Move mumble.nasqueron.org to a jail
Closed, ResolvedPublic
Actions

Assigned To

Authored By

	dereckson
	Feb 15 2016, 05:51

Description

It seems murmur would be happy with a specific version of OpenSSL.

See notes on https://wiki.mumble.info/wiki/BuildingFreeBSD

Create a jail to be able to install the version we want and avoid a conflict port libssl.so / base libssl.so could be valuable.

Bonus : it increases privilege separation and containerization.

Related Objects
Search...

Status	Assigned	Task
Resolved	dereckson	T733 Mumble server: libIce.so.35 not found on Ysul
Resolved	dereckson	T736 Move mumble.nasqueron.org to a jail
Resolved	dereckson	T738 Allow remote connection to Ysul MySQL server
Resolved	dereckson	T747 Assign IPv6 to mumble.nasqueron.org jail

Event Timeline

dereckson closed this task as Resolved.Feb 15 2016, 05:51

dereckson claimed this task.

dereckson triaged this task as Normal priority.

dereckson added a project: Servers.

dereckson added a subscriber: dereckson.

dereckson reopened this task as Open.Feb 15 2016, 05:51

dereckson added a parent task: T733: Mumble server: libIce.so.35 not found on Ysul.

dereckson updated the task description. (Show Details)

Create jail and install Murmur package

$ ezjail-admin create mumble.nasqueron.org 'em0|212.83.187.132'
$ ezjail-admin start mumble.nasqueron.org
$ jexec 4 tcsh
$ cat > /etc/resolv.conf
nameserver 4.2.2.1
nameserver 4.2.2.3
$ pkg install murmur
[...]
New packages to be INSTALLED:
        murmur: 1.2.10_1
        qt4-network: 4.8.7
        ca_root_nss: 3.22
        qt4-corelib: 4.8.7_1
        glib: 2.44.1_3
        gettext-runtime: 0.19.6
        indexinfo: 0.2.4
        python27: 2.7.11_1
        libffi: 3.2.1
        libiconv: 1.14_9
        perl5: 5.20.3_8
        pcre: 8.37_4
        icu: 55.1
        qt4-sql: 4.8.7
        mDNSResponder: 576.30.4
        qt4-sqlite-plugin: 4.8.7
        sqlite3: 3.10.2_2
        qt4-xml: 4.8.7
        protobuf: 2.6.1
[...]

It works: no seg fault for murmur.

Install Murmur with Ice

$ pkg install Ice
[...]
New packages to be INSTALLED:
        Ice: 3.6.1
        expat: 2.1.0_3
        mcpp: 2.7.2_2
        db5: 5.3.28_3

[...]
$ portsnap fetch extract
$ cd /usr/ports/audio/murmur
$ make build stage deinstall reinstall