path: root/files/arts/software/ezjail/ezjail.7.pdf

%PDF-1.3
%����
2 0 obj
<<
/Length 7230
>>
stream
BT
/TT2 1 Tf
10 0 0 10 72 756 Tm
0 g
/GS1 gs
0 Tc
0 Tw
[(N)20(AME)]TJ
/TT4 1 Tf
3 -1.2 TD
(ezjail)Tj
/TT6 1 Tf
3.8506 0 TD
[(�)-250(Jail administration frame)25(w)10(ork.)]TJ
/TT2 1 Tf
-6.8506 -2.4 TD
(SYNOPSIS)Tj
/TT4 1 Tf
3 -1.2 TD
(ezjail-admin)Tj
/TT8 1 Tf
7.8012 0 TD
(command arguments...)Tj
/TT2 1 Tf
-10.8012 -2.4 TD
[(O)50(VER)55(VIEW)]TJ
/TT6 1 Tf
3 -1.2 TD
0.0256 Tw
[(The ezjail commands pro)15(vide a simple w)10(ay to create multiple jails using FreeBSD�)55(s)-275.6(jail system. It simpli)]TJ
/TT9 1 Tf
42.4046 0 TD
0 Tw
(�)Tj
/TT6 1 Tf
0.5562 0 TD
(es)Tj
-42.9608 -1.2 TD
[(jail administration ef)25(fort and minimizes jail system resource usage.)]TJ
0 -1.8 TD
0.0663 Tw
[(If you are not f)10(amiliar with the FreeBSD jail concept, please refer to)]TJ
/TT11 1 Tf
28.4531 0 TD
0 Tw
(jail)Tj
/TT6 1 Tf
2.4004 0 TD
0.0664 Tw
[(\(8\) before continuing. F)15(or addi-)]TJ
-30.8535 -1.2 TD
0 Tw
(tional design information, see the ezjail site at)Tj
/TT11 1 Tf
18.6333 0 TD
(http://erdgeist.org/arts/software/ezjail)Tj
/TT6 1 Tf
24.0039 0 TD
(.)Tj
/TT2 1 Tf
-45.6372 -2.4 TD
(DESCRIPTION)Tj
/TT6 1 Tf
3 -1.2 TD
0.2093 Tw
[(The ezjail system enables the system administrator to create multiple OS-le)25(v)15(e)0(l)-459.3(virtualization containers)]TJ
T*
0.0228 Tw
[(called jails. Services lik)10(e)-272.8(web serv)15(ers, mail serv)15(ers, FTP serv)15(ers, are typically under frequent attack from the)]TJ
T*
0.0564 Tw
[(public Internet and are e)15(xposed to possible compromise. The typical usage of jails is to run a single service)]TJ
T*
0.0732 Tw
(in each jail and if that service becomes compromised the rest of the jails and the host system are protected)Tj
T*
0 Tw
(from also being compromised.)Tj
0 -1.8 TD
0.0633 Tw
[(The major shortcoming of jails is that each jail has its o)25(wn cop)10(y)-313.3(o)0(f)-313.3(the w)10(orld. This eats disk space, inodes,)]TJ
0 -1.2 TD
0.1444 Tw
[(and more importantly)65(,)-394.4(pre)25(v)15(ents the sharing of binaries images between jails, thus increasing the memory)]TJ
T*
0.0065 Tw
(pressure on the host system. In addition, this causes a major administration headache when comes the time to)Tj
T*
0 Tw
[(update the host system, as each jail needs to be updated independently)65(.)]TJ
0 -1.8 TD
0.1293 Tw
(Ezjail addresses these problems by creating a single basejail \(a read-only)Tj
/TT11 1 Tf
30.8281 0 TD
0 Tw
(nullfs)Tj
/TT6 1 Tf
3.6006 0 TD
0.1293 Tw
(\(4\) mounted directory\))Tj
-34.4286 -1.2 TD
0.0059 Tw
(populated with the same binaries as the host system which is then shared across all the other service jails cre-)Tj
T*
0 Tw
(ated by ezjail. Is is possible to update the base jail \(and thus all the jails\) in a single ezjail command.)Tj
0 -1.8 TD
0.1181 Tw
[(T)80(ypical usage of jails include separation of services, creating test en)40(vironments, consolidation of dif)25(ferent)]TJ
0 -1.2 TD
-0.0001 Tc
0.0001 Tw
(services on a single physical host, and more.)Tj
/TT2 1 Tf
-3 -2.4 TD
0 Tc
0.1666 Tw
[(EZJ)30(AIL SYSTEM)]TJ
/TT6 1 Tf
3 -1.2 TD
0.0079 Tw
[(The administrati)25(v)15(e)15( )-15(interf)10(ace to the ezjail system is the)]TJ
/TT11 1 Tf
21.8746 0 TD
0 Tw
(ezjail-admin)Tj
/TT6 1 Tf
7.2012 0 TD
0.0078 Tw
(\(8\) command. It is used to install the)Tj
-29.0758 -1.2 TD
0.0455 Tw
[(ezjail en)40(vironment, create ne)25(w)-295.6(jails, archi)25(v)15(e)0(,)-295.6(restore, delete and update jails, open a jail console, and list the)]TJ
T*
0 Tw
[(status of all the jails. See belo)25(w)-250(for e)15(xample usage, and refer to its man page for complete usage details.)]TJ
0 -1.8 TD
0.0387 Tw
(Ezjail reads its con)Tj
/TT9 1 Tf
7.6967 0 TD
0 Tw
(�)Tj
/TT6 1 Tf
0.5562 0 TD
0.0387 Tw
(guration from its)Tj
/TT11 1 Tf
7.0873 0 TD
0 Tw
(ezjail.conf)Tj
/TT6 1 Tf
6.6011 0 TD
0.0387 Tw
[(\(5\). )-250(Normally)-288.7(it will not be necessary to edit this )]TJ
/TT9 1 Tf
20.3274 0 TD
0 Tw
(�)Tj
/TT6 1 Tf
0.5562 0 TD
(le,)Tj
-42.8248 -1.2 TD
1.3077 Tw
[(as some sane def)10(aults are pro)15(vided. A sample con)]TJ
/TT9 1 Tf
30.3468 0 TD
0 Tw
(�)Tj
/TT6 1 Tf
0.5562 0 TD
1.3077 Tw
(guration is installed as)Tj
/TT11 1 Tf
-30.9029 -1.2 TD
0 Tw
(EZJAIL_PREFIX/etc/ezjail.conf.sample)Tj
/TT6 1 Tf
21.6035 0 TD
(.)Tj
-21.6035 -1.8 TD
0.0003 Tw
[(A)-250.3(script is also installed as)]TJ
/TT11 1 Tf
10.9447 0 TD
0 Tw
(ezjail)Tj
/TT6 1 Tf
3.8509 0 TD
0.0003 Tw
[(in the rc.d system to allo)25(w)-250.3(jails under ezjails control to be started at boot)]TJ
-14.7956 -1.2 TD
0 Tw
[(time, gi)25(v)15(e)0(n)-250(ezjail is enabled by setting the)]TJ
/TT11 1 Tf
17.0386 0 TD
(rc.conf)Tj
/TT6 1 Tf
4.2007 0 TD
[(\(5\) v)25(ariable �)]TJ
/TT11 1 Tf
5.3051 0 TD
($ezjail_enable)Tj
/TT6 1 Tf
8.4014 0 TD
0.25 Tc
[(�t)250(o�)]TJ
/TT11 1 Tf
2.1655 0 TD
0 Tc
(YES)Tj
/TT6 1 Tf
1.8003 0 TD
(�.)Tj
/TT2 1 Tf
-41.9116 -2.4 TD
0.1666 Tw
[(WHA)95(T�S IN A J)30(AIL)]TJ
1.2 -1.2 TD
0.0625 Tw
(The life of an ezjail installation)Tj
/TT6 1 Tf
1.8 -1.2 TD
0.04 Tw
(The base jail is )Tj
/TT9 1 Tf
6.4359 0 TD
0 Tw
(�)Tj
/TT6 1 Tf
0.5562 0 TD
0.04 Tw
(rst created by running)Tj
/TT4 1 Tf
9.1571 0 TD
0 Tw
(ezjail-admin )Tj
7.4913 0 TD
(update)Tj
/TT6 1 Tf
3.8906 0 TD
(or)Tj
/TT4 1 Tf
1.123 0 TD
(ezjail-admin )Tj
7.4913 0 TD
(install)Tj
/TT6 1 Tf
4.2007 0 TD
[(.)-540(Exam-)]TJ
-40.3459 -1.2 TD
0.037 Tw
(ple usage of this command is section)Tj
/TT2 1 Tf
15.2282 0 TD
0 Tw
(EXAMPLES)Tj
/TT6 1 Tf
5.5562 0 TD
0.0369 Tw
[(.)-537(This will create the base jail, setup a template jail used)]TJ
-20.7844 -1.2 TD
0 Tw
[(to setting up ne)25(w)-250(jails, install an e)15(xample )]TJ
/TT9 1 Tf
16.7622 0 TD
(�)Tj
/TT6 1 Tf
0.5562 0 TD
[(a)20(v)20(our \(see belo)25(w\) and con)]TJ
/TT9 1 Tf
10.4863 0 TD
(�)Tj
/TT6 1 Tf
0.5562 0 TD
(gure miscellaneous things.)Tj
-28.3608 -1.8 TD
0.0385 Tw
[(This step is necessary before using the ezjail system. In particular)40(,)-288.5(i)0(t)-288.5(i)0(s)-288.5(not possible to create ne)25(w)-288.6(jails with-)]TJ
0 -1.2 TD
0 Tw
[(out initializing the base jail in adv)25(ance.)]TJ
0 -1.8 TD
0.0171 Tw
[(Once the base jail has been created, ne)25(w)-267.1(jails may be created with)]TJ
/TT4 1 Tf
26.8521 0 TD
0 Tw
(ezjail-admin )Tj
7.4684 0 TD
(create)Tj
/TT6 1 Tf
3.6006 0 TD
0.0171 Tw
[(.)-517.1(A)-267.1(ne)25(w)-267.1(jail is)]TJ
-37.921 -1.2 TD
0 Tw
(de)Tj
/TT9 1 Tf
0.9438 0 TD
(�)Tj
/TT6 1 Tf
0.5562 0 TD
0.0179 Tw
[(ned by its name and can ha)20(v)15(e)15( )-15(one or multiple IP addresses. Creating a ne)25(w)-267.9(jail in)40(v)20(olv)15(es cop)10(ying the tem-)]TJ
-1.5 -1.2 TD
0.1211 Tw
[(plate jail to the ne)25(w)-371.1(location, con)]TJ
/TT9 1 Tf
14.0033 0 TD
0 Tw
(�)Tj
/TT6 1 Tf
0.5562 0 TD
(guring)Tj
/TT11 1 Tf
2.9819 0 TD
(nullfs)Tj
/TT6 1 Tf
3.6006 0 TD
0.1211 Tw
[(\(4\) mounts for gi)25(ving access to the base jail, and little)]TJ
-21.1419 -1.2 TD
0 Tw
(more. A jail that has just be created occupies about 2MB of disk space ; when running, only a handful of dae-)Tj
T*
[(mons \(cron, syslog, sendmail mainly\) use memory)65(.)]TJ
0 -1.8 TD
[(After their creation, jails may be archi)25(v)15(e)0(d)-250(t)0(o)-250(a)]TJ
/TT11 1 Tf
18.6187 0 TD
(pax)Tj
/TT6 1 Tf
1.8003 0 TD
[(\(1\) archi)25(v)15(e)0(,)-250(restored, and e)25(v)15(entually deleted.)]TJ
-23.419 -6 TD
17.775 Tw
[(BSD January)-250(15, )17775(2011)-19470(1)]TJ
ET
endstream
endobj
3 0 obj
<<
/ProcSet [/PDF /Text ]
/Font <<
/TT2 4 0 R
/TT4 5 0 R
/TT6 6 0 R
/TT8 7 0 R
/TT9 8 0 R
/TT11 9 0 R
>>
/ExtGState <<
/GS1 10 0 R
>>
>>
endobj
13 0 obj
<<
/Length 8093
>>
stream
BT
/TT6 1 Tf
10 0 0 10 72 744 Tm
0 g
/GS1 gs
0 Tc
-0.0834 Tw
[(EZJ)60(AIL \(7\))-12017.9(User�)55(s)-250(Supplementary )-83.4(Documents)-12017.9(EZJ)60(AIL \(7\))]TJ
3 -4.8 TD
0.098 Tw
[(When a ne)25(w)-348(v)15(ersion of FreeBSD is released, or when an errata is published, only the base jail need to be)]TJ
0 -1.2 TD
0.2264 Tw
(updated. Both source upgrades and binary upgrades \(using)Tj
/TT11 1 Tf
25.4998 0 TD
0 Tw
(freebsd-update)Tj
/TT6 1 Tf
8.4014 0 TD
0.2265 Tw
(\(8\)\) are supported. The)Tj
/TT11 1 Tf
-33.9011 -1.2 TD
0 Tw
(ports)Tj
/TT6 1 Tf
3.0005 0 TD
0.0251 Tw
[(\(7\) collection may also be updated by ezjail, b)20(ut indi)25(vidual ports need to be upgraded indi)25(vidually by)]TJ
-3.0005 -1.2 TD
0 Tw
[(the administrator)55(.)]TJ
/TT2 1 Tf
-1.8 -2.4 TD
0.0625 Tw
[(Anatomy of a J)15(ail)]TJ
/TT6 1 Tf
1.8 -1.2 TD
0.0332 Tw
(In the ezjail system, a jail is de)Tj
/TT9 1 Tf
12.562 0 TD
0 Tw
(�)Tj
/TT6 1 Tf
0.5562 0 TD
0.0332 Tw
(ned by a root directory and a couple of con)Tj
/TT9 1 Tf
17.4868 0 TD
0 Tw
(�)Tj
/TT6 1 Tf
0.5562 0 TD
0.0332 Tw
[(guration v)25(alues, mainly a name)]TJ
-31.1611 -1.2 TD
0.0885 Tw
(and IP addresses. The root directory of the jail contains only the jail-speci)Tj
/TT9 1 Tf
30.581 0 TD
0 Tw
(�)Tj
/TT6 1 Tf
0.5562 0 TD
(c )Tj
/TT9 1 Tf
0.7823 0 TD
(�)Tj
/TT6 1 Tf
0.5562 0 TD
0.0885 Tw
(les: con)Tj
/TT9 1 Tf
3.171 0 TD
0 Tw
(�)Tj
/TT6 1 Tf
0.5562 0 TD
(guration )Tj
/TT9 1 Tf
3.671 0 TD
(�)Tj
/TT6 1 Tf
0.5562 0 TD
0.0885 Tw
(les, data)Tj
/TT9 1 Tf
-40.43 -1.2 TD
0 Tw
(�)Tj
/TT6 1 Tf
0.5562 0 TD
0.3122 Tw
[(les, and ports installed by the administrator)55(.)-562.2(The base system is shared amongst all jails, using a)]TJ
/TT11 1 Tf
-0.5562 -1.2 TD
0 Tw
(nullfs)Tj
/TT6 1 Tf
3.6006 0 TD
0.0894 Tw
[(\(4\) mount. This sa)20(v)15(e)0(s)-339.5(space and inodes \(especially when the ports collection in made a)20(v)25(ailable to)]TJ
-3.6006 -1.2 TD
0 Tw
[(the jails\), and also memory)65(,)-250(a)0(s)-250(the k)10(ernel is no)25(w)-250(able to share copies of running programs between the jails.)]TJ
0 -1.8 TD
0.0145 Tw
[(Unless the v)25(ariable �)]TJ
/TT11 1 Tf
8.3764 0 TD
0 Tw
($ezjail_jaildir)Tj
/TT6 1 Tf
9.0015 0 TD
0.0145 Tw
[(�)-264.5(has been set by the administrator)40(,)-264.5(the root directory of the jail is)]TJ
-17.3779 -1.2 TD
0 Tw
[(k)10(ept in)]TJ
/TT11 1 Tf
2.9895 0 TD
(/usr/jails)Tj
/TT6 1 Tf
6.001 0 TD
[(,)-250(which therefore needs to reside on a partition big enough.)]TJ
-8.9905 -1.8 TD
0.2476 Tw
(There are also )Tj
/TT9 1 Tf
6.6559 0 TD
0 Tw
(�)Tj
/TT6 1 Tf
0.5562 0 TD
0.2476 Tw
[(le-based jails, in which the storage space for the jail is k)10(ept in a )]TJ
/TT9 1 Tf
29.0316 0 TD
0 Tw
(�)Tj
/TT6 1 Tf
0.5562 0 TD
0.2476 Tw
(le mounted with)Tj
/TT11 1 Tf
-36.7998 -1.2 TD
0 Tw
(mdconfig)Tj
/TT6 1 Tf
4.8008 0 TD
0.0972 Tw
[(\(8\). )-250(There)-347.2(are tw)10(o)-347.2(adv)25(antages to image jails. The amount of disk space allocated to the jail is)]TJ
-4.8008 -1.2 TD
0.0136 Tw
[(limited, while normal jails ha)20(v)15(e)15( )-15(no)-263.6(bound on the amount of disk space the)15(y)-263.6(use. On the other hand, the space)]TJ
T*
0.079 Tw
[(dedicated to the jail is no longer a)20(v)25(ailable to the host, e)25(v)15(en)-329(if)-329(the jail doesn�)18(t)-329(use all its allocated space. In)]TJ
T*
0.0305 Tw
[(addition, image jails contain a full cop)10(y)-280.5(o)0(f)-280.5(the basejail. This mak)10(es them portable between hosts running the)]TJ
T*
0.0338 Tw
[(same FreeBSD v)15(ersion as the image w)10(as created with.)-533.8(Of course, the jail no)25(w)-283.9(needs to be updated indepen-)]TJ
T*
0 Tw
[(dently from all other jails, and there is no longer an)15(y)-250(sharing of common )]TJ
/TT9 1 Tf
29.2833 0 TD
(�)Tj
/TT6 1 Tf
0.5561 0 TD
(les between the jails.)Tj
-29.8395 -1.8 TD
0.1359 Tw
(Image jails may also be encrypted using)Tj
/TT11 1 Tf
17.2521 0 TD
0 Tw
(bde)Tj
/TT6 1 Tf
1.8003 0 TD
0.1359 Tw
(\(4\) or)Tj
/TT11 1 Tf
2.7708 0 TD
0 Tw
(geli)Tj
/TT6 1 Tf
2.4004 0 TD
0.1359 Tw
[(\(8\), depending on the options gi)25(v)15(e)0(n)-385.8(a)0(t)-385.8(creation)]TJ
-24.2236 -1.2 TD
0 Tw
(time.)Tj
/TT2 1 Tf
-1.8 -2.4 TD
0.0625 Tw
(Using ZFS)Tj
/TT6 1 Tf
1.8 -1.2 TD
0.0383 Tw
[(T)80(o)80( )-80(gi)25(v)25( )278.3(e)-288.3(more precise control o)15(v)15(e)0(r)-288.3(the resources consumed by a jail, ezjail allo)25(ws putting each jail in its o)25(w)0(n)]TJ
/TT11 1 Tf
T*
0 Tw
(zfs)Tj
/TT6 1 Tf
1.8003 0 TD
(\(8\) )Tj
/TT9 1 Tf
1.416 0 TD
(�)Tj
/TT6 1 Tf
0.5562 0 TD
(lesystem. See)Tj
/TT2 1 Tf
5.6934 0 TD
[(J)15(ail Cr)18(eation Examples)]TJ
/TT6 1 Tf
10.2165 0 TD
(for details.)Tj
-19.6823 -1.8 TD
0.097 Tw
(Also, ezjail can be con)Tj
/TT9 1 Tf
9.4676 0 TD
0 Tw
(�)Tj
/TT6 1 Tf
0.5562 0 TD
0.097 Tw
[(gured to install its basejail and the accompaning template for all ne)25(w)-347(jails into its)]TJ
-10.0237 -1.2 TD
-0.025 Tc
0 Tw
[(ow)-25(n)]TJ
/TT9 1 Tf
2.0123 0 TD
0 Tc
(�)Tj
/TT6 1 Tf
0.5562 0 TD
0.0651 Tw
(lesystem. Set the �)Tj
/TT11 1 Tf
7.6382 0 TD
0 Tw
($ezjail_use_zfs)Tj
/TT6 1 Tf
9.0015 0 TD
0.0652 Tw
[(�)-315.2(v)25(ariable in your)]TJ
/TT11 1 Tf
7.5107 0 TD
0 Tw
(ezjail.conf)Tj
/TT6 1 Tf
6.9163 0 TD
0.0652 Tw
(to �YES� before running)Tj
/TT4 1 Tf
-33.635 -1.2 TD
0 Tw
(ezjail-admin )Tj
7.4513 0 TD
(update)Tj
/TT6 1 Tf
3.8506 0 TD
(or)Tj
/TT4 1 Tf
1.083 0 TD
(ezjail-admin )Tj
7.4513 0 TD
(install)Tj
/TT6 1 Tf
4.2007 0 TD
(.)Tj
-24.0368 -1.8 TD
0.2555 Tw
[(T)80(o)80( )-80(use an)15(y)-505.5(zfs feature in ezjail, you )]TJ
/TT9 1 Tf
16.471 0 TD
0 Tw
(�)Tj
/TT6 1 Tf
0.5562 0 TD
0.2555 Tw
(rst need to con)Tj
/TT9 1 Tf
6.6259 0 TD
0 Tw
(�)Tj
/TT6 1 Tf
0.5562 0 TD
0.2555 Tw
(gure the destination ZFS )Tj
/TT9 1 Tf
11.1319 0 TD
0 Tw
(�)Tj
/TT6 1 Tf
0.5562 0 TD
0.2555 Tw
(lesystem using the)Tj
-35.8972 -1.2 TD
0 Tw
(�)Tj
/TT11 1 Tf
0.4438 0 TD
($ezjail_jailzfs)Tj
/TT6 1 Tf
9.0015 0 TD
[(�)-250(v)25(ariable.)]TJ
-9.4453 -1.8 TD
0.0588 Tw
[(Y)110(o)0(u)-308.8(can use ZFS jails without installing the basejail into its o)25(wn ZFS )]TJ
/TT9 1 Tf
28.7116 0 TD
0 Tw
(�)Tj
/TT6 1 Tf
0.5562 0 TD
0.0589 Tw
[(lesystem and vice v)15(ersa. In order to)]TJ
-29.2678 -1.2 TD
0 Tw
[(create ZFS jails by def)10(ault, set the �)]TJ
/TT11 1 Tf
14.3186 0 TD
($ezjail_use_zfs_for_jails)Tj
/TT6 1 Tf
15.0024 0 TD
[(�)-250(v)25(ariable to �YES�.)]TJ
/TT2 1 Tf
-31.1211 -2.4 TD
0.0625 Tw
[(P)20(e)0(r)37(-)0(J)15(ail options)]TJ
/TT6 1 Tf
1.8 -1.2 TD
0.0048 Tw
[(As we sa)15(w)-254.9(earlier)40(,)-254.9(a)-254.8(jail is described by a )]TJ
/TT9 1 Tf
16.7927 0 TD
0 Tw
(�)Tj
/TT6 1 Tf
0.5562 0 TD
0.0048 Tw
(le in)Tj
/TT11 1 Tf
2.0091 0 TD
0 Tw
(EZJAIL_PREFIX/etc/ezjail/)Tj
/TT6 1 Tf
15.0024 0 TD
[(.)-504.8(This )]TJ
/TT9 1 Tf
2.7874 0 TD
(�)Tj
/TT6 1 Tf
0.5562 0 TD
0.0048 Tw
(le has the same)Tj
-37.704 -1.2 TD
0.0039 Tw
(name as the jail it con)Tj
/TT9 1 Tf
8.7666 0 TD
0 Tw
(�)Tj
/TT6 1 Tf
0.5562 0 TD
0.0039 Tw
[(gures. It is a set of v)25(ariables interpreted by)]TJ
/TT11 1 Tf
17.2824 0 TD
0 Tw
(sh)Tj
/TT6 1 Tf
1.2002 0 TD
0.004 Tw
[(\(1\), much lik)10(e)]TJ
/TT11 1 Tf
5.8892 0 TD
0 Tw
(rc.conf)Tj
/TT6 1 Tf
4.2007 0 TD
0.004 Tw
(\(5\) is. This )Tj
/TT9 1 Tf
4.6228 0 TD
0 Tw
(�)Tj
/TT6 1 Tf
0.5562 0 TD
(le)Tj
-43.0742 -1.2 TD
[(is created at the same time as the jail, and usually doesn�)18(t)-250(require tweaking from the administrator)55(.)]TJ
0 -1.8 TD
0.0229 Tw
[(In addition to the v)25(ariables described belo)25(w)65(,)65( )-65(an)15(y)15( )-15(v)25(ariable used by the init script)]TJ
/TT11 1 Tf
32.1841 0 TD
0 Tw
(/etc/rc.d/jail)Tj
/TT6 1 Tf
8.6742 0 TD
0.0228 Tw
(may be)Tj
-40.8582 -1.2 TD
0.0967 Tw
[(added manually by the administrator)55(.)-346.8(The follo)25(wing v)25(ariables are handled by ezjail, replacing J)60(AILN)35(AME)]TJ
T*
0 Tw
(with the actual name of the jail:)Tj
0 -1.8 TD
[(jail_J)60(AILN)35(AME_hostname)]TJ
4.1 -1.2 TD
0.0863 Tw
[(The hostname of the jail. Def)10(aults to the name of the jail, unless special characters needed to be)]TJ
T*
0 Tw
(stripped.)Tj
-4.1 -1.8 TD
[(jail_J)60(AILN)35(AME_ip)]TJ
4.1 -1.2 TD
[(The IP addresses the jail is allo)25(wed to use.)]TJ
-7.1 -6 TD
17.775 Tw
[(BSD January)-250(15, )17775(2011)-19470(2)]TJ
ET
endstream
endobj
14 0 obj
<<
/ProcSet [/PDF /Text ]
/Font <<
/TT2 4 0 R
/TT4 5 0 R
/TT6 6 0 R
/TT9 8 0 R
/TT11 9 0 R
>>
/ExtGState <<
/GS1 10 0 R
>>
>>
endobj
16 0 obj
<<
/Length 6219
>>
stream
BT
/TT6 1 Tf
10 0 0 10 72 744 Tm
0 g
/GS1 gs
0 Tc
-0.0834 Tw
[(EZJ)60(AIL \(7\))-12017.9(User�)55(s)-250(Supplementary )-83.4(Documents)-12017.9(EZJ)60(AIL \(7\))]TJ
7.1 -4.8 TD
0 Tw
[(Since FreeBSD 7.2, se)25(v)15(eral IP addresses may be gi)25(v)15(en, separated by commas.)]TJ
0 -1.8 TD
0.1325 Tw
(Since FreeBSD 9.0 each IP address can be pre)Tj
/TT9 1 Tf
19.582 0 TD
0 Tw
(�)Tj
/TT6 1 Tf
0.5562 0 TD
0.1325 Tw
[(x)15(ed by an interf)10(ace name follo)25(wed by the pipe)]TJ
-20.1381 -1.2 TD
0.1847 Tw
(symbol. It will then automatically be con)Tj
/TT9 1 Tf
17.5213 0 TD
0 Tw
(�)Tj
/TT6 1 Tf
0.5562 0 TD
0.1846 Tw
[(gured on that interf)10(ace when the jail is started and)]TJ
-18.0774 -1.2 TD
0.0071 Tw
[(remo)15(v)15(e)0(d)-257.1(from the interf)10(ace when the jail stops. \(Y)110(ou will probably ha)20(v)15(e)15( )-15(to)-257.2(escape the pipe symbol,)]TJ
T*
0 Tw
(though.\))Tj
-4.1 -1.8 TD
[(jail_J)60(AILN)35(AME_rootdir)]TJ
4.1 -1.2 TD
0.2247 Tw
(The directory holding the jail )Tj
/TT9 1 Tf
13.0922 0 TD
0 Tw
(�)Tj
/TT6 1 Tf
0.5562 0 TD
0.2247 Tw
(les \(the directory used as a mount point for )Tj
/TT9 1 Tf
19.4344 0 TD
0 Tw
(�)Tj
/TT6 1 Tf
0.5562 0 TD
0.2247 Tw
(le-based jails\).)Tj
-33.639 -1.2 TD
0 Tw
[(Def)10(aults to the jail name inside �)]TJ
/TT11 1 Tf
13.1526 0 TD
($ezjail_jaildir)Tj
/TT6 1 Tf
9.0015 0 TD
(�.)Tj
-26.2541 -1.8 TD
[(jail_J)60(AILN)35(AME_e)15(x)15(ec_start)]TJ
4.1 -1.2 TD
0.1001 Tw
[(The command to run inside the jail when starting it. Def)10(aults to �)]TJ
/TT11 1 Tf
27.2685 0 TD
0 Tw
($ezjail_exec_start)Tj
/TT6 1 Tf
10.8018 0 TD
0.3502 Tc
[(�o)350.2(r)]TJ
-38.0703 -1.2 TD
0 Tc
(�)Tj
/TT11 1 Tf
0.4438 0 TD
(/bin/sh /etc/rc)Tj
/TT6 1 Tf
9.0015 0 TD
(�.)Tj
-13.5453 -1.8 TD
[(jail_J)60(AILN)35(AME_e)15(x)15(ec_stop)]TJ
4.1 -1.2 TD
0.0862 Tw
[(The command to run inside the jail when stopping it. Def)10(aults to the empty string, which means)]TJ
T*
0 Tw
(�)Tj
/TT11 1 Tf
0.4438 0 TD
(/bin/sh /etc/rc.shutdown)Tj
/TT6 1 Tf
14.4023 0 TD
(�.)Tj
-18.9462 -1.8 TD
[(jail_J)60(AILN)35(AME_mount_enable)]TJ
4.1 -1.2 TD
0.454 Tw
[(A)-704(boolean \(�YES� or �NO�\), that speci)]TJ
/TT9 1 Tf
18.5238 0 TD
0 Tw
(�)Tj
/TT6 1 Tf
0.5562 0 TD
0.454 Tw
(es whether the )Tj
/TT9 1 Tf
7.3874 0 TD
0 Tw
(�)Tj
/TT6 1 Tf
0.5562 0 TD
0.454 Tw
(lesystems in)Tj
/TT11 1 Tf
6.0745 0 TD
0 Tw
(/etc/fstab.)Tj
/TT8 1 Tf
-33.098 -1.2 TD
(JAILNAME)Tj
/TT6 1 Tf
5.0508 0 TD
(are carried out. Set by ezjail to �)Tj
/TT11 1 Tf
12.9385 0 TD
(YES)Tj
/TT6 1 Tf
1.8003 0 TD
[(�, set to at your o)25(wn risk.)]TJ
-23.8896 -1.8 TD
[(jail_J)60(AILN)35(AME_de)25(vfs_enable)]TJ
4.1 -1.2 TD
0.4343 Tw
[(A)-684.4(boolean specifying whether to mount a)]TJ
/TT11 1 Tf
19.8415 0 TD
0 Tw
(/dev)Tj
/TT9 1 Tf
3.0847 0 TD
(�)Tj
/TT6 1 Tf
0.5562 0 TD
0.4343 Tw
[(lesystem inside the jail. Def)10(aults to)]TJ
-23.4823 -1.2 TD
0 Tw
(�)Tj
/TT11 1 Tf
0.4438 0 TD
($ezjail_devfs_enable)Tj
/TT6 1 Tf
12.002 0 TD
(�, or �)Tj
/TT11 1 Tf
2.4707 0 TD
(YES)Tj
/TT6 1 Tf
1.8003 0 TD
(�.)Tj
-20.8168 -1.8 TD
[(jail_J)60(AILN)35(AME_de)25(vfs_ruleset)]TJ
4.1 -1.2 TD
0.6009 Tw
(The ruleset to apply when mounting a)Tj
/TT11 1 Tf
19.6194 0 TD
0 Tw
(/dev)Tj
/TT9 1 Tf
3.2513 0 TD
(�)Tj
/TT6 1 Tf
0.5562 0 TD
0.6009 Tw
[(lesystem inside a jail. Def)10(aults to)]TJ
-23.4268 -1.2 TD
0 Tw
(�)Tj
/TT11 1 Tf
0.4438 0 TD
($ezjail_devfs_ruleset)Tj
/TT6 1 Tf
12.602 0 TD
(�, or �)Tj
/TT11 1 Tf
2.4707 0 TD
(devfsrules_jail)Tj
/TT6 1 Tf
9.0015 0 TD
(�.)Tj
-28.6181 -1.8 TD
[(ezjail_J)60(AILN)35(AME_procfs)]TJ
4.1 -1.2 TD
0.3882 Tw
[(A)-638.2(boolean specifying whether to mount a)]TJ
/TT11 1 Tf
19.5187 0 TD
0 Tw
(/proc)Tj
/TT9 1 Tf
3.6386 0 TD
(�)Tj
/TT6 1 Tf
0.5562 0 TD
0.3881 Tw
[(lesystem inside the jail. Def)10(aults to)]TJ
-23.7134 -1.2 TD
0 Tw
(�)Tj
/TT11 1 Tf
0.4438 0 TD
($ezjail_procfs_enable)Tj
/TT6 1 Tf
12.602 0 TD
(�, or �)Tj
/TT11 1 Tf
2.4707 0 TD
(YES)Tj
/TT6 1 Tf
1.8003 0 TD
(�.)Tj
-21.4169 -1.8 TD
[(ezjail_J)60(AILN)35(AME_fdescfs)]TJ
4.1 -1.2 TD
0.2958 Tw
[(A)-545.8(boolean specifying whether to mount a)]TJ
/TT11 1 Tf
18.8719 0 TD
0 Tw
(/dev/fs)Tj
/TT9 1 Tf
4.7466 0 TD
(�)Tj
/TT6 1 Tf
0.5562 0 TD
0.2959 Tw
[(lesystem inside the jail. Def)10(aults to)]TJ
-24.1746 -1.2 TD
0 Tw
(�)Tj
/TT11 1 Tf
0.4438 0 TD
($ezjail_fdescfs_enable)Tj
/TT6 1 Tf
13.2022 0 TD
(�, or �)Tj
/TT11 1 Tf
2.4707 0 TD
(YES)Tj
/TT6 1 Tf
1.8003 0 TD
(�.)Tj
-22.017 -1.8 TD
[(ezjail_J)60(AILN)35(AME_image)]TJ
4.1 -1.2 TD
(The path to the image )Tj
/TT9 1 Tf
8.9692 0 TD
(�)Tj
/TT6 1 Tf
0.5562 0 TD
(le backing the jail, if the jail is )Tj
/TT9 1 Tf
12.4131 0 TD
(�)Tj
/TT6 1 Tf
0.5562 0 TD
(le-based; or the empty string.)Tj
-26.5946 -1.8 TD
[(ezjail_J)60(AILN)35(AME_imagetype)]TJ
4.1 -1.2 TD
(The type of the image, if the jail is )Tj
/TT9 1 Tf
14.0513 0 TD
(�)Tj
/TT6 1 Tf
0.5561 0 TD
(le-based; the empty string otherwise.)Tj
-18.7074 -1.8 TD
[(ezjail_J)60(AILN)35(AME_attachparams)]TJ
4.1 -1.2 TD
0.0749 Tw
(The parameters to pass to the tool used to decrypt )Tj
/TT9 1 Tf
20.8545 0 TD
0 Tw
(�)Tj
/TT6 1 Tf
0.5562 0 TD
0.0749 Tw
(le-based, encrypted jails. Initialized from the)Tj
/TT3 1 Tf
-21.244 -1.2 TD
0 Tw
<00e9>Tj
/TT4 1 Tf
0.6001 0 TD
(C)Tj
/TT6 1 Tf
0.9723 0 TD
0.1222 Tw
[(option when creating such a jail, or the empty string.)-622.2(�)]TJ
/TT11 1 Tf
23.244 0 TD
0 Tw
(YES)Tj
/TT6 1 Tf
1.8003 0 TD
0.1223 Tw
[(�)-372.2(i)0(f)-372.2(the jail requires interaction)]TJ
-26.7833 -1.2 TD
0.2779 Tw
[(with the administrator when starting \(typically)65(,)-527.9(encrypted jails that needs a passw)10(ord to be)]TJ
T*
0 Tw
(decrypted\).)Tj
-4.1 -1.8 TD
[(ezjail_J)60(AILN)35(AME_forceblocking)]TJ
4.1 -1.2 TD
(If �)Tj
/TT11 1 Tf
1.3599 0 TD
(YES)Tj
/TT6 1 Tf
1.8003 0 TD
[(�, start the jail e)25(v)15(en)-250(when it is mark)10(ed as blocking.)]TJ
-7.2602 -1.8 TD
[(ezjail_J)60(AILN)35(AME_zfs_datasets)]TJ
4.1 -1.2 TD
0.1288 Tw
[(F)15(o)0(r)-378.7(ZFS jails, additional ZFS datasets to attach to the jail when starting it. T)80(a)0(k)10(en from the)]TJ
/TT3 1 Tf
38.4948 0 TD
0 Tw
<00e9>Tj
/TT4 1 Tf
0.6001 0 TD
(z)Tj
/TT6 1 Tf
-39.0948 -1.2 TD
(option when con)Tj
/TT9 1 Tf
6.6655 0 TD
(�)Tj
/TT6 1 Tf
0.5562 0 TD
(guring a jail; the empty string otherwise.)Tj
-14.3217 -6.6 TD
17.775 Tw
[(BSD January)-250(15, )17775(2011)-19470(3)]TJ
ET
endstream
endobj
17 0 obj
<<
/ProcSet [/PDF /Text ]
/Font <<
/TT3 18 0 R
/TT4 5 0 R
/TT6 6 0 R
/TT8 7 0 R
/TT9 8 0 R
/TT11 9 0 R
>>
/ExtGState <<
/GS1 10 0 R
>>
>>
endobj
20 0 obj
<<
/Length 9370
>>
stream
BT
/TT6 1 Tf
10 0 0 10 72 744 Tm
0 g
/GS1 gs
0 Tc
-0.0834 Tw
[(EZJ)60(AIL \(7\))-12017.9(User�)55(s)-250(Supplementary )-83.4(Documents)-12017.9(EZJ)60(AIL \(7\))]TJ
3 -4.8 TD
0 Tw
[(ezjail_J)60(AILN)35(AME_cpuset)]TJ
4.1 -1.2 TD
0.021 Tw
(The processor set to place the jail in when starting it \(see)Tj
/TT11 1 Tf
23.2447 0 TD
0 Tw
(cpuset)Tj
/TT6 1 Tf
3.6006 0 TD
0.021 Tw
[(\(1\)\). )-250(T)80(a)0(k)10(en from the)]TJ
/TT3 1 Tf
8.8237 0 TD
0 Tw
<00e9>Tj
/TT4 1 Tf
0.6001 0 TD
(c)Tj
/TT6 1 Tf
0.8711 0 TD
(option)Tj
-37.1401 -1.2 TD
(when con)Tj
/TT9 1 Tf
3.8599 0 TD
(�)Tj
/TT6 1 Tf
0.5562 0 TD
(guring a jail; the empty string otherwise.)Tj
-8.516 -1.8 TD
[(ezjail_J)60(AILN)35(AME_)]TJ
/TT9 1 Tf
8.0696 0 TD
(�)Tj
/TT6 1 Tf
0.5562 0 TD
(b)Tj
-4.5257 -1.2 TD
0.0466 Tw
[(The netw)10(ork vie)25(w)-296.6(t)0(o)-296.6(g)0(i)25(v)25( )286.6(e)-296.6(to the jail \(see)]TJ
/TT11 1 Tf
16.756 0 TD
0 Tw
(setfib)Tj
/TT6 1 Tf
3.6006 0 TD
0.0466 Tw
[(\(1\)\) when starting it. T)80(a)0(k)10(en from the)]TJ
/TT3 1 Tf
15.2872 0 TD
0 Tw
<00e9>Tj
/TT4 1 Tf
0.6001 0 TD
(f)Tj
/TT6 1 Tf
0.8968 0 TD
(option)Tj
-37.1407 -1.2 TD
(when con)Tj
/TT9 1 Tf
3.8599 0 TD
(�)Tj
/TT6 1 Tf
0.5562 0 TD
(guring the jail; the empty string otherwise.)Tj
-8.516 -1.8 TD
[(ezjail_J)60(AILN)35(AME_parameters)]TJ
4.1 -1.2 TD
0.054 Tw
(The parameter set to be con)Tj
/TT9 1 Tf
11.3481 0 TD
0 Tw
(�)Tj
/TT6 1 Tf
0.5562 0 TD
0.054 Tw
(gured to the jail \(see)Tj
/TT11 1 Tf
8.6835 0 TD
0 Tw
(jail)Tj
/TT6 1 Tf
2.4004 0 TD
0.0539 Tw
[(\(8\)\) when starting it. Y)110(ou need to con)]TJ
/TT9 1 Tf
15.3191 0 TD
0 Tw
(�)Tj
/TT6 1 Tf
0.5562 0 TD
(g-)Tj
-38.8634 -1.2 TD
(ure this by hand.)Tj
-4.1 -1.8 TD
[(ezjail_J)60(AILN)35(AME_post_start_script)]TJ
4.1 -1.2 TD
0.017 Tw
[(The path to a script that will be e)15(x)15(ecuted after the jail successfully w)10(as created. The script recei)25(v)15(e)0(s)]TJ
T*
0 Tw
[(tw)10(o)-250(parameters, the jid and the jail name.)-500(Y)110(o)0(u)-250(need to con)]TJ
/TT9 1 Tf
23.4835 0 TD
(�)Tj
/TT6 1 Tf
0.5562 0 TD
(gure this by hand.)Tj
-28.1397 -1.8 TD
0.3903 Tw
(In addition to these)Tj
/TT11 1 Tf
9.5041 0 TD
0 Tw
(sh)Tj
/TT6 1 Tf
1.2002 0 TD
0.3902 Tw
[(\(1\)-style v)25(ariables, the administrator may add comment lines starting with)]TJ
-10.7043 -1.2 TD
0.0658 Tw
[(�PR)40(O)50(VIDE:�, �REQ)10(UIRE:� and �BEFORE:�.)-565.8(These comments are used by)]TJ
/TT11 1 Tf
31.485 0 TD
0 Tw
(rcorder)Tj
/TT6 1 Tf
4.2007 0 TD
0.0659 Tw
(\(8\) to determine the)Tj
-35.6857 -1.2 TD
0.0481 Tw
[(order in which the jails are started. The def)10(ault is to k)10(eep �REQ)10(UIRE� and �BEFORE� empty)65(,)-298.1(meaning the)]TJ
T*
0 Tw
[(jails are started in no particular order)55(.)]TJ
/TT2 1 Tf
-1.8 -2.4 TD
[(Fla)25(v)10(ours)]TJ
/TT6 1 Tf
1.8 -1.2 TD
0.4115 Tw
(When a jail is created, it is not con)Tj
/TT9 1 Tf
17.1484 0 TD
0 Tw
(�)Tj
/TT6 1 Tf
0.5562 0 TD
0.4115 Tw
[(gured; in particular you lik)10(ely w)10(ant to edit )]TJ
/TT9 1 Tf
20.4341 0 TD
0 Tw
(�)Tj
/TT6 1 Tf
0.5562 0 TD
0.4115 Tw
(les such as)Tj
/TT11 1 Tf
-38.6949 -1.2 TD
0 Tw
(/etc/resolv.conf)Tj
/TT6 1 Tf
9.6016 0 TD
(,)Tj
/TT11 1 Tf
0.9187 0 TD
(/etc/localtime)Tj
/TT6 1 Tf
8.7201 0 TD
0.0686 Tw
[(and others. Y)110(ou may also w)10(ant to create some system users,)]TJ
-19.2403 -1.2 TD
0.1042 Tw
(maybe enable)Tj
/TT11 1 Tf
5.9833 0 TD
0 Tw
(sshd)Tj
/TT6 1 Tf
2.4004 0 TD
0.1042 Tw
[(\(8\). )-250(Ezjail)-354.2(solv)15(es this problem by using the concept of �)]TJ
/TT9 1 Tf
23.5773 0 TD
0 Tw
(�)Tj
/TT6 1 Tf
0.5562 0 TD
0.3543 Tw
[(a)20(v)20(ours�. When)-354.3(a)]TJ
/TT9 1 Tf
7.4643 0 TD
0 Tw
(�)Tj
/TT6 1 Tf
0.5562 0 TD
0.1043 Tw
[(a)20(v)20(our is)]TJ
-40.5376 -1.2 TD
0.0804 Tw
(selected at jail creation time, the )Tj
/TT9 1 Tf
13.6709 0 TD
0 Tw
(�)Tj
/TT6 1 Tf
0.5562 0 TD
0.0803 Tw
[(a)20(v)20(our directory tree is mer)18(ged into the ne)25(w)-330.4(jail�)55(s)-330.4(directory tree. In addi-)]TJ
-14.227 -1.2 TD
0 Tw
(tion, the jail is con)Tj
/TT9 1 Tf
7.4155 0 TD
(�)Tj
/TT6 1 Tf
0.5562 0 TD
(gured so that on its )Tj
/TT9 1 Tf
7.8604 0 TD
(�)Tj
/TT6 1 Tf
0.5562 0 TD
(rst boot, the )Tj
/TT9 1 Tf
4.9995 0 TD
(�)Tj
/TT6 1 Tf
0.5562 0 TD
(le)Tj
/TT11 1 Tf
0.9717 0 TD
(ezjail.flavour)Tj
/TT6 1 Tf
8.6514 0 TD
[(is e)15(x)15(ecuted.)]TJ
-31.5669 -1.8 TD
0.1077 Tw
(As part of the install sub-command, the )Tj
/TT9 1 Tf
16.8061 0 TD
0 Tw
(�)Tj
/TT6 1 Tf
0.5562 0 TD
0.1078 Tw
[(a)20(v)20(our base directory w)10(as created as)]TJ
/TT11 1 Tf
15.0343 0 TD
0 Tw
(/usr/jails/flavours)Tj
/TT6 1 Tf
-32.3966 -1.2 TD
0.0326 Tw
(and populated with an single )Tj
/TT9 1 Tf
11.9106 0 TD
0 Tw
(�)Tj
/TT6 1 Tf
0.5562 0 TD
0.0326 Tw
[(a)20(v)20(our named)]TJ
/TT4 1 Tf
5.4676 0 TD
0 Tw
(example)Tj
/TT6 1 Tf
4.2007 0 TD
[(.)-532.6(This )]TJ
/TT9 1 Tf
2.843 0 TD
(�)Tj
/TT6 1 Tf
0.5562 0 TD
0.0326 Tw
[(a)20(v)20(our contains 3 )]TJ
/TT9 1 Tf
6.9172 0 TD
0 Tw
(�)Tj
/TT6 1 Tf
0.5562 0 TD
0.0326 Tw
(les customized for running)Tj
-33.0075 -1.2 TD
1.0937 Tw
(in a jail \()Tj
/TT11 1 Tf
6.8631 0 TD
0 Tw
(etc/make.conf)Tj
/TT6 1 Tf
7.8013 0 TD
(,)Tj
/TT11 1 Tf
1.9437 0 TD
(etc/periodic.conf)Tj
/TT6 1 Tf
10.2017 0 TD
(,)Tj
/TT11 1 Tf
1.9437 0 TD
(etc/rc.conf)Tj
/TT6 1 Tf
6.6011 0 TD
1.3437 Tw
[(\). The)-1343.8(e)15(xample)]TJ
/TT11 1 Tf
-35.3545 -1.2 TD
0 Tw
(ezjail.flavour)Tj
/TT6 1 Tf
8.7932 0 TD
0.1417 Tw
[(also sho)25(w)-391.7(h)0(o)25(w)25( )-25(to)-391.7(create users, and introduce the con)40(v)15(ention of placing packages in)]TJ
/TT11 1 Tf
-8.7932 -1.2 TD
0 Tw
(/pkg)Tj
/TT6 1 Tf
2.7014 0 TD
0.051 Tw
(that are installed when the jail is )Tj
/TT9 1 Tf
13.5474 0 TD
0 Tw
(�)Tj
/TT6 1 Tf
0.5562 0 TD
0.051 Tw
[(rst brought up. Y)110(ou are encouraged to cop)10(y)-301.1(the e)15(xample )]TJ
/TT9 1 Tf
23.1184 0 TD
0 Tw
(�)Tj
/TT6 1 Tf
0.5562 0 TD
0.0511 Tw
[(a)20(v)20(our to)]TJ
-40.4795 -1.2 TD
0.0014 Tw
[(create your o)25(wn )]TJ
/TT9 1 Tf
6.6706 0 TD
0 Tw
(�)Tj
/TT6 1 Tf
0.5562 0 TD
[(a)20(v)20(our)55(.)-501.4(T)80(ypical )]TJ
/TT9 1 Tf
6.1589 0 TD
(�)Tj
/TT6 1 Tf
0.5562 0 TD
0.0013 Tw
[(a)20(v)20(our usages include setting up jails with site-speci)]TJ
/TT9 1 Tf
20.4925 0 TD
0 Tw
(�)Tj
/TT6 1 Tf
0.5562 0 TD
0.0013 Tw
(c con)Tj
/TT9 1 Tf
2.139 0 TD
0 Tw
(�)Tj
/TT6 1 Tf
0.5562 0 TD
0.0013 Tw
(guration, creat-)Tj
-37.6856 -1.2 TD
0.0295 Tw
[(ing classes of jails for de)25(v)15(elopment or testing \(such as a webde)25(v)]TJ
/TT9 1 Tf
26.2266 0 TD
0 Tw
(�)Tj
/TT6 1 Tf
0.5562 0 TD
0.0296 Tw
[(a)20(v)20(our that w)10(ould install Apache with your)]TJ
-26.7828 -1.2 TD
0 Tw
[(f)10(a)20(v)20(ourite web de)25(v)15(elopment frame)25(w)10(ork\), pre-creating local users, and so on.)]TJ
/TT2 1 Tf
-1.8 -2.4 TD
0.0625 Tw
[(Updating the Base J)15(ail)]TJ
/TT6 1 Tf
1.8 -1.2 TD
0.0674 Tw
[(W)80(e)80( )-80.1(already mentionned ho)25(w)-317.5(easy it is to update jails, since only one cop)10(y)-317.5(needs to be updated. Ezjail only)]TJ
T*
0.6262 Tw
[(handles updating the base system; updating the ports is left to the administrator \(b)20(ut see)]TJ
T*
0 Tw
(�)Tj
/TT11 1 Tf
0.4438 0 TD
(ports-mgmt/jailaudit)Tj
/TT6 1 Tf
12.002 0 TD
0.0251 Tw
[(�)-275.1(for a w)10(ay to get noti)]TJ
/TT9 1 Tf
8.9155 0 TD
0 Tw
(�)Tj
/TT6 1 Tf
0.5562 0 TD
0.0251 Tw
(ed of ports in need of an update\). Updates are handled)Tj
-21.9175 -1.2 TD
0.1373 Tw
(with the)Tj
/TT4 1 Tf
3.7741 0 TD
-0.2127 Tw
(ezjail-admin update)Tj
/TT6 1 Tf
11.5765 0 TD
0.1374 Tw
(command. It is possible to update the base jail from source or from)Tj
-15.3506 -1.2 TD
0.0382 Tw
[(binary packages. If a base jail already e)15(xists, the)]TJ
/TT4 1 Tf
19.9047 0 TD
0 Tw
(update)Tj
/TT6 1 Tf
3.8888 0 TD
0.0382 Tw
[(command installs the w)10(orld in a temporary direc-)]TJ
-23.7935 -1.2 TD
0.032 Tw
[(tory before mo)15(ving it to the basejail, thus lea)20(ving intact all installed libraries. After making sure all softw)10(are)]TJ
T*
0.0752 Tw
[(running in the jails is link)10(ed with the ne)25(w)-325.2(librairies, you may w)10(ant to rem)]TJ
30.4189 0 TD
-0.015 Tc
0 Tw
(ove )Tj
1.739 0 TD
0 Tc
0.0752 Tw
[(the old library v)15(ersions. It is)]TJ
-32.158 -1.2 TD
0 Tw
[(often a good idea to update the jails when a ne)25(w)-250(k)10(ernel is installed in the host, using the same sources.)]TJ
/TT2 1 Tf
-1.8 -2.4 TD
0.0625 Tw
[(Starting J)15(ails)]TJ
/TT6 1 Tf
1.8 -1.2 TD
0 Tw
[(Lik)10(e)-601.1(all)]TJ
/TT11 1 Tf
4.0242 0 TD
(rc)Tj
/TT6 1 Tf
1.2002 0 TD
0.3511 Tw
(\(8\) scripts, the ezjail script)Tj
/TT11 1 Tf
12.6408 0 TD
0 Tw
(EZJAIL_PREFIX/etc/rc.d/ezjail)Tj
/TT6 1 Tf
18.0039 0 TD
0.3512 Tw
(accepts parameters)Tj
/TT4 1 Tf
-35.8691 -1.2 TD
0 Tw
(start)Tj
/TT6 1 Tf
3.0005 0 TD
(,)Tj
/TT4 1 Tf
0.852 0 TD
(restart)Tj
/TT6 1 Tf
4.8027 0 TD
(and)Tj
/TT4 1 Tf
1.6958 0 TD
(stop,)Tj
/TT6 1 Tf
3.6025 0 TD
0.002 Tw
[(running, restarting and stopping all \(non-blocking\) jails under ezjail�)55(s)-252(con-)]TJ
-13.9535 -1.2 TD
0 Tw
[(trol by def)10(ault. When passed an additional list of jails, only these jails are acted upon.)]TJ
0 -1.8 TD
0.0321 Tw
(The order in which jails are started is determined by the)Tj
/TT11 1 Tf
22.9288 0 TD
0 Tw
(rcorder)Tj
/TT6 1 Tf
4.2007 0 TD
0.0321 Tw
(\(8\) tool, using cues from the jail con)Tj
/TT9 1 Tf
14.7769 0 TD
0 Tw
(�)Tj
/TT6 1 Tf
0.5562 0 TD
(gu-)Tj
-42.4626 -1.2 TD
(rations in ezjails)Tj
/TT11 1 Tf
6.8037 0 TD
(EZJAIL_PREFIX/etc/ezjail)Tj
/TT6 1 Tf
14.6523 0 TD
[(control directory)65(.)]TJ
-24.4561 -5.4 TD
17.775 Tw
[(BSD January)-250(15, )17775(2011)-19470(4)]TJ
ET
endstream
endobj
21 0 obj
<<
/ProcSet [/PDF /Text ]
/Font <<
/TT2 4 0 R
/TT3 18 0 R
/TT4 5 0 R
/TT6 6 0 R
/TT9 8 0 R
/TT11 9 0 R
>>
/ExtGState <<
/GS1 10 0 R
>>
>>
endobj
23 0 obj
<<
/Length 7750
>>
stream
BT
/TT6 1 Tf
10 0 0 10 72 744 Tm
0 g
/GS1 gs
0 Tc
-0.0834 Tw
[(EZJ)60(AIL \(7\))-12017.9(User�)55(s)-250(Supplementary )-83.4(Documents)-12017.9(EZJ)60(AIL \(7\))]TJ
3 -4.8 TD
0.044 Tw
[(The script e)15(xamines its con)]TJ
/TT9 1 Tf
11.1024 0 TD
0 Tw
(�)Tj
/TT6 1 Tf
0.5562 0 TD
0.0439 Tw
[(g, attaches and mounts images, and sets v)25(ariables for each jail in the list before)]TJ
-11.6586 -1.2 TD
0 Tw
(passing its command on to the)Tj
/TT11 1 Tf
12.3877 0 TD
(/etc/rc.d/jail)Tj
/TT6 1 Tf
8.6514 0 TD
(script.)Tj
-21.0391 -1.8 TD
0.0353 Tw
[(T)80(o)80( )-80(interacti)25(v)15(ely start all crypto image jails \(or those depending on them\), that were not automatically started)]TJ
0 -1.2 TD
0 Tw
(during booting, use the)Tj
/TT4 1 Tf
9.4712 0 TD
(startcrypto)Tj
/TT6 1 Tf
6.8511 0 TD
[(parameter)55(.)]TJ
-16.3223 -1.8 TD
0.3287 Tw
(Note that jails con)Tj
/TT9 1 Tf
8.2898 0 TD
0 Tw
(�)Tj
/TT6 1 Tf
0.5562 0 TD
0.3287 Tw
(gured to be in the)Tj
/TT13 1 Tf
8.8915 0 TD
0 Tw
(norun)Tj
/TT6 1 Tf
2.9679 0 TD
0.3287 Tw
(state \(using)Tj
/TT4 1 Tf
5.4898 0 TD
-0.0214 Tw
(ezjail-admin config)Tj
/TT3 1 Tf
12.4757 0 TD
0 Tw
<00e9>Tj
/TT4 1 Tf
0.6001 0 TD
(r)Tj
/TT8 1 Tf
1.5287 0 TD
(norun)Tj
-40.7996 -1.2 TD
(jailname)Tj
/TT6 1 Tf
4.8008 0 TD
[(\))-250(are ne)25(v)15(e)0(r)-250(started by the ezjail rc script.)]TJ
-4.8008 -1.8 TD
0.0403 Tw
[(As a con)40(v)15(enient shortcut, the)]TJ
/TT4 1 Tf
12.0322 0 TD
0 Tw
(ezjail-admin)Tj
/TT6 1 Tf
7.4915 0 TD
0.0404 Tw
[(command in)40(v)20(o)0(k)10(e)0(s)-290.4(the rc.d script and passes the correspond-)]TJ
-19.5237 -1.2 TD
0 Tw
[(ing parameters, if the)15(y)-250(look lik)10(e)-250(v)25(alid parameters.)]TJ
0 -1.8 TD
0.0342 Tw
[(Ev)15(en if ezjail is not enabled in the)]TJ
/TT11 1 Tf
14.1429 0 TD
0 Tw
(rc.conf)Tj
/TT6 1 Tf
4.2007 0 TD
0.0341 Tw
(\(5\), rc.d/ezjail can be used to start and stop jails by prepending)Tj
/TT4 1 Tf
-18.3436 -1.2 TD
0 Tw
(force)Tj
/TT6 1 Tf
3.6005 0 TD
(or)Tj
/TT4 1 Tf
1.083 0 TD
(one)Tj
/TT6 1 Tf
2.4003 0 TD
(to the)Tj
/TT4 1 Tf
2.4995 0 TD
(start, restart)Tj
/TT6 1 Tf
9.0014 0 TD
(or)Tj
/TT4 1 Tf
1.083 0 TD
(stop)Tj
/TT6 1 Tf
3.0004 0 TD
[(parameter)55(.)-250(Refer to)]TJ
/TT11 1 Tf
7.9406 0 TD
(rc)Tj
/TT6 1 Tf
1.2002 0 TD
(\(8\) for details.)Tj
/TT2 1 Tf
-33.6089 -2.4 TD
0.0625 Tw
[(Remarks & T)18(ips)]TJ
/TT6 1 Tf
1.8 -1.2 TD
0.0023 Tw
[(Jails can be either accessed from the netw)10(ork, for instance by using)]TJ
/TT11 1 Tf
27.2032 0 TD
0 Tw
(ssh)Tj
/TT6 1 Tf
1.8003 0 TD
0.0024 Tw
(\(1\), or from the host system by using)Tj
-29.0035 -1.2 TD
0 Tw
(the)Tj
/TT4 1 Tf
1.5745 0 TD
(console)Tj
/TT6 1 Tf
4.5535 0 TD
0.1027 Tw
[(command, which gi)25(v)15(e)0(s)-352.7(you an interacti)25(v)15(e)15( )-15(shell inside the jail. It is also possible to edit the)]TJ
/TT9 1 Tf
-6.128 -1.2 TD
0 Tw
(�)Tj
/TT6 1 Tf
0.5562 0 TD
0.0059 Tw
(les of a running jail, and the modi)Tj
/TT9 1 Tf
13.5384 0 TD
0 Tw
(�)Tj
/TT6 1 Tf
0.5562 0 TD
0.0059 Tw
[(cations will appear immediately inside the jail en)40(vironment. )-250(When)-255.9(deal-)]TJ
-14.6507 -1.2 TD
0.1412 Tw
(ing image-based, the)Tj
/TT4 1 Tf
8.9763 0 TD
(config -i attach)Tj
/TT6 1 Tf
10.2751 0 TD
0.1411 Tw
[(command allo)25(ws one to access the disk of a )]TJ
/TT9 1 Tf
18.99 0 TD
0 Tw
(�)Tj
/TT6 1 Tf
0.5562 0 TD
0.1411 Tw
(le-based jail)Tj
-38.7976 -1.2 TD
0 Tw
(without starting it.)Tj
0 -1.8 TD
0.0448 Tw
[(Ra)15(w)-294.8(sock)10(ets are disallo)25(wed by def)10(ault for all jails. This is not a ezjail restriction, b)20(ut a design def)10(ault of the)]TJ
0 -1.2 TD
0.0401 Tw
(jail command. This means the)Tj
/TT11 1 Tf
12.4754 0 TD
0 Tw
(ping)Tj
/TT6 1 Tf
2.4004 0 TD
0.0401 Tw
(\(8\) command will get �Operation not permitted.� error when used from)Tj
-14.8758 -1.2 TD
0.0525 Tw
(inside of a jail. There are)Tj
/TT11 1 Tf
10.5601 0 TD
0 Tw
(sysctl)Tj
/TT6 1 Tf
3.6006 0 TD
0.0525 Tw
[(\(3\) knobs for allo)25(wing a jail to access ra)15(w)-302.6(sock)10(ets, see the)]TJ
/TT11 1 Tf
24.0452 0 TD
0 Tw
(jail)Tj
/TT6 1 Tf
2.4004 0 TD
0.0526 Tw
(\(8\) man)Tj
-40.6063 -1.2 TD
0 Tw
(page for details.)Tj
0 -1.8 TD
0.0365 Tw
[(Once your jail has netw)10(ork access, then all your normal application install functions are a)20(v)25(ailabe, right from)]TJ
0 -1.2 TD
0.0372 Tw
[(the jails console. In particular)40(,)-287.2(i)0(f)-287.2(the ports collection w)10(as installed, it can be used as if from the host system.)]TJ
T*
0 Tw
[(A)-380.7(modi)]TJ
/TT9 1 Tf
3.1585 0 TD
(�)Tj
/TT6 1 Tf
0.5562 0 TD
(ed)Tj
/TT11 1 Tf
1.3245 0 TD
(make.conf)Tj
/TT9 1 Tf
5.7816 0 TD
(�)Tj
/TT6 1 Tf
0.5562 0 TD
0.1307 Tw
[(le is installed by the e)15(xample )]TJ
/TT9 1 Tf
12.6549 0 TD
0 Tw
(�)Tj
/TT6 1 Tf
0.5562 0 TD
0.1307 Tw
[(a)20(v)20(our)40(,)-380.7(that enable the ports collection to w)10(ork)]TJ
-24.5881 -1.2 TD
0 Tw
[(e)25(v)25( )240(en)-250(with a read-only)]TJ
/TT11 1 Tf
8.9009 0 TD
(/usr/ports)Tj
/TT6 1 Tf
6.001 0 TD
(.)Tj
-14.9019 -1.8 TD
0.7411 Tw
(It is possible to change the IP address of a jail by editing its con)Tj
/TT9 1 Tf
35.8705 0 TD
0 Tw
(�)Tj
/TT6 1 Tf
0.5562 0 TD
(guration )Tj
/TT9 1 Tf
4.3236 0 TD
(�)Tj
/TT6 1 Tf
0.5561 0 TD
0.7411 Tw
(le in)Tj
/TT11 1 Tf
-41.3064 -1.2 TD
0 Tw
(EZJAIL_PREFIX/etc/ezjail)Tj
/TT6 1 Tf
14.6523 0 TD
(and restarting the jail.)Tj
-14.6523 -1.8 TD
0.0321 Tw
[(The jails use the same netw)10(ork stack as the host system. In particular)40(,)-282.1(that means that if a )]TJ
/TT9 1 Tf
36.4619 0 TD
0 Tw
(�)Tj
/TT6 1 Tf
0.5562 0 TD
0.0321 Tw
[(re)25(w)10(all is needed,)]TJ
-37.018 -1.2 TD
0 Tw
(it must be con)Tj
/TT9 1 Tf
5.6382 0 TD
(�)Tj
/TT6 1 Tf
0.5562 0 TD
(gured in the host system.)Tj
-6.1943 -1.8 TD
0.1787 Tw
(The ezjail system \(and the jails it controls\) depends on the �)Tj
/TT11 1 Tf
25.931 0 TD
0 Tw
($ezjail_enable)Tj
/TT6 1 Tf
8.4014 0 TD
0.1787 Tw
[(�)-428.7(v)25(ariable being set to)]TJ
-34.3324 -1.2 TD
0 Tw
(�)Tj
/TT11 1 Tf
0.4438 0 TD
(YES)Tj
/TT6 1 Tf
1.8003 0 TD
0.397 Tc
[(�i)397(n)]TJ
/TT11 1 Tf
2.0157 0 TD
0 Tc
(rc.conf)Tj
/TT6 1 Tf
4.2007 0 TD
0.147 Tw
[(.)-647(I)0(t)-397(i)0(s)-397(possible to set this v)25(ariable to �)]TJ
/TT11 1 Tf
16.3791 0 TD
0 Tw
(NO)Tj
/TT6 1 Tf
1.2002 0 TD
0.147 Tw
[(�)-397(i)0(f)-397(the administrator w)10(ants to temporarily)]TJ
-26.0398 -1.2 TD
0 Tw
[(ezjail, or if she doesn�)18(t)-250(w)10(ant the jails to be automatically started on boot.)]TJ
0 -1.8 TD
[(The ezjail system may be reset to a pristine state by remo)15(ving all its )]TJ
/TT9 1 Tf
27.3663 0 TD
(�)Tj
/TT6 1 Tf
0.5562 0 TD
(les, that is:)Tj
/TT11 1 Tf
-27.9225 -1.2 TD
(/usr/jails/)Tj
T*
(EZJAIL_PREFIX/etc/ezjail/)Tj
T*
(EZJAIL_PREFIX/etc/ezjail.conf)Tj
T*
(/etc/fstab.)Tj
/TT14 1 Tf
6.6011 0 TD
<009b>Tj
/TT6 1 Tf
1.1 0 TD
[(\(b)20(ut check the list of )]TJ
/TT9 1 Tf
8.4497 0 TD
(�)Tj
/TT6 1 Tf
0.5562 0 TD
(les this matches\))Tj
/TT2 1 Tf
-19.707 -2.4 TD
(EXAMPLES)Tj
/TT6 1 Tf
3 -1.2 TD
0.0276 Tw
[(The e)15(xamples belo)25(w)-277.6(are only that, e)15(xamples. The reader is encouraged to read the)]TJ
/TT11 1 Tf
33.4294 0 TD
0 Tw
(ezjail-admin)Tj
/TT6 1 Tf
7.2012 0 TD
0.0277 Tw
(\(8\) man)Tj
-40.6305 -1.2 TD
0 Tw
(page for de)Tj
/TT9 1 Tf
4.4976 0 TD
(�)Tj
/TT6 1 Tf
0.5562 0 TD
[(niti)25(v)15(e)15( )-15(documentation of all the options.)]TJ
/TT2 1 Tf
-6.8537 -2.4 TD
0.0625 Tw
(Initial Binary Installation)Tj
/TT6 1 Tf
1.8 -1.2 TD
0.2348 Tw
[(The ezjail system may be bootstrapped either from binary packages, or by b)20(uilding from source. The)]TJ
/TT4 1 Tf
T*
0 Tw
(install)Tj
/TT6 1 Tf
4.5725 0 TD
0.1218 Tw
[(command allo)25(w)-371.8(t)0(o)-371.8(bootstrap from binary packages, while the)]TJ
/TT4 1 Tf
25.8423 0 TD
0 Tw
(update)Tj
/TT6 1 Tf
3.9725 0 TD
0.1219 Tw
(deals with installations)Tj
-34.3873 -1.2 TD
0 Tw
(\(and updates\) from source.)Tj
-3 -5.4 TD
17.775 Tw
[(BSD January)-250(15, )17775(2011)-19470(5)]TJ
ET
endstream
endobj
24 0 obj
<<
/ProcSet [/PDF /Text ]
/Font <<
/TT2 4 0 R
/TT3 18 0 R
/TT4 5 0 R
/TT6 6 0 R
/TT8 7 0 R
/TT9 8 0 R
/TT11 9 0 R
/TT13 25 0 R
/TT14 26 0 R
>>
/ExtGState <<
/GS1 10 0 R
>>
>>
endobj
28 0 obj
<<
/Length 4569
>>
stream
BT
/TT6 1 Tf
10 0 0 10 72 744 Tm
0 g
/GS1 gs
0 Tc
-0.0834 Tw
[(EZJ)60(AIL \(7\))-12017.9(User�)55(s)-250(Supplementary )-83.4(Documents)-12017.9(EZJ)60(AIL \(7\))]TJ
/TT4 1 Tf
3 -4.8 TD
0 Tw
(ezjail-admin )Tj
7.4513 0 TD
(install)Tj
/TT6 1 Tf
4.8007 0 TD
[(\(without an)15(y)-250(options\))]TJ
-8.152 -1.2 TD
0.0585 Tw
[(Fetch and install binaries for populating the base jail from the FreeBSD FTP serv)15(er)55(.)-308.6(I)0(f)-308.6(the host is)]TJ
T*
0.1324 Tw
[(not running a -RELEASE v)15(ersion, you will be ask)10(ed for the release to install. Neither the man)]TJ
T*
0.0849 Tw
[(pages nor the source nor the ports tree are installed. Note that the FreeBSD FTP serv)15(er is some-)]TJ
T*
0.0134 Tw
[(times so b)20(usy the do)25(wnload times out. Use the)]TJ
/TT3 1 Tf
19.0738 0 TD
0 Tw
<00e9>Tj
/TT4 1 Tf
0.6001 0 TD
(h)Tj
/TT8 1 Tf
1.2136 0 TD
(host)Tj
/TT6 1 Tf
2.6639 0 TD
0.0135 Tw
[(option to specify a less loaded serv)15(er)40(,)-263.5(o)0(r)]TJ
-23.5514 -1.2 TD
0 Tw
(the �)Tj
/TT11 1 Tf
1.9155 0 TD
($ezjail_ftphost)Tj
/TT6 1 Tf
9.0015 0 TD
[(�)-250(option in)]TJ
/TT11 1 Tf
4.5273 0 TD
(ezjail.conf)Tj
/TT6 1 Tf
6.6011 0 TD
(\(8\).)Tj
/TT4 1 Tf
-26.1454 -1.8 TD
(ezjail-admin )Tj
7.4513 0 TD
(install)Tj
/TT3 1 Tf
4.9673 0 TD
<00e9>Tj
/TT4 1 Tf
0.6001 0 TD
(ms)Tj
/TT6 1 Tf
-8.9186 -1.2 TD
[(Same beha)20(vior as abo)15(v)15(e)0(,)-250(e)15(xcept that man pages and sources are installed in the base jail.)]TJ
/TT4 1 Tf
-4.1 -1.8 TD
(ezjail-admin )Tj
7.4513 0 TD
(install)Tj
/TT3 1 Tf
4.9673 0 TD
<00e9>Tj
/TT4 1 Tf
0.6001 0 TD
(p)Tj
/TT6 1 Tf
-8.9186 -1.2 TD
0.1067 Tw
(Same as the )Tj
/TT9 1 Tf
5.3465 0 TD
0 Tw
(�)Tj
/TT6 1 Tf
0.5562 0 TD
0.1066 Tw
[(rst e)15(xample, b)20(ut use)]TJ
/TT11 1 Tf
8.6395 0 TD
0 Tw
(portsnap)Tj
/TT6 1 Tf
4.8008 0 TD
0.1066 Tw
[(\(8\) to fetch and e)15(xtract a full FreeBSD ports tree)]TJ
-19.3429 -1.2 TD
0 Tw
(from)Tj
/TT11 1 Tf
2.2498 0 TD
(portsnap.FreeBSD.org)Tj
/TT6 1 Tf
12.308 0 TD
0.0561 Tw
(into the base jail. This is necessary if you plan to install ports)Tj
-14.5578 -1.2 TD
0 Tw
(at later time into service jails.)Tj
/TT4 1 Tf
-4.1 -1.8 TD
(ezjail-admin )Tj
7.4513 0 TD
(install)Tj
/TT3 1 Tf
4.9673 0 TD
<00e9>Tj
/TT4 1 Tf
0.6001 0 TD
(P)Tj
/TT6 1 Tf
1.2001 0 TD
(\(note uppercase P\))Tj
-10.1187 -1.2 TD
0.0451 Tw
[(Only fetch the current v)15(ersion of the ports tree, adding it to the base jail.)-545.1(This allo)25(w)-295.1(t)0(o)-295.1(either add)]TJ
T*
0 Tw
(the ports tree after the initial installation or update the ports tree in the base jail.)Tj
-4.1 -1.8 TD
(Install from a disk image)Tj
4.1 -1.2 TD
[(Mount and use a do)25(wnloaded)]TJ
/TT11 1 Tf
12.0004 0 TD
(disc1.iso)Tj
/TT6 1 Tf
5.6509 0 TD
(CDRom image )Tj
/TT9 1 Tf
6.2773 0 TD
(�)Tj
/TT6 1 Tf
0.5562 0 TD
(le.)Tj
/TT11 1 Tf
-21.4848 -1.8 TD
(mdconfig -a -f /usr/8.0-RELEASE-i386-disc1.iso md0)Tj
0 -1.2 TD
(mount -v -t cd9660 /dev/md0 /mnt)Tj
T*
(cd /mnt/8.0-RELEASE)Tj
T*
(ezjail-admin install -h file:// -sm)Tj
/TT6 1 Tf
-3 -1.8 TD
(When the installation )Tj
/TT9 1 Tf
8.8032 0 TD
(�)Tj
/TT6 1 Tf
0.5562 0 TD
[(nishes, use the follo)25(wing to release the)]TJ
/TT11 1 Tf
15.6933 0 TD
(disc1.iso )Tj
5.651 0 TD
(md0)Tj
/TT9 1 Tf
2.0503 0 TD
(�)Tj
/TT6 1 Tf
0.5562 0 TD
(le.)Tj
/TT11 1 Tf
-30.3101 -1.8 TD
(cd /usr)Tj
0 -1.2 TD
(umount /mnt)Tj
T*
(mdconfig -d -u md0)Tj
/TT6 1 Tf
-7.1 -1.8 TD
(Install from a local directory)Tj
4.1 -1.2 TD
0.0174 Tw
[(T)80(o)80( )-80(fetch the RELEASE base )]TJ
/TT9 1 Tf
11.7536 0 TD
0 Tw
(�)Tj
/TT6 1 Tf
0.5562 0 TD
0.0174 Tw
[(les manually)65(,)-267.4(create a)]TJ
/TT11 1 Tf
8.9167 0 TD
0 Tw
(.netrc)Tj
/TT9 1 Tf
3.868 0 TD
(�)Tj
/TT6 1 Tf
0.5562 0 TD
0.0175 Tw
(le in your home directory and pop-)Tj
-25.6506 -1.2 TD
0 Tw
(ulate it with this.)Tj
/TT11 1 Tf
3 -1.8 TD
(machine ftp2.jp.FreeBSD.org)Tj
0 -1.2 TD
(login anonymous)Tj
T*
(password FBSD@home.com)Tj
T*
(macdef init)Tj
T*
(prompt off)Tj
T*
(cd /pub/FreeBSD/releases/i386/8.0-RELEASE)Tj
T*
(epsv4 off)Tj
T*
[($)-600(getdir base kernels manpages src)]TJ
T*
(quit)Tj
T*
(macdef getdir)Tj
T*
[(!)-600(mkdir $i)]TJ
T*
(mreget $i/)Tj
/TT14 1 Tf
6.001 0 TD
<009b>Tj
/TT6 1 Tf
-9.001 -1.8 TD
0.0818 Tw
[(Then issue this command on the command line. If the FTP do)25(wnload times out re-issue the FTP)]TJ
0 -1.2 TD
-0.0001 Tc
0.0001 Tw
[(command again to resume where it left of)24.9(f.)]TJ
/TT11 1 Tf
3 -1.8 TD
0 Tc
0 Tw
(mkdir /usr/8.0-RELEASE)Tj
0 -1.2 TD
(cd /usr/8.0-RELEASE)Tj
T*
(ftp -v ftp2.jp.FreeBSD.org)Tj
T*
(ezjail-admin install -h file:// -sm)Tj
/TT6 1 Tf
-10.1 -4.8 TD
17.775 Tw
[(BSD January)-250(15, )17775(2011)-19470(6)]TJ
ET
endstream
endobj
29 0 obj
<<
/ProcSet [/PDF /Text ]
/Font <<
/TT3 18 0 R
/TT4 5 0 R
/TT6 6 0 R
/TT8 7 0 R
/TT9 8 0 R
/TT11 9 0 R
/TT14 26 0 R
>>
/ExtGState <<
/GS1 10 0 R
>>
>>
endobj
31 0 obj
<<
/Length 8340
>>
stream
BT
/TT6 1 Tf
10 0 0 10 72 744 Tm
0 g
/GS1 gs
0 Tc
-0.0834 Tw
[(EZJ)60(AIL \(7\))-12017.9(User�)55(s)-250(Supplementary )-83.4(Documents)-12017.9(EZJ)60(AIL \(7\))]TJ
7.1 -4.8 TD
0.0468 Tw
[(Use this option to tar)18(get the 8.0-RELEASE )]TJ
/TT9 1 Tf
17.8628 0 TD
0 Tw
(�)Tj
/TT6 1 Tf
0.5562 0 TD
0.0468 Tw
(les you FTP�ed as the source of the running binaries)Tj
-18.419 -1.2 TD
0.0222 Tw
(used to populate the base jail. In addition the man pages and sources will be installed into the base)Tj
T*
0 Tw
(jail.)Tj
/TT2 1 Tf
-5.9 -2.4 TD
0.0625 Tw
[(Fr)18(om Sour)18(ce Installation and Update)]TJ
/TT6 1 Tf
1.8 -1.2 TD
0 Tw
(The)Tj
/TT4 1 Tf
1.8663 0 TD
(update)Tj
/TT6 1 Tf
3.9122 0 TD
0.0617 Tw
(is used to both install or update from source the base jail, and for updating the base jail from)Tj
-5.7785 -1.2 TD
0 Tw
(binary packages.)Tj
/TT4 1 Tf
0 -1.8 TD
(ezjail-admin )Tj
7.4513 0 TD
(update)Tj
/TT3 1 Tf
4.3672 0 TD
<00e9>Tj
/TT4 1 Tf
0.6001 0 TD
(b)Tj
/TT6 1 Tf
-8.3186 -1.2 TD
0.1178 Tw
[(Build and install a w)10(orld from source. The sources are tak)10(en from)]TJ
/TT11 1 Tf
27.9692 0 TD
0 Tw
(/usr/src)Tj
/TT6 1 Tf
5.1686 0 TD
0.1178 Tw
[(\(b)20(ut see the)]TJ
/TT3 1 Tf
5.3594 0 TD
0 Tw
<00e9>Tj
/TT4 1 Tf
0.6001 0 TD
(s)Tj
/TT9 1 Tf
-39.0973 -1.2 TD
(�)Tj
/TT6 1 Tf
0.5562 0 TD
0.062 Tw
(ag\). This can be used both for creating the initial base jail, and for updating it after the host has)Tj
-0.5562 -1.2 TD
0 Tw
(been upgraded.)Tj
/TT4 1 Tf
-4.1 -1.8 TD
(ezjail-admin )Tj
7.4513 0 TD
(update)Tj
/TT3 1 Tf
4.3672 0 TD
<00e9>Tj
/TT4 1 Tf
0.6001 0 TD
(u)Tj
/TT6 1 Tf
-8.3186 -1.2 TD
0.0418 Tw
[(Update the base jail to the ne)15(xt release using)]TJ
/TT11 1 Tf
18.4389 0 TD
0 Tw
(freebsd-update)Tj
/TT6 1 Tf
8.4014 0 TD
0.0418 Tw
(\(8\) \(i.e. using binary packages\).)Tj
-26.8403 -1.2 TD
0 Tw
[(This may be used only to update an e)15(xisting installation.)]TJ
/TT4 1 Tf
-4.1 -1.8 TD
(ezjail-admin )Tj
7.4513 0 TD
(update)Tj
/TT3 1 Tf
4.3672 0 TD
<00e9>Tj
/TT4 1 Tf
0.6001 0 TD
(U )Tj
/TT3 1 Tf
1.3668 0 TD
<00e9>Tj
/TT4 1 Tf
0.6001 0 TD
(s)Tj
/TT8 1 Tf
1.2001 0 TD
(8.0-RELEASE)Tj
/TT6 1 Tf
-11.4855 -1.2 TD
0.0237 Tw
[(Upgrade the base jail to the host system�)55(s)-273.7(release using)]TJ
/TT11 1 Tf
22.5096 0 TD
0 Tw
(freebsd-update)Tj
/TT6 1 Tf
8.4014 0 TD
0.0237 Tw
(\(8\). This may be used)Tj
-30.911 -1.2 TD
0.1517 Tw
[(only to upgrade an e)15(xisting installation. T)70(ell freebsd-update which OS v)15(ersion to e)15(xpect in the)]TJ
T*
0 Tw
(basejail via the)Tj
/TT3 1 Tf
6.4142 0 TD
<00e9>Tj
/TT4 1 Tf
0.6001 0 TD
(s)Tj
/TT6 1 Tf
1.2001 0 TD
(option.)Tj
-8.2144 -1.8 TD
0.0405 Tw
(Note: Check)Tj
/TT11 1 Tf
5.3574 0 TD
0 Tw
(uname)Tj
/TT6 1 Tf
3.0005 0 TD
0.0405 Tw
(\(1\) and especially the)Tj
/TT11 1 Tf
8.9916 0 TD
0 Tw
(UNAME_r)Tj
/TT6 1 Tf
4.4912 0 TD
0.0405 Tw
[(en)40(vironment v)25(ariable to upgrade to dif)25(ferent)]TJ
-21.8406 -1.2 TD
0 Tw
[(v)15(ersions.)]TJ
/TT2 1 Tf
-5.9 -2.4 TD
0.0625 Tw
[(J)15(ail Cr)18(eation Examples)]TJ
/TT4 1 Tf
1.8 -1.2 TD
0 Tw
(ezjail-admin )Tj
7.4513 0 TD
(create)Tj
/TT8 1 Tf
4.2006 0 TD
(www.example.com 10.0.10.1)Tj
/TT6 1 Tf
-7.5519 -1.2 TD
0.1052 Tw
[(Create a ne)25(w)-355.2(jail. The jail )]TJ
/TT9 1 Tf
11.1848 0 TD
0 Tw
(�)Tj
/TT6 1 Tf
0.5562 0 TD
0.1052 Tw
(les will reside in directory)Tj
/TT11 1 Tf
11.2173 0 TD
0 Tw
(www_example_com)Tj
/TT6 1 Tf
9.3566 0 TD
(in)Tj
/TT11 1 Tf
1.1329 0 TD
(/usr/jails)Tj
/TT6 1 Tf
6.001 0 TD
(,)Tj
-39.4487 -1.2 TD
0.0244 Tw
[(unless the v)25(ariable �)]TJ
/TT11 1 Tf
8.1839 0 TD
0 Tw
($ezjail_jaildir)Tj
/TT6 1 Tf
9.0015 0 TD
0.0244 Tw
[(�)-274.4(has been set to some other v)25(alue. The jail will only be)]TJ
-17.1854 -1.2 TD
0.0695 Tw
[(allo)25(wed to use the gi)25(v)15(e)0(n)-319.6(I)0(P)-319.6(address. A w)10(arning will be displayed if this IP address is not already)]TJ
T*
0 Tw
(con)Tj
/TT9 1 Tf
1.4438 0 TD
(�)Tj
/TT6 1 Tf
0.5562 0 TD
0.0655 Tw
[(gured in the host, or if some netw)10(ork daemon is already listening on this address. The name)]TJ
-2 -1.2 TD
0.2352 Tw
(of the jail which will appear in the)Tj
/TT4 1 Tf
15.8772 0 TD
0 Tw
(list)Tj
/TT6 1 Tf
2.8856 0 TD
0.2351 Tw
[(command or which will need to be gi)25(v)15(e)0(n)-485.1(t)0(o)-485.1(the)]TJ
/TT4 1 Tf
-18.7628 -1.2 TD
0 Tw
(console)Tj
/TT6 1 Tf
4.4507 0 TD
(command is)Tj
/TT8 1 Tf
5.1104 0 TD
(www.example.com)Tj
/TT6 1 Tf
9.0015 0 TD
(.)Tj
/TT4 1 Tf
-22.6625 -1.8 TD
1.0528 Tw
(ezjail-admin create)Tj
/TT3 1 Tf
14.6241 0 TD
0 Tw
<00e9>Tj
/TT4 1 Tf
0.6001 0 TD
(f)Tj
/TT8 1 Tf
2.6029 0 TD
(example)Tj
/TT3 1 Tf
6.3701 0 TD
<00e9>Tj
/TT4 1 Tf
0.6001 0 TD
(r)Tj
/TT8 1 Tf
2.6029 0 TD
1.4028 Tw
(webserver www.example.com)Tj
-23.3001 -1.2 TD
0 Tw
(10.0.10.2,2001:db8:1:9243::80)Tj
/TT6 1 Tf
T*
0.0101 Tw
[(Create a ne)25(w)-260.1(jail, placing it in directory)]TJ
/TT11 1 Tf
16.1886 0 TD
0 Tw
(webserver)Tj
/TT6 1 Tf
5.661 0 TD
0.0101 Tw
[(instead of deri)25(ving the directory name of the)]TJ
-21.8496 -1.2 TD
0.0138 Tw
[(jail from its host name.)-513.9(The jail will be created with the )]TJ
/TT9 1 Tf
22.8819 0 TD
0 Tw
(�)Tj
/TT6 1 Tf
0.5561 0 TD
[(a)20(v)20(our)]TJ
/TT8 1 Tf
2.5007 0 TD
(example)Tj
/TT6 1 Tf
4.2007 0 TD
0.0138 Tw
[(.)-513.8(This jail will be gi)25(v)15(e)0(n)]TJ
-30.1394 -1.2 TD
0 Tw
[(tw)10(o)-250(I)0(P)-250(addressses; this is possible only since FreeBSD 7.2.)]TJ
/TT4 1 Tf
-4.1 -1.8 TD
(ezjail-admin )Tj
7.4513 0 TD
(create)Tj
/TT3 1 Tf
4.3672 0 TD
<00e9>Tj
/TT4 1 Tf
0.6001 0 TD
(i )Tj
/TT3 1 Tf
1.3668 0 TD
<00e9>Tj
/TT4 1 Tf
0.6001 0 TD
(s)Tj
/TT8 1 Tf
1.2001 0 TD
(600M sandbox2 10.0.10.4)Tj
/TT6 1 Tf
-11.4855 -1.2 TD
0.869 Tw
[(This creates a ne)25(w)]TJ
/TT9 1 Tf
11.1142 0 TD
0 Tw
(�)Tj
/TT6 1 Tf
0.5562 0 TD
0.8691 Tw
[(le-based jail ha)20(ving a )]TJ
/TT9 1 Tf
12.2308 0 TD
0 Tw
(�)Tj
/TT6 1 Tf
0.5562 0 TD
-0.0002 Tc
0.8693 Tw
[(le size of 600 me)14.8(gabytes in)]TJ
/TT11 1 Tf
-24.4573 -1.2 TD
0 Tc
0 Tw
(/usr/jails/sandbox2.img)Tj
/TT6 1 Tf
13.8022 0 TD
0.0613 Tw
[(.)-561.3(A)0(n)-311.3(empty directory)65(,)]TJ
/TT11 1 Tf
9.2613 0 TD
0 Tw
(/usr/jails/sandbox2)Tj
/TT6 1 Tf
11.4019 0 TD
0.0613 Tw
[(,)-311.3(will be cre-)]TJ
-34.4653 -1.2 TD
0 Tw
(ated, and used as a mount point when starting the jail.)Tj
/TT4 1 Tf
-4.1 -1.8 TD
(ezjail-admin )Tj
7.4513 0 TD
(create)Tj
/TT3 1 Tf
4.3672 0 TD
<00e9>Tj
/TT4 1 Tf
0.6001 0 TD
(c bde)Tj
/TT3 1 Tf
3.7671 0 TD
<00e9>Tj
/TT4 1 Tf
0.6001 0 TD
(s)Tj
/TT8 1 Tf
1.2001 0 TD
(600M sandbox3 10.0.10.5)Tj
/TT6 1 Tf
-13.8858 -1.2 TD
0.2102 Tw
[(This creates a ne)25(w)]TJ
/TT9 1 Tf
8.4789 0 TD
0 Tw
(�)Tj
/TT6 1 Tf
0.5562 0 TD
0.2102 Tw
(le based image jail, with)Tj
/TT11 1 Tf
11.0481 0 TD
0 Tw
(gbde)Tj
/TT6 1 Tf
2.4004 0 TD
0.2102 Tw
(\(4\) encryption. During the gbde creation)Tj
-22.4835 -1.2 TD
0.0567 Tw
[(process you are ask)10(ed to enter a passphrase that is used as the prime seed v)25(alue of the encryption)]TJ
T*
0.0585 Tw
[(process. )-250(Remember)-308.5(this passphrase, you will be ask)10(ed for the passphrase e)25(v)15(ery time you w)10(ant to)]TJ
T*
0.1061 Tw
[(start this jail. As the)15(y)-356.2(require administrator interaction, jails back)10(ed by an encrypted )]TJ
/TT9 1 Tf
35.2054 0 TD
0 Tw
(�)Tj
/TT6 1 Tf
0.5562 0 TD
0.1061 Tw
(le are not)Tj
-35.7615 -1.2 TD
0 Tw
(automatically started when the system boots.)Tj
/TT4 1 Tf
-4.1 -1.8 TD
(ezjail-admin )Tj
7.4513 0 TD
(create)Tj
/TT3 1 Tf
4.3672 0 TD
<00e9>Tj
/TT4 1 Tf
0.6001 0 TD
(c)Tj
/TT8 1 Tf
1.2001 0 TD
(zfs)Tj
/TT3 1 Tf
2.5669 0 TD
<00e9>Tj
/TT4 1 Tf
0.6001 0 TD
(s)Tj
/TT8 1 Tf
1.2001 0 TD
(1G sandbox4 em1\\|10.0.10.6)Tj
/TT6 1 Tf
-13.8857 -1.2 TD
0.039 Tw
[(This creates a ne)25(w)-289(zfs )]TJ
/TT9 1 Tf
9.2491 0 TD
0 Tw
(�)Tj
/TT6 1 Tf
0.5562 0 TD
-0.0001 Tc
0.0391 Tw
[(lesystem based jail with a def)9.9(ault quota of 1 gigabyte using lzjb compres-)]TJ
-9.8053 -1.2 TD
0 Tc
0.0134 Tw
(sion. It uses the parent ZFS )Tj
/TT9 1 Tf
11.2738 0 TD
0 Tw
(�)Tj
/TT6 1 Tf
0.5562 0 TD
0.0134 Tw
(lesystem con)Tj
/TT9 1 Tf
5.2068 0 TD
0 Tw
(�)Tj
/TT6 1 Tf
0.5562 0 TD
0.0134 Tw
(gured in the �)Tj
/TT11 1 Tf
5.5104 0 TD
0 Tw
($ezjail_jailzfs)Tj
/TT6 1 Tf
9.0015 0 TD
0.0133 Tw
[(�)-263.4(v)25(ariable to create)]TJ
-32.1047 -1.2 TD
0 Tw
(the )Tj
/TT9 1 Tf
1.4844 0 TD
(�)Tj
/TT6 1 Tf
0.5561 0 TD
0.0127 Tw
[(lesystem in. The jail command will add the ip address 10.0.10.6 as an alias on the de)25(vice em1)]TJ
-9.1405 -4.8 TD
17.775 Tw
[(BSD January)-250(15, )17775(2011)-19470(7)]TJ
ET
endstream
endobj
32 0 obj
<<
/ProcSet [/PDF /Text ]
/Font <<
/TT2 4 0 R
/TT3 18 0 R
/TT4 5 0 R
/TT6 6 0 R
/TT8 7 0 R
/TT9 8 0 R
/TT11 9 0 R
>>
/ExtGState <<
/GS1 10 0 R
>>
>>
endobj
34 0 obj
<<
/Length 1838
>>
stream
BT
/TT6 1 Tf
10 0 0 10 72 744 Tm
0 g
/GS1 gs
0 Tc
-0.0834 Tw
[(EZJ)60(AIL \(7\))-12017.9(User�)55(s)-250(Supplementary )-83.4(Documents)-12017.9(EZJ)60(AIL \(7\))]TJ
7.1 -4.8 TD
0 Tw
(before starting the jail.)Tj
/TT2 1 Tf
-7.1 -2.4 TD
(FILES)Tj
/TT11 1 Tf
3 -1.2 TD
(EZJAIL_PREFIX/bin/ezjail-admin)Tj
T*
(EZJAIL_PREFIX/etc/rc.d/ezjail)Tj
T*
(EZJAIL_PREFIX/etc/ezjail.conf)Tj
T*
(EZJAIL_PREFIX/share/examples/ezjail/)Tj
T*
(EZJAIL_PREFIX/etc/ezjail/)Tj
/TT14 1 Tf
15.0024 0 TD
<009b>Tj
/TT11 1 Tf
-15.0024 -1.2 TD
(/usr/etc/fstab.)Tj
/TT14 1 Tf
9.0015 0 TD
<009b>Tj
/TT2 1 Tf
-12.0015 -2.4 TD
0.1666 Tw
(SEE ALSO)Tj
/TT11 1 Tf
3 -1.2 TD
0 Tw
(ezjail-admin)Tj
/TT6 1 Tf
7.2012 0 TD
(\(8\),)Tj
/TT11 1 Tf
1.666 0 TD
(ezjail.conf)Tj
/TT6 1 Tf
6.6011 0 TD
(\(5\),)Tj
/TT11 1 Tf
1.666 0 TD
(jail)Tj
/TT6 1 Tf
2.4004 0 TD
(\(8\),)Tj
/TT11 1 Tf
1.666 0 TD
(nullfs)Tj
/TT6 1 Tf
3.6006 0 TD
(\(4\),)Tj
/TT11 1 Tf
1.666 0 TD
(zfs)Tj
/TT6 1 Tf
1.8003 0 TD
(\(8\).)Tj
-28.2676 -1.8 TD
(Interesting additional tools include: �)Tj
/TT11 1 Tf
14.8853 0 TD
(ports-mgmt/jailaudit)Tj
/TT6 1 Tf
12.0019 0 TD
(�.)Tj
/TT2 1 Tf
-29.8872 -2.4 TD
[(A)50(UTHOR)]TJ
/TT6 1 Tf
3 -1.2 TD
(Dirk Engling)Tj
/TT14 1 Tf
5.4995 0 TD
<009d>Tj
/TT6 1 Tf
0.3291 0 TD
[(erdgeist@erdgeist.or)18(g)]TJ
/TT14 1 Tf
8.817 0 TD
<009c>Tj
/TT6 1 Tf
0.3291 0 TD
(.)Tj
-14.9747 -1.8 TD
0.0755 Tw
(The man page is based on a draft by JoeB)Tj
/TT14 1 Tf
17.6944 0 TD
0 Tw
<009d>Tj
/TT6 1 Tf
0.3291 0 TD
[(joeb1@a1po)25(weruser)55(.com)]TJ
/TT14 1 Tf
10.1431 0 TD
<009c>Tj
/TT6 1 Tf
0.6545 0 TD
0.0754 Tw
[(and w)10(as re)25(written by Frederic Perrin)]TJ
/TT14 1 Tf
-28.8211 -1.2 TD
0 Tw
<009d>Tj
/TT6 1 Tf
0.3291 0 TD
(frederic.perrin@resel.fr)Tj
/TT14 1 Tf
9.4707 0 TD
<009c>Tj
/TT6 1 Tf
0.3291 0 TD
(.)Tj
-13.1289 -43.8 TD
17.775 Tw
[(BSD January)-250(15, )17775(2011)-19470(8)]TJ
ET
endstream
endobj
35 0 obj
<<
/ProcSet [/PDF /Text ]
/Font <<
/TT2 4 0 R
/TT6 6 0 R
/TT11 9 0 R
/TT14 26 0 R
>>
/ExtGState <<
/GS1 10 0 R
>>
>>
endobj
10 0 obj
<<
/Type /ExtGState
/SA false
/SM 0.02
/OP false
/op false
/OPM 1
/BG2 /Default
/UCR2 /Default
/HT /Default
/TR2 /Default
>>
endobj
36 0 obj
<<
/Type /FontDescriptor
/Ascent 753
/CapHeight 562
/Descent -246
/Flags 262151
/FontBBox [-113 -250 749 801]
/FontName /JFOEBE+Courier-Bold
/ItalicAngle 0
/StemV 133
/XHeight 439
/StemH 84
/FontFile2 37 0 R
>>
endobj
37 0 obj
<<
/Filter /FlateDecode
/Length 24055
/Length1 172192
>>
stream
H��Ml�g��JycҀ�I�8vb�q��K^��q��vb'vl�NY׮�v���:i��!@�А�4HL�oB;p����a�v���$8p@!|��W�������>��� >돫�������� xl*�y�Ż�]
�_A���ո�����O�~��������ϼx�z�++A�ͪ�goߺ��J��7}_�����{c���~��������ڹ_W~�w��ܹu������_��߫w��'?wU�kY߱;��?h=����~|�ї�����e^�c�]��w��y��Ç�	���F|��{.�8�U����{Ͽ����?�k���౿���Ž[|��/�+?�c��[�?��Ƃ+����q���oW���7?��G�G�/�����I3�����yM�~h�y�w�}�W�� ���ug���z�|��7�5���5�7���{�$���:Fc��~c�`�l��v��xʸ�q]��s�i�����=��� ��wC�7�|c׌�]�no�e~f�?�G��A0�������������������������������������R0�?�?�?�?�?�?�?�?�?�?�?����C�!��?����C�!�i�ia����������������������a�0�?������a�0�?���G�#���?���G�#���������������Y�Y�Y�Y�Y�Y�Y�Y�Y�Y�Y�Y�Y�(�?���G���Q�(�?�����xb<1�O�'����xb<1������������Ϝ�9�8O�'����y�<q�8O�'�������������������������̻�y��p�	��p�	��p�	��p�	��p�	��p�	��������������?ɟ�O�'���I�$�?�LRNRNRNR΢�E9�r�,�Y��(gQ΢3�r�,�Yt&œ�I�t��[Jo)�����[Jo)��t�r.m�����K�/m�����K�/m���I������Ҳ2���/c���2���/c���2���/�LFΒ�%9Kr��,�Y��$gIΒ�%9Kr���d���w����A�'˓���dy�<Y��w��r�A�;�y9伃�w��r�A�;�y9� �伃���z��-�佃�w����A�;Ȼ��3yg�r
r
v+ح�S�)蠠��s�
��+�ׂ�
z[�۲ޖ����eg��Y�۲ޖ����e�-������V��"gEΊ�V�������mEo+z[�۪�V��j�U���?����mUo�z[�۪�V��ʳƳ��5���mMokz[�ۚ������5��`MoE��V�[QoE��V�/����E�"����������������������������_�/��K�%����_�/��K�e�2���_�/����e�2���_����������������������������W�+��
���_��W�+��-�-�-�-�-�-�-�-�-�-�-�-�-�*���_��W���U�*���_��o�o�o�o�o�o�o�o�o�o�o�o�o���k�5����_����k�5���������������*�.�.�.�.�.�.�.�.�.�.�.�.��������������>�>�>���}�}�}�}�}�}�}�}�}�:���_������u�:���_��7��
������o�7��
������o�7���4�4�4�4�4�4�4�4��9�s �@΁3r��9�s �@΁�C9�r��9�s��C=��Pχz>�����sK�-=����sK�-=����sK�-=����s[�m=����s[�m=����s[�m=����s[�Gz>�󑞏�|��#�#�#�#�#�#�#�#�c�c�c�c�c�c�c�c�c�c�c�c~ܠ�����w�E�������w�;���������w���]�.�������w�O�O�O�O�O�O�O�O�O�O�O�O�O�{�=����������{�=������������}�>������������
���?�����
���?�?�?�?�?�?�?�?�?�?�?�?�?�?�����C�!���?�����C�!���?���G�#����?���������������������������������������������GwyvIVU
�_(�Yx����<�+�ԕs
�����2�bV@�$%)DE%�^k�^m׶?���>w����s�_�	�%������?���1�c������?���q�������?��8�q�������?���	��'�O���?���	��'�O��?��$�I���'�O��?�
��)�S���O��?�
��)�S���O��?��4�i�����O��?��4��3�g�����?����3�g�����?��,�Y���g����?��,�Y��������?���9�s������?�?�y������������?��<�y���/�_���
�����/���O
�>E|���)�Sħ�O�">E|���)�Sħ�O	�>%|J���)�S§�O�<%|J����2>e|����)�SƧ�O�2>e|�����S���O�
>�P�
>|*�T��
�Ya?��g�����U���~V��*�Ye?��g����_ſ�
��5�k����_ÿ�
��5�k���_��e���_��e���_��e����_ǿ��:�u������_ǿ��:�
��7�o�������
��7�o�������&y��i��I�&y��i��I�&y��i��E�1-���"O�<-���"O�<-���"O�<m�ܦ�m�ܦ�m�ܦ�m�ܦ�m�ܦ�m�ܦ��ܡ��ܡ��ܡ��ܡ��ܡ�b:�鰶.u�R�.q]ru��%W�\]��ԻKl�|]��ūKͻ�S��=r����íG=z�U��=���푷G���#������ǯO���Ol����K����K����٧.}�ۧ.�2 n@�
k��
kP�
u��
u�8�.�8d�C�8$ϐ<C��!k�=
��=
���|OC܆�
�7"׈}��#�F�tD�k��#bG���9b�#�|��8��c�|�c�ُ1k;&v�ߘoe̷2&cj3�6�NX��	��2�.�c�z'�t���L؏	�b'�yJ}�|kS�:�gJ�)y��O��?%~J���)�S��O��q��g?,��0n��،���87'XX'l���(l���;H���v��Ä.�aG
;J��Žv���/�a'
;I���Nv��ӄ�.�ag
;K�Fag;Gع��v���](l����],�a�
�L��®�Yؕ®v��k�]+�:a��"�aK�b���’�R���2²�r���
Š�J���*ª�j–�Յ5�5�����u�u�����
�
�����M�M��(��>(�g�~.��~-�Na�	{X�c����?{B�_�=%�aO{V�s�^�����U�߄�C�߅�,�_��)�5a�
{]��lq���/g�W$���>!�3����o	{Dؗ�}n�����Ya�v���l���W��f󾺊�5��_�g���O��w��}s;z��*v�V�E���}oU��Y���~R�+�~,�c¾8ς��Z˦��;$�¾/ߕy|T���Va�ʚ�G
�GZ�U�n����������~�gk��*�e+��q{[<�\�^yQ�rQ���^x=�X{_~{���߃E{s�T���'�~+�W�nv��;��N����Y�����υ��=(�!a��!oֈ���%�,��&y#���ȼ?
���N��'yO��-H�X��ia���0�]xS؟��5���"�� �¾&���~(��~$g��A(lar��R��N
�)�=��+lga����¶����m/�]��-la;
�o-�;3�;3�]���&�h���}��O��߁����0���k��� 8P�a�	;X�!�v��#�%�Xa�	;^���dމk�'�K�H���f|���s����mv�0�Â�׌/X3�Pb6	�Hإ�.v��+�mv��k�]+�5��׌�H�
–�ńŅ%�e���ɛ0(
+	+��
�	[V��������66666v��Gr�D䞉�=�{f��,*=CTz���Q���3D���J��>"*=CTz���MQ���r/EO���I��yv�����t�[��A���5Ϯv�<[�^��S^�ω��V��sv������6�s��x~�>�9Z���4�����-�lQ��E�V��^'��:�Mv����*�6a��C����;��%�na��W�}����/�
a
{H����<"�Qa�	{\�ž�����=#�Ya�	{^��^���W��*�5a�{C؛�����m�����[%"wBD�U"rD�<��y�� "o��QŽv�0y�D��yq�m#gg(�A(�A(wC(�A(�A��0�B�B���Iʽʽʽ� lGa�C�rG���U�n�v���=�IJ�}J�+l?a����o�(l�0��B����m&�F(�F(�F(�F(�F(�F(�F(�F(�F(�F(�F(�F(�F(�Fx�0�iB�kC�kC��S��*Lz�Pz��ag
;K�Fag;Gع��&�}(={x�0�Ë�],�a�
�L��®�Yؕ®v��k�]+L�F����-�n�$,&,.,!,),%�?��yxT���s�3R�&(X�r9wh����HU�R��]	$ �Q���DD�FDEDD�
!
M�h[�����b��6�����bo����9�������y?�f�f����^����`c�nV
6l<XX9���`7�M��l2��J��`��U��
v�4��`3�f����l6�`s���
�l.�<��`���
����`��-
�l)��`��