Re: local-unbound in a jail

On Tue, 8 Mar 2022, PstreeM China wrote:

> yes, highly recommend using vnet to do this. and also recommend the tools:  bastille . it's a
> amazing tools to manager the jail. i think vnet it's the best way to startup the service in jail.  i use
> bastille create jail and configure use vnet .
> 
> On Sat, Feb 19, 2022 at 2:03 AM infoomatic <infoomatic@gmx.at> wrote:
>       I highly recommend using vnet enabled jails for network based services
>       ... imho too much hassle with networking issues with non-vnet jails.
> 
>
>       On 18.02.22 18:02, Steve Kirk wrote:
>       > Afternoon all,
>       >
>       > I suspect that I know the answer to this question, however... I have
>       > tried to run local-unbound in a jail (as I intend to run rspamd in
>       > said jail) but it seems like it doesn't play nicely because there's no
>       > loopback address *inside* the jail which is the only interface this
>       > service is designed to work with.
>       >
>       > Trying to keep things minimal but I think I should be installing
>       > unbound or named from ports if I want a caching DNS server inside a
>       > jail, rather than abusing local-unbound?
>       >
>       > Cheers,
>       > Steve
>       >

The only time I used vnet was when I was required to by mu colo to get 
through a programmable switch. I found it to be a pain, but I was at the 
"mercy" of the colo for the setup requirements and changes. If we are not 
talking about a virtual environment, I don't get why this is easier. This 
is a "wanna learn something question" BTW.