5 ms·

>Setting up NFSv4, I spent two evenings on that before abandoning it. That's really a bit of a pain (lack of a good tutorial/doc) >Virtual network for a bunch

by nix23 4y ago

>Setting up NFSv4, I spent two evenings on that before abandoning it. That's really a bit of a pain (lack of a good tutorial/doc) >Virtual network for a bunch of jails with nat. I solved that this way: Create'd a vnet haproxy-jail (the tls-terminator and "forwarder") all other jail's a "non-vnet" with a internal IP. But you can do it with just nat'd jails and haproxy as the terminator...no problem, do you need some pf examples? >Getting newer versions of software. Often the version available in pkg is several major versions out of date. Same on Linux-Distros, freebsd is pretty much on par: https://repology.org/repositories/statistics https://repology.org/repositories/statistics >Documentation for how to do things in general. Yeah when there are docs/tutorials they can often be of high quality, but frequently there is just nothing or the available docs does not cover the edge case you are trying to solve. Can you give some examples so one could do something against it? NFSv4 with kerb and ldap is one..i know ;)

chillfox 4y ago
With jails, I could really use a tutorial that goes through a standard proxy/app/db setup (nginx, wordpress and mariadb maybe?) that does require multiple ip addresses on the physical network. So request comes in to the host on port 80/443 -> proxy -> app -> db. All jails can do outgoing connections for things like sending email, downloading updates, etc. The db and app are on a network with the proxy and only the proxy can be reached from the outside. So what would be a pretty normal setup with Docker. And yes, firewall config should be part of that rather large tutorial, but it I really feel like a complete tutorial is missing. The ones I have seen only cover a part of it and it's left as an exercise for the reader to figure out how to glue them together. Some of the other issues I had with incompatible dependencies would be solved if I know how to use jails correctly. How to get a Linux jail up and running (Alpine Linux). ZFS + NFSv4 + Kerb + ldap would be great. I ended up solving that particular problem by using minio instead, because it was so much easier to setup, but I would like to know how to get nfs working for future things.

by nix23 4y ago

chillfox 4y ago

With jails, I could really use a tutorial that goes through a standard proxy/app/db setup (nginx, wordpress and mariadb maybe?) that does require multiple ip addresses on the physical network. So request comes in to the host on port 80/443 -> proxy -> app -> db. All jails can do outgoing connections for things like sending email, downloading updates, etc. The db and app are on a network with the proxy and only the proxy can be reached from the outside. So what would be a pretty normal setup with Docker. And yes, firewall config should be part of that rather large tutorial, but it I really feel like a complete tutorial is missing. The ones I have seen only cover a part of it and it's left as an exercise for the reader to figure out how to glue them together. Some of the other issues I had with incompatible dependencies would be solved if I know how to use jails correctly. How to get a Linux jail up and running (Alpine Linux). ZFS + NFSv4 + Kerb + ldap would be great. I ended up solving that particular problem by using minio instead, because it was so much easier to setup, but I would like to know how to get nfs working for future things.