[Linux-disciples] chrooting bind9

[Adam Rosi-Kessel]

Stephen R Laniel wrote:
> On Mon, Nov 14, 2005 at 05:18:10PM -0500, Adam Rosi-Kessel wrote:
>> You could, a la debootstrap, have an entire functional Debian installation
>> in a jail, and thus you would get your wish, but I think it would be
>> unwieldy and perhaps defeat the purpose.  At that point, you might as well
>> just have a virtual machine running your BIND installation.
> Right, so my question is whether there's any good automated
> way to do this sort of thing (this sort of debootstrap
> thing, that is) for bind alone. I'm hacking around with this
> right now: copy all the files for apt-get into /chroot, etc.
> We'll see if I get anywhere with it.

I don't think so. The point I was trying to make is that the whole point of
the jail is it only has X in it, where X is what you are trying to jail. I
guess you could try to figure out the exact minimalist Debian installation
you would need plus the package you're trying to jail, but it seems to me
this is more effort than it's worth... plus you then have to worry about
upgrading all the packages *in* the jail alongside their counterparts
outside the jail.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 250 bytes
Desc: OpenPGP digital signature
Url : http://lists.bostoncoop.net/pipermail/linux-disciples/attachments/20051114/5839269f/signature.pgp