دانلود کتاب FreeBSD Mastery: Jails

فهرست مطالب :

Cover Page
FreeBSD Mastery: Jails
Title Page
Table of Contents
Acknowledgements
Foreword by Poul-Henning Kamp
Chapter 0: Introduction
Virtualization and Jails
Jails versus Chroots
What Is A Jail?
Jail Security
Documentation and History
Prerequisites
Jails and ZFS
Jail Management Tools
What’s In This Book?
Chapter 1: The Jail Host
Storage
Networking
syslogd
ntpd
sshd
Enabling Jails
Iocage Setup
Chapter 2: Jail Essentials
Jail Networking
Jail Sysctls
Parameters and Properties
/etc/jail.conf
Defining Standard Jails
Default Settings
Overriding Defaults
Variables
Iocage Configuration
Changing Parameters
Iocage Booleans
Iocage Defaults
Standard Jail Userland
Iocage Userland
Your First Jail
Creating and Destroying Jails with jail(8)
Creating, Viewing, Renaming, and Destroying Iocage Jails
Jail Directory Testing
Final Jail Configuration
DNS
Time Zone
/etc/fstab
/etc/rc.conf
Root Password and Accounts
Other Configuration
Chapter 3: Jail Management
Startup and Shutdown
Startup and jail(8)
Startup and Iocage
Tuning Startup and Shutdown
Tuning Before Startup
Dying and Life After Death
Users and Jail Commands
Jail Debugging
Debugging Standard Jails
Debugging iocage Jails
Jail Return Codes
Jail Boot Order
Standard Jail Start Order
Iocage Start Order
Viewing Jails
Viewing Parameters
Other Output Formats
Viewing Iocage Jails
Process Management
Jailing Commands
Jailed Process Environment
Console Access
Console Logging
Chapter 4: Jail Filesystems
mount(8) And umount(8)
Filesystem Visibility
Mounting Filesystems at Startup
Mounting Special Filesystems
Standard Jails and Extra Mounts
Iocage and Extra Mounts
Device Filesystems and Jails
Configuring devfs(5)
Standard Jails and Devfs
Iocage and Devfs
Iocage Disk Usage
Chapter 5: Packages and Upgrades
Packages
pkg(8)
Iocage Packages
Patching Jails
Patching with freebsd-update
Backups and Patching with Iocage
Upgrading Jails
Upgrades with freebsd-update
Upgrades with Iocage
Chapter 6: Space Optimization
Clones
Standard Jail Clones
Iocage Clones
Cleaning Clones
Templates
Creating Iocage Templates
Using Iocage Templates
Templates and ZFS
Standard Jail Templates
Updating Templates
Base Jails
Base Jail Packages
Iocage Base Jails
Custom Iocage Base Jails
Iocage Base Jail Rebasing
Standard Base Jails
Default Base Jail fstab Files
Standard Base Jail Crashes
Packages and Standard Base Jails
Preparing an Origin Jail With Packages
Preparing a Derived Jail with Packages
Rebasing Standard Jails
Chapter 7: Living In A Jail
Restarting Your Jail
Processes and Jails
Network Visibility
Chapter 8: Jail Features And Controls
System V IPC
security.jail.sysvipc
Sysvipc and Standard Jails
Sysvipc and Iocage
Securelevels and chflags(1)
Setting Jail Securelevel
File Flags and Securelevel
Mounting Filesystems
Mounting Prerequisites
fdescfs
devfs
nullfs
procfs, linprocfs, and linsysfs
tmpfs
ZFS In A Jail
Configuring a Dataset
Configuring a ZFS-Delegated Standard Jail
Inside the Jail
Configuring a ZFS-Delegated iocage Jail
Minor Features
Change Hostname
Dmesg
Lock Physical Memory
Chapter 9: Networking
Interface Names and Jails
TCP/IP and Jails
Managing Network Access
Multiple Interfaces and Addresses
Ping, Traceroute, and Raw Sockets
Jails and the Loopback Interface
Virtual Networking Stacks: VNET
Virtual Network Design
Our First Virtual Network
Standard VNET Jails
The Jail and VNET
The Host and VNET
iocage VNET Jails
Alternate Interfaces
Complicated Networks
Multiple Bridges
Standard Jails with Multiple Interfaces
iocage With Multiple Interfaces
Manual Interface Plumbing
Other Networking Features
Get Jail Address from DNS
iocage and the Resolver
Chapter 10: Extreme Jails
Hierarchical Jails
Hierarchical Jail Networking
Creating a Parent Jail
Creating Child Jails
Managing Children
Old FreeBSD Versions
Identifying Your Jail
Pillaging the Old Server
Replicating the Old Server
Old Release Compatibility
Running Linux in a Jail
Which Linux?
Creating the Devuan Jail
Helping Linux Jails
Other Jail Tricks
Chapter 11: Resource Restriction and Removal
Periodic(8) and Jails
Resource Limiting
RCTL Rules
RCTL Resources
RCTL Actions
Managing Rules
Filters
RCTL and iocage
Processor Restrictions
Host CPU Topology
CPU Sets
Cpuset and Standard Jails
Cpuset and iocage
Incomplete Jails
Trimming FreeBSD
Network Inheritance
Jails as Control Groups
Chapter 12: iocage Bonuses
Migrating Jails
Migrations and Defaults
Exporting a Jail
Importing a Jail
Migration Cleanup
Iocage Plugins
Afterword
Sponsors
Print Sponsors
Ebook Sponsors
Patronizers
About the Author
Copyright Information