view docs/man/man8/fjail-configure.rst @ 649:4ee9a8042f4a

common.subr: _get_jail_from_path() now just returns when the jail is dying. But it prints the name of the jail if it is yet dying. Real error reporting must not consistently be done in the caller.
author Franz Glasner <fzglas.hg@dom66.de>
date Fri, 27 Sep 2024 21:21:34 +0200
parents cf331d11a393
children
line wrap: on
line source

.. -*- coding: utf-8; indent-tabs-mode: nil; -*-

fjail-configure
===============

Synopsis
--------

**fjail configure** [**-d**] `mountpoint`


Description
-----------

Configure some basic settings of a jail that is mounted at `mountpoint`.

.. program:: fjail configure

.. option:: -d

   Temporarily also mount a standard devfs filesystem at `mountpoint`/dev.

The following configuration settings are applied:

  The "root" account within the jail is deactivated.

  In the jail's :file:`/etc/rc.conf`::

    sendmail_enable="NONE"
    clear_tmp_enable="YES"
    clear_tmp_X="NO"
    syslogd_flags="-ss"
    bsdstats_enable="NO"

  The timezone is set to "Europe/Berlin" if not yet set.

  The :file:`/etc/resolv.conf` is copied from the host into the jail if
  the target does not exist yet.

  :command:`/usr/bin/newaliases` is called within the jail.

  In the jail's :file:`/etc/periodic.conf.local`::

    daily_ntpd_leapfile_enable="NO"
    daily_status_zfs_zpool_list_enable="NO"
    daily_status_disks_enable="NO"
    daily_status_uptime_enable="NO"

This command can be used for all sort of jails (normal, thin).

A proposal for a hostid suitable for use within the jail is printed to
stdout also; this is done by calling :command:`fjail hostid`.


Implementation Notes
--------------------

A populated and working dev filesystem within the jail is needed to
work properly. This is checked for.


See Also
--------

:manpage:`fjail(8)`, :manpage:`ftjail(8)`, :manpage:`fjail-hostid(8)`