Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

I'm thinking of changing my web server so that Apache (and all of django web apps) run inside of a jail rather then on my host machine. I want to make this change for two reasons, the first and primary reason is to learn more about jails and how they work. The secondary concern is security and sand boxing my current web server.

With that said, I was wondering what steps are required to move a working Apache instance on a host machine into a jail?

I have a zfs partition set up with a jails folder with a www jail. in the www jail I've installed apache and migrated all of my config files. How do I have to change my config files so that they'll listen to packets passed by the host machine and how do I set up my host machine so that it forwards those packets to my www jail?


UPDATE: So I've read the jails section of the handbook and I've set up a rc.conf and the jail. I guess what I'm really asking is do I need to change any of my apache configs? Can I use the same IP address for the jail as the host machine? If I can, may I just leave my apache configs unchanged?

share|improve this question

1 Answer 1

up vote 2 down vote accepted

FreeBSD comes with great handbook. Really must read, dude. For e. g., its chapter 16 describes Jails in depth.

UPDATE: Yes, you can use the same IP for Jail as non-jailed processes use, but of course, they can't bind the same IP:Ports, as it usually got used to be.

share|improve this answer
    
So I've read the jails section of the handbook and I've set up a rc.conf and the jail. I guess what I'm really asking is do I need to change any of my apache configs? Can I use the same IP address for the jail as the host machine? If I can, may I just leave my apache configs unchanged? –  Rawrgulmuffins Mar 27 '13 at 9:47
    
@Rawrgulmuffins, Completely different questions now. Do you want them to be in your original question, don't you? I'd prefer. ;) –  poige Mar 27 '13 at 9:50
    
fair enough, I'm finding that although I'm a decent programmer I don't really know how systems work or even really how to ask questions yet. Thank you. –  Rawrgulmuffins Mar 27 '13 at 9:54
    
So because my host isn't using port 80 I can use the same ip address (and the same apache configs) for my jail without conflicts. Thank you for the answer. –  Rawrgulmuffins Mar 27 '13 at 11:12

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.