Network namespaces in FreeBSD

Steve O'Hara-Smith steve at sohara.org
Fri Dec 25 20:29:21 UTC 2020


On Fri, 25 Dec 2020 01:44:04 +0100
Tomasz CEDRO <tomek at cedro.info> wrote:

> On Thu, Dec 24, 2020, 21:20 Steve O'Hara-Smith wrote:
> 
> >         There's a half formed idea which keeps coming back to me not
> > really well enough formed to do anything with - imagine being able to
> > do something like this:
> >
> > pkg jail nginx --jail webserver-3 --ip4addr ...
> >
> >         and obtain a jail with just enough in it to run nginx (or
> > whatever package you choose) and nothing else - by that I mean not a
> > base system with the necessary packages but a system stripped of
> > everything but the dependencies of the application - if the application
> > doesn't need ls then ls isn't there.
> >
> 
> Sounds like a great idea! Also sounds very "BSD Way"^TM.. could be the

	Thank you - I'll see if I can't get some simple cases going when
time permits.

> "Fire-and-Forget"^TM alternative of Docker on BSD if bundled
> configurations could be also rolled/snapped/deployed that way :-)

	Packaged configuration sets could be a thing, with the application
packages as dependencies so you just install the configuration set.

	The kind of load balanced, auto-deployed multi layer client-server
over auto-configured vpns all from a YAML file magic that docker and
kubernetes perform would still be some ways off.

-- 
Steve O'Hara-Smith                          |   Directable Mirror Arrays
C:\>WIN                                     | A better way to focus the sun
The computer obeys and wins.                |    licences available see
You lose and Bill collects.                 |    http://www.sohara.org/


More information about the freebsd-questions mailing list