[Bug 208001] After turning off the jail does not remove network routes

bugzilla-noreply at freebsd.org bugzilla-noreply at freebsd.org
Mon Mar 14 22:43:30 UTC 2016


https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=208001

            Bug ID: 208001
           Summary: After turning off the jail does not remove network
                    routes
           Product: Base System
           Version: 10.3-BETA2
          Hardware: amd64
                OS: Any
            Status: New
          Severity: Affects Many People
          Priority: ---
         Component: bin
          Assignee: freebsd-bugs at FreeBSD.org
          Reporter: admin at support.od.ua
                CC: freebsd-amd64 at FreeBSD.org
                CC: freebsd-amd64 at FreeBSD.org

After turning off the jail does not remove network routes.
Helps only change the IP address or reboot the server


# service jail start
Starting jails: web.
# service jail status
 JID             IP Address      Hostname                      Path
 web             10.0.0.22       web.otrada.local              /jails/web
# service jail stop
Stopping jails: web.
# service jail status
 JID             IP Address      Hostname                      Path
# service jail start
Starting jails: cannot start jail  "web":
ifconfig: ioctl (SIOCAIFADDR): No such process
jail: web: /sbin/ifconfig re0 inet 10.0.0.22/24 alias: failed
.
# netstat -rn4 | grep 10.0
10.0.0.0/24        link#1             U           re0
10.0.0.0/24        link#1             U           re0
10.0.0.0/24        link#1             U           re0
10.0.0.0/24        link#1             U           re0
10.0.0.0/8         10.0.0.125         UGS         re0
10.0.0.1           link#1             UHS         lo0
10.0.0.19          link#1             UHS         lo0
10.0.1.1           link#10            UHS         lo0
10.0.2.48          link#10            UH          ng1
10.0.3.5           link#11            UH          ng2
# route get 10.0.0.0/24
   route to: 10.0.0.0
destination: 10.0.0.0
       mask: 255.255.255.0
        fib: 0
  interface: re0
      flags: <UP,DONE,PINNED>
 recvpipe  sendpipe  ssthresh  rtt,msec    mtu        weight    expire
       0         0         0         0      1500         1         0


Example config /etc/jail.conf:

allow.raw_sockets = 1;
exec.clean;
exec.system_user = "root";
exec.jail_user = "root";
exec.start = "/bin/sh /etc/rc";
exec.stop = "/bin/sh /etc/rc.shutdown";
exec.consolelog = "/var/log/jail_${name}_console.log";
mount.devfs;
mount.fstab = "/etc/fstab.$name";
allow.mount;
allow.set_hostname = 0;
allow.sysvipc = 0;
path = "/jails/${name}";

web {
    host.hostname = "web.otrada.local";
    ip4.addr = "re0|10.0.0.22/24";
    ip4.addr += "lo0|127.0.1.1/8";
    ip6.addr += "re0|2001:470:28:140::121/64";
    allow.sysvipc = 1;
    mount.procfs;
    devfs_ruleset = 7;
#    path = "/jails/billing-test";
}

-- 
You are receiving this mail because:
You are on the CC list for the bug.


More information about the freebsd-amd64 mailing list