'ezjail-admin create ...' and "Warning: Some services already seem to be listening on IP ..."

[David Christensen]

On 11/24/19 9:46 PM, Herbert J. Skuhra wrote:
> On Sun, 24 Nov 2019 05:33:34 +0100, David Christensen wrote:
>>
>> freebsd-questions:
>>
>> I have a newly installed FreeBSD host:
>>
>> 2019-11-23 19:53:00 toor at soho2 ~
>> # freebsd-version ; uname -a
>> 11.3-RELEASE-p5
>> FreeBSD soho2.tracy.holgerdanske.com 11.3-RELEASE-p5 FreeBSD
>> 11.3-RELEASE-p5 #0: Tue Nov 12 08:59:04 UTC 2019
>> root at amd64-builder.daemonology.net:/usr/obj/usr/src/sys/GENERIC  amd64
>>
>>
>> I would like to run some jailed services using ezjail(7).  I have
>> installed and configured ezjail, installed a base jail, created a
>> flavour "cvs", and added the desired IP alias to my host.  When I
>> create the jail:
>>
>> 2019-11-23 20:23:14 toor at soho2 ~
>> # ezjail-admin create -f cvs cvs.tracy.holgerdanske.com 192.168.5.19
>> /usr/jails/cvs.tracy.holgerdanske.com/.
>> /usr/jails/cvs.tracy.holgerdanske.com/./etc
>> /usr/jails/cvs.tracy.holgerdanske.com/./etc/rc.d
>> /usr/jails/cvs.tracy.holgerdanske.com/./etc/rc.d/ezjail.flavour.cvs
>> /usr/jails/cvs.tracy.holgerdanske.com/./etc/rc.d/ezjail.flavour.cvs.packages
>> /usr/jails/cvs.tracy.holgerdanske.com/./etc/rc.conf
>> 5 blocks
>> find: /usr/jails/cvs.tracy.holgerdanske.com/pkg/: No such file or directory
>> Warning: Some services already seem to be listening on IP 192.168.5.19
>>    This may cause some confusion, here they are:
>> root     ntpd       735   27 udp4   192.168.5.19:123      *:*
>> Warning: Some services already seem to be listening on all IP,
>> (including 192.168.5.19)
>>    This may cause some confusion, here they are:
>> root     ntpd       735   20 udp6   *:123                 *:*
>> root     ntpd       735   21 udp4   *:123                 *:*
>> root     syslogd    583   6  udp6   *:514                 *:*
>> root     syslogd    583   7  udp4   *:514                 *:*
>>
>>
>> Do I need to worry about the listening services warnings?  If so, what
>> is the best way to resolve them?
> 
> You should read "Setting up the Host Environment" from jail(8).

Thanks for the reply.  :-)


There are many sources of information on jails and ezjail -- RTFM, STFW, 
MWL AF3E, etc..  Sorting through them to find a working solution is 
going to take me a while.


> But are you trying to run ntpd on both the host and the jail? Why?

I suspect the problem has to do with host services listening on all 
interfaces.  I am working to limit the host services only to listen on 
the host's primary IP address or loopback interface, among other host 
setup steps.


David