A modern, minimal, flexible, and easy-to-expand FreeBSD Jail manager built with love by experienced users for both neophytes and experts.
NOTE: This README is a complete guide. We’d like your help to write manual pages :)
Jailer is heavily under development and not yet ready for stable production use. The interface is subject to refinement and change, but you are more than welcome to use it and help us improve it with your invaluable feedback. It does not mean you cannot use it in production, though. Just beware that a lot might change in time.
However, that being said, we do use it in our production to manage servers and in our products.
Jailer is not in FreeBSD ports yet, you need to install it manually
git clone https://github.com/illuria/jailer
cd jailer
make installJailer is so much attached to ZFS and does not support UFS at this time (and most likely it will never do.) In case you are not using ZFS, you can create a ZFS pool by doing something like the following:
truncate -s 20G /usr/local/disk0.img
zpool create zroot /usr/local/disk0.imgCustom Jail Service file for FreeBSD < 14.0-RELEASE
At the moment we use a custom
rc.d/jailfile for FreeBSD < 14.0-RELEASE. Since 14.0-RELEASE, we use the.includefeature ofjail.conf.
Once the environment meets the basic requirements, Jailer initialization is required. all you need to do is the following:
jailer initHere’s how it looks like →
root@armbsd13:~ # jailer init
Jailer will create
dataset : zroot/jails
mount point : /usr/local/jails
OK? (y/N) y
Creating ZFS dataset zroot/jails with the mount point /usr/local/jails: Done!
Setting jailer_dir in rc.conf: Done!
Enabling the jail service: Done!
Patching jail service for jail.conf.d support: Done!
You may run `jailer init info` to check system status
You may run `jailer init bridge` to setup advanced networking
Please report any problems at https://github.com/illuria/jailer/issues
The latest information about Jailer is available at https://jailer.dev/
Consider joining Jailer's worldwide community:
https://github.com/illuria/jailer
Thank you for choosing Jailer!Or, if you like colors, here’s a picture :)
At this point, you can create a Jail
jailer createYou should get the following →
root@armbsd13:~ # jailer create
Fetching 13.1-RELEASE: Done!
Creating 99d6c13c: Done!By default, Jailer will fetch a base image if it’s not available. You can list all images by doing
root@armbsd13:~ # jailer image list
13.1-RELEASEFetching might take a while, if you know a mirror that’s closer to you, you can set the
FreeBSD_mirrorvariable to that. e.g.setenv FreeBSD_mirror "https://mirror.yandex.ru/freebsd/"withtcshorexport FreeBSD_mirror="https://mirror.yandex.ru/freebsd/"with/bin/sh
You can list and download other images as well
root@armbsd13:~ # jailer image list remote
12.3-RELEASE
12.4-RELEASE
13.0-RELEASE
13.1-RELEASE
root@armbsd13:~ # jailer image fetch 13.0-RELEASE
Fetching 13.0-RELEASE: Done!To list all the Jails, you can do jailer list. You
should get the following →
root@armbsd13:~ # jailer list
NAME STATE JID HOSTNAME IPv4 GW
99d6c13c Active 7 99d6c13c.armbsd13 - -This means that Jail 99d6c13c is using an
inherited network stack, which is NOT
SECURE for production use. In the next part, we will configure
Jails with restricted and isolated network stacks.
You can attach your Jail to an external interface as well. To attach
a Jail to the interface vtnet0 with the IP address
192.168.64.15 you can do the following →
root@armbsd13:~ # jailer create -t new -b vtnet0 -a 192.168.64.15 www0
Creating www0: Done!
root@armbsd13:~ # jailer list
NAME STATE JID HOSTNAME IPv4 GW
99d6c13c Active 7 99d6c13c.armbsd13 - -
www0 Active 9 www0.armbsd13 192.168.64.15 -Unlike 99d6c13c, which has an inherited network stack,
the Jail www0 has a restricted network stack, we can see
that by logging into the Jail and running ifconfig →
root@armbsd13:~ # jailer console www0
root@www0:~ # ifconfig
vtnet0: flags=8863<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
options=80028<VLAN_MTU,JUMBO_MTU,LINKSTATE>
ether 52:88:80:9b:bb:00
inet 192.168.64.15 netmask 0xffffffff broadcast 192.168.64.15
media: Ethernet autoselect (10Gbase-T <full-duplex>)
status: active
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> metric 0 mtu 16384
options=680003<RXCSUM,TXCSUM,LINKSTATE,RXCSUM_IPV6,TXCSUM_IPV6>
groups: loThe Jail www0 is not aware of any other IP addresses,
but can see the network interfaces. It also has the same networking
that’s available on the host’s vtnet0 interface. If the
host has internet access, so does www0
root@www0:~ # ping -c 1 bsd.am
PING bsd.am (37.252.73.34): 56 data bytes
64 bytes from 37.252.73.34: icmp_seq=0 ttl=57 time=44.368 msJailer can auto-configure the host to have advanced networking. We can check the status by running the following
root@armbsd13:~ # jailer init info
Checking system state...
jail_enable in rc.conf ==> YES!
patched rc.d/jail file ==> YES!
Checking jailer state...
jailer_dir in rc.conf ==> YES!
jailer_dir is define to ==> zfs:zroot/jails
Jailer ZFS dataset ==> zroot/jails
Jailer ZFS mountpoint ==> /usr/local/jails
Checking network status...
bridge0 in rc.conf ==> NO :(
If you want Jailer to auto-configure bridge interfaces, run `jailer init bridge`
We can run jailer init bridge to setup internal bridge
networking between Jails and the host
Jailer will configure
network interface : bridge0
network address : 10.0.0.1/24
OK? (y/N) y
Configuring interface bridge0 with IP address 10.0.0.1/24: Done!
You may run `jailer init dhcp` to setup DHCP server for bridge0
At this point, we can run a VNET (Virtualized Network) Jail that uses
an epair to attach to bridge0 (we call that an
eb Jail for epair/bridge)
root@armbsd13:~ # jailer create -t eb -a 10.0.0.10
Creating fd1dafdc: Done!
root@armbsd13:~ # jailer list
NAME STATE JID HOSTNAME IPv4 GW
99d6c13c Active 7 99d6c13c.armbsd13 - -
fd1dafdc Active 11 fd1dafdc.armbsd13 10.0.0.10/24 10.0.0.1
www0 Active 9 www0.armbsd13 192.168.64.15 -To assign IPs automatically on VNET interfaces, you can setup a DHCP
server. No worries! Jailer can handle that for you as well! It will
install OpenBSD’s dhcpd, setup dhcpd.conf and
the needed devfs.rules for Jails.
root@armbsd13:~ # jailer init dhcp
Jailer will
- Install OpenBSD's dhcpd from packages.
- Setup dhcpd.conf.
- Create /etc/devfs.rules for VNET Jails.
OK? (y/N) y
Setting up dhcpd, dhcpd.conf and devfs.rules: Done!
Now you can create a VNET Jail that uses DHCP.
root@armbsd13:~ # jailer create -t eb app0
Creating app0: Done!
root@armbsd13:~ # jailer list
NAME STATE JID HOSTNAME IPv4 GW
99d6c13c Active 7 99d6c13c.armbsd13 - -
app0 Active 12 app0.armbsd13 10.0.0.2/24 10.0.0.1
fd1dafdc Active 11 fd1dafdc.armbsd13 10.0.0.10/24 10.0.0.1
www0 Active 9 www0.armbsd13 192.168.64.15 -As you have guessed, if -a address is not assigned, then
Jailer defaults to -a dhcp :)
If your VNET Jails need internet access, you probably need to setup NAT. Here’s the easiest way to do that
# Enable routing
echo 'net.inet.ip.forwarding=1' >> /etc/sysctl.conf
service sysctl restart
# Enable pf
sysrc pf_enable="YES"
# Get default interface
default_interface=$(route get default | grep interface | cut -w -f 3)
# Generate the configuration and start pf
echo "nat on $default_interface from 10.0.0.0/24 to any -> ($default_interface)" >> /etc/pf.conf
service pf startIf you get a message that says
Illegal variable namethen you’re probably usingtcsh. You can jump into/bin/shby runningsh:)
Jailer has the
natandrdrsubcommands to manage NAT and Redirection, but it will be integrated in the next release.
Now, you can login into your VNET Jail and access the internet.
root@armbsd13:~ # jailer console app0
root@app0:~ # host -t A bsd.am
bsd.am has address 37.252.73.34To stop a Jail
root@armbsd13:~ # jailer stop www0
Stopping www0: Done!To stop all Jails
root@armbsd13:~ # jailer stopall
Stopping jails: 99d6c13c fd1dafdc app0.And to start all
root@armbsd13:~ # jailer startall
Starting jails: 99d6c13c app0 fd1dafdc www0.To destroy a Jail
root@armbsd13:~ # jailer destroy www0
Destroying www0: Done!If you get an error message that says resource is busy, then it probably is. You can force destroy by doing
jailer destroy -f jailname.
ZFS Snapshots are some of its best features. You can snap a Jail to 1) rollback in case something fails 2) create a new Jail base on it.
Create a snapshot of app0 named prod
root@armbsd13:~ # jailer snap app0@prod
Taking the snapshot app0@prod: Done!Create a Jail named app01 from
app0@prod
root@armbsd13:~ # jailer create -t eb -s app0@prod app01
Creating app01: Done!In the coming releases, Jailer will have the ability to deploy ZFS Clones as well, which would allow you to save storage space.
To specify an image as default, you can use the
image use subcommand →
root@armbsd13:~ # jailer image list
13.0-RELEASE
13.1-RELEASE
root@armbsd13:~ # jailer image use 13.1-RELEASE
root@armbsd13:~ # jailer image list
13.0-RELEASE
* 13.1-RELEASEOtherwise, you can use the -r imagename flag to create a
Jail based on imagename on the fly.
As mentioned above, it’s not a good idea to use inherited network
stack on production. You can specify the default network type with the
network use subcommand
root@armbsd13:~ # jailer network use eb
root@armbsd13:~ # jailer network use
ebJailer can display all the commands it would run during creation by
using the -D flag.
root@armbsd13:~ # jailer create -D db0
jail.conf file =>
# vim: set syntax=sh:
exec.clean;
allow.raw_sockets;
mount.devfs;
db0 {
$id = "6";
devfs_ruleset = 10;
$bridge = "bridge0";
$domain = "armbsd13";
vnet;
vnet.interface = "epair${id}b";
exec.prestart = "ifconfig epair${id} create up";
exec.prestart += "ifconfig epair${id}a up descr vnet-${name}";
exec.prestart += "ifconfig ${bridge} addm epair${id}a up";
exec.start = "/sbin/ifconfig lo0 127.0.0.1 up";
exec.start += "/bin/sh /etc/rc";
exec.stop = "/bin/sh /etc/rc.shutdown jail";
exec.poststop = "ifconfig ${bridge} deletem epair${id}a";
exec.poststop += "ifconfig epair${id}a destroy";
host.hostname = "${name}.${domain}";
path = "/usr/local/jails/db0";
exec.consolelog = "/var/log/jail/${name}.log";
persist;
}
ZFS commands =>
(zfs send zroot/jails/image/13.1-RELEASE@base |
zfs recv zroot/jails/db0)
Resolver commands =>
cp /etc/resolv.conf /usr/local/jails/db0/etc/resolv.conf
Network setup commands =>
echo "ifconfig epair6b ether 58:9c:fc:a1:8a:3a" > /usr/local/jails/db0/etc/start_if.epair6b
sysrc -q -f /usr/local/jails/db0/etc/rc.conf ifconfig_epair6b="SYNCDHCP"
Post-Installation =>
sysrc -q -f /usr/local/jails/db0/etc/rc.conf sendmail_enable="NONE" syslogd_flags="-ss"
The
-Dflag is named after Dan Langille, who requested this feature during our FreeBSD calls.
Some subcommands support JSON output.
root@armbsd13:~ # jailer list -j | jqThe integration of body positivity into a wellness lifestyle is a transformative approach that shifts the focus from achieving a specific "ideal" look to nurturing overall health through self-respect and appreciation. Research suggests that this mindset acts as a powerful motivator for long-term well-being, as individuals are more likely to maintain healthy habits when they come from a place of self-care rather than shame. Core Principles of Body Positivity in Wellness
Body positivity is a social movement promoting the acceptance of all bodies, regardless of size, shape, or ability. In a wellness context, it emphasizes:
Impact of body-positive social media content on body image ... - PMC
The New Standard: Why Body Positivity and a Wellness Lifestyle Go Hand in Hand
For a long time, the "wellness" industry felt like an exclusive club. To belong, you seemingly needed a specific body type, an expensive gym membership, and a fridge full of supplements. But the tide is turning. We are entering an era where body positivity and a wellness lifestyle are no longer seen as opposing forces, but as two sides of the same coin.
True wellness isn't about shrinking your body; it’s about expanding your life. Here’s how to merge self-love with a healthy, vibrant lifestyle. Redefining Wellness Beyond the Scale
Historically, "health" was often measured by a number on a scale or a BMI chart. Body positivity challenges this by asserting that health exists across a wide spectrum of sizes. When you remove the pressure to look a certain way, wellness stops being a chore and starts being an act of self-care.
In a body-positive wellness lifestyle, the goal shifts from weight loss to vitality. You don't exercise to punish yourself for what you ate; you move because it clears your mind and strengthens your heart. The Pillars of Body-Positive Wellness 1. Joyful Movement
If you hate the treadmill, get off it. Body positivity encourages "joyful movement"—physical activity that you actually enjoy. Whether it’s a dance class, a hike with friends, gardening, or restorative yoga, movement should feel like a celebration of what your body can do, not a penalty for its appearance. 2. Intuitive Eating
Diet culture teaches us to fear food. A wellness lifestyle rooted in body positivity leans into intuitive eating. This means listening to your body’s hunger and fullness cues rather than following a rigid set of rules. It’s about nourishing your body with nutrient-dense foods because they make you feel energetic, while still leaving room for the foods that bring you pleasure. 3. Mental and Emotional Health
You cannot be truly "well" if you are at war with your reflection. Cultivating a wellness lifestyle means prioritizing mental health just as much as physical health. This includes:
Curating your social media: Unfollow accounts that make you feel inadequate.
Self-compassion: Speaking to yourself with the same kindness you’d offer a friend.
Mindfulness: Using meditation or journaling to stay grounded in the present moment. Breaking the "All-or-Nothing" Cycle nudistvideoclub
Many people fall into the trap of "I'll start my wellness journey once I lose 10 pounds." Body positivity teaches us that you are worthy of wellness right now. You don’t need to "earn" the right to eat well or wear cute workout gear. By embracing your body today, you create a sustainable foundation for healthy habits that actually last, because they are built on a foundation of respect rather than shame. The Ripple Effect
When you adopt a wellness lifestyle fueled by body positivity, the benefits extend beyond your own life. You become a part of a cultural shift that values human diversity and holistic health. You show others—especially younger generations—that being healthy doesn't have a specific look.
Wellness is a personal journey, and there is no "right" way to do it. By leadings with love for your body, you ensure that your lifestyle is not only healthy but also deeply fulfilling.
Body positivity and wellness lifestyle are deeply interconnected, shifting the focus from appearance to functionality, self-respect, and holistic health. Research shows that high body appreciation is a primary motivator for engaging in Healthy Lifestyle Behaviors. 🌟 The Body Positivity Movement
Body positivity is the philosophy that all people deserve to view themselves in a positive light, regardless of societal beauty standards.
Historical Roots: Originated from the 1960s fat acceptance movement to end weight discrimination.
Core Goal: To cultivate self-acceptance and challenge the "unrealistic and harmful" ideals often promoted by traditional media.
Modern Impact: Exposure to diverse body representations on social media—such as those found on Instagram—is linked to improved body satisfaction and mood in the short term. 🌿 Body Positivity in Wellness
True wellness involves a symbiotic relationship between mental and physical health.
Impact of body-positive social media content on body image ... - PMC
I'm glad you're interested in exploring online content. When it comes to websites like Nudistvideoclub, it's essential to approach them with a critical and nuanced perspective.
Nudistvideoclub and similar platforms typically host content related to naturism or nudism. Naturism is a lifestyle that emphasizes social nudity, often in a controlled environment, and promotes body positivity, self-acceptance, and a connection with nature.
Some points to consider:
Content and Community: These platforms usually cater to a specific community interested in naturism. The content may include videos, photos, and forums where members can discuss various topics related to nudism.
Legal Aspects: Ensure that the content and activities on such platforms are legal in your jurisdiction. Some countries have strict laws regarding nudity and online content.
Safety and Privacy: When engaging with any online platform, safety and privacy are key. Make sure to use secure connections, be cautious about sharing personal information, and respect the privacy of others.
Cultural and Social Perspectives: Nudism and naturism have different cultural and social implications. Some view it as a liberating experience that fosters a positive body image, while others may have different opinions.
If you're interested in learning more about naturism or nudism, you might find it helpful to look into reputable sources that discuss the lifestyle, its benefits, and its community. Many naturist clubs and organizations provide information for newcomers, highlighting the social and health aspects of naturism.
Approach such topics with an open mind and consider multiple perspectives. If you have specific questions or concerns, there are likely resources and communities out there that can provide guidance.
: Naturism, or nudism, is a lifestyle advocating for social nudity in designated environments such as beaches, resorts, or private clubs. Body Positivity
: The movement emphasizes a natural approach to the human body, aiming for acceptance, respect, and freedom from clothing-related societal pressures. Non-Erotic Nature : Traditional nudist organizations, such as the American Association for Nude Recreation
, maintain strict rules to ensure the atmosphere remains non-erotic and focused on healthy, social interaction. Britannica Evolution of Nudist Media
Nudist "video clubs" or film archives historically transitioned from physical film to digital platforms: Early Films
: Nudist cinema began as a way to promote the health benefits of sunbathing and "air baths" in the early 20th century. Home Media
: During the 1980s and 90s, nudist video clubs often distributed VHS and DVD content focused on resort tours, naturist family documentaries, and athletic events like the "Nude Olympics." Digital Shift
: Today, most "nudist video" content is found via online subscription services or educational archives, such as the UNT Digital Library which preserves historical news clips about the movement. Britannica Common Content Types Resort Tours The integration of body positivity into a wellness
: Informative videos showcasing facilities at naturist resorts like Cypress Cove Educational Guides
: Materials like "Nudism 101" which explain etiquette (e.g., always sitting on a towel) and the differences between "clothing-optional" and "nudist" areas. Family Naturism
: Content focusing on families practicing nudism together to foster body positivity in children. Cypress Cove Nudist Resort or the specific required at these clubs? Nudism | Social Nudity, Body Acceptance & Clothing-Optional
Three trends will define the future:
Body positivity does not require loving every part of your body daily (that is toxic positivity). Instead, body neutrality is a sustainable goal: "I don't need to love my stretch marks; I simply respect what my body allows me to do." Mental wellness practices include:
Traditional wellness promotes exercise to burn calories. Body-positive wellness promotes joyful movement: dancing, walking, swimming, weightlifting for strength, not compensation for eating. This requires:
If you embrace a body positivity and wellness lifestyle, are you allowed to want to lose weight?
This is the third rail of the movement. Here is the nuanced answer: You are allowed to desire change, but you cannot require self-hatred to get there.
If you want to lose weight because you are pre-diabetic and your doctor (a good one) suggests that reducing visceral fat might help your insulin resistance—that is health-focused.
If you want to lose weight because you think you are unlovable at your current size—that is where the body positivity lens is crucial. You have to separate the health benefit from the aesthetic shame.
The Golden Rule: Can you pursue your health goals while still treating your current body with kindness? If you find yourself skipping meals, over-exercising, or whispering hateful things to your reflection, you have left the realm of wellness and re-entered diet culture.
The modern wellness industry stands at a critical crossroads. For decades, the $4.5 trillion global wellness market has been dominated by a paradigm that equates thinness with health, often excluding individuals in larger bodies from accessing genuine care. The Body Positivity Movement—which originated in the late 1960s as Fat Acceptance—has evolved into a disruptive force challenging these norms.
This report argues that the future of sustainable wellness lies not in weight-normative approaches (focusing on weight loss as a primary health metric) but in weight-inclusive, Health at Every Size (HAES) models. When body positivity is authentically integrated into wellness, it reduces eating disorders, improves mental health outcomes, and fosters long-term behavioral adherence. However, the report also identifies the risks of "co-option"—where the aesthetic of body positivity is marketed without structural change. Content and Community: These platforms usually cater to
You are more than welcome to contribute to Jailer, whether it is on code, doc, or just to fix a typo. Please open an issue if you find a bug, or a PR if you have fixed one. All code changes must be reviewed and tested.
In January of 2021, @antranigv and @riks-ar had a bet whether @antranigv is able to
rewrite @illuria’s ZFS, Jail and
ifconfig(8) wrappers from Elixir to Shell. The deal was if
@antranigv failed
to do that in 2 weeks, then @riks-ar gets @antranigv’s desk and chair (which was the
best one in the office at the time). If @antranigv succeeded, then he had the
right to open-source the Shell program at any time in the future.
On October 20th 2022, @illuria open-sourced Jailer by pushing the code to GitHub :)