[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [ezjail] install 60 jails

I create a "compile" jail, and in it I do a "make package" or "make package-recursive" for all the packages I want installed in other jails.

Since all my jails share the same /usr/ports, in the other jails it's quite simple to script the installation of the latest compiled version of any given app:

    pkg_add /usr/ports/www/lightttpd/*.tbz

do that as required for the packages you need installed. You'll use this same technique later when you manage your jails. For example, the recent png exploit that required updating in every jail in which its installed. If you are using this approach, you build the package in the compile jail and then deinstall and pkg_add it back into each jails.

  jexec JID su
pkg_info -e png-1.2.18 && cd /usr/ports/graphics/png && make deinstall && pkg_add *.tbz

and of course, this is very easy to script.


On Oct 25, 2007, at 9:49 AM, Jorge R. Constenla wrote:

I use 5 servers. (Xeon 8MBL2 2.40GHz  1066MHz, 4G RAM, 500G SATA)
I run 12 Jails per server.

I know how can create a Jail but my question is:
What is the easy way to install programs like apache, qmail etc.. and update the 60 jails ?
One by one?

If you know some documentation, will be appreciated.

Thanks in advance

Matt Simerson wrote:

 On Oct 24, 2007, at 9:23 PM, Dirk Engling wrote:

Jorge R. Constenla wrote:

I need to install 60 jails.
All Jails should run apache-php5-mysql5-perl-ftp-qmail-vpopmail- courier

Have you considered how much RAM is going to be required to manage 60 Apache + PHP 5 instances? And 60 MySQL instances? Even with my- small.cnf you're looking at a lot of RAM. Is MySQL necessary? Can you use one MySQL instance shared by all 60 jails?

Vpopmail works just fine with the CDB database, so unless you need something like the sasql plugin for squirrelmail, or SA per-user prefs, avoiding MySQL entirely would be a good design idea.

I also echo Dirk's suggestion of lighttpd instead of Apache and dovecot instead of courier.