bastille icon indicating copy to clipboard operation
bastille copied to clipboard

Separate Data and Jails per USER

Open zenny opened this issue 4 years ago • 4 comments

Hi,

what are the minimal changes required to separate data and configs per user to a new zfs vol or filesystem mounted to, say $bastille_prefix/data/user^1-N/servicename.domain.tld from standard jails in `$bastille_prefix/jails/user1^1-N/servicename.domain without much affecting the bastillebsd script?

A case in point is https://github.com/msimerson/Mail-Toaster-6/blob/d4ea67033409592a151f76e23a508523e8d00b2b/mail-toaster.sh#L52-53 which does not interfere the jail configurations and related data while updating jails. An nifty approach I think.

Cheers, and stay safe.

zenny avatar Feb 10 '21 19:02 zenny

@zenny so trying to reiterate what you are wanting.

  1. jails to be able to be spun up for a specific user
  2. jails to be able to be on seperate filespaces or zfs volumes
  3. a change to the jail's ownership

Is that a good summary of the items you are requesting?

bmac2 avatar Oct 20 '23 17:10 bmac2

The "2." Would already make my day 👍

s1dh avatar Oct 21 '23 07:10 s1dh

On Fri, Oct 20, 2023 at 7:19 PM Barry McCormick @.***> wrote:

@zenny https://github.com/zenny so trying to reiterate what you are wanting.

  1. jails to be able to be spun up for a specific user
  2. jails to be able to be on seperate filespaces or zfs volumes
  3. a change to the jail's ownership

Is that a good summary of the items you are requesting?

Exactly! :D

— Reply to this email directly, view it on GitHub https://github.com/BastilleBSD/bastille/issues/341#issuecomment-1773112196, or unsubscribe https://github.com/notifications/unsubscribe-auth/AAMTTLQW3QTMPZ7PYCEBNQLYAKXALAVCNFSM4XNQTDAKU5DIOJSWCZC7NNSXTN2JONZXKZKDN5WW2ZLOOQ5TCNZXGMYTCMRRHE3A . You are receiving this because you were mentioned.Message ID: @.***>

-- Cheers, /z

-.. .. ... -.-. .-.. .- .. -- . .-. | -.. .. ... -.-. .-.. .- .. -- . .-. CONFIDENTIALITY NOTICE AND DISCLAIMER: Access to this e-mail and its contents by anyone other than the intended recipient is unauthorized as it contains privileged and confidential information, and is subject to legal privilege. Please do not re/distribute it. If you are not the intended recipient (or responsible for delivery of the message to such person), you may not use, copy, distribute or deliver the email and part of its contents to anyone this message (or any part of its contents or take any action in connection to it. In such case, you should destroy this message, and notify the sender immediately. If you have received this email in error, please notify the sender or your sysadmin immediately by e-mail or telephone, and delete the e-mail from any computer. If you or your employer does not consent to internet e-mail messages of this kind, please notify the sender immediately. All reasonable precautions have been taken to ensure no viruses are present in this e-mail and attachments included. As the sender cannot accept responsibility for any loss or damage arising from the use of this e-mail or attachments it is recommended that you are responsible to follow your virus checking procedures prior to use. The views, opinions, conclusions and other informations expressed in this electronic mail are not given or endorsed by any company including the network providers unless otherwise indicated by an authorized representative independent of this message. -.. .. ... -.-. .-.. .- .. -- . .-. | -.. .. ... -.-. .-.. .- .. -- . .-.

zenny avatar Oct 23 '23 10:10 zenny

On Fri, Oct 20, 2023 at 7:19 PM Barry McCormick @.***> wrote: @zenny https://github.com/zenny so trying to reiterate what you are wanting. 1. jails to be able to be spun up for a specific user 2. jails to be able to be on seperate filespaces or zfs volumes 3. a change to the jail's ownership Is that a good summary of the items you are requesting? Exactly! :D

Any updates on this request? Thanks.

zenny avatar Apr 21 '24 07:04 zenny