As a note to myself and to save the time in troubleshooting and chasing issues, few specifics to make the below services run in jail environment under FreeBSD 13.1.<\/p>\n
First, the generic options: 1. PostgreSQL: few parameters need to be set in the jail.conf – sysvshm, sysvsem, sysvmsg 2. MongoDB: all it needs is allow.mlock in the jail definition 3. Neo4j: due to the java you need to specify how to mount the local fstab the content of the fstab in the jail is:<\/p>\n fdesc \/dev\/fd fdescfs rw 0 0 4. Elastic Search and Kibana (ELK stack): same as for the Neo4j – you need to specify how to mount the local fstab<\/p>\n cat \/zroot\/jails\/elk\/etc\/fstab.java The rest of the service I ran in jails have no particularities in the defitionions – Apache, wikimedia, Django, OpenVPN<\/p>\n","protected":false},"excerpt":{"rendered":" As a note to myself and to save the time in troubleshooting and chasing issues, few specifics to make the below services run in jail environment under FreeBSD 13.1. First, the generic options: # cat \/etc\/jail.conf allow.raw_sockets = 1; allow.set_hostname = 1; allow.sysvipc = 1; mount.devfs; # Mount devfs inside the jail exec.start = “\/bin\/sh […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[],"class_list":["post-72","post","type-post","status-publish","format-standard","hentry","category-bsd"],"yoast_head":"\n
\n# cat \/etc\/jail.conf
\nallow.raw_sockets = 1;
\nallow.set_hostname = 1;
\nallow.sysvipc = 1;
\nmount.devfs; # Mount devfs inside the jail
\nexec.start = \"\/bin\/sh \/etc\/rc\"; # Start command
\nexec.stop = \"\/bin\/sh \/etc\/rc.shutdown\"; # Stop command
\n<\/code><\/p>\n
\npostgres {
\nhost.hostname = postgres.dilyan.be; # Hostname
\nip4.addr = 192.168.3.117; # IP address of the jail
\npath = \"\/zroot\/jails\/postgres\"; # Path to the jail
\nsysvshm = new;
\nsysvsem = new;
\nsysvmsg = new;
\n}
\n<\/code><\/p>\n
\nmongodb {
\nhost.hostname = mongodb.dilyan.be; # Hostname
\nip4.addr = 192.168.3.118; # IP address of the jail
\npath = \"\/zroot\/jails\/mongodb\"; # Path to the jail
\nallow.mlock;
\n}
\n<\/code><\/p>\n
\nneo4j {<\/code>
\nhost.hostname = neo4j.dilyan.be; # Hostname
\nip4.addr = 192.168.3.121; # IP address of the jail
\npath = \"\/zroot\/jails\/neo4j\"; # Path to the jail
\nmount.fstab=\"\/zroot\/jails\/neo4j\/etc\/fstab.neo4j\";\t\t# mount local fstab for the java
\n}
\n<\/code><\/p>\n
\nproc \/proc procfs rw 0 0<\/p>\n
\nelk {
\nhost.hostname = elk.dilyan.be; # Hostname
\nip4.addr = 192.168.3.122; # IP address of the jail
\npath = \"\/zroot\/jails\/elk\"; # Path to the jail
\nmount.fstab=\"\/zroot\/jails\/elk\/etc\/fstab.java\"; # mount local fstab for the java
\n}
\n<\/code><\/p>\n
\nfdesc \/dev\/fd fdescfs rw 0 0
\nproc \/proc procfs rw 0 0<\/p>\n