Changes between Version 35 and Version 36 of FreeBSDJail
- Timestamp:
- Oct 27, 2010, 8:26:24 AM (14 years ago)
Legend:
- Unmodified
- Added
- Removed
- Modified
-
FreeBSDJail
v35 v36 10 10 11 11 Important: Your jail server should not run ''any'' public facing services which does 'wildcard' binding to IP addresses, else it will 'claim' the service before your jail can take it. 12 13 == Install Jail == 14 First make sure to install the jail using the [http://www.freebsd.org/doc/handbook/jails.html method in the handbook] 15 {{{#!sh 16 master# cat <<EOF >> /etc/rc.conf 17 jail_pzwet_rootdir="/usr/jail/pzwet" 18 jail_pzwet_interface="re0" 19 jail_pzwet_hostname="pzwet.vanderzwet.net" 20 jail_pzwet_ip="178.63.108.109" 21 jail_pzwet_devfs_enable="YES" 22 jail_pzwet_devfs_ruleset="devfsrules_jail" 23 jail_pzwet_mount_enable="YES" 24 EOF 25 }}} 26 27 master# mkdir /usr/jail/pzwet/usr/ports 28 master# cat <<EOF > /etc/fstab.pzwet 29 /usr/ports /usr/jail/pzwet/usr/ports nullfs rw 0 0 30 EOF 31 32 master# cp /etc/resolv.conf //usr/jail/pzwet/etc/resolv.conf 33 34 == Configure Jail == 12 35 Tip: Jails does '''NOT''' have a local loopback device, so you will need to use UNIX sockets on places you would normally use the loopback address. 13 Tip: Make sure your port directory is clean before start. Run {{{find /usr/ports/ -mindepth 3 -maxdepth 3 -type d -name work | rev | cut -c 5- | rev | xargs -n 1 -I % make -C % clean}}} if you are not sure.14 First make sure to install the jail using the [http://www.freebsd.org/doc/handbook/jails.html method in the handbook]15 36 {{{#!sh 16 37 pzwet# cat <<EOF >> /etc/rc.conf … … 43 64 }}} 44 65 66 Tip: Make sure your port directory is clean before start. Run {{{find /usr/ports/ -mindepth 3 -maxdepth 3 -type d -name work | rev | cut -c 5- | rev | xargs -n 1 -I % make -C % clean}}} if you are not sure. 45 67 Install the ports: 46 68 pzwet# make -C /usr/ports/security/sudo WITH_INSULTS=yes BATCH=yes install clean