diff options
| author | Devin Teske <dteske@FreeBSD.org> | 2018-10-28 18:32:47 +0000 |
|---|---|---|
| committer | Devin Teske <dteske@FreeBSD.org> | 2018-10-28 18:32:47 +0000 |
| commit | 3048255235c13ee10b5110350ab5dde9d619ccd1 (patch) | |
| tree | 456cd14b47f91d040c64fc77387b00182ed239a3 /share | |
| parent | 5b05dc5a8b98dace6efc84446dde3a87ceda7714 (diff) | |
| download | src-test-3048255235c13ee10b5110350ab5dde9d619ccd1.tar.gz src-test-3048255235c13ee10b5110350ab5dde9d619ccd1.zip | |
Fix jail examples in jib, jng, README
The provided example jail configs do not work for multiple interfaces.
Multiple interfaces need to be specified as a comma separated list or
using multiple += lines in jail.conf. In the given example, a space-
separated string is used, which doesn't work with multiple interfaces.
Also added a note to the README about VIMAGE being built-in by default
on amd64 in FreeBSD 12, with appropriate instructions for loading the
necessary netgraph ether module (ng_ether) since it is neither built-
in nor autoloads.
Submitted by: Ryan Moeller <ryan@freqlabs.com>
Reported by: Ryan Moeller <ryan@freqlabs.com>
MFC after: 3 days
Sponsored by: Smule, Inc.
Differential Revision: https://reviews.freebsd.org/D17697
Notes
Notes:
svn path=/head/; revision=339843
Diffstat (limited to 'share')
| -rw-r--r-- | share/examples/jails/README | 10 | ||||
| -rwxr-xr-x | share/examples/jails/jib | 2 | ||||
| -rwxr-xr-x | share/examples/jails/jng | 2 |
3 files changed, 12 insertions, 2 deletions
diff --git a/share/examples/jails/README b/share/examples/jails/README index 36268a9c29974..f3fea4b8d7b68 100644 --- a/share/examples/jails/README +++ b/share/examples/jails/README @@ -8,6 +8,16 @@ The below 4 samples require a VIMAGE enabled kernel: $ make KERNCONF=VIMAGE kernel $ reboot +FreeBSD 12 has VIMAGE enabled in GENERIC on amd64. +In that case, for jng simply load the ng_ether module first +(ng_bridge and ng_eiface will load on demand): + + # (as root) + # Load the ng_ether module at boot: + $ sysrc kld_list+=ng_ether + # Load ng_ether at once without rebooting: + $ kldload ng_ether + Sample 1: jail.conf(5) $ cp jib jng /usr/sbin/ diff --git a/share/examples/jails/jib b/share/examples/jails/jib index b7d50f5d4c904..731686f8c2a1b 100755 --- a/share/examples/jails/jib +++ b/share/examples/jails/jib @@ -51,7 +51,7 @@ # # arguments given to `jib addm xxx' in exec.prestart value. # # # vnet; -# vnet.interface = "e0b_xxx e1b_xxx ..."; +# vnet.interface = e0b_xxx, e1b_xxx, ...; # # exec.clean; # exec.system_user = "root"; diff --git a/share/examples/jails/jng b/share/examples/jails/jng index c243001cf9512..12d0eb6d138a1 100755 --- a/share/examples/jails/jng +++ b/share/examples/jails/jng @@ -51,7 +51,7 @@ # # arguments given to `jng bridge xxx' in exec.prestart value. # # # vnet; -# vnet.interface = "ng0_xxx ng1_xxx ..."; +# vnet.interface = ng0_xxx, ng1_xxx, ...; # # exec.clean; # exec.system_user = "root"; |