Port details |
- qjail Utility to quickly deploy and manage jails
- 5.5_1 sysutils =8 5.5_1Version of this port present on the latest quarterly branch.
- Maintainer: qjail1@a1poweruser.com
- Port Added: 2011-06-11 21:22:44
- Last Update: 2024-01-10 15:29:49
- Commit Hash: e4610fc
- People watching this port, also watch:: vm-bhyve, webcamd, openssl, node, haproxy
- License: BERNE-CONVENTION
- WWW:
- https://qjail.sourceforge.net/
- Description:
- This qjail version only supports RELEASE-11.0 and newer.
Qjail [ q = quick ] is a 4th generation wrapper for the basic chroot jail
system that includes security and performance enhancements. Plus a new level
of "user friendliness" enhancements dealing with deploying just a few jails or
large scale jail environments consisting of 100's of jails.
Qjail uses the jail(8) jail.conf method. This provides the ability to enable
the following options on a per-jail basis. exec.fib, securelevel, allow.sysvipc,
devfs_rulesets, allow.raw_sockets, allow.quotas, allow.mount.nullfs,
allow.mount.tmpfs, allow.mount.zfs, vnet.interface, and vnet. The vnet option
gives a jail its own network stack using the experimental vimage kernel module.
The vnet option has only been tested on i386 and amd64 equipment.
Qjail requires no knowledge of the jail command usage. It uses "nullfs" for
read-only system executables, sharing one copy of them with all the jails.
Uses "mdconfig" to create sparse image jails. Sparse image jails provide a
method to limit the total disk space a jail can consume, while only occupying
the physical disk space of the sum size of the files in the image jail.
Ability to assign ip address with their network device name,
so aliases are auto created on jail start and auto removed on jail stop.
Ability to create "ZONE"s of identical qjail systems, each with their own
group of jails.
Ability to designate a portion of the jail name as a group prefix so the
command being executed will apply to only those jail names matching that prefix.
Qjail has been incorporated into the Finch open source project,
see http://dreamcat4.github.io/finch/ for details.
- ¦ ¦ ¦ ¦
- Manual pages:
- FreshPorts has no man page information for this port.
- pkg-plist: as obtained via:
make generate-plist - Dependency lines:
-
- To install the port:
- cd /usr/ports/sysutils/qjail/ && make install clean
- To add the package, run one of these commands:
- pkg install sysutils/qjail
- pkg install qjail
NOTE: If this package has multiple flavors (see below), then use one of them instead of the name specified above.- PKGNAME: qjail
- Flavors: there is no flavor information for this port.
- distinfo:
- TIMESTAMP = 1603736786
SHA256 (qjail-5.5.tar.bz2) = 1151baa3faa4bd09dc489135227884f34335232cf3fdbd7a2bf09ec2da5bcf20
SIZE (qjail-5.5.tar.bz2) = 68064
Packages (timestamps in pop-ups are UTC):
- This port has no dependencies.
- There are no ports dependent upon this port
Configuration Options:
- No options to configure
- Options name:
- sysutils_qjail
- USES:
- tar:bzip2
- pkg-message:
- For install:
- Use the qjail utility to deploy small or large numbers of jails quickly.
First issue "rehash" command to enable the qjail command (if using csh).
Then issue
"man qjail-intro" To read the qjail introduction.
"man qjail" For qjail usage details.
"man qjail-drive-traffic For example of driving public traffic to jails.
"man qjail-vnet-howto" For example of creating vnet jails.
"man qjail-ipv6-testing" For example of testing jails with ipv6 addresses.
- Master Sites:
|
Commit History - (may be incomplete: for full details, see links to repositories near top of page) |
Commit | Credits | Log message |
5.5_1 10 Jan 2024 15:29:49 |
Baptiste Daroussin (bapt) |
MAN?PREFIX: eleminate its usage and move man to share/man |
5.5 06 Nov 2023 10:03:47 |
Rodrigo Osorio (rodrigo) |
*/*: Update WWW to use HTTPS for sourceforge.net projects
Homepage link is permanent redirected to its HTTPS counterpart
Issue reported by repology : https://repology.org/repository/freebsd/problems
Approved by: portmgr (blanket)
PR: 274888 |
07 Sep 2022 21:58:51 |
Stefan Eßer (se) |
Remove WWW entries moved into port Makefiles
Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.
This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.
Approved by: portmgr (tcberner) |
5.5 07 Sep 2022 21:10:59 |
Stefan Eßer (se) |
Add WWW entries to port Makefiles
It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.
Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.
There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.
(Only the first 15 lines of the commit message are shown above ) |
5.5 20 Jul 2022 14:23:05 |
Tobias C. Berner (tcberner) |
sysutils: remove 'Created by' lines
A big Thank You to the original contributors of these ports:
* <jsmith@resonatingmedia.com>
* Aaron Dalton <aaron@FreeBSD.org>
* Aaron Landwehr <aaron@snaphat.com>
* Adam Weinberger <adamw@FreeBSD.org>
* Adrian Chadd
* Adrian Chadd <adrian@FreeBSD.org>
* Akinori MUSHA aka knu <knu@idaemons.org>
* Alan Eldridge <alane@FreeBSD.org>
* Alan Eldridge <alane@geeksrus.net>
* Aldis Berjoza <aldis@bsdroot.lv>
* Alex Deiter <alex.deiter@gmail.com> (Only the first 15 lines of the commit message are shown above ) |
5.5 06 Apr 2021 14:31:07 |
Mathieu Arnold (mat) |
Remove # $FreeBSD$ from Makefiles. |
5.5 29 Oct 2020 19:03:52 |
lwhsu |
sysutils/qjail: Updaet to 5.5
1. Change default ftp site to ftp from ftp12.
2. Remove config -w and -W [Set vnet.interface NIC]
3. Add -f flag to unmount command when releasing memory disc.
4. Change so this version of qjail only runs on 12.0 and newer
because pf is vimage aware now.
5. If local install [-f] jump around stable, current check logic.
6. Change/add logic & code to implement bridge/epair method for vnet jails.
7. Change qjail.8 about vimage no longer having to be compiled into kernel 12.0
8. Change "config -v logic to setup vnet jail with pf, ipf, ipf firewall.
9. Add start vnet code to qjail script to check for host/vnet jail
firewall mis-match.
10. Add start vnet code to boottime script to check for host/vnet jail
firewall mis-match. (Only the first 15 lines of the commit message are shown above ) |
5.4 14 Aug 2019 12:16:13 |
mat |
Convert to UCL & cleanup pkg-message (categories s) |
5.4 02 Nov 2018 13:32:35 |
rene |
Remove compatibility code for FreeBSD < 11.2 from all ports.
Simplify some ports where DragonFlyBSD no longer needs to be special-cased.
Submitted by: rene
Reviewed by: bapt, jbeich
Differential Revision: https://reviews.freebsd.org/D17724 |
5.4 27 Aug 2017 01:14:01 |
adamw |
Update to 5.4.
Aaron Sachau sent email about bug he found. The "qjail console jailname"
command that has a jail with a fib assigned to it was not working correctly.
This error was introduced by changes done to correct coding syntax problems
that the hs-shellcheck package found and corrected and then published in
qjail-5.2. Reverted back to how qjail-5.1 did it. Aaron Sachau tested the
patch. Fixed now.
PR: 221839
Submitted by: maintainer (Joe Barbish) |
5.3 19 Jun 2017 02:04:25 |
adamw |
Update to 5.3
qjail-5.3-change-log
1. Adam Weinberger sent email about bug he found. The
qjail console -c "ls /user/local" jailname
command was not working correctly. This error was introduced by
changes done to correct coding syntax problems that the hs-shellcheck
package found and published in qjail-5.2. Fixed now.
2. Adam Weinberger also sent email containing a patch that standardized
error messages and corrected some spelling errors.
After review the patch was applied.
3. Checked all the 'kill' messages for 'Error:' prefix and added the (Only the first 15 lines of the commit message are shown above ) |
5.2 21 Apr 2017 04:21:40 |
miwi |
- Update to 5.2
PR: 218272 |
5.1 17 Feb 2017 16:49:29 |
mat |
Update to 5.1.
PR: 217177
Submitted by: maintainer
Sponsored by: Absolight |
5.0 17 Feb 2017 16:49:13 |
mat |
Remove the remaining IGNORE_FreeBSD_9 lines.
Sponsored by: Absolight |
5.0 31 Aug 2016 21:49:37 |
mat |
Remove the CONFLICTS_INSTALL lines, they can't conflict, they can't be
installed at the same time.
Submitted by: maintainer
Sponsored by: Absolight |
5.0 29 Aug 2016 15:04:35 |
mat |
Cleanup whitespace at EOL.
Pointy hat: mat
Sponsored by: Absolight |
5.0 29 Aug 2016 14:53:01 |
mat |
Update sysutils/qjail to 5.0 to handle FreeBSD 11+.
Copy it to sysutils/qjail4 for FreeBSD 10 and sync CONFLICTS with the
FreeBSD 8/9 version.
PR: 212201, 212202
Submitted by: maintainer
Sponsored by: Absolight |
4.9 19 Jul 2016 14:42:44 |
amdmi3 |
- Update to 4.9
- While here, add NO_ARCH
PR: 211145
Submitted by: qjail1@a1poweruser.com (maintainer) |
4.8 12 Jun 2016 13:13:32 |
pi |
sysutils/qjail: 4.7 -> 4.8
There are changes to the internals of the jail(8) command and changes to
parameter names in the periodic files that have occurred in FreeBSD
Release 10.2 that effects jail behavior in a very minor way.
This version of qjail has an built in auto convert function that
fixes those minor behavior problems with existing jails. This auto
convert function is not documented in the qjail manual. Its only
shown in the port install output. Issue [ qjail update -u ] from
the host console.
This will cause the existing "flavors" default & ssh-default
directories to be renamed and new ones populated. Then in each
existing jail the periodic.conf and newsyslog.conf files will be (Only the first 15 lines of the commit message are shown above ) |
4.7 26 May 2016 13:16:48 |
amdmi3 |
- Update to 4.7
Changes:
1. When running "qjail create -c" option for creating a jail with ssh and
a user id / password of the jail name. On first start the user id
gets created in the jail. This first start status was not being
turned off. Added code to start logic to fix this.
2. Did not like the way console function was handling console commands
being passed to the jail for execution. Changed the logic so it works
like this. If -c option used alone or if -c & -u used together,
them default jexec command format used. If no -c option then
"jexec jailname login -f <root or -u value>" format used.
This is real login causing the Welcome message to display.
3. Corrected the qjail manual console function to document usage of
-c and -u flags.
PR: 209737
Submitted by: qjail1@a1poweruser.com (maintainer) |
4.6 19 May 2016 10:53:06 |
amdmi3 |
- Fix trailing whitespace in pkg-descrs, categories [p-x]*
Approved by: portmgr blanket |
4.6 23 Apr 2016 15:05:21 |
flo |
Update to 4.6
PR: 208980
Submitted by: Joe Barbish <qjail1@a1poweruser.com>
Sponsored by: Essen Linuxhotel Hackathon 2016 |
4.5 20 Apr 2016 22:09:11 |
robak |
sysutils/qjail: update 4.4 -> 4.5
PR: 208918
Submitted by: Joe Barbish <qjail1@a1poweruser.com> (maintainer) |
4.4 18 Apr 2016 05:14:28 |
riggs |
Update to upstream version 4.4
PR: 208851
Submitted by: qjail1@a1poweruser.com (maintainer) |
4.3 01 Apr 2016 13:18:17 |
mat |
Fixup some whitespace at the beginning of lines problems.
With hat: portmgr
Sponsored by: Absolight |
4.3 12 Feb 2016 06:21:53 |
pi |
sysutils/qjail: 4.2 -> 4.3
PR: 206935
Submitted by: Joe Barbish <qjail1@a1poweruser.com> (maintainer) |
4.2 21 Nov 2015 13:55:46 |
pi |
sysutils/qjail: 4.1 -> 4.2
- Correct "qjail config -n" routine logic
PR: 204601
Submitted by: qjail1@a1poweruser.com (maintainer) |
4.1 11 Sep 2015 02:59:41 |
wen |
- Update to 4.1
PR: 202934
Submitted by: qjail1@a1poweruser.com(maintainer) |
4.0 27 Apr 2015 03:35:55 |
vanilla |
Upgrae to 4.0.
PR: 199684
Submitted by: maintainer |
3.9 24 Apr 2015 06:54:41 |
vanilla |
Upgrade to 3.9.
PR: 199651
Submitted by: maintainer |
3.8 07 Apr 2015 12:21:42 |
vanilla |
Upgrade to 3.8.
PR: 199198
Submitted by: maintainer |
3.7 04 Apr 2015 13:08:01 |
bofh |
[MAINTAINER] sysutils/qjail: Update version 3.6=>3.7
- Add LICENSE (BERNE-CONVENTION)
- Change Maintainer email address
- Use @sample framework
PR: 199090
Submitted by: qjail@a1poweruser.com |
3.6 01 Apr 2015 11:35:52 |
zi |
- Reset MAINTAINER due to fatal bounce
Reported by: portscout |
3.6 22 Nov 2014 09:13:36 |
antoine |
Cleanup plist |
3.6 29 Jul 2014 03:46:20 |
vanilla |
Upgrade to 3.6.
1. Add allow.mount.tmpfs parameter to build-jail.conf routine.
Check if kernel tmpfs.ko has been loaded
to host and if not then issue "kldload tmpfs" command.
2. Add code to config logic for lower case t to enable
allow.mount.tmpfs parameter and upper case T to disable
allow.mount.tmpfs parameter.
3. Remove -l null as method to disable nullfs and replace with
upper case L to to disable nullfs.
4. Add upper case S to disable lower case s option.
(Only the first 15 lines of the commit message are shown above ) |
3.5 09 Jul 2014 19:19:47 |
pi |
sysutils/qjail: 3.4 -> 3.5
Updated qjail.bootime script for addition of allow.sysvipc
and ruleset parameters that were added to qjail script in qjail-3.4.
PR: 191660
Submitted by: qjail@a1poweruser.com (maintainer) |
3.4 22 Jun 2014 01:28:40 |
danilo |
- Update from 3.3 to 3.4
- Remove NEED_ROOT
- Update pkg-descr
Changelog: https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=191213#c0
PR: ports/191213
Submitted by: qjail@a1poweruser.com |
3.3 15 May 2014 10:40:20 |
pi |
sysutils/qjail: upgrade 3.2 -> 3.3
1. Fix typo in qjail.8 manual.
Change "See jailip below" to "See -4 option"
2. Fix typo in qjail-howto.8 manual as per PR# 186269.
Change a comma , inside of ip address to a . period.
73.x.97,51,10.0.10.126 to 73.x.97.51,10.0.10.126
3. Change qjail.portsnap.conf,
remove index-6 index-7 index-8 statements
replace index-9 with index-10
4. Removed rcvar=`set_rcvar` statement from qjail.bootime script.
In Release 10.0 its no longer included in the rc.d scripts and (Only the first 15 lines of the commit message are shown above ) |
3.2 20 Sep 2013 23:06:00 |
bapt |
Add NO_STAGE all over the place in preparation for the staging support (cat:
sysutils) |
3.2 03 Sep 2013 18:51:57 |
pawel |
Re-add mistakenly removed CONFLICTS_INSTALL line |
3.2 29 Aug 2013 20:52:34 |
pawel |
Update to version 3.2
qjail-3.2 change log
1. Added IPv6 support to "create" and "config" commands.
2. Changed the way jail status is determined. Now use "jls -j jailname jid"
command instead of carring internal jid field in jail definition record.
This fixed jail status problem when users used the "halt or reboot"
command on the host instead of the "shutdown now" command.
3. Changed qjail-bootime script to nolonger populate internal jid field
in jail definition record.
4. Corrected coding of conflicts_install parameter in the port Makefile (Only the first 15 lines of the commit message are shown above ) |
3.1 05 Jul 2013 16:21:49 |
pawel |
Register install conflicts with version 1.x
Submitted by: maintainer via private email |
3.1 22 Jun 2013 06:38:00 |
culot |
- Update to 3.1
PR: ports/179769
Submitted by: Joe Barbish <qjail@a1poweruser.com> (maintainer) |
3.0 04 Jun 2013 15:10:01 |
pawel |
Register install conflict with sysutils/qjail2 |
3.0 02 Jun 2013 22:13:33 |
pawel |
Update to version 3.0
PR: ports/179184
Submitted by: Joe Barbish <qjail@a1poweruser.com> (maintainer) |
2.2 26 Apr 2013 21:25:53 |
bdrewery |
- Update to 2.2
- Unrestrict - license issue has been resolved
PR: ports/178186
Submitted by: Joe Barbish <qjail@a1poweruser.com> (maintainer) |
2.1 20 Mar 2013 13:17:24 |
bdrewery |
- Mark RESTRICTED
See: http://lists.freebsd.org/pipermail/freebsd-jail/2013-March/002118.html
With hat: portmgr |
2.1 03 Feb 2013 18:45:11 |
crees |
Update to 2.1;
1. Added logic to interrogate the content of flavors for correctness
before allowing them to be merged into the newjail being created.
Only paths targeting directories holding configuration files are
allowed now. The jail create process is terminated and the offending
paths are listed in error messages.
2. Changed the /root/.cshrc file in both flavors default and ssh-default
to now contain setenv PACKAGESITE to point to packages-current
so login users of any jail will have the most current package
version available.
4. In the qjail install logic added code to create these additional paths
in basejail, /usr/ports/packages, /usr/home and /home link. (Only the first 15 lines of the commit message are shown above ) |
2.0 02 Jan 2013 10:05:06 |
crees |
Update to 2.0;
Standard maintenance.
1. Added -c option on "qjail create" command that enables ssh access to the
jail and creates user account using jailname for id/pw.
2. Added -C option on "qjail create" command that depends on -D option that
creates ssh access to jail and creates user account using jailname for
id/pw while automatically duplicating jails.
3. Created a customized flavor, ssh-default that enables ssh access to jails.
This flavor contains a login account with id/pw of qjail.
4. Removed -c option from "qjail install" because hosts customized /etc
caused problems with jail start up.
5. Updated man qjail.8 to reflect the changes.
PR: ports/174890
Submitted by: Joe Barbish <qjail@a1poweruser.com> (maintainer) |
1.9 22 Dec 2012 20:41:44 |
crees |
Update to 1.9:
Added code to qjail install function to check for
-STABLE, -PRERELEAASE, and -CURRENT versions running
on the host and if so issue message that binary source
is not available for download and to use the
[qjail install -c] flag to clone the host system to
populate the basejail with.
Used setenv UNAME_r "9-stable" command on host to set
release value seen by qjail.
PR: ports/174644
Submitted by: Joe Barbish <qjail@a1poweruser.com> (maintainer) |
1.8 02 Dec 2012 12:25:48 |
crees |
Update to 1.8
uname -r shows 4 formats.
9.0-BETA1, 9.0-RC1, 9.0-RELEASE, and 9.0-RELEASE-p1
Logic added by 1.7 was supposed to correctly remove the -p1 string,
which it did if present, but if not present the -RELEASE gets removed
in error which results in the incorrect ftp url path for fetching the
install source.
Rewrote logic to handle -p suffix differently so it gets stripped
off leaving 9.0-RELEASE which is handled normally.
PR: ports/174037
Submitted by: Joe Barbish <qjail@a1poweruser.com> (maintainer)
Feature safe: yes |
1.7 05 Nov 2012 19:07:42 |
crees |
Update to 1.7
On 'qjail install' command run on -BETA or -RC host has no binary distribution
source available by design. Added logic to check for this condition and issue
error message informing user.
On 'qjail install' command run on a host that has had security binary patches
applied results in [uname -r] command returning [Release-9.0-p3]. There is no
binary distribution source available by design for patched systems. Added code
to strip the -p3 suffix resulting in the 9.0-Release distribution source being
downloaded and used to populate the basejail.
PR: ports/173394
Submitted by: Joe Barbish (maintainer)
Feature safe: yes |
1.6 18 Sep 2012 17:44:48 |
crees |
Update to 1.6
-a option means create new jail from archive file of jail-aaa.
Search of /usr/jails/archive selected incorrect archive file.
If archive files named jail-aaa, jail-aaa-bbb, jail-aaa-bbb-ccc were present
jail-aaa-bbb-ccc was always selected incorrectly.
This same logic was also used for 'qjail restore jail-aaa', but that logic
had check for this condition that told user to use full archive name that
included the date stamp archive was created. Fixed logic in both functions.
PR: ports/171724
Submitted by: maintainer (Joe Barbish <qjail@a1poweruser.com>) |
1.5 19 Jul 2012 23:58:35 |
ak |
- Update to 1.5
PR: ports/170012
Submitted by: Joe Barbish <qjail@a1poweruser.com> (maintainer) |
1.4 27 Jun 2012 11:25:17 |
jase |
- Update to 1.4
PR: ports/169466
Submitted by: Joe Barbish <qjail@a1poweruser.com> (maintainer)
Approved by: culot (mentor) |
1.3 23 Apr 2012 20:11:00 |
crees |
Restore missing newline
Submitted by: ak |
1.3 13 Apr 2012 17:50:43 |
crees |
Update to 1.3;
Updated script so that the perluglyhack code is added to the end of
qjail update -b logic
PR: ports/166666
PR: ports/166917
Submitted by: Joe Barbish (maintainer) |
1.2 02 Mar 2012 18:43:39 |
jgh |
- Update to 1.2
- while here loop on install of man pages
Changed qjail to work with new path and single base
file install format now used in 9.0.
PR: ports/165603
Submitted by: maintainer, qjail@a1poweruser.com |
1.1_1 11 Sep 2011 11:58:32 |
crees |
Author silently changed distfile to correct manpage typos, chase distinfo.
PR: ports/160645
Submitted by: Joe Barbish <fbsd8@a1poweruser.com> (maintainer) |
1.1 09 Sep 2011 19:29:08 |
dhn |
- Update to 1.1
PR: ports/160574
Submitted by: Joe barbish <fbsd8@a1poweruser.com> (maintainer) |
1.0 11 Jun 2011 21:22:20 |
crees |
Qjail [ q = quick ] is a 4th generation wrapper for the basic chroot jail
system that includes security and performance enhancements. Plus a new level
of "user friendliness" enhancements dealing with deploying just a few jails or
large jail environments consisting of 100's of jails.
Qjail requires no knowledge of the jail command usage. It uses "nullfs" for
read-only system binaries, sharing one copy of them with all the jails.
Uses "mdconfig" to create sparse image jails. Sparse image jails provide a
method to limit the total disk space a jail can consume, while only occupying
the physical disk space of the sum size of the files in the image jail.
Ability to assign ip address with their network device name,
so aliases are auto created on jail start and auto removed on jail stop.
(Only the first 15 lines of the commit message are shown above ) |