Jail در FreeBSD: سرویس جداگانه با IP اختصاصی

zfs create -o mountpoint=/usr/local/jails tank/jails
zfs create tank/jails/www

REL=$(freebsd-version -u | sed 's/-p[0-9]*$//')     # e.g. 15.0-RELEASE
fetch -o /tmp/base.txz "https://download.freebsd.org/releases/amd64/${REL}/base.txz"
tar -xf /tmp/base.txz -C /usr/local/jails/www --unlink
cp /etc/resolv.conf /usr/local/jails/www/etc/
cp /etc/localtime /usr/local/jails/www/etc/

exec.start = "/bin/sh /etc/rc";
exec.stop = "/bin/sh /etc/rc.shutdown";
exec.clean;
mount.devfs;
devfs_ruleset = 4;

www {
    host.hostname = "www.corp.sahor.ir";
    path = "/usr/local/jails/${name}";
    ip4.addr = "vtnet0|192.168.10.31/24";
    allow.raw_sockets = 0;
}

sysrc jail_enable=YES
sysrc jail_list+=www
service jail start www
jls

jexec www sysrc nginx_enable=YES
jexec www env ASSUME_ALWAYS_YES=yes pkg bootstrap
jexec www pkg install -y nginx
jexec www service nginx start
fetch -qo - http://192.168.10.31/ | head -3

# Base system of the jail
freebsd-update -b /usr/local/jails/www fetch install
# Packages inside the jail
pkg -j www upgrade -y
service jail restart www

zfs snapshot tank/jails/www@before-upgrade
# if something breaks:
service jail stop www && zfs rollback tank/jails/www@before-upgrade && service jail start www