Re: how to determine primary (source) IP address in jail

[BulkMailForRudy]

One way to fix the problem is to use VNET in your jails and you will 
get  a lo0 with 127.0.0.1 inside the jail.


Rudy

On 2/28/19 2:58 AM, Miroslav Lachman wrote:
Is there some easy way to determine the primary (source) address which 
is used in jail with multiple IP addresses?


I came to this problem with running local_unbound in jail. Unbound 
refuses queries originating in this jail because the do not come from 
real 127.0.0.1 (which is the only one allowed by default). Unbound in 
jail see requests come from jails IP. It is easy to determine (in 
shell script) if jail has only one IP.
But what in case where jail has multiple IPs? Is there some sysctl or 
some call to ifconfig or any other util to get the IP which will be 
used as source address for queries on local services in jail?


I know I can allow all IPs of jail in
access-control: a.b.c.d/32 allow
access-control: e.f.g.h/32 allow

I am just curios if there is some way to get "primary" IP in jail 
without calling anything from the host environment.


Kind regards
Miroslav Lachman
___
freebsd-jail@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-jail
To unsubscribe, send any mail to "freebsd-jail-unsubscr...@freebsd.org"


___
freebsd-jail@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-jail
To unsubscribe, send any mail to "freebsd-jail-unsubscr...@freebsd.org"

Re: Ezjail

[BulkMailForRudy]

On 4/30/20 8:30 AM, Brandon helsley wrote:

I installed and updated base jail with ezjail and then like the example in the 
handbook, created dnsjail with it's ip. I'm now needed to change the jail file 
in ezjail directory to a different ip address. What do I change it to and how 
do I do this? Can I get any help? Please?

Sent from Outlook Mobile
___
freebsd-jail@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-jail
To unsubscribe, send any mail to "freebsd-jail-unsubscr...@freebsd.org"



Look into VNET and jail.conf for the ability to change IPs inside your 
jail.  Search "vnet zfs jail" to get some HOW-TOs.


Rudy

___
freebsd-jail@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-jail
To unsubscribe, send any mail to "freebsd-jail-unsubscr...@freebsd.org"

Re: Configuring jails

[BulkMailForRudy]

Is IPv4 working?

 ping 8.8.8.8

Is DNS working?

 host fb.com

Is IPv6 working?

 ping6 fb.com

If you can pass those test, you have networking ready.

Next, can you ping the host for packages?

ping pkg.FreeBSD.org

Maybe pkg is tryign IPv6, try this:
 ping6 pkg.FreeBSD.org


Based on your error (resolver), your DNS is hosed.


Rudy


On 5/4/20 4:07 PM, Brandon helsley wrote:

Message: error fetching 
HTTP://pkg.FreeBSD.org/FreeBSD:12:amd64/quarterly/Latest/pkg.txz: 
Non-recoverable resolver failure
A pre built version of pkg could not be found for your system
Consider changing PACKAGESITE or installing It from ports:...

Sent from Outlook Mobile


From: owner-freebsd-j...@freebsd.org  on behalf of 
Brandon helsley 
Sent: Monday, May 4, 2020 5:03:14 PM
To: Cédric Maunoury 
Cc: freebsd-jail@freebsd.org 
Subject: Re: Configuring jails

What does ping do with those addresses btw? I'm trying to learn as much as 
possible about networking and rounting and don't get the manpages. They are 
very obscure for a beginner. Please share.

Sent from Outlook Mobile


From: owner-freebsd-j...@freebsd.org  on behalf of 
Brandon helsley 
Sent: Monday, May 4, 2020 4:53:46 PM
To: Cédric Maunoury 
Cc: freebsd-jail@freebsd.org 
Subject: Re: Configuring jails

I still can not bootstrap pkg. What is the -c option? I noticed there's a -j 
option, but I don't know what these arguments or options are supposed to do and 
what the commands are I need to issue to get these jails up and running.

Sent from Outlook Mobile

___
freebsd-jail@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-jail
To unsubscribe, send any mail to "freebsd-jail-unsubscr...@freebsd.org"
___
freebsd-jail@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-jail
To unsubscribe, send any mail to "freebsd-jail-unsubscr...@freebsd.org"
___
freebsd-jail@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-jail
To unsubscribe, send any mail to "freebsd-jail-unsubscr...@freebsd.org"


___
freebsd-jail@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-jail
To unsubscribe, send any mail to "freebsd-jail-unsubscr...@freebsd.org"

Re: Configuring jails

[BulkMailForRudy]

On 5/4/20 4:03 PM, Brandon helsley wrote:

I'm trying to learn as much as possible about networking and rounting and don't 
get the manpages. They are very obscure for a beginner.



man pages are important.  If you can master one command and fully 
understand the man page for that one command, you will be able to get 
through other man pages.



try mastering 'ping' if you want to learn networking.

man ping


Read the whole manual page, then try to use what you learned like this:

 ping -i 2 8.8.8.8

 ping -i 0.5 8.8.8.8

ping -c 2 4.2.2.1

Once you understand flags and arguments to a command and how to use the 
man page to understand them, you will be on your way!



Rudy

___
freebsd-jail@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-jail
To unsubscribe, send any mail to "freebsd-jail-unsubscr...@freebsd.org"