A desk­top envi­ron­ment in a jail.

Yeah! Final­ly I got time to fin­ish my work to put a desk­top envi­ron­ment (in this case GNOME) into a jail. At least I have a proof of con­cept (I write this with fire­fox run­ning in my “desk­jail”). No, I don’t do this for addi­tion­al secu­ri­ty (there’s more secu­ri­ty than in a non-jailed set­up, but less secu­ri­ty than in an ordi­nary jail, as you have to allow access to a lot more devices than in an ordi­nary jail), I do this for addi­tion­al flex­i­bil­i­ty: Mov­ing my desk­top is now only the install of FreeB­SD on a new machine and rsync­ing the jail over to it. As the machine will also be a host of sev­er­al jails where I have some com­mon users with the same UID in each jail, I don’t pol­lute the jail-host with the desk­top stuff and I have every­thing nice­ly sep­a­rat­ed.

With­out a ker­nel patch and good devfs rules you will not get Xorg up and run­ning in a jail (at least I did­n’t man­aged to let it rec­og­nize my graph­ic card with­out the ker­nel patch). Now I have to beef up the patch a lit­tle bit and ask for review (it weak­ens up the secu­ri­ty a lit­tle bit like the sysctl security.jail.sysvipc_allowed=1 or security.jail.allow_raw_sockets=1).

But first I have to fin­ish the move of all my ser­vices I use at home to the jail-host now.

Send to Kin­dle

I fore­see nice improve­ments in the soundsys­tem

Ariffs changes two months ago to reduce the laten­cy in the soundsys­tem also pre­pared the way for mul­ti­chan­nel sup­port and Yuriy added mul­ti­chan­nel record­ing to the emu10kx dri­ver (there are some bugs ATM and it is only a proof of con­cept to play around with it until we get real mul­ti­chan­nel sup­port in the gener­ic sound code). Ryan tries to get some time (let’s cross fin­gers!) to con­vert a dri­ver (prob­a­bly the emu10kx dri­ver) to use the new mix­er infra­struc­ture before he has to con­cen­trate on his stud­ies again.

This looks like we could get some very nice stuff this year.

Send to Kin­dle

Progress in the lin­ux­u­la­tor

On of the major show­stop­per bugs in the lin­ux 2.6 emu­la­tion is that acrore­ad does not work. Now we have patch­es (proof of con­cept by Intron, refined patch by Kib) for it. I did­n’t had time to test it yet (mind you, every­one else is not able to run acrore­ad with 2.6, I’m able to run it at least with some files or no file at all), but I want to do an exten­sive test (I know sev­er­al ways of killing it with 2.6).

If every­thing goes well and no oth­er show­stop­per bug appears, we may be able to request more exten­sive test­ing of the 2.6 emu­la­tion, at least on i386. First this should be done by ask­ing peo­ple to switch, and maybe after a week by switch­ing the default emu­la­tion to 2.6 in -cur­rent (at least for a while).

This is spe­cial­ly impor­tant as the Fedo­ra Lega­cy project announced that they will aban­don sup­port for FC4. FC5+ is not able to run on a 2.4 ker­nel.

And while I’m at it: I sub­mit­ted the sta­tus report for the lin­ux­u­la­tor. It con­tains some nice sta­tis­tic about the num­ber of fixed bugs (com­par­ing 6.2 and ‑cur­rent). No, I will not tell you in advance, you have to wait some days until the report shows up. 😛

Send to Kin­dle