Freebsd JAIL + VNET двойной запуск rc?
Есть машина с jailaми, которые админятся через ezjail в который прикручен сетевой стек. Конфиг выглядет так.
# To specify the start up order of your ezjails, use these lines to # create a Jail dependency tree. See rcorder(8) for more details. # # PROVIDE: standard_ezjail # REQUIRE: # BEFORE: # export jail_vpn0_rooml_ru_flags="-c vnet name=vpn0_rooml_ru allow.raw_sockets=1 allow.sysvipc=1" # export jail_vpn0_rooml_ru_hostname=«vpn0.rooml.ru» # export jail_vpn0_rooml_ru_exec_prestart0=«ifconfig epair0 create» export jail_vpn0_rooml_ru_exec_prestart1=«ifconfig bridge0 addm epair0a» export jail_vpn0_rooml_ru_exec_prestart2=«ifconfig epair0a up» # #export jail_vpn0_rooml_ru_exec_start="/bin/sh /etc/rc" # export jail_vpn0_rooml_ru_exec_poststart0=«ifconfig epair0b vnet vpn0_rooml_ru» export jail_vpn0_rooml_ru_exec_poststart1=«jexec vpn0_rooml_ru ifconfig lo0 127.0.0.1» export jail_vpn0_rooml_ru_exec_poststart2=«jexec vpn0_rooml_ru ifconfig epair0b 192.168.5.2/24 up» export jail_vpn0_rooml_ru_exec_poststart3=«jexec vpn0_rooml_ru route add default 192.168.5.1» export jail_vpn0_rooml_ru_exec_poststart4=«jexec vpn0_rooml_ru /etc/rc.d/ipfw start» export jail_vpn0_rooml_ru_exec_poststart5=«jexec vpn0_rooml_ru /bin/sh /etc/rc» # #export jail_vpn0_rooml_ru_exec_poststop0=«jexec vpn0_rooml_ru /bin/sh /etc/rc.shutdown» #export jail_vpn0_rooml_ru_exec_poststop1=«ifconfig bridge0 deletem epair0a» #export jail_vpn0_rooml_ru_exec_poststop2=«ifconfig epair0a destroy» # export jail_vpn0_rooml_ru_ip="" export jail_vpn0_rooml_ru_rootdir="/usr/home/main/jail/vpn0.rooml.ru" #export jail_vpn0_rooml_ru_exec_start1="/bin/sh /etc/rc" export jail_vpn0_rooml_ru_exec_stop="" export jail_vpn0_rooml_ru_mount_enable=«YES» export jail_vpn0_rooml_ru_devfs_enable=«YES» export jail_vpn0_rooml_ru_devfs_ruleset=«devfsrules_jail» export jail_vpn0_rooml_ru_procfs_enable=«YES» export jail_vpn0_rooml_ru_fdescfs_enable=«YES» export jail_vpn0_rooml_ru_image="" export jail_vpn0_rooml_ru_imagetype="" export jail_vpn0_rooml_ru_attachparams="" export jail_vpn0_rooml_ru_attachblocking="" export jail_vpn0_rooml_ru_forceblocking="" export jail_vpn0_rooml_ru_zfs_datasets="" export jail_vpn0_rooml_ru_cpuset="" export jail_vpn0_rooml_ru_fib="" export jail_vpn0_rooml_ru_parentzfs="" export jail_vpn0_rooml_ru_parameters="" export jail_vpn0_rooml_ru_post_start_script=""
Читать дальше
# To specify the start up order of your ezjails, use these lines to # create a Jail dependency tree. See rcorder(8) for more details. # # PROVIDE: standard_ezjail # REQUIRE: # BEFORE: # export jail_vpn0_rooml_ru_flags="-c vnet name=vpn0_rooml_ru allow.raw_sockets=1 allow.sysvipc=1" # export jail_vpn0_rooml_ru_hostname=«vpn0.rooml.ru» # export jail_vpn0_rooml_ru_exec_prestart0=«ifconfig epair0 create» export jail_vpn0_rooml_ru_exec_prestart1=«ifconfig bridge0 addm epair0a» export jail_vpn0_rooml_ru_exec_prestart2=«ifconfig epair0a up» # #export jail_vpn0_rooml_ru_exec_start="/bin/sh /etc/rc" # export jail_vpn0_rooml_ru_exec_poststart0=«ifconfig epair0b vnet vpn0_rooml_ru» export jail_vpn0_rooml_ru_exec_poststart1=«jexec vpn0_rooml_ru ifconfig lo0 127.0.0.1» export jail_vpn0_rooml_ru_exec_poststart2=«jexec vpn0_rooml_ru ifconfig epair0b 192.168.5.2/24 up» export jail_vpn0_rooml_ru_exec_poststart3=«jexec vpn0_rooml_ru route add default 192.168.5.1» export jail_vpn0_rooml_ru_exec_poststart4=«jexec vpn0_rooml_ru /etc/rc.d/ipfw start» export jail_vpn0_rooml_ru_exec_poststart5=«jexec vpn0_rooml_ru /bin/sh /etc/rc» # #export jail_vpn0_rooml_ru_exec_poststop0=«jexec vpn0_rooml_ru /bin/sh /etc/rc.shutdown» #export jail_vpn0_rooml_ru_exec_poststop1=«ifconfig bridge0 deletem epair0a» #export jail_vpn0_rooml_ru_exec_poststop2=«ifconfig epair0a destroy» # export jail_vpn0_rooml_ru_ip="" export jail_vpn0_rooml_ru_rootdir="/usr/home/main/jail/vpn0.rooml.ru" #export jail_vpn0_rooml_ru_exec_start1="/bin/sh /etc/rc" export jail_vpn0_rooml_ru_exec_stop="" export jail_vpn0_rooml_ru_mount_enable=«YES» export jail_vpn0_rooml_ru_devfs_enable=«YES» export jail_vpn0_rooml_ru_devfs_ruleset=«devfsrules_jail» export jail_vpn0_rooml_ru_procfs_enable=«YES» export jail_vpn0_rooml_ru_fdescfs_enable=«YES» export jail_vpn0_rooml_ru_image="" export jail_vpn0_rooml_ru_imagetype="" export jail_vpn0_rooml_ru_attachparams="" export jail_vpn0_rooml_ru_attachblocking="" export jail_vpn0_rooml_ru_forceblocking="" export jail_vpn0_rooml_ru_zfs_datasets="" export jail_vpn0_rooml_ru_cpuset="" export jail_vpn0_rooml_ru_fib="" export jail_vpn0_rooml_ru_parentzfs="" export jail_vpn0_rooml_ru_parameters="" export jail_vpn0_rooml_ru_post_start_script=""