ezjail install in 11.2--HBSD

49 views
Skip to first unread message

damjank

unread,
Jul 26, 2018, 12:53:51 PM7/26/18
to HardenedBSD Users
Hello,

I have one question - after the initial setup for ezjail (which is installed and running) I came across this  issue:

root@:~ # freebsd-version
11.2--HBSD
root@:~ # sysctl hardening.version
hardening.version: 1100056
root@:~ # ezjail-admin install -p
Your system is 11.2-STABLE-HBSD. Normally FTP-servers don't provide non-RELEASE-builds.
Querying your ftp-server... The ftp server you specified (ftp.freebsd.org) seems to provide the following builds:
drwxr-xr-x    2 ftp      ftp            10 Nov 13  2017 10.1-RELEASE
drwxr-xr-x    2 ftp      ftp            10 Nov 13  2017 10.2-RELEASE
drwxr-xr-x    2 ftp      ftp            10 Nov 13  2017 10.3-RELEASE
drwxr-xr-x    2 ftp      ftp            10 Nov 13  2017 10.4-RELEASE
drwxr-xr-x    2 ftp      ftp            13 Nov 13  2017 11.0-RELEASE
drwxr-xr-x    2 ftp      ftp            13 Nov 13  2017 11.1-RELEASE
drwxr-xr-x    2 ftp      ftp            13 Jun 26 16:42 11.2-RELEASE
drwxr-xr-x    2 ftp      ftp            10 Nov 13  2017 9.3-RELEASE
drwxr-xr-x   10 ftp      ftp            10 May 11 21:49 ISO-IMAGES
Release to fetch [ 11.2-STABLE-HBSD ]:
fetch: ftp://ftp.freebsd.org/pub/FreeBSD/releases/amd64/amd64/11.2-STABLE-HBSD/base.txz: File unavailable (e.g., file not found, no access)
fetch: ftp://ftp.freebsd.org/pub/FreeBSD/snapshot/amd64/amd64/11.2-STABLE-HBSD/base.txz: File unavailable (e.g., file not found, no access)
fetch: ftp://ftp.freebsd.org/pub/FreeBSD/amd64/amd64/11.2-STABLE-HBSD/base.txz: File unavailable (e.g., file not found, no access)
fetch: ftp://ftp.freebsd.org/releases/amd64/amd64/11.2-STABLE-HBSD/base.txz: File unavailable (e.g., file not found, no access)
fetch: ftp://ftp.freebsd.org/snapshots/amd64/amd64/11.2-STABLE-HBSD/base.txz: File unavailable (e.g., file not found, no access)

Could not fetch base from ftp://ftp.freebsd.org.
  Maybe your release (11.2-STABLE-HBSD) is specified incorrectly or the host ftp.freebsd.org does not provide that release build.
  Use the -r option to specify an existing release or the -h option to specify an alternative ftp server.
root@:~ #

So how or rather where do I tell him to go fetch correct version for base jail? Sorry for this but am rather new to ezjail config, also new to HBSD :)

Cheers and thank you in advance!!!
Regards,Damjank

Piotr Kubaj

unread,
Jul 26, 2018, 1:00:03 PM7/26/18
to damjank, HardenedBSD Users
Hi,

I just do buildworld, and then ezjail-admin update -i.

You could also try -b, it apparently does both buildworld and installworld.

On 18-07-26 09:53:51, damjank wrote:
>Hello,
>
>I have one question - after the initial setup for ezjail (which is
>installed and running) I came across this * issue:*
--
______________________________________
/ One Bell System - it used to work \
\ before they installed the Dimension! /
--------------------------------------
\ ^__^
\ (oo)\_______
(__)\ )\/\
||----w |
|| ||
signature.asc

Shawn Webb

unread,
Jul 26, 2018, 1:00:38 PM7/26/18
to damjank, HardenedBSD Users
Hey Damjank,

ezjail is a third-party tool. It likely needs to gain support for
HardenedBSD. Can you file a bug report with them?

Thanks,

--
Shawn Webb
Cofounder and Security Engineer
HardenedBSD

Tor-ified Signal: +1 443-546-8752
Tor+XMPP+OTR: lat...@is.a.hacker.sx
GPG Key ID: 0x6A84658F52456EEE
GPG Key Fingerprint: 2ABA B6BD EF6A F486 BE89 3D9E 6A84 658F 5245 6EEE

On Thu, Jul 26, 2018 at 09:53:51AM -0700, damjank wrote:
> Hello,
>
> I have one question - after the initial setup for ezjail (which is
> installed and running) I came across this * issue:*
signature.asc

Karsten Koenig

unread,
Jul 26, 2018, 1:10:23 PM7/26/18
to HardenedBSD Users
Moin,

I already wrote it several times to erdgeist but it seems he is not interested (never answered). Seems someone has to write a patch or as suggested compile world yourself :)

Best, Karsten

--
You received this message because you are subscribed to the Google Groups "HardenedBSD Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to users+un...@hardenedbsd.org.

damjank

unread,
Jul 26, 2018, 3:50:02 PM7/26/18
to HardenedBSD Users
OK then, how do I start? Sorry but compileworld? A - B - C? :)

Dne četrtek, 26. julij 2018 19.10.23 UTC+2 je oseba Karsten Koenig napisala:

Conrad Rockenhaus

unread,
Jul 26, 2018, 7:29:23 PM7/26/18
to damjank, HardenedBSD Users
I’ve only gotten ezjail working by building HardenedBSD from source.....

a) Download sources by executing git clone --single-branch --branch hardened/11-stable/master https://github.com/hardenedbsd/hardenedbsd-stable /usr/src

b) cd /usr/src

c) make -j(typically number of cpu cores) buildworld

d) make -j(typically number of cpu cores) buildkernel

e) make installkernel

f) shutdown -r now

g) Once things start back up, cd /usr/src again, then make installworld

h) mergemaster -Ui (if you were already running RELEASE, and you're building RELEASE, you can probably safely skip this step).

That's how you make world. Summarized. This is normally done as root and you can probably break things if you do this wrong. I'm not 100% sure if you can get away with just compiling world without installing it for ezjail, I never tried it, I switched to HardenedBSD with a make world instead of binaries so.... <shrugs>??

Conrad

To unsubscribe from this group and stop receiving emails from it, send an email to users+unsubscribe@hardenedbsd.org.
Reply all
Reply to author
Forward
0 new messages