Re: Application Jail Shutdown Problem

2019-05-01 Thread Isaac (.ike) Levy
Hi Jamie, all, >> On May 1, 2019, at 5:33 PM, James Gritton wrote: >> >>> On 2019-05-01 09:22, Michael W. Lucas wrote: >>> On Wed, May 01, 2019 at 08:53:18AM -0600, James Gritton wrote: On 2019-04-30 12:03, squiggly foo wrote: Hi All, I use the mount.fstab parameter to mount

Re: does anyone use these any more?

2018-09-13 Thread Isaac (.ike) Levy
Hi MWL, On Thu, Sep 13, 2018, at 9:11 AM, Michael W. Lucas wrote: > Hi, > > Context: I'm writing a book on jails on FreeBSD. CAN'T WAIT. > > There's a few options that I can't figure out why anyone would use > them. Does anyone use any of these any more, or are they leftovers > from the primor

Re: Jails routing and localhost

2018-01-18 Thread Isaac (.ike) Levy
Hi Ole, I cannot comment on ezjail specifics, but can add notes on how jails fundamentally handle localhost, which may help you, On Thu, Jan 18, 2018, at 7:23 AM, Ole wrote: > Hi, > > I have some questions about how routing works for jails. > > I have a FreeBSD 11.1 host in a datacenter. Whic

Re: multiple interfaces for jail.conf(1) and jail_set(2)

2016-12-14 Thread Isaac (.ike) Levy
Wow, > On Dec 14, 2016, at 3:53 PM, Michael Grimm wrote: > >> Two questions though: >> >> - I’m confused how you define the shell style $ variables in your individual >> jail settings above, e.g. ‘$ip4_addr_2 = 10.1.1.2;’, why/how does that work? >> Is that a variable to be expanded, or some

Re: multiple interfaces for jail.conf(1) and jail_set(2)

2016-12-14 Thread Isaac (.ike) Levy
Wow, that’s rad Michael, > On Dec 14, 2016, at 3:30 PM, Michael Grimm wrote: > > Isaac (.ike) Levy wrote: > >> Can I specify multiple IP interfaces and assign IP’s to them using jail.conf? > > Not sure if I understand your question correctly, but I do define the >

Re: multiple interfaces for jail.conf(1) and jail_set(2)

2016-12-14 Thread Isaac (.ike) Levy
>> In ezjail I can just do this: >> > > Of course, it is great to learn that some tools can do this or that. > However, this only is helpful to those who are just choosing what to use > for the future. Once your choice is made, you (at least I) kind of avoid > jumping over to doing something usi

Re: multiple interfaces for jail.conf(1) and jail_set(2)

2016-12-14 Thread Isaac (.ike) Levy
Hi Alan, > On Dec 14, 2016, at 12:43 AM, Allan Jude wrote: > > In ezjail I can just do this: > > > export > jail_something_scaleengine_net_ip="vlan43|10.0.0.17,vlan43|2001:470:1::1:6667,lo0|127.0.3.1" > > If you include the interface name like that, it will automatically add > the alias when

Re: multiple interfaces for jail.conf(1) and jail_set(2)

2016-12-14 Thread Isaac (.ike) Levy
> On Dec 14, 2016, at 8:31 AM, Valeri Galtsev wrote: > >>> no, this is not possible. Jail can only have one IP address (in addition >>> to loopback addresses). >> >> Do you mean this just for jail.conf configuration/usage? > > No, that was earlier, in /etc/rc.conf. Since then I've heard that i

Re: multiple interfaces for jail.conf(1) and jail_set(2)

2016-12-13 Thread Isaac (.ike) Levy
Hi Valeri, > On Dec 13, 2016, at 5:03 PM, Valeri Galtsev wrote: > > On Tue, December 13, 2016 2:14 pm, Isaac (.ike) Levy wrote: >> Hi All, >> >> Can I specify multiple IP interfaces and assign IP’s to them using >> jail.conf? >> I have jails with I

Re: multiple interfaces for jail.conf(1) and jail_set(2)

2016-12-13 Thread Isaac (.ike) Levy
Oh, > On Dec 13, 2016, at 10:21 PM, Ian Smith wrote: > > On Wed, 14 Dec 2016 10:09:58 +0800, Ernie Luzar wrote: > >> I recommend you check out these ports, >> jail-primer gives background on jails across Freebsd releases. >> qjail a utility that simplifies jail admin. > > Joe Barbish, > > ple

Re: multiple interfaces for jail.conf(1) and jail_set(2)

2016-12-13 Thread Isaac (.ike) Levy
Thanks Ernie, But, that straight out did not work for me, > On Dec 13, 2016, at 9:09 PM, Ernie Luzar wrote: > > Isaac (.ike) Levy wrote: >> Hi All, >> Can I specify multiple IP interfaces and assign IP’s to them using jail.conf? >> I have jails with IPv4/IPv6 add

multiple interfaces for jail.conf(1) and jail_set(2)

2016-12-13 Thread Isaac (.ike) Levy
Hi All, Can I specify multiple IP interfaces and assign IP’s to them using jail.conf? I have jails with IPv4/IPv6 addresses on multiple physical interfaces, as well as assigning a loopback. I have not found answers in the respective man pages or digging online. I’m finally starting to poke arou

Re: Changing jail's IP automatically

2016-09-03 Thread Isaac (.ike) Levy
sent from my mobile > On Sep 3, 2016, at 4:52 PM, Konstantin Belousov wrote: > > I use private address in the jail, and NAT it on outside interface. > This worked fine on a roaming laptop with DHCP, several years ago. Solid advice for this applied use, nat setup either 1:1 mapping or port fo

vimage update notice

2013-01-23 Thread Isaac (.ike) Levy
Hi All, The doc team is trying to publish a list of upcoming features, (gjb and eitan). Would anyone care to spot check or comment below, before I respond to the doc list? Thanks! Best, .ike ORIGINAL http://lists.freebsd.org/pipermail/freebsd-doc/attachments/20130116/695e9547/attac

Re: building with "CLANG"

2013-01-14 Thread Isaac (.ike) Levy
Hi Guys, I can't bring myself to top-post on a BSD list, And I'm in a particularly verbose mood as I debug an unrelated nasty mess, On Jan 14, 2013, at 9:30 PM, ot...@ahhyes.net wrote: > > > Hi Alexus, > > I could, but it's going to be time consuming. There is > almost no clues (even with

Re: kern/68189 and kern/169751: what jails are allowed to see in a routing socket

2013-01-03 Thread Isaac (.ike) Levy
Hi Jamie, All, On Jan 3, 2013, at 4:36 AM, Bjoern A. Zeeb wrote: > On Wed, 2 Jan 2013, Jamie Gritton wrote: > >> I've been looking at PR kern/169751, which was noting that routing sockets >> don't work inside a jail. It made the point that setting >> security.jail.socket_unixiproute_only or s