freebsd / poudriere

Port/Package build and test system
https://github.com/freebsd/poudriere/wiki
BSD 2-Clause "Simplified" License
384 stars 161 forks source link

Can you run poudriere in a jail ? #878

Open devosalain opened 3 years ago

devosalain commented 3 years ago

I went out of swapspace, and want to put poudriere in a jail, this with a memory resource limit rctl on this jail. Is this possible ? That will then be a jail creating poudriere-jails& zfs sets.

bdrewery commented 3 years ago

There is an old guide here https://github.com/freebsd/poudriere/wiki/poudriere_in_jail

I think if you just try setting it up Poudriere will tell you which permissions it is missing in the jail. Otherwise there is a list of wanted permissions at https://github.com/freebsd/poudriere/blob/master/src/share/poudriere/include/common.sh.freebsd

devosalain commented 3 years ago

This works like a charm. Although some shields have to be lowered because of the communication of poudriere with it's jails.

grahamperrin commented 3 years ago

682

zachfi commented 2 years ago

Is there a way to avoid ip4=inherit? I've got a jail with a real ip on lo1, but many ports fail to fetch with a timeout. But the jail can reach/resolve internet addresses.