Hi everybody, I'm new to the list but I've been using Cherokee a lot
lately in FreeBSD (to serve python applications mostly) and I've found
that there are certain issues running Cherokee inside a FreeBSD Jail.

This is not anything you are not aware of, as you can read in this
thread:

http://lists.octality.com/pipermail/cherokee/2010-July/013214.html

But I would like to help with this problem so:

1- sysctl security.jail.sysvipc_allowed=1 is not an option, because you
miss the point of using a Jail at all (you have to set that sysctl for
every Jail you have, not only the one where you run cherokee, and I've
servers with more than 6 Jails on them).

2- Rocky Borg says
(http://lists.octality.com/pipermail/cherokee/2010-July/013226.html)
that:

  "Cherokee runs from inside a jail without System V IPC I'm just
hoping Alvaro can shed some light on the performance implications to
Cherokee."

  How? I meant, Rocky, did you recompile cherokee from sources? did you
use some not-documented knob in the port?

3- Perhaps we could add an option when installing the port, something
like "Jail friendly" or "inside a Jail" that set the needed stuff to
avoid using System V IPC when installing the port within a Jail. It
would be nice to know how that could impact cherokee, not only in
performance but in reliabilty/etc. I could do some benchmarks to see if
there is an impact in performance and could be nice if any core
developer could explain us if there could be any other problems related
to disabling that stuff.

Thnx for taking your time reading this, I hope we will find a solution
for that soon.

Best regards.

-- 

"Perceive that which cannot be seen with the eye." - Miyamoto Musashi
---------------------------------------------------------------------
Francisco de Borja Lopez Rio <[email protected]>
http://www.codigo23.net / http://www.e-shell.org

_______________________________________________
Cherokee mailing list
[email protected]
http://lists.octality.com/listinfo/cherokee

Reply via email to