Re: preferred jail management tool

2015-01-27 Thread Allan Jude
On 2015-01-27 16:21, Dirk Engling wrote: > On 27.01.15 22:12, Miroslav Lachman wrote: > >> Yes. Sometimes I have a feeling that jails or some other features are >> unwanted children. I had PR opened for years with patche to rc.d/jail or >> etc/rc.subr to incorporate nice, or cpuset. And it never f

Re: Future of jail(8) [WAS: preferred jail management tool]

2015-01-27 Thread Allan Jude
On 2015-01-27 12:23, Mark Felder wrote: > > > On Tue, Jan 27, 2015, at 11:17, Dirk Engling wrote: >> On 27.01.15 14:41, Ernie Luzar wrote: >> >>> I hope the ezjail author takes this thread as incentive to keep his >>> utility up to date and not let it die due to changing software in Freebsd >>> b

Re: preferred jail management tool

2015-01-27 Thread Allan Jude
On 2015-01-27 12:17, Dirk Engling wrote: > On 27.01.15 14:41, Ernie Luzar wrote: > >> I hope the ezjail author takes this thread as incentive to keep his >> utility up to date and not let it die due to changing software in Freebsd >> base code. All I am doing is pointing out the facts here. > > I

Re: preferred jail management tool

2015-01-27 Thread Michael W. Lucas
On Wed, Jan 28, 2015 at 10:42:24AM +1300, Peter Toth wrote: >I think Michael didn't really know that he opened Pandora's box by >starting this thread! I keep popcorn on hand for when this happens. Seriously, it's all good discussion and will help inform the book. Me picking one or two t

Re: preferred jail management tool

2015-01-27 Thread Miroslav Lachman
Dirk Engling wrote on 01/27/2015 22:21: On 27.01.15 22:12, Miroslav Lachman wrote: Yes. Sometimes I have a feeling that jails or some other features are unwanted children. I had PR opened for years with patche to rc.d/jail or etc/rc.subr to incorporate nice, or cpuset. And it never found it's w

Re: preferred jail management tool

2015-01-27 Thread Peter Toth
I think Michael didn't really know that he opened Pandora's box by starting this thread! These discussions are long overdue - especially nowadays, when containers are hyped all over the world. On Wed, Jan 28, 2015 at 10:21 AM, Dirk Engling wrote: > On 27.01.15 22:12, Miroslav Lachman wrote: > >

Re: preferred jail management tool

2015-01-27 Thread Dirk Engling
On 27.01.15 22:12, Miroslav Lachman wrote: > Yes. Sometimes I have a feeling that jails or some other features are > unwanted children. I had PR opened for years with patche to rc.d/jail or > etc/rc.subr to incorporate nice, or cpuset. And it never found it's way > to the tree. How's that possibl

Re: preferred jail management tool

2015-01-27 Thread Miroslav Lachman
Peter Toth wrote on 01/27/2015 21:37: [...] A lot of new technologies emerged/matured in FreeBSD in the recent years, we have resource containers (rctl), ZFS, VIMAGE/VNET, cpuset - just to name a few. These are a blessing when it comes to managing/using jails. These (awesome) technologies reall

Re: preferred jail management tool

2015-01-27 Thread Peter Toth
Dirk, I agree with most of that - but in many cases it comes down to simple things like: "the right tool for the right job". In my case there was a need to solve these issues with jails - relatively quickly - so I just decided to do it, instead of "wasting" time (unfortunately my life is very busy)

Re: preferred jail management tool

2015-01-27 Thread Dirk Engling
On 27.01.15 21:37, Peter Toth wrote: > So to answer the question again, jail.conf or the standard rc.d/jail > felt too limiting with a lot of these features simply missing. I completely agree, yet I think that it should not be up to third party tools to implement those features independently and

Re: preferred jail management tool

2015-01-27 Thread Dirk Engling
On 27.01.15 21:36, Valeri Galtsev wrote: > Now I feel ultimately confused. I [still] have all my jail configurations > in /etc/rc.conf, and I can start or stop one of the jails by > > /etc/rc.d/jail [start|stop] jailname > > If I switch all configurations to /etc/jail.conf, will the same command

Re: preferred jail management tool

2015-01-27 Thread Peter Toth
What I was missing the most was a simple out of the box experience with safe defaults for the end user with the ability to change properties in an atomic fashion. Also, jail(8) or jail.conf is by no means a comprehensive tool for managing all jail aspects. A lot of new technologies emerged/matured

Re: preferred jail management tool

2015-01-27 Thread Valeri Galtsev
On Tue, January 27, 2015 2:11 pm, Dirk Engling wrote: > On 27.01.15 21:01, Peter Toth wrote: > >> The most important part is jail(8) and properties can be passed to >> jail(8) >> very easily. >> >> This is the very reason I stopped relying on any rc.d/jai or jail.conf >> for >> iocage. It is much

Re: preferred jail management tool

2015-01-27 Thread Dirk Engling
On 27.01.15 21:01, Peter Toth wrote: > The most important part is jail(8) and properties can be passed to jail(8) > very easily. > > This is the very reason I stopped relying on any rc.d/jai or jail.conf for > iocage. It is much easier/simpler to add/modify features when dealing with > jail(8) di

Re: preferred jail management tool

2015-01-27 Thread Peter Toth
A good start could be to leverage something like sysrc(8) for jail configuration (as someone already suggested). Also, nothing enforces the explicit use of jail.conf or reliance on it (it is just another way to set up jails). The most important part is jail(8) and properties can be passed to jail(8

Re: preferred jail management tool

2015-01-27 Thread Valeri Galtsev
On Tue, January 27, 2015 12:05 pm, Dirk Engling wrote: > On 27.01.15 18:54, Valeri Galtsev wrote: > > >> I for one would prefer this ("use vi to edit config files" which are >> plain >> human readable ASCII text). And I will be extremely displeased if config >> files become XML or any other format

Re: preferred jail management tool

2015-01-27 Thread Dirk Engling
On 27.01.15 18:54, Valeri Galtsev wrote: > I for one would prefer this ("use vi to edit config files" which are plain > human readable ASCII text). And I will be extremely displeased if config > files become XML or any other format designed for fancy GUI presentation > of plain information. And i

Re: preferred jail management tool

2015-01-27 Thread Valeri Galtsev
On Tue, January 27, 2015 11:17 am, Dirk Engling wrote: > On 27.01.15 14:41, Ernie Luzar wrote: > >> I hope the ezjail author takes this thread as incentive to keep his >> utility up to date and not let it die due to changing software in >> Freebsd >> base code. All I am doing is pointing out the f

Future of jail(8) [WAS: preferred jail management tool]

2015-01-27 Thread Mark Felder
On Tue, Jan 27, 2015, at 11:17, Dirk Engling wrote: > On 27.01.15 14:41, Ernie Luzar wrote: > > > I hope the ezjail author takes this thread as incentive to keep his > > utility up to date and not let it die due to changing software in Freebsd > > base code. All I am doing is pointing out the fa

Re: preferred jail management tool

2015-01-27 Thread Dirk Engling
On 27.01.15 14:41, Ernie Luzar wrote: > I hope the ezjail author takes this thread as incentive to keep his > utility up to date and not let it die due to changing software in Freebsd > base code. All I am doing is pointing out the facts here. I am reading the thread. And I have been following th

Re: preferred jail management tool

2015-01-27 Thread Mark Felder
On Tue, Jan 27, 2015, at 11:03, Dirk Engling wrote: > On 27.01.15 17:57, Mark Felder wrote: > > > I'll admit that last time I used ezjail I found it frustratingly > > difficult to locate concise documentation on exactly how flavours > > worked, and how to use scripts to do things to the new jail

Re: preferred jail management tool

2015-01-27 Thread Dirk Engling
On 27.01.15 17:57, Mark Felder wrote: > I'll admit that last time I used ezjail I found it frustratingly > difficult to locate concise documentation on exactly how flavours > worked, and how to use scripts to do things to the new jails as well as > copying in the files I wanted. Maybe I just didn'

Re: preferred jail management tool

2015-01-27 Thread Mark Felder
On Tue, Jan 27, 2015, at 10:12, Alejandro Imass wrote: > On Tue, Jan 27, 2015 at 8:41 AM, Ernie Luzar wrote: > > > Ian Smith wrote: > > > > In my opinion any port that does not include complete documentation in > > its man pages is next to useless and many people agree. Ezjail man pages > > la

Re: preferred jail management tool

2015-01-27 Thread Alejandro Imass
On Tue, Jan 27, 2015 at 8:41 AM, Ernie Luzar wrote: > Ian Smith wrote: > >> On Mon, 26 Jan 2015 19:23:48 -0600, Mark Linimon wrote: >> [Sean Chittenden wrote:] >> > > > For years I've used and endorsed ezjail, but as stated, it is >> depreciated. >> > > Hmm, there's no notation at >> > http:/

Re: preferred jail management tool

2015-01-27 Thread Ian Smith
On Tue, 27 Jan 2015 08:24:36 -0600, Mark Felder wrote: > On Tue, Jan 27, 2015, at 08:17, Mark Felder wrote: > > On Tue, Jan 27, 2015, at 07:41, Ernie Luzar wrote: > > > > > Vimage has to be compiled into the kernel and its kernel compile option > > > has comment that it is highly experimental

Re: preferred jail management tool

2015-01-27 Thread Mark Felder
On Tue, Jan 27, 2015, at 08:17, Mark Felder wrote: > On Tue, Jan 27, 2015, at 07:41, Ernie Luzar wrote: > > > Vimage has to be compiled into the kernel and its kernel compile option > > has comment that it is highly experimental. > > No it doesn't. > > # Network stack virtualization. > #option

Re: preferred jail management tool

2015-01-27 Thread Mark Felder
On Tue, Jan 27, 2015, at 07:41, Ernie Luzar wrote: > > On the subject of vimage/vnet, vimage has many outstanding PRs and has > received absolutely no maintenance since it was first published. This statement is ridiculous. r276747 | rodrigc | 2015-01-06 03:03:03 -0600 (Tue, 06 Jan 2015) | 7 lin

Re: preferred jail management tool

2015-01-27 Thread Ernie Luzar
Ian Smith wrote: On Mon, 26 Jan 2015 19:23:48 -0600, Mark Linimon wrote: [Sean Chittenden wrote:] > > > For years I've used and endorsed ezjail, but as stated, it is depreciated. > > Hmm, there's no notation at > http://portsmon.freebsd.org/portoverview.py?category=sysutils&portname=ezjai