Base

create jail 'base'

Base is a template from which all subsequent jails are derived. Each jail is derived from a ZFS snapshot of base. Since ZFS is a Copy on Write filesystem new jails only consume the differences between the snapshot and their current state. This is extremely disk efficient.

provision base

Sample output. It may take a couple minutes to download the FreeBSD archive and extract it.

If there are customizations you want applied in every subsequent jail, perform them in the base jail.

Manual base updates

If you wish to make customizations to all future jails, make those changes within the base jail that matches your currently running OS version (check with uname -r). If a snapshot already exists, delete it (it will be recreated at next provision) so that future jails will get the changes you made. Example:

# uname -r
13.2-RELEASE-p0
zfs destroy zroot/jails/base-13.2-RELEASE@p0

install CA $igned certificate

If you have a SSL certificate purchased from a Certificate Authority, install it:

cp /path/to/private.key     /etc/ssl/private/server.key
cp /path/to/certificate.crt /etc/ssl/certs/server.crt
cat ca-bundle >>            /etc/ssl/certs/server.crt

Most installs can skip this and use Let's Encrypt certificates instead.

Continue to Jails