Mercurial > hgrepos > FreeBSD > ports > sysutils > local-bsdtools

annotate bin/fjail @ 73:2e991a00035b

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
Creation of Jail datasets done
author Franz Glasner <hg@dom66.de>
date Thu, 15 Aug 2019 15:31:28 +0200
parents 929051be7845
children 247d35f910ca
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
rev   line source
72
929051be7845 Begin a simple (ZFS-related) jail setup tool
Franz Glasner <fzglas.hg@dom66.de>
parents:
diff changeset
1 #!/bin/sh
929051be7845 Begin a simple (ZFS-related) jail setup tool
Franz Glasner <fzglas.hg@dom66.de>
parents:
diff changeset
2 # -*- indent-tabs-mode: nil; -*-
929051be7845 Begin a simple (ZFS-related) jail setup tool
Franz Glasner <fzglas.hg@dom66.de>
parents:
diff changeset
3 # @(#)$HGid$
929051be7845 Begin a simple (ZFS-related) jail setup tool
Franz Glasner <fzglas.hg@dom66.de>
parents:
diff changeset
4
73
2e991a00035b Creation of Jail datasets done
Franz Glasner <hg@dom66.de>
parents: 72
diff changeset
5 set -e
2e991a00035b Creation of Jail datasets done
Franz Glasner <hg@dom66.de>
parents: 72
diff changeset
6
2e991a00035b Creation of Jail datasets done
Franz Glasner <hg@dom66.de>
parents: 72
diff changeset
7 VERSION="@@VERSION@@"
2e991a00035b Creation of Jail datasets done
Franz Glasner <hg@dom66.de>
parents: 72
diff changeset
8
2e991a00035b Creation of Jail datasets done
Franz Glasner <hg@dom66.de>
parents: 72
diff changeset
9 # Reset to standard umask
2e991a00035b Creation of Jail datasets done
Franz Glasner <hg@dom66.de>
parents: 72
diff changeset
10 umask 0022
2e991a00035b Creation of Jail datasets done
Franz Glasner <hg@dom66.de>
parents: 72
diff changeset
11
2e991a00035b Creation of Jail datasets done
Franz Glasner <hg@dom66.de>
parents: 72
diff changeset
12 #
2e991a00035b Creation of Jail datasets done
Franz Glasner <hg@dom66.de>
parents: 72
diff changeset
13 # "datasets" -- create the ZFS dataset tree
2e991a00035b Creation of Jail datasets done
Franz Glasner <hg@dom66.de>
parents: 72
diff changeset
14 #
2e991a00035b Creation of Jail datasets done
Franz Glasner <hg@dom66.de>
parents: 72
diff changeset
15 # command_datasets parent-dataset child-dataset
2e991a00035b Creation of Jail datasets done
Franz Glasner <hg@dom66.de>
parents: 72
diff changeset
16 #
2e991a00035b Creation of Jail datasets done
Franz Glasner <hg@dom66.de>
parents: 72
diff changeset
17 command_datasets() {
2e991a00035b Creation of Jail datasets done
Franz Glasner <hg@dom66.de>
parents: 72
diff changeset
18 # parent ZFS dataset -- child ZFS dataset name
2e991a00035b Creation of Jail datasets done
Franz Glasner <hg@dom66.de>
parents: 72
diff changeset
19 local _pds _cds
2e991a00035b Creation of Jail datasets done
Franz Glasner <hg@dom66.de>
parents: 72
diff changeset
20 # and its mount point
2e991a00035b Creation of Jail datasets done
Franz Glasner <hg@dom66.de>
parents: 72
diff changeset
21 local _pmp _get _dummy
2e991a00035b Creation of Jail datasets done
Franz Glasner <hg@dom66.de>
parents: 72
diff changeset
22 # full name of the dataset
2e991a00035b Creation of Jail datasets done
Franz Glasner <hg@dom66.de>
parents: 72
diff changeset
23 local _ds
2e991a00035b Creation of Jail datasets done
Franz Glasner <hg@dom66.de>
parents: 72
diff changeset
24
2e991a00035b Creation of Jail datasets done
Franz Glasner <hg@dom66.de>
parents: 72
diff changeset
25 _pds="$1"
2e991a00035b Creation of Jail datasets done
Franz Glasner <hg@dom66.de>
parents: 72
diff changeset
26 if [ -z "${_pds}" ]; then
2e991a00035b Creation of Jail datasets done
Franz Glasner <hg@dom66.de>
parents: 72
diff changeset
27 echo "ERROR: no parent dataset given" >&2
2e991a00035b Creation of Jail datasets done
Franz Glasner <hg@dom66.de>
parents: 72
diff changeset
28 return 2
2e991a00035b Creation of Jail datasets done
Franz Glasner <hg@dom66.de>
parents: 72
diff changeset
29 fi
2e991a00035b Creation of Jail datasets done
Franz Glasner <hg@dom66.de>
parents: 72
diff changeset
30 _get=$(zfs get -H mountpoint "${_pds}" 2>/dev/null) || { echo "ERROR: dataset \`${_pds}' does not exist" >&2; return 1; }
2e991a00035b Creation of Jail datasets done
Franz Glasner <hg@dom66.de>
parents: 72
diff changeset
31 IFS=$'\t' read _dummy _dummy _pmp _dummy <<EOF
2e991a00035b Creation of Jail datasets done
Franz Glasner <hg@dom66.de>
parents: 72
diff changeset
32 ${_get}
2e991a00035b Creation of Jail datasets done
Franz Glasner <hg@dom66.de>
parents: 72
diff changeset
33 EOF
2e991a00035b Creation of Jail datasets done
Franz Glasner <hg@dom66.de>
parents: 72
diff changeset
34 case "${_pmp}" in
2e991a00035b Creation of Jail datasets done
Franz Glasner <hg@dom66.de>
parents: 72
diff changeset
35 none)
2e991a00035b Creation of Jail datasets done
Franz Glasner <hg@dom66.de>
parents: 72
diff changeset
36 echo "ERROR: dataset \`${_pds}' has no mountpoint" >&2
2e991a00035b Creation of Jail datasets done
Franz Glasner <hg@dom66.de>
parents: 72
diff changeset
37 return 1
2e991a00035b Creation of Jail datasets done
Franz Glasner <hg@dom66.de>
parents: 72
diff changeset
38 ;;
2e991a00035b Creation of Jail datasets done
Franz Glasner <hg@dom66.de>
parents: 72
diff changeset
39 legacy)
2e991a00035b Creation of Jail datasets done
Franz Glasner <hg@dom66.de>
parents: 72
diff changeset
40 echo "ERROR: dataset \`${_pds}' has a \`${_mp}' mountpoint" >&2
2e991a00035b Creation of Jail datasets done
Franz Glasner <hg@dom66.de>
parents: 72
diff changeset
41 return 1
2e991a00035b Creation of Jail datasets done
Franz Glasner <hg@dom66.de>
parents: 72
diff changeset
42 ;;
2e991a00035b Creation of Jail datasets done
Franz Glasner <hg@dom66.de>
parents: 72
diff changeset
43 *)
2e991a00035b Creation of Jail datasets done
Franz Glasner <hg@dom66.de>
parents: 72
diff changeset
44 # VOID
2e991a00035b Creation of Jail datasets done
Franz Glasner <hg@dom66.de>
parents: 72
diff changeset
45 ;;
2e991a00035b Creation of Jail datasets done
Franz Glasner <hg@dom66.de>
parents: 72
diff changeset
46 esac
2e991a00035b Creation of Jail datasets done
Franz Glasner <hg@dom66.de>
parents: 72
diff changeset
47 _cds="$2"
2e991a00035b Creation of Jail datasets done
Franz Glasner <hg@dom66.de>
parents: 72
diff changeset
48 if [ -z "${_cds}" ]; then
2e991a00035b Creation of Jail datasets done
Franz Glasner <hg@dom66.de>
parents: 72
diff changeset
49 echo "ERROR: no child dataset given" >&2
2e991a00035b Creation of Jail datasets done
Franz Glasner <hg@dom66.de>
parents: 72
diff changeset
50 return 2
2e991a00035b Creation of Jail datasets done
Franz Glasner <hg@dom66.de>
parents: 72
diff changeset
51 fi
2e991a00035b Creation of Jail datasets done
Franz Glasner <hg@dom66.de>
parents: 72
diff changeset
52 _ds="${_pds}/${_cds}"
2e991a00035b Creation of Jail datasets done
Franz Glasner <hg@dom66.de>
parents: 72
diff changeset
53 echo "Resulting new root dataset is \`${_ds}' at mountpoint \`${_pmp}/${_cds}'"
2e991a00035b Creation of Jail datasets done
Franz Glasner <hg@dom66.de>
parents: 72
diff changeset
54 if zfs get -H mountpoint "${_ds}" >/dev/null 2>/dev/null; then
2e991a00035b Creation of Jail datasets done
Franz Glasner <hg@dom66.de>
parents: 72
diff changeset
55 echo "ERROR: dataset \`${_ds}' does already exist" >&2
2e991a00035b Creation of Jail datasets done
Franz Glasner <hg@dom66.de>
parents: 72
diff changeset
56 return 1
2e991a00035b Creation of Jail datasets done
Franz Glasner <hg@dom66.de>
parents: 72
diff changeset
57 fi
2e991a00035b Creation of Jail datasets done
Franz Glasner <hg@dom66.de>
parents: 72
diff changeset
58 zfs create -o atime=off "${_ds}"
2e991a00035b Creation of Jail datasets done
Franz Glasner <hg@dom66.de>
parents: 72
diff changeset
59 zfs create -o sync=disabled -o setuid=off "${_ds}/tmp"
2e991a00035b Creation of Jail datasets done
Franz Glasner <hg@dom66.de>
parents: 72
diff changeset
60 zfs create "${_ds}/usr"
2e991a00035b Creation of Jail datasets done
Franz Glasner <hg@dom66.de>
parents: 72
diff changeset
61 zfs create "${_ds}/var"
2e991a00035b Creation of Jail datasets done
Franz Glasner <hg@dom66.de>
parents: 72
diff changeset
62 zfs create -o exec=off -o setuid=off "${_ds}/var/audit"
2e991a00035b Creation of Jail datasets done
Franz Glasner <hg@dom66.de>
parents: 72
diff changeset
63 zfs create -o exec=off -o setuid=off "${_ds}/var/cache"
2e991a00035b Creation of Jail datasets done
Franz Glasner <hg@dom66.de>
parents: 72
diff changeset
64 zfs create -o exec=off -o setuid=off -o compression=off "${_ds}/var/cache/pkg"
2e991a00035b Creation of Jail datasets done
Franz Glasner <hg@dom66.de>
parents: 72
diff changeset
65 zfs create -o exec=off -o setuid=off -o compression=off "${_ds}/var/crash"
2e991a00035b Creation of Jail datasets done
Franz Glasner <hg@dom66.de>
parents: 72
diff changeset
66 zfs create -o exec=off -o setuid=off "${_ds}/var/db"
2e991a00035b Creation of Jail datasets done
Franz Glasner <hg@dom66.de>
parents: 72
diff changeset
67 zfs create -o exec=on -o setuid=off "${_ds}/var/db/pkg"
2e991a00035b Creation of Jail datasets done
Franz Glasner <hg@dom66.de>
parents: 72
diff changeset
68 zfs create -o readonly=on -o exec=off -o setuid=off "${_ds}/var/empty"
2e991a00035b Creation of Jail datasets done
Franz Glasner <hg@dom66.de>
parents: 72
diff changeset
69 zfs create -o exec=off -o setuid=off -o primarycache=metadata "${_ds}/var/log"
2e991a00035b Creation of Jail datasets done
Franz Glasner <hg@dom66.de>
parents: 72
diff changeset
70 zfs create -o exec=off -o setuid=off -o atime=on "${_ds}/var/mail"
2e991a00035b Creation of Jail datasets done
Franz Glasner <hg@dom66.de>
parents: 72
diff changeset
71 zfs create -o sync=disabled -o exec=off -o setuid=off -o compression=off -o primarycache=all "${_ds}/var/run"
2e991a00035b Creation of Jail datasets done
Franz Glasner <hg@dom66.de>
parents: 72
diff changeset
72 zfs create -o sync=disabled -o setuid=off "${_ds}/var/tmp"
2e991a00035b Creation of Jail datasets done
Franz Glasner <hg@dom66.de>
parents: 72
diff changeset
73 }
2e991a00035b Creation of Jail datasets done
Franz Glasner <hg@dom66.de>
parents: 72
diff changeset
74
2e991a00035b Creation of Jail datasets done
Franz Glasner <hg@dom66.de>
parents: 72
diff changeset
75 #
2e991a00035b Creation of Jail datasets done
Franz Glasner <hg@dom66.de>
parents: 72
diff changeset
76 # "privs" -- adjust privileges
2e991a00035b Creation of Jail datasets done
Franz Glasner <hg@dom66.de>
parents: 72
diff changeset
77 #
2e991a00035b Creation of Jail datasets done
Franz Glasner <hg@dom66.de>
parents: 72
diff changeset
78 # To be used when all ZFS datasets are mounted.
2e991a00035b Creation of Jail datasets done
Franz Glasner <hg@dom66.de>
parents: 72
diff changeset
79 #
2e991a00035b Creation of Jail datasets done
Franz Glasner <hg@dom66.de>
parents: 72
diff changeset
80 command_privs() {
2e991a00035b Creation of Jail datasets done
Franz Glasner <hg@dom66.de>
parents: 72
diff changeset
81 # mountpoint
2e991a00035b Creation of Jail datasets done
Franz Glasner <hg@dom66.de>
parents: 72
diff changeset
82 local _mp _d
2e991a00035b Creation of Jail datasets done
Franz Glasner <hg@dom66.de>
parents: 72
diff changeset
83
2e991a00035b Creation of Jail datasets done
Franz Glasner <hg@dom66.de>
parents: 72
diff changeset
84 _mp="$1"
2e991a00035b Creation of Jail datasets done
Franz Glasner <hg@dom66.de>
parents: 72
diff changeset
85 if [ -z "${_mp}" ]; then
2e991a00035b Creation of Jail datasets done
Franz Glasner <hg@dom66.de>
parents: 72
diff changeset
86 echo "ERROR: no mountpoint given" >&2
2e991a00035b Creation of Jail datasets done
Franz Glasner <hg@dom66.de>
parents: 72
diff changeset
87 return 2
2e991a00035b Creation of Jail datasets done
Franz Glasner <hg@dom66.de>
parents: 72
diff changeset
88 fi
2e991a00035b Creation of Jail datasets done
Franz Glasner <hg@dom66.de>
parents: 72
diff changeset
89 if [ ! -d "${_mp}" ]; then
2e991a00035b Creation of Jail datasets done
Franz Glasner <hg@dom66.de>
parents: 72
diff changeset
90 echo "ERROR: directory \`${_mp}' does not exist" >&2
2e991a00035b Creation of Jail datasets done
Franz Glasner <hg@dom66.de>
parents: 72
diff changeset
91 return 1
2e991a00035b Creation of Jail datasets done
Franz Glasner <hg@dom66.de>
parents: 72
diff changeset
92 fi
2e991a00035b Creation of Jail datasets done
Franz Glasner <hg@dom66.de>
parents: 72
diff changeset
93 for _d in tmp var/tmp ; do
2e991a00035b Creation of Jail datasets done
Franz Glasner <hg@dom66.de>
parents: 72
diff changeset
94 chmod 01777 "${_mp}/${_d}"
2e991a00035b Creation of Jail datasets done
Franz Glasner <hg@dom66.de>
parents: 72
diff changeset
95 done
2e991a00035b Creation of Jail datasets done
Franz Glasner <hg@dom66.de>
parents: 72
diff changeset
96 chown root:mail "${_mp}/var/mail"
2e991a00035b Creation of Jail datasets done
Franz Glasner <hg@dom66.de>
parents: 72
diff changeset
97 chmod 0775 "${_mp}/var/mail"
2e991a00035b Creation of Jail datasets done
Franz Glasner <hg@dom66.de>
parents: 72
diff changeset
98 }
72
929051be7845 Begin a simple (ZFS-related) jail setup tool
Franz Glasner <fzglas.hg@dom66.de>
parents:
diff changeset
99
929051be7845 Begin a simple (ZFS-related) jail setup tool
Franz Glasner <fzglas.hg@dom66.de>
parents:
diff changeset
100 #
929051be7845 Begin a simple (ZFS-related) jail setup tool
Franz Glasner <fzglas.hg@dom66.de>
parents:
diff changeset
101 # Global option handling
929051be7845 Begin a simple (ZFS-related) jail setup tool
Franz Glasner <fzglas.hg@dom66.de>
parents:
diff changeset
102 #
929051be7845 Begin a simple (ZFS-related) jail setup tool
Franz Glasner <fzglas.hg@dom66.de>
parents:
diff changeset
103 while getopts "h" _opt ; do
929051be7845 Begin a simple (ZFS-related) jail setup tool
Franz Glasner <fzglas.hg@dom66.de>
parents:
diff changeset
104 case ${_opt} in
929051be7845 Begin a simple (ZFS-related) jail setup tool
Franz Glasner <fzglas.hg@dom66.de>
parents:
diff changeset
105 h)
73
2e991a00035b Creation of Jail datasets done
Franz Glasner <hg@dom66.de>
parents: 72
diff changeset
106 echo "Usage: XXX TBD"
72
929051be7845 Begin a simple (ZFS-related) jail setup tool
Franz Glasner <fzglas.hg@dom66.de>
parents:
diff changeset
107 exit 0
929051be7845 Begin a simple (ZFS-related) jail setup tool
Franz Glasner <fzglas.hg@dom66.de>
parents:
diff changeset
108 ;;
929051be7845 Begin a simple (ZFS-related) jail setup tool
Franz Glasner <fzglas.hg@dom66.de>
parents:
diff changeset
109 \?|:)
929051be7845 Begin a simple (ZFS-related) jail setup tool
Franz Glasner <fzglas.hg@dom66.de>
parents:
diff changeset
110 exit 2;
929051be7845 Begin a simple (ZFS-related) jail setup tool
Franz Glasner <fzglas.hg@dom66.de>
parents:
diff changeset
111 ;;
929051be7845 Begin a simple (ZFS-related) jail setup tool
Franz Glasner <fzglas.hg@dom66.de>
parents:
diff changeset
112 esac
929051be7845 Begin a simple (ZFS-related) jail setup tool
Franz Glasner <fzglas.hg@dom66.de>
parents:
diff changeset
113 done
929051be7845 Begin a simple (ZFS-related) jail setup tool
Franz Glasner <fzglas.hg@dom66.de>
parents:
diff changeset
114
929051be7845 Begin a simple (ZFS-related) jail setup tool
Franz Glasner <fzglas.hg@dom66.de>
parents:
diff changeset
115 #
929051be7845 Begin a simple (ZFS-related) jail setup tool
Franz Glasner <fzglas.hg@dom66.de>
parents:
diff changeset
116 # Reset the Shell's option handling system to prepare for handling
929051be7845 Begin a simple (ZFS-related) jail setup tool
Franz Glasner <fzglas.hg@dom66.de>
parents:
diff changeset
117 # command-local options.
929051be7845 Begin a simple (ZFS-related) jail setup tool
Franz Glasner <fzglas.hg@dom66.de>
parents:
diff changeset
118 #
929051be7845 Begin a simple (ZFS-related) jail setup tool
Franz Glasner <fzglas.hg@dom66.de>
parents:
diff changeset
119 shift $((OPTIND-1))
929051be7845 Begin a simple (ZFS-related) jail setup tool
Franz Glasner <fzglas.hg@dom66.de>
parents:
diff changeset
120 OPTIND=1
929051be7845 Begin a simple (ZFS-related) jail setup tool
Franz Glasner <fzglas.hg@dom66.de>
parents:
diff changeset
121
929051be7845 Begin a simple (ZFS-related) jail setup tool
Franz Glasner <fzglas.hg@dom66.de>
parents:
diff changeset
122 command="$1"
929051be7845 Begin a simple (ZFS-related) jail setup tool
Franz Glasner <fzglas.hg@dom66.de>
parents:
diff changeset
123 shift
929051be7845 Begin a simple (ZFS-related) jail setup tool
Franz Glasner <fzglas.hg@dom66.de>
parents:
diff changeset
124
929051be7845 Begin a simple (ZFS-related) jail setup tool
Franz Glasner <fzglas.hg@dom66.de>
parents:
diff changeset
125 case "${command}" in
73
2e991a00035b Creation of Jail datasets done
Franz Glasner <hg@dom66.de>
parents: 72
diff changeset
126 datasets)
2e991a00035b Creation of Jail datasets done
Franz Glasner <hg@dom66.de>
parents: 72
diff changeset
127 command_datasets "$@"
2e991a00035b Creation of Jail datasets done
Franz Glasner <hg@dom66.de>
parents: 72
diff changeset
128 ;;
2e991a00035b Creation of Jail datasets done
Franz Glasner <hg@dom66.de>
parents: 72
diff changeset
129 privs)
2e991a00035b Creation of Jail datasets done
Franz Glasner <hg@dom66.de>
parents: 72
diff changeset
130 command_privs "$@"
2e991a00035b Creation of Jail datasets done
Franz Glasner <hg@dom66.de>
parents: 72
diff changeset
131 ;;
72
929051be7845 Begin a simple (ZFS-related) jail setup tool
Franz Glasner <fzglas.hg@dom66.de>
parents:
diff changeset
132 test)
929051be7845 Begin a simple (ZFS-related) jail setup tool
Franz Glasner <fzglas.hg@dom66.de>
parents:
diff changeset
133 echo "TEST"
929051be7845 Begin a simple (ZFS-related) jail setup tool
Franz Glasner <fzglas.hg@dom66.de>
parents:
diff changeset
134 ;;
929051be7845 Begin a simple (ZFS-related) jail setup tool
Franz Glasner <fzglas.hg@dom66.de>
parents:
diff changeset
135 *)
929051be7845 Begin a simple (ZFS-related) jail setup tool
Franz Glasner <fzglas.hg@dom66.de>
parents:
diff changeset
136 echo "ERROR" >&2
929051be7845 Begin a simple (ZFS-related) jail setup tool
Franz Glasner <fzglas.hg@dom66.de>
parents:
diff changeset
137 exit 2
929051be7845 Begin a simple (ZFS-related) jail setup tool
Franz Glasner <fzglas.hg@dom66.de>
parents:
diff changeset
138 ;;
929051be7845 Begin a simple (ZFS-related) jail setup tool
Franz Glasner <fzglas.hg@dom66.de>
parents:
diff changeset
139 esac