0
0
1
blah
Joined 2 years ago
blah
List of raised items in the jails 2.0 survey & spreadshet from ~ 2 years ago
Topics taken from our jails 2.0 spreadsheet for ranked choice voting:
5 have a userland jail daemon similar in concept to docker/podman daemon
7 teach jail(8) to export jail.conf params & vars as env vars into exec hooks
8 extend ucl support to more jail tools
9 allow user-managed rootless jails, similar to rootless podman on linux
11 kernel-managed state machines for jails, to allow operators to *know* what is blocking a jail from dying/restarting
12 teach ifconfig to auto-create epairs for vnet jails
13 associate mountpoints with jails, to allow better cleanup
# ifconfig cc0
cc0: flags=1008843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST,LOWER_UP> metric 0 mtu 1500
/* clang-format off */
struct iovec iov[] = {
{ .iov_base = "path" , .iov_len = sizeof("path") },
{ .iov_base = jail_path , .iov_len = sizeof(jail_path) },
{ .iov_base = "name" , .iov_len = sizeof("name") },
{ .iov_base = jail_name , .iov_len = sizeof(jail_name) },
| 1 | #!/usr/sbin/dtrace -s |
| 2 | #pragma D option quiet |
| 3 | #pragma D option aggsize=20m |
| 4 | |
| 5 | syscall::read:return,syscall::write:return |
| 6 | /execname == "firefox" / |
| 7 | { @[probefunc] = quantize(arg1); } |
| 1 | FROM docker.io/freebsd/freebsd-runtime:14.3 |
| 2 | RUN env ASSUME_ALWAYS_YES=yes pkg bootstrap -qr FreeBSD |
| 3 | RUN pkg update -q |
| 4 | RUN pkg install -qy FreeBSD-openssl |
| 5 | RUN pkg upgrade -qy |
| 6 | RUN pkg install -qy lang/python3 |
| 7 | entrypoint /usr/local/bin/python3 -m http.server |
| 1 | #!/bin/sh |
| 2 | log() { printf '\n\033[m\033[38;5;11m~~~ %s %s ~~~\033[m\n' $1 $2; } |
| 3 | |
| 4 | log "deploy environment" |
| 5 | |
| 6 | # obvious stuff |
| 7 | export PATH=${PATH}:/usr/local/bin |
| 8 | export SHELL=/bin/sh |
| 9 | # a righteous secure umask |
| 10 | umask 027 |
a set of tools for interactively deploying jails for ephemeral usage
| 1 | function jc |
| 2 | # see https://git.io/JfHOu |
| 3 | set local |
| 4 | set MACH (sysctl -n hw.machine) |
| 5 | set ARCH (sysctl -n hw.machine_arch) |
| 6 | set DOMAIN skunkwerks.at |
| 7 | set RELEASE 14.0-RELEASE |
| 8 | set RELDATE 1400097 |
| 9 | set FLAVOUR $RELEASE-$MACH-$ARCH |
| 10 | # grab the name |
| 1 | =>> Building net-p2p/jackett |
| 2 | build started at 2025-06-29T01:26:41+00:00 |
| 3 | port directory: /usr/ports/net-p2p/jackett |
| 4 | package name: jackett-0.22.2075 |
| 5 | building for: FreeBSD pkg.skunkwerks.at 14.3-RELEASE FreeBSD 14.3-RELEASE arm64 |
| 6 | maintained by: tremere@cainites.net |
| 7 | port version: 0.22.2075 |
| 8 | port revision: 0 |
| 9 | Makefile datestamp: -rw-r--r-- 1 dch wheel 1536 Jun 28 23:49 /usr/ports/net-p2p/jackett/Makefile |
| 10 | Poudriere version: poudriere-git-3.4.99.20250601 |
| 1 | dch@wintermute ~> oci-launch-zfs-arm64 audacious-aardvark |
| 2 | |
| 3 | DEBUG:oci_cli.cli_metrics: 2025-07-02 12:12:31.234731: Metrics is not enabled |
| 4 | FreeBSD-15.0-CURRENT-amd64-64bit-ELF |
| 5 | System name: FreeBSD |
| 6 | System release : 15.0-CURRENT |
| 7 | System version: FreeBSD 15.0-CURRENT main-n277972-c2834a53b919 GENERIC-NODEBUG |
| 8 | |
| 9 | env OCI_PYTHON_SDK_NO_SERVICE_IMPORTS is set |
| 10 | DEBUG:oci_cli.cli_util:Config File: dict_keys(['log_requests', 'additional_user_agent', 'pass_phrase', 'fingerprint', 'key_file', 'user', 'tenancy', 'region', 'availability']) |