Run "zfs jail" on jail start

[jefferai]

I want to allow management of a ZFS dataset inside of a jail. I created the jail with various sysctls, enabled the dataset jailed property, and set an allow list on the dataset. The good news is that all of this is working -- when the dataset is bound to the jail I can snap, destroy etc.

The rub is the "when the dataset is bound" part: after the jail starts, I need to manually run "zfs jail <jail name> <dataset name>" on the host in order to bind the dataset to the jail. Once I do that, I can use ZFS on the dataset from inside the jail without any issues. What I'm trying to do is get this to happen automatically.

I've tried adding a post-start command into /etc/jail.conf but it didn't work. I don't see any option in the FreeNAS GUI to run anything at different times in the jail lifecycle.

Any advice is appreciated!

 

[dlavigne]

Did you find a solution for this?

 

[cellardoor]

I do need a solution for this problem as well.
Hopefully someone can help.

 

[dlavigne]

Does adding the dataset as a storage not do what you want?

 

[cellardoor]

Thanks for the quick reply.

No.

I need this dataset as unmountet dataset visible for the jail.
The dataset is only visible for the jail after doing zfs jail <jail name> <dataset name>
and after that a script inside the jail can mount, snap, create dataset etc.
Everything is working if i do zfs jail <jail name> <dataset name> by my self after the jail is up
but after a reboot the jail, the property is gone and i have to zfs jail <jail name> <dataset name> again.

I use warden maybe it is easier in iocage because as far i know warden has nothing like jail.conf?

 

[dlavigne]

Yes, iocage may be easier as it stores its config as ZFS properties. Let us know if that works for you.

 

[cellardoor]

I found a working solution.
With warden we have a meta for every jail in the base dataset where all the jails gets installed.
In this meta we have hook scripts like jail-post-start which i used.
In my case the meta looks like .urbackup.meta which I used to set up Urbackup with the ability to
make copy-on-write raw image and file backups with ZFS
working in a freenas jail where UrBackup puts each backup into a
separate dataset and stores the image backup and file backup as a single big file (snapshot).
Change the script to your needs and voila we have the jail properties.
Thanks