Poudriere in a jail - Revision history

Tykling at 13:49, 3 August 2016

2016-08-03T13:49:27Z

← Older revision		Revision as of 13:49, 3 August 2016
Line 53:		Line 53:
	<pre>		<pre>
	sudo poudriere jail -c -j freebsd_10_3_amd64 -v 10.3-RELEASE		sudo poudriere jail -c -j freebsd_10_3_amd64 -v 10.3-RELEASE
			</pre>

			* Create (one or more) ports tree. I name the default tree "default" and if I want to experiment with, say, one of the quarterly ports trees, I'd name it as such.
			<pre>
			sudo poudriere ports -c -p default
	</pre>		</pre>

Tykling at 13:32, 3 August 2016

2016-08-03T13:32:32Z

← Older revision		Revision as of 13:32, 3 August 2016
Line 49:		Line 49:

	* The last line is not a default setting but one that is neccesary due to path length restrictions combined with jails. To make it work apply the patch in the link above.		* The last line is not a default setting but one that is neccesary due to path length restrictions combined with jails. To make it work apply the patch in the link above.

			* Create one or more jails for the versions you need to build for
			<pre>
			sudo poudriere jail -c -j freebsd_10_3_amd64 -v 10.3-RELEASE
			</pre>

Tykling at 13:12, 3 August 2016

2016-08-03T13:12:45Z

← Older revision		Revision as of 13:12, 3 August 2016
Line 21:		Line 21:
	$ sudo portmaster www/nginx ports-mgmt/poudriere		$ sudo portmaster www/nginx ports-mgmt/poudriere
	</pre>		</pre>

			* Create key and cert for signing packages
			<pre>
			$ sudo mkdir -p /usr/local/etc/ssl/{keys,certs}
			$ sudo chmod 0600 /usr/local/etc/ssl/keys
			$ sudo openssl genrsa -out /usr/local/etc/ssl/keys/poudriere.key 4096
			$ sudo openssl rsa -in /usr/local/etc/ssl/keys/poudriere.key -pubout -out /usr/local/etc/ssl/certs/poudriere.crt
			</pre>

			* Create <code>/usr/local/etc/poudriere.conf</code> with the following contents:
			<pre>
			ZPOOL=tyktank
			ZROOTFS=/poudriere
			FREEBSD_HOST=ftp://ftp.dk.freebsd.org
			RESOLV_CONF=/etc/resolv.conf
			BASEFS=/usr/local/poudriere
			USE_PORTLINT=no
			USE_TMPFS=yes
			DISTFILES_CACHE=/usr/ports/distfiles
			PKG_REPO_SIGNING_KEY=/usr/local/etc/pki/poudriere/poudriere.key
			NOLINUX=yes
			BUILDER_HOSTNAME=poudriere.tyknet.dk

			# https://gist.github.com/gynter/86ed7a6cae20927d6ef0
			USE_MASTERMNT_HASH=yes
			</pre>

			* The last line is not a default setting but one that is neccesary due to path length restrictions combined with jails. To make it work apply the patch in the link above.

Tykling at 11:03, 3 August 2016

2016-08-03T11:03:11Z

← Older revision		Revision as of 11:03, 3 August 2016
Line 3:		Line 3:
	* Create a ZFS dataset for the jail		* Create a ZFS dataset for the jail
	<pre>		<pre>
	$ sudo zfs create -o jailed=on ~~tank~~/poudriere		$ sudo zfs create -o jailed=on tyktank/poudriere
	</pre>		</pre>

	* Change settings in ezjail config		* Change settings in ezjail config
	<pre>		<pre>
			export jail_poudriere_tyknet_dk_zfs_datasets="tyktank/poudriere"
	export jail_poudriere_tyknet_dk_parameters="children.max=100 allow.mount allow.mount.tmpfs allow.mount.devfs allow.mount.procfs allow.mount.zfs allow.mount.nullfs allow.raw_sockets allow.socket_af allow.sysvipc allow.chflags enforce_statfs=1 ip6=inherit ip4=inherit"		export jail_poudriere_tyknet_dk_parameters="children.max=100 allow.mount allow.mount.tmpfs allow.mount.devfs allow.mount.procfs allow.mount.zfs allow.mount.nullfs allow.raw_sockets allow.socket_af allow.sysvipc allow.chflags enforce_statfs=1 ip6=inherit ip4=inherit"
	</pre>		</pre>

Tykling at 13:12, 2 August 2016

2016-08-02T13:12:04Z

← Older revision		Revision as of 13:12, 2 August 2016
Line 1:		Line 1:
	* Create a normal ezjail		* Create a normal ezjail

	* Create a ZFS dataset for the jail		* Create a ZFS dataset for the jail
	<pre>		<pre>
	$ sudo zfs create -o jailed=on tank/poudriere		$ sudo zfs create -o jailed=on tank/poudriere
	</pre>		</pre>

	* Change settings in ezjail config		* Change settings in ezjail config
	<pre>		<pre>
	export jail_poudriere_tyknet_dk_parameters="children.max=100 allow.mount allow.mount.tmpfs allow.mount.devfs allow.mount.procfs allow.mount.zfs allow.mount.nullfs allow.raw_sockets allow.socket_af allow.sysvipc allow.chflags enforce_statfs=1 ip6=inherit ip4=inherit"		export jail_poudriere_tyknet_dk_parameters="children.max=100 allow.mount allow.mount.tmpfs allow.mount.devfs allow.mount.procfs allow.mount.zfs allow.mount.nullfs allow.raw_sockets allow.socket_af allow.sysvipc allow.chflags enforce_statfs=1 ip6=inherit ip4=inherit"
	</pre>		</pre>
	* Add needed kld modules to rc.conf
			* Add needed kld modules to rc.conf (and load them manually)
	<pre>		<pre>
	kld_list="zfs aesni geom_mirror tmpfs linux linprocfs nullfs procfs fdescfs"		kld_list="zfs aesni geom_mirror tmpfs linux linprocfs nullfs procfs fdescfs"
			</pre>

			* Install needed ports
			<pre>
			$ sudo portmaster www/nginx ports-mgmt/poudriere
	</pre>		</pre>

Tykling at 10:09, 1 August 2016

2016-08-01T10:09:35Z

← Older revision		Revision as of 10:09, 1 August 2016
Line 7:		Line 7:
	<pre>		<pre>
	export jail_poudriere_tyknet_dk_parameters="children.max=100 allow.mount allow.mount.tmpfs allow.mount.devfs allow.mount.procfs allow.mount.zfs allow.mount.nullfs allow.raw_sockets allow.socket_af allow.sysvipc allow.chflags enforce_statfs=1 ip6=inherit ip4=inherit"		export jail_poudriere_tyknet_dk_parameters="children.max=100 allow.mount allow.mount.tmpfs allow.mount.devfs allow.mount.procfs allow.mount.zfs allow.mount.nullfs allow.raw_sockets allow.socket_af allow.sysvipc allow.chflags enforce_statfs=1 ip6=inherit ip4=inherit"
			</pre>
			* Add needed kld modules to rc.conf
			<pre>
			kld_list="zfs aesni geom_mirror tmpfs linux linprocfs nullfs procfs fdescfs"
	</pre>		</pre>

Tykling: Created page with "* Create a normal ezjail * Create a ZFS dataset for the jail

 $  sudo zfs create -o jailed=on tank/poudriere

* Change settings in ezjail config

 export jail_p..."

2016-08-01T07:20:20Z

Created page with "* Create a normal ezjail * Create a ZFS dataset for the jail <pre> $ sudo zfs create -o jailed=on tank/poudriere </pre> * Change settings in ezjail config <pre> export jail_p..."

New page

* Create a normal ezjail
* Create a ZFS dataset for the jail
<pre>
$ sudo zfs create -o jailed=on tank/poudriere
</pre>
* Change settings in ezjail config
<pre>
export jail_poudriere_tyknet_dk_parameters="children.max=100 allow.mount allow.mount.tmpfs allow.mount.devfs allow.mount.procfs allow.mount.zfs allow.mount.nullfs allow.raw_sockets allow.socket_af allow.sysvipc allow.chflags enforce_statfs=1 ip6=inherit ip4=inherit"
</pre>