diff options
| author | Jan Tuomi <jan@jantuomi.fi> | 2025-09-29 00:53:24 +0200 |
|---|---|---|
| committer | Jan Tuomi <jan@jantuomi.fi> | 2025-09-29 00:53:24 +0200 |
| commit | 7c5eae9294994e59a5176eba21093ecd6cdfcf63 (patch) | |
| tree | a3d7d0a34d6e4b9a773cd85b99afc9eca5b5bb9c /templates/etc_jail.conf.j2 | |
| parent | cc1b02f99e457d2a5a440698e9bae1ca30f408e1 (diff) | |
Improve jails
Diffstat (limited to 'templates/etc_jail.conf.j2')
| -rw-r--r-- | templates/etc_jail.conf.j2 | 20 |
1 files changed, 12 insertions, 8 deletions
diff --git a/templates/etc_jail.conf.j2 b/templates/etc_jail.conf.j2 index 86da8de..708e5c1 100644 --- a/templates/etc_jail.conf.j2 +++ b/templates/etc_jail.conf.j2 @@ -1,18 +1,22 @@ # STARTUP/LOGGING/VNET -$epair = "epair${num}"; # epairXa is host end, epairXb is jail end +$tmp_epair = "epair${num}"; +$epl = "epl${num}"; # eplXa is host end (local network bridge), eplXb is jail end. + # The corresponding pubnet interface is epwX, but that's not created for all jails. vnet; -vnet.interface = "${epair}b"; +vnet.interface = "${epl}b"; persist; -exec.prestart += "ifconfig $epair create || echo 'Failed to create $epair'"; -exec.prestart += "ifconfig ${epair}a up"; -exec.prestart += "ifconfig bridge0 addm ${epair}a"; +exec.prestart += "ifconfig $tmp_epair create || echo 'Failed to create $tmp_epair'"; +exec.prestart += "ifconfig ${tmp_epair}a name ${epl}a"; +exec.prestart += "ifconfig ${tmp_epair}b name ${epl}b"; +exec.prestart += "ifconfig ${epl}a up"; +exec.prestart += "ifconfig brlan0 addm ${epl}a"; exec.clean; exec.start = "/bin/sh /etc/rc"; -exec.poststart = "jexec ${name} ifconfig ${epair}b 192.168.2.${num}/16"; +exec.poststart = "jexec ${name} ifconfig ${epl}b 192.168.2.${num}/16"; exec.poststart += "jexec ${name} route add default 192.168.0.1 || echo 'Failed to add default route'"; exec.stop = "/bin/sh /etc/rc.shutdown"; -exec.poststop += "ifconfig ${epair}b -vnet $name"; # workaround to bug 238326: move ${epair}b from the jail to the host when stopping jail services -exec.poststop += "ifconfig ${epair}b destroy"; # and then destroy the pair by destroying one end of it +exec.poststop += "ifconfig ${epl}b -vnet $name"; # workaround to bug 238326: move ${epl}b from the jail to the host when stopping jail services +exec.poststop += "ifconfig ${epl}b destroy"; # and then destroy the pair by destroying one end of it exec.consolelog = "/var/log/jail_console_${name}.log"; # PERMISSIONS |