bastille VS iocage

> FreeBSD jails don't have a one-command way to install a preconfigured jail for a specific service

FreeBSD does have that tool, its BastilleBSD: https://bastillebsd.org/

For example, this is the Bastillefile for running consul: https://gitlab.com/bastillebsd-templates/consul/-/blob/maste...

A couple of tools which are both working on jail management & packaging

- bastille https://bastillebsd.org

https://github.com/BastilleBSD/bastille

Bastille also has a sister project 'rocinante' which allows you to use Bastille templates on

Not exactly what you’re looking for, but https://bastillebsd.org is maybe a step towards it?

Obviously, not as popular - but having used both - I much prefer jails myself. It seems that they can run on opnsense too: https://eerielinux.wordpress.com/2017/07/15/building-a-bsd-home-router-pt-8-zfs-and-jails/ - though instead of iocage referenced here - I'd suggest using: https://bastillebsd.org/

Want to get deeper into Jails using Bastille enhancement? You can follow this latest Udemy learning platform course: FreeBSD 13.x — Mastering JAILS. You are welcome to take this adventure.

Take a look at Bastille, it’s a nice way to package/deploy jails somewhat like docker and I’m migrating my older iocage jails to this setup

Pains me immensely to say this, but that's the direction things have been moving in for a while now. The list of services I run on FreeBSD versus Linux hosts is steadily growing smaller. iocage hasn't had any changes in a year and a half and I'm not convinced iXsystems will still be developing CORE in the five-to-ten year timeframe.

I am was considering writing a PR for iocage but looking through the github (https://github.com/iocage/iocage) I see there have been no commits in a year and A PR for a decent features has sat waiting for review for over a year and a half. There are also open multiple PR's for bug fixes which are failing CI, with multiple contributors saying it's the CI tests that are broken, not their code.

Install https://github.com/iocage/iocage, it will make your life a lot easier

While trying to move jails between servers using iocage export and import, I found that iocage 1.2 (the currently packaged version) was reading the entire imported file into RAM. For a large jail, this is a clear problem. I found that there was a bug filed for it - and even a fix! - but a version containing the fix had not been released.

That looks like a solid guide. I use iocage to manage my jails. It takes care of a lot of details. Certainly more user-friendly for the first time getting jails set up.