Org Web Adapter

Editing pages/creating_a_new_iocage_jail_in_freebsd.org

:PROPERTIES:
:ID:       d06f8911-ed39-4c02-a935-6dcf3ad7c308
:END:
#+title: Creating a New Iocage Jail in FreeBSD

- tags :: [[id:b5473333-a8af-4440-8ee8-fe839a2cf013][FreeBSD]] [[id:44e249f3-ab30-4283-9ca1-77b7cc8dc382][Tutorials]] [[id:f99fdb04-a827-4e42-b30d-14363070b2a6][Jails]] [[id:83d52406-9501-465c-9fa3-9c5086a80ff7][Iocage]]

* Steps
** Create the jail with iocage
#+begin_src sh
iocage create -n "mail" -r latest vnet="on" allow_raw_sockets="1" boot="on" bpf="yes" dhcp="on"
#+end_src
** Copy jails public key to iocage root
#+BEGIN_SRC sh
ssh rhea.local
sudo su
mkdir /zroot/iocage/jails/<jail-name>/root/root/.ssh
cp /home/powellc/.ssh/jails.pub /zroot/iocage/jails/<jail-name>/root/root/.ssh/authorized_keys
#+END_SRC
** Enable ssh and root login over ssh
#+begin_src sh enable ssh root login
sysrc sshd_enable="YES"
vi /etc/ssh/sshd_config
#+end_src

#+begin_src diff add root login to sshd
-#PermitRootLogin no
+PermitRootLogin yes
#+end_src

#+begin_src sh start services
service sshd start
#+end_src
** Run ansible against the new IP address
1. Add ip address to [jails] ansible group
2. `ansible-playbook playbook.yml --limit=<ip address>`
3. Update ansible [jails] group with .local DNS for iocage container
4. Add hostname to whatever roles you want this container to run
** If not using ansible, install avahi and dbus to get local dns working
:PROPERTIES:
:ID:       76932902-eb88-11ea-ad6c-e86a64ecc701
:END:
#+begin_src sh install and enable apps
pkg install -y avahi-app nss_mdns dbus
sysrc dbus_enable="YES"
sysrc avahi_daemon_enable="YES"
sysrc sshd_enable="YES"
vi /etc/nsswitch.conf
#+end_src

#+begin_src diff add mdns to nsswitch config
-hosts: files dns
+hosts: files dns mdns
#+end_src

#+begin_src sh enable ssh root login
vi /etc/ssh/sshd_config
#+end_src

#+begin_src diff add root login to sshd
-#PermitRootLogin no
+PermitRootLogin yes
#+end_src

#+begin_src sh start services
service dbus start
service avahi-daemon start
service sshd start
#+end_src

Finally, ssh in and install whatever packages you need for this jail service