#CBSD
I’m really a huge fan of #cbsd and #CloneOS (also committed). But as long as there is no live migration, #bhyve unfortunately keeps „unusable“ in mid- & big sized enterprises. We're not in year 2010 anymore where we can tell customers to take his VM down for maintenances or security updates - especially nowadays where we have major security patches on a weekly base.
I’m aware of the papers and patches, but still no stable support. But my last look at it is also almost a year ago.
Jail app update
The appjail journey ends for now. Spent to much time on various things Promising and easy to initially use. But very difficult to get it running with vnet and accessible jails for the LAN. DHCP works but I cannot set any limits on IP ranges. Config files for jails are on strange locations, no jail.conf to have to all in one place.
So... the journey continues.
I tried Pot, and in no time I got jails running isolated, on my LAN ip range and with selective ports to open.
See https://pot.pizzamig.dev/
Installation was a breeze, ZFS support, import export and clone is possible.
Templates (so called) flavors) are available:
https://potluck.honeyguide.net/
A flavour is a template that after creating an empty pot, installs the dependencies and sets settings. Configuration before start is done via pot set-env and some parameters. Easy once you get the heck of it.
Networking is a relief and well documented:
https://pot.pizzamig.dev/Network/
Support on github is fast.
Example pot based on Freebsd 14.1 on a fixed LAN address:
pot create -p mypot2 -t single -b 14.1 -N alias -i 192.168.3.2 -S ipv4 -f fbsd-update
(the -f is the favor, in this case the update script for freebsd)
So exploration started and who knows what follows?
#jails #appjail #cbsd #bastille #pot #freebsd #server #networking
Yesterday I was giving #CBSD a try (#bhyve + #jail wrapper for #FreeBSD).
After few hours trying + documentation reading + forum browsing, I was not able to «passthru» my GPU. The same task took me only 2 minutes using #BVCP 🤷♂️
Also, I was no able to install #OpenBSD, but hopefully it’s not related to CBSD.