Jails

Mounting and unmounting zfs filesystems within a #FreeBSD jail

Leave a Comment / FreeBSD, Jails, Open Source, ZFS / By /

I have a jail on r730-01 called dvl-ingress01. Here are some filesystems related to that jail: [11:50 r730-01 dvl ~] % zfs list | grep dvl-ingress01 | grep repos NAME USED AVAIL REFER MOUNTPOINT data02/freshports/dvl-ingress01/ingress/repos 8.65G 1011G 112K /jails/dvl-ingress01/var/db/ingress/repos data02/freshports/dvl-ingress01/ingress/repos/doc 706M 1011G 678M /jails/dvl-ingress01/var/db/ingress/repos/doc data02/freshports/dvl-ingress01/ingress/repos/ports 3.53G 1011G 2.30G /jails/dvl-ingress01/var/db/ingress/repos/ports data02/freshports/dvl-ingress01/ingress/repos/src 4.44G 1011G 2.73G /jails/dvl-ingress01/var/db/ingress/repos/src data02/freshports/dvl-ingress01/repos 120K 1011G 120K /jails/dvl-ingress01/var/db/ingress/repos That is not a complete list, but it illustrates the filesystems I’m working with […]

Mounting and unmounting zfs filesystems within a #FreeBSD jail Read More »

Creating jails in a jail for testing /etc/jail.conf

Leave a Comment / Jails / By /

This is work from April 2021, and sometimes there is a need to do a jail in a jail. This shows how. I want to testing jail.conf, in a jail. I don’t want to test this on a host, because that might interfere with existing jails. This is related to a FreeBSD code review which will add support for jail.d – that means you can have something like /etc/jail.d.conf/foo.conf which is the configuration

Creating jails in a jail for testing /etc/jail.conf Read More »

Self-hosting Bitwarden / VaultWarden on FreeBSD

6 Comments / FreeBSD, Jails, Open Source, Security, VaultWarden / By /

The time has come for me to consider another application for my TOTP data (think 6-digit codes produced by Google Authenticator or an RSA device. I’ve been using an app called 2STP – I have long liked it. Support for it ended about 7 years ago, yet it continued to slug along on my phone and on my watch. Recently, it stopped working on my watch. That was the tipping point. I decided

Self-hosting Bitwarden / VaultWarden on FreeBSD Read More »

Copying an existing jail to try bind918

Leave a Comment / DNS, FreeBSD, Jails, named, Open Source / By /

bind916 will be EOL in a few months (April 2024). In this post, I’m going to copy an existing jail (running bind916) and configure it to run the new bind. If all goes well, the new jail will replace the old jail. This has an added benefit of effectively renaming the old jail (toiler) to dns2 (my other dns server at home is called dns1). Given the jail runs both dhcpd and named,

Copying an existing jail to try bind918 Read More »

Configuration for running poudriere in a jail on FreeBSD 14

Leave a Comment / FreeBSD, Jails, Open Source, Ports, poudriere / By /

I run poudriere in a jail on FreeBSD – it really is becoming the thing-to-do with all the cool kids. Everyone’s doing it. It is nifty. I will provide only the jail configuration, and not any file system configuration. That is left for you. I think these links might be most helpful: Using poudriere to create a custom FreeBSD repository for package installation Moving poudriere from the host into a jail In this

Configuration for running poudriere in a jail on FreeBSD 14 Read More »

Avoiding repetition within jail configurations

Leave a Comment / FreeBSD, Jails, Open Source / By /

Without resorting to configuration tools, such as Ansible, I wonder if there is an easy way to avoid repeating a list of datasets within a jail configuration. First, some facts: FreeBSD 14.0 I use plain vanilla jails I know this can be easily scripted with a configuration tool; that is out of scope for this post I want to explicitly list the datasets; taking all the children of a given dataset is out

Avoiding repetition within jail configurations Read More »

Post upgrade – checking the jails

Leave a Comment / FreeBSD, freebsd-update, Jails, Open Source / By /

Stuff goes wrong. I like to check. Trust. But. Verify. Skip to the end for the list of useful commands. Here’s some of that verification, as briefly mentioned in FreeBSD 14 upgrade – files not removed by delete-old and Excluding some jails from upgrade. After upgrading all the jails on r730-01, I wanted to make sure that all the binaries had been updated from FreeBSD 13. Here’s what I did. This tells me

Post upgrade – checking the jails Read More »

Excluding some jails from upgrade

Leave a Comment / FreeBSD, Jails, mkjail, Open Source / By /

I have some jails already updated to FreeBSD 14 – let’s get a list of what needs to be updated. This cold just as easily be used to get a list of what not to upgrade, if you didn’t want to update all jails right now. These jails are already updated: [15:30 r730-01 dvl ~] % file /jails/*/bin/sh | grep 14 /jails/bacula/bin/sh: ELF 64-bit LSB pie executable, x86-64, version 1 (FreeBSD), dynamically linked,

Excluding some jails from upgrade Read More »

Jails with embedded, but not jailed, ZFS datasets – how to mount/umount – corrected

3 Comments / FreeBSD, Jails, ZFS / By /

This is a rewrite of Jails with embedded, but not jailed, ZFS datasets – how to mount/umount. First, this is not about jailed ZFS datasets. I use them for FreshPorts, but that’s not I’m going to talk about here. In this post: FreeBSD 13.2 This is my example: [22:25 r730-03 dvl ~] % zfs list | grep bacula-sd-04 data01/bacula-volumes 12.1T 4.18T 96K /jails/bacula-sd-04/usr/local/bacula/volumes data01/bacula-volumes/DiffFile 109G 915G 109G /jails/bacula-sd-04/usr/local/bacula/volumes/DiffFile data01/bacula-volumes/FullFile 4.00T 2.00T 3.89T /jails/bacula-sd-04/usr/local/bacula/volumes/FullFile

Jails with embedded, but not jailed, ZFS datasets – how to mount/umount – corrected Read More »

Creating a Time Capsule instance using Samba, FreeBSD, and ZFS

Leave a Comment / Backups, FreeBSD, Jails, Open Source, samba / By /

I recently moved a Time Capsule instance from a FreeBSD host into a jail. Today, I’m going to create a new Time Capsule which uses Samba instead of AFP. Why? Samba seems to be the preferred solution because AFP has been deprecated. It still works, but let’s go Samba. Not covered in this post, but recommended: snapshot your datasets on a regular basis. I like using sanoid for that. That way, if your

Creating a Time Capsule instance using Samba, FreeBSD, and ZFS Read More »

Scroll to Top