Re: ipsec tunnel and vnet jails: routing, howto?

2015-12-27 Thread Julian Elischer
On 27/12/2015 4:24 AM, Michael Grimm wrote: Hi, I am currently stuck, somehow, and I do need your input. Thus, let me explain, what I do want to achieve: I do have two servers connected via an ipsec/tunnel ... [A] dead:beef:1234:abcd::1 <—> dead:feed:abcd:1234::1 [B] … which is sending

Re: [jail] Allowing root privledged users to renice

2012-05-25 Thread Julian Elischer
On 5/25/12 10:04 AM, Bjoern A. Zeeb wrote: On 25. May 2012, at 16:48 , Sean Bruno wrote: I've been toying with the idea of letting jails renice processes ... how dangerous and/or stupid is this idea? //depot/yahoo/ybsd_9/src/sys/kern/kern_jail.c#5 - /home/seanbru/ybsd_9/src/sys/kern/kern_

Re: PID/UID namespaces

2012-05-21 Thread Julian Elischer
On 5/21/12 6:47 AM, David Windsor wrote: Hi, While doing some research on FreeBSD jails, I came across an item in the jails' TODO: - be able to have a separate PID space for it - be able to specify a separate UID space for it In other projects, these goals have been accomplished using

Re: setfib mount

2011-03-23 Thread Julian Elischer
On 3/23/11 3:05 AM, Albert Shih wrote: Le 22/03/2011 à 13:39:33-0700, Julian Elischer a écrit On 3/22/11 6:14 AM, Albert Shih wrote: Hi all Sorry for the cross-posting. I don't known which list is the best. I'm using freebsd-jail since 5.x and yesterday I upgrading (from 7.3 to 7

Re: setfib mount

2011-03-22 Thread Julian Elischer
On 3/22/11 6:14 AM, Albert Shih wrote: Hi all Sorry for the cross-posting. I don't known which list is the best. I'm using freebsd-jail since 5.x and yesterday I upgrading (from 7.3 to 7.4). I've see the setfib working now pretty well with the jail. So I using two routing table. One for the ho

Re: VirtualBox Headless inside a jail

2010-03-04 Thread Julian Elischer
Wolfgang Riegler wrote: Hi, I would like to setup VirtualBox headless with the VNC-patch and vboxweb inside a jail. Is this possible? I use FreeBSD 8.0-p2 amd64. regards Wolfgang ___ freebsd-virtualizat...@freebsd.org mailing list http://lists.free

Re: Vimage vs. jails

2009-08-18 Thread Julian Elischer
Pierre Guinoiseau wrote: Hi, Julian Elischer wrote: it's not Vimage vs Jails but Vimage as part of Jails. Peter Cornelius wrote: Hi there, I just see the vimage changes going into RELENG_8 and I now am getting my hands dirty, finally. So thanks to all involved. Just to get my head a

Re: Hierarchical jails

2009-05-15 Thread Julian Elischer
Jilles Tjoelker wrote: On Thu, May 14, 2009 at 11:12:50AM -0600, Jamie Gritton wrote: There's still a change to offer your input on the new jails before they go in! OK, given the lack of response so far, it's less "still a chance" than "please?". Current plans are to have this in place for 8.0

Re: Hierarchical jails

2009-05-14 Thread Julian Elischer
Jamie Gritton wrote: There's still a change to offer your input on the new jails before they go in! OK, given the lack of response so far, it's less "still a chance" than "please?". Current plans are to have this in place for 8.0, with connections to the ongoing Vimage work. Hopefully the sile

Re: Hierarchical jails

2009-05-09 Thread Julian Elischer
Jamie Gritton wrote: Here's the first round of hierarchical jails under the new framework. Instead of creds having either a prison or a NULL pointer, they all have a prison pointer with the default being the global "prison0" that contains information about the real environment. Jailed root may

Re: Hierarchical jails - any current work?

2007-09-19 Thread Julian Elischer
James Gritton wrote: please please please familiarise yourself with the Vimage code that Marko Zec is working on. This is the stuff at http://imunes.tel.fer.hr/virtnet/, right? I take it that's the definitive place to go. I recall having looked at that before, and I guess I was thrown off b

Re: Hierarchical jails - any current work?

2007-09-19 Thread Julian Elischer
James Gritton wrote: Pawel Jakub Dawidek wrote: Something like this: http://garage.freebsd.pl/mljail.README I did it some time ago, and this is one of the feature for new jail implementation with is beeing designed Yes, that's just the thing I'm talking about, so it looks like I have ind

Re: Hierarchical jails - any current work?

2007-09-19 Thread Julian Elischer
Pawel Jakub Dawidek wrote: On Tue, Sep 18, 2007 at 03:03:12PM -0600, James Gritton wrote: I've been doing some work on a hierarchical jail setup, but I've got this nagging feeling it's been done before. Does anyone know of such an existing project? If not, I'll put forward my own code. Somet

Re: Running jails on multiple subnets with multiple interfaces

2007-08-29 Thread Julian Elischer
Josh Paetzel wrote: Jeffrey Williams wrote: I have a server with two interfaces, I want to run the host and a couple of jails using one interface on one subnet (internal interface, private IP, behind NAT/firewall) and some other jails using the other interface on another subnet (external inter