1abd0b262SDevin Teske 2abd0b262SDevin Teske############################################################################### 3abd0b262SDevin Teske############################# JAIL CONFIGURATIONS ############################# 4abd0b262SDevin Teske############################################################################### 5abd0b262SDevin Teske 6abd0b262SDevin Teskejail_enable="YES" 7*3f558d0bSBrad Davisjail_list="XXX" 8abd0b262SDevin Teske 9abd0b262SDevin Teske# 10abd0b262SDevin Teske# Global presets for all jails 11abd0b262SDevin Teske# 12abd0b262SDevin Teskejail_devfs_enable="YES" # mount devfs 13abd0b262SDevin Teske# Optional (default off) 14abd0b262SDevin Teske#jail_sysvipc_allow="YES" # Allow SysV Interprocess Comm. 15abd0b262SDevin Teske#jail_set_hostname_allow="YES" # Allow hostname to change 16abd0b262SDevin Teske 17abd0b262SDevin Teske# 18abd0b262SDevin Teske# To allow dhclient(8) to work inside a jail, make sure the following appears 19abd0b262SDevin Teske# in /etc/devfs.rules (which should be created if it doesn't exist): 20abd0b262SDevin Teske# 21abd0b262SDevin Teske# [devfsrules_jail=11] 22abd0b262SDevin Teske# add include $devfsrules_hide_all 23abd0b262SDevin Teske# add include $devfsrules_unhide_basic 24abd0b262SDevin Teske# add include $devfsrules_unhide_login 25abd0b262SDevin Teske# add path 'bpf*' unhide 26abd0b262SDevin Teske# 27abd0b262SDevin Teske 28abd0b262SDevin Teske############################################################ JAILS 29abd0b262SDevin Teske 30abd0b262SDevin Teske# NETGRAPH TEMPLATE (copy/pate; then replace {name} with short name for jail) 31abd0b262SDevin Teske# 32abd0b262SDevin Teske# {name} 33abd0b262SDevin Teske# 34abd0b262SDevin Teske#jail_{name}_hostname="{name}.shxd.cx" # hostname 35abd0b262SDevin Teske#jail_{name}_rootdir="/vm/{name}" # root directory 36abd0b262SDevin Teske#jail_{name}_vnet_interfaces="ng0_{name}" # vnet interface(s) 37abd0b262SDevin Teske#jail_{name}_exec_prestart0="jng bridge {name} em0" # bridge interface(s) 38abd0b262SDevin Teske#jail_{name}_exec_poststop0="jng shutdown {name}" # destroy interface(s) 39abd0b262SDevin Teske# Optional (default off) 40abd0b262SDevin Teske#jail_{name}_devfs_ruleset="11" # rule to unhide bpf for DHCP 41abd0b262SDevin Teske#jail_{name}_mount_enable="YES" # mount /etc/fstab.{name} 42abd0b262SDevin Teske 43abd0b262SDevin Teske# IF_BRIDGE TEMPLATE (copy/pate; then replace {name} with short name for jail) 44abd0b262SDevin Teske# 45abd0b262SDevin Teske# {name} 46abd0b262SDevin Teske# 47abd0b262SDevin Teske#jail_{name}_hostname="{name}.shxd.cx" # hostname 48abd0b262SDevin Teske#jail_{name}_rootdir="/vm/{name}" # root directory 49abd0b262SDevin Teske#jail_{name}_vnet_interfaces="e0b_{name}" # vnet interface(s) 50abd0b262SDevin Teske#jail_{name}_exec_prestart0="jib addm {name} em0" # bridge interface(s) 51abd0b262SDevin Teske#jail_{name}_exec_poststop0="jib destroy {name}" # destroy interface(s) 52abd0b262SDevin Teske# Optional (default off) 53abd0b262SDevin Teske#jail_{name}_devfs_ruleset="11" # rule to unhide bpf for DHCP 54abd0b262SDevin Teske#jail_{name}_mount_enable="YES" # mount /etc/fstab.{name} 55abd0b262SDevin Teske 56abd0b262SDevin Teske# 57abd0b262SDevin Teske# XXX 58abd0b262SDevin Teske# 59*3f558d0bSBrad Davisjail_XXX_hostname="XXX.YYY" # hostname 60*3f558d0bSBrad Davisjail_XXX_rootdir="/vm/XXX" # root directory 61abd0b262SDevin Teske# netgraph 62*3f558d0bSBrad Davisjail_XXX_vnet_interface="ng0_XXX" # vnet interface(s) 63*3f558d0bSBrad Davisjail_XXX_exec_prestart0="jng bridge XXX em0" # bridge interface(s) 64*3f558d0bSBrad Davisjail_XXX_exec_poststop0="jng shutdown XXX" # destroy interface(s) 65abd0b262SDevin Teske# if_bridge 66*3f558d0bSBrad Davis#jail_XXX_vnet_interface="e0b_XXX" # vnet interface(s) 67*3f558d0bSBrad Davis#jail_XXX_exec_prestart0="jib addm XXX em0" # bridge interface(s) 68*3f558d0bSBrad Davis#jail_XXX_exec_poststop0="jib destroy XXX" # destroy interface(s) 69abd0b262SDevin Teske# Optional (default off) 70*3f558d0bSBrad Davis#jail_XXX_devfs_ruleset="11" # rule to unhide bpf for DHCP 71*3f558d0bSBrad Davis#jail_XXX_mount_enable="YES" # mount /etc/fstab.XXX 72abd0b262SDevin Teske 73abd0b262SDevin Teske################################################################################ 74abd0b262SDevin Teske# END 75abd0b262SDevin Teske################################################################################ 76