On the use of jails in FreeBSD and the various patches and extensions for them.

FreeBSD bugmaster | 2 Nov 2009 12:06

Picon

freebsd-jail@...

Note: to view an individual PR, use:
  http://www.freebsd.org/cgi/query-pr.cgi?pr=(number).

The following is a listing of current problems submitted by FreeBSD users.
These represent problem reports covering all versions including
experimental development code and obsolete releases.

S Tracker      Resp.      Description
--------------------------------------------------------------------------------
o kern/133265  jail       [jail] is there a solution how to run nfs client in ja
o kern/119842  jail       [smbfs] [jail] "Bad address" with smbfs inside a jail
o bin/99566    jail       [jail] [patch] fstat(1) according to specified jid
o bin/32828    jail       [jail] w(1) incorrectly handles stale utmp slots with 

4 problems total.

FreeBSD bugmaster | 9 Nov 2009 12:06

Picon

freebsd-jail@...

Note: to view an individual PR, use:
  http://www.freebsd.org/cgi/query-pr.cgi?pr=(number).

The following is a listing of current problems submitted by FreeBSD users.
These represent problem reports covering all versions including
experimental development code and obsolete releases.

S Tracker      Resp.      Description
--------------------------------------------------------------------------------
o kern/133265  jail       [jail] is there a solution how to run nfs client in ja
o kern/119842  jail       [smbfs] [jail] "Bad address" with smbfs inside a jail
o bin/99566    jail       [jail] [patch] fstat(1) according to specified jid
o bin/32828    jail       [jail] w(1) incorrectly handles stale utmp slots with 

4 problems total.

Vagif Zeynalov | 15 Nov 2009 23:54

Broadcast under Jail problems

Hi All!

I use the mediatomb package as the UPNP/DLNA media server under under jail.
But after upgrade from 7.0 Release to the 7.2 Current, the mediatomb doesn't work any more.
Two days ago I've upgraded to the 8.0RC3, and problem still present.

I think it is some security issue, but I have not any idea how to open broadcasting for a jailed process.
Without jail the mediatomb works fine.

May be someone already experienced the same problem and know how to fix it?

Jail's settings:
=========
jail_set_hostname_allow="NO"
jail_socket_unixiproute_only="YES"
jail_sysvipc_allow="YES"
jail_allow_raw_sockets="YES"

jail_upnp_rootdir="$jail_dir/upnp"
jail_upnp_hostname="upnp.local"
jail_upnp_interface="sk0"
jail_upnp_ip="sk0|192.168.22.103/24,lo0|127.0.0.2/8,msk0|192.168.23.103/24"
jail_upnp_exec_start="/bin/sh /etc/rc"
jail_upnp_exec_stop="/bin/sh /etc/rc.shutdown"
jail_upnp_devfs_enable="YES"
jail_upnp_fdescfs_enable="NO"
jail_upnp_procfs_enable="YES"
jail_upnp_mount_enable="NO"
jail_upnp_devfs_ruleset="10"
jail_upnp_mount_enable="YES"

(Continue reading)

Bjoern A. Zeeb | 16 Nov 2009 08:07

Re: Broadcast under Jail problems

On Mon, 16 Nov 2009, Vagif Zeynalov wrote:

Hi,

> ...I can provide more details if it will be necessary...

error ogs from the application would be interesting to see which
(sys)call return which error so that we can narrow it down.

/bz

--

-- 
Bjoern A. Zeeb         It will not break if you know what you are doing.

FreeBSD bugmaster | 16 Nov 2009 12:06

Picon

freebsd-jail@...

Note: to view an individual PR, use:
  http://www.freebsd.org/cgi/query-pr.cgi?pr=(number).

The following is a listing of current problems submitted by FreeBSD users.
These represent problem reports covering all versions including
experimental development code and obsolete releases.

S Tracker      Resp.      Description
--------------------------------------------------------------------------------
o kern/133265  jail       [jail] is there a solution how to run nfs client in ja
o kern/119842  jail       [smbfs] [jail] "Bad address" with smbfs inside a jail
o bin/99566    jail       [jail] [patch] fstat(1) according to specified jid
o bin/32828    jail       [jail] w(1) incorrectly handles stale utmp slots with 

4 problems total.

Vagif Zeynalov | 16 Nov 2009 14:14

Re: Broadcast under Jail problems


>> ...I can provide more details if it will be necessary...
>
> error ogs from the application would be interesting to see which
> (sys)call return which error so that we can narrow it down.
>

You know, to make the answer I just rebuild the mediatomb on the clear jail 
machine and... the problem has been disappeared!
It's very strange, because I already did it before few times.

Whatever, sorry guys for disturb. )
I have to investigate, what did I change at last night in the system.

Regards,
Vagif

Scheithauer, Lars (FH | 17 Nov 2009 10:18

Picon

Networking from jail

Hi everyone!

I'm having a little trouble with my jail's networking and I'm not sure
what to make of it.

My jailhost has an IP of x.y.z.48, my test jail is x.y.z.49. The
jailhost has both IP-adresses, the jail has just it's own:

Jail# ifconfig
bce0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu
1500

options=1bb<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,JUMBO_MTU,VLAN_HWCSUM,
TSO4>
        ether xx:xx:xx:xx:xx:10
        inet x.y.z.60 netmask 0xffffffc0 broadcast x.y.z.63
        media: Ethernet autoselect (1000baseSX <full-duplex>)
        status: active
[...]
Host# ifconfig
bce0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu
1500

options=1bb<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,JUMBO_MTU,VLAN_HWCSUM,
TSO4>
        ether xx:xx:xx:xx:xx:10
        inet x.y.z.61 netmask 0xffffffc0 broadcast x.y.z.63
        inet x.y.z.60 netmask 0xffffffc0 broadcast x.y.z.63
        media: Ethernet autoselect (1000baseSX <full-duplex>)
        status: active

(Continue reading)

Scheithauer, Lars (FH | 17 Nov 2009 10:48

Picon

Networking from jail - errata

Quick note:
Forgot to replace two values.
Jail - x.y.z.61
Host - x.y.z.60
Router - x.y.z.62

-----Ursprüngliche Nachricht-----
Von: owner-freebsd-jail@...
[mailto:owner-freebsd-jail@...] Im Auftrag von
Scheithauer, Lars (FH)
Gesendet: Dienstag, 17. November 2009 10:19
An: freebsd-jail@...
Betreff: Networking from jail

Hi everyone!

I'm having a little trouble with my jail's networking and I'm not sure
what to make of it.

My jailhost has an IP of x.y.z.48, my test jail is x.y.z.49. The
jailhost has both IP-adresses, the jail has just it's own:

Jail# ifconfig
bce0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu
1500

options=1bb<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,JUMBO_MTU,VLAN_HWCSUM,
TSO4>
        ether xx:xx:xx:xx:xx:10
        inet x.y.z.60 netmask 0xffffffc0 broadcast x.y.z.63

(Continue reading)

Bjoern A. Zeeb | 17 Nov 2009 11:40

Re: Networking from jail - errata

On Tue, 17 Nov 2009, Scheithauer, Lars (FH) wrote:

Hi,

> Quick note:
> Forgot to replace two values.
> Jail - x.y.z.61
> Host - x.y.z.60
> Router - x.y.z.62
>
>
> -----Ursprüngliche Nachricht-----
> Von: owner-freebsd-jail@...
[mailto:owner-freebsd-jail@...g] Im Auftrag von
Scheithauer, Lars (FH)
> Gesendet: Dienstag, 17. November 2009 10:19
> An: freebsd-jail@...
> Betreff: Networking from jail
>
> Hi everyone!
>
> I'm having a little trouble with my jail's networking and I'm not sure
> what to make of it.
>
> My jailhost has an IP of x.y.z.48, my test jail is x.y.z.49. The
> jailhost has both IP-adresses, the jail has just it's own:
>
> Jail# ifconfig
> bce0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu
> 1500

(Continue reading)

Scheithauer, Lars (FH | 17 Nov 2009 12:18

Picon

AW: Networking from jail - errata

Hi Bjoern,

thanks for the clarification, I changed the values according to your suggestions. However, it did not
resolve the problem.

I've checked the proxy logfiles and it seems, that the Makefile(s) don't try to access the proxy at all while
fetching files. Is there any reason, why the Makefile(s) should not use the *_PROXY-variables on the jails?

Best Regards,
Lars

-----Ursprüngliche Nachricht-----
Von: owner-freebsd-jail@...
[mailto:owner-freebsd-jail@...] Im Auftrag von Bjoern A. Zeeb
Gesendet: Dienstag, 17. November 2009 11:41
An: Scheithauer, Lars (FH)
Cc: freebsd-jail@...
Betreff: Re: Networking from jail - errata

On Tue, 17 Nov 2009, Scheithauer, Lars (FH) wrote:

Hi,

> Quick note:
> Forgot to replace two values.
> Jail - x.y.z.61
> Host - x.y.z.60
> Router - x.y.z.62
>
>

(Continue reading)

Group

gmane.os.freebsd.jail.

Project Web Page

On the use of jails in FreeBSD and the various patches and extensions for them.

Search Archive

Page

1 | 2 | 3

Articles in period: 27

November 2009

Language

Change language

Options

Current view: Threads only / Showing only 20 lines / Not hiding cited text.
Change to All messages, whole messages, or hide cited text.

Post a message
NNTP Newsgroup
Classic Gmane web interface
XML

XML

RSS Feed
List Information

About Gmane

Recent entries

netgraph network for jail(8) vnet jail unable to reach internet (24 May 2013)
jail already exists (22 May 2013)
Current problem reports assigned to freebsd-jail-HZy0K5TPuP5AfugRpC6u6 (20 May 2013)
conf/149050: [jail] rcorder ``nojail'' too coarse for Jail+VNET (19 May 2013)
kern/176112: [jail] [panic] kernel panic when starting jails (15 May 2013)
Current problem reports assigned to freebsd-jail-HZy0K5TPuP5AfugRpC6u6 (13 May 2013)
Absence du bureau : Returned mail: Data format error (8 May 2013)
Current problem reports assigned to freebsd-jail-HZy0K5TPuP5AfugRpC6u6 (6 May 2013)
bin/178302: jail(8): unknown parameter: ip6.addr when kernel compiled (4 May 2013)
vnet jail with ipfw having logging problem (1 May 2013)
Current problem reports assigned to freebsd-jail-HZy0K5TPuP5AfugRpC6u6 (29 Apr 2013)
How to start a firewall in a vimage jail (24 Apr 2013)
state of the art ? (24 Apr 2013)
jail(8) vimage epair bridge (23 Apr 2013)
Current problem reports assigned to freebsd-jail-HZy0K5TPuP5AfugRpC6u6 (22 Apr 2013)
automatic garbage collection of stuff mounted (etc.) by jailed root (22 Apr 2013)
routing in VIMAGE jails with different versions (16 Apr 2013)
jail -r leads to a panic (16 Apr 2013)
Current problem reports assigned to freebsd-jail-HZy0K5TPuP5AfugRpC6u6 (15 Apr 2013)
jail(8) vs. rc.d/jail features - fstab, zfs, vnet (11 Apr 2013)
Can't find free bpf: No such file or directory (9 Apr 2013)

Archives

29	May 2013
70	April 2013
80	March 2013
34	February 2013
29	January 2013
18	December 2012
31	November 2012
9	October 2012
33	September 2012
22	August 2012
12	July 2012
12	June 2012
35	May 2012
38	April 2012
27	March 2012
35	February 2012
49	January 2012
4	December 2011
5	November 2011
6	October 2011
28	September 2011
31	August 2011
25	July 2011
25	June 2011
22	May 2011
15	April 2011
11	March 2011
11	February 2011
19	January 2011
36	December 2010
22	November 2010
16	October 2010
20	September 2010
14	August 2010
24	July 2010
37	June 2010
20	May 2010
21	April 2010
30	March 2010
34	February 2010
45	January 2010
45	December 2009
27	November 2009
37	October 2009
24	September 2009
33	August 2009
28	July 2009
42	June 2009
30	May 2009
46	April 2009
48	March 2009
35	February 2009
39	January 2009
41	December 2008
52	November 2008
101	October 2008
35	September 2008
50	August 2008
40	July 2008
58	June 2008
34	May 2008
31	April 2008
13	March 2008
22	February 2008
53	January 2008
10	December 2007
27	October 2007
19	September 2007
28	August 2007
9	July 2007
21	June 2007
11	May 2007

Design

Zawodny | Right Menu | Left Menu

Your Own Design

Paste the URL of your CSS below. Download CSS template