[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#806562: freebsd-utils: add jls, jexec support



Hi,

Hideki Yamane wrote:
>  At Tokyo Debian meeting, SUGIMOTO Norimitsu <dictoss@live.jp> demonstrates
>  kFreeBSD and it's interesting. And I heard about it lacks full jail support
>  since jls and jexec doesn't be included. So, I made a patch for it :)

This is brilliant!  I use kfreebsd jails a lot.  I had to install SSH
inside them all so I could run commands inside of them.  Now I can use
jls/jexec which is much easier.  Thanks!

Uploading this to unstable now.  I will try to include it in the
upcoming jessie-kfreebsd release too.

> [norimitu@test-kf2]$ sudo jail -J /var/run/jail/1.jid -c jid=1 \
>   name=jail1 \
>   path=/srv/jail/jail_kf64_1 \
>   host.hostname=jail_kf64_1 \
>   ip4.addr=192.168.22.61 \
>   command=/bin/sh -- -c "/etc/init.d/rc S && /etc/init.d/rc 2"

Just be careful, that by default, /dev/ inside the jail allows access
to all the host system's disks and other things.  To restrict it, you
must create a devfs ruleset, and apply it in the jail before starting
it, explained here:
https://wiki.debian.org/Debian_GNU/kFreeBSD/Jails#Starting_or_stopping_a_jail

Regards,
-- 
Steven Chamberlain
steven@pyro.eu.org

Attachment: signature.asc
Description: Digital signature


Reply to: