Can Firefox break out of a jail

Hi, I do some experimenting with jails at the moment on a FreeBSD 10.0 machine. The jails are all setup manually according to the handbook and man jail. Each jail gets a name and an IP address. Individual ports are then installed via the ports tree. X is running on the host system. Telnet is used

Re: Can Firefox break out of a jail

Hi, On Mon, 05 May 2014 08:22:37 -0400 Fbsd8 wrote: > Erich Dollansky wrote: > > Hi, > > > > I do some experimenting with jails at the moment on a FreeBSD 10.0 > > machine. The jails are all setup manually according to the handbook > > and man jail. Each j

Re: Can Firefox break out of a jail

Hi, On Mon, 5 May 2014 14:27:23 +0200 Andreas Nilsson wrote: > On Mon, May 5, 2014 at 1:58 PM, Erich Dollansky > > wrote: > > > Firefox is a strange beast in regarads to running it on a remote host. > > It needs to be started as firefox --no-remote to not find "

Re: cannot access internet from jail, help needed please

Hi, On Sun, 01 Jun 2014 03:14:17 +0300 s7r wrote: > > 2. My server has 3 public IPv4 addresses. Add one of them as an alias > (for the jail): > # ifconfig em0 alias netmask 255.255.255.255 > # echo 'ifconfig_em0_alias0="inet netmask 255.255.255.255"' >> > /etc/rc.conf > I always prepare the

no network connection from inside a jail

Hi, I recently upgraded to 10.1 BETA3 via sources. All seemed to be fine until I started jails which connect to the Internet. It simply does not work anymore. When the browser from the jail connects to another jail on the same machine via HTTP, it all works. Accesses to the ouside of the machine f

Re: no network connection from inside a jail

Hi, On Thu, 02 Oct 2014 06:50:35 -0600 James Gritton wrote: > On 10/2/2014 4:05 AM, Erich Dollansky wrote: > > Hi, > > > > I recently upgraded to 10.1 BETA3 via sources. All seemed to be fine > > until I started jails which connect to the Internet. It simply does >

Re: no network connection from inside a jail

Hi, On Thu, 2 Oct 2014 08:10:16 -0600 (MDT) Warren Block wrote: > On Thu, 2 Oct 2014, Erich Dollansky wrote: > > > Hi, > > > > I recently upgraded to 10.1 BETA3 via sources. All seemed to be fine > > until I started jails which connect to the Internet. It simply d

Re: no network connection from inside a jail

Hi, On Thu, 02 Oct 2014 10:46:17 -0400 Allan Jude wrote: > On 2014-10-02 06:05, Erich Dollansky wrote: > > despite having > > > > security.jail.allow_raw_sockets: 1 > > > Isn't allow_raw_sockets a per-jail setting via the new jail.conf > system now? >

Re: no network connection from inside a jail

Hi, On Thu, 2 Oct 2014 21:56:55 +0300 George Kontostanos wrote: > > > > which I did not notice before the upgrade. > > > > What I did not mention before. I am able to connect to the jails via > > telnet from the machine's rooot but not from any other machine. > > > > Of course, the setup worked

Re: no network connection from inside a jail

Hi, On Thu, 02 Oct 2014 12:28:23 -0400 Fbsd8 wrote: > Erich Dollansky wrote: > > I recently upgraded to 10.1 BETA3 via sources. All seemed to be fine > > until I started jails which connect to the Internet. It simply does > > not work anymore. When the browser from

Re: no network connection from inside a jail

Hi, On Thu, 02 Oct 2014 09:35:20 -0600 James Gritton wrote: > On 10/2/2014 4:05 AM, Erich Dollansky wrote: > > > > I recently upgraded to 10.1 BETA3 via sources. All seemed to be fine > > until I started jails which connect to the Internet. It simply does > > not wor

Re: FreeBSD 10.1-RC1 Now Available --- lagg disables network inside jails

Hi, On Sat, 4 Oct 2014 21:32:47 -0400 Glen Barber wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > The first RC build of the 10.1-RELEASE release cycle is now available I installed this shortly after your e-mail came. The result was the same as with BETA3. If you remember, I have

Re: FreeBSD 10.1-RC1 Now Available --- lagg disables network inside jails

Hi, On Sun, 5 Oct 2014 11:38:47 -0500 Scot Hetzel wrote: > On Sun, Oct 5, 2014 at 7:34 AM, Erich Dollansky > wrote: > > On Sat, 4 Oct 2014 21:32:47 -0400 > > Glen Barber wrote: > > > >> The first RC build of the 10.1-RELEASE release cycle is now > >>

Re: FreeBSD 10.1-RC1 Now Available --- lagg disables network inside jails

firmware as YAMAMOTO Shigeru suggested. Erich On Sun, 5 Oct 2014 11:38:47 -0500 Scot Hetzel wrote: > On Sun, Oct 5, 2014 at 7:34 AM, Erich Dollansky > wrote: > > Hi, > > > > On Sat, 4 Oct 2014 21:32:47 -0400 > > Glen Barber wrote: > > > >> -BE

Re: preferred jail management tool

Hi, my preferred jail management tools are my own scripts. I think that it is a matter on the number of jails someone needs and how different they are. Learning first a tool to manage jails means that you also have to learn jails or you will only use the features supported by the management tool

Re: corrupted file systems with jail

Hi, On Tue, 24 Mar 2015 20:11:35 + ANDREW CARTON via freebsd-jail wrote: > So, followed the guidelines from the Handbook in section 15.5 > Updating Multiple Jails. I get everything to build, and then I can > run jails, but when the system reboots. The file system on the > partition is all

Re: Leveraging system hostname as part of a jail's hostname

Hi, I use a script that generates the configuration file when the jail is created. This should work for you too. Erich On Tue, 19 Jun 2018 22:41:15 -0400 Joseph Ward wrote: > Hi everyone, > > I have several jails, configured via jail.conf, whose hostname I want > to make: $name.$system_hos