https://www.sasara.moe/w/index.php?action=history&feed=atom&title=FreeBSD_jails 2026-05-05T18:33:29Z Revision history for this page on the wiki MediaWiki 1.43.3 https://www.sasara.moe/w/index.php?title=FreeBSD_jails&diff=464&oldid=prev 2025-09-27T23:24:34Z

<p><span class="autocomment">Enable IP forwarding</span></p> <table style="background-color: #fff; color: #202122;" data-mw="interface"> <col class="diff-marker" /> <col class="diff-content" /> <col class="diff-marker" /> <col class="diff-content" /> <tr class="diff-title" lang="en-GB"> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">← Older revision</td> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">Revision as of 23:24, 27 September 2025</td> </tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l44">Line 44:</td> <td colspan="2" class="diff-lineno">Line 44:</td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>===Enable IP forwarding===</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>===Enable IP forwarding===</div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>  # sysctl net.inet.ip.forwarding=1</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>  # sysctl net.inet.ip.forwarding=1</div></td></tr> <tr><td colspan="2" class="diff-side-deleted"></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;"> # echo "net.inet.ip.forwarding=1" &gt;&gt; /etc/sysctl.conf</ins></div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>===Configure loopback interface===</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>===Configure loopback interface===</div></td></tr> </table>

Rubenerd https://www.sasara.moe/w/index.php?title=FreeBSD_jails&diff=449&oldid=prev 2025-09-27T05:00:16Z

<p></p> <table style="background-color: #fff; color: #202122;" data-mw="interface"> <col class="diff-marker" /> <col class="diff-content" /> <col class="diff-marker" /> <col class="diff-content" /> <tr class="diff-title" lang="en-GB"> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">← Older revision</td> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">Revision as of 05:00, 27 September 2025</td> </tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l62">Line 62:</td> <td colspan="2" class="diff-lineno">Line 62:</td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>==Better IPv6-based networking==</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>==Better IPv6-based networking==</div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>&lt;code&gt;#TODO&lt;/code&gt; here!</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>&lt;code&gt;#TODO&lt;/code&gt; here!</div></td></tr> <tr><td colspan="2" class="diff-side-deleted"></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;"></ins></div></td></tr> <tr><td colspan="2" class="diff-side-deleted"></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">[[Category:Tech]]</ins></div></td></tr> </table>

Rubenerd https://www.sasara.moe/w/index.php?title=FreeBSD_jails&diff=448&oldid=prev 2025-09-27T05:00:08Z

<p>Created page with &quot;&#039;&#039;&#039;FreeBSD jails&#039;&#039;&#039; are a process isolation tool on <a href="/wiki/FreeBSD" title="FreeBSD">FreeBSD</a> (surprising though it may seem) that extends &lt;code&gt;chroot(8)&lt;/code&gt; in wonderful ways. ==Essential reading== * [https://docs.freebsd.org/en/books/handbook/jails/ FreeBSD Handbook chapter 17: Jails and Containers] * [https://freebsdfoundation.org/wp-content/uploads/2020/03/Jail-vnet-by-Examples.pdf Jail vnet by Examples, by Oliver Cochard-Labbé] ==Basic configuration== ===/etc/jail.conf=== ## Don&#039;t impo...&quot;</p> <p><b>New page</b></p><div>&#039;&#039;&#039;FreeBSD jails&#039;&#039;&#039; are a process isolation tool on [[FreeBSD]] (surprising though it may seem) that extends &lt;code&gt;chroot(8)&lt;/code&gt; in wonderful ways.<br /> <br /> ==Essential reading==<br /> * [https://docs.freebsd.org/en/books/handbook/jails/ FreeBSD Handbook chapter 17: Jails and Containers]<br /> * [https://freebsdfoundation.org/wp-content/uploads/2020/03/Jail-vnet-by-Examples.pdf Jail vnet by Examples, by Oliver Cochard-Labbé]<br /> <br /> ==Basic configuration==<br /> <br /> ===/etc/jail.conf===<br /> <br /> ## Don&#039;t import host env vars<br /> exec.clean;<br /> &amp;nbsp;<br /> ## Start/stop jails<br /> exec.start=&quot;sh /etc/rc&quot;;<br /> exec.stop=&quot;sh /etc/rc.shutdown&quot;;<br /> &amp;nbsp;<br /> ## Allow fdescfs and procfs (for services like Plex)<br /> mount.devfs;<br /> allow.mount.fdescfs;<br /> allow.mount.procfs;<br /> &amp;nbsp;<br /> ## Standard hostnames and locations based on jail name<br /> path=&quot;/jail/${name}&quot;;<br /> host.hostname=&quot;${name}.host.lan&quot;;<br /> mount.fstab=&quot;/etc/fstab.${name}&quot;;<br /> <br /> ===/etc/jail.conf.d/jailname.conf===<br /> <br /> jailname {<br /> ## Example<br /> ip4.addr=&quot;10.10.10.1&quot;<br /> &amp;nbsp;<br /> ## Required for Postgres<br /> allow.sysvipc=1;<br /> &amp;nbsp;<br /> ## Required by some services<br /> mount.fdescfs;<br /> mount.procfs;<br /> }<br /> <br /> ==Quick and dirty jails with loopback networking==<br /> <br /> ===Enable IP forwarding===<br /> # sysctl net.inet.ip.forwarding=1<br /> <br /> ===Configure loopback interface===<br /> # sysrc cloned_interfaces=&quot;lo1&quot;<br /> # sysrc ipv4_addrs_lo1=&quot;10.10.10.1-9/29&quot;<br /> <br /> ===Configure pf===<br /> <br /> ## pf.conf<br /> [...]<br /> nat pass on $EXT_IF from $NET_JAIL to any -&gt; $EXT_IP<br /> rdr pass on $EXT_IF proto tcp from any to $EXT_IP port $WWW_PORT -&gt; $WWW_JAIL<br /> [...]<br /> <br /> ==Better vnet-based networking==<br /> &lt;code&gt;#TODO&lt;/code&gt; here!<br /> <br /> ==Better IPv6-based networking==<br /> &lt;code&gt;#TODO&lt;/code&gt; here!</div>

Rubenerd