view docs/man/man8/fjail-configure.rst @ 362:30ff08fb7442

Better explain what "-s" does for "check-ports"
author Franz Glasner <fzglas.hg@dom66.de>
date Mon, 12 Dec 2022 09:14:13 +0100
parents cf331d11a393
children
line wrap: on
line source

.. -*- coding: utf-8; indent-tabs-mode: nil; -*-

fjail-configure
===============

Synopsis
--------

**fjail configure** [**-d**] `mountpoint`


Description
-----------

Configure some basic settings of a jail that is mounted at `mountpoint`.

.. program:: fjail configure

.. option:: -d

   Temporarily also mount a standard devfs filesystem at `mountpoint`/dev.

The following configuration settings are applied:

  The "root" account within the jail is deactivated.

  In the jail's :file:`/etc/rc.conf`::

    sendmail_enable="NONE"
    clear_tmp_enable="YES"
    clear_tmp_X="NO"
    syslogd_flags="-ss"
    bsdstats_enable="NO"

  The timezone is set to "Europe/Berlin" if not yet set.

  The :file:`/etc/resolv.conf` is copied from the host into the jail if
  the target does not exist yet.

  :command:`/usr/bin/newaliases` is called within the jail.

  In the jail's :file:`/etc/periodic.conf.local`::

    daily_ntpd_leapfile_enable="NO"
    daily_status_zfs_zpool_list_enable="NO"
    daily_status_disks_enable="NO"
    daily_status_uptime_enable="NO"

This command can be used for all sort of jails (normal, thin).

A proposal for a hostid suitable for use within the jail is printed to
stdout also; this is done by calling :command:`fjail hostid`.


Implementation Notes
--------------------

A populated and working dev filesystem within the jail is needed to
work properly. This is checked for.


See Also
--------

:manpage:`fjail(8)`, :manpage:`ftjail(8)`, :manpage:`fjail-hostid(8)`