New Log/Bind feature

Discussion in 'Installation/Configuration' started by KoS, Mar 22, 2013.

  1. KoS

    KoS Member

    as falko has closed the bug report ( ) i have to ask here ;-)

    i have missed the new bind-feature. two questions:
    - at the moment the entries are added in the fstab file, but they are not mounted automatically. is that normal or something not working on my system?

    - is there a migration path for the existing websites?

    thanks for your support.
  2. falko

    falko Super Moderator ISPConfig Developer

    They should be mounted automatically. Did you check the output of
  3. KoS

    KoS Member

    sure i looked at the mount list, but now i see the "problem": trying to mount the paths i get a permission denied (as root). i supposed it has to to with the LXC container setup. i'll have to check that. (could/should the mount check be added to the "server state"?)

    UPDATE: it is NOT possible to mount inside of LXC containers. so i would have to make the mounts outside, on the host, and that is not really pracitable :-( is there a chance to make this an server option, so that one can choose between the old "symlink" and new "mount" option? in which svn revision was that changed, i couldn't find it?
    Last edited: Mar 24, 2013
  4. freeline

    freeline New Member

    Any progress here, I'm running into the same problems. For the moment I commented out the lines that create the fstab entries. In current lxd versions the container does not start up correctly if mounting fstab entry fails
  5. till

    till Super Moderator Staff Member ISPConfig Developer

    I'm not a LXC developer, so I can't tell you when they fix the bugs in their fstab handling.
  6. freeline

    freeline New Member

    Because of security considerations mounts inside a container are not allowed. I think it is possible to change that via config files but I think it's a good precaution. So I would also like a symlink instead of the bind mount.
  7. till

    till Super Moderator Staff Member ISPConfig Developer

    Symlinks can not work here, that's why ISPConfig does not use them. As you might know, a symlink can not be used to access a directory that is outside of a jail from within the jail and that's what is required here.

    You can easily check this out yourself.

    1) Remove the bind mount and replace it with a symlink.
    2) Create a jailed ssh user in ISPConfig, login with that user on the shell and try to tail the access.log file of this website.
  8. freeline

    freeline New Member

Share This Page