Virtualization with FreeBSD Jails, ezjail, and ZFS

Virtualization with FreeBSD Jails, ezjail,
and ZFS
Dan Langille
Ohio LinuxFest 2014
Short History of Dan
Virtualization
What is a jail?
•
jail
•
host
•
jail host
What is ezjail?
What is ZFS?
What is Bacula
Hardware I'm using
One filesystem per jail
•
At least one… if not more
Backups
•
Backup the jail filesystem from outside the jail
•
Snapshots
•
Why a snapshot?
Watching the jail
•
You can watch a jail without being observed
Creating a new jail
Moving a jail
Starting a jail
Stopping a jail
Automated IP assignment
•
Not DHCP
Other great tools
•
Ansible
•
bsdploy
Quotas
•
based on ZFS
•
what about X86BSD man limits and rctl but im
not sure how they work in jails.
Lies
•
FIBS
Upgrades made easier
•
Copy the filesystem
•
Create a new jail based on the copy
•
Upgrade that copy
•
Test
How can you do that?
•
IP address conflicts between production and
test?
•
Don’t use public IP addresses on the jail
•
Use firewall redirects via pf(4)
Jails as playgrounds
•
Playgrounds: want to test a new app?
•
Deploy it into a new jail knowing you can delete
it later, leaving no cruft.
Jails for testing
•
Need to test?
•
Have a known starting point
•
Rollback after testing
Jails for dev
•
Need a new dev environment?
•
Create a new jail based on a known template
•
Pre populated with the required apps
•
Destroy it when done
•
Create another when required
Not everyone likes ezjail
•
claim issues with upgrades
•
I’ve tried upgrading, wasn’t as hard as I initially
thought