Attachment 161257 Details for Bug 200905 – jails config diff between <= 9.0 to 9.1-RELEASE

[patch] jails config diff between <= 9.0 to 9.1-RELEASE

handbook_jails.diff.txt (text/plain), 3.55 KB, created by Eric Holzbach on 2015-09-22 00:13:42 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Eric Holzbach

Created: 2015-09-22 00:13:42 UTC

Size: 3.55 KB

patch

obsolete

>Index: chapter.xml
>===================================================================
>--- chapter.xml	(revision 47433)
>+++ chapter.xml	(working copy)
>@@ -33,7 +33,7 @@
>     <para>Jails build upon the &man.chroot.2; concept, which is used
>       to change the root directory of a set of processes, creating a
>       safe environment, separate from the rest of the system.
>-      Processes created in the chrooted environment can not access
>+      Processes created in the chrooted environment cannot access
>       files or resources outside of it.  For that reason, compromising
>       a service running in a chrooted environment should not allow the
>       attacker to compromise the entire system.  However, a chroot has
>@@ -225,7 +225,7 @@
>     <para>To install just the base system, run the next command when
>       using &os;&nbsp;9.x or newer:</para>
> 
>-    <screen>&prompt.root; <userinput>tar -xf /mnt/usr/freebsd_dist/base.txz -C $DESTDIR</userinput></screen>
>+    <screen>&prompt.root; <userinput>tar -xf /mnt/usr/freebsd-dist/base.txz -C $DESTDIR</userinput></screen>
> 
>     <para>On &os; 8.x systems, use this command instead:</para>
> 
>@@ -236,7 +236,7 @@
> 
>     <para>When using &os;&nbsp;9.x and newer:</para>
> 
>-    <screen>&prompt.root; <userinput>for <replaceable>sets</replaceable> in BASE PORTS; do tar -xf /mnt/FREEBSD_INSTALL/USR/FREEBSD_DIST/$<replaceable>sets</replaceable>.TXZ -C $DESTDIR ; done</userinput></screen>
>+    <screen>&prompt.root; <userinput>for <replaceable>sets</replaceable> in BASE PORTS; do tar -xf /mnt/usr/freebsd-dist/$<replaceable>sets</replaceable>.TXZ -C $DESTDIR ; done</userinput></screen>
> 
>     <para>When using &os;&nbsp;8.x:</para>
> 
>@@ -320,12 +320,38 @@
>       <emphasis>service</emphasis> jail, it depends on the service or
>       application that will run within the jail.</para>
> 
>-    <para>Jails are often started at boot time and the &os;
>-      <filename>rc</filename> mechanism provides an easy way to do
>-      this.</para>
>+    <para>Jails can be started at boot time using
>+      <filename>jails.conf</filename> on &os;&nbsp;9.1 or newer, or
>+      by using <filename>rc</filename> mechanism for &os;&nbsp;9.0
>+      and earlier.</para>
> 
>+    <para>When using &os;&nbsp;9.1 or newer:</para>
>+
>     <procedure>
>       <step>
>+	<para>Add to &man.rc.conf.5;:</para>
>+	<programlisting>jail_enable="YES"   # Set to NO to disable starting of any jails</programlisting>
>+      </step>
>+
>+      <step>
>+	<para>Create an entry in &man.jail.conf.5; for each
>+	  jail:</para>
>+	<programlisting>testjail {
>+&nbsp;&nbsp;&nbsp;&nbsp;path = /usr/local/jail/testjail;
>+&nbsp;&nbsp;&nbsp;&nbsp;mount.devfs;
>+&nbsp;&nbsp;&nbsp;&nbsp;host.hostname = testhostname;
>+&nbsp;&nbsp;&nbsp;&nbsp;ip4.addr = 192.0.2.100;
>+&nbsp;&nbsp;&nbsp;&nbsp;interface = ed0;
>+&nbsp;&nbsp;&nbsp;&nbsp;exec.start = "/bin/sh /etc/rc";
>+&nbsp;&nbsp;&nbsp;&nbsp;exec.stop = "/bin/sh /etc/rc.shutdown";
>+}</programlisting>
>+      </step>
>+    </procedure>
>+
>+    <para>When using &os;&nbsp;9.0 and older:</para>
>+
>+    <procedure>
>+      <step>
> 	<para>A list of the jails which are enabled to start at boot
> 	  time should be added to the &man.rc.conf.5; file:</para>
> 
>@@ -363,8 +389,8 @@
>       </step>
>     </procedure>
> 
>-    <para>&man.service.8; can be used to start or stop a jail by hand,
>-      if an entry for it exists in
>+    <para>&man.service.8; can be used to start or stop a jail if an
>+      entry for it exists in <filename>jail.conf</filename> or
>       <filename>rc.conf</filename>:</para>
> 
>     <screen>&prompt.root; <userinput>service jail start <replaceable>www</replaceable></userinput>

Actions: View | Diff

Attachments on bug 200905: 161257