Install/iRedMail/FreeBSD.Jail - Revision history

ZhangHuangbin: /* Summary */

ZhangHuangbin — Wed, 03 Apr 2013 15:04:19 GMT

Summary

← Older revision		Revision as of 15:04, 3 April 2013
Line 3:		Line 3:
	= Summary =		= Summary =

-	This tutorial describes how to create a FreeBSD Jail with ezjail, and install the latest iRedMail in Jail.	+	* This tutorial describes how to create a FreeBSD Jail with ezjail, and install the latest iRedMail in Jail.
-		+	* We use hostname '''mx.example.com''' and IP address '''172.16.122.244''' for our Jail server.
-	We use hostname '''mx.example.com''' and IP address '''172.16.122.244''' for our Jail server.	+

	Notes:		Notes:

ZhangHuangbin — Wed, 03 Apr 2013 14:38:38 GMT

Requirements

← Older revision		Revision as of 14:38, 3 April 2013
Line 14:		Line 14:
	= Requirements =		= Requirements =

-	* iRedMail-0.8.~~3 or later releases~~.	+	* The latest stable release of iRedMail. You can download it here: http://www.iredmail.org/download.html
	* Port '''sysutils/ezjail''' for FreeBSD.		* Port '''sysutils/ezjail''' for FreeBSD.

ZhangHuangbin — Tue, 26 Feb 2013 13:39:31 GMT

Set a proper hostname and IP address for Jail server

← Older revision		Revision as of 13:39, 26 February 2013
Line 26:		Line 26:
	# Settings for our Jail: mx.example.com.		# Settings for our Jail: mx.example.com.
	jail_mx_example_com_hostname="mx.example.com"		jail_mx_example_com_hostname="mx.example.com"
-	jail_mx_example_com_ip="172.16.122.244'	+	jail_mx_example_com_ip="172.16.122.244"
	</pre>}}		</pre>}}

ZhangHuangbin — Tue, 26 Feb 2013 13:34:54 GMT

Install sysutils/ezjail and add required settings

← Older revision		Revision as of 13:34, 26 February 2013
Line 41:		Line 41:
	ezjail_enable="YES"		ezjail_enable="YES"

-	# ~~Set security.jail.allow_raw_sockets=1 to allow~~ PostgreSQL ~~initial~~ database.	+	# Required by PostgreSQL, otherwise initializing database will fail.
	jail_sysvipc_allow="YES"		jail_sysvipc_allow="YES"
	</pre>}}		</pre>}}

ZhangHuangbin — Sun, 17 Feb 2013 05:40:30 GMT

Create Jail

← Older revision		Revision as of 05:40, 17 February 2013
Line 71:		Line 71:

	* [OPTIONAL] Share /usr/ports/distfiles/ with Jail by adding below line in '''/etc/fstab.mx_example_com''':		* [OPTIONAL] Share /usr/ports/distfiles/ with Jail by adding below line in '''/etc/fstab.mx_example_com''':
		+	** NOTE: Jail will set ports tree to '''/var/ports''' instead of '''/usr/ports''' in /jails/mx.example.com/etc/make.conf, you can either use it or change it to '''/usr/ports'''.
	{{cfg\|/etc/fstab.mx_example.com\|<pre>		{{cfg\|/etc/fstab.mx_example.com\|<pre>
	/usr/ports/distfiles /jails/mx.example.com/basejail/usr/ports/distfiles nullfs rw 0 0		/usr/ports/distfiles /jails/mx.example.com/basejail/usr/ports/distfiles nullfs rw 0 0

ZhangHuangbin — Sun, 17 Feb 2013 05:38:21 GMT

Create Jail

← Older revision		Revision as of 05:38, 17 February 2013
Line 68:		Line 68:
	{{cfg\|/jails/mx.example.com/etc/rc.conf\|<pre>		{{cfg\|/jails/mx.example.com/etc/rc.conf\|<pre>
	hostname="mx.example.com"		hostname="mx.example.com"
		+	</pre>}}
		+
		+	* [OPTIONAL] Share /usr/ports/distfiles/ with Jail by adding below line in '''/etc/fstab.mx_example_com''':
		+	{{cfg\|/etc/fstab.mx_example.com\|<pre>
		+	/usr/ports/distfiles /jails/mx.example.com/basejail/usr/ports/distfiles nullfs rw 0 0
	</pre>}}		</pre>}}

ZhangHuangbin — Sun, 17 Feb 2013 05:30:41 GMT

Install sysutils/ezjail and add required settings

← Older revision		Revision as of 05:30, 17 February 2013
Line 43:		Line 43:
	# Set security.jail.allow_raw_sockets=1 to allow PostgreSQL initial database.		# Set security.jail.allow_raw_sockets=1 to allow PostgreSQL initial database.
	jail_sysvipc_allow="YES"		jail_sysvipc_allow="YES"
		+	</pre>}}
		+
		+	* [OPTIONAL] Allow to use '''ping''' command inside Jail by adding below line in '''/etc/sysctl.conf''':
		+	{{cfg\|/etc/sysctl.conf\|<pre>
		+	security.jail.allow_raw_sockets=1
	</pre>}}		</pre>}}

ZhangHuangbin — Sun, 17 Feb 2013 05:28:17 GMT

← Older revision		Revision as of 05:28, 17 February 2013
Line 29:		Line 29:
	</pre>}}		</pre>}}

-	= ~~Create Jail~~ and ~~install iRedMail~~=	+	== Install sysutils/ezjail and add required settings ==
-	* Install ezjail:	+	* Install ezjail with ports tree:
	{{cmd\|<pre>		{{cmd\|<pre>
	# cd /usr/ports/sysutils/ezjail/		# cd /usr/ports/sysutils/ezjail/
Line 36:		Line 36:
	</pre>}}		</pre>}}

-	* ~~Add~~ below setting in /etc/rc.conf:	+	* Enable Jail by adding below setting in '''/etc/rc.conf''':
	{{cfg\|/etc/rc.conf\|<pre>		{{cfg\|/etc/rc.conf\|<pre>
	# Start ezjail while system start up		# Start ezjail while system start up
Line 47:		Line 47:
	* Rebooting system is required after changing '''/etc/rc.conf'''.		* Rebooting system is required after changing '''/etc/rc.conf'''.
	{{cmd\|<pre># reboot</pre>}}		{{cmd\|<pre># reboot</pre>}}
		+
		+	= Create Jail =

	* After system start up, create the base jail that all jails we created later will use:		* After system start up, create the base jail that all jails we created later will use:
Line 75:		Line 77:
	DS 1 172.16.122.244 mx.example.com /jails/mx.example.com		DS 1 172.16.122.244 mx.example.com /jails/mx.example.com
	</pre>}}		</pre>}}
		+
		+	= Install iRedMail =

	We can now enter this Jail:		We can now enter this Jail:

ZhangHuangbin — Sun, 17 Feb 2013 05:25:03 GMT

Preparation

← Older revision		Revision as of 05:25, 17 February 2013
Line 19:		Line 19:
	= Preparation =		= Preparation =

-	* Prepare IP address ~~used~~ for Jail~~. Here we~~ use internal IP address '''172.16.122.244''' for example. We created an alias IP address on network interface '''em0''', so we have below setting in '''/etc/rc.conf''' for this IP address:	+	== Set a proper hostname and IP address for Jail server ==
		+	We use hostname '''mx.example.com''' and internal IP address '''172.16.122.244''' for example. We created an alias IP address on network interface '''em0''', so we have below setting in '''/etc/rc.conf''' for this IP address:
	{{cfg\|/etc/rc.conf\|<pre>		{{cfg\|/etc/rc.conf\|<pre>
	ifconfig_em0_alias0="inet 172.16.122.244 netmask 255.255.255.0"		ifconfig_em0_alias0="inet 172.16.122.244 netmask 255.255.255.0"
		+
		+	# Settings for our Jail: mx.example.com.
		+	jail_mx_example_com_hostname="mx.example.com"
		+	jail_mx_example_com_ip="172.16.122.244'
	</pre>}}		</pre>}}

ZhangHuangbin — Sun, 17 Feb 2013 05:22:14 GMT

Summary

← Older revision		Revision as of 05:22, 17 February 2013
Line 4:		Line 4:

	This tutorial describes how to create a FreeBSD Jail with ezjail, and install the latest iRedMail in Jail.		This tutorial describes how to create a FreeBSD Jail with ezjail, and install the latest iRedMail in Jail.
		+
		+	We use hostname '''mx.example.com''' and IP address '''172.16.122.244''' for our Jail server.

	Notes:		Notes:
Line 9:		Line 11:
	* This tutorial was tested with FreeBSD 9 and the latest ports tree, but it should work on FreeBSD 8 and 10 too.		* This tutorial was tested with FreeBSD 9 and the latest ports tree, but it should work on FreeBSD 8 and 10 too.
	* All backends available in iRedMail (OpenLDAP, MySQL, PostgreSQL) were tested, work like a charm. :)		* All backends available in iRedMail (OpenLDAP, MySQL, PostgreSQL) were tested, work like a charm. :)
-

	= Requirements =		= Requirements =