2005-09-05 22:59:53 +00:00
|
|
|
.TH ezjail 5
|
|
|
|
|
.SH NAME
|
|
|
|
|
ezjail \- A simple jail setup framework
|
|
|
|
|
.SH SYNOPSIS
|
2005-09-26 01:30:00 +00:00
|
|
|
EZJAIL_PREFIX/etc/rc.d/ezjail.sh
|
2005-09-05 22:59:53 +00:00
|
|
|
.SH DESCRIPTION
|
|
|
|
|
The ezjail framework provides a simple way to create many virtual FreeBSD
|
|
|
|
|
servers by using FreeBSD's jail system. It requires little administration
|
|
|
|
|
effort and aims for minimum system resource usage.
|
|
|
|
|
|
2005-09-20 21:52:57 +00:00
|
|
|
If you are not familiar with the FreeBSD jail concept, please refer to
|
|
|
|
|
jail(8) before continuing.
|
2005-09-05 22:59:53 +00:00
|
|
|
.SH OVERVIEW
|
|
|
|
|
One
|
|
|
|
|
.I base jail
|
|
|
|
|
is filled with most userland binaries and libraries and then mounted
|
2005-09-20 21:52:57 +00:00
|
|
|
read only into a number of stripped down jails via
|
2005-09-05 22:59:53 +00:00
|
|
|
.B mount_nullfs(8)
|
2005-09-20 21:52:57 +00:00
|
|
|
- thus saving lots of inodes and memory resources.
|
2005-09-27 13:58:35 +00:00
|
|
|
.SH INVOCATION
|
|
|
|
|
The ezjail script
|
|
|
|
|
.B EZJAIL_PREFIX/etc/rc.d/ezjail.sh
|
|
|
|
|
takes parameters
|
2006-04-10 13:16:43 +00:00
|
|
|
.I start, startcrypto, restart
|
2005-09-27 13:58:35 +00:00
|
|
|
and
|
|
|
|
|
.I stop.
|
|
|
|
|
It may be passed an additional list of jails. If no jail name is
|
2005-10-01 14:50:22 +00:00
|
|
|
specified (usually when the script is being called by rc.local at boot
|
2006-04-10 13:16:43 +00:00
|
|
|
and shutdown time), all jails in ezjails scope, except crypto image
|
2006-05-22 00:20:47 +00:00
|
|
|
jails (or jails marked as blocking), are being started/stopped. To
|
|
|
|
|
start all crytpo image jails (or those depending on them), use the
|
2006-04-10 13:16:43 +00:00
|
|
|
.I startcrypto
|
|
|
|
|
parameter.
|
2005-09-27 13:58:35 +00:00
|
|
|
|
2006-05-22 00:20:47 +00:00
|
|
|
The script examines its config, attaches and mounts images, sets
|
|
|
|
|
variables for each jail in the jail_list before passing its command on
|
|
|
|
|
to the
|
2005-09-20 21:52:57 +00:00
|
|
|
.B /etc/rc.d/jail
|
|
|
|
|
script.
|
2005-09-27 13:58:35 +00:00
|
|
|
.SH NOTES
|
2005-10-01 14:50:22 +00:00
|
|
|
.B ezjail.sh
|
2005-09-27 13:58:35 +00:00
|
|
|
enforces the execution of
|
2005-09-20 21:52:57 +00:00
|
|
|
.B /etc/rc.d/jail,
|
2005-10-01 14:50:22 +00:00
|
|
|
by prepending
|
|
|
|
|
.I "one"
|
|
|
|
|
to the start, restart and stop commands so it is
|
2005-09-27 13:58:35 +00:00
|
|
|
.B NOT NECESSARY
|
|
|
|
|
to set
|
|
|
|
|
.I jail_enable
|
|
|
|
|
in the
|
2005-09-20 21:52:57 +00:00
|
|
|
.B /etc/rc.conf
|
|
|
|
|
config file.
|
2005-09-05 22:59:53 +00:00
|
|
|
.SH FILES
|
2005-09-24 14:46:53 +00:00
|
|
|
EZJAIL_PREFIX/etc/ezjail.conf
|
2005-09-05 22:59:53 +00:00
|
|
|
.br
|
2005-09-26 01:30:00 +00:00
|
|
|
EZJAIL_PREFIX/etc/rc.d/ezjail.sh
|
2005-09-05 22:59:53 +00:00
|
|
|
.SH "SEE ALSO"
|
|
|
|
|
ezjail-admin(1), ezjail.conf(5), jail(8), mount_nullfs(8)
|
|
|
|
|
.SH AUTHOR
|
|
|
|
|
Dirk Engling <erdgeist@erdgeist.org>
|
