[2024] Doing stupid things with FreeBSD jails - Dan Langille

FreeBSD jails arrived on the scene with FreeBSD 4.0 (2000) and Dan Langille has been playing with them since at least FreeBSD 4.1 (also 2000). His first documented usage was creating a jail for Open Source Weekend (OSW) in November 2003. Since then, he's been using jails on a near-daily basis for many simple solutions and for things he recommends you do not try at home. He started using plain vanilla jails, then went to ezjail, then iocage, and is now back on plain vanilla jails. Topics covered will include: using Let's Encrypt via acme.sh, a hidden DNS master, public DNS servers, and a public website to distribute new certs via anvil how FreshPorts uses three jails for ingesting commits and displaying them on the website a database testing jail which loads each daily database backup to test it works building the packages he needs using poudriere in a jail multiple jails running PostgreSQL running a jail within a jail modifying pkg-audit to ignore certain