Jails

Nagios plugin for pkg audit (replacing portaudit) on FreeBSD

I’m using FreeBSD 9.2 and Nagios 3.5.1. A few weeks ago I wrote about freebsd-update reminding you to upgrade your affected systems. Since then, freebsd-update has continued to send me false positives about upgrading. Suggestions have been made that I track down Colin Percival at BSDCan 2014, which starts in few days. However, I know at least four people have already arrived, two days before any official event, the first of which is […]

Nagios plugin for pkg audit (replacing portaudit) on FreeBSD Read More »

A list of jails

Here is a list of the jails on the two main hosts I use at home: knew I used to have a host called kraken. I created a server server, kraken-new, or knew. knew performs many tasks: runs Bacula regressions tests against various database versions hosts the backups for my Bacula server runs my home mail server on a daily basis, performs a restore of each database backup into a database to make

A list of jails Read More »

Getting RabbitMQ running: FreeBSD 9.2

I’m starting to play with RabbitMQ as part of a new project. The first goal: get it installed and running. I’m going to do this in a jail running FreeBSD 9.2, but this should be the same if you running a non-jail. I installed via: pkg install rabbitmq In /usr/local/etc/rabbitmq/rabbitmq-env.conf I have the following: NODENAME=bunny@sally NOTE: change sally to the hostname you are installing on. I an doing this in a jail. In

Getting RabbitMQ running: FreeBSD 9.2 Read More »

Using poudriere to create a custom FreeBSD repository for package installation

I just showed you how I installed ezjail 3.3 on FreeBSD 9.2 and how it uses ZFS for each jail. Today I’m writing about using poudriere to create custom packages for use by pkng. In this post, I will be creating packages on a FreeBSD 9.2 server. Those packages are for running Bacula on FreeBSD 9.2. To accomplish this, we will need: A list of ports to install for running Bacula. In poudriere

Using poudriere to create a custom FreeBSD repository for package installation Read More »

Installing ezjail 3.3 on FreeBSD 9.2 using ZFS

Today I will be installing ezjail 3.3 on a FreeBSD 9.2 system. I will give an overview of the installation and go straight to the configuration of the first jail. As I type this, I’m looking back at my old notes from 2008. Installation I installed ezjail with this command: pkg install ezjail Configuration Enable ezjail by adding this command to /etc/rc.conf: ezjail_enable=”YES” This system is configured with ZFS and each jail will

Installing ezjail 3.3 on FreeBSD 9.2 using ZFS Read More »

Script for listing the latest ZFS snapshot – starting place for Bacula backups

This post has it all: backups deduplication snapshots ZFS Bacula ezjail Backups are essential for proper sanity, or at least, a reasonable facsimile. I strongly believe that doing backups right is the only way to backup. Go big or go home. I’ve been converting all my servers to ZFS. I like ZFS for many reasons, and I’m going to list two: data integrity snapshots In this case, instead of backing up the entire

Script for listing the latest ZFS snapshot – starting place for Bacula backups Read More »

FreeBSD jails on non-routable IP addresses

One of my goals with the server I’m setting up is putting non-public services into jails with non-routable IP addresses. Today, I’ve been working on getting PostgreSQL into a jail. The problem I have been grappling with is not putting PostgreSQL into a jail but routing. It took me a while to figure out where I was going wrong. Turns out, it was my NAT rules and, perhaps, my IP address strategy. The

FreeBSD jails on non-routable IP addresses Read More »

Accessing FreeBSD Jails over OpenVPN

With this new server, I am taking a new approach. Each jail will have at least three IP addresses: The public IP4 address, used by internet facing services (e.g. http or https) The public IPv6 address, similar to the above A VPN address, used for system administration and private services (e.g. nrpe) In this article, I will assume you are familiar with ezjail, FreeBSD jails, basic networking, OpenVPN, and ZFS. That is, this

Accessing FreeBSD Jails over OpenVPN Read More »

Routing with jails

Tonight I asked a question in the OpenVPN IRC channel on FreeNode. me: I’m getting ready to set up a new server, running an OpenVPN client. It will be running several virtual machines (FreeBSD Jails). Each VM will have both a public IP address and a non-routable IP address. I’m hoping to access all those VMs from within the VPN. Am I making sense with my objective here? reply: “clientlan” is (#1) for

Routing with jails Read More »

mounting the FreshPorts chroot within a jail

In my work on FreshPorts, I’ve learned more than the average non-committer about the FreeBSD ports tree and its oddities. Just about everything learns about a port it gets from ‘make -V’. Even this method can be fraught with difficulty. In an attempt to get the fairest information possible, FreshPorts uses a chroot solution, first proposed by Ryan Steinmetz . Previous posts about this particular solution can be found in the FreshPorts blog.

mounting the FreshPorts chroot within a jail Read More »

Scroll to Top