Questions tagged [jails]
The jails tag has no usage guidance.
101
questions
0
votes
1
answer
71
views
Automate deploying a bunch of thin jails
I'm setting up the *ARR suite apps in jails (using the Bastille manager). I used to do this in debian and docker but this time I moved to freeBSD to try out it's native zfs support.
In setting up I ...
- 27
1
vote
1
answer
55
views
Forgejo pid file (/var/run/forgejo.pid) : not readable in Truenas Core (FreeBSD Jail)
I have been trying to get Forgejo running in a Truenas Core (FreeBSD jail) for over a week. When I manually start Forgejo as the git user it runs as expected, however attempting to get it to run with ...
- 13
1
vote
1
answer
61
views
Why is keyboard and mouse unable to be hotplugged in FreeBSD jail?
I have an entire system with xorg-x11 running in a jail. My only issue is that I am unable to add or remove a keyboard or mouse while X is running. If I restart X, the newly connected keyboard or ...
- 123
0
votes
1
answer
138
views
How to log and block all internet access from a program?
I have a binary from an untrusted source, and I would like to block and log any internet access attempt, and see to what server it tries to connect.
A first way I though of is using firejail https://...
- 139
1
vote
1
answer
305
views
Does fstab make sense for chroot jail?
I've created an fstab file (to mount /dev/pts and /proc, with the bind option) as part of a jail but when I chroot to the jail neither filesystem is mounted. This makes me wonder when the fstab for a ...
- 177
3
votes
1
answer
674
views
Jail/Sandbox process on an overlay root and track changes
What I am trying to achieve
I want to run a process as an unprivileged user, but all files that are changed by this process should be only changed in a shadow folder. Furthermore, I want to disable ...
- 151
1
vote
1
answer
429
views
Run firefox within a Linux chroot jail in FreeBSD 13.1
I have managed to install a Ubuntu chroot jail within FreeBSD 13.1. However, I need to run Firefox from it to launch Jupyter Lab from a python virtual environment within the chroot subsystem. I was ...
- 111
2
votes
0
answers
123
views
How to re-enable the `enable` command?
As part of a script to set up a restricted user, I ran the enable -n enable command. For testing purposes I would like to undo that command but I can't find any documentation on how to do so. I know ...
- 244
2
votes
2
answers
2k
views
Restrict linux process write permission to one folder
I want a process (and all its potential children) to be able to read the filesystem according to my user profile but I want to restrict that process's write permission to only a set of pre-selected ...
- 205
1
vote
0
answers
52
views
Empty executables after creating bind mount
I've created a bind mount in /tmp/test which I then use to establish a chroot jail. For example:
mount --bind -o ro /usr/bin/ /tmp/test
chroot /tmp/test /some_executable
This seems to work fine - most ...
0
votes
1
answer
116
views
Resolve local webserver to public domain
Is there a way to forward traffic on mydomain.com to local web server hosted on virtual machine ( bhyve )?
Let's say my local machine has local IP - 1.1.1.1
And my registered domain in X hosting ...
2
votes
2
answers
1k
views
man returns execve: No such file or directory in chroot jail
I created a chroot jail and copied multiple binaries and their corresponding libraries to the relevant subdirectories. Example:
cp -v /usr/bin/edit /home/jail/usr/bin
ldd /usr/bin/edit
linux-...
- 487
0
votes
1
answer
87
views
What is the `/` command displayed by htop?
I’m running FreeBSD 12.1-RELEASE on my home server.
From time to time, the server’s HDDs thrash for hours on end, even though the server itself should be idle. (I have no cron jobs scheduled, and I ...
- 213
1
vote
0
answers
53
views
Confusion about FreeBSD jail being up to date (or not)
I'm new to FreeBSD system administration and I'm a little confused about keeping jails up to date. Different commands seem to give conflicting information:
After sudo pkg -j 18 upgrade, re-running ...
- 111
1
vote
1
answer
1k
views
How do I access my jail by hostname on a home network?
I'm using FreeNAS (FreeBSD), and I've created a jail, and I've given the jail a hostname, and I can access the jail via IP address, but I can't access the jail by it's hostname. (within my home ...
- 111