Questions tagged [jail]

"The FreeBSD jail mechanism is an implementation of operating system-level virtualization that allows administrators to partition a FreeBSD-based computer system into several independent mini-systems called jails." source: Wikipedia

A jail is characterized by four elements:

  • A directory subtree -- the starting point from which a jail is entered. Once inside the jail, a process is not permitted to escape outside of this subtree. Traditional security issues which plagued the original chroot(2) design will not affect FreeBSD jails.

  • A hostname -- the hostname which will be used within the jail. Jails are mainly used for hosting network services, therefore having a descriptive hostname for each jail can really help the system administrator.

  • An IP address -- this will be assigned to the jail and cannot be changed in any way during the jail's life span. The IP address of a jail is usually an alias address for an existing network interface, but this is not strictly necessary.

  • A command -- the path name of an executable to run inside the jail. This is relative to the root directory of the jail environment, and may vary a lot, depending on the type of the specific jail environment.

source: https://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/jails.html#jails-synopsis

Links

76 questions
0
votes
1 answer

jQuery Asynchronous Image Loader Woes

Using jQuery JAIL (jQuery Asynchronous Image Loader) in my site, I've followed all the instructions correctly but for some reason, the images always load first before the plugin takes place... I have it set up so that the images should fadeIn after…
Paul
  • 1
0
votes
1 answer

Is there another way to restrict SSH user other than chroot jail?

I need to create a safe environment for a foreign SSH user that has to have very restricted access to our server. That is: can only execute commands that are allowed can only use specific software that is allowed must not be allowed to…
0
votes
1 answer

How to include separate config file in NodeRED

How would I include a a separate settings.js file for my Node-RED configuration? I am running node-red within a freebsd jail, and like to host all my config files in a mounted location for snapshot/backup/samba purposes. Ideally, I'm hoping to have…
Pharold
  • 39
  • 1
  • 7
0
votes
1 answer

Unbound will restart, but will not reload

I am running unbound in a FreeBSD 11.3 jail, and have noted some behaviour that seems strange (at least to me!) When restarting the unbound service, it works error-free: service unbound restart # Stopping unbound. # Waiting for PIDS: 80729. #…
Pharold
  • 39
  • 1
  • 7
0
votes
2 answers

FreeBSD-11 EZJail install fails with tar unable to chdir

On a FreeBSD-11.1 host I removed an existing installation of ezjail using the following commands: pkg remove ezjail rm -rf /usr/local/etc/ezjail.conf rm -rf /usr/local/etc/ezjail chflags -R noschg /usr/jails rm -rf /usr/jails zfs destroy -r…
James B. Byrne
  • 1,048
  • 12
  • 27
0
votes
1 answer

xrandr: jail mouse

I already asked this questions over at Ask Ubunutu. Unfortunately I have not received an answer. As this question is not Ubunutu specific, I am trying it here. I am using xrandr via console to enable/disable secondary monitors. This work fine so…
MrUbu
  • 1
  • 1
0
votes
0 answers

Common utility for different container

I am looking for a common utility in python that can be used to operate for different container types like jails, docker, lxc etc based on OS and user needs For example : when user selects docker in config and creates a container using this utility,…
Darshan
  • 94
  • 1
  • 8
0
votes
1 answer

Gradle does not works correctly in FreeBSD Jail

Here is my problem. First, I use FreeBSD as my development platform for Java application, everything works when I start Gradle outside of Jail, but when I start Gradle in the Jail, the Gradle show message like "Starting a Gradle Daemon, 1 busy…
algo4
  • 1
  • 1
  • 1
0
votes
0 answers

Apache listen and redirect to a different port

I know this has been asked before, I used the highest rated question as a baseline, but I still can't get it to work. I'm trying to host a website through an iocage jail in FreeBSD. In my jail I'm hosting a domain called sub.domain.com. I've managed…
JimBob
  • 271
  • 1
  • 2
  • 11
0
votes
1 answer

Freebsd jail command execution error with no reason

I try to execute command: # service jail start myjail I debug the /etc/rc.d/jail and dump that really command is: /usr/sbin/jail -l -U root -i -f /var/run/jail.myjail.conf -c myjail The output is: usage: jail [-dhilqv] [-J jid_file] [-u username]…
user394010
  • 374
  • 1
  • 17
0
votes
1 answer

mount jailed zfs partition on boot

Whenever I reboot my FreeBSD system, I have to log on to one of my jails to manually mount a filesystem with zfs mount. The partition has the jailed zfs property. The jail is managed with ezjail but jails themself are all on a ufs partition. The…
okapi
  • 1,340
  • 9
  • 17
0
votes
0 answers

How to limit Apache MPM Prefork processes per user in FreeBSD?

I am using FreeBSD 10.3-BETA with Apache-2.4.18 MPM Prefork. Apache lives inside a jail with devfs, procfs, fdescfs, /home mounted via nullfs and /etc/{passwd,group,*db,login.conf} (and other same files) actual copy. I could not find any…
litte-j
  • 1
  • 1
0
votes
1 answer

How to set chroot jail for sshd service properly?

on the server side on my debian8,the commands were run : adduser --home /home/user1 user1 nano /etc/ssh/sshd_config Match User user1 ChrootDirectory /home/user1 #two lines were added service sshd restart On the client side , ssh…
showkey
  • 482
  • 42
  • 140
  • 295
0
votes
1 answer

rsync in a FreeBSD jail: failed to set times: Operation not permitted

I have a single "partition" ZFS pool mounted to a directory inside /jails/www/usr/local/www/stuff (that is served by nginx) and from inside that jail I have chown'd that directory to a particular user. I have rsync periodically updating that…
0
votes
2 answers

Jail user to their home doesn't work

I'm using proftpd on Debian 7. I need to jail each user in their own home directory, so they can't see and access parent folders. Actually each user is logged in his own homedir but they can see and access parent folders. As you can see below, I…
Mattia Merlini
  • 643
  • 1
  • 8
  • 24