[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [ezjail] ezjail question or proposal... (fwd)



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Dirk Engling wrote:


> Currently the implementation I have is a sh script that is looking over
> a bunch of dirs an on behalf of this making mounts with nullfs.
> 
> So my question is: Can I atach a script to run when startting/stoping
> jail but that script is OUT of the jail itself?

Hello Anton,

excuse my late reply, I've been really busy during last weeks. I've
always thought about some pre- and post- scripts to run for jails. They
are best implemented as jail classes you can put your ezjails into.

Some scripts handling classes of jails could then perform actions like
setting up firewall rules, assign dynamic IPs, mount directories and so on.

I spent several weeks thinking about it but could not yet bring myself
into dumping that in shell scripts, since there are tons of security
implications and I've always wanted ezjail to provide the most simple
solution possible.

I hope I will get it right this month but this is clearly a ezjail-3.0
feature.

Regards,

  erdgeist
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.3 (Darwin)

iD8DBQFFrOnDImmQdUyYEgkRAh4xAJ9Xe9yVj0rXGAi51nedWn7/cMU26gCeJtO4
+Ka5VvZXTo6Y/V88AViwJUQ=
=vCSi
-----END PGP SIGNATURE-----