ezjail and UPDATING20131010
Hi there. I updated to 10-STABLE after it was branched and suddenly none of my [ez]jails will start. Does it have anything to do with the entry in UPDATING? What's the best way to solve it? ___ freebsd-jail@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-jail To unsubscribe, send any mail to "freebsd-jail-unsubscr...@freebsd.org"
Re: ezjail and UPDATING20131010
On Fri, Oct 11, 2013, at 12:03, Kenta Suzumoto wrote: > Hi there. I updated to 10-STABLE after it was branched and suddenly none > of my [ez]jails will start. Does it have anything to do with the entry in > UPDATING? > What's the best way to solve it? > This is being discussed. I don't know a solution at this time. You might have to roll back. ___ freebsd-jail@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-jail To unsubscribe, send any mail to "freebsd-jail-unsubscr...@freebsd.org"
Re[2]: ezjail and UPDATING20131010
--- Original message --- From: "Mark Felder" Date: 11 October 2013, 20:31:19 > On Fri, Oct 11, 2013, at 12:03, Kenta Suzumoto wrote: > > Hi there. I updated to 10-STABLE after it was branched and suddenly none > > of my [ez]jails will start. Does it have anything to do with the entry in > > UPDATING? > > What's the best way to solve it? > > > > This is being discussed. I don't know a solution at this time. You might > have to roll back. No, no. There is one solution. You should stopping to uses tools like this. Instead write own shell-script which do what you need. Overall, Jail is like "Lego" constructor :-). ___ freebsd-jail@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-jail To unsubscribe, send any mail to "freebsd-jail-unsubscr...@freebsd.org"
Re: Re[2]: ezjail and UPDATING20131010
On Fri, Oct 11, 2013 at 1:44 PM, wishmaster wrote: [...] > No, no. There is one solution. You should stopping to uses tools like this. > Instead write own shell-script which do what you need. Overall, >Jail is like > "Lego" constructor :-). EzJail is great and a lot of people using extensively including ourselves. It's much more than a simple script. Best, Alejandro Imass ___ freebsd-jail@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-jail To unsubscribe, send any mail to "freebsd-jail-unsubscr...@freebsd.org"
Re: ezjail and UPDATING20131010
On 11.10.13 19:44, wishmaster wrote: > No, no. There is one solution. You should stopping to uses tools like > this. Instead write own shell-script which do what you need. Overall, > Jail is like "Lego" constructor :-). Excuse me? The ezjail framework indeed tries to implement best practises to protect its users from the common pitfalls of installing and updating virtual servers. Why exactly would you expect everyone to implement their own scripts? Lately the development of the new jail(8) tool made it harder to automatize administrating jail configs just using base system tools. Once the features of the tool has settled, ezjail will try to cope with the impact. erdgeist ___ freebsd-jail@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-jail To unsubscribe, send any mail to "freebsd-jail-unsubscr...@freebsd.org"
Re[2]: ezjail and UPDATING20131010
> On 11.10.13 19:44, wishmaster wrote: > > > No, no. There is one solution. You should stopping to uses tools like > > this. Instead write own shell-script which do what you need. Overall, > > Jail is like "Lego" constructor :-). > > Excuse me? The ezjail framework indeed tries to implement best practises > to protect its users from the common pitfalls of installing and updating > virtual servers. Why exactly would you expect everyone to implement > their own scripts? > > Lately the development of the new jail(8) tool made it harder to > automatize administrating jail configs just using base system tools. > Once the features of the tool has settled, ezjail will try to cope with > the impact. > Sorry, I did not offend anybody. Just my opinion about jail is: if user is familiar with FreeBSD structure, Jail, shell-scripting then preferred choice is have own framework. Dirk, one question. For example, I have multiple services (about 5 or more) which must be isolated. Each services uses www-server or any others dependent software. With ezjail, this software must be in each jail. What about updating this software? What about updating whole jail when base system was updated (mergemaster, etc)? ___ freebsd-jail@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-jail To unsubscribe, send any mail to "freebsd-jail-unsubscr...@freebsd.org"
Re: ezjail and UPDATING20131010
On 11.10.13 20:55, wishmaster wrote: > Dirk, one question. For example, I have multiple services (about 5 or > more) which must be isolated. Each services uses www-server or any > others dependent software. With ezjail, this software must be in each > jail. What about updating this software? What about updating whole > jail when base system was updated (mergemaster, etc)? Use the right tool for the right task, i.e. freebsd-update inside the jail to do mergemaster the modern way. For updating software in the jails, either run portmaster -a or have identical packages mounted into all jails using nullfs and update them from the host system. Regards, erdgeist ___ freebsd-jail@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-jail To unsubscribe, send any mail to "freebsd-jail-unsubscr...@freebsd.org"
Re[2]: ezjail and UPDATING20131010
--- Original message --- From: "Dirk Engling" Date: 11 October 2013, 22:09:09 > On 11.10.13 20:55, wishmaster wrote: > > > Dirk, one question. For example, I have multiple services (about 5 or > > more) which must be isolated. Each services uses www-server or any > > others dependent software. With ezjail, this software must be in each > > jail. What about updating this software? What about updating whole > > jail when base system was updated (mergemaster, etc)? > > Use the right tool for the right task, i.e. freebsd-update inside the > jail to do mergemaster the modern way. For updating software in the > jails, either run portmaster -a or have identical packages mounted into > all jails using nullfs and update them from the host system. > Yeah!? But do you think updating python in each jail this is the right solution? Freebsd-update in each jail?? What about when number of jails is 10 or about. My server is very high loaded and I use tunable custom kernel and world. ___ freebsd-jail@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-jail To unsubscribe, send any mail to "freebsd-jail-unsubscr...@freebsd.org"
Re: ezjail and UPDATING20131010
On 11.10.13 21:27, wishmaster wrote: > Yeah!? But do you think updating python in each jail this is the > right solution? Freebsd-update in each jail?? What about when number > of jails is 10 or about. My server is very high loaded and I use > tunable custom kernel and world. Don't use jails then. Better go and order ten servers and use the amazing features of ... well, d'oh. Puppet? erdgeist ___ freebsd-jail@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-jail To unsubscribe, send any mail to "freebsd-jail-unsubscr...@freebsd.org"
Re[2]: ezjail and UPDATING20131010
--- Original message --- From: "Dirk Engling" Date: 11 October 2013, 22:30:24 > On 11.10.13 21:27, wishmaster wrote: > > > Yeah!? But do you think updating python in each jail this is the > > right solution? Freebsd-update in each jail?? What about when number > > of jails is 10 or about. My server is very high loaded and I use > > tunable custom kernel and world. > > Don't use jails then. Better go and order ten servers and use the > amazing features of ... well, d'oh. Puppet? No, no :-). I carefully bring you to through that very often own solution is preferable (see my first message). Yes. I use jails with vnet and has own solution which gives me this "amazing features". :-) ___ freebsd-jail@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-jail To unsubscribe, send any mail to "freebsd-jail-unsubscr...@freebsd.org"
Re: ezjail and UPDATING20131010
On Fri, Oct 11, 2013, at 14:30, Dirk Engling wrote: > On 11.10.13 21:27, wishmaster wrote: > > > Yeah!? But do you think updating python in each jail this is the > > right solution? Freebsd-update in each jail?? What about when number > > of jails is 10 or about. My server is very high loaded and I use > > tunable custom kernel and world. > > Don't use jails then. Better go and order ten servers and use the > amazing features of ... well, d'oh. Puppet? > This is not the right attitude to approach this problem. ___ freebsd-jail@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-jail To unsubscribe, send any mail to "freebsd-jail-unsubscr...@freebsd.org"
Re: ezjail and UPDATING20131010
On 10/11/2013 at 8:11 PM, "Fbsd8" wrote: >The jail rc.script environment in 10.0 has been patched to convert all >the jail rc.conf parameters to the new jail(8) format and then exec >jail(8). This is in preparation for depreciating the jail.conf jail >parameters. > >ezjail uses the rc.conf jail parameters and needs to be updated to use >the native jail(8) parameters. Until that gets done ezjail only works >with 9.2 and older versions of FreeBSD. The qjail utility uses the >native jail(8) parameters right now. Give it a try. Thanks but no thanks. I'm not interested in a ripoff project that doesn't give credit to the original work it stole from. I'll wait for ezjail to be updated or hrs@ to submit his patch to -CURRENT. ___ freebsd-jail@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-jail To unsubscribe, send any mail to "freebsd-jail-unsubscr...@freebsd.org"
Re: ezjail and UPDATING20131010
Kenta Suzumoto wrote: Hi there. I updated to 10-STABLE after it was branched and suddenly none of my [ez]jails will start. Does it have anything to do with the entry in UPDATING? What's the best way to solve it? The jail rc.script environment in 10.0 has been patched to convert all the jail rc.conf parameters to the new jail(8) format and then exec jail(8). This is in preparation for depreciating the jail.conf jail parameters. ezjail uses the rc.conf jail parameters and needs to be updated to use the native jail(8) parameters. Until that gets done ezjail only works with 9.2 and older versions of FreeBSD. The qjail utility uses the native jail(8) parameters right now. Give it a try. ___ freebsd-jail@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-jail To unsubscribe, send any mail to "freebsd-jail-unsubscr...@freebsd.org"
Re: ezjail and UPDATING20131010
On Fri, 11 Oct 2013 15:42:11 -0500 Mark Felder wrote: > On Fri, Oct 11, 2013, at 14:30, Dirk Engling wrote: > > On 11.10.13 21:27, wishmaster wrote: > > > > > Yeah!? But do you think updating python in each jail this is the > > > right solution? Freebsd-update in each jail?? What about when > > > number of jails is 10 or about. My server is very high loaded and > > > I use tunable custom kernel and world. > > > > Don't use jails then. Better go and order ten servers and use the > > amazing features of ... well, d'oh. Puppet? > > > > This is not the right attitude to approach this problem. Let's take what is good from it: puppet or any other similar software. No matter if the servers are virtualized or not, such a software is designed to handle the package/config part of the question. With this you can even decide which servers get an update of software X instead of automatically updating every server and running into problems (major updates of PHP come into my mind here). Regarding OS updates (and I assume manual installworld updates in the question as freebsd-update is not considered an option) I use: ---snip--- cd /usr/src for jail in /path/to/jails/*; do echo $jail sleep 5 mergemaster -D $jail make DESTDIR=$jail delete-old -DBATCH_DELETE_OLD_FILES make DESTDIR=$jail check-old # list old libs fi make DESTDIR=/path/to/basejail delete-old -DBATCH_DELETE_OLD_FILES ---snip--- Depending on the situation I use delete-old-libs instead of check-libs (I know what gets deleted from the update of the jail-host) or issue the delete-old-libs later when all jails don't use the libs anymore. Bye, Alexander. -- http://www.Leidinger.netAlexander @ Leidinger.net: PGP ID = B0063FE7 http://www.FreeBSD.org netchild @ FreeBSD.org : PGP ID = 72077137 ___ freebsd-jail@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-jail To unsubscribe, send any mail to "freebsd-jail-unsubscr...@freebsd.org"
