hi

igoro@ and myself dch@ have been working on adding generic metadata support to 
jails. Many thanks to the jails working group for their feedback over recent 
months.

It's time to get some wider feedback, so I blogged it, including Igor's 
excellent video - remember to turn the volume up!

https://people.freebsd.org/~dch/posts/2025-01-12-jail-metadata

The gist is that you can attach public and private metadata to jails, that can 
be tweaked at runtime, and queried to do clever and useful things, like tagging 
jails so you can group them, or providing a mechanism to pass a single-use 
token into a jail, instead of exposing secrets in environment variables or 
sticking them in a filesystem.

This isn't committed to main yet, so you'll need to either just watch the video 
and read the post, or build from source and include the patch at 
https://reviews.freebsd.org/D47668

Feedback welcomed, best is via this mailing list 
https://lists.freebsd.org/subscription/freebsd-jail

Thanks, Dave & Igor

Reply via email to