This qjail version only supports the RELEASE-10.x series of releases.
Qjail [ q = quick ] is a 4th generation wrapper for the basic chroot jail
system that includes security and performance enhancements. Plus a new level
of "user friendliness" enhancements dealing with deploying just a few jails or
large scale jail environments consisting of 100's of jails.
Qjail uses the jail(8) jail.conf method. This provides the ability to enable
the following options on a per-jail basis. exec.fib, securelevel, allow.sysvipc,
devfs_rulesets, allow.raw_sockets, allow.quotas, allow.mount.nullfs,
allow.mount.tmpfs, allow.mount.zfs, vnet.interface, and vnet. The vnet option
gives a jail its own network stack using the experimental vimage kernel module.
The vnet option has only been tested on i386 and amd64 equipment.
Qjail requires no knowledge of the jail command usage. It uses "nullfs" for
read-only system executables, sharing one copy of them with all the jails.
Uses "mdconfig" to create sparse image jails. Sparse image jails provide a
method to limit the total disk space a jail can consume, while only occupying
the physical disk space of the sum size of the files in the image jail.
Ability to assign ip address with their network device name,
so aliases are auto created on jail start and auto removed on jail stop.
Ability to create "ZONE"s of identical qjail systems, each with their own
group of jails.
Ability to designate a portion of the jail name as a group prefix so the
command being executed will apply to only those jail names matching that prefix.
Qjail has been incorporated into the Finch open source project,
see http://dreamcat4.github.io/finch/ for details.
WWW: http://qjail.sourceforge.net/
########################################################################
Use the qjail utility to deploy small or large numbers of jails quickly.
First issue "rehash" command to enable the qjail command (if using csh).
Then issue "man qjail-intro" to read the qjail introduction.
After reading that do "man qjail" for the usage details.
For the BIG PICTURE issue "man qjail-howto".
########################################################################
For users who have existing qjail environments. Please take note.
There are changes to the internals of the jail(8) command and changes to
parameter names in the periodic files that have occured in FreeBSD
Release 10.2 that effects jail behavior in a very minor way.
IF your running qjail on an 10.2 or newer version of FreeBSD you should
consider doing the following.
This version of qjail has an built in auto convert function that you may select
to choose that fixes those minor behavior problems with your existing jails.
This auto convert function is not documented in the qjail manual. Its only
shown here. So write it down.
Issue [ qjail update -u ] from the host console.
This will cause the existing "flavors" default & ssh-default directories to be
renamed and new ones populated. Then in each existing jail the periodic.conf
and newsyslog.conf files will be renamed with .saved suffix and new ones added.
The rc.conf file will be updated in place changing the
syslogd_enable= parameter value from "NO" to "YES".
The new periodic.conf file has many sendmail reporting options disabled because
sendmail is disabled in the jails rc.conf file by default. This drastically
reduces the daily. weekly, monthly system and security status reports elapse
run times. This has a major effect on operating system performance where there
are a large number of jails.
The [ qjail install ] command will install all the correct files depending on
what version of FreeBSD your host is running.
########################################################################
Remove expired ports:
2018-10-31 games/bloboats: Upstream gone, FreeBSD 10 only
2018-10-31 net/stf-6rd-kmod: Does not build on FreeBSD 11+
2018-10-31 net/pmf: Does not build on FreeBSD 11+
2018-10-31 net/knemo-kde4: KDE4 is EOL upstream, FreeBSD 10 only-port
2018-10-31 net/userfw: Does not build on FreeBSD 11+
2018-10-31 sysutils/qjail4: Only for FreeBSD 10.x , use sysutis/qjail instead
2018-10-31 sysutils/bsdmoted: does not build on FreeBSD 11+
2018-10-31 sysutils/scprotect: Does not build on FreeBSD 11+
2018-10-31 www/typo3-7: Support will end in October 2018, please update to
either www/typo3-8 or www/typo3-9
2018-10-31 devel/memleax: does not actually detect leaks
2018-10-31 emulators/virtio-kmod: Does not build on FreeBSD 10+
2018-10-31 games/traindirector: Does not build on FreeBSD 11+
Update sysutils/qjail to 5.0 to handle FreeBSD 11+.
Copy it to sysutils/qjail4 for FreeBSD 10 and sync CONFLICTS with the
FreeBSD 8/9 version.
PR: 212201, 212202
Submitted by: maintainer
Sponsored by: Absolight
