Jail, vnet, zfs, and iocage, networking setup

[Mathias Picker]

Hi David,

I’ve never used iocage, just jail.conf, maybe my experience can 
still help.

I’m setting up an if_bridge whithout my main interface in it, and 
configure routing.

Bridging can show the jail/bridge mac addresses to the outsinde 
world, which can get you into trouble with your hosting 
provider. At least Hetzner didn’t like it at all ;)

So, I basically put something like this into rc.conf:

------------------------------------------------------------
cloned_interfaces="bridge0"
ifconfig_bridge0_name="jailbridge0"
ifconfig_jailbridge0="inet [someaddress/somemask] up"
ifconfig_jailbridge0_ipv6="inet6 [someaddress/somemask]“
ifconfig_jailbridge0_alias0="inet6 fe80::1/64" # this was needed 
for routing, I’m not 100% sure if this should be needed…
---------------------------------------------------------------

Then I put something like this into jail.conf:

---------------------------------------------------------------------
$iface="igb0";
$j="/jail";
path="$j/jails/$name";

mount.devfs;

exec.clean;
exec.start="sh /etc/rc";
exec.stop="sh /etc/rc.shutdown";
exec.prestart="logger starting jail $name ...";
exec.poststart="logger jail $name has started";
exec.prestop="logger shuttding down jail $name";
exec.poststop="logger jail $name has shut down";

# vnet jails
vnet;
vnet.interface="${name}_j";
exec.prestart+="/usr/local/bin/jailtobridge $name jailbridge0";
exec.poststop+="/sbin/ifconfig jailbridge0 deletem ${name}_b";

exec.consolelog="/var/log/jails/$name-console.log";

# generic hostnames
host.hostname="$name.myhost.example.com";

myhost1 {}
myhost2 {}
------------------------------------------------------------------

and installed the jails with ‘bsdinstall jail /jail/jails/myhost1’ 
and when finished configured networking in the jails rc.conf.

This was my first setup with jail.conf and understanding (well, 
sort of) if_bridge has taken some time, but otherwise it’s really 
easy.

I update the jails with freebsd-update from the host system.

Good luck,

Mathias

David Mehler writes:

> Hello,
> 	
> I'm trying to get vnet jails going on FreeBSD 12.1. I've set up 
> jails
> previously by setting up a cloned lo1 interface now i'd like to 
> get
> zfs, iocage, and vnet jails going. I've got a vps with a single
> physical interface. I've got zfs working fine, and iocage is
> installed. When I create a jail it has no network access at 
> all. If I
> set up a vlan can I then set up a bridge between the vlan and 
> the
> physical interface?
>
> Does anyone have some notes on this? Google has shown results 
> but most
> with FreeBSD 11.x.
>
> Thanks.
> Dave.
> _______________________________________________
> freebsd-questions at freebsd.org mailing list
> https://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to 
> "freebsd-questions-unsubscribe at freebsd.org"


-- 
Mathias Picker                        
Geschäftsführer
Mathias.Picker at virtual-earth.de

virtual earth Gesellschaft für Wissens re/prä sentation mbH
http://www.virtual-earth.de/           HRB126870
support at virtual-earth.de               Westendstr. 142
089 / 1250 3943