[MANDATORY] Describe the bug [MANDATORY]
Bastille was running just fine on a FreeBSD 14.0 host. I upgraded the host to 14.1 and all jails lost access to the internet.
To verify that this was not something specific to that one host, I tried again with a fresh install of bastille on a fresh 14.1 install on a VM. Same behavior.
[MANDATORY] Bastille and FreeBSD version (paste bastille -v && freebsd-version -kru output)
[MANDATORY] How did you install bastille? (port/pkg/git)
pkg
[optional] Steps to reproduce?
Install FreeBSD 14.1 or upgrade existing host to 14.1.
Install bastille from pkg/latest.
Follow bastille's Getting Started guide, including pf.conf.
Create new jail.
Attempt to pkg install ....
See below. Host resolution fails.
root@gandalf:~ # bastille list
JID IP Address Hostname Path
2 172.16.33.90 minio /usr/local/bastille/jails/minio/root
root@gandalf:~ # bastille pkg minio install -y htop minio
[minio]:
Bootstrapping pkg from pkg+https://pkg.FreeBSD.org/FreeBSD:14:amd64/quarterly, please wait...
pkg: Error fetching https://pkg.FreeBSD.org/FreeBSD:14:amd64/quarterly/Latest/pkg.txz: Host does not resolve
Address resolution failed for https://pkg.FreeBSD.org/FreeBSD:14:amd64/quarterly.
Consider changing PACKAGESITE.
The problem persists after a reboot (just to make sure that eveyrthing that's supposed to run also runs at boot.
user@gandalf:~ $ doas bastille pkg
Usage: bastille pkg [-H|--host] TARGET command [args]
user@gandalf:~ $ doas bastille pkg minio install minio
[minio]:
The package management tool is not yet installed on your system.
Do you want to fetch and install it now? [y/N]: y
Bootstrapping pkg from pkg+https://pkg.FreeBSD.org/FreeBSD:14:amd64/quarterly, please wait...
pkg: Error fetching https://pkg.FreeBSD.org/FreeBSD:14:amd64/quarterly/Latest/pkg.txz: Host does not resolve
Address resolution failed for https://pkg.FreeBSD.org/FreeBSD:14:amd64/quarterly.
Consider changing PACKAGESITE.
Failed to apply on some jails, please check logs
root@gandalf:~ # cat /etc/pf.conf
ext_if="vtnet0"
set block-policy return
scrub in on $ext_if all fragment reassemble
set skip on lo
table <jails> persist
nat on $ext_if from <jails> to any -> ($ext_if:0)
rdr-anchor "rdr/*"
block in all
pass out quick keep state
antispoof for $ext_if inet
pass in inet proto tcp from any to any port ssh flags S/SA keep state
[MANDATORY] Describe the bug [MANDATORY] Bastille was running just fine on a FreeBSD 14.0 host. I upgraded the host to 14.1 and all jails lost access to the internet. To verify that this was not something specific to that one host, I tried again with a fresh install of bastille on a fresh 14.1 install on a VM. Same behavior.
[MANDATORY] Bastille and FreeBSD version (paste
bastille -v && freebsd-version -kru
output)[MANDATORY] How did you install bastille? (port/pkg/git)
pkg
[optional] Steps to reproduce?
pf.conf
.pkg install ...
.The problem persists after a reboot (just to make sure that eveyrthing that's supposed to run also runs at boot.
[optional] Expected behavior
Host resolution succeeds.
[optional] Other information
uname -a
/etc/rc.conf
ifconfig
/etc/pf.conf