This shows you the differences between two versions of the page.
Both sides previous revision Previous revision Next revision | Previous revision Next revision Both sides next revision | ||
технология_jail [2015/05/13 10:53] val [Технология jail] |
технология_jail [2015/05/13 11:50] val [FreeBSD10.X] |
||
---|---|---|---|
Line 4: | Line 4: | ||
* [[http://www.freebsd.org/doc/handbook/jails-build.html|Creating and Controlling Jails]] | * [[http://www.freebsd.org/doc/handbook/jails-build.html|Creating and Controlling Jails]] | ||
* [[http://www.unixfaq.ru/index.pl?req=qs&id=1002|Управление переменными ядра в Jail]] | * [[http://www.unixfaq.ru/index.pl?req=qs&id=1002|Управление переменными ядра в Jail]] | ||
- | ===== Создание "мира" ===== | + | |
+ | ===== Создание копии системы ===== | ||
+ | |||
+ | ==== С использованием дистрибутива ==== | ||
+ | <code> | ||
+ | # mount_cd9660 /dev/cd0 /mnt | ||
+ | |||
+ | # setenv D /var/jail/www2 | ||
+ | |||
+ | # mkdir -p $D | ||
+ | |||
+ | # tar -xvf /mnt/usr/freebsd-dist/base.txz -C $D | ||
+ | </code> | ||
+ | |||
+ | ==== С использованием компиляции и установки "мира" системы ==== | ||
=== Подготовка исходных текстов === | === Подготовка исходных текстов === | ||
Line 28: | Line 42: | ||
</code> | </code> | ||
- | === Совместное использование дерева портов === | + | ===== Совместное использование дерева портов ===== |
<code> | <code> | ||
[server:~] # mount_nullfs /usr/ports/ /var/jail/www/usr/ports | [server:~] # mount_nullfs /usr/ports/ /var/jail/www/usr/ports | ||
</code> | </code> | ||
+ | |||
===== Запуск jail ===== | ===== Запуск jail ===== | ||
+ | |||
+ | ==== FreeBSD10.X ==== | ||
+ | |||
+ | * [[http://therub.org/2014/08/11/convert-freebsd-jails-from-rc.conf-to-jail.conf/|Convert FreeBSD 10 Jails from rc.conf to jail.conf]] | ||
+ | |||
+ | <code> | ||
+ | [server:~] # cat /etc/rc.conf | ||
+ | </code><code> | ||
+ | ... | ||
+ | jail_enable="YES" | ||
+ | jail_list="www" | ||
+ | </code><code> | ||
+ | [server:~] # cat /etc/jail.conf | ||
+ | </code><code> | ||
+ | allow.raw_sockets = 1; | ||
+ | exec.clean; | ||
+ | exec.system_user = "root"; | ||
+ | exec.jail_user = "root"; | ||
+ | exec.start = "/bin/sh /etc/rc"; | ||
+ | exec.stop = "/bin/sh /etc/rc.shutdown"; | ||
+ | exec.consolelog = "/var/log/jail.log"; | ||
+ | mount.devfs; | ||
+ | allow.set_hostname = 0; | ||
+ | allow.sysvipc = 0; | ||
+ | |||
+ | www { | ||
+ | host.hostname = "www.corpX.un"; | ||
+ | path = "/var/jail/www"; | ||
+ | interface = "em0"; | ||
+ | ip4.addr = "192.168.X.20"; | ||
+ | } | ||
+ | </code><code> | ||
+ | [server:~] # service jail start www | ||
+ | </code> | ||
+ | |||
+ | ==== FreeBSD8.X ==== | ||
<code> | <code> | ||
[server:~] # cat /etc/rc.conf | [server:~] # cat /etc/rc.conf |