I recently implemented Fail2ban on a FreeBSD jail host. It monitors log files within the jails, from the host. Offensive IP addresses which act up in one jail will be blocked at the host, thus blocking the rascal IP from all jails. This has been running for about two weeks. Today I added another tool, […]
WordPress and Fail2ban Read More »
I felt I was backing up way too much on my jail server. I was backing up files which would be installed as part of the OS. Let’s look at the esimate: *estimate level=full job=”slocum jail snapshots” Using Catalog “MyCatalog” Connecting to Client slocum-fd at slocum.int.unixathome.org:9102 2000 OK estimate files=2,824,716 bytes=239,568,332,325 * I decided to
Excluding the base-OS when backing up FreeBSD jails with Bacula Read More »
All of my previous jail hosts have used ezjail. I have recently played with both bsdploy and iocage. The primary purpose of this post is showing you how to install
Getting started with iocage for jails on FreeBSD Read More »
A problem arose today which I have never seen before. I do not know what caused it and I do not know precisely how I fixed it. I am using Baclua 7.0.5 on FreeBSD 9.3 I found this email today: This is Bacula asking for more ‘tape’. I say tape, because that is an easy
Cannot find any appendable volumes – Bacula Read More »
Just a note for myself. I had this kind of thing in /etc/fstab so I could share one installation of plugins and themes for WordPress. /usr/local/wordress/plugins /usr/jails/freebsddiary.org/usr/local/www/wordpress/plugins nullfs ro,nosuid,noexec,late 0 0 /usr/local/wordress/themes /usr/jails/freebsddiary.org/usr/local/www/wordpress/themes nullfs ro,nosuid,noexec,late 0 0 /usr/local/wordress/plugins /usr/jails/news.freshports.org/usr/local/www/wordpress/plugins nullfs ro,nosuid,noexec,late 0 0 /usr/local/wordress/themes /usr/jails/news.freshports.org/usr/local/www/wordpress/themes nullfs ro,nosuid,noexec,late 0 0 Then I moved them to their
nullfs mounts in a jail Read More »
Last night, this worked fine. This morning, it fails: # ansible-playbook jail-mailjail.yml PLAY [mailjails] ************************************************************** GATHERING FACTS *************************************************************** failed: [mailjail.example.org] => {“failed”: true, “parsed”: false} invalid output was: Sorry, try again. Sorry, try again. Sorry, try again. sudo: 3 incorrect password attempts TASK: [pkg | install pkg] ***************************************************** FATAL: no hosts matched or all hosts
When ssh and ansible play poorly together Read More »
After a lengthy Twitter discussion this afternoon, and a post to the forums, I decided to alter my ezjail basejail. The issue: when you update the basejail, /etc/rc.d and /etc/periodic do not get updated. This is by design. I wanted those directories to get updated. So I have changed the basejail. I will outline first,
Cunning plan for upgrading jails Read More »
I tried this today, creating an 8.3-RELEASE jail for poudriere: $ sudo poudriere jail -c -v 8.3-RELEASE -j releng_8_3 ====>> Creating releng_8_3 fs… done ====>> Fetching sets for FreeBSD 8.3-RELEASE amd64 fetch: ftp://ftp.freebsd.org/pub/FreeBSD/releases/amd64/8.3-RELEASE/base/CHECKSUM.SHA256: File unavailable (e.g., file not found, no access) fetch: ftp://ftp.freebsd.org/pub/FreeBSD/releases/amd64/8.3-RELEASE/base/CHECKSUM.SHA256: File unavailable (e.g., file not found, no access) ====>> Error: Failed to
Want 8.3 in a poudriere jail? Nope. Read More »
Every day for weeks I’ve been seeing these entries in my logs: I could ignore them, but that’s not in my nature. I want to know why this is occurring and fix it. Attempting to find the source, I started a tcpdump on the host: That wasn’t much help. I think I should have logged
named: error sending response: host unreachable Read More »
I’m using FreeBSD 9.2 and Nagios 3.5.1. A few weeks ago I wrote about freebsd-update reminding you to upgrade your affected systems. Since then, freebsd-update has continued to send me false positives about upgrading. Suggestions have been made that I track down Colin Percival at BSDCan 2014, which starts in few days. However, I know
Nagios plugin for pkg audit (replacing portaudit) on FreeBSD Read More »