Re: rc.conf kld_list vs kern.securelevel

2018-05-18 Thread Andreas Nilsson
On Fri, May 18, 2018 at 3:48 PM, Allan Jude wrote: > On 2018-05-18 07:04, Andreas Nilsson wrote: > > Hello, > > > > I recently configured a system where kern.securelevel=1 would be good, > but > > noticed that modules listed in kld_list in rc.conf is then not load

rc.conf kld_list vs kern.securelevel

2018-05-18 Thread Andreas Nilsson
Hello, I recently configured a system where kern.securelevel=1 would be good, but noticed that modules listed in kld_list in rc.conf is then not loaded. Would it not be a good to either explicitly state that kld_list cannot be used with kern.securelevel, or have kld run before sysctl? Best regard

Re: Configure jail in /etc/jail.my-jail-name.conf while allowing auto-start with "service jail start"

2018-05-15 Thread Andreas Nilsson
On Tue, May 15, 2018 at 1:17 PM, Andreas Sommer via freebsd-jail < freebsd-jail@freebsd.org> wrote: > Hi all, > > as I can see, this combination simply isn't part of /etc/rc.d/jail and > jail(8). > In fact, jail(8) always only reads one config file (`-f` parameter, default > /etc/jail.conf). > > T

Re: new jail framework with vnet, zfs and jail.conf support

2014-05-13 Thread Andreas Nilsson
On Tue, May 13, 2014 at 2:40 PM, Fbsd8 wrote: > Andreas Nilsson wrote: > >> >> >> >> On Tue, May 13, 2014 at 2:11 PM, Fbsd8 > fb...@a1poweruser.com>> wrote: >> >> >> freebsd_j...@dachev.info <mailto:freebsd_j...@dachev.info> wro

Re: Can Firefox break out of a jail

2014-05-05 Thread Andreas Nilsson
On Mon, May 5, 2014 at 1:58 PM, Erich Dollansky wrote: > Hi, > > I do some experimenting with jails at the moment on a FreeBSD 10.0 > machine. The jails are all setup manually according to the handbook and > man jail. Each jail gets a name and an IP address. Individual ports are > then installed

Re: vnet jails and rc-scripts

2013-02-27 Thread Andreas Nilsson
On Wed, Feb 27, 2013 at 5:44 AM, Jamie Gritton wrote: > On 02/26/13 01:56, Andreas Nilsson wrote: > > However I still don't get the purpose of the security.jail.param.*. Are >> the >> to be set in loader.conf/sysctl.conf to influence default config of jails, >&g

Re: vnet jails and rc-scripts

2013-02-26 Thread Andreas Nilsson
eas > -- > Devin > > ________ > From: owner-freebsd-j...@freebsd.org [owner-freebsd-j...@freebsd.org] on > behalf of Andreas Nilsson [andrn...@gmail.com] > Sent: Monday, February 25, 2013 8:55 AM > To: Mailinglists FreeBSD > Subject: vnet jails and

vnet jails and rc-scripts

2013-02-25 Thread Andreas Nilsson
Hello, while trying to set up a couple of vnet jails I ran into some problems: 1. The networking scripts are not run. 2. The firewall script ( ipfw ) is not run. Both are skipped since they have the nojail keyword. Is the only solution to remove that keyword to get them running from rc in a jai

Re: jail.conf and rc.conf

2013-02-25 Thread Andreas Nilsson
On Mon, Feb 25, 2013 at 3:16 PM, Lars Engels wrote: > On Mon, Feb 25, 2013 at 02:50:55PM +0100, Andreas Nilsson wrote: > > Hello, > > > > I needed to set up some jails, and since it has been a while since I did > I > > decided to read a bit about it. I stumble

jail.conf and rc.conf

2013-02-25 Thread Andreas Nilsson
Hello, I needed to set up some jails, and since it has been a while since I did I decided to read a bit about it. I stumbled upon the file /etc/jail.conf, which I found very nice. Now my question: How do I specify that jails in listed in jail_list in rc.conf should use jail.conf for their paramet

Re: Emulating different versions of FreeBSD

2010-02-18 Thread Andreas Nilsson
On Thu, Feb 18, 2010 at 6:26 PM, Mark Linimon wrote: > On Thu, Feb 18, 2010 at 04:54:08PM +0100, Andreas Nilsson wrote: > > Could the jail architecture be used to run/emulate different versions of > > FreeBSD on the same machine? > > portmgr does that on the package build

Emulating different versions of FreeBSD

2010-02-18 Thread Andreas Nilsson
Hello, I need do build packages for some different versions of FreeBSD ( 7.1, 7.2 and 8.0 ) and today I'm running a xen domU for each version, which is not optimal for performance. Could the jail architecture be used to run/emulate different versions of FreeBSD on the same machine? My idea was to