Jeffrey Smith wrote:

On Mon, 2008-04-21 at 01:54 +0200, Miroslav Lachman wrote:

Jeffrey Smith wrote:


 I previously posted a howto to use zfs to manage jails.  The first
update through freebsd-update has been released.  Testing this I get

(in jail)
ldap1#freebsd-update install
Installing updates...chflags: ///usr/lib/libssh.a: Operation not
supported

After this error I enabled chflags in sysctl on the host system
#sysctl security.jail.chflags_allowed=1

This did not not work in fixing the issue
after reading the freebsd-update man page I thought this should be
possible

#freebsd-update -b /jails/ldap1/ -d /jails/ldap1/var/db/freebsd-update/
\ install
Installing updates...chflags: /jails/ldap1///usr/lib/libssh.a: Operation
not supported

But I still get that same error.  Does anyone have any idea what would
keep this from working?  If there is a way to update the host and all
subsequent jails vi the host that would be great, as i would prefer not
to allow chflags from within the jails.

Can you tell me your FreeBSD version?
I am convinced that I did freebsd-update inside Jail on FreeBSD 6.2, but I am not 100% sure and did not test it on FreeBSD 7. Are you trying update (minor security updates) or upgrade to newer release version? Maybe I was in luck, that my update routine did not change any chflagged files.

Miroslav Lachman


FreeBSD xxxxx.yyyyyyy.com 7.0-RELEASE FreeBSD 7.0-RELEASE #0: Sun
Feb 24 10:35:36 UTC 2008
[EMAIL PROTECTED]:/usr/obj/usr/src/sys/GENERIC  amd64

Hmmm... can you show your `mount` output? Do you have jails on NFS exported fs, or plain ufs?

As a quick & dirty hack, you can try sysinstall batch:

sysinstall _ftpPath=ftp://ftp.FreeBSD.org/pub/FreeBSD/ nonInteractive=yes mediaSetFTP releaseName=7.0-RELEASE dists=base distSetCustom installRoot=/jails/ldap1/ installCommit

or better tuned sysinstall command to not install new base, but do binary upgrade. [add function "installUpgrade" in to sysinstall command]

(I did not tried this way, so let me know if it works for you)

Miroslav Lachman
_______________________________________________
[email protected] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-jail
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Reply via email to