Bug 189901
| Summary: | Update the jail section of the handbook | ||||||
|---|---|---|---|---|---|---|---|
| Product: | Documentation | Reporter: | Sevan Janiyan <venture37> | ||||
| Component: | Books & Articles | Assignee: | Benedict Reuschling <bcr> | ||||
| Status: | Closed FIXED | ||||||
| Severity: | Affects Only Me | ||||||
| Priority: | Normal | ||||||
| Version: | Latest | ||||||
| Hardware: | Any | ||||||
| OS: | Any | ||||||
| Attachments: |
|
||||||
|
Description
Sevan Janiyan
2014-05-18 00:40:00 UTC
Responsible Changed From-To: freebsd-doc->bcr Assign this to me as it was created as part of the Doc Lounge at BSDCan 2014. Author: bcr Date: Thu May 22 16:25:57 2014 New Revision: 44908 URL: http://svnweb.freebsd.org/changeset/doc/44908 Log: This PR and the patch was created during the BSDCan 2014 Doc lounge. From the PR: - Describe that it's possible to install prebuilt binaries as well as build from source. - Instructions on how to extract distfiles on 8.x & earlier / 9.0 & later - Remove reference to jail_www_devfs_ruleset rc.conf, as-is it prevents the jail from starting because a ruleset needs to be defined & as there is no documentation for that in the article, it's easier to remove it, by doing this, the default ruleset is applied. - Add instructions on how to keep jails up to date with freebsd-update. I cleaned up the patch a bit, but it is still good work for a first patch. PR: docs/189901 Submitted by: Sevan Janiyan Modified: head/en_US.ISO8859-1/books/handbook/jails/chapter.xml Modified: head/en_US.ISO8859-1/books/handbook/jails/chapter.xml ============================================================================== --- head/en_US.ISO8859-1/books/handbook/jails/chapter.xml Thu May 22 15:18:45 2014 (r44907) +++ head/en_US.ISO8859-1/books/handbook/jails/chapter.xml Thu May 22 16:25:57 2014 (r44908) @@ -50,7 +50,8 @@ host system. Jails expand this model by virtualizing access to the file system, the set of users, and the networking subsystem. More fine-grained controls are available for tuning the access - of a jailed environment.</para> + of a jailed environment. Jails can be considered as a type of + operating system-level virtualization.</para> <para>A jail is characterized by four elements:</para> @@ -194,8 +195,72 @@ system, and <quote>service</quote> jails, dedicated to one application or service, possibly running with privileges. This is only a conceptual division and the process of building a jail - is not affected by it. The &man.jail.8; manual page is quite - clear about the procedure for building a jail:</para> + is not affected by it. When creating a <quote>complete</quote> + jail there are two options for the source of the userland: use + prebuilt binaries (such as those supplied on an install media) + or build from source.</para> + + <para>To install the userland from installation media, first + create the root directory for the jail. This can be done by + setting the <varname>DESTDIR</varname> variable to the proper + location. The command to use depends on which shell is being + used.</para> + + <para>When using &man.sh.1;:</para> + + <screen>&prompt.root; <userinput>export DESTDIR=<replaceable>/here/is/the/jail</replaceable></userinput></screen> + + <para>If <command>csh</command>/<command>tcsh</command> is used, + execute this instead:</para> + + <screen>&prompt.root; <userinput>setenv DESTDIR <replaceable>/here/is/the/jail</replaceable></userinput></screen> + + <para>Mount the install media as covered in &man.mdconfig.8; + when using the install ISO:</para> + + <screen>&prompt.root; <userinput>mount -t cd9660 /dev/`mdconfig -f cdimage.iso` /mnt</userinput></screen> + + <para>Extract the binaries from the tarballs on the install media + into the declared destination. Minimally, only the base set + needs to be extracted, but a complete install can be performed + when preferred.</para> + + <para>To install just the base system, run the next command when + using &os; 9.x or newer:</para> + + <screen>&prompt.root; <userinput>tar -xf /mnt/freebsd_install/usr/freebsd_dist/base.txz -C $DESTDIR</userinput></screen> + + <para>On &os; 8.x systems, use this command instead:</para> + + <screen>&prompt.root; <userinput>/mnt/8.<replaceable>4</replaceable>-RELEASE/base/install.sh</userinput></screen> + + <para>To install everything but the kernel, issue this + command:</para> + + <para>When using &man.sh.1; on &os; 9.x and newer, issue this + command:</para> + + <screen>&prompt.root; <userinput>for <replaceable>sets</replaceable> in BASE DOC GAMES PORTS; do (tar -xf /mnt/FREEBSD_INSTALL/USR/FREEBSD_DIST/$<replaceable>sets</replaceable>.TXZ -C $DESTDIR</userinput></screen> + + <para>When using &os; 8.x, run this:</para> + + <screen>&prompt.root; <userinput>cd /mnt/8.<replaceable>4</replaceable>-RELEASE; for <replaceable>dir</replaceable> in base catpages dict doc games info manpages ports; do (cd $<replaceable>dir</replaceable>; ./install.sh) ; done</userinput></screen> + + <para>If <command>csh</command>/<command>tcsh</command> is used on + &os; 9.x and newer, execute this command:</para> + + <screen>&prompt.root; <userinput>foreach <replaceable>sets</replaceable> ( BASE DOC GAMES PORTS ) +tar -xf /mnt/FREEBSD_INSTALL/USR/FREEBSD_DIST/$sets.TXZ -C $DESTDIR +done</userinput></screen> + + <para>On &os; 8.x, run this command:</para> + + <screen>&prompt.root; <userinput>foreach <replaceable>dir</replaceable> ( base catpages dict doc games info manpages ports ) + cd /mnt/8.<replaceable>4</replaceable>-RELEASE/$dir; ./install.sh +done</userinput></screen> + + <para>The &man.jail.8; manual page explains the procedure for + building a jail:</para> <screen>&prompt.root; <userinput>setenv D <replaceable>/here/is/the/jail</replaceable></userinput> &prompt.root; <userinput>mkdir -p $D</userinput> <co xml:id="jailpath"/> @@ -299,8 +364,7 @@ jail_list="<replaceable>www</replaceable <programlisting>jail_<replaceable>www</replaceable>_rootdir="/usr/jail/www" # jail's root directory jail_<replaceable>www</replaceable>_hostname="<replaceable>www</replaceable>.example.org" # jail's hostname jail_<replaceable>www</replaceable>_ip="192.168.0.10" # jail's IP address -jail_<replaceable>www</replaceable>_devfs_enable="YES" # mount devfs in the jail -jail_<replaceable>www</replaceable>_devfs_ruleset="<replaceable>www_ruleset</replaceable>" # devfs ruleset to apply to jail</programlisting> +jail_<replaceable>www</replaceable>_devfs_enable="YES" # mount devfs in the jail</programlisting> <para>The default startup of jails configured in &man.rc.conf.5;, will run the <filename>/etc/rc</filename> @@ -460,6 +524,22 @@ jail_<replaceable>www</replaceable>_devf applications that contribute to &man.jail.8; management. Please refer to its web page for more information.</para> </sect2> + + <sect2 xml:id="jails-updating"> + <title>Keeping Jails Patched and up to Date</title> + + <para>Jails should be kept up to date from the host operating + system as attempting to patch userland from within the jail + may likely fail as the default behaviour in FreeBSD is to + disallow the use of &man.chflags.1; in a jail which prevents + the replacement of some files. It is possible to change this + behavior but it is recommended to use &man.freebsd-update.8; + to maintain jails instead. Use <option>-b</option> to specify + the path of the jail to be updated.</para> + + <screen>&prompt.root; <userinput>freebsd-update -b <replaceable>/here/is/the/jail</replaceable> fetch</userinput> +&prompt.root; <userinput>freebsd-update -b <replaceable>/here/is/the/jail</replaceable> install</userinput></screen> + </sect2> </sect1> <sect1 xml:id="jails-application"> _______________________________________________ svn-doc-all@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/svn-doc-all To unsubscribe, send any mail to "svn-doc-all-unsubscribe@freebsd.org" State Changed From-To: open->closed A modified version of the patch was committed. Thanks for working on it! Keep it up. PR closed! |
