Re: vimage-assigning interface to jail

2009-10-02 Thread Julian Elischer
remodeler wrote: Hi: Without doing anything extra except booting, (with no jails started), what happens when you duplicate my commands in the previous email? #jail -c host.hostname=test path=/ vnet persist I substituted persist parameter for command=/bin/tcsh in your example, otherwise the j

Re: vimage-assigning interface to jail

2009-10-02 Thread remodeler
Hi: > Without doing anything extra except booting, (with no jails started), > what happens when you duplicate my commands in the previous email? #jail -c host.hostname=test path=/ vnet persist I substituted persist parameter for command=/bin/tcsh in your example, otherwise the jail is destroyed

Re: vimage-assigning interface to jail

2009-10-02 Thread Julian Elischer
remodeler wrote: Julian wrote: I think you need to add a default rule for starters as there is no route to 192.168.x.x in your jail. tempvnet# route show default route: writing to routing socket: No such process tempvnet# route add default 192.168.0.1 route: writing to routing socket: Networ

Re: vimage-assigning interface to jail

2009-10-02 Thread remodeler
Julian wrote: > I think you need to add a default rule for starters as there is no > route to 192.168.x.x in your jail. tempvnet# route show default route: writing to routing socket: No such process tempvnet# route add default 192.168.0.1 route: writing to routing socket: Network is unreachable

Re: Fw: Re: vimage-assigning interface to jail

2009-10-02 Thread Julian Elischer
remodeler wrote: Thank you Glen: (sorry this copied twice to glen) Do you have your nameserver in /etc/resolv.conf ? The jail and hostname both have /etc/resolv.conf set to a nameserver on the local host. I get the same error message pinging to the private-space address of the physical ethern

Fw: Re: vimage-assigning interface to jail

2009-10-02 Thread remodeler
Thank you Glen: (sorry this copied twice to glen) > Do you have your nameserver in /etc/resolv.conf ? The jail and hostname both have /etc/resolv.conf set to a nameserver on the local host. I get the same error message pinging to the private-space address of the physical ethernet interface (the s

Re: vimage-assigning interface to jail

2009-10-02 Thread Julian Elischer
remodeler wrote: Thank you to Julian for his kind response on my original question. I have succeeded with the "jail [...] vnet [...]" syntax Julian suggested. I looked through the /etc/rc.d/jail script and discovered why I cannot start a vnet jail with the rc mechanism - the vnet parameter to jai

Re: vimage-assigning interface to jail

2009-10-02 Thread Glen Barber
Hi On Fri, Oct 2, 2009 at 6:36 PM, remodeler wrote: [snip] > I wonder if someone might help with a problem I am unable to resolve. I have > no network connectivity from the vnet jail. I have opened the jail completely > up for testing, mounting the host devfs, procfs, allowing raw sockets, and

Re: vimage-assigning interface to jail

2009-10-02 Thread remodeler
Thank you to Julian for his kind response on my original question. I have succeeded with the "jail [...] vnet [...]" syntax Julian suggested. I looked through the /etc/rc.d/jail script and discovered why I cannot start a vnet jail with the rc mechanism - the vnet parameter to jail requires the -c f

vimage-assigning interface to jail

2009-10-01 Thread remodeler
I am experimenting with a vimage-enabled 8.0 kernel with multiple jails. I use the rc.d method to start jails, because of the warning in /etc/rc.d/jails about security. I would like to associate a vnet stack with each jail, and use netgraph to bridge the service jails to the physical interface. The