[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [ezjail] [PATCH] "Locally configured IP" check in ezjail-admin is not 100% reliable

On 15.01.2012 21:45, Dirk Engling wrote:
> On Sun, 15 Jan 2012, Thomas Steen Rasmussen wrote:
>> I agree, sounds reasonable.
> https://erdgeist.org/cvsweb/ezjail/ezjail-admin.diff?r1=1.284&r2=1.285&f=h
> Does the test for v4-Addresses look reasonable? This way v6-addresses
> are kinda defaultish (even when just garbled), but they're much harder
> to put into a globbing expression.
>   erdgeist

Looks good to me. I have a local patch for ezjail that
makes it add missing IP aliases before starting jails,
and in that code I echo the IP and grep for : or . and
determine the IP protocol that way. I might change it
to a case construct like the one you made since it is
shorter and invokes less external utilities :)


ps. Would you be interested in seeing the IP patch ?
I realize a lot of people might not like the idea of ezjail
managing IP addresses on the NICs, but I personally
love that I don't have to manage the jail IP aliases in
both rc.conf and ezjail configs ;)