{"id":118,"date":"2011-03-31T01:12:02","date_gmt":"2011-03-30T23:12:02","guid":{"rendered":"http:\/\/prout-prout.net\/blog\/?p=118"},"modified":"2013-08-01T18:41:13","modified_gmt":"2013-08-01T16:41:13","slug":"jails","status":"publish","type":"post","link":"https:\/\/xn--jrme-bpa1e.net\/blog\/post\/118\/jails\/","title":{"rendered":"Jails"},"content":{"rendered":"


\ncd \/usr\/src
\nmake build world<\/code><\/p>\n

+ Configurer ezjail-admin
\n
\ncd \/usr\/ports\/sysutils\/ezjail && make install clean
\necho 'ezjail_enable=\"YES\"' >> \/etc\/rc.conf.local
\n<\/code><\/p>\n

+ Ajouter \/etc\/pf.conf\u00a0:<\/p>\n

echo ‘nat on em0 from lo1:network to any -> (em0)’ >> \/etc\/pf.conf<\/p>\n

+ Ajouter dans \/etc\/rc.conf :
\n
\necho 'pf_enable=\"YES\"' >>\u00a0\/etc\/rc.conf
\necho 'pf_rules=\"\/etc\/pf.conf\"' >>\u00a0\/etc\/rc.conf
\necho 'pflog_enable=\"YES\"' >>\u00a0\/etc\/rc.conf
\necho 'cloned_interfaces=\"lo1\"' >>\u00a0\/etc\/rc.conf
\necho 'ifconfig_lo1=\"inet 10.0.1.254 netmask 255.255.255.0\"' >>\u00a0\/etc\/rc.conf
\n<\/code>
\n+ Ajouter dans \/usr\/local\/etc\/ezjail.conf :
\n
\nezjail_use_zfs=\"YES\"
\nezjail_jaildir=\"\/mnt\/storage\/jails\"
\nezjail_jailzfs=\"storage\/jails\"
\n<\/code><\/p>\n

+ Executer :
\n
\nezjail-admin update -p -i
\ncp \/etc\/resolv.conf \/mnt\/storage\/jails\/newjail
\nifconfig lo1 create
\n\/etc\/rc.d\/pf start
\n\/etc\/rc.d\/pflog start
\npfctl -d
\npfctl -e -f \/etc\/pf.conf
\n<\/code><\/p>\n

+ Cr\u00e9er une mail :
\n
\nzfs create storage\/jail\/my_jail
\nifconfig\u00a0lo1 inet 10.0.1.1 netmask 255.255.255.0 alias
\necho 'ifconfig_lo1_alias0=\"inet 10.0.1.1 netmask 255.255.255.0\"' >> \/etc\/rc.conf
\nezjail-admin create my_jail\u00a010.0.1.1
\n<\/code><\/p>\n

 <\/p>\n

+ Si on veut avoir que la jail puisse communiquer vers l’ext\u00e9rieur :
\n
\nsysctl security.jail.allow_raw_sockets=1
\n<\/code><\/p>\n

de mani\u00e8re permanente :
\n
\necho 'security.jail.allow_raw_sockets=1' >> \/etc\/sysctl.conf
\n<\/code><\/p>\n

 <\/p>\n

http:\/\/blog.burghardt.pl\/2009\/01\/multiple-freebsd-jails-sharing-one-ip-address<\/a>
\nhttp:\/\/www.siteduzero.com\/tutoriel-3-273288-la-prison.html<\/a><\/p>\n

 <\/p>\n","protected":false},"excerpt":{"rendered":"

cd \/usr\/src make build world + Configurer ezjail-admin cd \/usr\/ports\/sysutils\/ezjail && make install clean echo ‘ezjail_enable=\u00a0\u00bbYES\u00a0\u00bb‘ >> \/etc\/rc.conf.local + Ajouter \/etc\/pf.conf\u00a0: echo ‘nat on em0 from lo1:network to any -> (em0)’ >> \/etc\/pf.conf + Ajouter dans \/etc\/rc.conf : echo ‘pf_enable=\u00a0\u00bbYES\u00a0\u00bb‘ … Continuer la lecture →<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[],"class_list":["post-118","post","type-post","status-publish","format-standard","hentry","category-freebsd"],"_links":{"self":[{"href":"https:\/\/xn--jrme-bpa1e.net\/blog\/wp-json\/wp\/v2\/posts\/118","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/xn--jrme-bpa1e.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/xn--jrme-bpa1e.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/xn--jrme-bpa1e.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/xn--jrme-bpa1e.net\/blog\/wp-json\/wp\/v2\/comments?post=118"}],"version-history":[{"count":30,"href":"https:\/\/xn--jrme-bpa1e.net\/blog\/wp-json\/wp\/v2\/posts\/118\/revisions"}],"predecessor-version":[{"id":136,"href":"https:\/\/xn--jrme-bpa1e.net\/blog\/wp-json\/wp\/v2\/posts\/118\/revisions\/136"}],"wp:attachment":[{"href":"https:\/\/xn--jrme-bpa1e.net\/blog\/wp-json\/wp\/v2\/media?parent=118"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/xn--jrme-bpa1e.net\/blog\/wp-json\/wp\/v2\/categories?post=118"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/xn--jrme-bpa1e.net\/blog\/wp-json\/wp\/v2\/tags?post=118"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}