From 089223d1f645d69a1253ba13284442836c73cb5e Mon Sep 17 00:00:00 2001 From: Barry McCormick Date: Thu, 1 May 2025 10:15:43 -0700 Subject: [PATCH 01/26] Update README.md --- README.md | 30 ++++++++++++++++++++++++++++++ 1 file changed, 30 insertions(+) diff --git a/README.md b/README.md index 0bd5d97b..400fe236 100644 --- a/README.md +++ b/README.md @@ -5,6 +5,36 @@ deployment and management of containerized applications on FreeBSD. [Bastille Documentation](https://bastille.readthedocs.io/en/latest/) +| | BastilleBSD | Appjail | pot | ezjail | iocage | | +| --- | --- | --- | --- | --- | --- | +| OCI Compliant | No | Yes | No | No | No | +| Writen In | Bourne Shell | Bourne Shell, C | Bourne Shell | Bourne Shell | Bourne Shell, Rust | +| Dependencies | None | C | None | None | Rust| +| Jail Types | vnet, bridged vnet, thin, thick, empty, clone, Linux | clone, copy, tiny thin, thick, empty, linux+debootstrap | thick | basejail | clone, basejail, template, empty, thick | +| Jail dependency | No | Yes | Yes | No | Yes | +| Import/Export | Yes | Yes | Yes | Yes | Yes | +| Support Boot Order Priorities| Yes | Yes | No | Yes using `rcorder` | Yes | +| Linux containers | Yes | Yes | No | No | Yes | +| Automation | Templates | Makejail, Initscripts, Images | Flavors, Images | Flavours | Plugins | +| Package Management | Yes | No | No | No | No | +| ZFS Support | Yes | Yes | Yes | No | No | +| Volume management | No | Yes | Basic | No | Basic | +| VNET Support | Yes | Yes | Yes | No | Yes | +| IPv6 Support| Yes | Yes | Yes | Yes | Yes | +| Dual Network Stack | Yes | ?? | Yes | No | No | +| Netgraph | Yes | Yes | No | No | No | Netgraph | +| Dynamic Firewall | Yes | Yes | Yes | No | No| +| Network Management | VLANS, Bridges | Virtual Networks, Bridges | Subnet, requires `sysutils/potnet` | No | No | +| Dynamic DEVFS Ruleset Management | No | Yes | No | No | No | +| Resource Control | Yes | Yes | CPU and Memory | No | Legacy Only | +| CPU Sets | No | Yes | Yes | Yes | Yes | +| Parallel startup | Yes | Yes (Healthcheckers, jails & NAT) | No | No | No | +| Log Management | No | Yes | No | No | No | +| Copy Files Between Jails | Yes | No | No | No | No | +| Top Support | Yes | No | No | No | No| +| HTop Support | Yes | No | No | No | No | +| X11 support | Yes | No | No | No | No | + Installation ============ Bastille is available for installation from the official FreeBSD ports tree. From b6ff5a269b30c5773fedd47523a22435e9a5c19b Mon Sep 17 00:00:00 2001 From: Barry McCormick Date: Thu, 1 May 2025 10:26:56 -0700 Subject: [PATCH 02/26] Update README.md --- README.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/README.md b/README.md index 400fe236..da2c59b0 100644 --- a/README.md +++ b/README.md @@ -5,6 +5,9 @@ deployment and management of containerized applications on FreeBSD. [Bastille Documentation](https://bastille.readthedocs.io/en/latest/) +Bastille Compared to Other Jail Managers +======================================== + | | BastilleBSD | Appjail | pot | ezjail | iocage | | | --- | --- | --- | --- | --- | --- | | OCI Compliant | No | Yes | No | No | No | From e4f1ddde319f9dab9b45a1ff75d9c066e0c1460b Mon Sep 17 00:00:00 2001 From: Barry McCormick Date: Thu, 1 May 2025 10:29:17 -0700 Subject: [PATCH 03/26] Update README.md --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index da2c59b0..9e03e546 100644 --- a/README.md +++ b/README.md @@ -8,7 +8,7 @@ deployment and management of containerized applications on FreeBSD. Bastille Compared to Other Jail Managers ======================================== -| | BastilleBSD | Appjail | pot | ezjail | iocage | | +| BastilleBSD | Appjail | pot | ezjail | iocage | | --- | --- | --- | --- | --- | --- | | OCI Compliant | No | Yes | No | No | No | | Writen In | Bourne Shell | Bourne Shell, C | Bourne Shell | Bourne Shell | Bourne Shell, Rust | From 2956a7ee305cbda25bb8ed110ec98413c6d2ca76 Mon Sep 17 00:00:00 2001 From: Barry McCormick Date: Thu, 1 May 2025 10:38:50 -0700 Subject: [PATCH 04/26] Update README.md --- README.md | 30 +----------------------------- 1 file changed, 1 insertion(+), 29 deletions(-) diff --git a/README.md b/README.md index 9e03e546..3e4557e6 100644 --- a/README.md +++ b/README.md @@ -8,35 +8,7 @@ deployment and management of containerized applications on FreeBSD. Bastille Compared to Other Jail Managers ======================================== -| BastilleBSD | Appjail | pot | ezjail | iocage | -| --- | --- | --- | --- | --- | --- | -| OCI Compliant | No | Yes | No | No | No | -| Writen In | Bourne Shell | Bourne Shell, C | Bourne Shell | Bourne Shell | Bourne Shell, Rust | -| Dependencies | None | C | None | None | Rust| -| Jail Types | vnet, bridged vnet, thin, thick, empty, clone, Linux | clone, copy, tiny thin, thick, empty, linux+debootstrap | thick | basejail | clone, basejail, template, empty, thick | -| Jail dependency | No | Yes | Yes | No | Yes | -| Import/Export | Yes | Yes | Yes | Yes | Yes | -| Support Boot Order Priorities| Yes | Yes | No | Yes using `rcorder` | Yes | -| Linux containers | Yes | Yes | No | No | Yes | -| Automation | Templates | Makejail, Initscripts, Images | Flavors, Images | Flavours | Plugins | -| Package Management | Yes | No | No | No | No | -| ZFS Support | Yes | Yes | Yes | No | No | -| Volume management | No | Yes | Basic | No | Basic | -| VNET Support | Yes | Yes | Yes | No | Yes | -| IPv6 Support| Yes | Yes | Yes | Yes | Yes | -| Dual Network Stack | Yes | ?? | Yes | No | No | -| Netgraph | Yes | Yes | No | No | No | Netgraph | -| Dynamic Firewall | Yes | Yes | Yes | No | No| -| Network Management | VLANS, Bridges | Virtual Networks, Bridges | Subnet, requires `sysutils/potnet` | No | No | -| Dynamic DEVFS Ruleset Management | No | Yes | No | No | No | -| Resource Control | Yes | Yes | CPU and Memory | No | Legacy Only | -| CPU Sets | No | Yes | Yes | Yes | Yes | -| Parallel startup | Yes | Yes (Healthcheckers, jails & NAT) | No | No | No | -| Log Management | No | Yes | No | No | No | -| Copy Files Between Jails | Yes | No | No | No | No | -| Top Support | Yes | No | No | No | No| -| HTop Support | Yes | No | No | No | No | -| X11 support | Yes | No | No | No | No | + Installation ============ From 865951e9f2aa14ca0aa71250c105f810d8f63c60 Mon Sep 17 00:00:00 2001 From: Barry McCormick Date: Fri, 2 May 2025 08:51:28 -0700 Subject: [PATCH 05/26] Update ROADMAP.md --- ROADMAP.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/ROADMAP.md b/ROADMAP.md index 762b4420..dc7785e4 100644 --- a/ROADMAP.md +++ b/ROADMAP.md @@ -13,7 +13,7 @@ validating updates to Bastille itself. This automated validation of Pull Requests should be a priority early in the year with a full test suite designed to validate all expected uses of Bastille sub-commands. -Container Monitoring ~ 0.15.x-beta +Container Monitoring ~ 1.0.x-beta -------------------------------------------- The ability to monitor processes, services, mounts, sockets, etc from the host. Auto-remediation would be simple enough to define. Notifications would probably From 063a53ca7d0e108f93d90d148bbf020d5870ea84 Mon Sep 17 00:00:00 2001 From: Barry McCormick Date: Fri, 2 May 2025 09:02:41 -0700 Subject: [PATCH 06/26] Create COMPARE.md --- COMPARE.md | 1 + 1 file changed, 1 insertion(+) create mode 100644 COMPARE.md diff --git a/COMPARE.md b/COMPARE.md new file mode 100644 index 00000000..8b137891 --- /dev/null +++ b/COMPARE.md @@ -0,0 +1 @@ + From 42e1d2fb4b595a2007f714320ae1fdbaeaa58b22 Mon Sep 17 00:00:00 2001 From: Barry McCormick Date: Fri, 2 May 2025 09:04:23 -0700 Subject: [PATCH 07/26] Update COMPARE.md --- COMPARE.md | 30 ++++++++++++++++++++++++++++++ 1 file changed, 30 insertions(+) diff --git a/COMPARE.md b/COMPARE.md index 8b137891..7d6f3cae 100644 --- a/COMPARE.md +++ b/COMPARE.md @@ -1 +1,31 @@ + +| | BastilleBSD | Appjail | pot | ezjail | iocage | | +| --- | --- | --- | --- | --- | --- | +| OCI Compliant | No | Yes | No | No | No | +| Writen In | Bourne Shell | Bourne Shell, C | Bourne Shell | Bourne Shell | Bourne Shell, Rust | +| Dependencies | None | C | None | None | Rust| +| Jail Types | vnet, bridged vnet, thin, thick, empty, clone, Linux | clone, copy, tiny thin, thick, empty, linux+debootstrap | thick | basejail | clone, basejail, template, empty, thick | +| Jail dependency | No | Yes | Yes | No | Yes | +| Import/Export | Yes | Yes | Yes | Yes | Yes | +| Support Boot Order Priorities| Yes | Yes | No | Yes using `rcorder` | Yes | +| Linux containers | Yes | Yes | No | No | Yes | +| Automation | Templates | Makejail, Initscripts, Images | Flavors, Images | Flavours | Plugins | +| Package Management | Yes | No | No | No | No | +| ZFS Support | Yes | Yes | Yes | No | No | +| Volume management | No | Yes | Basic | No | Basic | +| VNET Support | Yes | Yes | Yes | No | Yes | +| IPv6 Support| Yes | Yes | Yes | Yes | Yes | +| Dual Network Stack | Yes | ?? | Yes | No | No | +| Netgraph | Yes | Yes | No | No | No | Netgraph | +| Dynamic Firewall | Yes | Yes | Yes | No | No| +| Network Management | VLANS, Bridges | Virtual Networks, Bridges | Subnet, requires `sysutils/potnet` | No | No | +| Dynamic DEVFS Ruleset Management | No | Yes | No | No | No | +| Resource Control | Yes | Yes | CPU and Memory | No | Legacy Only | +| CPU Sets | No | Yes | Yes | Yes | Yes | +| Parallel startup | Yes | Yes (Healthcheckers, jails & NAT) | No | No | No | +| Log Management | No | Yes | No | No | No | +| Copy Files Between Jails | Yes | No | No | No | No | +| Top Support | Yes | No | No | No | No| +| HTop Support | Yes | No | No | No | No | +| X11 support | Yes | No | No | No | No | From 7e984d4c010813381c377f8a66f8eab03ac494b8 Mon Sep 17 00:00:00 2001 From: Barry McCormick Date: Fri, 2 May 2025 09:05:34 -0700 Subject: [PATCH 08/26] Update COMPARE.md --- COMPARE.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/COMPARE.md b/COMPARE.md index 7d6f3cae..94235027 100644 --- a/COMPARE.md +++ b/COMPARE.md @@ -1,6 +1,6 @@ -| | BastilleBSD | Appjail | pot | ezjail | iocage | | +| | BastilleBSD | Appjail | pot | ezjail | iocage | |\n | --- | --- | --- | --- | --- | --- | | OCI Compliant | No | Yes | No | No | No | | Writen In | Bourne Shell | Bourne Shell, C | Bourne Shell | Bourne Shell | Bourne Shell, Rust | From 9277dd6110b13b8d9e4d61d5c4d472413228f0d9 Mon Sep 17 00:00:00 2001 From: Barry McCormick Date: Fri, 2 May 2025 09:06:03 -0700 Subject: [PATCH 09/26] Update COMPARE.md --- COMPARE.md | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/COMPARE.md b/COMPARE.md index 94235027..f0b57845 100644 --- a/COMPARE.md +++ b/COMPARE.md @@ -1,6 +1,4 @@ - - -| | BastilleBSD | Appjail | pot | ezjail | iocage | |\n +| | BastilleBSD | Appjail | pot | ezjail | iocage | | | --- | --- | --- | --- | --- | --- | | OCI Compliant | No | Yes | No | No | No | | Writen In | Bourne Shell | Bourne Shell, C | Bourne Shell | Bourne Shell | Bourne Shell, Rust | From c2d0476727b14de0c919c98f292b39fcd2ee075b Mon Sep 17 00:00:00 2001 From: Barry McCormick Date: Fri, 2 May 2025 09:49:01 -0700 Subject: [PATCH 10/26] Update COMPARE.md --- COMPARE.md | 9 +++++---- 1 file changed, 5 insertions(+), 4 deletions(-) diff --git a/COMPARE.md b/COMPARE.md index f0b57845..9f265996 100644 --- a/COMPARE.md +++ b/COMPARE.md @@ -1,10 +1,11 @@ -| | BastilleBSD | Appjail | pot | ezjail | iocage | | -| --- | --- | --- | --- | --- | --- | + +| Feature | BastilleBSD | Appjail | pot | ezjail | iocage | +| --- | --- | --- | --- | --- | --- | | OCI Compliant | No | Yes | No | No | No | | Writen In | Bourne Shell | Bourne Shell, C | Bourne Shell | Bourne Shell | Bourne Shell, Rust | | Dependencies | None | C | None | None | Rust| | Jail Types | vnet, bridged vnet, thin, thick, empty, clone, Linux | clone, copy, tiny thin, thick, empty, linux+debootstrap | thick | basejail | clone, basejail, template, empty, thick | -| Jail dependency | No | Yes | Yes | No | Yes | +| Jail dependency | Yes | Yes | Yes | No | Yes | | Import/Export | Yes | Yes | Yes | Yes | Yes | | Support Boot Order Priorities| Yes | Yes | No | Yes using `rcorder` | Yes | | Linux containers | Yes | Yes | No | No | Yes | @@ -26,4 +27,4 @@ | Copy Files Between Jails | Yes | No | No | No | No | | Top Support | Yes | No | No | No | No| | HTop Support | Yes | No | No | No | No | -| X11 support | Yes | No | No | No | No | +| X11 support | No | Yes | No | No | No | From 5b092ade9ae0176b4d7dc806e98333257e148a83 Mon Sep 17 00:00:00 2001 From: Barry McCormick Date: Fri, 2 May 2025 09:53:35 -0700 Subject: [PATCH 11/26] Update README.md From e4f45798bbbf54a737f1f3f226642ce4b7f16d2a Mon Sep 17 00:00:00 2001 From: Barry McCormick Date: Fri, 2 May 2025 09:54:34 -0700 Subject: [PATCH 12/26] Update README.md --- README.md | 29 +++++++++++++++++++++++++++++ 1 file changed, 29 insertions(+) diff --git a/README.md b/README.md index 3e4557e6..6e01154c 100644 --- a/README.md +++ b/README.md @@ -9,6 +9,35 @@ Bastille Compared to Other Jail Managers ======================================== +| Feature | BastilleBSD | Appjail | pot | ezjail | iocage | +| --- | --- | --- | --- | --- | --- | +| OCI Compliant | No | Yes | No | No | No | +| Writen In | Bourne Shell | Bourne Shell, C | Bourne Shell | Bourne Shell | Bourne Shell, Rust | +| Dependencies | None | C | None | None | Rust| +| Jail Types | vnet, bridged vnet, thin, thick, empty, clone, Linux | clone, copy, tiny thin, thick, empty, linux+debootstrap | thick | basejail | clone, basejail, template, empty, thick | +| Jail dependency | Yes | Yes | Yes | No | Yes | +| Import/Export | Yes | Yes | Yes | Yes | Yes | +| Support Boot Order Priorities| Yes | Yes | No | Yes using `rcorder` | Yes | +| Linux containers | Yes | Yes | No | No | Yes | +| Automation | Templates | Makejail, Initscripts, Images | Flavors, Images | Flavours | Plugins | +| Package Management | Yes | No | No | No | No | +| ZFS Support | Yes | Yes | Yes | No | No | +| Volume management | No | Yes | Basic | No | Basic | +| VNET Support | Yes | Yes | Yes | No | Yes | +| IPv6 Support| Yes | Yes | Yes | Yes | Yes | +| Dual Network Stack | Yes | ?? | Yes | No | No | +| Netgraph | Yes | Yes | No | No | No | Netgraph | +| Dynamic Firewall | Yes | Yes | Yes | No | No| +| Network Management | VLANS, Bridges | Virtual Networks, Bridges | Subnet, requires `sysutils/potnet` | No | No | +| Dynamic DEVFS Ruleset Management | No | Yes | No | No | No | +| Resource Control | Yes | Yes | CPU and Memory | No | Legacy Only | +| CPU Sets | No | Yes | Yes | Yes | Yes | +| Parallel startup | Yes | Yes (Healthcheckers, jails & NAT) | No | No | No | +| Log Management | No | Yes | No | No | No | +| Copy Files Between Jails | Yes | No | No | No | No | +| Top Support | Yes | No | No | No | No| +| HTop Support | Yes | No | No | No | No | +| X11 support | No | Yes | No | No | No | Installation ============ From 6afe4c8c1ebec46715c9d0034c30aac660009952 Mon Sep 17 00:00:00 2001 From: Barry McCormick Date: Fri, 2 May 2025 21:55:26 -0700 Subject: [PATCH 13/26] Update README.md --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index 6e01154c..57a4c8a6 100644 --- a/README.md +++ b/README.md @@ -14,7 +14,7 @@ Bastille Compared to Other Jail Managers | OCI Compliant | No | Yes | No | No | No | | Writen In | Bourne Shell | Bourne Shell, C | Bourne Shell | Bourne Shell | Bourne Shell, Rust | | Dependencies | None | C | None | None | Rust| -| Jail Types | vnet, bridged vnet, thin, thick, empty, clone, Linux | clone, copy, tiny thin, thick, empty, linux+debootstrap | thick | basejail | clone, basejail, template, empty, thick | +| Jail Types | vnet, bridged vnet, thin, thick, empty, clone, Linux | clone, copy, tiny, thin, thick, empty, linux+debootstrap | thick | basejail | clone, basejail, template, empty, thick | | Jail dependency | Yes | Yes | Yes | No | Yes | | Import/Export | Yes | Yes | Yes | Yes | Yes | | Support Boot Order Priorities| Yes | Yes | No | Yes using `rcorder` | Yes | From 72b55c0ee4eaa6b22eca16bd030f803fa1982f9c Mon Sep 17 00:00:00 2001 From: Barry McCormick Date: Fri, 2 May 2025 21:56:08 -0700 Subject: [PATCH 14/26] Update README.md --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index 57a4c8a6..cdec6d2b 100644 --- a/README.md +++ b/README.md @@ -19,7 +19,7 @@ Bastille Compared to Other Jail Managers | Import/Export | Yes | Yes | Yes | Yes | Yes | | Support Boot Order Priorities| Yes | Yes | No | Yes using `rcorder` | Yes | | Linux containers | Yes | Yes | No | No | Yes | -| Automation | Templates | Makejail, Initscripts, Images | Flavors, Images | Flavours | Plugins | +| Automation | Templates | Makejail, Initscripts, Images | Flavours, Images | Flavours | Plugins | | Package Management | Yes | No | No | No | No | | ZFS Support | Yes | Yes | Yes | No | No | | Volume management | No | Yes | Basic | No | Basic | From d13c943340742dc555c34806b930352741f48c25 Mon Sep 17 00:00:00 2001 From: Barry McCormick Date: Fri, 2 May 2025 22:01:26 -0700 Subject: [PATCH 15/26] Update README.md --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index cdec6d2b..39b37015 100644 --- a/README.md +++ b/README.md @@ -25,7 +25,7 @@ Bastille Compared to Other Jail Managers | Volume management | No | Yes | Basic | No | Basic | | VNET Support | Yes | Yes | Yes | No | Yes | | IPv6 Support| Yes | Yes | Yes | Yes | Yes | -| Dual Network Stack | Yes | ?? | Yes | No | No | +| Dual Network Stack | Yes | Yes | Yes | No | No | | Netgraph | Yes | Yes | No | No | No | Netgraph | | Dynamic Firewall | Yes | Yes | Yes | No | No| | Network Management | VLANS, Bridges | Virtual Networks, Bridges | Subnet, requires `sysutils/potnet` | No | No | From 1c1e726aa76927225b503fa43bde59733310af2c Mon Sep 17 00:00:00 2001 From: Barry McCormick Date: Fri, 2 May 2025 22:21:40 -0700 Subject: [PATCH 16/26] Update README.md --- README.md | 1 + 1 file changed, 1 insertion(+) diff --git a/README.md b/README.md index 39b37015..955b1d2e 100644 --- a/README.md +++ b/README.md @@ -20,6 +20,7 @@ Bastille Compared to Other Jail Managers | Support Boot Order Priorities| Yes | Yes | No | Yes using `rcorder` | Yes | | Linux containers | Yes | Yes | No | No | Yes | | Automation | Templates | Makejail, Initscripts, Images | Flavours, Images | Flavours | Plugins | +| Cloning | Yes | No | No | No | No | | Package Management | Yes | No | No | No | No | | ZFS Support | Yes | Yes | Yes | No | No | | Volume management | No | Yes | Basic | No | Basic | From effc285f2b98276ccf1a6585890fa5545ef3d98a Mon Sep 17 00:00:00 2001 From: Barry McCormick Date: Fri, 2 May 2025 22:38:00 -0700 Subject: [PATCH 17/26] Update README.md --- README.md | 1 + 1 file changed, 1 insertion(+) diff --git a/README.md b/README.md index 955b1d2e..c128258c 100644 --- a/README.md +++ b/README.md @@ -36,6 +36,7 @@ Bastille Compared to Other Jail Managers | Parallel startup | Yes | Yes (Healthcheckers, jails & NAT) | No | No | No | | Log Management | No | Yes | No | No | No | | Copy Files Between Jails | Yes | No | No | No | No | +| Automated Jail Migration Betwen Servers | No | No | No | No | No | | Top Support | Yes | No | No | No | No| | HTop Support | Yes | No | No | No | No | | X11 support | No | Yes | No | No | No | From e54500bcb93747401ef937b1f43d9083e77a9339 Mon Sep 17 00:00:00 2001 From: Barry McCormick Date: Fri, 2 May 2025 23:26:12 -0700 Subject: [PATCH 18/26] Update README.md --- README.md | 1 - 1 file changed, 1 deletion(-) diff --git a/README.md b/README.md index c128258c..cb530afb 100644 --- a/README.md +++ b/README.md @@ -29,7 +29,6 @@ Bastille Compared to Other Jail Managers | Dual Network Stack | Yes | Yes | Yes | No | No | | Netgraph | Yes | Yes | No | No | No | Netgraph | | Dynamic Firewall | Yes | Yes | Yes | No | No| -| Network Management | VLANS, Bridges | Virtual Networks, Bridges | Subnet, requires `sysutils/potnet` | No | No | | Dynamic DEVFS Ruleset Management | No | Yes | No | No | No | | Resource Control | Yes | Yes | CPU and Memory | No | Legacy Only | | CPU Sets | No | Yes | Yes | Yes | Yes | From f359088177ec2e5d065b01dc76cce4b3fa538ea9 Mon Sep 17 00:00:00 2001 From: tschettervictor <85497460+tschettervictor@users.noreply.github.com> Date: Sat, 3 May 2025 16:39:26 -0600 Subject: [PATCH 19/26] Update README.md --- README.md | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/README.md b/README.md index cb530afb..cce16877 100644 --- a/README.md +++ b/README.md @@ -12,26 +12,26 @@ Bastille Compared to Other Jail Managers | Feature | BastilleBSD | Appjail | pot | ezjail | iocage | | --- | --- | --- | --- | --- | --- | | OCI Compliant | No | Yes | No | No | No | -| Writen In | Bourne Shell | Bourne Shell, C | Bourne Shell | Bourne Shell | Bourne Shell, Rust | -| Dependencies | None | C | None | None | Rust| +| Writen In | Bourne Shell | Bourne Shell, C | Bourne Shell | Bourne Shell | Bourne Shell, Python | +| Dependencies | None | C | None | None | Python | | Jail Types | vnet, bridged vnet, thin, thick, empty, clone, Linux | clone, copy, tiny, thin, thick, empty, linux+debootstrap | thick | basejail | clone, basejail, template, empty, thick | | Jail dependency | Yes | Yes | Yes | No | Yes | | Import/Export | Yes | Yes | Yes | Yes | Yes | -| Support Boot Order Priorities| Yes | Yes | No | Yes using `rcorder` | Yes | +| Boot Order Priorities| Yes | Yes | No | Yes using `rcorder` | Yes | | Linux containers | Yes | Yes | No | No | Yes | | Automation | Templates | Makejail, Initscripts, Images | Flavours, Images | Flavours | Plugins | | Cloning | Yes | No | No | No | No | | Package Management | Yes | No | No | No | No | -| ZFS Support | Yes | Yes | Yes | No | No | +| ZFS Support | Yes | Yes | Yes | No | Yes | | Volume management | No | Yes | Basic | No | Basic | | VNET Support | Yes | Yes | Yes | No | Yes | | IPv6 Support| Yes | Yes | Yes | Yes | Yes | | Dual Network Stack | Yes | Yes | Yes | No | No | | Netgraph | Yes | Yes | No | No | No | Netgraph | -| Dynamic Firewall | Yes | Yes | Yes | No | No| +| Dynamic Firewall | Yes | Yes | Yes | No | No | | Dynamic DEVFS Ruleset Management | No | Yes | No | No | No | | Resource Control | Yes | Yes | CPU and Memory | No | Legacy Only | -| CPU Sets | No | Yes | Yes | Yes | Yes | +| CPU Sets | Yes | Yes | Yes | Yes | Yes | | Parallel startup | Yes | Yes (Healthcheckers, jails & NAT) | No | No | No | | Log Management | No | Yes | No | No | No | | Copy Files Between Jails | Yes | No | No | No | No | From e9671368726ae0c99bc1bcf686f7a06ac765b328 Mon Sep 17 00:00:00 2001 From: tschettervictor <85497460+tschettervictor@users.noreply.github.com> Date: Sat, 3 May 2025 16:49:36 -0600 Subject: [PATCH 20/26] Update README.md --- README.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/README.md b/README.md index cce16877..159a8375 100644 --- a/README.md +++ b/README.md @@ -12,8 +12,8 @@ Bastille Compared to Other Jail Managers | Feature | BastilleBSD | Appjail | pot | ezjail | iocage | | --- | --- | --- | --- | --- | --- | | OCI Compliant | No | Yes | No | No | No | -| Writen In | Bourne Shell | Bourne Shell, C | Bourne Shell | Bourne Shell | Bourne Shell, Python | -| Dependencies | None | C | None | None | Python | +| Writen In | Bourne Shell | Bourne Shell, C | Bourne Shell, Rust | Bourne Shell | Bourne Shell, Python | +| Dependencies | None | C | None | Rust | Python | | Jail Types | vnet, bridged vnet, thin, thick, empty, clone, Linux | clone, copy, tiny, thin, thick, empty, linux+debootstrap | thick | basejail | clone, basejail, template, empty, thick | | Jail dependency | Yes | Yes | Yes | No | Yes | | Import/Export | Yes | Yes | Yes | Yes | Yes | @@ -27,12 +27,12 @@ Bastille Compared to Other Jail Managers | VNET Support | Yes | Yes | Yes | No | Yes | | IPv6 Support| Yes | Yes | Yes | Yes | Yes | | Dual Network Stack | Yes | Yes | Yes | No | No | -| Netgraph | Yes | Yes | No | No | No | Netgraph | +| Netgraph | Yes | Yes | No | No | No | | Dynamic Firewall | Yes | Yes | Yes | No | No | | Dynamic DEVFS Ruleset Management | No | Yes | No | No | No | | Resource Control | Yes | Yes | CPU and Memory | No | Legacy Only | | CPU Sets | Yes | Yes | Yes | Yes | Yes | -| Parallel startup | Yes | Yes (Healthcheckers, jails & NAT) | No | No | No | +| Parallel Startup | Yes | Yes (Healthcheckers, jails & NAT) | No | No | No | | Log Management | No | Yes | No | No | No | | Copy Files Between Jails | Yes | No | No | No | No | | Automated Jail Migration Betwen Servers | No | No | No | No | No | From 4d72a390001dcc912b09cd31d89efff56023e71c Mon Sep 17 00:00:00 2001 From: tschettervictor <85497460+tschettervictor@users.noreply.github.com> Date: Sat, 3 May 2025 16:58:49 -0600 Subject: [PATCH 21/26] Update README.md --- README.md | 10 ++++------ 1 file changed, 4 insertions(+), 6 deletions(-) diff --git a/README.md b/README.md index 159a8375..bf8673ba 100644 --- a/README.md +++ b/README.md @@ -23,7 +23,7 @@ Bastille Compared to Other Jail Managers | Cloning | Yes | No | No | No | No | | Package Management | Yes | No | No | No | No | | ZFS Support | Yes | Yes | Yes | No | Yes | -| Volume management | No | Yes | Basic | No | Basic | +| Volume management | Yes (mount and umount) | Yes | Basic | No | Basic | | VNET Support | Yes | Yes | Yes | No | Yes | | IPv6 Support| Yes | Yes | Yes | Yes | Yes | | Dual Network Stack | Yes | Yes | Yes | No | No | @@ -32,13 +32,11 @@ Bastille Compared to Other Jail Managers | Dynamic DEVFS Ruleset Management | No | Yes | No | No | No | | Resource Control | Yes | Yes | CPU and Memory | No | Legacy Only | | CPU Sets | Yes | Yes | Yes | Yes | Yes | -| Parallel Startup | Yes | Yes (Healthcheckers, jails & NAT) | No | No | No | +| Parallel Startup | No | Yes (Healthcheckers, jails & NAT) | No | No | No | | Log Management | No | Yes | No | No | No | | Copy Files Between Jails | Yes | No | No | No | No | -| Automated Jail Migration Betwen Servers | No | No | No | No | No | -| Top Support | Yes | No | No | No | No| -| HTop Support | Yes | No | No | No | No | -| X11 support | No | Yes | No | No | No | +| Automated Jail Migration Between Servers | No | No | No | No | No | +| Top/Htop Support | Yes | No | No | No | No| Installation ============ From 007dacce8ea53386d43d748207e53c6d4fb5b841 Mon Sep 17 00:00:00 2001 From: tschettervictor <85497460+tschettervictor@users.noreply.github.com> Date: Sun, 4 May 2025 07:49:36 -0600 Subject: [PATCH 22/26] Update README.md --- README.md | 1 + 1 file changed, 1 insertion(+) diff --git a/README.md b/README.md index bf8673ba..e480f8cf 100644 --- a/README.md +++ b/README.md @@ -33,6 +33,7 @@ Bastille Compared to Other Jail Managers | Resource Control | Yes | Yes | CPU and Memory | No | Legacy Only | | CPU Sets | Yes | Yes | Yes | Yes | Yes | | Parallel Startup | No | Yes (Healthcheckers, jails & NAT) | No | No | No | +| Multi-Target Commands | Yes | No | No | No | No | | Log Management | No | Yes | No | No | No | | Copy Files Between Jails | Yes | No | No | No | No | | Automated Jail Migration Between Servers | No | No | No | No | No | From 9c539f42ee82ffbb20db8f9585dd8c68f597d533 Mon Sep 17 00:00:00 2001 From: tschettervictor <85497460+tschettervictor@users.noreply.github.com> Date: Sun, 4 May 2025 07:50:09 -0600 Subject: [PATCH 23/26] Update README.md --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index e480f8cf..19aaaa7d 100644 --- a/README.md +++ b/README.md @@ -32,7 +32,7 @@ Bastille Compared to Other Jail Managers | Dynamic DEVFS Ruleset Management | No | Yes | No | No | No | | Resource Control | Yes | Yes | CPU and Memory | No | Legacy Only | | CPU Sets | Yes | Yes | Yes | Yes | Yes | -| Parallel Startup | No | Yes (Healthcheckers, jails & NAT) | No | No | No | +| Parallel Startup | Yes | Yes (Healthcheckers, jails & NAT) | No | No | No | | Multi-Target Commands | Yes | No | No | No | No | | Log Management | No | Yes | No | No | No | | Copy Files Between Jails | Yes | No | No | No | No | From 76d5dfd9efc1f772bf952a5a0d1fb75e9f25f4cb Mon Sep 17 00:00:00 2001 From: Barry McCormick Date: Wed, 7 May 2025 08:17:11 -0700 Subject: [PATCH 24/26] Update README.md --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index 19aaaa7d..0829394f 100644 --- a/README.md +++ b/README.md @@ -36,7 +36,7 @@ Bastille Compared to Other Jail Managers | Multi-Target Commands | Yes | No | No | No | No | | Log Management | No | Yes | No | No | No | | Copy Files Between Jails | Yes | No | No | No | No | -| Automated Jail Migration Between Servers | No | No | No | No | No | +| Automated Jail Migration Between Servers | Yes | No | No | No | No | | Top/Htop Support | Yes | No | No | No | No| Installation From 5025b29aee06194bf52d4b6f5b26a990f2d42c8a Mon Sep 17 00:00:00 2001 From: tschettervictor <85497460+tschettervictor@users.noreply.github.com> Date: Wed, 7 May 2025 11:00:31 -0600 Subject: [PATCH 25/26] docs: Add comparing --- README.md | 10 ++++---- docs/chapters/comparing.rst | 48 +++++++++++++++++++++++++++++++++++++ docs/index.rst | 1 + 3 files changed, 54 insertions(+), 5 deletions(-) create mode 100644 docs/chapters/comparing.rst diff --git a/README.md b/README.md index 0829394f..0c77d66f 100644 --- a/README.md +++ b/README.md @@ -13,28 +13,28 @@ Bastille Compared to Other Jail Managers | --- | --- | --- | --- | --- | --- | | OCI Compliant | No | Yes | No | No | No | | Writen In | Bourne Shell | Bourne Shell, C | Bourne Shell, Rust | Bourne Shell | Bourne Shell, Python | -| Dependencies | None | C | None | Rust | Python | +| Dependencies | None | C | Rust | None | Python | | Jail Types | vnet, bridged vnet, thin, thick, empty, clone, Linux | clone, copy, tiny, thin, thick, empty, linux+debootstrap | thick | basejail | clone, basejail, template, empty, thick | | Jail dependency | Yes | Yes | Yes | No | Yes | | Import/Export | Yes | Yes | Yes | Yes | Yes | | Boot Order Priorities| Yes | Yes | No | Yes using `rcorder` | Yes | | Linux containers | Yes | Yes | No | No | Yes | | Automation | Templates | Makejail, Initscripts, Images | Flavours, Images | Flavours | Plugins | -| Cloning | Yes | No | No | No | No | +| Cloning | Yes | No | No | No | No | | Package Management | Yes | No | No | No | No | | ZFS Support | Yes | Yes | Yes | No | Yes | -| Volume management | Yes (mount and umount) | Yes | Basic | No | Basic | +| Volume management | Basic | Yes | Basic | No | Basic | | VNET Support | Yes | Yes | Yes | No | Yes | | IPv6 Support| Yes | Yes | Yes | Yes | Yes | | Dual Network Stack | Yes | Yes | Yes | No | No | -| Netgraph | Yes | Yes | No | No | No | +| Netgraph | Yes | Yes | No | No | No | | Dynamic Firewall | Yes | Yes | Yes | No | No | | Dynamic DEVFS Ruleset Management | No | Yes | No | No | No | | Resource Control | Yes | Yes | CPU and Memory | No | Legacy Only | | CPU Sets | Yes | Yes | Yes | Yes | Yes | | Parallel Startup | Yes | Yes (Healthcheckers, jails & NAT) | No | No | No | | Multi-Target Commands | Yes | No | No | No | No | -| Log Management | No | Yes | No | No | No | +| Log Management | Basic (console logs) | Yes | No | No | No | | Copy Files Between Jails | Yes | No | No | No | No | | Automated Jail Migration Between Servers | Yes | No | No | No | No | | Top/Htop Support | Yes | No | No | No | No| diff --git a/docs/chapters/comparing.rst b/docs/chapters/comparing.rst new file mode 100644 index 00000000..c4283bbe --- /dev/null +++ b/docs/chapters/comparing.rst @@ -0,0 +1,48 @@ +Comparing +========= + +Most jail managers have a table showing what they and their competitors are +capable of. While this is a good idea, the maintainers and developers of each +jail manger do not regulary visit each others projects to update these tables. + +Below is a table of what we feel is most important for a jail manager, as well +as a list of popular managers and their status on each option. + +| Feature | BastilleBSD | Appjail | pot | ezjail | iocage | +| --- | --- | --- | --- | --- | --- | +| OCI Compliant | No | Yes | No | No | No | +| Writen In | Bourne Shell | Bourne Shell, C | Bourne Shell, Rust | Bourne Shell | Bourne Shell, Python | +| Dependencies | None | C | None | Rust | Python | +| Jail Types | vnet, bridged vnet, thin, thick, empty, clone, Linux | clone, copy, tiny, thin, thick, empty, linux+debootstrap | thick | basejail | clone, basejail, template, empty, thick | +| Jail dependency | Yes | Yes | Yes | No | Yes | +| Import/Export | Yes | Yes | Yes | Yes | Yes | +| Boot Order Priorities | Yes | Yes | No | Yes using `rcorder` | Yes | +| Linux Jails | Yes | Yes | No | No | Yes | +| Automation | Templates | Makejail, Initscripts, Images | Flavours, Images | Flavours | Plugins | +| Cloning | Yes | No | No | No | No | +| Package Management | Yes | No | No | No | No | +| ZFS Support | Yes | Yes | Yes | No | Yes | +| Volume management | Basic | Yes | Basic | No | Basic | +| VNET Support | Yes | Yes | Yes | No | Yes | +| IPv6 Support| Yes | Yes | Yes | Yes | Yes | +| Dual Network Stack | Yes | Yes | Yes | No | No | +| Netgraph | Yes | Yes | No | No | No | +| Dynamic Firewall | Yes | Yes | Yes | No | No | +| Dynamic DEVFS Ruleset Management | No | Yes | No | No | No | +| Resource Control | Yes | Yes | CPU and Memory | No | Legacy Only | +| CPU Sets | Yes | Yes | Yes | Yes | Yes | +| Parallel Startup | Yes | Yes (Healthcheckers, jails & NAT) | No | No | No | +| Multi-Target Commands | Yes | No | No | No | No | +| Log Management | No | Yes | No | No | No | +| Copy Files Between Jails | Yes | No | No | No | No | +| Automated Jail Migration Between Servers | Yes | No | No | No | No | +| Top/Htop Support | Yes | No | No | No | No| + +We do our best to stay true and honest as to what other jail managers do and don't do. +If you see an error, you can open a PR on the BastillBSD github repo. + +We also realize that each jail manger does certain things better than other, and perhaps +certain things worse. Some do this, others do that. They are all different, and each user +should choose the one they want to use based on their needs. + +Thanks for using BastilleBSD! \ No newline at end of file diff --git a/docs/index.rst b/docs/index.rst index f7db9ff6..52383dd8 100644 --- a/docs/index.rst +++ b/docs/index.rst @@ -18,6 +18,7 @@ https://docs.bastillebsd.org. chapters/startup-configuration chapters/networking chapters/usage + chapters/comparing chapters/upgrading chapters/centralized-assets chapters/subcommands/index From fe40466a0d7ca10cc204215c65e77b1c273df078 Mon Sep 17 00:00:00 2001 From: tschettervictor <85497460+tschettervictor@users.noreply.github.com> Date: Wed, 7 May 2025 11:49:39 -0600 Subject: [PATCH 26/26] docs: Fix table for rst --- docs/chapters/comparing.rst | 134 ++++++++++++++++++++++++++++-------- 1 file changed, 104 insertions(+), 30 deletions(-) diff --git a/docs/chapters/comparing.rst b/docs/chapters/comparing.rst index c4283bbe..18972389 100644 --- a/docs/chapters/comparing.rst +++ b/docs/chapters/comparing.rst @@ -8,35 +8,109 @@ jail manger do not regulary visit each others projects to update these tables. Below is a table of what we feel is most important for a jail manager, as well as a list of popular managers and their status on each option. -| Feature | BastilleBSD | Appjail | pot | ezjail | iocage | -| --- | --- | --- | --- | --- | --- | -| OCI Compliant | No | Yes | No | No | No | -| Writen In | Bourne Shell | Bourne Shell, C | Bourne Shell, Rust | Bourne Shell | Bourne Shell, Python | -| Dependencies | None | C | None | Rust | Python | -| Jail Types | vnet, bridged vnet, thin, thick, empty, clone, Linux | clone, copy, tiny, thin, thick, empty, linux+debootstrap | thick | basejail | clone, basejail, template, empty, thick | -| Jail dependency | Yes | Yes | Yes | No | Yes | -| Import/Export | Yes | Yes | Yes | Yes | Yes | -| Boot Order Priorities | Yes | Yes | No | Yes using `rcorder` | Yes | -| Linux Jails | Yes | Yes | No | No | Yes | -| Automation | Templates | Makejail, Initscripts, Images | Flavours, Images | Flavours | Plugins | -| Cloning | Yes | No | No | No | No | -| Package Management | Yes | No | No | No | No | -| ZFS Support | Yes | Yes | Yes | No | Yes | -| Volume management | Basic | Yes | Basic | No | Basic | -| VNET Support | Yes | Yes | Yes | No | Yes | -| IPv6 Support| Yes | Yes | Yes | Yes | Yes | -| Dual Network Stack | Yes | Yes | Yes | No | No | -| Netgraph | Yes | Yes | No | No | No | -| Dynamic Firewall | Yes | Yes | Yes | No | No | -| Dynamic DEVFS Ruleset Management | No | Yes | No | No | No | -| Resource Control | Yes | Yes | CPU and Memory | No | Legacy Only | -| CPU Sets | Yes | Yes | Yes | Yes | Yes | -| Parallel Startup | Yes | Yes (Healthcheckers, jails & NAT) | No | No | No | -| Multi-Target Commands | Yes | No | No | No | No | -| Log Management | No | Yes | No | No | No | -| Copy Files Between Jails | Yes | No | No | No | No | -| Automated Jail Migration Between Servers | Yes | No | No | No | No | -| Top/Htop Support | Yes | No | No | No | No| ++--------------+-------------+--------------+-----------+-----------+-----------+ +| Feature | BastilleBSD | Appjail | pot | ezjail | iocage | ++==============+=============+==============+===========+===========+===========+ +| OCI | No | Yes | No | No | No | +| Compliant | | | | | | ++--------------+-------------+--------------+-----------+-----------+-----------+ +| Writen In | Bourne | Bourne | Bourne | Bourne | Bourne | +| | Shell | Shell, C | Shell, | Shell | Shell, | +| | | | Rust | | Python | ++--------------+-------------+--------------+-----------+-----------+-----------+ +| Dep | None | C | Rust | None | Python | +| endencies | | | | | | ++--------------+-------------+--------------+-----------+-----------+-----------+ +| Jail | vnet, | clone, | thick | basejail | clone, | +| Types | bridged | copy, | | | basejail, | +| | vnet, | tiny, | | | template, | +| | thin, | thin, | | | empty, | +| | thick, | thick, | | | thick | +| | empty, | empty, | | | | +| | clone, | linux+de | | | | +| | Linux | bootstrap | | | | ++--------------+-------------+--------------+-----------+-----------+-----------+ +| Jail | Yes | Yes | Yes | No | Yes | +| Dependency | | | | | | ++--------------+-------------+--------------+-----------+-----------+-----------+ +| Impo | Yes | Yes | Yes | Yes | Yes | +| rt/Export | | | | | | ++--------------+-------------+--------------+-----------+-----------+-----------+ +| Boot | Yes | Yes | No | Yes using | Yes | +| Order | | | | 'rcorder' | | +| Priorities | | | | | | ++--------------+-------------+--------------+-----------+-----------+-----------+ +| Linux | Yes | Yes | No | No | Yes | +| c | | | | | | +| ontainers | | | | | | ++--------------+-------------+--------------+-----------+-----------+-----------+ +| Automation | Templates | Makejail, | Flavours, | Flavours | Plugins | +| | | Initscripts, | Images | | | +| | | Images | | | | ++--------------+-------------+--------------+-----------+-----------+-----------+ +| Cloning | Yes | No | No | No | No | ++--------------+-------------+--------------+-----------+-----------+-----------+ +| Package | Yes | No | No | No | No | +| Management | | | | | | ++--------------+-------------+--------------+-----------+-----------+-----------+ +| ZFS | Yes | Yes | Yes | No | Yes | +| Support | | | | | | ++--------------+-------------+--------------+-----------+-----------+-----------+ +| Volume | Basic | Yes | Basic | No | Basic | +| Management | | | | | | ++--------------+-------------+--------------+-----------+-----------+-----------+ +| VNET | Yes | Yes | Yes | No | Yes | +| Support | | | | | | ++--------------+-------------+--------------+-----------+-----------+-----------+ +| IPv6 | Yes | Yes | Yes | Yes | Yes | +| Support | | | | | | ++--------------+-------------+--------------+-----------+-----------+-----------+ +| Dual | Yes | Yes | Yes | No | No | +| Network | | | | | | +| Stack | | | | | | ++--------------+-------------+--------------+-----------+-----------+-----------+ +| Netgraph | Yes | Yes | No | No | No | ++--------------+-------------+--------------+-----------+-----------+-----------+ +| Dynamic | Yes | Yes | Yes | No | No | +| Firewall | | | | | | ++--------------+-------------+--------------+-----------+-----------+-----------+ +| Dynamic | No | Yes | No | No | No | +| DEVFS | | | | | | +| Ruleset | | | | | | +| Management | | | | | | ++--------------+-------------+--------------+-----------+-----------+-----------+ +| Resource | Yes | Yes | CPU and | No | Legacy | +| Control | | | Memory | | Only | ++--------------+-------------+--------------+-----------+-----------+-----------+ +| CPU Sets | Yes | Yes | Yes | Yes | Yes | ++--------------+-------------+--------------+-----------+-----------+-----------+ +| Parallel | Yes | Yes | No | No | No | +| Startup | | (Health | | | | +| | | checkers, | | | | +| | | jails & | | | | +| | | NAT) | | | | ++--------------+-------------+--------------+-----------+-----------+-----------+ +| Multi-target | Yes | No | No | No | No | +| Commands | | | | | | ++--------------+-------------+--------------+-----------+-----------+-----------+ +| Log | Basic | Yes | No | No | No | +| Management | (console | | | | | +| | logs) | | | | | ++--------------+-------------+--------------+-----------+-----------+-----------+ +| Copy | Yes | No | No | No | No | +| Files | | | | | | +| Between | | | | | | +| Jails | | | | | | ++--------------+-------------+--------------+-----------+-----------+-----------+ +| Automated | Yes | No | No | No | No | +| Jail | | | | | | +| Migration | | | | | | +| Between | | | | | | +| Servers | | | | | | ++--------------+-------------+--------------+-----------+-----------+-----------+ +| Top/Htop | Yes | No | No | No | No | +| Support | | | | | | ++--------------+-------------+--------------+-----------+-----------+-----------+ We do our best to stay true and honest as to what other jail managers do and don't do. If you see an error, you can open a PR on the BastillBSD github repo. @@ -45,4 +119,4 @@ We also realize that each jail manger does certain things better than other, and certain things worse. Some do this, others do that. They are all different, and each user should choose the one they want to use based on their needs. -Thanks for using BastilleBSD! \ No newline at end of file +Thanks for using BastilleBSD!