jail and networking

Teske, Devin Devin.Teske at fisglobal.com
Wed Feb 20 18:56:24 UTC 2013


On Wed, 20 Feb 2013, Bernt Hansson wrote:

> On 2013-02-20 17:23, Teske, Devin wrote:
> > On Wed, 20 Feb 2013, Bernt Hansson wrote:
> >
> >> Hello list!
> >>
> >> I dont seem to get net working in a test jail.
> >>
> >> These I've tried;
> >>
> >> ftp, fetch, telnet
> >>
> >> They time out.
> >>
> >> Ssh sort of work.
> >>
> >> 32bit# ssh 10.0.0.3
> >> ssh_askpass: exec(/usr/local/bin/ssh-askpass): No such file or directory
> >> Host key verification failed.
> >>
> >> jail is 8.3-STABLE i386 GENERIC
> >>
> >> host is FreeBSD 8.3-STABLE amd64 GENERIC
> >>
> >> I'm sure you want more info so just tell me what info.
> >
> > Commonly the problem is that you are "jexec'd" into the jail and I find that tools like ssh, ftp, telnet, etc. don't work when you're in the jail via "jexec" but instead what works way better is if you ssh into the jail (via the jail'd ssh process of course).
> >
> > Does that seem to be the case in your situation?
> 
> If you mean this sshd  IsJ    0:00,00 /usr/sbin/sshd
> 
> Then no.
> 
> %ssh 10.0.0.10 ssh: connect to host 10.0.0.10 port 22: Operation timed out
> 
> I did have an alias on the host to the jail's ip.
> Tried to restart the jail it went fine, but now I can't jexec in to the
> jail.
> 
> testbox# jexec 1 tcsh
> jexec: jail_attach(1): Invalid argument
> 
> Sooo... I'm kind of out of ideas.

When you restart a jail it's jid (the first argument to jexec) changes. Instead of using the jid you can use the jail name (example below):

jexec NAME tcsh

Otherwise, you're going to have to do "jls" to get the new jid after restarting the jail.
-- 
Devin

_____________
The information contained in this message is proprietary and/or confidential. If you are not the intended recipient, please: (i) delete the message and all copies; (ii) do not disclose, distribute or use the message in any manner; and (iii) notify the sender immediately. In addition, please be aware that any message addressed to our domain is subject to archiving and review by persons other than the intended recipient. Thank you.


More information about the freebsd-questions mailing list