Jails - vnet- netgraph

Kristof Provost kp at FreeBSD.org
Thu Jan 28 08:53:56 UTC 2021


On 28 Jan 2021, at 2:54, petru garstea wrote:
> Greetings,
>
>     Finally, I sorted out.
>
> I have copied an example from the following path 
> /usr/share/examples/netgraph/ether.bridge and found out that I needed 
> to load modules into the kernel
>
> ng_socket.ko
> ng_bridge.ko
> ng_ether.ko
> ng_eiface.ko
>
> and jng script start working, I spawned a jail and confirmed that vnet 
> netgraph interface was properly configured
>
> However I have another question, if I run ifconfig on the host I dont 
> see in the list the netgraph bridge interface and the jails ether 
> interface, I can see these interfaces only if run
>
Vnet jails own the interfaces, so it’s entirely expected that you 
wouldn’t see them in on the host.

> ngctl list
>
>   Name: ng0_vnetjail    Type: eiface          ID: 
> 00000010   Num hooks: 1
>   Name: re0                  Type: 
> ether           ID: 00000005 Num hooks: 2
>   Name: ngctl1544       Type: socket          ID: 
> 00000017   Num hooks: 0
>   Name: re0bridge       Type: bridge          ID: 
> 0000000b   Num hooks: 3
>
If you can see those from the host that seems like it’d be a bug in 
the netgraph code.

Regards,
Kristof


More information about the freebsd-jail mailing list