Lines Matching +full:multi +full:- +full:subsystems
2 .\" Copyright (c) 2008-2012 James Gritton
94 .Bl -tag -width indent
104 Exhibit a list of all configured non-wildcard jails and their parameters.
129 The jail is first removed and then re-created, as if
146 .Bl -tag -width indent
148 Clean up after an already-removed jail, running commands and operations
193 No removal-related parameters for this jail will be used \(em the jail will
251 If hierarchical jails exist, a partial-matching wildcard definition may
288 comma-separated list, or with
293 List-based parameters may also be specified multiple times on the command
309 Then there are pseudo-parameters that are only used by
320 .Bl -tag -width indent
456 in the per-jail devfs.
485 When set to 2 (default), above syscalls can operate only on a mount-point
498 pseudo-parameter set.
500 The ID of the cpuset associated with this jail (read-only).
502 This is true if the jail is in the process of shutting down (read-only).
506 of the parent of this jail, or zero if this is a top-level jail
507 (read-only).
511 sysctl and uname -r.
515 and uname -K.
520 sysctl, which can only be adjusted by the non-jailed root user.
553 Some restrictions of the jail environment may be set on a per-jail
560 .Bl -tag -width indent
568 This is deprecated in favor of the per-module parameters (see below).
589 network subsystems, extra caution should be used where privileged access
599 system types marked as jail-friendly.
621 with non-jailed parts of the system.
650 daemons are permitted to run inside a properly configured vnet-enabled jail.
695 The super-user will be disabled automatically if its parent system has it
697 The super-user is enabled by default.
723 to encapsulate the jail in some module-specific way,
728 Module-specific parameters include:
729 .Bl -tag -width indent
740 fuse-based file systems.
795 .Xr zfs-jail 8
828 the jail cannot perform any sysvmsg-related system calls.
843 There are pseudo-parameters that are not passed to the kernel, but are
858 The pseudo-parameters are:
859 .Bl -tag -width indent
973 .Dq Ar interface Ns | Ns Ar ip-address Ns / Ns Ar netmask param ... .
978 If a netmask in either dotted-quad or CIDR form is given
987 .Dq Ar interface Ns | Ns Ar ip-address Ns / Ns Ar prefix param ... .
989 A list of network interfaces to give to a vnet-enabled jail after is it created.
997 .Xr zfs-jail 8
1087 .Bd -literal -offset indent
1090 mkdir -p $D
1119 .Dq jail-friendly .
1137 .Bd -literal -offset indent
1139 inetd_flags="-wW -a 192.0.2.23"
1151 flags entries; for others it is necessary to modify per-application
1183 Any third-party network software running
1205 .Bd -literal -offset indent
1206 jail -c path=/data/jail/testjail mount.devfs \\
1214 and do the post-install configuration to set various configuration options,
1219 .Bl -bullet -offset indent -compact
1240 You may also want to perform any package-specific configuration (web servers,
1256 .Bd -literal -offset indent
1284 .Bd -literal -offset indent
1285 jail -c testjail
1321 .Bd -literal -offset indent
1322 kill -TERM -1
1323 kill -KILL -1
1342 .Bd -literal -offset indent
1343 jail -r
1358 .Dq Li -
1369 .Dl "ps ax -o pid,jid,args"
1372 .Bd -literal -offset indent
1373 pgrep -lfj 3
1374 pkill -j 3
1378 .Dl "killall -j 3"
1385 jail-friendly, the jail's
1402 The read-only entry
1412 Some MIB variables have per-jail settings.
1429 Each jail has a read-only
1435 of 0 indicates the jail is a child of the current jail (or is a top-level
1456 Jail names reflect this hierarchy, with a full name being an MIB-type string
1518 .Xr zfs-jail 8 ,
1530 .An -nosplit
1532 .An Poul-Henning Kamp
1542 added multi-IP jail support for IPv4 and IPv6 based on a patch