dch / jr.fish

0 喜歡

0 分支

4 檔案

最後活躍 1747808159

a set of tools for interactively deploying jails for ephemeral usage

jails

1	function jc
2	# see https://git.io/JfHOu
3	set local
4	set MACH (sysctl -n hw.machine)
5	set ARCH (sysctl -n hw.machine_arch)
6	set DOMAIN skunkwerks.at
7	set RELEASE 14.0-RELEASE
8	set RELDATE 1400097
9	set FLAVOUR $RELEASE-$MACH-$ARCH
10	# grab the name

dch / environment

0 喜歡

0 分支

2 檔案

最後活躍 1746278176

1	#!/bin/sh
2	log() { printf '\n\033[m\033[38;5;11m~~~ %s %s ~~~\033[m\n' $1 $2; }
3
4	log "deploy environment"
5
6	# obvious stuff
7	export PATH=${PATH}:/usr/local/bin
8	export SHELL=/bin/sh
9	# a righteous secure umask
10	umask 027

dch / Containerfile

0 喜歡

0 分支

2 檔案

最後活躍 1746277176

1	FROM docker.io/freebsd/freebsd-runtime:14.2
2	RUN env ASSUME_ALWAYS_YES=yes pkg bootstrap -qr FreeBSD
3	RUN pkg update -q
4	RUN pkg install -qy FreeBSD-openssl
5	RUN pkg upgrade -qy
6	RUN pkg install -qy lang/python3
7	entrypoint /usr/local/bin/python3 -m http.server

dch / io-histogram.d

0 喜歡

0 分支

2 檔案

最後活躍 1745319742

1	#!/usr/sbin/dtrace -s
2	#pragma D option quiet
3	#pragma D option aggsize=20m
4
5	syscall::read:return,syscall::write:return
6	/execname == "firefox" /
7	{ @[probefunc] = quantize(arg1); }

dch / jail_set_iovec.md

0 喜歡

0 分支

1 檔案

最後活躍 1742648542

	/* clang-format off */
	struct iovec iov[] = {
		{ .iov_base = "path"         , .iov_len = sizeof("path")          },
		{ .iov_base = jail_path      , .iov_len = sizeof(jail_path)       },

		{ .iov_base = "name"         , .iov_len = sizeof("name")          },
		{ .iov_base = jail_name      , .iov_len = sizeof(jail_name)       },

dch / chelsio-100g.md

0 喜歡

0 分支

1 檔案

最後活躍 1742647057

overview

2 hosts, 100G Chelsio T62100-LP-CR NICs
direct cabled

straylight

# ifconfig cc0
cc0: flags=1008843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST,LOWER_UP> metric 0 mtu 1500

dch / jails-topics.md

0 喜歡

0 分支

1 檔案

最後活躍 1742328585

List of raised items in the jails 2.0 survey & spreadshet from ~ 2 years ago

Topics taken from our jails 2.0 spreadsheet for ranked choice voting:

5	have a userland jail daemon similar in concept to docker/podman daemon
7	teach jail(8) to export jail.conf params & vars as env vars into exec hooks
8	extend ucl support to more jail tools
9	allow user-managed rootless jails, similar to rootless podman on linux
11	kernel-managed state machines for jails, to allow operators to *know* what is blocking a jail from dying/restarting
12	teach ifconfig to auto-create epairs for vnet jails
13	associate mountpoints with jails, to allow better cleanup

dch / notes.md

0 喜歡

0 分支

1 檔案

最後活躍 1741803664

blah