bastille VS poudriere

> FreeBSD jails don't have a one-command way to install a preconfigured jail for a specific service

FreeBSD does have that tool, its BastilleBSD: https://bastillebsd.org/

For example, this is the Bastillefile for running consul: https://gitlab.com/bastillebsd-templates/consul/-/blob/maste...

A couple of tools which are both working on jail management & packaging

- bastille https://bastillebsd.org

https://github.com/BastilleBSD/bastille

Bastille also has a sister project 'rocinante' which allows you to use Bastille templates on

Not exactly what you’re looking for, but https://bastillebsd.org is maybe a step towards it?

Obviously, not as popular - but having used both - I much prefer jails myself. It seems that they can run on opnsense too: https://eerielinux.wordpress.com/2017/07/15/building-a-bsd-home-router-pt-8-zfs-and-jails/ - though instead of iocage referenced here - I'd suggest using: https://bastillebsd.org/

Want to get deeper into Jails using Bastille enhancement? You can follow this latest Udemy learning platform course: FreeBSD 13.x — Mastering JAILS. You are welcome to take this adventure.

Take a look at Bastille, it’s a nice way to package/deploy jails somewhat like docker and I’m migrating my older iocage jails to this setup

poudriere is a powerful port/package build and test system with a focus on package production and bulk building for FreeBSD. This easy-to-use, parallelized solution relies solely on the base system and can build the entire portstree. Supports building packages for different FreeBSD versions, and ensures compatibility with any package management tool by organizing packages in an identical layout to official mirrors. qci considers it a favorite tool.

poudriere(8) command synonyms: jail, jails … · Issue #1053 · freebsd/poudriere

95% of the time the only thing you have to do is install a package and enable the service. So what's the value in having a centralized repository of pre-configured images? Sure, if you want to roll out an image to thousands of servers - make an image using poudriere image](https://github.com/freebsd/poudriere/wiki/poudriere-image.8-devel) and send them out. It's not really any easier - and is definitely not better - to use an image that someone else made.

> pkg is an amazing system that beats dpkg or rpm

What's your reasoning for this statement? I find poudriere[1] handy for compiling one's own packages from ports configured to fit one's goals, but I see nothing outstanding in plain pkg.

It has issues when there's an IPv6 address up (even link-local) but no egress v6 routing. It would hang and wait for a timeout when an IPv6 address is selected from resolved addresses. After a timeout - pkg connects to v4 endpoint but if there's several packages to be downloaded, it can fall back to trying to connect to v6 with the next package.

On the other hand, I've recently had Ubuntu 22.04 register Python-related packages which were not successfully installed, resulting in all dpkg/apt/apt-get commands failing due to py3clean script throwing trackbacks, until /var/lib/dpkg/status was edited and these packages were in fact installed and then removed.

[1] https://github.com/freebsd/poudriere/wiki

poudriere-devel has a bug where it tries to delete the incorrect zpool when building a zfs image fails. There's a pull request that addresses it, but I have no idea when that will get merged. I also don't know how long it will be before there's a new poudriere release after it gets merged. The current ports version was last updated in 2022-09, so it could be months.

I use this with Poudriere to speed up my FreeBSD pkg host building multiple Sets of ports https://github.com/freebsd/poudriere/wiki/ccache

Also jails is a terrific concept with poudriere and bastille

https://github.com/freebsd/poudriere/wiki/ and more.