Re: jail -- ps: bad namelist - no kernbase

Previous thread: Pango fails for Linux binaries by Pierre Abbat on Saturday, January 1, 2011 - 7:02 pm. (4 messages)

Next thread: System doesnt shutdown by Dragon Fly on Sunday, January 2, 2011 - 8:27 pm. (4 messages)
From: Pierre-Philipp Braun
Date: Sunday, January 2, 2011 - 7:29 pm

Hi,

I'm trying to run a jail guest and I'm experiencing a little issue.  I 
can't ps,
     ps: bad namelist - no kernbase
nor ping,
     ping: socket: Operation not permitted

I installed it manually using cpdup (without any options) against 
memstick's content (same one I used to install the jail host: x86_64 
2.8.2).  Enabling procfs in the guest didn't help.  There's no device 
files appart from log, null and random but guests's dmesg says it's 
mounting devs.  I don't have any /etc/fstab but I don't think that's an 
no-no since I can see the and walk into the tree (root on / hammer). 
I'm running the default kernel.  Any help?

Thanks
//Pierre-Philipp
From: Pierre-Philipp Braun
Date: Sunday, January 2, 2011 - 8:12 pm

> 2.8.2).  Enabling procfs in the guest didn't help.  There's no device
 > files appart from log, null and random but guests's dmesg says it's
 > mounting devs.  I don't have any /etc/fstab but I don't think that's

Jail guest's dmesg was, of course, not his own, but real system's one. 
And devfs wasn't mounted.  Here are /etc/rc.d/jail and 
/etc/defaults/rc.conf patchs which fixes that (at least here) and allows,
     jail_<jailname>_devfs_enable=yes
to be added into /etc/rc.conf.

The devfs issue was also experienced before 
(http://leaf.dragonflybsd.org/mailarchive/users/2009-10/msg00168.html)

Thanks:-)
//Pierre-Philipp
From: Oliver Fromme
Date: Tuesday, January 4, 2011 - 9:49 am

Pierre-Philipp Braun <pbraun@nethence.com> wrote:
 > I'm trying to run a jail guest and I'm experiencing a little issue.  I 
 > can't ps,
 >     ps: bad namelist - no kernbase

Sounds like kernel version and ps binary don't match.
Are you sure they belong to the exact same DF version?

 > nor ping,
 >     ping: socket: Operation not permitted

Raw sockets (thus ping) are disabled in jails by default,
for security reasons.  If you know what you're doing, you
can enable them with sysctl security.jail.allow_raw_sockets.

Best regards
   Oliver

-- 
Oliver Fromme, secnetix GmbH & Co. KG, Marktplatz 29, 85567 Grafing b. M.
Handelsregister: Registergericht Muenchen, HRA 74606,  Geschäftsfuehrung:
secnetix Verwaltungsgesellsch. mbH, Handelsregister: Registergericht Mün-
chen, HRB 125758,  Geschäftsführer: Maik Bachmann, Olaf Erb, Ralf Gebhart

FreeBSD-Dienstleistungen, -Produkte und mehr:  http://www.secnetix.de/bsd
From: Pierre-Philipp Braun
Date: Tuesday, January 4, 2011 - 1:52 pm

Hi Olivier,

Thanks:-) But it's sloved enabling devfs for the guest, and the rules 
for that were missing in /etc/defaults/rc.conf and /etc/rc.d/jail. 
Maybe my reply didn't pass on the newsgroups though, since it hat patchs 
as joined documents.

//Pierre-Philipp


-- 
//Pierre-Philipp
Previous thread: Pango fails for Linux binaries by Pierre Abbat on Saturday, January 1, 2011 - 7:02 pm. (4 messages)

Next thread: System doesnt shutdown by Dragon Fly on Sunday, January 2, 2011 - 8:27 pm. (4 messages)