#!/bin/sh
#
# $Id: jail.sh,v 1.3 2007/05/23 11:34:26 chfl4gs Exp $
#
##Initial development jail setup

# for md(4) mount at startup
gcc mount_md.c -o mount_md && cp mount_md /usr/sbin/mount_md

# Jail directory
J=/usr/home/jail/builder
I=/usr/home/jail/img

mkdir -p $J
mkdir -p $I

# creating 4GB mem disk
dd of=$I/dev.rp.img bs=1024 seek=6291456 count=0
mdconfig -a -t vnode -f $I/dev.rp.img -u 0
newfs -U /dev/md0
mount /dev/md0 $J

# Host modifications
cat >> /etc/rc.conf <<EOF
jail_enable="YES"
jail_list="builder"
jail_set_hostname_allow="NO"
jail_socket_unixiproute_only="YES"
jail_builder_rootdir="/usr/home/jail/builder"
jail_builder_hostname="builder.rawpacket.org"
jail_builder_ip="127.0.0.2"
jail_builder_interface="lo0"
jail_builder_mount_enable="YES"
jail_builder_fstab="/etc/fstab.builder"
jail_builder_exec_start="/bin/sh /etc/rc"
EOF

cat > /etc/fstab.builder <<EOF
md /usr/home/jail/builder md rw,-P,-F/usr/home/jail/img/dev.rp.img
md /usr/home/jail/builder ufs rw,noauto
/usr/src         /usr/home/jail/builder/usr/src  nullfs  rw     0       0
/usr/ports       /usr/home/jail/builder/usr/ports       nullfs  rw      0       0
EOF

# Enable chflags within jail
cat >> /etc/sysctl.conf <<EOF
security.jail.sysvipc_allowed=1
security.jail.allow_raw_sockets=1
security.jail.chflags_allowed=1
EOF

# Jail guest creation
cd /usr/src
make world DESTDIR=$J
make distribution DESTDIR=$J
mount_devfs devfs $J/dev
cd $J
ln -sf dev/null kernel
touch $J/etc/fstab
mkdir $J/home/rawpacket
mkdir $J/usr/ports

mount_nullfs /usr/src $J/usr/src
mount_nullfs /usr/ports $J/usr/ports

cat > $J/etc/rc.conf <<EOF
hostname="builder.rawpacket.org"
clear_tmp_enable="YES"
kern_securelevel_enable="No"
syslogd_enable="YES"
syslogd_flags="-ss"
sendmail_enable="NONE"
sendmail_submit_enable="NO"
sendmail_outbound_enable="NO"
sendmail_msp_queue_enable="NO"
EOF
/etc/rc.d/jail start