BSD Cafe Billboard

Jails, Not Containers: FreeBSD Isolation Done Right – Umair Khurshid | Klara Systems <https://klarasystems.com/articles/jails-not-containers-freebsd-isolation-done-right/> Containers play a major role in modern infrastructure, but they are not the right answer for every workload. This article explores how FreeBSD jails provide purpose-built isolation, predictable security boundaries, and deep ZFS integration—making them ideal infrastructure-grade services where stability is essential. … Via <https://billboard.bsd.cafe/post/857> | <https://www.reddit.com/r/freebsd/comments/1v5nkno/jails_not_containers_freebsd_isolation_done_right/>#FreeBSD #jails #Linux #containers

… Let's move on. It's still quite newsworthy; Cody Franklin used the phrase "recently". Until yesterday, I never heard anyone from TrueNAS or IXsystems talk about the transition. I learnt something new.

dhcpd and unbound in FreeBSD jails The other day, I used FreeBSD on a Raspberry Pi card to get a redundant DHCP server and DNS resolver working together with an OpenBSD server. It works great. But another FreeBSD server is available and I don’t really need yet another gadget powered on. So I moved both the DHCP and DNS services to this machine. While I was there, I took the opportunity to put them into their own jails. Because, you know, privilege escalation… https://www.tumfatig.net/2026/dhcpd-and-unbound-in-freebsd-jails/ ping: https://framapiaf.org/@joel@tumfatig.net/116599962350361525

See: https://blog.hofstede.it/automating-freebsd-jails-with-cdist-zero-dependencies-inside-the-jail/