view docs/man/man8/fjail-configure.rst @ 328:184412e2543e

Implement the -d option for fjail configure: temporarily mount a devfs filesystem
author Franz Glasner <fzglas.hg@dom66.de>
date Wed, 30 Nov 2022 09:46:29 +0100
parents db04f195db32
children 4a17b1f4c378
line wrap: on
line source

.. -*- coding: utf-8; indent-tabs-mode: nil; -*-

fjail-configure
===============

Synopsis
--------

**fjail configure** [**-d**] `mountpoint`


Description
-----------

Configure some basic settings of a jail that is mounted at `mountpoint`.

.. program:: fjail configure

.. option:: -d

   Temporarily also mount a standard devfs filesystem to `mountpoint`/dev.

The following configuration settings are applied:

  The "root" account within the jail is deactivated.

  In the jail's :file:`/etc/rc.conf`::

    sendmail_enable="NONE"
    clear_tmp_enable="YES"
    clear_tmp_X="NO"
    syslogd_flags="-ss"
    bsdstats_enable="NO"

  The timezone is set to "Europe/Berlin" if not yet set.

  The :file:`/etc/resolv.conf` is copied from the host into the jail if
  the target does not exist yet.

  :command:`/usr/bin/newaliases` is called within the jail.

  In the jail's :file:`/etc/periodic.conf.local`::

    daily_ntpd_leapfile_enable="NO"
    daily_status_zfs_zpool_list_enable="NO"
    daily_status_disks_enable="NO"
    daily_status_uptime_enable="NO"

This command can be used for all sort of jails (normal, thin).

A proposal for a hostid suitable for use within the jail is printed to
stdout also; this is done by calling :command:`fjail hostid`.


Implementation Notes
--------------------

A working dev filesystem is typically needed to work properly.


See Also
--------

:manpage:`fjail(8)`, :manpage:`ftjail(8)`, :manpage:`fjail-hostid(8)`