Bug 220530 - Allow more services to run into jailvnet
Summary: Allow more services to run into jailvnet
Status: Closed FIXED
Alias: None
Product: Base System
Classification: Unclassified
Component: conf (show other bugs)
Version: CURRENT
Hardware: Any Any
: --- Affects Some People
Assignee: freebsd-jail (Nobody)
URL:
Keywords: patch
Depends on:
Blocks:
 
Reported: 2017-07-07 07:45 UTC by Olivier Cochard
Modified: 2017-07-08 09:35 UTC (History)
1 user (show)

See Also:

Attachments
patch to enable services to run into jailvnet (4.30 KB, patch)
2017-07-07 07:45 UTC, Olivier Cochard 		no flags Details | Diff
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Olivier Cochard freebsd_committer freebsd_triage 2017-07-07 07:45:43 UTC 
Created attachment 184146 [details]
patch to enable services to run into jailvnet

After some tests, here are the services that run into a vnet jail:
- defaultroute
- dhclient
- ip6addrctl
- natd
- pf
- pfsync
- pflog (deamon runs, pflog0 interface usable, but my /var/log/pflog not filled)
- rarpd
- route6d (do nothing anyway because obsolete)
- routed (do nothing anyway because obsolete)
- rtsold
- static_arp
- static_ndp

My testing labs:
https://bsdrp.net/documentation/examples/multi-tenant_ha_pf_firewalls
https://bsdrp.net/documentation/examples/maximum_bsdrp_features_lab
Comment 1 commit-hook freebsd_committer freebsd_triage 2017-07-08 09:28:46 UTC 
A commit references this bug:

Author: kp
Date: Sat Jul  8 09:28:33 UTC 2017
New revision: 320802
URL: https://svnweb.freebsd.org/changeset/base/320802

Log:
  Allow more services to run in vnet jails

  After some tests, here are the services that run into a vnet jail:
    - defaultroute
    - dhclient
    - ip6addrctl
    - natd
    - pf
    - pfsync
    - pflog (deamon runs, pflog0 interface usable, but /var/log/pflog not filled)
    - rarpd
    - route6d (do nothing anyway because obsolete)
    - routed (do nothing anyway because obsolete)
    - rtsold
    - static_arp
    - static_ndp

  PR:		220530
  Submitted by:	olivier@freebsd.org

Changes:
  head/etc/rc.d/defaultroute
  head/etc/rc.d/dhclient
  head/etc/rc.d/ip6addrctl
  head/etc/rc.d/natd
  head/etc/rc.d/pf
  head/etc/rc.d/pflog
  head/etc/rc.d/pfsync
  head/etc/rc.d/rarpd
  head/etc/rc.d/route6d
  head/etc/rc.d/routed
  head/etc/rc.d/rtsold
  head/etc/rc.d/static_arp
  head/etc/rc.d/static_ndp