_enable="YES"



/usr/src        /usr/jail/svn/usr/src   nullfs  rw      0 0 Add to <code>/etc/jaials/fstabs/svn</code>
/usr/ports      /usr/jail/svn/usr/ports nullfs  rw      0 0 



 /usr/src        /usr/jail/svn/usr/src   nullfs  rw      0 0
 /usr/ports      /usr/jail/svn/usr/ports nullfs  rw      0 0



/etc/rc.d/jail start svn Start the jail using the rc scripts



jls   #get the jid  /etc/rc.d/jail start svn
jexec <jid> sh 



jail# echo "enable_sshd=\"YES\"" >> /etc/rc.conf == Managing Jails ==
jail# /etc/rc.d/sshd start 



 jls   #get the jid 
 jexec <jid> sh



http://www.scottro.net/qnd/qnd-jail.html  jail# echo "enable_sshd=\"YES\"" >> /etc/rc.conf
http://articles.slicehost.com/2007/9/5/introduction-to-svnserve  jail# /etc/rc.d/sshd start
 
 
*http://www.scottro.net/qnd/qnd-jail.html
*http://articles.slicehost.com/2007/9/5/introduction-to-svnserve





Leo at 07:25, 4 December 2012
2012-12-04T07:25:54Z


				
				
				
				
				
				← Older revision
				Revision as of 07:25, 4 December 2012
				
Line 1:
Line 1:
Need to tidy this up later.
=============================

# mkdir -p /usr/jail/<jail name> # mkdir -p /usr/jail/<jail name>
# cd /usr/src # cd /usr/src





Leo: Created page with "# mkdir -p /usr/jail/ # cd /usr/src # make buildworld  # make installworld DESTDIR=/usr/jail/ # make distribution DESTDIR=/usr/jail/ # mount -..."
2012-12-04T07:25:40Z
Created page with "# mkdir -p /usr/jail/<jail name> # cd /usr/src # make buildworld  # make installworld DESTDIR=/usr/jail/<jail name> # make distribution DESTDIR=/usr/jail/<jail name> # mount -..."
New page
# mkdir -p /usr/jail/<jail name>

# cd /usr/src

# make buildworld 

# make installworld DESTDIR=/usr/jail/<jail name>

# make distribution DESTDIR=/usr/jail/<jail name>

# mount -t devfs devfs /usr/jail/<jail name>/dev 



To start the jail manually, you can...



jail -n <jail name> /usr/jail/<jail name> <jail name> 10.1.1.20 /bin/sh

-n specifies the name

then you provide the path, hostname, IP, and the shell





jail_enable="YES"

jail_svn_name="svn"

jail_svn_hostname="svn.home.steamr.com"

jail_svn_ip="10.1.1.20"

jail_svn_devfs_enable="YES"

jail_svn_rootdir="/usr/jail/svn"

jail_svn_mount_enable="YES"

jail_svn_fstab="/etc/jails/fstabs/svn"

jail_svn_vnet_enable="YES"



add to /etc/jaials/fstabs/svn



/usr/src        /usr/jail/svn/usr/src   nullfs  rw      0 0

/usr/ports      /usr/jail/svn/usr/ports nullfs  rw      0 0





/etc/rc.d/jail start svn



jls   #get the jid 

jexec <jid> sh



jail# echo "enable_sshd=\"YES\"" >> /etc/rc.conf

jail# /etc/rc.d/sshd start





http://www.scottro.net/qnd/qnd-jail.html

http://articles.slicehost.com/2007/9/5/introduction-to-svnserve

← Older revision		Revision as of 19:12, 24 February 2017
Line 23:		Line 23:
	== Starting Jails Automatically ==		== Starting Jails Automatically ==

	To ensure the jail gets started on boot, add the following to your <code>/etc/rc.conf</code> file		To ensure the jail gets started on boot, add the following to your {{code\|/etc/rc.conf</code> file
	jail_enable="YES"		jail_enable="YES"
	jail_jail_name_name="jail_name"		jail_jail_name_name="jail_name"
Line 34:		Line 34:
	jail_jail_name_vnet_enable="YES"		jail_jail_name_vnet_enable="YES"

	Add to <code>/etc/jails/fstabs/jail_name</code>		Add to {{code\|/etc/jails/fstabs/jail_name</code>

	/usr/src /usr/jail/jail_name/usr/src nullfs rw 0 0		/usr/src /usr/jail/jail_name/usr/src nullfs rw 0 0

← Older revision		Revision as of 21:01, 26 January 2014
Line 1:		Line 1:
	== Creating a new BSDJail ==		== Creating a new BSDJail ==
			Create the world:
	mkdir -p /usr/jail/<jail name>		mkdir -p /usr/jail/<jail name>
	cd /usr/src		cd /usr/src
Line 8:		Line 8:
	mount -t devfs devfs /usr/jail/<jail name>/dev		mount -t devfs devfs /usr/jail/<jail name>/dev

			Set up the networking for this jail:
	ifconfig re0 10.1.1.21 netmask 255.255.255.0 alias		ifconfig re0 10.1.1.21 netmask 255.255.255.0 alias
	cp /etc/resolv.conf /usr/jail/<jail name>/etc/		cp /etc/resolv.conf /usr/jail/<jail name>/etc/

			If you ever want to remove this alias from your host, run
			ifconfig re0 10.1.1.21 netmask 255.255.255.0 remove

	== Starting a Jail Manually ==		== Starting a Jail Manually ==

← Older revision		Revision as of 06:57, 13 December 2012
Line 1:		Line 1:
	== Creating a new BSDJail ==		== Creating a new BSDJail ==

	# mkdir -p /usr/jail/<jail name>		mkdir -p /usr/jail/<jail name>
	# cd /usr/src		cd /usr/src
	# make buildworld		make buildworld
	# make installworld DESTDIR=/usr/jail/<jail name>		make installworld DESTDIR=/usr/jail/<jail name>
	# make distribution DESTDIR=/usr/jail/<jail name>		make distribution DESTDIR=/usr/jail/<jail name>
	# mount -t devfs devfs /usr/jail/<jail name>/dev		mount -t devfs devfs /usr/jail/<jail name>/dev

			ifconfig re0 10.1.1.21 netmask 255.255.255.0 alias
			cp /etc/resolv.conf /usr/jail/<jail name>/etc/

	== Starting a Jail Manually ==		== Starting a Jail Manually ==

← Older revision		Revision as of 06:52, 13 December 2012
Line 18:		Line 18:
	To ensure the jail gets started on boot, add the following to your <code>/etc/rc.conf</code> file		To ensure the jail gets started on boot, add the following to your <code>/etc/rc.conf</code> file
	jail_enable="YES"		jail_enable="YES"
	~~jail_svn_name~~="~~svn~~"		jail_jail_name_name="jail_name"
	~~jail_svn_hostname~~="~~svn~~.home.steamr.com"		jail_jail_name_hostname="jail_name.home.steamr.com"
	~~jail_svn_ip~~="10.1.1.20"		jail_jail_name_ip="10.1.1.20"
	~~jail_svn_devfs_enable~~="YES"		jail_jail_name_devfs_enable="YES"
	~~jail_svn_rootdir~~="/usr/jail/~~svn~~"		jail_jail_name_rootdir="/usr/jail/jail_name"
	~~jail_svn_mount_enable~~="YES"		jail_jail_name_mount_enable="YES"
	~~jail_svn_fstab~~="/etc/jails/fstabs/~~svn~~"		jail_jail_name_fstab="/etc/jails/fstabs/jail_name"
	~~jail_svn_vnet_enable~~="YES"		jail_jail_name_vnet_enable="YES"

	Add to <code>/etc/~~jaials~~/fstabs/~~svn~~</code>		Add to <code>/etc/jails/fstabs/jail_name</code>

	/usr/src /usr/jail/~~svn~~/usr/src nullfs rw 0 0		/usr/src /usr/jail/jail_name/usr/src nullfs rw 0 0
	/usr/ports /usr/jail/~~svn~~/usr/ports nullfs rw 0 0		/usr/ports /usr/jail/jail_name/usr/ports nullfs rw 0 0

	Start the jail using the rc scripts		Start the jail using the rc scripts

	/etc/rc.d/jail start ~~svn~~		/etc/rc.d/jail start jail_name

	== Managing Jails ==		== Managing Jails ==
Line 46:		Line 46:

	*http://www.scottro.net/qnd/qnd-jail.html		*http://www.scottro.net/qnd/qnd-jail.html
	*http://articles.slicehost.com/2007/9/5/introduction-to-~~svnserve~~		*http://articles.slicehost.com/2007/9/5/introduction-to-jail_nameserve

← Older revision		Revision as of 06:50, 13 December 2012
Line 1:		Line 1:
	~~Need to tidy this up later.~~		== Creating a new BSDJail ==
	~~=========================~~====

	# mkdir -p /usr/jail/<jail name>		# mkdir -p /usr/jail/<jail name>
Line 9:		Line 8:
	# mount -t devfs devfs /usr/jail/<jail name>/dev		# mount -t devfs devfs /usr/jail/<jail name>/dev

	~~To start the jail manually, you can...~~		== Starting a Jail Manually ==

	jail -n <jail name> /usr/jail/<jail name> <jail name> 10.1.1.20 /bin/sh		jail -n <jail name> /usr/jail/<jail name> <jail name> 10.1.1.20 /bin/sh
	~~-n specifies the name~~
	~~then you provide the path, hostname, IP, and the shell~~

			Note that this is a one-time thing. If you want it persistent, continue reading on...

	~~jail_enable~~=~~"YES"~~		== Starting Jails Automatically ==
	~~jail_svn_name~~=~~"svn"~~
	~~jail_svn_hostname~~=~~"svn.home.steamr.com"~~
	~~jail_svn_ip~~=~~"10.1.1.20"~~
	~~jail_svn_devfs_enable="YES"~~
	~~jail_svn_rootdir="/usr/jail/svn"~~
	~~jail_svn_mount_enable="YES"~~
	~~jail_svn_fstab="/etc/jails/fstabs/svn"~~
	~~jail_svn_vnet_enable="YES"~~

	add to /etc/~~jaials~~/fstabs/svn		To ensure the jail gets started on boot, add the following to your <code>/etc/rc.conf</code> file
			jail_enable="YES"
			jail_svn_name="svn"
			jail_svn_hostname="svn.home.steamr.com"
			jail_svn_ip="10.1.1.20"
			jail_svn_devfs_enable="YES"
			jail_svn_rootdir="/usr/jail/svn"
			jail_svn_mount_enable="YES"
			jail_svn_fstab="/etc/jails/fstabs/svn"
			jail_svn_vnet_enable="YES"

	/~~usr~~/~~src~~ /~~usr/jail/svn/usr/src nullfs rw 0 0~~		Add to <code>/etc/jaials/fstabs/svn</code>
	~~/usr/ports /usr/jail~~/svn/~~usr/ports nullfs rw 0 0~~

			/usr/src /usr/jail/svn/usr/src nullfs rw 0 0
			/usr/ports /usr/jail/svn/usr/ports nullfs rw 0 0

	~~/etc/~~rc~~.d/jail start svn~~		Start the jail using the rc scripts

	~~jls #get the jid~~		/etc/rc.d/jail start svn
	~~jexec <jid> sh~~

	~~jail# echo "enable_sshd~~=~~\"YES\"" >> /etc/rc.conf~~		== Managing Jails ==
	~~jail# /etc/rc.d/sshd start~~

			jls #get the jid
			jexec <jid> sh

	http://www.scottro.net/qnd/qnd-jail.html		jail# echo "enable_sshd=\"YES\"" >> /etc/rc.conf
	http://articles.slicehost.com/2007/9/5/introduction-to-svnserve		jail# /etc/rc.d/sshd start


			*http://www.scottro.net/qnd/qnd-jail.html
			*http://articles.slicehost.com/2007/9/5/introduction-to-svnserve

← Older revision		Revision as of 07:25, 4 December 2012
Line 1:		Line 1:
			Need to tidy this up later.
			=============================

	# mkdir -p /usr/jail/<jail name>		# mkdir -p /usr/jail/<jail name>
	# cd /usr/src		# cd /usr/src

BSD Jails - Revision history

Leo: Updated to syntaxhighlight, added OS category

Leo: Text replacement - "" to "}}"

Leo: Text replacement - "" to "{{code|"

Leo: /* Creating a new BSDJail */

Leo: /* Creating a new BSDJail */

Leo at 06:52, 13 December 2012

Leo at 06:50, 13 December 2012

Leo at 07:25, 4 December 2012

Leo: Created page with "# mkdir -p /usr/jail/ # cd /usr/src # make buildworld # make installworld DESTDIR=/usr/jail/ # make distribution DESTDIR=/usr/jail/ # mount -..."

Leo: Text replacement - "`" to "{{code|"`