roles/jail/templates/jail.conf.j2


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18

{{ jail.name }} {
   exec.start = '/bin/sh /etc/rc';
   exec.stop = '/bin/sh /etc/rc.shutdown jail';
   mount.devfs;
   host.hostname={{ jail.name }}.in.prison;
   allow.raw_sockets;
   allow.mount;
   allow.mount.devfs;
   allow.mount.zfs;
   devfs_ruleset = 4;
   enforce_statfs = 1;
   ip6.addr='em0|{{ jail.ip }}';
   path=/usr/local/jails/{{ jail.name }};

   {% for dataset in jail.additional_data_sets | default([]) -%}
   exec.poststart+="zfs jail ${name} poolen/jails/tank/{{ dataset }}";
   {% endfor -%}
}