Separate Data and Jails per USER

[zenny]

Hi,

what are the minimal changes required to separate data and configs per user to a new zfs vol or filesystem mounted to, say $bastille_prefix/data/user^1-N/servicename.domain.tld from standard jails in `$bastille_prefix/jails/user1^1-N/servicename.domain without much affecting the bastillebsd script?

A case in point is https://github.com/msimerson/Mail-Toaster-6/blob/d4ea67033409592a151f76e23a508523e8d00b2b/mail-toaster.sh#L52-53 which does not interfere the jail configurations and related data while updating jails. An nifty approach I think.

Cheers, and stay safe.

[bmac2]

@zenny so trying to reiterate what you are wanting.

1. jails to be able to be spun up for a specific user
2. jails to be able to be on seperate filespaces or zfs volumes
3. a change to the jail's ownership

Is that a good summary of the items you are requesting?

[s1dh]

The "2." Would already make my day 👍

[zenny]

On Fri, Oct 20, 2023 at 7:19 PM Barry McCormick ***@***.***> wrote: @zenny <https://github.com/zenny> so trying to reiterate what you are wanting. 1. jails to be able to be spun up for a specific user 2. jails to be able to be on seperate filespaces or zfs volumes 3. a change to the jail's ownership Is that a good summary of the items you are requesting?

Exactly! :D

…

— Reply to this email directly, view it on GitHub <#341 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AAMTTLQW3QTMPZ7PYCEBNQLYAKXALAVCNFSM4XNQTDAKU5DIOJSWCZC7NNSXTN2JONZXKZKDN5WW2ZLOOQ5TCNZXGMYTCMRRHE3A> . You are receiving this because you were mentioned.Message ID: ***@***.***>

-- Cheers, /z -.. .. ... -.-. .-.. .- .. -- . .-. | -.. .. ... -.-. .-.. .- .. -- . .-. CONFIDENTIALITY NOTICE AND DISCLAIMER: Access to this e-mail and its contents by anyone other than the intended recipient is unauthorized as it contains privileged and confidential information, and is subject to legal privilege. Please do not re/distribute it. If you are not the intended recipient (or responsible for delivery of the message to such person), you may not use, copy, distribute or deliver the email and part of its contents to anyone this message (or any part of its contents or take any action in connection to it. In such case, you should destroy this message, and notify the sender immediately. If you have received this email in error, please notify the sender or your sysadmin immediately by e-mail or telephone, and delete the e-mail from any computer. If you or your employer does not consent to internet e-mail messages of this kind, please notify the sender immediately. All reasonable precautions have been taken to ensure no viruses are present in this e-mail and attachments included. As the sender cannot accept responsibility for any loss or damage arising from the use of this e-mail or attachments it is recommended that you are responsible to follow your virus checking procedures prior to use. The views, opinions, conclusions and other informations expressed in this electronic mail are not given or endorsed by any company including the network providers unless otherwise indicated by an authorized representative independent of this message. -.. .. ... -.-. .-.. .- .. -- . .-. | -.. .. ... -.-. .-.. .- .. -- . .-.

[zenny]

On Fri, Oct 20, 2023 at 7:19 PM Barry McCormick @.***> wrote: @zenny https://github.com/zenny so trying to reiterate what you are wanting. 1. jails to be able to be spun up for a specific user 2. jails to be able to be on seperate filespaces or zfs volumes 3. a change to the jail's ownership Is that a good summary of the items you are requesting?
Exactly! :D

Any updates on this request? Thanks.

[bmac2]

Going back through issues now. Will look at how this might be done.

@tschettervictor @yaazkal

[tschettervictor]

Having jails be per user is too complicated IMO.

As for separate file systems, this would require some work rewriting.

[tschettervictor]

#888 allows setting custom zfs options when creating the jail.
Will this be enough?

@zenny
@s1dh