Re: state of the art ?

2013-04-25 Thread Laurent Alebarde
Thanks Nikos. I am waiting now for someone to complete your answer regarding pf/altq in the host. ___ freebsd-jail@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-jail To unsubscribe, send any mail to "freebsd-jail-unsubscr...

Re: state of the art ?

2013-04-25 Thread Nikos Vassiliadis
On 04/25/2013 02:49 PM, Laurent Alebarde wrote: I am afraid you have convinced me with zulu to go on. oh I see:) Though not being able to use dummynet nor altq is a real drawback. But if I don't abuse myself, I read contradictory things. So I raise the question : Is pf/altq usable in the

Re: automatic garbage collection of stuff mounted (etc.) by jailed root

2013-04-25 Thread Jamie Gritton
On 04/25/13 08:58, Mateusz Guzik wrote: On Wed, Apr 24, 2013 at 07:40:21PM -0600, Jamie Gritton wrote: On 04/24/13 19:22, Mateusz Guzik wrote: On Mon, Apr 22, 2013 at 12:29:38PM -0600, Jamie Gritton wrote: On 04/22/13 11:39, Miroslav Lachman wrote: This already happens when jails are created

Re: automatic garbage collection of stuff mounted (etc.) by jailed root

2013-04-25 Thread Mateusz Guzik
On Wed, Apr 24, 2013 at 07:40:21PM -0600, Jamie Gritton wrote: > On 04/24/13 19:22, Mateusz Guzik wrote: > >On Mon, Apr 22, 2013 at 12:29:38PM -0600, Jamie Gritton wrote: > >>On 04/22/13 11:39, Miroslav Lachman wrote: > This already happens when jails are created using a jail.conf file. Any > >

Re: state of the art ?

2013-04-25 Thread Laurent Alebarde
I am afraid you have convinced me with zulu to go on. Though not being able to use dummynet nor altq is a real drawback. But if I don't abuse myself, I read contradictory things. So I raise the question : Is pf/altq usable in the host when you have vnet jails ? Same question with dummynet

Re: state of the art ?

2013-04-25 Thread Nikos Vassiliadis
On 04/25/2013 07:40 AM, zulu wrote: VNET is supported and there is a "soft" jail restart option which prevents the "kern/164763: Memory leak in VNET" issue from appearing. This is a really interesting workaround! Yes, ipfw is vnet-capable since a long time and it works as good as the non-virtu

Re: state of the art ?

2013-04-25 Thread Laurent Alebarde
zulu writes: > > > No patches are mentioned in the README, there was a simple change > required forĀ  /etc/rc.d/devfs on 9.0 which is not needed anymore with > 9.1. Thanks for the precision and update. > VNET is not officially production ready, this is relative though, as > some folks are alr

Re: state of the art ?

2013-04-25 Thread Laurent Alebarde
Thank you Dave, I have posted some questions on the author's site. Can you manage thin jails with it ? What about ZFS ? ___ freebsd-jail@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-jail To unsubscribe, send any mail to "fr

Re: state of the art ?

2013-04-25 Thread zulu
No patches are mentioned in the README, there was a simple change required forĀ  /etc/rc.d/devfs on 9.0 which is not needed anymore with 9.1. The rest of the optional changes (not required) are related to VNET and ZFS management inside the jail - if needed.. VNET is not officially production read

Re: state of the art ?

2013-04-25 Thread Laurent Alebarde
Thanks very much zulu. It looks great but there are very few downloads and reading the README, it requires some patches. So I won't take the risk to put it in production. If I was an expert, I think I would give it a try, but I am not and I cannot. __