Jails

Accessing FreeBSD Jails over OpenVPN

With this new server, I am taking a new approach. Each jail will have at least three IP addresses: The public IP4 address, used by internet facing services (e.g. http or https) The public IPv6 address, similar to the above A VPN address, used for system administration and private services (e.g. nrpe) In this article, I will assume you are familiar with ezjail, FreeBSD jails, basic networking, OpenVPN, and ZFS. That is, this […]

Accessing FreeBSD Jails over OpenVPN Read More »

Routing with jails

Tonight I asked a question in the OpenVPN IRC channel on FreeNode. me: I’m getting ready to set up a new server, running an OpenVPN client. It will be running several virtual machines (FreeBSD Jails). Each VM will have both a public IP address and a non-routable IP address. I’m hoping to access all those VMs from within the VPN. Am I making sense with my objective here? reply: “clientlan” is (#1) for

Routing with jails Read More »

mounting the FreshPorts chroot within a jail

In my work on FreshPorts, I’ve learned more than the average non-committer about the FreeBSD ports tree and its oddities. Just about everything learns about a port it gets from ‘make -V’. Even this method can be fraught with difficulty. In an attempt to get the fairest information possible, FreshPorts uses a chroot solution, first proposed by Ryan Steinmetz . Previous posts about this particular solution can be found in the FreshPorts blog.

mounting the FreshPorts chroot within a jail Read More »

doveadm cannot work without a tty

I got this message today: $ doveadm pw -s SHA512-CRYPT Enter new password: doveadm(dan): Fatal: open(/dev/tty) failed: No such file or directory It seems if you have no tty, you can’t create a password. Surely there is a better way to do this? # w 7:21PM up 19 days, 4 mins, 0 users, load averages: 0.48, 0.77, 0.67 USER TTY FROM LOGIN@ IDLE WHAT # That’s on a FreeBSD 8.4-RELEASE-p3 jail. To access

doveadm cannot work without a tty Read More »

Accessing every jail from a VPN

I’ve been meeting a few challenges with running an instance of bacula-fd in each of my jails. Most of them are related to networking. Perhaps my deployment strategies are imposing too many restrictions. The challenges arise on the jail hosts which are not behind my firewall at home. Each of those servers is accessible through a VPN, but the individual jails on those servers are not. The backup of the jail host is

Accessing every jail from a VPN Read More »

ezjail-jail: making a full backup of a FreeBSD jail with Bacula

I’ve been using Bacula since early 2004. I’ve been using FreeBSD since 1998. Jails are a relatively newcomer. I starting using it later in 2004. But it’s only recently that I’ve started using them intensively. Backups are always a touchy subject. With ezjail, the files you need to backup are greatly reduced. You’re not backing up the base OS, just the local files. I’ve created a fileset which seems to do the right

ezjail-jail: making a full backup of a FreeBSD jail with Bacula Read More »

Using ezjail-admin archive to create a new jail, almost like an existing jail

I use FreeBSD Jails. I use them a lot. I have jails for websites. I have jails for regression testing, mail servers, OpenVPN servers, etc. I like jails for many reasons. One of which is being able to create a new jail which is pretty much identical to another jail, except for a few things. In this case, I wanted to create a new jail to do regression testing for Bacula, the best

Using ezjail-admin archive to create a new jail, almost like an existing jail Read More »

Scroll to Top