comparison sbin/ftjail @ 240:04fde1941966

Remove unneeded code from copying from fjail
author Franz Glasner <fzglas.hg@dom66.de>
date Fri, 09 Sep 2022 23:13:20 +0200
parents 23f37702a502
children acf16a85900f
comparison
equal deleted inserted replaced
239:23f37702a502 240:04fde1941966
210 210
211 # Really do it 211 # Really do it
212 command_datasets_tmpl_base "${_p_base}" "${_name}" || return 212 command_datasets_tmpl_base "${_p_base}" "${_name}" || return
213 command_datasets_tmpl_skel "${_p_skel}" "${_name}" || return 213 command_datasets_tmpl_skel "${_p_skel}" "${_name}" || return
214 return 0 214 return 0
215
216 #
217 # NOTE: For BEs these directory will be *excluded* from the BE
218 #
219 # /tmp
220 # /usr/home
221 # /usr/ports
222 # /usr/src
223 # /var/audit
224 # /var/crash
225 # /var/log
226 # /var/mail
227 # /var/tmp
228 #
229 zfs create ${_zfsopts} ${_zfsnoauto} -o atime=off "${_ds}"
230 zfs create ${_zfsopts} ${_zfsnoauto} -o sync=disabled -o setuid=off "${_ds}/tmp"
231 if [ "${_tiny}" != "extra" ]; then
232 if [ "${_tiny}" = "yes" ]; then
233 zfs create ${_zfsopts} -o canmount=off "${_ds}/usr"
234 else
235 zfs create ${_zfsopts} ${_zfsnoauto} "${_ds}/usr"
236 fi
237 zfs create ${_zfsopts} ${_zfsnoauto} -o setuid=off "${_ds}/usr/home"
238 zfs create ${_zfsopts} ${_zfsnoauto} "${_ds}/usr/local"
239 fi
240 if [ \( "${_tiny}" = "yes" \) -o \( "${_tiny}" = "extra" \) ]; then
241 zfs create ${_zfsopts} -o canmount=off "${_ds}/var"
242 else
243 zfs create ${_zfsopts} ${_zfsnoauto} "${_ds}/var"
244 fi
245 if [ "${_tiny}" != "extra" ]; then
246 zfs create ${_zfsopts} ${_zfsnoauto} -o exec=off -o setuid=off "${_ds}/var/audit"
247 zfs create ${_zfsopts} ${_zfsnoauto} -o exec=off -o setuid=off "${_ds}/var/cache"
248 zfs create ${_zfsopts} ${_zfsnoauto} -o exec=off -o setuid=off -o primarycache=metadata -o compression=off "${_ds}/var/cache/pkg"
249 zfs create ${_zfsopts} ${_zfsnoauto} -o exec=off -o setuid=off -o compression=off "${_ds}/var/crash"
250 fi
251 if [ "$_fbsdupdate" = "yes" ]; then
252 if [ \( "${_tiny}" = "yes" \) -o \( "${_tiny}" = "extra" \) ]; then
253 zfs create ${_zfsopts} -o canmount=off -o exec=off -o setuid=off "${_ds}/var/db"
254 else
255 zfs create ${_zfsopts} ${_zfsnoauto} -o exec=off -o setuid=off "${_ds}/var/db"
256 fi
257 zfs create ${_zfsopts} ${_zfsnoauto} -o exec=off -o setuid=off -o primarycache=metadata -o compression=off "${_ds}/var/db/freebsd-update"
258 fi
259 zfs create ${_zfsopts} ${_zfsnoauto} ${_varempty_ro} -o exec=off -o setuid=off "${_ds}/var/empty"
260 zfs create ${_zfsopts} ${_zfsnoauto} -o exec=off -o setuid=off -o primarycache=metadata "${_ds}/var/log"
261 zfs create ${_zfsopts} ${_zfsnoauto} -o exec=off -o setuid=off -o atime=on "${_ds}/var/mail"
262 zfs create ${_zfsopts} ${_zfsnoauto} -o sync=disabled -o exec=off -o setuid=off -o compression=off -o primarycache=all "${_ds}/var/run"
263 zfs create ${_zfsopts} ${_zfsnoauto} -o sync=disabled -o setuid=off "${_ds}/var/tmp"
264 } 215 }
265 216
266 217
267 # 218 #
268 # "populate" -- populate the datasets with content from a FreeBSD base.txz 219 # "populate" -- populate the datasets with content from a FreeBSD base.txz