From 23f0e1561767dd8a396188e317bae5920d171ea8 Mon Sep 17 00:00:00 2001 From: erdgeist Date: Sun, 16 Aug 2015 16:38:25 +0200 Subject: Initial import of my nikola website --- files/arts/software/ezjail/ezjail.7.pdf | 4038 +++++++++++++++++++++++++++++++ 1 file changed, 4038 insertions(+) create mode 100644 files/arts/software/ezjail/ezjail.7.pdf (limited to 'files/arts/software/ezjail/ezjail.7.pdf') diff --git a/files/arts/software/ezjail/ezjail.7.pdf b/files/arts/software/ezjail/ezjail.7.pdf new file mode 100644 index 0000000..7132957 --- /dev/null +++ b/files/arts/software/ezjail/ezjail.7.pdf @@ -0,0 +1,4038 @@ +%PDF-1.3 +% +2 0 obj +<< +/Length 7230 +>> +stream +BT +/TT2 1 Tf +10 0 0 10 72 756 Tm +0 g +/GS1 gs +0 Tc +0 Tw +[(N)20(AME)]TJ +/TT4 1 Tf +3 -1.2 TD +(ezjail)Tj +/TT6 1 Tf +3.8506 0 TD +[()-250(Jail administration frame)25(w)10(ork.)]TJ +/TT2 1 Tf +-6.8506 -2.4 TD +(SYNOPSIS)Tj +/TT4 1 Tf +3 -1.2 TD +(ezjail-admin)Tj +/TT8 1 Tf +7.8012 0 TD +(command arguments...)Tj +/TT2 1 Tf +-10.8012 -2.4 TD +[(O)50(VER)55(VIEW)]TJ +/TT6 1 Tf +3 -1.2 TD +0.0256 Tw +[(The ezjail commands pro)15(vide a simple w)10(ay to create multiple jails using FreeBSD)55(s)-275.6(jail system. It simpli)]TJ +/TT9 1 Tf +42.4046 0 TD +0 Tw +()Tj +/TT6 1 Tf +0.5562 0 TD +(es)Tj +-42.9608 -1.2 TD +[(jail administration ef)25(fort and minimizes jail system resource usage.)]TJ +0 -1.8 TD +0.0663 Tw +[(If you are not f)10(amiliar with the FreeBSD jail concept, please refer to)]TJ +/TT11 1 Tf +28.4531 0 TD +0 Tw +(jail)Tj +/TT6 1 Tf +2.4004 0 TD +0.0664 Tw +[(\(8\) before continuing. F)15(or addi-)]TJ +-30.8535 -1.2 TD +0 Tw +(tional design information, see the ezjail site at)Tj +/TT11 1 Tf +18.6333 0 TD +(http://erdgeist.org/arts/software/ezjail)Tj +/TT6 1 Tf +24.0039 0 TD +(.)Tj +/TT2 1 Tf +-45.6372 -2.4 TD +(DESCRIPTION)Tj +/TT6 1 Tf +3 -1.2 TD +0.2093 Tw +[(The ezjail system enables the system administrator to create multiple OS-le)25(v)15(e)0(l)-459.3(virtualization containers)]TJ +T* +0.0228 Tw +[(called jails. Services lik)10(e)-272.8(web serv)15(ers, mail serv)15(ers, FTP serv)15(ers, are typically under frequent attack from the)]TJ +T* +0.0564 Tw +[(public Internet and are e)15(xposed to possible compromise. The typical usage of jails is to run a single service)]TJ +T* +0.0732 Tw +(in each jail and if that service becomes compromised the rest of the jails and the host system are protected)Tj +T* +0 Tw +(from also being compromised.)Tj +0 -1.8 TD +0.0633 Tw +[(The major shortcoming of jails is that each jail has its o)25(wn cop)10(y)-313.3(o)0(f)-313.3(the w)10(orld. This eats disk space, inodes,)]TJ +0 -1.2 TD +0.1444 Tw +[(and more importantly)65(,)-394.4(pre)25(v)15(ents the sharing of binaries images between jails, thus increasing the memory)]TJ +T* +0.0065 Tw +(pressure on the host system. In addition, this causes a major administration headache when comes the time to)Tj +T* +0 Tw +[(update the host system, as each jail needs to be updated independently)65(.)]TJ +0 -1.8 TD +0.1293 Tw +(Ezjail addresses these problems by creating a single basejail \(a read-only)Tj +/TT11 1 Tf +30.8281 0 TD +0 Tw +(nullfs)Tj +/TT6 1 Tf +3.6006 0 TD +0.1293 Tw +(\(4\) mounted directory\))Tj +-34.4286 -1.2 TD +0.0059 Tw +(populated with the same binaries as the host system which is then shared across all the other service jails cre-)Tj +T* +0 Tw +(ated by ezjail. Is is possible to update the base jail \(and thus all the jails\) in a single ezjail command.)Tj +0 -1.8 TD +0.1181 Tw +[(T)80(ypical usage of jails include separation of services, creating test en)40(vironments, consolidation of dif)25(ferent)]TJ +0 -1.2 TD +-0.0001 Tc +0.0001 Tw +(services on a single physical host, and more.)Tj +/TT2 1 Tf +-3 -2.4 TD +0 Tc +0.1666 Tw +[(EZJ)30(AIL SYSTEM)]TJ +/TT6 1 Tf +3 -1.2 TD +0.0079 Tw +[(The administrati)25(v)15(e)15( )-15(interf)10(ace to the ezjail system is the)]TJ +/TT11 1 Tf +21.8746 0 TD +0 Tw +(ezjail-admin)Tj +/TT6 1 Tf +7.2012 0 TD +0.0078 Tw +(\(8\) command. It is used to install the)Tj +-29.0758 -1.2 TD +0.0455 Tw +[(ezjail en)40(vironment, create ne)25(w)-295.6(jails, archi)25(v)15(e)0(,)-295.6(restore, delete and update jails, open a jail console, and list the)]TJ +T* +0 Tw +[(status of all the jails. See belo)25(w)-250(for e)15(xample usage, and refer to its man page for complete usage details.)]TJ +0 -1.8 TD +0.0387 Tw +(Ezjail reads its con)Tj +/TT9 1 Tf +7.6967 0 TD +0 Tw +()Tj +/TT6 1 Tf +0.5562 0 TD +0.0387 Tw +(guration from its)Tj +/TT11 1 Tf +7.0873 0 TD +0 Tw +(ezjail.conf)Tj +/TT6 1 Tf +6.6011 0 TD +0.0387 Tw +[(\(5\). )-250(Normally)-288.7(it will not be necessary to edit this )]TJ +/TT9 1 Tf +20.3274 0 TD +0 Tw +()Tj +/TT6 1 Tf +0.5562 0 TD +(le,)Tj +-42.8248 -1.2 TD +1.3077 Tw +[(as some sane def)10(aults are pro)15(vided. A sample con)]TJ +/TT9 1 Tf +30.3468 0 TD +0 Tw +()Tj +/TT6 1 Tf +0.5562 0 TD +1.3077 Tw +(guration is installed as)Tj +/TT11 1 Tf +-30.9029 -1.2 TD +0 Tw +(EZJAIL_PREFIX/etc/ezjail.conf.sample)Tj +/TT6 1 Tf +21.6035 0 TD +(.)Tj +-21.6035 -1.8 TD +0.0003 Tw +[(A)-250.3(script is also installed as)]TJ +/TT11 1 Tf +10.9447 0 TD +0 Tw +(ezjail)Tj +/TT6 1 Tf +3.8509 0 TD +0.0003 Tw +[(in the rc.d system to allo)25(w)-250.3(jails under ezjails control to be started at boot)]TJ +-14.7956 -1.2 TD +0 Tw +[(time, gi)25(v)15(e)0(n)-250(ezjail is enabled by setting the)]TJ +/TT11 1 Tf +17.0386 0 TD +(rc.conf)Tj +/TT6 1 Tf +4.2007 0 TD +[(\(5\) v)25(ariable )]TJ +/TT11 1 Tf +5.3051 0 TD +($ezjail_enable)Tj +/TT6 1 Tf +8.4014 0 TD +0.25 Tc +[(t)250(o)]TJ +/TT11 1 Tf +2.1655 0 TD +0 Tc +(YES)Tj +/TT6 1 Tf +1.8003 0 TD +(.)Tj +/TT2 1 Tf +-41.9116 -2.4 TD +0.1666 Tw +[(WHA)95(TS IN A J)30(AIL)]TJ +1.2 -1.2 TD +0.0625 Tw +(The life of an ezjail installation)Tj +/TT6 1 Tf +1.8 -1.2 TD +0.04 Tw +(The base jail is )Tj +/TT9 1 Tf +6.4359 0 TD +0 Tw +()Tj +/TT6 1 Tf +0.5562 0 TD +0.04 Tw +(rst created by running)Tj +/TT4 1 Tf +9.1571 0 TD +0 Tw +(ezjail-admin )Tj +7.4913 0 TD +(update)Tj +/TT6 1 Tf +3.8906 0 TD +(or)Tj +/TT4 1 Tf +1.123 0 TD +(ezjail-admin )Tj +7.4913 0 TD +(install)Tj +/TT6 1 Tf +4.2007 0 TD +[(.)-540(Exam-)]TJ +-40.3459 -1.2 TD +0.037 Tw +(ple usage of this command is section)Tj +/TT2 1 Tf +15.2282 0 TD +0 Tw +(EXAMPLES)Tj +/TT6 1 Tf +5.5562 0 TD +0.0369 Tw +[(.)-537(This will create the base jail, setup a template jail used)]TJ +-20.7844 -1.2 TD +0 Tw +[(to setting up ne)25(w)-250(jails, install an e)15(xample )]TJ +/TT9 1 Tf +16.7622 0 TD +()Tj +/TT6 1 Tf +0.5562 0 TD +[(a)20(v)20(our \(see belo)25(w\) and con)]TJ +/TT9 1 Tf +10.4863 0 TD +()Tj +/TT6 1 Tf +0.5562 0 TD +(gure miscellaneous things.)Tj +-28.3608 -1.8 TD +0.0385 Tw +[(This step is necessary before using the ezjail system. In particular)40(,)-288.5(i)0(t)-288.5(i)0(s)-288.5(not possible to create ne)25(w)-288.6(jails with-)]TJ +0 -1.2 TD +0 Tw +[(out initializing the base jail in adv)25(ance.)]TJ +0 -1.8 TD +0.0171 Tw +[(Once the base jail has been created, ne)25(w)-267.1(jails may be created with)]TJ +/TT4 1 Tf +26.8521 0 TD +0 Tw +(ezjail-admin )Tj +7.4684 0 TD +(create)Tj +/TT6 1 Tf +3.6006 0 TD +0.0171 Tw +[(.)-517.1(A)-267.1(ne)25(w)-267.1(jail is)]TJ +-37.921 -1.2 TD +0 Tw +(de)Tj +/TT9 1 Tf +0.9438 0 TD +()Tj +/TT6 1 Tf +0.5562 0 TD +0.0179 Tw +[(ned by its name and can ha)20(v)15(e)15( )-15(one or multiple IP addresses. Creating a ne)25(w)-267.9(jail in)40(v)20(olv)15(es cop)10(ying the tem-)]TJ +-1.5 -1.2 TD +0.1211 Tw +[(plate jail to the ne)25(w)-371.1(location, con)]TJ +/TT9 1 Tf +14.0033 0 TD +0 Tw +()Tj +/TT6 1 Tf +0.5562 0 TD +(guring)Tj +/TT11 1 Tf +2.9819 0 TD +(nullfs)Tj +/TT6 1 Tf +3.6006 0 TD +0.1211 Tw +[(\(4\) mounts for gi)25(ving access to the base jail, and little)]TJ +-21.1419 -1.2 TD +0 Tw +(more. A jail that has just be created occupies about 2MB of disk space ; when running, only a handful of dae-)Tj +T* +[(mons \(cron, syslog, sendmail mainly\) use memory)65(.)]TJ +0 -1.8 TD +[(After their creation, jails may be archi)25(v)15(e)0(d)-250(t)0(o)-250(a)]TJ +/TT11 1 Tf +18.6187 0 TD +(pax)Tj +/TT6 1 Tf +1.8003 0 TD +[(\(1\) archi)25(v)15(e)0(,)-250(restored, and e)25(v)15(entually deleted.)]TJ +-23.419 -6 TD +17.775 Tw +[(BSD January)-250(15, )17775(2011)-19470(1)]TJ +ET +endstream +endobj +3 0 obj +<< +/ProcSet [/PDF /Text ] +/Font << +/TT2 4 0 R +/TT4 5 0 R +/TT6 6 0 R +/TT8 7 0 R +/TT9 8 0 R +/TT11 9 0 R +>> +/ExtGState << +/GS1 10 0 R +>> +>> +endobj +13 0 obj +<< +/Length 8093 +>> +stream +BT +/TT6 1 Tf +10 0 0 10 72 744 Tm +0 g +/GS1 gs +0 Tc +-0.0834 Tw +[(EZJ)60(AIL \(7\))-12017.9(User)55(s)-250(Supplementary )-83.4(Documents)-12017.9(EZJ)60(AIL \(7\))]TJ +3 -4.8 TD +0.098 Tw +[(When a ne)25(w)-348(v)15(ersion of FreeBSD is released, or when an errata is published, only the base jail need to be)]TJ +0 -1.2 TD +0.2264 Tw +(updated. Both source upgrades and binary upgrades \(using)Tj +/TT11 1 Tf +25.4998 0 TD +0 Tw +(freebsd-update)Tj +/TT6 1 Tf +8.4014 0 TD +0.2265 Tw +(\(8\)\) are supported. The)Tj +/TT11 1 Tf +-33.9011 -1.2 TD +0 Tw +(ports)Tj +/TT6 1 Tf +3.0005 0 TD +0.0251 Tw +[(\(7\) collection may also be updated by ezjail, b)20(ut indi)25(vidual ports need to be upgraded indi)25(vidually by)]TJ +-3.0005 -1.2 TD +0 Tw +[(the administrator)55(.)]TJ +/TT2 1 Tf +-1.8 -2.4 TD +0.0625 Tw +[(Anatomy of a J)15(ail)]TJ +/TT6 1 Tf +1.8 -1.2 TD +0.0332 Tw +(In the ezjail system, a jail is de)Tj +/TT9 1 Tf +12.562 0 TD +0 Tw +()Tj +/TT6 1 Tf +0.5562 0 TD +0.0332 Tw +(ned by a root directory and a couple of con)Tj +/TT9 1 Tf +17.4868 0 TD +0 Tw +()Tj +/TT6 1 Tf +0.5562 0 TD +0.0332 Tw +[(guration v)25(alues, mainly a name)]TJ +-31.1611 -1.2 TD +0.0885 Tw +(and IP addresses. The root directory of the jail contains only the jail-speci)Tj +/TT9 1 Tf +30.581 0 TD +0 Tw +()Tj +/TT6 1 Tf +0.5562 0 TD +(c )Tj +/TT9 1 Tf +0.7823 0 TD +()Tj +/TT6 1 Tf +0.5562 0 TD +0.0885 Tw +(les: con)Tj +/TT9 1 Tf +3.171 0 TD +0 Tw +()Tj +/TT6 1 Tf +0.5562 0 TD +(guration )Tj +/TT9 1 Tf +3.671 0 TD +()Tj +/TT6 1 Tf +0.5562 0 TD +0.0885 Tw +(les, data)Tj +/TT9 1 Tf +-40.43 -1.2 TD +0 Tw +()Tj +/TT6 1 Tf +0.5562 0 TD +0.3122 Tw +[(les, and ports installed by the administrator)55(.)-562.2(The base system is shared amongst all jails, using a)]TJ +/TT11 1 Tf +-0.5562 -1.2 TD +0 Tw +(nullfs)Tj +/TT6 1 Tf +3.6006 0 TD +0.0894 Tw +[(\(4\) mount. This sa)20(v)15(e)0(s)-339.5(space and inodes \(especially when the ports collection in made a)20(v)25(ailable to)]TJ +-3.6006 -1.2 TD +0 Tw +[(the jails\), and also memory)65(,)-250(a)0(s)-250(the k)10(ernel is no)25(w)-250(able to share copies of running programs between the jails.)]TJ +0 -1.8 TD +0.0145 Tw +[(Unless the v)25(ariable )]TJ +/TT11 1 Tf +8.3764 0 TD +0 Tw +($ezjail_jaildir)Tj +/TT6 1 Tf +9.0015 0 TD +0.0145 Tw +[()-264.5(has been set by the administrator)40(,)-264.5(the root directory of the jail is)]TJ +-17.3779 -1.2 TD +0 Tw +[(k)10(ept in)]TJ +/TT11 1 Tf +2.9895 0 TD +(/usr/jails)Tj +/TT6 1 Tf +6.001 0 TD +[(,)-250(which therefore needs to reside on a partition big enough.)]TJ +-8.9905 -1.8 TD +0.2476 Tw +(There are also )Tj +/TT9 1 Tf +6.6559 0 TD +0 Tw +()Tj +/TT6 1 Tf +0.5562 0 TD +0.2476 Tw +[(le-based jails, in which the storage space for the jail is k)10(ept in a )]TJ +/TT9 1 Tf +29.0316 0 TD +0 Tw +()Tj +/TT6 1 Tf +0.5562 0 TD +0.2476 Tw +(le mounted with)Tj +/TT11 1 Tf +-36.7998 -1.2 TD +0 Tw +(mdconfig)Tj +/TT6 1 Tf +4.8008 0 TD +0.0972 Tw +[(\(8\). )-250(There)-347.2(are tw)10(o)-347.2(adv)25(antages to image jails. The amount of disk space allocated to the jail is)]TJ +-4.8008 -1.2 TD +0.0136 Tw +[(limited, while normal jails ha)20(v)15(e)15( )-15(no)-263.6(bound on the amount of disk space the)15(y)-263.6(use. On the other hand, the space)]TJ +T* +0.079 Tw +[(dedicated to the jail is no longer a)20(v)25(ailable to the host, e)25(v)15(en)-329(if)-329(the jail doesn)18(t)-329(use all its allocated space. In)]TJ +T* +0.0305 Tw +[(addition, image jails contain a full cop)10(y)-280.5(o)0(f)-280.5(the basejail. This mak)10(es them portable between hosts running the)]TJ +T* +0.0338 Tw +[(same FreeBSD v)15(ersion as the image w)10(as created with.)-533.8(Of course, the jail no)25(w)-283.9(needs to be updated indepen-)]TJ +T* +0 Tw +[(dently from all other jails, and there is no longer an)15(y)-250(sharing of common )]TJ +/TT9 1 Tf +29.2833 0 TD +()Tj +/TT6 1 Tf +0.5561 0 TD +(les between the jails.)Tj +-29.8395 -1.8 TD +0.1359 Tw +(Image jails may also be encrypted using)Tj +/TT11 1 Tf +17.2521 0 TD +0 Tw +(bde)Tj +/TT6 1 Tf +1.8003 0 TD +0.1359 Tw +(\(4\) or)Tj +/TT11 1 Tf +2.7708 0 TD +0 Tw +(geli)Tj +/TT6 1 Tf +2.4004 0 TD +0.1359 Tw +[(\(8\), depending on the options gi)25(v)15(e)0(n)-385.8(a)0(t)-385.8(creation)]TJ +-24.2236 -1.2 TD +0 Tw +(time.)Tj +/TT2 1 Tf +-1.8 -2.4 TD +0.0625 Tw +(Using ZFS)Tj +/TT6 1 Tf +1.8 -1.2 TD +0.0383 Tw +[(T)80(o)80( )-80(gi)25(v)25( )278.3(e)-288.3(more precise control o)15(v)15(e)0(r)-288.3(the resources consumed by a jail, ezjail allo)25(ws putting each jail in its o)25(w)0(n)]TJ +/TT11 1 Tf +T* +0 Tw +(zfs)Tj +/TT6 1 Tf +1.8003 0 TD +(\(8\) )Tj +/TT9 1 Tf +1.416 0 TD +()Tj +/TT6 1 Tf +0.5562 0 TD +(lesystem. See)Tj +/TT2 1 Tf +5.6934 0 TD +[(J)15(ail Cr)18(eation Examples)]TJ +/TT6 1 Tf +10.2165 0 TD +(for details.)Tj +-19.6823 -1.8 TD +0.097 Tw +(Also, ezjail can be con)Tj +/TT9 1 Tf +9.4676 0 TD +0 Tw +()Tj +/TT6 1 Tf +0.5562 0 TD +0.097 Tw +[(gured to install its basejail and the accompaning template for all ne)25(w)-347(jails into its)]TJ +-10.0237 -1.2 TD +-0.025 Tc +0 Tw +[(ow)-25(n)]TJ +/TT9 1 Tf +2.0123 0 TD +0 Tc +()Tj +/TT6 1 Tf +0.5562 0 TD +0.0651 Tw +(lesystem. Set the )Tj +/TT11 1 Tf +7.6382 0 TD +0 Tw +($ezjail_use_zfs)Tj +/TT6 1 Tf +9.0015 0 TD +0.0652 Tw +[()-315.2(v)25(ariable in your)]TJ +/TT11 1 Tf +7.5107 0 TD +0 Tw +(ezjail.conf)Tj +/TT6 1 Tf +6.9163 0 TD +0.0652 Tw +(to YES before running)Tj +/TT4 1 Tf +-33.635 -1.2 TD +0 Tw +(ezjail-admin )Tj +7.4513 0 TD +(update)Tj +/TT6 1 Tf +3.8506 0 TD +(or)Tj +/TT4 1 Tf +1.083 0 TD +(ezjail-admin )Tj +7.4513 0 TD +(install)Tj +/TT6 1 Tf +4.2007 0 TD +(.)Tj +-24.0368 -1.8 TD +0.2555 Tw +[(T)80(o)80( )-80(use an)15(y)-505.5(zfs feature in ezjail, you )]TJ +/TT9 1 Tf +16.471 0 TD +0 Tw +()Tj +/TT6 1 Tf +0.5562 0 TD +0.2555 Tw +(rst need to con)Tj +/TT9 1 Tf +6.6259 0 TD +0 Tw +()Tj +/TT6 1 Tf +0.5562 0 TD +0.2555 Tw +(gure the destination ZFS )Tj +/TT9 1 Tf +11.1319 0 TD +0 Tw +()Tj +/TT6 1 Tf +0.5562 0 TD +0.2555 Tw +(lesystem using the)Tj +-35.8972 -1.2 TD +0 Tw +()Tj +/TT11 1 Tf +0.4438 0 TD +($ezjail_jailzfs)Tj +/TT6 1 Tf +9.0015 0 TD +[()-250(v)25(ariable.)]TJ +-9.4453 -1.8 TD +0.0588 Tw +[(Y)110(o)0(u)-308.8(can use ZFS jails without installing the basejail into its o)25(wn ZFS )]TJ +/TT9 1 Tf +28.7116 0 TD +0 Tw +()Tj +/TT6 1 Tf +0.5562 0 TD +0.0589 Tw +[(lesystem and vice v)15(ersa. In order to)]TJ +-29.2678 -1.2 TD +0 Tw +[(create ZFS jails by def)10(ault, set the )]TJ +/TT11 1 Tf +14.3186 0 TD +($ezjail_use_zfs_for_jails)Tj +/TT6 1 Tf +15.0024 0 TD +[()-250(v)25(ariable to YES.)]TJ +/TT2 1 Tf +-31.1211 -2.4 TD +0.0625 Tw +[(P)20(e)0(r)37(-)0(J)15(ail options)]TJ +/TT6 1 Tf +1.8 -1.2 TD +0.0048 Tw +[(As we sa)15(w)-254.9(earlier)40(,)-254.9(a)-254.8(jail is described by a )]TJ +/TT9 1 Tf +16.7927 0 TD +0 Tw +()Tj +/TT6 1 Tf +0.5562 0 TD +0.0048 Tw +(le in)Tj +/TT11 1 Tf +2.0091 0 TD +0 Tw +(EZJAIL_PREFIX/etc/ezjail/)Tj +/TT6 1 Tf +15.0024 0 TD +[(.)-504.8(This )]TJ +/TT9 1 Tf +2.7874 0 TD +()Tj +/TT6 1 Tf +0.5562 0 TD +0.0048 Tw +(le has the same)Tj +-37.704 -1.2 TD +0.0039 Tw +(name as the jail it con)Tj +/TT9 1 Tf +8.7666 0 TD +0 Tw +()Tj +/TT6 1 Tf +0.5562 0 TD +0.0039 Tw +[(gures. It is a set of v)25(ariables interpreted by)]TJ +/TT11 1 Tf +17.2824 0 TD +0 Tw +(sh)Tj +/TT6 1 Tf +1.2002 0 TD +0.004 Tw +[(\(1\), much lik)10(e)]TJ +/TT11 1 Tf +5.8892 0 TD +0 Tw +(rc.conf)Tj +/TT6 1 Tf +4.2007 0 TD +0.004 Tw +(\(5\) is. This )Tj +/TT9 1 Tf +4.6228 0 TD +0 Tw +()Tj +/TT6 1 Tf +0.5562 0 TD +(le)Tj +-43.0742 -1.2 TD +[(is created at the same time as the jail, and usually doesn)18(t)-250(require tweaking from the administrator)55(.)]TJ +0 -1.8 TD +0.0229 Tw +[(In addition to the v)25(ariables described belo)25(w)65(,)65( )-65(an)15(y)15( )-15(v)25(ariable used by the init script)]TJ +/TT11 1 Tf +32.1841 0 TD +0 Tw +(/etc/rc.d/jail)Tj +/TT6 1 Tf +8.6742 0 TD +0.0228 Tw +(may be)Tj +-40.8582 -1.2 TD +0.0967 Tw +[(added manually by the administrator)55(.)-346.8(The follo)25(wing v)25(ariables are handled by ezjail, replacing J)60(AILN)35(AME)]TJ +T* +0 Tw +(with the actual name of the jail:)Tj +0 -1.8 TD +[(jail_J)60(AILN)35(AME_hostname)]TJ +4.1 -1.2 TD +0.0863 Tw +[(The hostname of the jail. Def)10(aults to the name of the jail, unless special characters needed to be)]TJ +T* +0 Tw +(stripped.)Tj +-4.1 -1.8 TD +[(jail_J)60(AILN)35(AME_ip)]TJ +4.1 -1.2 TD +[(The IP addresses the jail is allo)25(wed to use.)]TJ +-7.1 -6 TD +17.775 Tw +[(BSD January)-250(15, )17775(2011)-19470(2)]TJ +ET +endstream +endobj +14 0 obj +<< +/ProcSet [/PDF /Text ] +/Font << +/TT2 4 0 R +/TT4 5 0 R +/TT6 6 0 R +/TT9 8 0 R +/TT11 9 0 R +>> +/ExtGState << +/GS1 10 0 R +>> +>> +endobj +16 0 obj +<< +/Length 6219 +>> +stream +BT +/TT6 1 Tf +10 0 0 10 72 744 Tm +0 g +/GS1 gs +0 Tc +-0.0834 Tw +[(EZJ)60(AIL \(7\))-12017.9(User)55(s)-250(Supplementary )-83.4(Documents)-12017.9(EZJ)60(AIL \(7\))]TJ +7.1 -4.8 TD +0 Tw +[(Since FreeBSD 7.2, se)25(v)15(eral IP addresses may be gi)25(v)15(en, separated by commas.)]TJ +0 -1.8 TD +0.1325 Tw +(Since FreeBSD 9.0 each IP address can be pre)Tj +/TT9 1 Tf +19.582 0 TD +0 Tw +()Tj +/TT6 1 Tf +0.5562 0 TD +0.1325 Tw +[(x)15(ed by an interf)10(ace name follo)25(wed by the pipe)]TJ +-20.1381 -1.2 TD +0.1847 Tw +(symbol. It will then automatically be con)Tj +/TT9 1 Tf +17.5213 0 TD +0 Tw +()Tj +/TT6 1 Tf +0.5562 0 TD +0.1846 Tw +[(gured on that interf)10(ace when the jail is started and)]TJ +-18.0774 -1.2 TD +0.0071 Tw +[(remo)15(v)15(e)0(d)-257.1(from the interf)10(ace when the jail stops. \(Y)110(ou will probably ha)20(v)15(e)15( )-15(to)-257.2(escape the pipe symbol,)]TJ +T* +0 Tw +(though.\))Tj +-4.1 -1.8 TD +[(jail_J)60(AILN)35(AME_rootdir)]TJ +4.1 -1.2 TD +0.2247 Tw +(The directory holding the jail )Tj +/TT9 1 Tf +13.0922 0 TD +0 Tw +()Tj +/TT6 1 Tf +0.5562 0 TD +0.2247 Tw +(les \(the directory used as a mount point for )Tj +/TT9 1 Tf +19.4344 0 TD +0 Tw +()Tj +/TT6 1 Tf +0.5562 0 TD +0.2247 Tw +(le-based jails\).)Tj +-33.639 -1.2 TD +0 Tw +[(Def)10(aults to the jail name inside )]TJ +/TT11 1 Tf +13.1526 0 TD +($ezjail_jaildir)Tj +/TT6 1 Tf +9.0015 0 TD +(.)Tj +-26.2541 -1.8 TD +[(jail_J)60(AILN)35(AME_e)15(x)15(ec_start)]TJ +4.1 -1.2 TD +0.1001 Tw +[(The command to run inside the jail when starting it. Def)10(aults to )]TJ +/TT11 1 Tf +27.2685 0 TD +0 Tw +($ezjail_exec_start)Tj +/TT6 1 Tf +10.8018 0 TD +0.3502 Tc +[(o)350.2(r)]TJ +-38.0703 -1.2 TD +0 Tc +()Tj +/TT11 1 Tf +0.4438 0 TD +(/bin/sh /etc/rc)Tj +/TT6 1 Tf +9.0015 0 TD +(.)Tj +-13.5453 -1.8 TD +[(jail_J)60(AILN)35(AME_e)15(x)15(ec_stop)]TJ +4.1 -1.2 TD +0.0862 Tw +[(The command to run inside the jail when stopping it. Def)10(aults to the empty string, which means)]TJ +T* +0 Tw +()Tj +/TT11 1 Tf +0.4438 0 TD +(/bin/sh /etc/rc.shutdown)Tj +/TT6 1 Tf +14.4023 0 TD +(.)Tj +-18.9462 -1.8 TD +[(jail_J)60(AILN)35(AME_mount_enable)]TJ +4.1 -1.2 TD +0.454 Tw +[(A)-704(boolean \(YES or NO\), that speci)]TJ +/TT9 1 Tf +18.5238 0 TD +0 Tw +()Tj +/TT6 1 Tf +0.5562 0 TD +0.454 Tw +(es whether the )Tj +/TT9 1 Tf +7.3874 0 TD +0 Tw +()Tj +/TT6 1 Tf +0.5562 0 TD +0.454 Tw +(lesystems in)Tj +/TT11 1 Tf +6.0745 0 TD +0 Tw +(/etc/fstab.)Tj +/TT8 1 Tf +-33.098 -1.2 TD +(JAILNAME)Tj +/TT6 1 Tf +5.0508 0 TD +(are carried out. Set by ezjail to )Tj +/TT11 1 Tf +12.9385 0 TD +(YES)Tj +/TT6 1 Tf +1.8003 0 TD +[(, set to at your o)25(wn risk.)]TJ +-23.8896 -1.8 TD +[(jail_J)60(AILN)35(AME_de)25(vfs_enable)]TJ +4.1 -1.2 TD +0.4343 Tw +[(A)-684.4(boolean specifying whether to mount a)]TJ +/TT11 1 Tf +19.8415 0 TD +0 Tw +(/dev)Tj +/TT9 1 Tf +3.0847 0 TD +()Tj +/TT6 1 Tf +0.5562 0 TD +0.4343 Tw +[(lesystem inside the jail. Def)10(aults to)]TJ +-23.4823 -1.2 TD +0 Tw +()Tj +/TT11 1 Tf +0.4438 0 TD +($ezjail_devfs_enable)Tj +/TT6 1 Tf +12.002 0 TD +(, or )Tj +/TT11 1 Tf +2.4707 0 TD +(YES)Tj +/TT6 1 Tf +1.8003 0 TD +(.)Tj +-20.8168 -1.8 TD +[(jail_J)60(AILN)35(AME_de)25(vfs_ruleset)]TJ +4.1 -1.2 TD +0.6009 Tw +(The ruleset to apply when mounting a)Tj +/TT11 1 Tf +19.6194 0 TD +0 Tw +(/dev)Tj +/TT9 1 Tf +3.2513 0 TD +()Tj +/TT6 1 Tf +0.5562 0 TD +0.6009 Tw +[(lesystem inside a jail. Def)10(aults to)]TJ +-23.4268 -1.2 TD +0 Tw +()Tj +/TT11 1 Tf +0.4438 0 TD +($ezjail_devfs_ruleset)Tj +/TT6 1 Tf +12.602 0 TD +(, or )Tj +/TT11 1 Tf +2.4707 0 TD +(devfsrules_jail)Tj +/TT6 1 Tf +9.0015 0 TD +(.)Tj +-28.6181 -1.8 TD +[(ezjail_J)60(AILN)35(AME_procfs)]TJ +4.1 -1.2 TD +0.3882 Tw +[(A)-638.2(boolean specifying whether to mount a)]TJ +/TT11 1 Tf +19.5187 0 TD +0 Tw +(/proc)Tj +/TT9 1 Tf +3.6386 0 TD +()Tj +/TT6 1 Tf +0.5562 0 TD +0.3881 Tw +[(lesystem inside the jail. Def)10(aults to)]TJ +-23.7134 -1.2 TD +0 Tw +()Tj +/TT11 1 Tf +0.4438 0 TD +($ezjail_procfs_enable)Tj +/TT6 1 Tf +12.602 0 TD +(, or )Tj +/TT11 1 Tf +2.4707 0 TD +(YES)Tj +/TT6 1 Tf +1.8003 0 TD +(.)Tj +-21.4169 -1.8 TD +[(ezjail_J)60(AILN)35(AME_fdescfs)]TJ +4.1 -1.2 TD +0.2958 Tw +[(A)-545.8(boolean specifying whether to mount a)]TJ +/TT11 1 Tf +18.8719 0 TD +0 Tw +(/dev/fs)Tj +/TT9 1 Tf +4.7466 0 TD +()Tj +/TT6 1 Tf +0.5562 0 TD +0.2959 Tw +[(lesystem inside the jail. Def)10(aults to)]TJ +-24.1746 -1.2 TD +0 Tw +()Tj +/TT11 1 Tf +0.4438 0 TD +($ezjail_fdescfs_enable)Tj +/TT6 1 Tf +13.2022 0 TD +(, or )Tj +/TT11 1 Tf +2.4707 0 TD +(YES)Tj +/TT6 1 Tf +1.8003 0 TD +(.)Tj +-22.017 -1.8 TD +[(ezjail_J)60(AILN)35(AME_image)]TJ +4.1 -1.2 TD +(The path to the image )Tj +/TT9 1 Tf +8.9692 0 TD +()Tj +/TT6 1 Tf +0.5562 0 TD +(le backing the jail, if the jail is )Tj +/TT9 1 Tf +12.4131 0 TD +()Tj +/TT6 1 Tf +0.5562 0 TD +(le-based; or the empty string.)Tj +-26.5946 -1.8 TD +[(ezjail_J)60(AILN)35(AME_imagetype)]TJ +4.1 -1.2 TD +(The type of the image, if the jail is )Tj +/TT9 1 Tf +14.0513 0 TD +()Tj +/TT6 1 Tf +0.5561 0 TD +(le-based; the empty string otherwise.)Tj +-18.7074 -1.8 TD +[(ezjail_J)60(AILN)35(AME_attachparams)]TJ +4.1 -1.2 TD +0.0749 Tw +(The parameters to pass to the tool used to decrypt )Tj +/TT9 1 Tf +20.8545 0 TD +0 Tw +()Tj +/TT6 1 Tf +0.5562 0 TD +0.0749 Tw +(le-based, encrypted jails. Initialized from the)Tj +/TT3 1 Tf +-21.244 -1.2 TD +0 Tw +<00e9>Tj +/TT4 1 Tf +0.6001 0 TD +(C)Tj +/TT6 1 Tf +0.9723 0 TD +0.1222 Tw +[(option when creating such a jail, or the empty string.)-622.2()]TJ +/TT11 1 Tf +23.244 0 TD +0 Tw +(YES)Tj +/TT6 1 Tf +1.8003 0 TD +0.1223 Tw +[()-372.2(i)0(f)-372.2(the jail requires interaction)]TJ +-26.7833 -1.2 TD +0.2779 Tw +[(with the administrator when starting \(typically)65(,)-527.9(encrypted jails that needs a passw)10(ord to be)]TJ +T* +0 Tw +(decrypted\).)Tj +-4.1 -1.8 TD +[(ezjail_J)60(AILN)35(AME_forceblocking)]TJ +4.1 -1.2 TD +(If )Tj +/TT11 1 Tf +1.3599 0 TD +(YES)Tj +/TT6 1 Tf +1.8003 0 TD +[(, start the jail e)25(v)15(en)-250(when it is mark)10(ed as blocking.)]TJ +-7.2602 -1.8 TD +[(ezjail_J)60(AILN)35(AME_zfs_datasets)]TJ +4.1 -1.2 TD +0.1288 Tw +[(F)15(o)0(r)-378.7(ZFS jails, additional ZFS datasets to attach to the jail when starting it. T)80(a)0(k)10(en from the)]TJ +/TT3 1 Tf +38.4948 0 TD +0 Tw +<00e9>Tj +/TT4 1 Tf +0.6001 0 TD +(z)Tj +/TT6 1 Tf +-39.0948 -1.2 TD +(option when con)Tj +/TT9 1 Tf +6.6655 0 TD +()Tj +/TT6 1 Tf +0.5562 0 TD +(guring a jail; the empty string otherwise.)Tj +-14.3217 -6.6 TD +17.775 Tw +[(BSD January)-250(15, )17775(2011)-19470(3)]TJ +ET +endstream +endobj +17 0 obj +<< +/ProcSet [/PDF /Text ] +/Font << +/TT3 18 0 R +/TT4 5 0 R +/TT6 6 0 R +/TT8 7 0 R +/TT9 8 0 R +/TT11 9 0 R +>> +/ExtGState << +/GS1 10 0 R +>> +>> +endobj +20 0 obj +<< +/Length 9370 +>> +stream +BT +/TT6 1 Tf +10 0 0 10 72 744 Tm +0 g +/GS1 gs +0 Tc +-0.0834 Tw +[(EZJ)60(AIL \(7\))-12017.9(User)55(s)-250(Supplementary )-83.4(Documents)-12017.9(EZJ)60(AIL \(7\))]TJ +3 -4.8 TD +0 Tw +[(ezjail_J)60(AILN)35(AME_cpuset)]TJ +4.1 -1.2 TD +0.021 Tw +(The processor set to place the jail in when starting it \(see)Tj +/TT11 1 Tf +23.2447 0 TD +0 Tw +(cpuset)Tj +/TT6 1 Tf +3.6006 0 TD +0.021 Tw +[(\(1\)\). )-250(T)80(a)0(k)10(en from the)]TJ +/TT3 1 Tf +8.8237 0 TD +0 Tw +<00e9>Tj +/TT4 1 Tf +0.6001 0 TD +(c)Tj +/TT6 1 Tf +0.8711 0 TD +(option)Tj +-37.1401 -1.2 TD +(when con)Tj +/TT9 1 Tf +3.8599 0 TD +()Tj +/TT6 1 Tf +0.5562 0 TD +(guring a jail; the empty string otherwise.)Tj +-8.516 -1.8 TD +[(ezjail_J)60(AILN)35(AME_)]TJ +/TT9 1 Tf +8.0696 0 TD +()Tj +/TT6 1 Tf +0.5562 0 TD +(b)Tj +-4.5257 -1.2 TD +0.0466 Tw +[(The netw)10(ork vie)25(w)-296.6(t)0(o)-296.6(g)0(i)25(v)25( )286.6(e)-296.6(to the jail \(see)]TJ +/TT11 1 Tf +16.756 0 TD +0 Tw +(setfib)Tj +/TT6 1 Tf +3.6006 0 TD +0.0466 Tw +[(\(1\)\) when starting it. T)80(a)0(k)10(en from the)]TJ +/TT3 1 Tf +15.2872 0 TD +0 Tw +<00e9>Tj +/TT4 1 Tf +0.6001 0 TD +(f)Tj +/TT6 1 Tf +0.8968 0 TD +(option)Tj +-37.1407 -1.2 TD +(when con)Tj +/TT9 1 Tf +3.8599 0 TD +()Tj +/TT6 1 Tf +0.5562 0 TD +(guring the jail; the empty string otherwise.)Tj +-8.516 -1.8 TD +[(ezjail_J)60(AILN)35(AME_parameters)]TJ +4.1 -1.2 TD +0.054 Tw +(The parameter set to be con)Tj +/TT9 1 Tf +11.3481 0 TD +0 Tw +()Tj +/TT6 1 Tf +0.5562 0 TD +0.054 Tw +(gured to the jail \(see)Tj +/TT11 1 Tf +8.6835 0 TD +0 Tw +(jail)Tj +/TT6 1 Tf +2.4004 0 TD +0.0539 Tw +[(\(8\)\) when starting it. Y)110(ou need to con)]TJ +/TT9 1 Tf +15.3191 0 TD +0 Tw +()Tj +/TT6 1 Tf +0.5562 0 TD +(g-)Tj +-38.8634 -1.2 TD +(ure this by hand.)Tj +-4.1 -1.8 TD +[(ezjail_J)60(AILN)35(AME_post_start_script)]TJ +4.1 -1.2 TD +0.017 Tw +[(The path to a script that will be e)15(x)15(ecuted after the jail successfully w)10(as created. The script recei)25(v)15(e)0(s)]TJ +T* +0 Tw +[(tw)10(o)-250(parameters, the jid and the jail name.)-500(Y)110(o)0(u)-250(need to con)]TJ +/TT9 1 Tf +23.4835 0 TD +()Tj +/TT6 1 Tf +0.5562 0 TD +(gure this by hand.)Tj +-28.1397 -1.8 TD +0.3903 Tw +(In addition to these)Tj +/TT11 1 Tf +9.5041 0 TD +0 Tw +(sh)Tj +/TT6 1 Tf +1.2002 0 TD +0.3902 Tw +[(\(1\)-style v)25(ariables, the administrator may add comment lines starting with)]TJ +-10.7043 -1.2 TD +0.0658 Tw +[(PR)40(O)50(VIDE:, REQ)10(UIRE: and BEFORE:.)-565.8(These comments are used by)]TJ +/TT11 1 Tf +31.485 0 TD +0 Tw +(rcorder)Tj +/TT6 1 Tf +4.2007 0 TD +0.0659 Tw +(\(8\) to determine the)Tj +-35.6857 -1.2 TD +0.0481 Tw +[(order in which the jails are started. The def)10(ault is to k)10(eep REQ)10(UIRE and BEFORE empty)65(,)-298.1(meaning the)]TJ +T* +0 Tw +[(jails are started in no particular order)55(.)]TJ +/TT2 1 Tf +-1.8 -2.4 TD +[(Fla)25(v)10(ours)]TJ +/TT6 1 Tf +1.8 -1.2 TD +0.4115 Tw +(When a jail is created, it is not con)Tj +/TT9 1 Tf +17.1484 0 TD +0 Tw +()Tj +/TT6 1 Tf +0.5562 0 TD +0.4115 Tw +[(gured; in particular you lik)10(ely w)10(ant to edit )]TJ +/TT9 1 Tf +20.4341 0 TD +0 Tw +()Tj +/TT6 1 Tf +0.5562 0 TD +0.4115 Tw +(les such as)Tj +/TT11 1 Tf +-38.6949 -1.2 TD +0 Tw +(/etc/resolv.conf)Tj +/TT6 1 Tf +9.6016 0 TD +(,)Tj +/TT11 1 Tf +0.9187 0 TD +(/etc/localtime)Tj +/TT6 1 Tf +8.7201 0 TD +0.0686 Tw +[(and others. Y)110(ou may also w)10(ant to create some system users,)]TJ +-19.2403 -1.2 TD +0.1042 Tw +(maybe enable)Tj +/TT11 1 Tf +5.9833 0 TD +0 Tw +(sshd)Tj +/TT6 1 Tf +2.4004 0 TD +0.1042 Tw +[(\(8\). )-250(Ezjail)-354.2(solv)15(es this problem by using the concept of )]TJ +/TT9 1 Tf +23.5773 0 TD +0 Tw +()Tj +/TT6 1 Tf +0.5562 0 TD +0.3543 Tw +[(a)20(v)20(ours. When)-354.3(a)]TJ +/TT9 1 Tf +7.4643 0 TD +0 Tw +()Tj +/TT6 1 Tf +0.5562 0 TD +0.1043 Tw +[(a)20(v)20(our is)]TJ +-40.5376 -1.2 TD +0.0804 Tw +(selected at jail creation time, the )Tj +/TT9 1 Tf +13.6709 0 TD +0 Tw +()Tj +/TT6 1 Tf +0.5562 0 TD +0.0803 Tw +[(a)20(v)20(our directory tree is mer)18(ged into the ne)25(w)-330.4(jail)55(s)-330.4(directory tree. In addi-)]TJ +-14.227 -1.2 TD +0 Tw +(tion, the jail is con)Tj +/TT9 1 Tf +7.4155 0 TD +()Tj +/TT6 1 Tf +0.5562 0 TD +(gured so that on its )Tj +/TT9 1 Tf +7.8604 0 TD +()Tj +/TT6 1 Tf +0.5562 0 TD +(rst boot, the )Tj +/TT9 1 Tf +4.9995 0 TD +()Tj +/TT6 1 Tf +0.5562 0 TD +(le)Tj +/TT11 1 Tf +0.9717 0 TD +(ezjail.flavour)Tj +/TT6 1 Tf +8.6514 0 TD +[(is e)15(x)15(ecuted.)]TJ +-31.5669 -1.8 TD +0.1077 Tw +(As part of the install sub-command, the )Tj +/TT9 1 Tf +16.8061 0 TD +0 Tw +()Tj +/TT6 1 Tf +0.5562 0 TD +0.1078 Tw +[(a)20(v)20(our base directory w)10(as created as)]TJ +/TT11 1 Tf +15.0343 0 TD +0 Tw +(/usr/jails/flavours)Tj +/TT6 1 Tf +-32.3966 -1.2 TD +0.0326 Tw +(and populated with an single )Tj +/TT9 1 Tf +11.9106 0 TD +0 Tw +()Tj +/TT6 1 Tf +0.5562 0 TD +0.0326 Tw +[(a)20(v)20(our named)]TJ +/TT4 1 Tf +5.4676 0 TD +0 Tw +(example)Tj +/TT6 1 Tf +4.2007 0 TD +[(.)-532.6(This )]TJ +/TT9 1 Tf +2.843 0 TD +()Tj +/TT6 1 Tf +0.5562 0 TD +0.0326 Tw +[(a)20(v)20(our contains 3 )]TJ +/TT9 1 Tf +6.9172 0 TD +0 Tw +()Tj +/TT6 1 Tf +0.5562 0 TD +0.0326 Tw +(les customized for running)Tj +-33.0075 -1.2 TD +1.0937 Tw +(in a jail \()Tj +/TT11 1 Tf +6.8631 0 TD +0 Tw +(etc/make.conf)Tj +/TT6 1 Tf +7.8013 0 TD +(,)Tj +/TT11 1 Tf +1.9437 0 TD +(etc/periodic.conf)Tj +/TT6 1 Tf +10.2017 0 TD +(,)Tj +/TT11 1 Tf +1.9437 0 TD +(etc/rc.conf)Tj +/TT6 1 Tf +6.6011 0 TD +1.3437 Tw +[(\). The)-1343.8(e)15(xample)]TJ +/TT11 1 Tf +-35.3545 -1.2 TD +0 Tw +(ezjail.flavour)Tj +/TT6 1 Tf +8.7932 0 TD +0.1417 Tw +[(also sho)25(w)-391.7(h)0(o)25(w)25( )-25(to)-391.7(create users, and introduce the con)40(v)15(ention of placing packages in)]TJ +/TT11 1 Tf +-8.7932 -1.2 TD +0 Tw +(/pkg)Tj +/TT6 1 Tf +2.7014 0 TD +0.051 Tw +(that are installed when the jail is )Tj +/TT9 1 Tf +13.5474 0 TD +0 Tw +()Tj +/TT6 1 Tf +0.5562 0 TD +0.051 Tw +[(rst brought up. Y)110(ou are encouraged to cop)10(y)-301.1(the e)15(xample )]TJ +/TT9 1 Tf +23.1184 0 TD +0 Tw +()Tj +/TT6 1 Tf +0.5562 0 TD +0.0511 Tw +[(a)20(v)20(our to)]TJ +-40.4795 -1.2 TD +0.0014 Tw +[(create your o)25(wn )]TJ +/TT9 1 Tf +6.6706 0 TD +0 Tw +()Tj +/TT6 1 Tf +0.5562 0 TD +[(a)20(v)20(our)55(.)-501.4(T)80(ypical )]TJ +/TT9 1 Tf +6.1589 0 TD +()Tj +/TT6 1 Tf +0.5562 0 TD +0.0013 Tw +[(a)20(v)20(our usages include setting up jails with site-speci)]TJ +/TT9 1 Tf +20.4925 0 TD +0 Tw +()Tj +/TT6 1 Tf +0.5562 0 TD +0.0013 Tw +(c con)Tj +/TT9 1 Tf +2.139 0 TD +0 Tw +()Tj +/TT6 1 Tf +0.5562 0 TD +0.0013 Tw +(guration, creat-)Tj +-37.6856 -1.2 TD +0.0295 Tw +[(ing classes of jails for de)25(v)15(elopment or testing \(such as a webde)25(v)]TJ +/TT9 1 Tf +26.2266 0 TD +0 Tw +()Tj +/TT6 1 Tf +0.5562 0 TD +0.0296 Tw +[(a)20(v)20(our that w)10(ould install Apache with your)]TJ +-26.7828 -1.2 TD +0 Tw +[(f)10(a)20(v)20(ourite web de)25(v)15(elopment frame)25(w)10(ork\), pre-creating local users, and so on.)]TJ +/TT2 1 Tf +-1.8 -2.4 TD +0.0625 Tw +[(Updating the Base J)15(ail)]TJ +/TT6 1 Tf +1.8 -1.2 TD +0.0674 Tw +[(W)80(e)80( )-80.1(already mentionned ho)25(w)-317.5(easy it is to update jails, since only one cop)10(y)-317.5(needs to be updated. Ezjail only)]TJ +T* +0.6262 Tw +[(handles updating the base system; updating the ports is left to the administrator \(b)20(ut see)]TJ +T* +0 Tw +()Tj +/TT11 1 Tf +0.4438 0 TD +(ports-mgmt/jailaudit)Tj +/TT6 1 Tf +12.002 0 TD +0.0251 Tw +[()-275.1(for a w)10(ay to get noti)]TJ +/TT9 1 Tf +8.9155 0 TD +0 Tw +()Tj +/TT6 1 Tf +0.5562 0 TD +0.0251 Tw +(ed of ports in need of an update\). Updates are handled)Tj +-21.9175 -1.2 TD +0.1373 Tw +(with the)Tj +/TT4 1 Tf +3.7741 0 TD +-0.2127 Tw +(ezjail-admin update)Tj +/TT6 1 Tf +11.5765 0 TD +0.1374 Tw +(command. It is possible to update the base jail from source or from)Tj +-15.3506 -1.2 TD +0.0382 Tw +[(binary packages. If a base jail already e)15(xists, the)]TJ +/TT4 1 Tf +19.9047 0 TD +0 Tw +(update)Tj +/TT6 1 Tf +3.8888 0 TD +0.0382 Tw +[(command installs the w)10(orld in a temporary direc-)]TJ +-23.7935 -1.2 TD +0.032 Tw +[(tory before mo)15(ving it to the basejail, thus lea)20(ving intact all installed libraries. After making sure all softw)10(are)]TJ +T* +0.0752 Tw +[(running in the jails is link)10(ed with the ne)25(w)-325.2(librairies, you may w)10(ant to rem)]TJ +30.4189 0 TD +-0.015 Tc +0 Tw +(ove )Tj +1.739 0 TD +0 Tc +0.0752 Tw +[(the old library v)15(ersions. It is)]TJ +-32.158 -1.2 TD +0 Tw +[(often a good idea to update the jails when a ne)25(w)-250(k)10(ernel is installed in the host, using the same sources.)]TJ +/TT2 1 Tf +-1.8 -2.4 TD +0.0625 Tw +[(Starting J)15(ails)]TJ +/TT6 1 Tf +1.8 -1.2 TD +0 Tw +[(Lik)10(e)-601.1(all)]TJ +/TT11 1 Tf +4.0242 0 TD +(rc)Tj +/TT6 1 Tf +1.2002 0 TD +0.3511 Tw +(\(8\) scripts, the ezjail script)Tj +/TT11 1 Tf +12.6408 0 TD +0 Tw +(EZJAIL_PREFIX/etc/rc.d/ezjail)Tj +/TT6 1 Tf +18.0039 0 TD +0.3512 Tw +(accepts parameters)Tj +/TT4 1 Tf +-35.8691 -1.2 TD +0 Tw +(start)Tj +/TT6 1 Tf +3.0005 0 TD +(,)Tj +/TT4 1 Tf +0.852 0 TD +(restart)Tj +/TT6 1 Tf +4.8027 0 TD +(and)Tj +/TT4 1 Tf +1.6958 0 TD +(stop,)Tj +/TT6 1 Tf +3.6025 0 TD +0.002 Tw +[(running, restarting and stopping all \(non-blocking\) jails under ezjail)55(s)-252(con-)]TJ +-13.9535 -1.2 TD +0 Tw +[(trol by def)10(ault. When passed an additional list of jails, only these jails are acted upon.)]TJ +0 -1.8 TD +0.0321 Tw +(The order in which jails are started is determined by the)Tj +/TT11 1 Tf +22.9288 0 TD +0 Tw +(rcorder)Tj +/TT6 1 Tf +4.2007 0 TD +0.0321 Tw +(\(8\) tool, using cues from the jail con)Tj +/TT9 1 Tf +14.7769 0 TD +0 Tw +()Tj +/TT6 1 Tf +0.5562 0 TD +(gu-)Tj +-42.4626 -1.2 TD +(rations in ezjails)Tj +/TT11 1 Tf +6.8037 0 TD +(EZJAIL_PREFIX/etc/ezjail)Tj +/TT6 1 Tf +14.6523 0 TD +[(control directory)65(.)]TJ +-24.4561 -5.4 TD +17.775 Tw +[(BSD January)-250(15, )17775(2011)-19470(4)]TJ +ET +endstream +endobj +21 0 obj +<< +/ProcSet [/PDF /Text ] +/Font << +/TT2 4 0 R +/TT3 18 0 R +/TT4 5 0 R +/TT6 6 0 R +/TT9 8 0 R +/TT11 9 0 R +>> +/ExtGState << +/GS1 10 0 R +>> +>> +endobj +23 0 obj +<< +/Length 7750 +>> +stream +BT +/TT6 1 Tf +10 0 0 10 72 744 Tm +0 g +/GS1 gs +0 Tc +-0.0834 Tw +[(EZJ)60(AIL \(7\))-12017.9(User)55(s)-250(Supplementary )-83.4(Documents)-12017.9(EZJ)60(AIL \(7\))]TJ +3 -4.8 TD +0.044 Tw +[(The script e)15(xamines its con)]TJ +/TT9 1 Tf +11.1024 0 TD +0 Tw +()Tj +/TT6 1 Tf +0.5562 0 TD +0.0439 Tw +[(g, attaches and mounts images, and sets v)25(ariables for each jail in the list before)]TJ +-11.6586 -1.2 TD +0 Tw +(passing its command on to the)Tj +/TT11 1 Tf +12.3877 0 TD +(/etc/rc.d/jail)Tj +/TT6 1 Tf +8.6514 0 TD +(script.)Tj +-21.0391 -1.8 TD +0.0353 Tw +[(T)80(o)80( )-80(interacti)25(v)15(ely start all crypto image jails \(or those depending on them\), that were not automatically started)]TJ +0 -1.2 TD +0 Tw +(during booting, use the)Tj +/TT4 1 Tf +9.4712 0 TD +(startcrypto)Tj +/TT6 1 Tf +6.8511 0 TD +[(parameter)55(.)]TJ +-16.3223 -1.8 TD +0.3287 Tw +(Note that jails con)Tj +/TT9 1 Tf +8.2898 0 TD +0 Tw +()Tj +/TT6 1 Tf +0.5562 0 TD +0.3287 Tw +(gured to be in the)Tj +/TT13 1 Tf +8.8915 0 TD +0 Tw +(norun)Tj +/TT6 1 Tf +2.9679 0 TD +0.3287 Tw +(state \(using)Tj +/TT4 1 Tf +5.4898 0 TD +-0.0214 Tw +(ezjail-admin config)Tj +/TT3 1 Tf +12.4757 0 TD +0 Tw +<00e9>Tj +/TT4 1 Tf +0.6001 0 TD +(r)Tj +/TT8 1 Tf +1.5287 0 TD +(norun)Tj +-40.7996 -1.2 TD +(jailname)Tj +/TT6 1 Tf +4.8008 0 TD +[(\))-250(are ne)25(v)15(e)0(r)-250(started by the ezjail rc script.)]TJ +-4.8008 -1.8 TD +0.0403 Tw +[(As a con)40(v)15(enient shortcut, the)]TJ +/TT4 1 Tf +12.0322 0 TD +0 Tw +(ezjail-admin)Tj +/TT6 1 Tf +7.4915 0 TD +0.0404 Tw +[(command in)40(v)20(o)0(k)10(e)0(s)-290.4(the rc.d script and passes the correspond-)]TJ +-19.5237 -1.2 TD +0 Tw +[(ing parameters, if the)15(y)-250(look lik)10(e)-250(v)25(alid parameters.)]TJ +0 -1.8 TD +0.0342 Tw +[(Ev)15(en if ezjail is not enabled in the)]TJ +/TT11 1 Tf +14.1429 0 TD +0 Tw +(rc.conf)Tj +/TT6 1 Tf +4.2007 0 TD +0.0341 Tw +(\(5\), rc.d/ezjail can be used to start and stop jails by prepending)Tj +/TT4 1 Tf +-18.3436 -1.2 TD +0 Tw +(force)Tj +/TT6 1 Tf +3.6005 0 TD +(or)Tj +/TT4 1 Tf +1.083 0 TD +(one)Tj +/TT6 1 Tf +2.4003 0 TD +(to the)Tj +/TT4 1 Tf +2.4995 0 TD +(start, restart)Tj +/TT6 1 Tf +9.0014 0 TD +(or)Tj +/TT4 1 Tf +1.083 0 TD +(stop)Tj +/TT6 1 Tf +3.0004 0 TD +[(parameter)55(.)-250(Refer to)]TJ +/TT11 1 Tf +7.9406 0 TD +(rc)Tj +/TT6 1 Tf +1.2002 0 TD +(\(8\) for details.)Tj +/TT2 1 Tf +-33.6089 -2.4 TD +0.0625 Tw +[(Remarks & T)18(ips)]TJ +/TT6 1 Tf +1.8 -1.2 TD +0.0023 Tw +[(Jails can be either accessed from the netw)10(ork, for instance by using)]TJ +/TT11 1 Tf +27.2032 0 TD +0 Tw +(ssh)Tj +/TT6 1 Tf +1.8003 0 TD +0.0024 Tw +(\(1\), or from the host system by using)Tj +-29.0035 -1.2 TD +0 Tw +(the)Tj +/TT4 1 Tf +1.5745 0 TD +(console)Tj +/TT6 1 Tf +4.5535 0 TD +0.1027 Tw +[(command, which gi)25(v)15(e)0(s)-352.7(you an interacti)25(v)15(e)15( )-15(shell inside the jail. It is also possible to edit the)]TJ +/TT9 1 Tf +-6.128 -1.2 TD +0 Tw +()Tj +/TT6 1 Tf +0.5562 0 TD +0.0059 Tw +(les of a running jail, and the modi)Tj +/TT9 1 Tf +13.5384 0 TD +0 Tw +()Tj +/TT6 1 Tf +0.5562 0 TD +0.0059 Tw +[(cations will appear immediately inside the jail en)40(vironment. )-250(When)-255.9(deal-)]TJ +-14.6507 -1.2 TD +0.1412 Tw +(ing image-based, the)Tj +/TT4 1 Tf +8.9763 0 TD +(config -i attach)Tj +/TT6 1 Tf +10.2751 0 TD +0.1411 Tw +[(command allo)25(ws one to access the disk of a )]TJ +/TT9 1 Tf +18.99 0 TD +0 Tw +()Tj +/TT6 1 Tf +0.5562 0 TD +0.1411 Tw +(le-based jail)Tj +-38.7976 -1.2 TD +0 Tw +(without starting it.)Tj +0 -1.8 TD +0.0448 Tw +[(Ra)15(w)-294.8(sock)10(ets are disallo)25(wed by def)10(ault for all jails. This is not a ezjail restriction, b)20(ut a design def)10(ault of the)]TJ +0 -1.2 TD +0.0401 Tw +(jail command. This means the)Tj +/TT11 1 Tf +12.4754 0 TD +0 Tw +(ping)Tj +/TT6 1 Tf +2.4004 0 TD +0.0401 Tw +(\(8\) command will get Operation not permitted. error when used from)Tj +-14.8758 -1.2 TD +0.0525 Tw +(inside of a jail. There are)Tj +/TT11 1 Tf +10.5601 0 TD +0 Tw +(sysctl)Tj +/TT6 1 Tf +3.6006 0 TD +0.0525 Tw +[(\(3\) knobs for allo)25(wing a jail to access ra)15(w)-302.6(sock)10(ets, see the)]TJ +/TT11 1 Tf +24.0452 0 TD +0 Tw +(jail)Tj +/TT6 1 Tf +2.4004 0 TD +0.0526 Tw +(\(8\) man)Tj +-40.6063 -1.2 TD +0 Tw +(page for details.)Tj +0 -1.8 TD +0.0365 Tw +[(Once your jail has netw)10(ork access, then all your normal application install functions are a)20(v)25(ailabe, right from)]TJ +0 -1.2 TD +0.0372 Tw +[(the jails console. In particular)40(,)-287.2(i)0(f)-287.2(the ports collection w)10(as installed, it can be used as if from the host system.)]TJ +T* +0 Tw +[(A)-380.7(modi)]TJ +/TT9 1 Tf +3.1585 0 TD +()Tj +/TT6 1 Tf +0.5562 0 TD +(ed)Tj +/TT11 1 Tf +1.3245 0 TD +(make.conf)Tj +/TT9 1 Tf +5.7816 0 TD +()Tj +/TT6 1 Tf +0.5562 0 TD +0.1307 Tw +[(le is installed by the e)15(xample )]TJ +/TT9 1 Tf +12.6549 0 TD +0 Tw +()Tj +/TT6 1 Tf +0.5562 0 TD +0.1307 Tw +[(a)20(v)20(our)40(,)-380.7(that enable the ports collection to w)10(ork)]TJ +-24.5881 -1.2 TD +0 Tw +[(e)25(v)25( )240(en)-250(with a read-only)]TJ +/TT11 1 Tf +8.9009 0 TD +(/usr/ports)Tj +/TT6 1 Tf +6.001 0 TD +(.)Tj +-14.9019 -1.8 TD +0.7411 Tw +(It is possible to change the IP address of a jail by editing its con)Tj +/TT9 1 Tf +35.8705 0 TD +0 Tw +()Tj +/TT6 1 Tf +0.5562 0 TD +(guration )Tj +/TT9 1 Tf +4.3236 0 TD +()Tj +/TT6 1 Tf +0.5561 0 TD +0.7411 Tw +(le in)Tj +/TT11 1 Tf +-41.3064 -1.2 TD +0 Tw +(EZJAIL_PREFIX/etc/ezjail)Tj +/TT6 1 Tf +14.6523 0 TD +(and restarting the jail.)Tj +-14.6523 -1.8 TD +0.0321 Tw +[(The jails use the same netw)10(ork stack as the host system. In particular)40(,)-282.1(that means that if a )]TJ +/TT9 1 Tf +36.4619 0 TD +0 Tw +()Tj +/TT6 1 Tf +0.5562 0 TD +0.0321 Tw +[(re)25(w)10(all is needed,)]TJ +-37.018 -1.2 TD +0 Tw +(it must be con)Tj +/TT9 1 Tf +5.6382 0 TD +()Tj +/TT6 1 Tf +0.5562 0 TD +(gured in the host system.)Tj +-6.1943 -1.8 TD +0.1787 Tw +(The ezjail system \(and the jails it controls\) depends on the )Tj +/TT11 1 Tf +25.931 0 TD +0 Tw +($ezjail_enable)Tj +/TT6 1 Tf +8.4014 0 TD +0.1787 Tw +[()-428.7(v)25(ariable being set to)]TJ +-34.3324 -1.2 TD +0 Tw +()Tj +/TT11 1 Tf +0.4438 0 TD +(YES)Tj +/TT6 1 Tf +1.8003 0 TD +0.397 Tc +[(i)397(n)]TJ +/TT11 1 Tf +2.0157 0 TD +0 Tc +(rc.conf)Tj +/TT6 1 Tf +4.2007 0 TD +0.147 Tw +[(.)-647(I)0(t)-397(i)0(s)-397(possible to set this v)25(ariable to )]TJ +/TT11 1 Tf +16.3791 0 TD +0 Tw +(NO)Tj +/TT6 1 Tf +1.2002 0 TD +0.147 Tw +[()-397(i)0(f)-397(the administrator w)10(ants to temporarily)]TJ +-26.0398 -1.2 TD +0 Tw +[(ezjail, or if she doesn)18(t)-250(w)10(ant the jails to be automatically started on boot.)]TJ +0 -1.8 TD +[(The ezjail system may be reset to a pristine state by remo)15(ving all its )]TJ +/TT9 1 Tf +27.3663 0 TD +()Tj +/TT6 1 Tf +0.5562 0 TD +(les, that is:)Tj +/TT11 1 Tf +-27.9225 -1.2 TD +(/usr/jails/)Tj +T* +(EZJAIL_PREFIX/etc/ezjail/)Tj +T* +(EZJAIL_PREFIX/etc/ezjail.conf)Tj +T* +(/etc/fstab.)Tj +/TT14 1 Tf +6.6011 0 TD +<009b>Tj +/TT6 1 Tf +1.1 0 TD +[(\(b)20(ut check the list of )]TJ +/TT9 1 Tf +8.4497 0 TD +()Tj +/TT6 1 Tf +0.5562 0 TD +(les this matches\))Tj +/TT2 1 Tf +-19.707 -2.4 TD +(EXAMPLES)Tj +/TT6 1 Tf +3 -1.2 TD +0.0276 Tw +[(The e)15(xamples belo)25(w)-277.6(are only that, e)15(xamples. The reader is encouraged to read the)]TJ +/TT11 1 Tf +33.4294 0 TD +0 Tw +(ezjail-admin)Tj +/TT6 1 Tf +7.2012 0 TD +0.0277 Tw +(\(8\) man)Tj +-40.6305 -1.2 TD +0 Tw +(page for de)Tj +/TT9 1 Tf +4.4976 0 TD +()Tj +/TT6 1 Tf +0.5562 0 TD +[(niti)25(v)15(e)15( )-15(documentation of all the options.)]TJ +/TT2 1 Tf +-6.8537 -2.4 TD +0.0625 Tw +(Initial Binary Installation)Tj +/TT6 1 Tf +1.8 -1.2 TD +0.2348 Tw +[(The ezjail system may be bootstrapped either from binary packages, or by b)20(uilding from source. The)]TJ +/TT4 1 Tf +T* +0 Tw +(install)Tj +/TT6 1 Tf +4.5725 0 TD +0.1218 Tw +[(command allo)25(w)-371.8(t)0(o)-371.8(bootstrap from binary packages, while the)]TJ +/TT4 1 Tf +25.8423 0 TD +0 Tw +(update)Tj +/TT6 1 Tf +3.9725 0 TD +0.1219 Tw +(deals with installations)Tj +-34.3873 -1.2 TD +0 Tw +(\(and updates\) from source.)Tj +-3 -5.4 TD +17.775 Tw +[(BSD January)-250(15, )17775(2011)-19470(5)]TJ +ET +endstream +endobj +24 0 obj +<< +/ProcSet [/PDF /Text ] +/Font << +/TT2 4 0 R +/TT3 18 0 R +/TT4 5 0 R +/TT6 6 0 R +/TT8 7 0 R +/TT9 8 0 R +/TT11 9 0 R +/TT13 25 0 R +/TT14 26 0 R +>> +/ExtGState << +/GS1 10 0 R +>> +>> +endobj +28 0 obj +<< +/Length 4569 +>> +stream +BT +/TT6 1 Tf +10 0 0 10 72 744 Tm +0 g +/GS1 gs +0 Tc +-0.0834 Tw +[(EZJ)60(AIL \(7\))-12017.9(User)55(s)-250(Supplementary )-83.4(Documents)-12017.9(EZJ)60(AIL \(7\))]TJ +/TT4 1 Tf +3 -4.8 TD +0 Tw +(ezjail-admin )Tj +7.4513 0 TD +(install)Tj +/TT6 1 Tf +4.8007 0 TD +[(\(without an)15(y)-250(options\))]TJ +-8.152 -1.2 TD +0.0585 Tw +[(Fetch and install binaries for populating the base jail from the FreeBSD FTP serv)15(er)55(.)-308.6(I)0(f)-308.6(the host is)]TJ +T* +0.1324 Tw +[(not running a -RELEASE v)15(ersion, you will be ask)10(ed for the release to install. Neither the man)]TJ +T* +0.0849 Tw +[(pages nor the source nor the ports tree are installed. Note that the FreeBSD FTP serv)15(er is some-)]TJ +T* +0.0134 Tw +[(times so b)20(usy the do)25(wnload times out. Use the)]TJ +/TT3 1 Tf +19.0738 0 TD +0 Tw +<00e9>Tj +/TT4 1 Tf +0.6001 0 TD +(h)Tj +/TT8 1 Tf +1.2136 0 TD +(host)Tj +/TT6 1 Tf +2.6639 0 TD +0.0135 Tw +[(option to specify a less loaded serv)15(er)40(,)-263.5(o)0(r)]TJ +-23.5514 -1.2 TD +0 Tw +(the )Tj +/TT11 1 Tf +1.9155 0 TD +($ezjail_ftphost)Tj +/TT6 1 Tf +9.0015 0 TD +[()-250(option in)]TJ +/TT11 1 Tf +4.5273 0 TD +(ezjail.conf)Tj +/TT6 1 Tf +6.6011 0 TD +(\(8\).)Tj +/TT4 1 Tf +-26.1454 -1.8 TD +(ezjail-admin )Tj +7.4513 0 TD +(install)Tj +/TT3 1 Tf +4.9673 0 TD +<00e9>Tj +/TT4 1 Tf +0.6001 0 TD +(ms)Tj +/TT6 1 Tf +-8.9186 -1.2 TD +[(Same beha)20(vior as abo)15(v)15(e)0(,)-250(e)15(xcept that man pages and sources are installed in the base jail.)]TJ +/TT4 1 Tf +-4.1 -1.8 TD +(ezjail-admin )Tj +7.4513 0 TD +(install)Tj +/TT3 1 Tf +4.9673 0 TD +<00e9>Tj +/TT4 1 Tf +0.6001 0 TD +(p)Tj +/TT6 1 Tf +-8.9186 -1.2 TD +0.1067 Tw +(Same as the )Tj +/TT9 1 Tf +5.3465 0 TD +0 Tw +()Tj +/TT6 1 Tf +0.5562 0 TD +0.1066 Tw +[(rst e)15(xample, b)20(ut use)]TJ +/TT11 1 Tf +8.6395 0 TD +0 Tw +(portsnap)Tj +/TT6 1 Tf +4.8008 0 TD +0.1066 Tw +[(\(8\) to fetch and e)15(xtract a full FreeBSD ports tree)]TJ +-19.3429 -1.2 TD +0 Tw +(from)Tj +/TT11 1 Tf +2.2498 0 TD +(portsnap.FreeBSD.org)Tj +/TT6 1 Tf +12.308 0 TD +0.0561 Tw +(into the base jail. This is necessary if you plan to install ports)Tj +-14.5578 -1.2 TD +0 Tw +(at later time into service jails.)Tj +/TT4 1 Tf +-4.1 -1.8 TD +(ezjail-admin )Tj +7.4513 0 TD +(install)Tj +/TT3 1 Tf +4.9673 0 TD +<00e9>Tj +/TT4 1 Tf +0.6001 0 TD +(P)Tj +/TT6 1 Tf +1.2001 0 TD +(\(note uppercase P\))Tj +-10.1187 -1.2 TD +0.0451 Tw +[(Only fetch the current v)15(ersion of the ports tree, adding it to the base jail.)-545.1(This allo)25(w)-295.1(t)0(o)-295.1(either add)]TJ +T* +0 Tw +(the ports tree after the initial installation or update the ports tree in the base jail.)Tj +-4.1 -1.8 TD +(Install from a disk image)Tj +4.1 -1.2 TD +[(Mount and use a do)25(wnloaded)]TJ +/TT11 1 Tf +12.0004 0 TD +(disc1.iso)Tj +/TT6 1 Tf +5.6509 0 TD +(CDRom image )Tj +/TT9 1 Tf +6.2773 0 TD +()Tj +/TT6 1 Tf +0.5562 0 TD +(le.)Tj +/TT11 1 Tf +-21.4848 -1.8 TD +(mdconfig -a -f /usr/8.0-RELEASE-i386-disc1.iso md0)Tj +0 -1.2 TD +(mount -v -t cd9660 /dev/md0 /mnt)Tj +T* +(cd /mnt/8.0-RELEASE)Tj +T* +(ezjail-admin install -h file:// -sm)Tj +/TT6 1 Tf +-3 -1.8 TD +(When the installation )Tj +/TT9 1 Tf +8.8032 0 TD +()Tj +/TT6 1 Tf +0.5562 0 TD +[(nishes, use the follo)25(wing to release the)]TJ +/TT11 1 Tf +15.6933 0 TD +(disc1.iso )Tj +5.651 0 TD +(md0)Tj +/TT9 1 Tf +2.0503 0 TD +()Tj +/TT6 1 Tf +0.5562 0 TD +(le.)Tj +/TT11 1 Tf +-30.3101 -1.8 TD +(cd /usr)Tj +0 -1.2 TD +(umount /mnt)Tj +T* +(mdconfig -d -u md0)Tj +/TT6 1 Tf +-7.1 -1.8 TD +(Install from a local directory)Tj +4.1 -1.2 TD +0.0174 Tw +[(T)80(o)80( )-80(fetch the RELEASE base )]TJ +/TT9 1 Tf +11.7536 0 TD +0 Tw +()Tj +/TT6 1 Tf +0.5562 0 TD +0.0174 Tw +[(les manually)65(,)-267.4(create a)]TJ +/TT11 1 Tf +8.9167 0 TD +0 Tw +(.netrc)Tj +/TT9 1 Tf +3.868 0 TD +()Tj +/TT6 1 Tf +0.5562 0 TD +0.0175 Tw +(le in your home directory and pop-)Tj +-25.6506 -1.2 TD +0 Tw +(ulate it with this.)Tj +/TT11 1 Tf +3 -1.8 TD +(machine ftp2.jp.FreeBSD.org)Tj +0 -1.2 TD +(login anonymous)Tj +T* +(password FBSD@home.com)Tj +T* +(macdef init)Tj +T* +(prompt off)Tj +T* +(cd /pub/FreeBSD/releases/i386/8.0-RELEASE)Tj +T* +(epsv4 off)Tj +T* +[($)-600(getdir base kernels manpages src)]TJ +T* +(quit)Tj +T* +(macdef getdir)Tj +T* +[(!)-600(mkdir $i)]TJ +T* +(mreget $i/)Tj +/TT14 1 Tf +6.001 0 TD +<009b>Tj +/TT6 1 Tf +-9.001 -1.8 TD +0.0818 Tw +[(Then issue this command on the command line. If the FTP do)25(wnload times out re-issue the FTP)]TJ +0 -1.2 TD +-0.0001 Tc +0.0001 Tw +[(command again to resume where it left of)24.9(f.)]TJ +/TT11 1 Tf +3 -1.8 TD +0 Tc +0 Tw +(mkdir /usr/8.0-RELEASE)Tj +0 -1.2 TD +(cd /usr/8.0-RELEASE)Tj +T* +(ftp -v ftp2.jp.FreeBSD.org)Tj +T* +(ezjail-admin install -h file:// -sm)Tj +/TT6 1 Tf +-10.1 -4.8 TD +17.775 Tw +[(BSD January)-250(15, )17775(2011)-19470(6)]TJ +ET +endstream +endobj +29 0 obj +<< +/ProcSet [/PDF /Text ] +/Font << +/TT3 18 0 R +/TT4 5 0 R +/TT6 6 0 R +/TT8 7 0 R +/TT9 8 0 R +/TT11 9 0 R +/TT14 26 0 R +>> +/ExtGState << +/GS1 10 0 R +>> +>> +endobj +31 0 obj +<< +/Length 8340 +>> +stream +BT +/TT6 1 Tf +10 0 0 10 72 744 Tm +0 g +/GS1 gs +0 Tc +-0.0834 Tw +[(EZJ)60(AIL \(7\))-12017.9(User)55(s)-250(Supplementary )-83.4(Documents)-12017.9(EZJ)60(AIL \(7\))]TJ +7.1 -4.8 TD +0.0468 Tw +[(Use this option to tar)18(get the 8.0-RELEASE )]TJ +/TT9 1 Tf +17.8628 0 TD +0 Tw +()Tj +/TT6 1 Tf +0.5562 0 TD +0.0468 Tw +(les you FTPed as the source of the running binaries)Tj +-18.419 -1.2 TD +0.0222 Tw +(used to populate the base jail. In addition the man pages and sources will be installed into the base)Tj +T* +0 Tw +(jail.)Tj +/TT2 1 Tf +-5.9 -2.4 TD +0.0625 Tw +[(Fr)18(om Sour)18(ce Installation and Update)]TJ +/TT6 1 Tf +1.8 -1.2 TD +0 Tw +(The)Tj +/TT4 1 Tf +1.8663 0 TD +(update)Tj +/TT6 1 Tf +3.9122 0 TD +0.0617 Tw +(is used to both install or update from source the base jail, and for updating the base jail from)Tj +-5.7785 -1.2 TD +0 Tw +(binary packages.)Tj +/TT4 1 Tf +0 -1.8 TD +(ezjail-admin )Tj +7.4513 0 TD +(update)Tj +/TT3 1 Tf +4.3672 0 TD +<00e9>Tj +/TT4 1 Tf +0.6001 0 TD +(b)Tj +/TT6 1 Tf +-8.3186 -1.2 TD +0.1178 Tw +[(Build and install a w)10(orld from source. The sources are tak)10(en from)]TJ +/TT11 1 Tf +27.9692 0 TD +0 Tw +(/usr/src)Tj +/TT6 1 Tf +5.1686 0 TD +0.1178 Tw +[(\(b)20(ut see the)]TJ +/TT3 1 Tf +5.3594 0 TD +0 Tw +<00e9>Tj +/TT4 1 Tf +0.6001 0 TD +(s)Tj +/TT9 1 Tf +-39.0973 -1.2 TD +()Tj +/TT6 1 Tf +0.5562 0 TD +0.062 Tw +(ag\). This can be used both for creating the initial base jail, and for updating it after the host has)Tj +-0.5562 -1.2 TD +0 Tw +(been upgraded.)Tj +/TT4 1 Tf +-4.1 -1.8 TD +(ezjail-admin )Tj +7.4513 0 TD +(update)Tj +/TT3 1 Tf +4.3672 0 TD +<00e9>Tj +/TT4 1 Tf +0.6001 0 TD +(u)Tj +/TT6 1 Tf +-8.3186 -1.2 TD +0.0418 Tw +[(Update the base jail to the ne)15(xt release using)]TJ +/TT11 1 Tf +18.4389 0 TD +0 Tw +(freebsd-update)Tj +/TT6 1 Tf +8.4014 0 TD +0.0418 Tw +(\(8\) \(i.e. using binary packages\).)Tj +-26.8403 -1.2 TD +0 Tw +[(This may be used only to update an e)15(xisting installation.)]TJ +/TT4 1 Tf +-4.1 -1.8 TD +(ezjail-admin )Tj +7.4513 0 TD +(update)Tj +/TT3 1 Tf +4.3672 0 TD +<00e9>Tj +/TT4 1 Tf +0.6001 0 TD +(U )Tj +/TT3 1 Tf +1.3668 0 TD +<00e9>Tj +/TT4 1 Tf +0.6001 0 TD +(s)Tj +/TT8 1 Tf +1.2001 0 TD +(8.0-RELEASE)Tj +/TT6 1 Tf +-11.4855 -1.2 TD +0.0237 Tw +[(Upgrade the base jail to the host system)55(s)-273.7(release using)]TJ +/TT11 1 Tf +22.5096 0 TD +0 Tw +(freebsd-update)Tj +/TT6 1 Tf +8.4014 0 TD +0.0237 Tw +(\(8\). This may be used)Tj +-30.911 -1.2 TD +0.1517 Tw +[(only to upgrade an e)15(xisting installation. T)70(ell freebsd-update which OS v)15(ersion to e)15(xpect in the)]TJ +T* +0 Tw +(basejail via the)Tj +/TT3 1 Tf +6.4142 0 TD +<00e9>Tj +/TT4 1 Tf +0.6001 0 TD +(s)Tj +/TT6 1 Tf +1.2001 0 TD +(option.)Tj +-8.2144 -1.8 TD +0.0405 Tw +(Note: Check)Tj +/TT11 1 Tf +5.3574 0 TD +0 Tw +(uname)Tj +/TT6 1 Tf +3.0005 0 TD +0.0405 Tw +(\(1\) and especially the)Tj +/TT11 1 Tf +8.9916 0 TD +0 Tw +(UNAME_r)Tj +/TT6 1 Tf +4.4912 0 TD +0.0405 Tw +[(en)40(vironment v)25(ariable to upgrade to dif)25(ferent)]TJ +-21.8406 -1.2 TD +0 Tw +[(v)15(ersions.)]TJ +/TT2 1 Tf +-5.9 -2.4 TD +0.0625 Tw +[(J)15(ail Cr)18(eation Examples)]TJ +/TT4 1 Tf +1.8 -1.2 TD +0 Tw +(ezjail-admin )Tj +7.4513 0 TD +(create)Tj +/TT8 1 Tf +4.2006 0 TD +(www.example.com 10.0.10.1)Tj +/TT6 1 Tf +-7.5519 -1.2 TD +0.1052 Tw +[(Create a ne)25(w)-355.2(jail. The jail )]TJ +/TT9 1 Tf +11.1848 0 TD +0 Tw +()Tj +/TT6 1 Tf +0.5562 0 TD +0.1052 Tw +(les will reside in directory)Tj +/TT11 1 Tf +11.2173 0 TD +0 Tw +(www_example_com)Tj +/TT6 1 Tf +9.3566 0 TD +(in)Tj +/TT11 1 Tf +1.1329 0 TD +(/usr/jails)Tj +/TT6 1 Tf +6.001 0 TD +(,)Tj +-39.4487 -1.2 TD +0.0244 Tw +[(unless the v)25(ariable )]TJ +/TT11 1 Tf +8.1839 0 TD +0 Tw +($ezjail_jaildir)Tj +/TT6 1 Tf +9.0015 0 TD +0.0244 Tw +[()-274.4(has been set to some other v)25(alue. The jail will only be)]TJ +-17.1854 -1.2 TD +0.0695 Tw +[(allo)25(wed to use the gi)25(v)15(e)0(n)-319.6(I)0(P)-319.6(address. A w)10(arning will be displayed if this IP address is not already)]TJ +T* +0 Tw +(con)Tj +/TT9 1 Tf +1.4438 0 TD +()Tj +/TT6 1 Tf +0.5562 0 TD +0.0655 Tw +[(gured in the host, or if some netw)10(ork daemon is already listening on this address. The name)]TJ +-2 -1.2 TD +0.2352 Tw +(of the jail which will appear in the)Tj +/TT4 1 Tf +15.8772 0 TD +0 Tw +(list)Tj +/TT6 1 Tf +2.8856 0 TD +0.2351 Tw +[(command or which will need to be gi)25(v)15(e)0(n)-485.1(t)0(o)-485.1(the)]TJ +/TT4 1 Tf +-18.7628 -1.2 TD +0 Tw +(console)Tj +/TT6 1 Tf +4.4507 0 TD +(command is)Tj +/TT8 1 Tf +5.1104 0 TD +(www.example.com)Tj +/TT6 1 Tf +9.0015 0 TD +(.)Tj +/TT4 1 Tf +-22.6625 -1.8 TD +1.0528 Tw +(ezjail-admin create)Tj +/TT3 1 Tf +14.6241 0 TD +0 Tw +<00e9>Tj +/TT4 1 Tf +0.6001 0 TD +(f)Tj +/TT8 1 Tf +2.6029 0 TD +(example)Tj +/TT3 1 Tf +6.3701 0 TD +<00e9>Tj +/TT4 1 Tf +0.6001 0 TD +(r)Tj +/TT8 1 Tf +2.6029 0 TD +1.4028 Tw +(webserver www.example.com)Tj +-23.3001 -1.2 TD +0 Tw +(10.0.10.2,2001:db8:1:9243::80)Tj +/TT6 1 Tf +T* +0.0101 Tw +[(Create a ne)25(w)-260.1(jail, placing it in directory)]TJ +/TT11 1 Tf +16.1886 0 TD +0 Tw +(webserver)Tj +/TT6 1 Tf +5.661 0 TD +0.0101 Tw +[(instead of deri)25(ving the directory name of the)]TJ +-21.8496 -1.2 TD +0.0138 Tw +[(jail from its host name.)-513.9(The jail will be created with the )]TJ +/TT9 1 Tf +22.8819 0 TD +0 Tw +()Tj +/TT6 1 Tf +0.5561 0 TD +[(a)20(v)20(our)]TJ +/TT8 1 Tf +2.5007 0 TD +(example)Tj +/TT6 1 Tf +4.2007 0 TD +0.0138 Tw +[(.)-513.8(This jail will be gi)25(v)15(e)0(n)]TJ +-30.1394 -1.2 TD +0 Tw +[(tw)10(o)-250(I)0(P)-250(addressses; this is possible only since FreeBSD 7.2.)]TJ +/TT4 1 Tf +-4.1 -1.8 TD +(ezjail-admin )Tj +7.4513 0 TD +(create)Tj +/TT3 1 Tf +4.3672 0 TD +<00e9>Tj +/TT4 1 Tf +0.6001 0 TD +(i )Tj +/TT3 1 Tf +1.3668 0 TD +<00e9>Tj +/TT4 1 Tf +0.6001 0 TD +(s)Tj +/TT8 1 Tf +1.2001 0 TD +(600M sandbox2 10.0.10.4)Tj +/TT6 1 Tf +-11.4855 -1.2 TD +0.869 Tw +[(This creates a ne)25(w)]TJ +/TT9 1 Tf +11.1142 0 TD +0 Tw +()Tj +/TT6 1 Tf +0.5562 0 TD +0.8691 Tw +[(le-based jail ha)20(ving a )]TJ +/TT9 1 Tf +12.2308 0 TD +0 Tw +()Tj +/TT6 1 Tf +0.5562 0 TD +-0.0002 Tc +0.8693 Tw +[(le size of 600 me)14.8(gabytes in)]TJ +/TT11 1 Tf +-24.4573 -1.2 TD +0 Tc +0 Tw +(/usr/jails/sandbox2.img)Tj +/TT6 1 Tf +13.8022 0 TD +0.0613 Tw +[(.)-561.3(A)0(n)-311.3(empty directory)65(,)]TJ +/TT11 1 Tf +9.2613 0 TD +0 Tw +(/usr/jails/sandbox2)Tj +/TT6 1 Tf +11.4019 0 TD +0.0613 Tw +[(,)-311.3(will be cre-)]TJ +-34.4653 -1.2 TD +0 Tw +(ated, and used as a mount point when starting the jail.)Tj +/TT4 1 Tf +-4.1 -1.8 TD +(ezjail-admin )Tj +7.4513 0 TD +(create)Tj +/TT3 1 Tf +4.3672 0 TD +<00e9>Tj +/TT4 1 Tf +0.6001 0 TD +(c bde)Tj +/TT3 1 Tf +3.7671 0 TD +<00e9>Tj +/TT4 1 Tf +0.6001 0 TD +(s)Tj +/TT8 1 Tf +1.2001 0 TD +(600M sandbox3 10.0.10.5)Tj +/TT6 1 Tf +-13.8858 -1.2 TD +0.2102 Tw +[(This creates a ne)25(w)]TJ +/TT9 1 Tf +8.4789 0 TD +0 Tw +()Tj +/TT6 1 Tf +0.5562 0 TD +0.2102 Tw +(le based image jail, with)Tj +/TT11 1 Tf +11.0481 0 TD +0 Tw +(gbde)Tj +/TT6 1 Tf +2.4004 0 TD +0.2102 Tw +(\(4\) encryption. During the gbde creation)Tj +-22.4835 -1.2 TD +0.0567 Tw +[(process you are ask)10(ed to enter a passphrase that is used as the prime seed v)25(alue of the encryption)]TJ +T* +0.0585 Tw +[(process. )-250(Remember)-308.5(this passphrase, you will be ask)10(ed for the passphrase e)25(v)15(ery time you w)10(ant to)]TJ +T* +0.1061 Tw +[(start this jail. As the)15(y)-356.2(require administrator interaction, jails back)10(ed by an encrypted )]TJ +/TT9 1 Tf +35.2054 0 TD +0 Tw +()Tj +/TT6 1 Tf +0.5562 0 TD +0.1061 Tw +(le are not)Tj +-35.7615 -1.2 TD +0 Tw +(automatically started when the system boots.)Tj +/TT4 1 Tf +-4.1 -1.8 TD +(ezjail-admin )Tj +7.4513 0 TD +(create)Tj +/TT3 1 Tf +4.3672 0 TD +<00e9>Tj +/TT4 1 Tf +0.6001 0 TD +(c)Tj +/TT8 1 Tf +1.2001 0 TD +(zfs)Tj +/TT3 1 Tf +2.5669 0 TD +<00e9>Tj +/TT4 1 Tf +0.6001 0 TD +(s)Tj +/TT8 1 Tf +1.2001 0 TD +(1G sandbox4 em1\\|10.0.10.6)Tj +/TT6 1 Tf +-13.8857 -1.2 TD +0.039 Tw +[(This creates a ne)25(w)-289(zfs )]TJ +/TT9 1 Tf +9.2491 0 TD +0 Tw +()Tj +/TT6 1 Tf +0.5562 0 TD +-0.0001 Tc +0.0391 Tw +[(lesystem based jail with a def)9.9(ault quota of 1 gigabyte using lzjb compres-)]TJ +-9.8053 -1.2 TD +0 Tc +0.0134 Tw +(sion. It uses the parent ZFS )Tj +/TT9 1 Tf +11.2738 0 TD +0 Tw +()Tj +/TT6 1 Tf +0.5562 0 TD +0.0134 Tw +(lesystem con)Tj +/TT9 1 Tf +5.2068 0 TD +0 Tw +()Tj +/TT6 1 Tf +0.5562 0 TD +0.0134 Tw +(gured in the )Tj +/TT11 1 Tf +5.5104 0 TD +0 Tw +($ezjail_jailzfs)Tj +/TT6 1 Tf +9.0015 0 TD +0.0133 Tw +[()-263.4(v)25(ariable to create)]TJ +-32.1047 -1.2 TD +0 Tw +(the )Tj +/TT9 1 Tf +1.4844 0 TD +()Tj +/TT6 1 Tf +0.5561 0 TD +0.0127 Tw +[(lesystem in. The jail command will add the ip address 10.0.10.6 as an alias on the de)25(vice em1)]TJ +-9.1405 -4.8 TD +17.775 Tw +[(BSD January)-250(15, )17775(2011)-19470(7)]TJ +ET +endstream +endobj +32 0 obj +<< +/ProcSet [/PDF /Text ] +/Font << +/TT2 4 0 R +/TT3 18 0 R +/TT4 5 0 R +/TT6 6 0 R +/TT8 7 0 R +/TT9 8 0 R +/TT11 9 0 R +>> +/ExtGState << +/GS1 10 0 R +>> +>> +endobj +34 0 obj +<< +/Length 1838 +>> +stream +BT +/TT6 1 Tf +10 0 0 10 72 744 Tm +0 g +/GS1 gs +0 Tc +-0.0834 Tw +[(EZJ)60(AIL \(7\))-12017.9(User)55(s)-250(Supplementary )-83.4(Documents)-12017.9(EZJ)60(AIL \(7\))]TJ +7.1 -4.8 TD +0 Tw +(before starting the jail.)Tj +/TT2 1 Tf +-7.1 -2.4 TD +(FILES)Tj +/TT11 1 Tf +3 -1.2 TD +(EZJAIL_PREFIX/bin/ezjail-admin)Tj +T* +(EZJAIL_PREFIX/etc/rc.d/ezjail)Tj +T* +(EZJAIL_PREFIX/etc/ezjail.conf)Tj +T* +(EZJAIL_PREFIX/share/examples/ezjail/)Tj +T* +(EZJAIL_PREFIX/etc/ezjail/)Tj +/TT14 1 Tf +15.0024 0 TD +<009b>Tj +/TT11 1 Tf +-15.0024 -1.2 TD +(/usr/etc/fstab.)Tj +/TT14 1 Tf +9.0015 0 TD +<009b>Tj +/TT2 1 Tf +-12.0015 -2.4 TD +0.1666 Tw +(SEE ALSO)Tj +/TT11 1 Tf +3 -1.2 TD +0 Tw +(ezjail-admin)Tj +/TT6 1 Tf +7.2012 0 TD +(\(8\),)Tj +/TT11 1 Tf +1.666 0 TD +(ezjail.conf)Tj +/TT6 1 Tf +6.6011 0 TD +(\(5\),)Tj +/TT11 1 Tf +1.666 0 TD +(jail)Tj +/TT6 1 Tf +2.4004 0 TD +(\(8\),)Tj +/TT11 1 Tf +1.666 0 TD +(nullfs)Tj +/TT6 1 Tf +3.6006 0 TD +(\(4\),)Tj +/TT11 1 Tf +1.666 0 TD +(zfs)Tj +/TT6 1 Tf +1.8003 0 TD +(\(8\).)Tj +-28.2676 -1.8 TD +(Interesting additional tools include: )Tj +/TT11 1 Tf +14.8853 0 TD +(ports-mgmt/jailaudit)Tj +/TT6 1 Tf +12.0019 0 TD +(.)Tj +/TT2 1 Tf +-29.8872 -2.4 TD +[(A)50(UTHOR)]TJ +/TT6 1 Tf +3 -1.2 TD +(Dirk Engling)Tj +/TT14 1 Tf +5.4995 0 TD +<009d>Tj +/TT6 1 Tf +0.3291 0 TD +[(erdgeist@erdgeist.or)18(g)]TJ +/TT14 1 Tf +8.817 0 TD +<009c>Tj +/TT6 1 Tf +0.3291 0 TD +(.)Tj +-14.9747 -1.8 TD +0.0755 Tw +(The man page is based on a draft by JoeB)Tj +/TT14 1 Tf +17.6944 0 TD +0 Tw +<009d>Tj +/TT6 1 Tf +0.3291 0 TD +[(joeb1@a1po)25(weruser)55(.com)]TJ +/TT14 1 Tf +10.1431 0 TD +<009c>Tj +/TT6 1 Tf +0.6545 0 TD +0.0754 Tw +[(and w)10(as re)25(written by Frederic Perrin)]TJ +/TT14 1 Tf +-28.8211 -1.2 TD +0 Tw +<009d>Tj +/TT6 1 Tf +0.3291 0 TD +(frederic.perrin@resel.fr)Tj +/TT14 1 Tf +9.4707 0 TD +<009c>Tj +/TT6 1 Tf +0.3291 0 TD +(.)Tj +-13.1289 -43.8 TD +17.775 Tw +[(BSD January)-250(15, )17775(2011)-19470(8)]TJ +ET +endstream +endobj +35 0 obj +<< +/ProcSet [/PDF /Text ] +/Font << +/TT2 4 0 R +/TT6 6 0 R +/TT11 9 0 R +/TT14 26 0 R +>> +/ExtGState << +/GS1 10 0 R +>> +>> +endobj +10 0 obj +<< +/Type /ExtGState +/SA false +/SM 0.02 +/OP false +/op false +/OPM 1 +/BG2 /Default +/UCR2 /Default +/HT /Default +/TR2 /Default +>> +endobj +36 0 obj +<< +/Type /FontDescriptor +/Ascent 753 +/CapHeight 562 +/Descent -246 +/Flags 262151 +/FontBBox [-113 -250 749 801] +/FontName /JFOEBE+Courier-Bold +/ItalicAngle 0 +/StemV 133 +/XHeight 439 +/StemH 84 +/FontFile2 37 0 R +>> +endobj +37 0 obj +<< +/Filter /FlateDecode +/Length 24055 +/Length1 172192 +>> +stream +HMlgJycҀI8vbqK^qvb'vlNY׮v:i!@А4HLoB;pav$8p@!|W> >돫 xl*yŻ] _AոO~ϼxz++AͪgoߺJ7}_{c~ڹ_W~wܹu_߫w'?wUkY߱;?h=~|їe^c]wyÇ F|{.8U{Ͽ?k౿Ž[|/+? c[?Ƃ+qoW7?GG/I3yM~hyw}W ugz|7557{$:Fc ~c`lvxʸq]si= wC7|c׌]noe~f?GA0R0???????????C!?C!iiaa0?a0?G#?G#YYYYYYYYYYYYY(?GQ(?xb<1O'xb<1Ϝ98O'y>>}}}}}}}}}:_u:_7 o7 o7444444449s @΁3r9s @΁C9r9sC=Pχz>sK-=sK-=sK-=s[m=s[m=s[m=s[Gz>󑞏|########cccccccccccc~ܠwEw;w].wOOOOOOOOOOOOO{={=}>???????????????C!?C!?G#?GwyvIVU_(Yx <+ԕs +2bV@$%)DE%^k^m׶?>ws_ %? 1c? q?8q? 'O? 'O?$I'O? +)SO? +)SO?4iO?43g? 3g?,Yg?,Y?9s?? y?E|)SħO">E|)SħO >%|J)S§O<%|J2>e|)SƧO2>e|SO +>P +>|*T +Ya?gU~V*Ye?g_ſ 5k_ÿ 5k_e_e_e_ǿ:u_ǿ: 7o 7o&yiI&yiI&yiE1-"O<-"O<-"O(g~.~-Na {Xc? {B_=%aO {Vs^U߄C߅,_)5a +{]lq/gW$>!3o {Dؗ}nYavlWf󾺊5_gOw}s;z*vVE}oUY~R+~,c¾8ςZ˦;$ ¾/ߕy|TVaʚG +GZUn~gk*e+q{[<\^yQrQ ^x=X{_~{߃E{sT'~+Wnv;NYυ=(!a!oֈ%,&y#ȼ? +N'yO-HXia0]xS؟5" ¾&~(~$gA(lar RN +)=+lga ¶m/]-la; +o-;3;3]&h}O߁0k 8Pa ;X!v#%Xa ;^dމk'KHf|smv0Â׌/X3Pb6 Hإ.v+mvk]+5׌H –ńŅ%eɛ0( ++ +  + [V66666vGrD䞉={f,*=CTz Q3DJ>"*=CTzMQr/EOIyvt[A5Ϯv<[^S^ωVsv6sx~>9Z4-lQEV^':Mv*6a C;%naW}/a +{H<"Qa {\ž=#Ya {^ ^W*5a {C؛m[%"wBDU"rDkzأ`+{{>ׁ= UCo?~_iqzPC/ ~A_WDi03` XkO4X.gڂv:X;`g}L0SI?K +`W]v-`_6lhRq`&MV6l +X%T*i`fV v;ܻ^W`qf\, 0 +̮A`+ )@>`O )-r\)0W +̕O` `Kf9S`z`NR3L*00IfRy fR '0uN 5&* 3+0 +̸3dhZ[`o`.a#X؟>;Y^ e`' +!X3G``; I+ |o |o |o:u XX̂E`I"z y."`0[ VR0@A``0`_"`_ +a`W  +`#`50a ̰fXs̵Zs\k -o6lh1`7+6 lD& Vk˝{ p.8!8!![! ! !!!p'rv7~  x0!d2z;B!{C!dwg C!g4d` +5Xg l!?[r\lsk ~s``gj!Zȭr=\`} Zȼ2k!Zȼb0ȷ|k!A`o-[ Be-dY YBe-dY YBe-dY; ,k!ZȲ,k!Zȷ,k!ZȲ,k!ڑ`e-dY YB)-dJ B)md)`U +v4`3f mg6No-l=`[8v ؓ`k b{l=F0i,4MA SF#Ȋd2`^ ,e:`drU'|A.<}7>AGcG#zz==>A_Fo#m}4 M|?Vt2J,׳L`gLt`tzԫyan2j*Gkreiqj:^W7W_S:WM32*ߐYJx]F5 w j j>m?&gvy:=m}W R#p}O6A֒] +ZTCM^?$d`oN˾/g'=wɾ J?PeNjjչ^e¶^Ϋ{^;{}:#}(:YNS;yug8{m9Wwsz 3']O ū b8XRs:wղ +nireA{ (rl{0v˃^nppۭu=vۃ>v5n77v~n0v <;)IhR1-:W"ViQm#9jԎx]իsQU,RsMXnT{MjkHV}?qm1UgDYuzjүVUժPCgiϘ땱7?*1X+'gX"jIlMzGR 5.Ѩ +U{zE՛URrQj刮 3%AUkeij_q$TڢktB;jڜPqU$udj:{ )h[ ؆ZP)C!@`#_C G +PKc +c5eNE&LeFed,E)"F"2LP~{%/cgw޳g9YMn2kD+nօZicO(@84*+(RգT c3Jj1mW@_s&$EjW/yQ}'%8` +g|KA@kAO2d5p + @/{&犖M > $߲LJF +`1l`W)u:͠i #N`O+d=-ls!9|ҟu]h\alJa"$x`tb-l5h6q,}^!y>I2-S~*ix-}v^ ]}KB{ŐO<G0OTO |i+ +-}KZuk]uZ~je˜>d+ N۝ ڶ+SP\~hS7]<& IP.hڍω@;z1ryQP3~n֜掴ZD_-5hg븧Ԭ=Vhg^jҨP?#߬K?-WwzULV+ތn&F\U}L3me g:Ju_z2oFe"W8u3s&w&-dNm琕١\y7|w+%ߚFI[篡OZ*ߒÇo` E5 +Uob0c[gz' ^$Fi4Bh;cc>DI 0&7Oސ?kh菁Tv`p [*SHD;Ņз!`hrN5oUk,qm] 5sg.rg\]3øzubô\ٖ~Jegi\q~S*!uw.oW?4z}EtOl+0.W:r+Bpgge/ u߂ ܹu;ކ i^<7?pP<縞]YML W<N&{u'b}T q˙gQK3'3([sqY}Gl}Z%'lX +x`,0竌&$;tNs^o8.e>Tksi +`Xb]yFPsQQ78IGP&RZtRh"J6RD[tm mfl1x Sz0G!ѢFy"]=i%J fKsfkeIjMD$j|VDwx}H"6B1%o:h6CwSsyᜦU($T&tiQ?2B9xw1-MHP_w?_Iǣ#,/ o3AZ ԯ.ij.}[* 2pM9Lto=(`DJA;YS{x(`,zӀє꟤qxdr8x }}I4~*ߥGUIO{@1l #k[jgO<"-%ށ8wa{Rq2N!Klp6h8SՉ;oj:O:SwG31f:d(1CϧbxGvg꒥ޓe$.NĻCOGzO/$N pJUt?Mm| guˑC2Y=;<Hg^XuuA/$.HL:>XL=Kջ?-#mZWk=|.Fez>ĕrjz/PC{=m6F!n9*C/FfU6:+_ +v0}JwFħ~{w<{:<_\vy>Fըxkzk?"Dmt]1T_LU {s}7r}#)d D AH@Q"5`d؟Y9ΰOlrv&r>α?3~fƯ_RJ(EwK2~_7_J] MdRl??03Hˮ3Σ0p#cb##2, <ć1Ixrg2cJ{So"cZ_c,OtS.%䩀QgtJJe1f)]B[9%17`2F͌URԽṙ|niDHcT63 򌳙q|HSj"'L+ԀiΘrLa#̐Y62#vO2Uy4tkls,OG2Ǚu#!馘 +&ަ8on!AYI"fb.1XXZ2Sy,1.*wt/t_KK_ bUR(ɪtwT{Gaz,A:MIezT_Obj+=+/6}.>!2f+Y_yH6PE!P]˯J//MT +\}š6#6' $"&!5UG +esZ\R--U:J'+z*I<ړlGGڻM\R`Hv.Įnf.qHB|_<{p^CpW IGқ* ay~}#ٗ1)fD^`P0pH(h*IsPQ1PS3~96R/$G)l1*"j1tL߳J_A6b#N$N2=*R~}Mkn)$'wgggg*C4tY/9CyBpڛf)׮ن<ۡW|,:}{}́>x Uh7! ~8_>8q Gh> -:BIoFtbrjp|gS '+sxB8.±Š;.c|"5jz諦v\!hTm7th1tDωA]FQ&/E3", nf*PucqǢĭ<@bPpcq=$\cHo<:q%Q%xmp&~G0@Nza{4jEC[qw'nEvǒ/b~cc)XD>Iq?֮'Xzљ\BKxʣHGv]B:z['t~['؉N҅'qBI `F^'~sNt@_BR;ы9cNݗ 8= 8ݾ u։'kAp#Jsw ׍'ORR7 wԃ{ύutc<>9ڍpx<utnjo8&\hM>Vqf\7XJ1ox(f<2vCcM2` u+XnjZn,\o`:dz`'Qp_`Mqg_Zgg_> #9X؇"'p_x940oa9XC/rýϭ8][n=h=WqkEVEz'߳imV9BUB[DLWmJĐ'&^Q5H%S4*iVwSI"fbnP*L4"c)&zjRsڴi+Dmu:RTbCbp\ڴiLTƤ2.-2eJwfZ;;;ݮӦMcו߇w(ѝTobm1Ŕn]L_R"cJnUbaLW m1]%J*1X8x#jRS_iǭ:\mڔEGi1SYg.qq>qB"bA9E%!>m1n29QW mڴo`QDYIQ[XڴiLTHc]F[dL˔n2 KS čħoiӦ1уl C;Fj'Ym1Ŕn].c1՘i̎:c37 N|;g6_Q[?g%R!B $t"M* H."M(*` d3#3slv=յz6il42X(3Yl17榜V)'l2Ȧq;Yrv\AYrR9oR,F +KcYrUj+7ݬ..ĹuS^iRjևb吺 fP6L9Kp10sh.Jj,z@‚ wqN/aэ=c#K6d>c+]㣪P;^~WFV2M5fݜӽ[~n%qk9P5dSDNBut.+=}׫zP$9h5;HGƫ=k0_R?\7Vo##)F[ԏu˜|v73[/͇G 3;49R7ṚX "XB}"՝DO3\/\FP /:^)W +Vװ:XO 6Ӽ7vnqT; zPJ=֠w s/~(IwAuXݳ8VG9QnI})OuNi8gȂKkpn\jċpl} ;em韌B݃@ᑮ;VL3T,.nݱ-D!ۥcO.^5\/"-w'TQb10C0K`cIHN(hJ1r *3J}tef9( Tr)Ra:V +ebuAX ӫQ&75[5؂E+)Z:u>;n#Ka{i2E']h`w}]ק=V=Vd[ǽ ŵ ;hЃ,J1İ~b0PB  :~S( GGr=s4XCx1:~K 6NI8TFK{>~kG6N:L%vis9bWcB/6Op>bEB-{NqjK\A\Iʐ+) +܈p3V܆qݸ>'x;gNBG]?!~0VGW]0cB''}O)=MqFK3g ΋Yd.l/:bWeq5yC';o-nr|۠pޕɎ{}_?0臲8ll_6Sp8]8]989 r,Yӏ(?g1✁A!%889KrFpFrFqFs,Y3333,g"gg9dT889+rfpVd暠͜HUE5cwIQf`>M܅. zoXH:|?& ;fNgF8q C\a>{+8FVA6F[E0u'J1Q ם' YKal غ sl0Qo#Uk!IBpwq3lM$NjH̘da៊|cu0 _SQ܋$QbDS2*NC竴UYmZ2 B䤕aO?݃nr2ɨ0 +R{>:eaBqc'6#|8|ZC#|Wq 0lN.uc, #,gF=5r{OYpw"1ZewzE*v t/Uk!I # lgؚHDՐd ꪒ)V#||W$ IrZ$ީ!H:*87cke˵UDJWiγڎCZ2 '¯Y>u0'p>hӐнEQbl=j"X` } i)udf ]rmWp~'8z|?c"&q3yY +J(kLLp {\` +y,b +d9oJy5?lO);^_O\Ϲi<x7swuy +x/gHݸgHBʤD*JwSFNX~C؋b*筼_vV۲J=.]e7!{/ʞ]{V {h9\2X8so rH&A2Xp(x9ANqpe9ANX#e2阆8\L4䬔eWapb8|bOR"~kNv_1~/?9B\3ot.r78 y7!lq$=ٝ3%)R*R-{btA/010>9%\㬑wd<{BvY#Xy+<VK?,'a2-GJ `>!!X9FnZ G9}r a2cedd1>xY¥rgOSx +ޕI2E:?u~B߿ݽܭ#@]9yV7k<33%2j?89s|Il%t_ +TU|>޷\Hewf/KtZ<3NwMbf5鱍~x uDkίoj[, H`;4Ig5@b~̨kJOHl:c;l]v.蒎u"oUvmawݴ퉽O}7;=?5.f~7~ω#QĻn:c}/~і~8z 8&3c#u"!C1E8~׌ĨFFfMr ƶ0sm}̫"o0t<ъ\}T}wUc<^ULG}oU!_ WA {*论ZJ^fj_nB^%}~{96,3y.͵t n623j\Vi6]UEiܸj/6! +I9#ϩv'"M +̧Dccv6`~:Έ<\93jg卞y^MsFύKE.ﳅs~|p^Pu~ZxH8$h{);i"AՕqH+Z_'\x_ 7U7:W$I9"9tm:\}g\8={#wocg{?=R9OTN:S~*r"3!y{.8O!K_\qHjH=EC*7)RR"C*?8S~+c.~;3LìG y2,GힽGg9to=6ˑQ8ݵIRBjr's%;hg5| )a00NWO/ +EEńŅ%%R$aaYa9a0EX_@PHXDQcDž¦f'O +[ +[ [  + v*aй"S&yt1< +y)V aW +|zȋW%p@Hu^:*zr֙<yE?Wâz* bq]%hXRaMɒ> pUy#JyJaXV>+țRΛj'[aXI z=UyUuitTC٬+mҕNֵ穎;[W_z:fdk_:!w:{Ȼ#:n;AL M:?yK5_pZ/^ OO|͖VuW|`~jd{ϿSzOzߋgdl~ +M΁~eoNNL͸: cmlnxNֵ] ]f0n[ӡ[P?#ALנ'(clQj,XbC⸱Xbb;Xpز~jaxVyPq?Q>7_gyq\o[_Oow(> ] +}} : t=::W ԇBO7 ߜw87(~kQPcD(Vdhtqӡm= =}_] 2(Z[}Q@QObs +Q_aY+[+Z+z3d堪k!;kZo[02k~{Ce_k%Zw \s- J?_J;kfPM +5\7 }p5B͠&TDSD3Dsrg \s- jAkAvd?gς!~UQ:T;#~xċ"^B2W@# 5}:vGI3f8݀kٚIȝ\s6Н[妙N7Z!kΘ;;<jmnqT0*Uר$#y8VZV]Uء*>7 J V㰹B5P KP]MSe61>\ʨrJV)jژkU[sjgn07,'D>yW1*VUW5T#XuWo7T5@ TǍiq8a3S%q`0usqӸ3шDDmD'D Cm0jbe\OQͿea Ll*LԌyKpZH i멋EUF ZZr+(auםqO˝mk/3X_m0Sddo@'MԌ۽\?Ww~FO<H34>!Jʞ*􉧪: <50K0FzjhCci 4&dBSiMnj3SSfKh>-ZJ%-崂V*ZMk+ZKhm6Jh;vKh?}C t1:N'$t9:OH2]t Iݢ6eR3+6dGq4p,88B\pQ.ŹD.ť9pY.\+pEĕ +Wj\kpMŵze*kqU!)5S1t7> +(- 3Cww7X(!(2o=߷ήs{+K*դH )$TjK ROKi(4LK i)pHhi+1+tI:K*ݤI)Oޓ2@ ,Cd 2BF(-cd2A&JAJP5TBA͠|"e̔Y2[\'e,EXRY&˵ԾJVn/ (elm.-{dvr@!9,GrBNj>-g䬜%,W\rC>|!_--w|%_7ܓ|('띿oX~?~R+WAarHFbF+q ,}2|`b +b>V63]9Ll30 KL9 +ħXXX؀؄x$ [ ۱; {qqqGq q'q +qgqqq qWq q&>pwp_k|oqx?g_w'xgx?/+H$S1|o150-1=30#3130+1;s0's170/1? f!YEYY%YY,˱<+"+]VfVe5Vgk&k1YazlFl&lfllVl6 g#he cَفىم]ٍ^>~|999C99#99c999ߜ~ȏ8S9N ,<."..2. +\\õ\x&0[۹;{yyyGyy'yygyyyyWP’0Ib]:=Zi]c~բ%J}DEY\vLjԞDpeõW[im P殤Z~yz6H3iJ7r6$5Ʈڼu-T.Qo`X߰F:ﵤk:fچ)QUl!1)-YV1(V4XUV,'\6]S)cel)6˔.D=[D +[l +[&ˁ!%Nq-\fϩ쮺bVf̚Q Y̓ٲdgK1U_`HIc-T4*S^F5(WJ҈ʸ(GL+?W>/g4Ge*xff{|#jV}"D$9MJjռ&S.~Y^2z6~#e;T{i6֪Zy^(Soʫly1mo~W27}%* t ffxf\I>ev2D=_v=H[*/HGy.OٜS}28ao~ܞsLhQ9^܎^['?pC)o=T~:6GSyda?CE&Bem+xn_Gl7fbKݡ?}>h$(G$X> O2wOolJyMF.:ƵnUZ[{jUUj+ͳppWGYB6ͱ3k6vb}K3l6n^4WqS ?;;ОR&4h"hbw~0>wһ;gι3gfL?GWj5uj2whD,IԌ{7Ʒڢ;ͣY׬Ih eG¡}sRYoԞnCp#yT\QQ=xx sU7Glދ,u-: +gL +T{ ~H-y<}U(}}6e`l Yڒ2.;8OnK)MOYgɐ:TzD:o7d$(?+sٛ :>˨tZ 3"&`?0'tN>83p(ć0x|o|O)i>g Hڀ4Fv<컌XW$1o&Ƅj,@tL N^jĨ\4ՙXaI]m} G*ZZ*W,.7MMfw„$$! IHB%Q/*\r(.iEf?R>Tkձbi[6 s*ZAK Nh m}%Gt'8x]Yd)&ji1W(fotי[=ͿP.gϙ'O3/hcGu]۫M0,[A +endstream +endobj +38 0 obj +<< +/Type /FontDescriptor +/Ascent 750 +/CapHeight 676 +/Descent -250 +/Flags 262178 +/FontBBox [-168 -218 1000 935] +/FontName /Times-Bold +/ItalicAngle 0 +/StemV 133 +/XHeight 461 +/StemH 139 +>> +endobj +39 0 obj +<< +/Type /FontDescriptor +/Ascent 753 +/CapHeight 562 +/Descent -246 +/Flags 262179 +/FontBBox [-113 -250 749 801] +/FontName /JFOEBL+Courier-Bold +/ItalicAngle 0 +/StemV 133 +/XHeight 439 +/StemH 84 +/FontFile2 40 0 R +>> +endobj +40 0 obj +<< +/Filter /FlateDecode +/Length 28717 +/Length1 178732 +>> +stream +HMhivG]\|ٙvڦIyi/iiڴIIbwvfQFXtYz񠰈{Ad{؃D=x g=>LXϕ '~6"޻•_o5o\_#?ts# F޺ܽY +/}n9>/8|_|V# F^P]޾y׿~^ W{>o_~t-ӟwW~o 7ΛOtR|O=+޻~O}౿?? F~|yqy_xGh0򪥞|ŻٯT7S +{]X\b>lf4ή^/r_տ^s3Jmv׌k?125QyOhT/k{gzۘDzfј{swcFן0z7Fw}uCy<2qw81V +&'''''''''''C!?C!???%l?a0??G#?GQ(?GQiiiiiiiiiiiii?c1?y}>?1111111111111 )))))))))))))?C!?GwyvIVU_(Yx ws8q?8q? 'O? 'O?$I'O? +)SO? +)S_E_E_EO?4iO?43g? 3g %_ %_ %_ ,Yg?,Yg⿌2/㿌2/㿌2/B9s9s?| +)SO>| +)SħO">E|)S$O">,cO >%|J)S§O >%|)SƧO?TƧO2>e~ +Ya?+g~V +Ya?+W_ſ*UW_ſ*Uk_ÿ 5k_ÿ:u_ǿ:u7o 7o&MbiI&yiI&yiIyZĴ"O<-"O<-"Ou>}ҧ.}ҧ.}'gYo ˀuZu@]e:e〺 X5Y2i<3Z9l6}fs>2i6+y[YL|+1IozÅ!a +M&Naw [=v0y {@؃0y{Tc'=%ia{Vsž,a +{M-w[(laVȝ;!"o9"rD<ț&r#L>yD^gJoJoJoJon+LPPp{aCr/r/r/;Qܑ.v݅!lOa__r_ +OƄ&}Y(}Yx &=M(}m(}m(}wxSIJ!Lag (la;Wy¤g/&=px]"Ra \6 RU®vk|YUa_Ά LnY #(DF +R¨Wn20(q&""6""!& DE+-ĂD䘅ᬧu=OW3=l3A7 +ׂ]v= `76lp XƁVV6l-`n6lm`U`6lLY`v\j6lBE`-l `K[ r V 0 +GV=Iu`O=,wl `^.X~CFo+؏~S^v`v&`~vQc`N5}eF 1bJZ˅2M'~_f+L<9c.gOd+)W4 [C\ҰkJo{ yi0[5`W`Ӱi4qzX#B {0W4+4X +5Xاڀ},3`y``mN,X;`} 0;N}M] lإ`_:X ؕ`W] klh1``&M6l +TJi`U`f6N0xv ^+{:@U +d^)+@ @ oA9BW +J^)zl\"@z +d)N*I:lN*I%0N ɫ`r@^kyM 5*? W +t\+$i`o;߃;w>0Y^(;W>`IO@0 {A7 {@7 {t 3X+`E`g `灝v؅`}[V 6  E/  +e.`W}ltX@5a tXs5Z@5k Zs؍`76l XƁVV6l-`nj_k3LJG`qB8!V}!BÝ`C ~0` C!dw;B!{C><B!?`f`m+`9`m06 l!?[rnm7σ  rj!Zȭlszk!Zȼ2k!ڋ Zȷ|kAo-[ Be-dY YBe-dY YBe0Ȳ,k!ZȲj!ZȲ,k!ZȲ,kGAe-dY YB)-dJ B`SVv;`f6 2v\j6 2]^`-l5`#Z'ց=Bς=lt ƾ9"ȔdcY1A9ߛ!EٹLG,A Do"2`G"xFGGG`O`O`O`O`O`O*``_``````MBI߫$dL߼V{eF1Xg(dY 1Es7oeF]Uֺ,}* o>oz1oқyឫ?_5t˘KLc*u֐4kxVkxVe dvo:s)c&u +aT`?'/A֒G ׻ 2^2 ;:usrXs93ٽKt5*g +77of/SvޛٛzٟCщvɛ;5{ +\ջgȝep?I~].\xs/75*:5:7wC7׹Ώsn.u6wf7rݼ/5| 5G|]G}\zj*579m=y>H_Ο閩_.vax;t2wt8pǕ7c;q;p;?rUղ[=V˃nPPVYnpӭVlZVAoz>8׭}R+=78ϭj j^׭jQ߭R++xjuKJ$VoWWZiѹpZjVQuݠv5]&JUUZb1 Qy:71ش5-7ѤGm1퍿[Qsp3< +ԡJ(3KV^/PM55Ԫj3ZUjh;Ms*[%kdw +K@-ITϴ|Aj'UbW,~&=@EgZ9k+0LjP:Y^5\j*Om5dj:{ )PBoI_bRjiB!Z R~ 5jƔV3 fPSTd2 3*#c)"Gc0A!n{/yݳs={Vvz;E:GmBnKT޴F].S=2V]h8F4H A2or(j-A (Uv(Y%ZC N5肯B??ZDgZ yQ}'%8 ^z<4ˀ[!~5vP%`\Ѳ)b '\[iYH, j;"[S6R% / +{ ,qŬŴm.f=Os+v[ٞ2MiS$Ean^͗F1e+$χ  +R +g2?{1(X D?\p*MXp7]ֱc^ΡPc Cci.G":hgģ|89DWxmG$fs牘1yCxrYԳ~7r%L=|nr\q_91[ߵr{ )[2>/^ *c{\GGX_@'t +9@>e,rD{Q";wz0-#;QX ]f)S?IerD >HC?vncV$uu=W6絭j~'ߒU@D`8'}z\`4N75g';#Ia=YqJT +^]r{rܸ$)xo_ĩq*yrS sqJ|WvQI꽆VS@U!&ħ־Jh{V`ewWLaz61 y.N|ZZLu1q؃_Lճ {,s7 }}!g8$AMP@D<`PD&&AD߼ ߫{]]V!z_ ڀ͌≮)w[zc[b~V[ydH +i#a>c)Y9?GyM/ qO[l+2*}?y?ae|#7-E +#,E%G:BG0睰Yyy=`ާg D2Ut>}֟Sۙ_y ׶|xmM5dRCt e[F7̌?0 +F1b##2FY#H02&ɹ̘RkX>/1V`J9[Ξ TĨd_sJe1f*UBrJ cnV<yX󖀭,}kߨT-KQרg40͌nd4hb!cb#Z)1&Fh-e@Jus'f],e*nFw =, yֽ<}lfg3bXd)96Cap{L#F͇`qlg͌Cz'xR1H=) frXlMwƜczH gβqvs,EDsy|nc +R{8Ŗ~%2. +Y?߼W?7Kx+,E #*KQyxXk >DILLgVgde6cgvbbc`beN`Na:(Ftp͌aaeƚ1*gE+S(cTL,Q:*]{:U2Ny*P<8 &^%*]X&rL9f23,L3cw3(YlKLQyS+]ҔbYmRm3eᘊ&f8on)ΎJYdf19\f +]d+*cf])G^t_KK_ J)Tpβ-&QX7K5Y[MIT[TGXyau MHa6WzdY Py`#w1/^BM^V(5#llllżٚن֌Wy/-T*quKPR16ׯbzUzd;yڳlGڻM\R?IXv.̮nfNqHlU?/Myv=CS}#cj(}w_~,r&⾔( `ٟc*1A{`faecg`db62<' +aU{? +0?ןOH?<_h.cT9acLǙT{J_D6cdNdN2=*2MTT)JpSӘә33H!)]VrKP,P][_!\c;7F󢏢`~ c` q@lC_q$2VBp8#t>-:]CI)) 'bOpEScA}w^uyQj}ЗLШڎhСŠ9'}N B429>*+ #u8ψXTXTqǢCՍj +_ߏCOڏs_" M$gF}Hc-~M\a>aݝ-&hԊ{@N܊ma~bW"~q8kWc|T=M)RΣ% +-/ +.! ] kB'˅RqUm0#  :/Q]\1X ޅˍZׅZ~օnߍ:“܃5Rx˃g؆ǃ'wލ֋kŽ:zv^Ebx<MZqϤ]X/@cH?1U|45cXXC&d1u*c&I XLq‡{$ku p_$#lk{0oa9XlE?{-k[q.Xlc6<mE(xP=Lf3 #[tO-2{m.UB6mś_7 +#X5d6b6ǥMDiªwm1.SM4g՚نَٖٞفّF6mn=Hߡ'GwV}Hw1"c)&"cJnUbaȘDj s,sscI)-WyW6eё>mEZ T2ecg.`żyOPNkqHt-2mY*UB6mś_7 +#+X=\\sK6m7 + ueEL6.G17072gnbnQMD%o+߇w(ɱSm1Ŕn]NtTL?_Q[?g%R!H!B :H. ҤIU, H/ҤR E@N7٘ osl6粁?̆jGq.u/^F2f6V;gvD_l~l}F1lN9W*oѷbsg6S;fS$6N +iYaq?ՔO.j絳ebq4JVh7묖vWbsqv_mkw- +PDXsE0{ ĕ)8nO  AAa( QP8PJA2P͝#AyT*PsPԤZP@]Eh hph Mi&ךKOxJJw y׬FѓS丿En%=Pׯ۩V7ـđmGe8aL;+8ox&$L)0<ށwmMaYW?,i=brs$=<z|J/ +L;{cP'OsJv_(uZ/a ` 2a lyl3ܙɉ`Sn8z +s?Awo)(w'6G:ǝg')~SBgrBpHKpR*A&܂Ҟ72= +ܱZ_{ʎڬ٬;u'OCxd౩Ҕ;vLLkB ]Hcn3CK+Ǟ΋^S햻*?c A!0 c NH(Jhnb.1匳Sq ΒR4E)$U1aye*cUFX_0P9S5`C,,X7u.ebWHqr Q"S3S5`kb"_?,.6p:cĽ&`,g%Į9qV&KLkXJԷbȷB&:dҢ]]M&LwHr" )bOܚv J/7@^N胩]e6=ymi^Ns7\/QG n/w +j1ํڵ xQy}~^ G? P51 Je!_Ў(@}xhg@ (Z)/DR~f/EGǁz4=6J_ 9L_ki>Av"#B-J?ހpЀDK%Uy) EAc ,((JY REDJ{E QS؍9$&Dc 1;*Fӎ!*ٙ;.ݯݙ_UuߐBO=VDkY02hq +{I +5}BZFk#f|n +WU;/ \D'i]SJ_W ) 3\PjfW+0ĭʢhtJ# >o{7cuF8y>h\T=v2¥z*6#/VՄE}wYοQ|{G\]FX}?AsaIVKFewUHUgF8q 9z; "ҥ~eaEuDVE^X;M̥ +3bfԫ # b)֊C # fؖHD͐e13Y0¯|cy0 BnUV(BJ")ErmQbUڪõ-axw"X99iek>}w#Dqmd)½pol2 j8B6K9*&P$6C0*pm ƂeȧbX8/0px K'NFzUObڪp~o^Y9WzUaA<'% _ h3gFZ#A5e.Y5V1?j]`DcUPWeݏ7֌Z5rG+Dt|#\U$F^ȳ[`^.38KR00ƦZ+IPo/ha`7öD"m$kPL?#MfO""H "$،mR/Vu(F*=_:n;k` Ã?ge.} e@VC:WFKPuFAy6( #lbq31m~zL,3[rmWh[ǣ _+07j;+eJ6` +W3u|os xL汈%,c9&C\َCvݼ!?9?F<'w.iJ~)j!ཛྷ%"1v) )*i߱;N9 9؇Oc㭼_;k Y#KbJٓtu6H9k=I҇(9L2WXΡΑyz G@}WP.#y ˉr.˭|^&Ar +O:$SpN /L͛HU_tFי[|p-ù8_泘,㬔'vb{#%܁3> p.ܙ򇸄pw_:k5y!lq$}؍JRʥT*Z!LC8_3fR\f_>9Y'oZY{LX#]Yy o;k{LC1|8F1oh<'b\~fmWpw@yU}m<&Ӗbs5ZT/N{:1Utv{1(Ẩpު\ݰn ѡ9nul6f(deB#FdF##6FgFjcrVcyWzn|q5&؛yt䜕S"v'VhO<4Ok:ty6#gcjwjwjW`ȣ+lػ0 +E8rKYfbvڜs#)6ȣ+l{ "] V`~9<\[re15ծYZfw#{~`m?̯,u9+k?fEus¾, ,I,Eg #c "A@DAz[{ދ"7{^/sw~3Λ9oͽ># `/Ch3/UF R{ ; Q]>&duq]>9Q؞LSwS3}z6wF>3;+z*9̹xǜ.pl/E; %R2Ji\{_ +JGu5Z}0iA|=s>ĿentT7i+nW8-=zߑMݙ +Yݝg~xW{_>8m<G8#٣{?=T9ۄ'*S~6rN{Oy]*KA{ +ׯUj)\TpFP[ATI{Ol:9l:nZ.He2@f|llll| 9%5 Yf[$ K2UnG@E*υ@U@G1*ḥF ᨁyU^ gW%3y{(_ɯ,cRAy,F+@^Uj!XLָUVƫڧ.J OTкvD&ѧpy#JTy\@4Sy3\@"hFPEYIUYYU@UUjfuUio]{;juezLج*ڬ*ש};ʻXλғ*;{POޜOU7ܱ@*3*k|h|lU;O-U>v>Z F gpl"+&:   +moONNJN:lbnr~tt+1> +:->2c*>݂B~GC/ACCOA@/bQ 5XEb qZEov_>8 ~j`x VP1 Q7Oyq\oG[߂Oo(>]} +}:>t=: :wLԇ@ڛo;ߛw$5h(~Oq{|w +4:G~K΂>..Zk9xWB~VCAqc7(^n( ؜b|T`oXJlkJkQZ ^ekflZo۬1t9ߞkHZ"ֿC5\sAD{+Ϥ,د23klUPP\s͵w3XQр\s- j>HF4B4F4!wp5ׂ͠ZlM ц|Kz"׈v8"}P%ⷈC=U!x'?#:"TGꤲ`ۈnl1Cwej&u'wvpMãm&{\I3u7Z!kz̝mP_9V17bc.X1R [Mc s-!?)rq@kUSqT%ZYJ1FƋ5$;NKd9o.wr/G̕g1an]c9O' q\j.e emYG-u^67l(&X/6(-Ȫl ۲+ q8g2NǍyqٸh\777ql2$iE$"Q1%FM̱b_oY{{=/gF:6?5-m89bkhgzJ|y cͬ~Esf$u'X_m3Sddo@';=\:OVLLEQo/#@@OyO" TTT!4SD + ha4Hh2M4 8<=5hͥy4Ba -eJ_rZA+i5u6xjFDi mmvNEi}wta:BGtNi:Cg =]KtUFݤ[H?mP.R!"ED-Xq"'($ +"(&xQBDi ʈDQVE *Je**|UI("’ұ.%Hg(-H) +H(b7";sv|sj;s:jD-F.nD=G4D#1) ͑hVh6h ] ݑLd!=\D/F ܂[1pn;1#1 +wa48L$LƔ$%ܘK' I$5i4IQLcf`&fa6`.ISX.:2{ZUjZzg :x /cc^Nnb?^ÁpoQw.#|O)>8/%u8opz?'_p +47?'gQ@19<{m d)fϲ,"^ +"+2^nlJW['*Uy-c5^ޯkkSX1l&l46cs[[ F.®`&a.{{fc@qsoaRn72wrqQEF#ñg b'r's{k\>!>GL3N3389s9Or>Lp!"..2>繜+\õ\[/%m|;{r?_7xoQw.#~O)?o{AmEo=2~56u-Fl5k{dda?#x&"cʅ+DYᅰ!ֿ1 YqŚ»x|=.Ye=Y4Y|V +ks|e^Kb^lXBCǧ=o_cQVQsgG0p ߉-=M04O&Jm09\m)dmrYa{&xxqv};4ƣvhǻGã\{:hPS-2Ŀ>ccE t[۱Gʱx4z8fm2ݓ33ݖ[6\8;{$޼6$fCбERua +my?k;6RZ*C)v#;T' d,RGaYRpdwν;Y,G$ERH^oTgSBwG]r'5sudYTu4_·+#Z(Qs#s*+#e)CAeBɊ +:Srdy̤|CnT?F~$Zdf n"3#^~5LhF9]k<19rCPD KN?I_>Ɍ\#>^ralԸ2| +֓q]2|UcM9K&I&*|}/eƳQy /7ɱƼv?(Xi c3AXVʸY8WU4NFW剀p:8^'yހ?CEu!p +{ 8t '<™x8Ig)h=S*UlK!RQH6 6A=?ɞ?Şobfmocvh{.RM/H#aR"%t|1U* ˔E{?W_S%BN` ^A*wr'.p7$ #[9r'xBWyo |od. %|.~)|)_w_@A>C|6<lVհy?5| l_|Vn G>a~ }8f5, + +:y-7In +f+$ l6]ЂЅ ;!`p]v 7#<`}5ZQ u`" 8$B#"(8&bzsh FnM6fh"m-&D+C" N,;E',D8-Ȁ" ȁ{D8/({E/Oį*0VWq*~Q-R+(Rf娺m.[5W3ύ + Cj:>m|ғà {.{r3v9V͢v]:4ॳbnglϖWU + ͡ZJU"~|ciUs:S1Y+q^iW'ZG8394i ڋo;=^tg+w qY؟TIS#6^*Wo5ɇ4,H[vur|t"M ;S:<;6ov9ݝ X9茇ͦD>j=x`Ёoӥt&Wowt4e{z3|-g6=2k+yT&Z֟ 7 ll8&Za +"fAu"D~WU«YDpCkJR`[4&Q3=*3|K.e}hFthf.ӥٞ]w?寭cϤz]]tt1I;&itKd1|Ir#AwBljj Enf$TY⎄6R3]cZ4hCbaBC0>KxMzRpR]F&]v(ϤC-={ڵklnֵٹlZsz;?frvx6dhx5U?)n[>ӟhyU62/҈h_:75fWE C Zc;ZY:1Q'yʺ YZɒ%ْ%˖,꺒e,16Nxp!0IMLr))iI(I3yHдɃ:JhBbvI\fb5LxKڕVZ͞]wc$5qU@,FV!B+RCwghw񼘺DOq $o2.On=egW4X Dnbacz ໭w$Ho2]%J]Ft P$$#$'Jpw1$G]qxZ [&g< +&] 2~ÙC}nj~wH}[h@eof˄clQ\]I4W_` D- q0L7M:E- +.gdMS('4i!SzC_)HZ +\Z1?%Dje`P4'S&5tJ"M`Nϧ 8e0zOo̲_V +LF"I"dֱWC_jj\EHxP0*uvbr㺝|f4?EЍWSLpTRV@ܯBïԀR! H:;l+n  ),;:1tO3*,#ܱ/d> ^!w{fGOQ%GlAvרE'kBw,_i9TQ*j+DHlPUzcYHVdžÍ^p.ԇ(Q0!H41zg0M[r?កr6LE"~6(L崲c (? :nm!("M2[2-8qj& IFĪVAVݭ^S`Z`ZCyQ<`:oyĵˋ  0HaL3oZ+>U/54GH.uxyǶm;^Ծ Ɠrۏ5τxkt( )De+(ː)G,27rDHlS>$JbIJ`NY H\,[Nk{$8&Xcc9| 'ؤd v7&ͣύ//e⃪ J6q ]T0i5Kc~\F}} laϋ欷'CREQ9󺸳\C6S9͌ J(\t* F]RLFM8(]\P J<oQi1NN}+=VoQZ" o󺒃MPOjH-RD 6#G9pF~&2J(AK08F R#39'Uft'ɾ[7޸yE?vES^{k`jTv-j׻᭛<;~?Q,n*OƋ|kJu],!Ϧ),>Sϼ0jdB(]o,4%7aoר_M|wTԡXK,J4C3xYWV4DTuB'W$YGY]߱>ܙ=jiwA1tPcS1dbvh,+8h?w+s7+fMGoFh[&s{}Cx\t}= +|/иrC⧮u`̇=q J/gvIc}R!kPI&Xs-rBbv>Ҩ-/ID@M򸄔 .TE,Dk-.q'qI-$%T"C0P(H0ȗI7tP-"*>o1lJ?\-7l B42J+څEDcm*zJ(W#9!"խZ +w7OM!8yr`Փ!\'wO7S{9wϩO٩+SXcwsX`f>"UoʉȝfLvFtjrRMD"AOR*r qEK6cYKJEaf ɮt83wKJr?V7=Ji.2 k;`7;ݰjU*\bt:kcWWnfG]q"hohq⭵q nX\"*R#rPײHQ~m/QhjiL$pt[찐4])gi=xFoϋ64GWvb6OCѓlA>4}p>*-UנJBU( +e#Rpg>`鄴kc5\ߏ]$$?WmlSU~[nl]ۻvltmsaN7gI?, b!!# J( +HLI -=Ɨ11ys{ws>xam]߆094S.H; 8{ǰ1v{G7Vl/NN" #+HTLji5RMfDׇ8f^D$N"vUJouۏ=wjV^?s"Tg?:`5%OԻB!/yd)QM*7?Hbn|E5aE-FՠF-X "2%&pĎT"È{/G8Btr +=5J+xًHÑ-f~ ),]$ JwqtIq~\e~%hOH$Y?99ڸ1 cTRJ5!Ƽ*;{;+5wLSD7afJ9\ŬAe.e(] jU_^)_,3}e&N*@>(GB/* vpX12f4uZΆkU|ØI-~ l9 Rc{k鯩GGqW[. _ j6펦ZV`y..S f:gKc5Ocw()@~4)){^{5#wVE֫/srI ¹|RK.̙bR56T9%JW+bx >PA{cūR!%3adχųi:) +C7cq4҂:` PbTŜ+Vp pY-Y;;)9(̳VʵxԒY^OASq==]&rl~oso,};H9k`Ws6'0Sb9mqŒ\cÆ0zf䜴2RY +q''$ 'h$U/S.wȝ,'-I(}JV(ᐯxc= Yh-;X)$?[sStX/ W]@`33jm;woIOv1o0swӊ6ʤ{UꐚQ, NjNk+X +V`O6i*î6甚7> +endobj +42 0 obj +<< +/Type /FontDescriptor +/Ascent 753 +/CapHeight 562 +/Descent -246 +/Flags 99 +/FontBBox [-28 -250 742 805] +/FontName /Courier-Oblique +/ItalicAngle -15 +/StemV 51 +/XHeight 426 +/StemH 51 +>> +endobj +43 0 obj +<< +/Type /FontDescriptor +/Ascent 750 +/CapHeight 662 +/Descent -250 +/Flags 34 +/FontBBox [-168 -218 1000 898] +/FontName /Times-Roman +/ItalicAngle 0 +/StemV 84 +/XHeight 450 +/StemH 84 +>> +endobj +44 0 obj +<< +/Type /FontDescriptor +/Ascent 753 +/CapHeight 562 +/Descent -246 +/Flags 35 +/FontBBox [-28 -250 628 805] +/FontName /Courier +/ItalicAngle 0 +/StemV 51 +/XHeight 426 +/StemH 51 +>> +endobj +45 0 obj +<< +/Type /FontDescriptor +/Ascent 750 +/CapHeight 653 +/Descent -250 +/Flags 98 +/FontBBox [-169 -217 1010 883] +/FontName /Times-Italic +/ItalicAngle -15 +/StemV 76 +/XHeight 441 +/StemH 76 +>> +endobj +46 0 obj +<< +/Type /FontDescriptor +/Ascent 701 +/CapHeight 0 +/Descent -298 +/Flags 4 +/FontBBox [-167 -299 1094 827] +/FontName /JFOEFL+Symbol +/ItalicAngle 0 +/StemV 0 +/FontFile2 47 0 R +>> +endobj +47 0 obj +<< +/Filter /FlateDecode +/Length 18148 +/Length1 37096 +>> +stream +HW}tovgvfwvx$T1V` +%H1pRfwfGf? =H$RBҔFDnH)FJ!)bi + (_R`zgvvSo;o~w}of `ȬGE6߻H -y~*iۃEË|כ"(Gʂ"CR$kk/!TY2@6?. + ax ?&|4y㱨Fl,JjNu Jܐ&5`}["*҄ #j8R^:`Mk-.f PDr(Gd +z=d vDXɬ0Z\&֒Q{'Vh(oIM/t@3t0 2?a ΄gf(ĠlVL&'` <9ֻ*{&[ft9p/7?$1EioBm0R,9"ZPVC1zqK1WgA RVû "rCaus7W ++y9 +}v| bJIfŰ]af!'^bnK :sic/&ibqVVn, #c9g tNS|Nws |s=~pŵ.K>N$Fb:k +.|M4)WSW&1qU&3&֘ϘZfFnb0q4gMls&n>Ss"QY ƼPL҅1Iip׼!Y+Op~%ʡXJ'KACzU{F$}ET5IQ~6CE A6GTJ_"J,{mԋ^Iv>S49AwªpDYR|GS5s>y죯1|A^$)4rH#n⩢Ș[n { qyRzP 3EØ _lJ{LըJ>WV +MW{i0Gv@C'B0Q/Tkwԯx0h̃!1ebPgo(ޞ#v=Io*S2Uɨxө29j8(ge\%u߶ }1M+)Gm1.5xwSC0dj}E_,L_/')LɆ' iSKhv F,b: +)=~(DcAt3}Z_B4ϠE?O<9ߌTKϤ4Q&h:Ii}<ڿmK,I~l71rŞմL㟤evM4|5FjO3wg0isn7i}03:=Z&6eV!Wo칹&GZ-qxۜ%jDgVYUoVmz}osTB_'$l=u=:b8Z v'ًfa?[|Vllc6 + PH!kB ضK#_proc,fq7f q~pqmnnrYbX_̪sAlp}9RϨ# $pdz~YPknx{Ul` {^oO>Yx,m-+^r:@{(gKMC +چtU..~vʿYUQ4}T}|.]0Z֢_:M#Z݈9'I}#Ww]iy+-ٓf|G]$Yk}+GEyHt>g~4χU`n3>÷NDKڂ Z#v@FOܸ; )]# Pa?Nhey܌tɡ3TIgcnuɰz@L4Ʀ#=yr{ /v 6gs ,(֮ !#}Zy[QՑ`M}OŊJeǫl%lȘI ~M:xmd[3d*duWfPJ(Ƌ(&_}HD|x6L_+Vi=B=Jb[+h4םk) eeeP5gf'm(?9zp§Hi\iy͟eOβ*bn*:Rd[]r }Jr'"O%nE6P&Vi +]6"`;$lZv##Щ1YJ+h y SᾚPoTB[r.)!Ui}m[GǛmBWZDr{ـbHW}H,9k:]_HNNlcs gv9lR $NKxZ"NPC\}(Z+ 2"6ZY,wDck;(]\ի1d |x&3'|ɤ\adt +fkM1vՏ}[d؟lGA]kGz6 +a;e12.9w6ksFDuc'xEfY8\1?t6G^cy=' $zGMlo<2лs ωgcݞ(XN95"*9v5/.ǵ' N%9 LU@FZ}6Cc~r^AS]Dca}^S.EK@twqZʭr/ }ɮܜHrEV;(X :4H 7!NjTFs? +q#v )c[:,U$# S@ #֘ɳiCld5bu3Nj02vrmua;I``"L)0y= y$,% kVZ!ڠ^xރ+3p.%7ĉ|L!/ sRC!ȯJBJv^9@BQ9Ey%LC 5Q+us2Urk)-)ɺ{8ҁ{_Abc4-ْKj;x7\]MOA|8J tw'ZStm'>:D?lMx< uT=ιܽATۥq$wT6^juxEk +oa1Uz:2m}➓̜[\~4s\K&k% 9R]A#%4qi:$g-1A=ni-MEBH-JASlc&9gYAB;`6gM peN}XCؿݱp"ju/"h1b-G?e2ܶ|lH E&?4c- U9aQmZeӝey:Uۅܜ1<7*68m碅%-/ +@M=a[i)7ݶtR Qa+6Wt]Zb`ɧ7.,Z.]w*`CCW"E ->q  QQW}3z΂%muaQCф7x2e~3jNE2b vӽ1s^ yz+Db?pb9V#Ee MFkB//53z0/U4s^Vט/-^e9Ei m보JK0B{^ֲ$[OfIiPMyDNCoGr99! r2fd^n>g)MR>2xB./G=ی ِ3Ɛ1M F3^ZӜ\e@9{rv%.:U+B2Ԃ)ķ{itZ+Cl#BDZi|Yck.۞/ou٨ԟ_g+s4'G6{DSTD!WhE,i+{}Gh}("v4H)c,hL!Z+͜+jq|sбiJu㊾@> #f뺍ѬPfA{XevC4py4/+' nC< ΦߥnJY"ƾ=1ˢmI +o';P_y09K/s^-˲kyڴދaa{ &$w^ kYIڲǺ(ML2`>+ol4-¢cMH˽/ueAФ^"+G9UZ;߰fAimcRtk,yݔZz?HDabΰj^g+wZt-<{ϵ +{ZI,EK,ʻD;TjNqXÁ.o?F |v9t47h +DUtlx5^e a(:x <_/Wq*KD &Z mI $ȫw$E o_;=eX*f i`<„f3旌μμd12X-e%&v+ngw`ìϱ?e_`OeE{6u{k'm kǁB%%#иcRjk@I\D$¤ & J H$dJ(S!qg)0<;y~ՏSzNR44-]j>m6IiOkӴgR-FyTܖ@M|*H2X8+ب&U+"⋨Tذ '6H&v1$ U$Sc@ s;Mё5Ѣ DزJ[k"')(åUNJŶ_xQ@Da #50p|sP&bܮ8H2p`߉"etC+4&\/IqJ&! E8+(XՖ2)$n+ycT7qp>=On;)գo7 $FO[3JWw) H=vH-tiPEɵq>qzZ.x\޹f@5 E?=WW`޳φaݠD0$..f'=C +o%NJ`J/[~[Xx&D"&幱V!#^2Z].E[T 1; :Izz PQS yo 3I_.6э}onN#!ECfv ɖZW Vok(F$d:2εI:.,SRwQ2>s59>x+];_U}\\_$-؁-NW{VW +t;=q^idۥkvo^2=zu|]ԝ@i:ͨcо- +>?}Yk=Y/aKg+Mvy{Wq TH^!09$ȅ*BU0?BdWo/Mh caac/9֧|׈7gqO&"* AܸfcRC^%d'o&^&Aw}KIWr'_+Ĥ@=qQ7r:/͠$GIf7VZ.+h#5t@nnIzгt+]'W` lĮX!ӑ, ` Iš #K0^u7;(;֝ٴn;;:s=@z2>96響X2}l45aC O!gG ([GvH]ו%f!cV+2%YexaK;*o%^D;u s:C$&‚HU/(;{ Mьw#MTb[&"DI2Q/ 5"D%hGqlg^aLF#\PN/o{w%ةU;nwo~ou9..9r{MgIރEuPry7)W~`^Q5{ fhCvN.|%7 .艂Gn_a濽eS|S ƜŽe33׾soU<3G]O\ΒA;E Ե) *j֢]-UЎ{&{e2qgOoM~ȗ3%q\ch߄Yr")\h͆D;d[o3-Ά- ȹGNxV[z +q8YsC<{nڎ[uCi*419cCU@0|[ +Ύo>d +8P%$uw~3k> +M*Of l $v&Y'4L\)M4~_Ztbw^~{Y'ڞY H#>7u1#'gNs'x SR9RP SaPz l`܃zꇰX+PO=a#B>8TG\Eu +;>88+H6U$UETV3m&ۨ%'YLz!I 6*.M'ȯQa&/%ȟ[mr\$ F3kQ_Aoߠ&E+\ZGߣ " ]EFJSoic-%dQk]nd3PmY-Ͼ2VUck:T^-l چXX7;Z%2WeJ*u|*%EP=5=JQRwc$T6+g٦6QǹWmpuP$*7w<{UB/x|^Kϯ6ˆep)`Tna nTHIQL{hWTuGy$7\ bqIPi2wMBS5b'Y4/Yb{e=')嗼Hܟipx>f2X0.yx4 S >\(v*IpdZ$х{)ۙrrBF;o{,HgQ_sW+ddn ,qf'G̀H#wqDjh z'? ІYxf 5EY.: `^y,'Y(g!b2 +@9%SY[`BEKTv//Q +<g@f$'`,& >Rö$ I7,E;tIquPAf;px_2O%:-JKhn>-䞌,hʣ(`ؒ%˲꫚Q, >ͨ>B)H >uzxe"AՒ3n6/i fqYYĞZ*[FMV9gp.5EX"y<-Oc1BOȚ{e3a jgl6@Xl4rK\ƢFsnn/Q*x#  T2T4#GEP \OӛƗzsuÈ*66AdT]Hֵ`-7YAHQ,$p^\@"0ĜM?Qv&2q= "Xpd1'Г[c\ESyɫ`pvo7kREmb Qc,bMbgoYp#ɂ^UԕE., u碚\r U]]qD5ܛ*إ@rzS mteb jCSZ7V541 Λ*鸖lA+,3+\^,B>HpeapENbџ, Iz dO [E~qfgrV=UGٷ]iGubp+u]P?BVPs^R#鎓 +JW(45-Rst (N&pCL7fw"I:ofEF9hUK],2|]#GZ!+ !G.ۣ+Fs}Ehq[C W,\,F <ʊ_5#4тKe>ech(ɓhD }&44, m2Eivpdk #)ضHeހ]]Aޖ6p=螇[87}XLڙwm6i,|xKciնŲe}Z2tKi4iE۳2(bFM 0DdnFb) ("%؃Kmx2`5p +?bۣ,E׫Ex8O-m Fsael"S:p.nْȡZ)'ʂT[`Bm';u,\e!eKGhN(eZǂ͈-˭j]Da$"\.$e| c'aCB~GB@GijUyL;Bu.*:+3c|ĬF.2غ GI5AEm'bXoY` YIY h,b!3 K*@dQǀ} ="/ +o95" ѵ`,OǶ+(vN8s^[d;^=#(nph5 +ob؎h=7RV սT2' {-ZD=Gf:>w).Z`I՝ʂWQ1m7XʂÌֱf(/3d$Ok`5dmx+UiR|5Jc*U sL[h%rI6B\=if.Q*&ԮjfM5ȩG"#^ Mˠ2ЄӲJGljj#ձGt(F1|(JB{J`}Z2*^YۆUFH yn齗S/Iʢadn$I] 2w6Zl6H0e8B+ļ)#Y74Gs@s=j=EPo_Ki+[뾜 +Rup+G t6m4L>t-EJ[{D}:J/9:c MY,ltM}֎qЀ0/0 ~wm)s'X[4q]q/Gߴinrt\kZ( ﴠvF]> c +kg;x =BHp('#ȏ 9Y$/WkdOni6 k_kҾў+E]ִNSt_18}EZ?j?vE1-(4h[\X$Τ-5.PXGmTL1vnCצhϨUc~MNJ>L5Θs߽}޻f&kgs27`A=Hȓ<c$ɽ|9oNgW2%EJ%MIOIå1R4EJMM҇atUYNl)O_+ry&D)+yd%e2GYRVWcZG9V>UN+_*T.(*SUըԾ_x) uf<"=~<*1AdfC{TT@% +KpWBzH0#@$D`@D#h[ †cQWb?@E@б‰tl,uC"F %|#j22HDhk?)Q p};{^4NB?fQ[( R$F>#q\q\#aB@ cPЇwW-L #SDuz$!,x+x ν%PTyzxL;$=Y ߃EO5elެdQUw&HwRb~NIt֮;xgzXq/,}mlSU u֛Q.`TLΫeyY*ɵ3b:Ps-ӆʋ=?:[2OL,SؒҐo<HU޸l;P{ ʢӎ*/|G+/9aR33 Ys&6.=9zDl\ +˯߬]_dX6:=gu] 3J*Ӗ7*EGcS1om'/t +TgurfN?{={mguEjW7Xv`,K[/J Η啿=!6>lW%=1?]*- Ջ7~᭜y~g~u=,sr%Kˆ䜫$ȼEmsԙ j}ې4/usUg#] uʞ;c1?L$RRe9cqф,57 6[ѷEݺ/lz_?qk0ôz8i3j^ٗWѧwN3<ڋ/';fs/SI/bL}kہU]9W}= `='(~'fVݚb +Mt(͢Obt*Fg`XAaYKХt]6C_"BhA;i0 giFևc,YX"@8 z@E`Tȓ( -ŨĘ^JPTcdݦRLuT1J2W~APݶ-_@O=dȬu.o%^,I[,Q}.NGٌƄ[7?S2Ż~}Pn1 +sސ[J΄lpLD f-6 u OB Q Q3Q PGLXZK\bBkv +a d;of8o*G{y=DGV(C E h?겎|n.cnsle-oc,Lr5pA-6w(Q9jY-##(.SP`Y#M8)ˑ0đy/Xs?|?#Vd!GaiуҩcC=鋝E;fԛ2rx b!4bRA=16̗V7vyUa>:xy AъD~1mFjJЈjk> }s}ԪHz7T#F**0>1f/}xl7-YTݒD֚a+W(a˕C{s_?K]HO_x,oYʑI&uEI<9A#$ϒ"ϐo??SIȿk ]˫D W? OQNwYls& Ew>i92bmߤ ^>p -ɯ{UnycJx=4{y;6H*Ѷerv6ୢkH 2 gw1L/Il&FfDVxT7C Lϓ#ײkWn7bNcѲZVqW3fpWqWm=xyaیE˧S'ɏ+GeR^_еlG_C~\B~$L-AmB%2Ze>wV|G9RrfzHYê.Bb8+?K)}S/(v3]u4ga Oe쟁gqF,4V>|g$A>[,.ܷ,bw9۹Fm\˖Ւvlh@z0eWLM={&OY>v=SjHvjFʢbIILj3:#9榦HRocze#aV}z &䯧T̬̬|5-STX"T+ f)j™YڒyJ׼p֌)U5D+BųZ呪K;L q( +/koVSN ̬WʺpiEe%E E0P4m9س(`qMR>Wb^MS>%'=%YrOxX1jj(Qթj5jx/xKrle٧,,BU&CjGdM2,,{nX^VwLxj\|S\-b'’3%[8]|]݆~{Fۯ_{eύoV\,qQ :D+q܈k1\>;a/GpW`n0"?'w!k=Ԋ) o&v~|mC =qE +endstream +endobj +4 0 obj +<< +/Type /Font +/Subtype /TrueType +/FirstChar 32 +/LastChar 146 +/Widths [250 0 0 0 0 0 833 0 0 0 0 0 0 333 0 0 +0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 +0 722 667 722 722 667 611 0 778 389 500 0 667 944 722 778 +611 0 722 556 667 722 722 1000 722 722 667 0 0 0 0 0 +0 500 0 444 556 444 333 500 556 278 333 556 278 833 556 500 +556 0 444 389 333 556 500 0 500 500 444 0 0 0 0 0 +0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 +0 0 333 ] +/Encoding /WinAnsiEncoding +/BaseFont /Times-Bold +/FontDescriptor 38 0 R +>> +endobj +18 0 obj +<< +/Type /Font +/Subtype /Type0 +/BaseFont /JFOEBE+Courier-Bold +/Encoding /Identity-H +/DescendantFonts [ 48 0 R ] +/ToUnicode 49 0 R +>> +endobj +48 0 obj +<< +/Type /Font +/Subtype /CIDFontType2 +/BaseFont /JFOEBE+Courier-Bold +/FontDescriptor 36 0 R +/CIDSystemInfo<< +/Registry (Adobe) +/Ordering (Identity) +/Supplement 0 +>> +/DW 1000 +/W [ +233 [600] +] +>> +endobj +5 0 obj +<< +/Type /Font +/Subtype /TrueType +/FirstChar 32 +/LastChar 122 +/Widths [600 0 0 0 0 0 0 0 0 0 0 0 600 600 0 0 +0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 +0 0 0 600 0 0 0 0 0 0 0 0 0 0 0 0 +600 0 0 0 0 600 0 0 0 0 0 0 0 0 0 0 +0 600 600 600 600 600 600 600 600 600 600 0 600 600 600 600 +600 0 600 600 600 600 0 0 600 600 600 ] +/Encoding /WinAnsiEncoding +/BaseFont /JFOEBL+Courier-Bold +/FontDescriptor 39 0 R +>> +endobj +6 0 obj +<< +/Type /Font +/Subtype /TrueType +/FirstChar 32 +/LastChar 151 +/Widths [250 0 0 0 0 0 0 0 333 333 0 0 250 333 250 278 +500 500 500 500 500 500 500 500 500 500 278 278 0 0 0 0 +921 722 667 667 722 611 556 0 0 333 389 0 611 889 722 722 +556 722 667 556 611 722 722 944 0 722 611 0 0 0 0 500 +0 444 500 444 500 444 333 500 500 278 278 500 278 778 500 500 +500 500 333 389 278 500 500 722 500 500 444 0 0 0 0 0 +0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 +0 0 333 444 444 0 0 1000 ] +/Encoding /WinAnsiEncoding +/BaseFont /Times-Roman +/FontDescriptor 41 0 R +>> +endobj +7 0 obj +<< +/Type /Font +/Subtype /TrueType +/FirstChar 32 +/LastChar 124 +/Widths [600 0 0 0 0 0 0 0 0 0 0 0 600 600 600 0 +600 600 600 600 600 600 600 0 600 600 600 0 0 0 0 0 +0 600 0 0 0 600 0 600 0 600 600 0 600 600 600 0 +0 0 600 600 0 0 0 0 0 0 0 0 600 0 0 0 +0 600 600 600 600 600 600 600 600 600 600 0 600 600 600 600 +600 0 600 600 600 600 600 600 600 0 600 0 600 ] +/Encoding /WinAnsiEncoding +/BaseFont /Courier-Oblique +/FontDescriptor 42 0 R +>> +endobj +8 0 obj +<< +/Type /Font +/Subtype /TrueType +/FirstChar 222 +/LastChar 223 +/Widths [556 556 ] +/Encoding /MacRomanEncoding +/BaseFont /Times-Roman +/FontDescriptor 43 0 R +>> +endobj +9 0 obj +<< +/Type /Font +/Subtype /TrueType +/FirstChar 32 +/LastChar 122 +/Widths [600 600 0 0 600 0 0 0 0 0 0 0 0 600 600 600 +600 600 600 600 600 0 600 0 600 600 600 0 0 0 0 0 +600 600 600 0 600 600 600 0 0 600 600 0 600 600 600 600 +600 0 600 600 0 600 0 0 600 600 600 0 0 0 0 600 +0 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 +600 600 600 600 600 600 600 600 600 600 600 ] +/Encoding /WinAnsiEncoding +/BaseFont /Courier +/FontDescriptor 44 0 R +>> +endobj +25 0 obj +<< +/Type /Font +/Subtype /TrueType +/FirstChar 110 +/LastChar 117 +/Widths [500 500 0 0 389 0 0 500 ] +/Encoding /WinAnsiEncoding +/BaseFont /Times-Italic +/FontDescriptor 45 0 R +>> +endobj +26 0 obj +<< +/Type /Font +/Subtype /Type0 +/BaseFont /JFOEFL+Symbol +/Encoding /Identity-H +/DescendantFonts [ 50 0 R ] +/ToUnicode 51 0 R +>> +endobj +50 0 obj +<< +/Type /Font +/Subtype /CIDFontType2 +/BaseFont /JFOEFL+Symbol +/FontDescriptor 46 0 R +/CIDSystemInfo<< +/Registry (Adobe) +/Ordering (Identity) +/Supplement 0 +>> +/DW 1000 +/W [ +155 [500 329 ] +157 [329] +] +>> +endobj +49 0 obj +<< +/Filter /FlateDecode +/Length 216 +>> +stream +HTPN0 A i Rnp=%u"7$Q{ly12.~ep +3qJ6 ߖsG# < S-)!/+!H*h[8 +yp3,?p*}k{KYӄTGA6oVVH;y2'b$[pZ+!k +endstream +endobj +51 0 obj +<< +/Filter /FlateDecode +/Length 235 +>> +stream +HT?o w>ō:`HU$ )J"o_n~x~ i 3FpJS,pD)`EW5"GFRn@| :;nߊm!'I':FfdI=ӏ!B)ux|J`q[ +endstream +endobj +1 0 obj +<< +/Type /Page +/Parent 11 0 R +/Resources 3 0 R +/Contents 2 0 R +>> +endobj +12 0 obj +<< +/Type /Page +/Parent 11 0 R +/Resources 14 0 R +/Contents 13 0 R +>> +endobj +15 0 obj +<< +/Type /Page +/Parent 11 0 R +/Resources 17 0 R +/Contents 16 0 R +>> +endobj +19 0 obj +<< +/Type /Page +/Parent 11 0 R +/Resources 21 0 R +/Contents 20 0 R +>> +endobj +22 0 obj +<< +/Type /Page +/Parent 11 0 R +/Resources 24 0 R +/Contents 23 0 R +>> +endobj +27 0 obj +<< +/Type /Page +/Parent 11 0 R +/Resources 29 0 R +/Contents 28 0 R +>> +endobj +30 0 obj +<< +/Type /Page +/Parent 11 0 R +/Resources 32 0 R +/Contents 31 0 R +>> +endobj +33 0 obj +<< +/Type /Page +/Parent 11 0 R +/Resources 35 0 R +/Contents 34 0 R +>> +endobj +52 0 obj +<< +/S /D +>> +endobj +53 0 obj +<< +/Nums [0 52 0 R ] +>> +endobj +11 0 obj +<< +/Type /Pages +/Kids [1 0 R 12 0 R 15 0 R 19 0 R 22 0 R 27 0 R 30 0 R 33 0 R] +/Count 8 +/MediaBox [0 0 612 792] +>> +endobj +54 0 obj +<< +/CreationDate (D:20130420011643+02'00') +/ModDate (D:20130420011643+02'00') +/Producer (Apple pstopdf) +>> +endobj +55 0 obj +<< +/Type /Catalog +/Pages 11 0 R +/PageLabels 53 0 R +>> +endobj +xref +0 56 +0000000000 65535 f +0000132354 00000 n +0000000016 00000 n +0000007298 00000 n +0000128271 00000 n +0000129131 00000 n +0000129546 00000 n +0000130104 00000 n +0000130561 00000 n +0000130735 00000 n +0000055106 00000 n +0000133091 00000 n +0000132435 00000 n +0000007450 00000 n +0000015596 00000 n +0000132519 00000 n +0000015738 00000 n +0000022010 00000 n +0000128772 00000 n +0000132603 00000 n +0000022164 00000 n +0000031587 00000 n +0000132687 00000 n +0000031741 00000 n +0000039544 00000 n +0000131204 00000 n +0000131395 00000 n +0000132771 00000 n +0000039735 00000 n +0000044357 00000 n +0000132855 00000 n +0000044524 00000 n +0000052917 00000 n +0000132939 00000 n +0000053082 00000 n +0000054973 00000 n +0000055247 00000 n +0000055474 00000 n +0000079620 00000 n +0000079822 00000 n +0000080049 00000 n +0000108857 00000 n +0000109054 00000 n +0000109255 00000 n +0000109452 00000 n +0000109643 00000 n +0000109843 00000 n +0000110033 00000 n +0000128921 00000 n +0000131757 00000 n +0000131538 00000 n +0000132046 00000 n +0000133023 00000 n +0000133051 00000 n +0000133222 00000 n +0000133345 00000 n +trailer +<< +/Size 56 +/Root 55 0 R +/Info 54 0 R +/ID [<06e7ee2eed84275abb84850071bfd8d6><06e7ee2eed84275abb84850071bfd8d6>] +>> +startxref +133415 +%%EOF -- cgit v1.2.3