Commits on Nov 19, 2024

1. ioc_start.py: allow 'none' bridge in interfaces …

   Iocage currently expects interfaces to be specified in the nic:bridge
   format, where bridge cannot be none. This results in iocage always
   creating a bridge to which VNET jail epair interfaces are added as
   members.
   
   In a scenario where the user wants jails to be isolated on the data-link
   layer (OSI layer 2 / Ethernet) and use the host as a router, this bridge
   is unnecessery. It can also result in illegitimate cross-jail traffic
   being allowed, since pf filtering on bridge interfaces is disabled by
   default on FreeBSD systems (net.link.bridge.pfil_bridge=0).
   
   Closes freebsd#44

   

   Defenso-QTH committed Nov 19, 2024
   Configuration menu

   • View commit details
   • Copy full SHA for d48f123
   • Browse repository at this point

   Copy the full SHA

   d48f123 View commit details

   Browse the repository at this point in the history